Re: Fixing file system privileges
On Sat, May 11, 2002 at 08:16:28AM +0200, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? fishbowl:~ dpkg --get-selections | grep purge fishbowl:~ $ dpkg --get-selections * |grep purge |wc 9237 18474 207308 FYI Javi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
Hi, I ended up with an awk one-liner (like those proposed here). I also had to run MAKEDEV to fix device permissions, and then fix several files manually (e.g. sshd will not start with keys being world readable). I did an 'ls -lR /' on my home machine, then wrote a script (in rexx, sorry, I'm not familiar with shell script and perl) to adjust access rights based on the flags in the ls output. That should have got 99% of files right. I also have a backup of /etc on tape. Thanks for the help, Kofa Homepage at http://emil.alarmix.org/kofa/ For PGP public key: send mail with the subject PGP Public Key Request or finger [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Mon, May 13, 2002 at 12:24:32PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: $ dpkg --get-selections * |grep purge |wc 9237 18474 207308 llama:~$ dpkg --get-selections | wc 5881176 12713 llama:~$ dpkg --get-selections * | wc 5854 11708 124423 Just stick with --get-selections. Let's please stop talking about this. This thread is getting less and less relevant to anything. -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Mon, May 13, 2002 at 04:22:19PM +0200, Kovacs Istvan wrote: Hi, I ended up with an awk one-liner (like those proposed here). I also had to run MAKEDEV to fix device permissions, and then fix several files manually (e.g. sshd will not start with keys being world readable). I did an 'ls -lR /' on my home machine, then wrote a script (in rexx, sorry, I'm not familiar with shell script and perl) to adjust access rights based on the flags in the ls output. That should have got 99% of files right. I also have a backup of /etc on tape. Thanks for the help, Kofa There will probably be a lot of other files that are still world readable but shouldn't be, but nothing complains about them. log files, /etc/shadow, mail spools, and crontabs are four things that I can think of that should be private. I don't know if reinstalling packages fixes these or not, but I would guess that it would not affect /etc/shadow. I would try to copy the permissions on everything from another Debian system. I don't have any suggestions for a good way to do that. -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Sat, May 11, 2002 at 08:16:28AM +0200, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? fishbowl:~ dpkg --get-selections | grep purge fishbowl:~ $ dpkg --get-selections * |grep purge |wc 9237 18474 207308 FYI Javi -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
Hi, I ended up with an awk one-liner (like those proposed here). I also had to run MAKEDEV to fix device permissions, and then fix several files manually (e.g. sshd will not start with keys being world readable). I did an 'ls -lR /' on my home machine, then wrote a script (in rexx, sorry, I'm not familiar with shell script and perl) to adjust access rights based on the flags in the ls output. That should have got 99% of files right. I also have a backup of /etc on tape. Thanks for the help, Kofa Homepage at http://emil.alarmix.org/kofa/ For PGP public key: send mail with the subject PGP Public Key Request or finger [EMAIL PROTECTED] -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Mon, May 13, 2002 at 12:24:32PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: $ dpkg --get-selections * |grep purge |wc 9237 18474 207308 llama:~$ dpkg --get-selections | wc 5881176 12713 llama:~$ dpkg --get-selections * | wc 5854 11708 124423 Just stick with --get-selections. Let's please stop talking about this. This thread is getting less and less relevant to anything. -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Mon, May 13, 2002 at 04:22:19PM +0200, Kovacs Istvan wrote: Hi, I ended up with an awk one-liner (like those proposed here). I also had to run MAKEDEV to fix device permissions, and then fix several files manually (e.g. sshd will not start with keys being world readable). I did an 'ls -lR /' on my home machine, then wrote a script (in rexx, sorry, I'm not familiar with shell script and perl) to adjust access rights based on the flags in the ls output. That should have got 99% of files right. I also have a backup of /etc on tape. Thanks for the help, Kofa There will probably be a lot of other files that are still world readable but shouldn't be, but nothing complains about them. log files, /etc/shadow, mail spools, and crontabs are four things that I can think of that should be private. I don't know if reinstalling packages fixes these or not, but I would guess that it would not affect /etc/shadow. I would try to copy the permissions on everything from another Debian system. I don't have any suggestions for a good way to do that. -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Fri, May 10, 2002 at 08:55:40PM -0300, Peter Cordes wrote: dpkg --get-selections | grep '[^A-Za-z]install$' | cut -f1 should work. In the interests of saving you some typing in the future, try grep -w install :-) Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Sat, May 11, 2002 at 08:16:28AM +0200, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? Probably a long time. I don't know when or why dpkg updates it's status thing for all packages, even ones that aren't installed, but it does. I guess it puts in purge when you purge a packge. fishbowl:~ dpkg --get-selections | grep purge fishbowl:~ llama:~$ dpkg --get-selections | grep purge xserver-vga16 purge -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Fri, May 10, 2002 at 08:55:40PM -0300, Peter Cordes wrote: dpkg --get-selections | grep '[^A-Za-z]install$' | cut -f1 should work. In the interests of saving you some typing in the future, try grep -w install :-) Andrew -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Sat, May 11, 2002 at 08:16:28AM +0200, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? Probably a long time. I don't know when or why dpkg updates it's status thing for all packages, even ones that aren't installed, but it does. I guess it puts in purge when you purge a packge. fishbowl:~ dpkg --get-selections | grep purge fishbowl:~ llama:~$ dpkg --get-selections | grep purge xserver-vga16 purge -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
Peter Cordes [EMAIL PROTECTED] wrote:
dpkg --get-selections | grep '[^A-Za-z]install$' | cut -f1
should work.
This time for sure :)
How about matching what you really want instead of guessing with grep:
The second field is exactly install.
And how about doing it all with one command invocation (Don't waste
PIDs!):
dpkg --get-selections | awk '$2 == install { print $1 }'
And I don't even know awk. ;)
--
Sam Eddie Couter | mailto:[EMAIL PROTECTED]
Debian Developer| mailto:[EMAIL PROTECTED]
| jabber:[EMAIL PROTECTED]
OpenPGP fingerprint: A46B 9BB5 3148 7BEA 1F05 5BD5 8530 03AE DE89 C75C
pgp4Ccr397wFx.pgp
Description: PGP signature
Re: Fixing file system privileges
also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? fishbowl:~ dpkg --get-selections | grep purge fishbowl:~ -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^.*|tr * mailto:; net@madduck may your future be limited only by your dreams. -- christa mcauliffe msg06681/pgp0.pgp Description: PGP signature
Re: Fixing file system privileges
On Sat, 2002-05-11 at 01:16, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? Since the last time you hit _ in dselect maybe. dstanawa@ciderbox:~$ dpkg --get-selections |grep purge aptitudepurge dstanawa@ciderbox:~$ sudo dpkg --purge aptitude (Reading database ... 98668 files and directories currently installed.) Removing aptitude ... Purging configuration files for aptitude ... dstanawa@ciderbox:~$ dpkg --get-selections |grep purge dstanawa@ciderbox:~$ So it is purges that are pending (Hence: dpkg --pending --purge which is run by dselect). -- David Stanaway signature.asc Description: This is a digitally signed message part
Re: Fixing file system privileges
also sprach David Stanaway [EMAIL PROTECTED] [2002.05.11.0904 +0200]: Since the last time you hit _ in dselect maybe. dstanawa@ciderbox:~$ dpkg --get-selections |grep purge aptitude purge dstanawa@ciderbox:~$ sudo dpkg --purge aptitude (Reading database ... 98668 files and directories currently installed.) Removing aptitude ... Purging configuration files for aptitude ... dstanawa@ciderbox:~$ dpkg --get-selections |grep purge dstanawa@ciderbox:~$ So it is purges that are pending (Hence: dpkg --pending --purge which is run by dselect). yeah, that makes sense. i never have non-purged software around. my bad. in any case, my suggestion, to grep -v deinstall would cope with that just fine ;) -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^.*|tr * mailto:; net@madduck ever stop to think, and forget to start again? msg06683/pgp0.pgp Description: PGP signature
Re: Fixing file system privileges
also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? fishbowl:~ dpkg --get-selections | grep purge fishbowl:~ -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED] may your future be limited only by your dreams. -- christa mcauliffe pgpasvgPu9n8y.pgp Description: PGP signature
Re: Fixing file system privileges
On Sat, 2002-05-11 at 01:16, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.11.0155 +0200]: nope, purge is a possible status too. since when? Since the last time you hit _ in dselect maybe. [EMAIL PROTECTED]:~$ dpkg --get-selections |grep purge aptitudepurge [EMAIL PROTECTED]:~$ sudo dpkg --purge aptitude (Reading database ... 98668 files and directories currently installed.) Removing aptitude ... Purging configuration files for aptitude ... [EMAIL PROTECTED]:~$ dpkg --get-selections |grep purge [EMAIL PROTECTED]:~$ So it is purges that are pending (Hence: dpkg --pending --purge which is run by dselect). -- David Stanaway signature.asc Description: This is a digitally signed message part
Re: Fixing file system privileges
also sprach David Stanaway [EMAIL PROTECTED] [2002.05.11.0904 +0200]: Since the last time you hit _ in dselect maybe. [EMAIL PROTECTED]:~$ dpkg --get-selections |grep purge aptitude purge [EMAIL PROTECTED]:~$ sudo dpkg --purge aptitude (Reading database ... 98668 files and directories currently installed.) Removing aptitude ... Purging configuration files for aptitude ... [EMAIL PROTECTED]:~$ dpkg --get-selections |grep purge [EMAIL PROTECTED]:~$ So it is purges that are pending (Hence: dpkg --pending --purge which is run by dselect). yeah, that makes sense. i never have non-purged software around. my bad. in any case, my suggestion, to grep -v deinstall would cope with that just fine ;) -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED] ever stop to think, and forget to start again? pgp2IvJ6leqdC.pgp Description: PGP signature
Re: Fixing file system privileges
On Thu, May 09, 2002 at 05:35:58PM +0200, martin f krafft wrote: also sprach Kovacs Istvan [EMAIL PROTECTED] [2002.05.09.1621 +0200]: I screwed up file system privileges, issuing a chmod -R in the wrong (/ -- where else?) directory :-( Is there a way to fix this? yes, if you have a tripwire (or other integrity checker) database around... otherwise only manually. i always have `ls -lR /` outputs stored in /root for a couple of weeks for that case... but: why not save your /etc, /home, and /var, dpkg --get-selections into a file, reinstall, and then one after the other restore your settings? that might be faster... You can do something like apt-get install --reinstall $(dpgk --get-selections|cut -f1) You may have to grep out some packages that aren't available anymore from your get-selections output, but that should get most stuff. -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Fri, May 10, 2002 at 04:08:24PM -0300, Peter Cordes wrote: You can do something like apt-get install --reinstall $(dpgk --get-selections|cut -f1) You may have to grep out some packages that aren't available anymore from your get-selections output, but that should get most stuff. You will have to filter more than that, or that command will try to install every package in the status file (including removed packages). -- - mdz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.10.2333 +0200]: Err, I guess you would need get-selections|grep 'install$'|cut -f1 why not dpkg --get-selections|grep -v 'deinstall$'|cut -f1 you want to save status, and since 'install$' matches lines ending in 'deinstall' as well ;^ -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^.*|tr * mailto:; net@madduck no keyboard present. press f1 to continue. zen engineering. msg06678/pgp0.pgp Description: PGP signature
Re: Fixing file system privileges
On Sat, May 11, 2002 at 01:21:19AM +0200, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.10.2333 +0200]: Err, I guess you would need get-selections|grep 'install$'|cut -f1 why not dpkg --get-selections|grep -v 'deinstall$'|cut -f1 you want to save status, and since 'install$' matches lines ending in 'deinstall' as well ;^ nope, purge is a possible status too. dpkg --get-selections | grep '[^A-Za-z]install$' | cut -f1 should work. This time for sure :) -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Thu, May 09, 2002 at 05:35:58PM +0200, martin f krafft wrote: also sprach Kovacs Istvan [EMAIL PROTECTED] [2002.05.09.1621 +0200]: I screwed up file system privileges, issuing a chmod -R in the wrong (/ -- where else?) directory :-( Is there a way to fix this? yes, if you have a tripwire (or other integrity checker) database around... otherwise only manually. i always have `ls -lR /` outputs stored in /root for a couple of weeks for that case... but: why not save your /etc, /home, and /var, dpkg --get-selections into a file, reinstall, and then one after the other restore your settings? that might be faster... You can do something like apt-get install --reinstall $(dpgk --get-selections|cut -f1) You may have to grep out some packages that aren't available anymore from your get-selections output, but that should get most stuff. -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Fri, May 10, 2002 at 04:08:24PM -0300, Peter Cordes wrote: You can do something like apt-get install --reinstall $(dpgk --get-selections|cut -f1) You may have to grep out some packages that aren't available anymore from your get-selections output, but that should get most stuff. You will have to filter more than that, or that command will try to install every package in the status file (including removed packages). -- - mdz -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
On Fri, May 10, 2002 at 04:31:24PM -0400, Matt Zimmerman wrote: On Fri, May 10, 2002 at 04:08:24PM -0300, Peter Cordes wrote: You can do something like apt-get install --reinstall $(dpgk --get-selections|cut -f1) You may have to grep out some packages that aren't available anymore from your get-selections output, but that should get most stuff. You will have to filter more than that, or that command will try to install every package in the status file (including removed packages). Err, I guess you would need get-selections|grep 'install$'|cut -f1 -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Fixing file system privileges
also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.10.2333 +0200]: Err, I guess you would need get-selections|grep 'install$'|cut -f1 why not dpkg --get-selections|grep -v 'deinstall$'|cut -f1 you want to save status, and since 'install$' matches lines ending in 'deinstall' as well ;^ -- martin; (greetings from the heart of the sun.) \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED] no keyboard present. press f1 to continue. zen engineering. pgpYy2anik9HA.pgp Description: PGP signature
Re: Fixing file system privileges
On Sat, May 11, 2002 at 01:21:19AM +0200, martin f krafft wrote: also sprach Peter Cordes [EMAIL PROTECTED] [2002.05.10.2333 +0200]: Err, I guess you would need get-selections|grep 'install$'|cut -f1 why not dpkg --get-selections|grep -v 'deinstall$'|cut -f1 you want to save status, and since 'install$' matches lines ending in 'deinstall' as well ;^ nope, purge is a possible status too. dpkg --get-selections | grep '[^A-Za-z]install$' | cut -f1 should work. This time for sure :) -- #define X(x,y) x##y Peter Cordes ; e-mail: X([EMAIL PROTECTED] , ns.ca) The gods confound the man who first found out how to distinguish the hours! Confound him, too, who in this place set up a sundial, to cut and hack my day so wretchedly into small pieces! -- Plautus, 200 BCE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
