Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread Harry Henry Gebel
On Thu, Nov 30, 2000 at 09:03:57PM -0800, kmself@ix.netcom.com wrote:
> on Thu, Nov 30, 2000 at 10:57:53PM -0500, Harry Henry Gebel ([EMAIL 
> PROTECTED]) wrote:
> > On Thu, Nov 30, 2000 at 10:09:26PM -0500, Chris Gray wrote:
> > > > "kmself" == kmself   writes:
> > > >>  You're probably right about this (IANA security expert), but
> > > >> these should only be readable by root.  Also, if you have a
> > > >> malicious root, your private key isn't going to be all that
> > > >> safe anyway.
> > > kmself> Well, on disk, your private key is secured by your
> > > kmself> passphrase (right?).  
> > > I just did a 'less' on my secring.gpg, so...  (remember the thread on
> > > the difficulty of password protecting a directory recently) 
> > > I don't think that the private key is encrypted in any way.  The fact
> > > that it has mode 0600 is seen as security enough.
> > 
> > The mode is NOT seen as security enough. The private key is encrypted using
> > a symmetrical cipher whose key is derived from a hash of the
> > passphrase. (the exact cipher and hash can be specified in an S2K block in
> > the secret keyring) In other words, if you selected a very good passphrase
> > (this is a BIG if for most people) if is just as well encrypted as any gpg
> > encrypted message message. The reason people must not be allowed to read it
> > is that it gives attackers a single key to discover that can then be used
> > to recover ALL of the (symmetrical) keys used to encrypt messages with that
> > key, (and because most people choose poor passwords discovering that one
> > key would not be hard for most people's keyrings. I am not sure what doing
> > 'less' on the keyring is supposed to indicate?
> 
> Thanks, Harry.
> 
> Ok, understanding that, why was I able to export my secret key without
> being prompted for a passphrase, or are the passphrase and key managed
> independently -- I can export the key but it's still no good without the
> passphrase?

You would still need to supply the passphrase to decode it, create a new
account and import the key into it and it will ask you for the passphrase
whenever you try to use it. If you have installed the doc-rfc package you
can find the details of GnuPG file formats, etc in
/usr/doc/doc-rfc/Proposed_Standard_Protocols/rfc2440.txt.gz (the OpenPGP
standard, which what GnuPG is based on.) There is also a lightly annotated
version of the RFC on the GnuGP website.

-- 
Harry Henry Gebel, ICQ# 76308382
West Dover Hundred, Delaware



Sendmail from localhost?

2000-11-30 Thread "\"Jason C. Hammons\"
I'd like to be able to send mail from my localhost, is this possible? I don't 
want to relay it to my ISP or anything like that, is it possible to have 
localhost relay e-mail? Please tell me so... =) Any help is greatly appreciated.


Thanks in advance!


Jason



Re: executable compatible with Debian and Redhat?

2000-11-30 Thread D-Man

This is correct.  I have a RH7.0 system:

$ gcc --version
2.96
$ rpm -q glib
glib-1.2.8-4

(I don't know if the glib is stable or not)

Check on gcc.gnu.org and you will see that 2.96 was the label for the devel tree
and is binary incompatible with all but version 2.96.  If you want to "upgrage"
(don't!) your system to use gcc 2.96 it will be binary compatible with other
executables made with 2.96.  Of course, then things made with the stable 2.95.2
won't work.

(also, the c++ optimizer has a bug that gives an internal compiler error and
quits when compiling certain code)

-D

PS. When I get some free time I want to install Debian on my other disk
and see how I like it.  Anybody want to offer a comparison of Debian and RedHat
with both pros and cons? (on a diff thread of course)


On Thu, 30 Nov 2000 20:56:35 Jonathan D. Proulx wrote:
 | Hi,
 | 
 | WARNING!
 | this is pure hearsay, which I have no documentation for
 | 
 | I heard about this problem (from what I consider knowlegable people),
 | red hat seems to be using a development branch of either gcc or glibc
 | (I forget which, sorry), the result RedHat 7.0 is frequently if not
 | always binary incompatable with any other GNU/Linux implementation.
 | 
 | As I said this is hear say, I'll try and find references one way or
 | the other.
 | 
 | Corrections welcome flames > /dev/null
 | 
 | -Jon
 | 
 | 
 | -- 
 | To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
 | with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
 | 




Re: coping with a high-volume mailing list (like this one)?

2000-11-30 Thread Known Human Nick Rusnov
In message <[EMAIL PROTECTED]>it was written:
>I'm curious to know what strategies are used by regular subscribers
>to this list to deal with the high volume of messages (>250/day)?

Although it doesn't pertain directly to your question, I felt like sharing :)

I used to use mh to filter all the messages into a separate folder for
"later viewing". MH (and nmh) provide some great mechanisms for this if you
happen to have a "hosted" email address on some unix box and don't mind
command line stuff (of course procmail is much better for filtering, more 
flexible
and lets you use whatever frontend you want, but I digress).

Anywho, the problem with sorting all my list mail into a separate folder was
that I *never* got around to reading any messages in the list and they would
build up into the thousands which I would delete periodicly.

I moved machines but didn't move my folder sorting thing, and noticed that
I read every message now, or at least skim it quickly. This is probably a side
effect of how mh from the command line works.. just a matter of typing next
over and over and over .. (though in actuality I don't use 'next', I use
a little util I wrote called mh-watch[1]).

Anyway. I find it sort of amusing. At least now I have lots to read with ltitle
effort, and I'm actually pleased when I wake up in the morning with 200 messages
to skim through. :)

[1]: http://www.grawk.net/~nick/proj/mh-watch/

as always,
nick
[EMAIL PROTECTED] * http://www.fargus.net/nick
Developer - Systems Engineer - Mad System Guru - MOO Sales
he picks up scraps of information/he's adept at adaptation
because for strangers and arrangers/constant change is here to stay



Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread Ethan Benson
On Thu, Nov 30, 2000 at 09:01:50PM -0800, kmself@ix.netcom.com wrote:

> I did:
> 
> gpg --armor --export-secret-keys kmself
> 
> ...which did just that, without prompting for a passphrase.  I think you
> may be right about that.  Hmmm  Still, the key doesn't work without
> the passphrase, right?  Need to investigate further.

what you exported is an encrypted copy of the private key.  ascii
armored but that makes no difference.

-- 
Ethan Benson
http://www.alaska.net/~erbenson/


pgpWHMrN1L8Ol.pgp
Description: PGP signature


Re: Sound

2000-11-30 Thread Krzys Majewski
Ross Boylan <[EMAIL PROTECTED]> writes:

> I've been trying to get some sound out of my Linux system, and am pretty
> baffled.  I gather there are several different ways to do it, and would
> like to know if there is a preferred one.  I have an ISA AWE-64
> soundblaster on a 2.2.17 kernel

metoo

> 1) The Mini-Howto on SB is a bit old, and it's not clear to me if it's
> still applicable.  At any rate, it is  not directed at Debian packages.
> The main Sound How-To is current, but again isn't addressed to Debian
> packaging. 

Lots of docs on the sb cards. See e.g. 

http://www.linuxdoc.org/HOWTO/mini/Soundblaster-AWE.html

Might not talk about the awe64 but from AFAIK from linux's perspective
awe64 == awe32. 

I don't use any midi/synth stuff so I don't care about this. 

> 2) I had decided (based on it's own description?  or the fact that it
> seemed to be more loadable than the alternatives?  it's been awhile) that
> the Alsa system was the way to go.  However, there are various pieces,
> and their interrelations are not clear to me (base, library, modules,
> drivers, utililties, ...).  There didn't seem to be a "task" or a good
> package (I had hoped the utilities might do it) which will pull
> everything in.
> 
> The modules that are there are for a much earlier version of the kernel
> than potato uses, and there doesn't seem to be anything for the current
> one.  Joey H asked about this a few weeks ago.  My interpretation of the
> response was that alsa was packaged so you had to get the source and
> build from it.
> 
> One of the attractions of the module based approach seemed to me that one
> didn't need to go recompiling things to get them to work, so this didn't
> grab me much. 

I switched  to ALSA (from the  default OSS-lite stuff)  when I started
playing  with  sound  recording.  OSS-lite  does  not  do  full-duplex
(e.g. recording  a guitar track while  playing along to  a bass track)
with the awe64. ALSA does.  Supposedly the commercial OSS does as well
but  the demo  I d/l'ed  wouldn't install  on any  debian system  so I
highly disrecommend them. 

I could  only get ALSA working The  Hard Way. That is,  d/l the latest
sources from  http://www.alsa-project.org, compile the  drivers, libs,
and utils, and tweak /etc/modutils/* until success. This took me 
about  1.5  days.   One   day,  unsuccessfully,  without  reading  the
docs. Then  half a day  while reading the  docs on the ALSA  site. (Be
sure to read all the howto's there.  It'll take an hour or so but well
worth it imho).  

In  short, yes,  it's  a pain  in  the ass.  Linux is  a  pain in  the
ass.  Computers  are  a pain  in  the  ass.  Life  is  a pain  in  the
ass. Sorry.

If, OTOH, you get it working just by apt-getting a bunch of debs, more
power to you. 

>  Also, I  would  like to  know  a simple  test to  see  if sound  is
working. 

apt-get install saytime

> I'm hoping there's an analogy to, for example, exim.  There are lots of
> mail transports, but there's one that's encouraged and (sort of) easy to
> set up.  So I'd appreciate any pointers.  By the way, the hardware emits
> sounds on other OS's, so I know everything is hooked up. 

Yeah I guess it  really depends on what you need. If  you just want to
listen to mp3's or whatever then the default driver module that comes with
the kernel should work fine. 

If  you want  to  do sound  recording,  I'd suggest  getting a  better
card. I  will as  soon as  I find some  cash. The  sb awe64  has bogus
full-duplex: one of  the channels is only 8 bits  wide. Of course they
don't tell you this when you buy it.  

So far I've managed to make my machine do almost decent sound recording,
but the effort to get things going just sucked  all the creative energy
out of my playing.  

I don't think this is just a  linux thing, I think
all computers are evil and suck the life out of people. 

Gotta go read my mail now

chris







Re: Command to determine resolution

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 09:54:26PM -0500, David Z Maze ([EMAIL PROTECTED]) 
wrote:
> Karsten M Self  writes:
> KMS> I note that my system is running at 75 dpi.  Will 100 dpi give more or
> KMS> less resolution, and how do I set resolution anyway?
> 
> That number is basically a measurement of how big fonts are; a bigger
> number means you'll have larger fonts.  On a 75dpi display, a 72-point 
> font will be 75 pixels high, but it would be 100 pixels high on a
> 100dpi display.  (Because it's trying to be "one inch" tall, and
> that's its concept of how big "one inch" is.)
> 
> Especially at higher display resolutions, it's nice to use the larger
> font sizes to get readable displays.  There's not an XF86Config
> option for it, I don't think, but you can pass the '-dpi' switch to
> your X server to change the number.  If you're using xfs, its
> configuration file includes a default font resolution; you should make 
> sure its configuration file matches the font resolution you're running 
> X at.

Sounds as if 100 dpi is actually lower resolution (larger font) than 75
dpi.  'That right?

I prefer better res, myself.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgp1iIeXsdQiP.pgp
Description: PGP signature


Re: executable compatible with Debian and Redhat?

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 04:46:17PM -0800, Jinsong Zhao ([EMAIL PROTECTED]) 
wrote:
> This is the first horrible thing I can think of: code compiled on
> Debian does not run on Redhat! Several programs I compiled on the
> Debian run fine on Debian, but when I installed Redhat and tried to
> run those programs, say in bash you type "./pgp", then the error
> message is:
> 
> bash: ./pgp: No such file or directory
> 
> I used this command: "sh pgp" and then the error message is:
> 
> cannot execute binary file
> 
> I downloaded the binary geomview package from www.geomview.org. It
> runs fine on Debian, but it has the several problem as above.
> 
> My redhat is 7.0. What is happening here? Does anyone have similar
> experience?

Is this a script?  How have you transferred it between systems?  Are
there any embedded carriage returns (ASCII \015, ^M) at the end of
lines?  

If so, you may be fooling your command interpreter, and need to strip
out the carriage returns.   The dos2unix utility should do this for you.

Just ran into this myself yesterday ;-P

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpf55CtKjNLJ.pgp
Description: PGP signature


Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 10:57:53PM -0500, Harry Henry Gebel ([EMAIL PROTECTED]) 
wrote:
> On Thu, Nov 30, 2000 at 10:09:26PM -0500, Chris Gray wrote:
> > > "kmself" == kmself   writes:
> > >>  You're probably right about this (IANA security expert), but
> > >> these should only be readable by root.  Also, if you have a
> > >> malicious root, your private key isn't going to be all that
> > >> safe anyway.
> > kmself> Well, on disk, your private key is secured by your
> > kmself> passphrase (right?).  
> > I just did a 'less' on my secring.gpg, so...  (remember the thread on
> > the difficulty of password protecting a directory recently) 
> > I don't think that the private key is encrypted in any way.  The fact
> > that it has mode 0600 is seen as security enough.
> 
> The mode is NOT seen as security enough. The private key is encrypted using
> a symmetrical cipher whose key is derived from a hash of the
> passphrase. (the exact cipher and hash can be specified in an S2K block in
> the secret keyring) In other words, if you selected a very good passphrase
> (this is a BIG if for most people) if is just as well encrypted as any gpg
> encrypted message message. The reason people must not be allowed to read it
> is that it gives attackers a single key to discover that can then be used
> to recover ALL of the (symmetrical) keys used to encrypt messages with that
> key, (and because most people choose poor passwords discovering that one
> key would not be hard for most people's keyrings. I am not sure what doing
> 'less' on the keyring is supposed to indicate?

Thanks, Harry.

Ok, understanding that, why was I able to export my secret key without
being prompted for a passphrase, or are the passphrase and key managed
independently -- I can export the key but it's still no good without the
passphrase?

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpraIrh5qWRI.pgp
Description: PGP signature


Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 10:09:26PM -0500, Chris Gray ([EMAIL PROTECTED]) wrote:
> > "kmself" == kmself   writes:
> 
> >>  You're probably right about this (IANA security expert), but
> >> these should only be readable by root.  Also, if you have a
> >> malicious root, your private key isn't going to be all that
> >> safe anyway.
> 
> kmself> Well, on disk, your private key is secured by your
> kmself> passphrase (right?).  
> 
> I just did a 'less' on my secring.gpg, so...  (remember the thread on
> the difficulty of password protecting a directory recently) 
> 
> I don't think that the private key is encrypted in any way.  The fact
> that it has mode 0600 is seen as security enough.

I did:

gpg --armor --export-secret-keys kmself

...which did just that, without prompting for a passphrase.  I think you
may be right about that.  Hmmm  Still, the key doesn't work without
the passphrase, right?  Need to investigate further.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpwSWhutb3ud.pgp
Description: PGP signature


RE: coping with a high-volume mailing list (like this one)?

2000-11-30 Thread Kenrick, Chris
Title: RE: coping with a high-volume mailing list (like this one)?






kmself@ix.netcom.com writes:


> When I get particularly behind, I just delete a few days (or weeks)
> worth of posts.  Debian Weekly News tends to highlight significant list
> events.


Krzys Majewski writes:
>What's this? Does it say things like, "This week Krzys Majewski posted
>a really stupid question"? Should I be worried? 


Probably not :).  However the guy who wrote to the list wanting to know
about spam tools and then changed his mind[1] managed to make DWN.
I can't recall any other instances though...


- Chris


[1] Yes I know he spammed the list a couple of days after with something
else.  But DWN came out before this happened.





[OT] gnus automatic-expiry

2000-11-30 Thread Krzys Majewski
David Z Maze <[EMAIL PROTECTED]> writes:

> Gnus has a couple of nice features.  One is automatic expiry: for
> selected groups (including all of the high-traffic Debian lists I'm
> on), mail sits around for about a week, then automatically gets
> deleted.  

Will this work in conjunction with immediate-expiry-on-reading? 
For example, in my ~/.gnus I have:

(setq gnus-total-expirable-newsgroups "imap.+Mail.+debian-user")

(setq nnmail-expiry-wait-function
  (lambda (group)
(cond ((string-match "debian-user" group)
   'immediate)
  (t
   31

This expires all  the articles when I leave the  summary buffer with c
y.  I  would also  like  all  articles older  than,  say,  4 days,  to
disappear   regardless  of   whether  I've   read  them.   I've  added
(expiry-wait . ) to my group parameters:

;;; Editing the group parameters for `nnimap+imap.cs.ubc.ca:Mail/debian-user'.
;; Type `C-c C-c' after you've finished editing.

((uidvalidity . "968964967")
 (expiry-wait . 4)
 nil)

but I haven't seen if it works yet. 

-chris



Xterm Font

2000-11-30 Thread Jack Morgan
I want to make my Xterm font bigger. I tried control + middle mouse
click but didn't see any option to change the font as the FAQ says. Any
pointers to appropriate docs would be great
Thanks!
-- 
~~~
Jack Morgan System Administrator, Exodus Communications
Phone/Fax:  (03) 5334-1770/5334-1771
Email:  [EMAIL PROTECTED]
~~~



Re: coping with a high-volume mailing list (like this one)?

2000-11-30 Thread Krzys Majewski
"Lawrence H. Robins" <[EMAIL PROTECTED]> writes:

> I'm curious to know what strategies are used by regular subscribers
> to this list to deal with the high volume of messages (>250/day)?

All my mail is handled by a server at my school. On this server, I run
procmail (via ~/.forward and ~/.procmailrc) to put debian-user mail in
a  debian-user folder. I  read this  folder from  home, with  the Gnus
news-reader, via IMAP. 

Gnus  is  occasionally  hairy  (way too  many
features) but a great medium for reading news/mail. It runs within the
Emacs editor, so everything is a buffer. For example, you can 
have the list of messages  in one buffer, the contents of a message
in  another buffer,  your  reply to  a  third message  in yet  another
buffer,  etc.  The  contents of  a  buffer  can  be displayed  with  a
keystroke, or you can display several buffers at once. 

Since Gnus  treats everything like  a newsgroup, all the  messages are
organized according to subject  ("threaded"). Finally, since Gnus runs
within  Emacs, it  means that  I  can edit  my replies  with the  same
program that I use to read  them (and not some half-baked appendage to
that program,  either). So, less keystrokes to  memorize, one familiar
interface, and so on. 

I try  to read debian-user  a couple  times a week  (more if I  have a
pressing question..).  The messages really  do pile up, and  I'm still
looking for ways deal with  this well. Gnus has  an "expiry" feature
which will hopefully do what I  want, failing that I'll try to write a
procmail recipe to  "rotate" the debian-user folder, so  that it never
contains more than, say, 500 messages. 

Even when  I don't have a question  posted, I do scan  through all the
subject lines.  So, no  filtering or scoring  or whatever. (If  I knew
exactly what I  wanted to read, I wouldn't be  subscribed in the first
place. See also next paragraph.) 

If  I want  to  search for  a  message on  a given  topic,  I use  the
www.debian.org search engine,  which seems to more or  less work these
days. 

-chris





Re: coping with a high-volume mailing list (like this one)?

2000-11-30 Thread Krzys Majewski
kmself@ix.netcom.com writes:

> When I get particularly behind, I just delete a few days (or weeks)
> worth of posts.  Debian Weekly News tends to highlight significant list
> events.

What's this? Does it say things like, "This week Krzys Majewski posted
a really stupid question"? Should I be worried? 
-chris



Re: gnus disconnected mode

2000-11-30 Thread Krzys Majewski
Adam Shand <[EMAIL PROTECTED]> writes:

> does it support disconnected mode imap?  that is my one big remaining
> gripe about pine (and as far as i know mutt's imap support is more
> primitive then pines still).

Yes, it  does. I tried it  with 5.8.3 and  it sort of worked  (I can't
remember what  problems I had).  They're up to  at least 5.8.7  now so
yeah, check  it out. These days  I'm on a cable  modem so disconnected
mode is not as much of a priority, but: my machine goes to 
sleep when I'm  not using it, and that  means various IMAP connections
time out  with strange consequences.  For example, five minutes  ago I
sat down to continue reading  debian-user which I hadn't touched for a
couple  days. I was  in the  summary buffer  and eventually  Gnus said
"imap: no such process". So I  had to nuke the summary buffer, go back
to  the group buffer,  run gnus-group-get-new-news,  and create  a new
summary buffer by selecting the group. 

In other  news (hah!) I've made  several attempts at using  Gnus as my
main mail-reader, but I invariably  give up. Maybe because it's such a
huge hulking hairy  beast. So I read debian-user with  Gnus and all my
other folders in Pine. 

-chris




Re: Pctel driver

2000-11-30 Thread Nate Amsden
doubtful, i suggest getting a good modem. if you really need the
winmodem downgrade the kernel, see www.linmodem.org or is it
linmodems.org ...

nate

Sean McIlwain wrote:
> 
> I have a zoltrix phantom 56K "winmodem".  Their wesite claims to
> have linux drivers that uses the pctel.o module.  All of the drivers I
> have found on the internet are library file that are a different kernel
> version than what I have, 2.2.17.  Is there a way to get the entire
> source so that I can compile this for the current kernel that  I have?
> Is there a debian package that provides this?
> 
>   Thanks,
>Sean McIlwain
> 
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

-- 
:::
ICQ: 75132336
http://www.aphroland.org/
http://www.linuxpowered.net/
[EMAIL PROTECTED]



Re: executable compatible with Debian and Redhat?

2000-11-30 Thread Harry Henry Gebel
> Hi,
> 
> WARNING!
> this is pure hearsay, which I have no documentation for
> 
> I heard about this problem (from what I consider knowlegable people),
> red hat seems to be using a development branch of either gcc or glibc
> (I forget which, sorry), the result RedHat 7.0 is frequently if not
> always binary incompatable with any other GNU/Linux implementation.
> 
> As I said this is hear say, I'll try and find references one way or
> the other.

This is true, you can find a discussion of it on lwn.net a few weeks back.


-- 
Harry Henry Gebel, ICQ# 76308382
West Dover Hundred, Delaware



Re: Samba across internet

2000-11-30 Thread sc
On 11/8/00 8:29 AM, John Covici ([EMAIL PROTECTED]) wrote:

>You might want to an interface line in your samba configuration file
>(smb.conf) such as
>interfaces=192.168.0.1/24
>and you may need a 
>socket address = specification.
>
>This is what I have been using.

I know that this is a late reply, but since others out there may have the 
same question...

I put an 

interfaces = eth0
bind interfaces only = true

in the smb.conf to deny folks from seeing the network while I was dialed 
in to my ISP.  Seems to work at least according to GRC's Shields Up! test 
(http://grc.com) which can't detect my Samba server anymore via dial-up.

Steve



Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread Harry Henry Gebel
On Thu, Nov 30, 2000 at 10:09:26PM -0500, Chris Gray wrote:
> > "kmself" == kmself   writes:
> >>  You're probably right about this (IANA security expert), but
> >> these should only be readable by root.  Also, if you have a
> >> malicious root, your private key isn't going to be all that
> >> safe anyway.
> kmself> Well, on disk, your private key is secured by your
> kmself> passphrase (right?).  
> I just did a 'less' on my secring.gpg, so...  (remember the thread on
> the difficulty of password protecting a directory recently) 
> I don't think that the private key is encrypted in any way.  The fact
> that it has mode 0600 is seen as security enough.

The mode is NOT seen as security enough. The private key is encrypted using
a symmetrical cipher whose key is derived from a hash of the
passphrase. (the exact cipher and hash can be specified in an S2K block in
the secret keyring) In other words, if you selected a very good passphrase
(this is a BIG if for most people) if is just as well encrypted as any gpg
encrypted message message. The reason people must not be allowed to read it
is that it gives attackers a single key to discover that can then be used
to recover ALL of the (symmetrical) keys used to encrypt messages with that
key, (and because most people choose poor passwords discovering that one
key would not be hard for most people's keyrings. I am not sure what doing
'less' on the keyring is supposed to indicate?

> Finally, writing a program to read /proc/kcore to try to find secret
> keys sounds ridiculously hard to me.  Maybe if you trojaned gpg it
> would work, but even then you could just have gpg send you the secret
> key so there's no point.

Writing a program to extract this information from /proc/kcore presents
little difficulty (in fact I am sure these programs already exist),
especially if you have symbol tables for the kernel and the gpg binary
being run. This is why if you can't trust root everything else is
useless. A bigger challenge would be extracting the information from a swap
partition (a swap partition can be accessed by simply stealing the actual
hard drive and placing it in your own computer.) Stealing the actual hard
drive will also give you access to all files on the drive regardless of
permissions, which is (one reason) why the file is encrypted and does not
simply rely on permissions for protection.

-- 
Harry Henry Gebel, ICQ# 76308382
West Dover Hundred, Delaware



Re: installation help

2000-11-30 Thread Denzil Kelly
What are some of specs of the machine you are trying
to install on? Someone recently gave me a few 486's,
and I've had the same problem when trying to boot from
floppy. These machines were Dell Optiplex XL 575 w/16
MB of RAM.
--- [EMAIL PROTECTED] wrote:
> Hello,
> 
> 
> When attempting to boot Release 2.1 (included in the
> 
> Debian GNU/Linux New Rider text)  from the floppy,
> my 
> system loads "root bin" but freezes during the
> "loading 
> linux" phase.
> 
> Can anyone help me??
> 
> Thanks,
> 
> Richard
> [EMAIL PROTECTED]
> 
> 
> -- 
> To UNSUBSCRIBE, email to
> [EMAIL PROTECTED] 
> with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> 


__
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/



Re: Help: /usr/bin/pgp: no such file or directory

2000-11-30 Thread Ethan Benson

On Thu, Nov 30, 2000 at 10:09:11PM +0100, Jonathan Gift wrote:
> Hi,
> 
> I'm getting the above msg in my new mutt setup. I tried to potato cd, my
> distro, and there's a gpgp but I don't want gnome. Anyway to get the msg
> off or answered?

upgrade to the mutt in current potato (r1) it is configured to use
GnuPG by default.  (which you should install from non_US).

-- 
Ethan Benson
http://www.alaska.net/~erbenson/


pgphlDUb4V96P.pgp
Description: PGP signature


Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread Chris Gray
> "kmself" == kmself   writes:

>>  You're probably right about this (IANA security expert), but
>> these should only be readable by root.  Also, if you have a
>> malicious root, your private key isn't going to be all that
>> safe anyway.

kmself> Well, on disk, your private key is secured by your
kmself> passphrase (right?).  

I just did a 'less' on my secring.gpg, so...  (remember the thread on
the difficulty of password protecting a directory recently) 

I don't think that the private key is encrypted in any way.  The fact
that it has mode 0600 is seen as security enough.

Finally, writing a program to read /proc/kcore to try to find secret
keys sounds ridiculously hard to me.  Maybe if you trojaned gpg it
would work, but even then you could just have gpg send you the secret
key so there's no point.

kmself> Yes, ultimately, you do have to trust your system.

Right.

Cheers,
Chris


-- 
Every child in America MUST get one of these things for Christmas or
Chanukah or Kwanzaa or Atheist Children Get Presents Day.
-- Dave Barry



Re: coping with a high-volume mailing list (like this one)?

2000-11-30 Thread Brenda J. Butler
--- Begin Message ---

On Thu, Nov 30, 2000 at 12:20:41PM +1100, Chris Kenrick wrote:
> Re: coping with a high-volume mailing list (like this one)?
>   >I would assume that if you didn't want to leave the mail on the remote 
>   >server you'd just use fetchmail to download it, although, I *think* 
>   >gnus has it's own software to download the mail if that's what you 
>   >want. 
> 
>   You can still use fetchmail to get the mail even if you _do_ want to leave 
> it
> 
>   on the IMAP server (can't remember the switch offhand).  Although what
> 
>   the original poster _might_ have meant by disconnected mode is that the
> 
>   client only connects to the IMAP server when it wants to do something 
> 
>   (send/check mail), and is disconnected otherwise.  Maybe some clients
> 
>   keep the IMAP session up all the time?

Well I'm no expert, but I suspect that "disconnected mode" with
IMAP means that after IMAP has downloaded all the mail headers, it
disconnects, allowing the user to peruse the mail headers and
mark the ones (s)he wishes to download, and mark the ones (s)he
wishes to delete.  Then the user reconnects, and IMAP causes
all the downloads and deletes to happen quickly.

-- 
[EMAIL PROTECTED]
--
Hi! I'm a .signature virus! Copy me into your ~/.signature, please!
--

--- End Message ---


Re: UNIX help

2000-11-30 Thread Chris Black
The Unix Administrator's Handbook by Evi Nemeth, et al is the way and the 
light for learning Unix Administration. O'Reilly's Unix Power Tools (2nd ed) 
is excellent for learning neat tricks for basic commands.


On Thursday 30 November 2000 10:07, Robert Guthrie wrote:
> If you have the budget for it, check out
> http://www.ora.com
>
> They have some of the most constently excellent books on the various unix
> tools and tasks (such as andministration, DNS configuration, Programming)
> that I've seen from any publisher.
>
> YMMV, but I swear by them, and have 8 paper books and two "CD bookshelves"
> from them.
>
> On Thursday 30 November 2000 06:34, Alex Horsnell wrote:
> > Hi
> >
> > I have just started learning UNIX and unfortunatley my 'teacher' has been
> > very busy lately and unable to show me anything.
> >
> > I have started on our company printers and am using putty, I don't have
> > any problems in that area, but I would like to learn more.
> >
> > Does anyone out there have any prefered methods/books on learning UNIX?
> >
> > Thanks
> >
> > Alex
> >
> > .
> >.. . If you have received this message in error, please contact the
> > sender immediately by return e-mail or ring 020 7498 9898 and ask for the
> > sender. Killby & Gayford Group have taken every reasonable precaution to
> > ensure that any attachment to this e-mail has been checked for viruses. 
> > However, we cannot accept liability for any damage sustained as a result
> > of software viruses and would advise that you carry out your own virus
> > checks before opening any attachment.
> > .
> >.. .



ISDN says "no channel for ippp0" on dialing... why?

2000-11-30 Thread J?rgen A. Erhard
I've tried to install ISDN for a friend.  Now I got the Hisax module running
(after I found the secret incantation needed for the ISA Siemens I-Surf 1.0
(some PEEKs and POKEs (yes ;-) in isapnp.conf)).

But when I try dialing, it says

   isdn_net_force_dial: No channel for ippp0
   
I've looked for that message in the kernel sources, but the only thing I get
is that the ISDN subsystem seems to think that all the channels are used
up... but there's nothing using the ISDN line!

So... what do I miss?  If any config files are needed, ask me... though
everything seems to be in order.

Really, I'm stumped...

Bye, J

-- 
Jürgen A. Erhard[EMAIL PROTECTED]   phone: (GERMANY) 0721 27326
  My WebHome: http://members.tripod.com/Juergen_Erhard
  Advent, Advent, der Faschist brennt.
  Erst das Ärmchen, nun das Beinchen, bald das ganze Nazischweinchen.


pgpS6vmj0rCYG.pgp
Description: PGP signature


Re: Command to determine resolution

2000-11-30 Thread David Z Maze
Karsten M Self  writes:
KMS> I note that my system is running at 75 dpi.  Will 100 dpi give more or
KMS> less resolution, and how do I set resolution anyway?

That number is basically a measurement of how big fonts are; a bigger
number means you'll have larger fonts.  On a 75dpi display, a 72-point 
font will be 75 pixels high, but it would be 100 pixels high on a
100dpi display.  (Because it's trying to be "one inch" tall, and
that's its concept of how big "one inch" is.)

Especially at higher display resolutions, it's nice to use the larger
font sizes to get readable displays.  There's not an XF86Config
option for it, I don't think, but you can pass the '-dpi' switch to
your X server to change the number.  If you're using xfs, its
configuration file includes a default font resolution; you should make 
sure its configuration file matches the font resolution you're running 
X at.

-- 
David Maze [EMAIL PROTECTED]  http://www.mit.edu/~dmaze/
"Theoretical politics is interesting.  Politicking should be illegal."
-- Abra Mitchell



installation help

2000-11-30 Thread richardrose
Hello,


When attempting to boot Release 2.1 (included in the 
Debian GNU/Linux New Rider text)  from the floppy, my 
system loads "root bin" but freezes during the "loading 
linux" phase.

Can anyone help me??

Thanks,

Richard
[EMAIL PROTECTED]



Re: Command to determine resolution

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 08:20:49PM -0500, David Z Maze ([EMAIL PROTECTED]) 
wrote:
> Robert D Hilliard <[EMAIL PROTECTED]> writes:
> RDH> Is there a command available in Debian to determine what
> RDH> resolution is being used in an X session?
> 
> In amidst all of the information 'xdpyinfo' displays is this:
> 
> screen #0:
>   dimensions:1280x1024 pixels (325x260 millimeters)
> 
> I assume from the format (and that the program explicitly mentions
> "displays") that xdpyinfo will print information on every screen on
> the referenced server.  This might matter on Debian if you're using
> XFree86 4.0 and have more than one screen configured on it.  It also
> might matter if you're running programs not-on-the-local-machine and
> the remote machine has multiple screens.

Cool.  Next question.

I note that my system is running at 75 dpi.  Will 100 dpi give more or
less resolution, and how do I set resolution anyway?  Don't find
anything in the XF86Config file or man pages.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpbTUhnoOpRk.pgp
Description: PGP signature


Re: Command to determine resolution

2000-11-30 Thread Wayne Topa

Subject: Command to determine resolution
Date: Thu, Nov 30, 2000 at 05:26:02PM -0500

In reply to:Robert D. Hilliard

Quoting Robert D. Hilliard([EMAIL PROTECTED]):
>  Is there a command available in Debian to determine what
> resolution is being used in an X session?
> 
>  Please Cc: me on any replies.

xwininfo part of the xbase-clients package
-- 
What boots up must come down.
___



Re: OT: nice'ing jobs

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 06:10:20PM -0500, Brian Stults ([EMAIL PROTECTED]) 
wrote:
> Sorry for the off-topic post, but I'd like to draw on the general
> computing expertise of this group.
> 
> Where I work, we have a unix server with 4 CPU's.  

I gather this is a proprietary Unix, not GNU/Linux?

> There is not a "nice" police at our center, and I have been trying to
> make the case to the sysadmin that there should be.  Could someone
> please review my brief argument and tell me if I am incorrect in my
> thinking?  Here's an example...
> 
> Here is some truncated ps output:
> 
> USER   PID %CPU %MEMSTIME NI COMM
>user1 2573 24.6  0.3 10:52:45 20 EMMIX
>user1  1067 24.3  1.0 09:33:22 20 EMMIX
>user1  2636 24.1  0.9 10:58:42 20 EMMIX
>user2  7153 20.4  0.2 17:35:39 20 SPSS
> 
> The first three jobs are CPU-intensive and will run for about 24 hours. 
> The fourth job is I/O intensive and will run for maybe 2 hours.  Since
> there are four processors, at this point the jobs are not going to
> interfere with each other.  However, if one more CPU-intensive job were
> added by user1, all jobs would be slowed proportionately.  

Not quite, as I understand.  If the system doesn't have process
migration, two jobs will stack up on one CPU.  Each will see a 50%
performance hit.  The other three runnable processes will be unaffected.
But I could be wrong on this.  Otherwise, largely right.

> My argument is that nice'ing the CPU-intensive jobs would cause the
> I/O-intensive job to run faster without slowing the CPU-jobs at all.

Maybe, maybe not.  Some systems are tuned for CPU preference, others are
I/O blocked -- your I/O intensive job either blocks the CPU-heavy jobs
by default, or simply isn't grossly effected by them (it's blocked on
I/O, not CPU).

> The reason is that the I/O-intensive job doesn't use much CPU-time.
> So when it gets its turn on the CPU it doesn't use all of its allotted
> time.  However, it still has to wait an equal amount of time to get
> its turn at the CPU again.
> 
> Generally speaking, is this correct in theory?  It seems especially
> considerate to nice the CPU-intensive jobs, since that user gets more
> aggregate CPU time anyway since they're running multiple big jobs.

I'd make this argument.

First, use a queuing system.  Queueing systems are designed to handle
the issue of long-running jobs by one or more users.   I run stuff to
batch all the time, even on my single-user systems -- it's easier to
deal with then a backgrounded or foregrounded process.  Options include
at, cron, and batch, as well as other more advanced systems.

nice your batched jobs.  Debian doesn't make the automating of this
quite as straightforward as, say, Solaris (the queuedefs file), but you
can launch your scheduler with options, including load-limiting factors.
Not sure how to run 'nice' into it -- possibly by nicing the daemon?

It's also helpful to be able to set a timeout (ulimit) on specific job
queues.  Scaling this so that the the most time-limited queues have the
highest priority tends to take care of the load-balancing problem --
people will slot their work to the fastest queue which allows sufficient
runtime for their job.  Note that these days the idea of shared, heavily
tasked, batch environments is pretty foreign to most, especially the
younger crowd, but some of use have been there, and this actually does
work pretty well, when it's needed.  

Note also how 'nice' works -- all jobs in the run queue at a nice level
of n have priority over jobs with a nice value of n+1.  The
lower-priority jobs are only cleared to run when all higher priority
tasks have run.  The run queue is (IIRC) roughly equivalent to the
values in your system load average, and indicates the processes in a
runnable state for a given system timeslice.


The reason for nicing long-running jobs is this:

 -  Short-run jobs, whether foreground or batch, generally have someone
waiting on the results.  It makes sense to turn them around
reasonably quickly.  At the same time, they don't consume heaps of
system resources because they are time-limited.

 -  Long-run jobs are typically less time sensitive -- five minutes'
variance in s 20 hour run is an 0.4% deviation.  In a time-averaged
environment, backgrounded processes _tend_ to get the resources they
need.

Limited queueus -- a queue with a limited number of run slots -- are a
good means for allocating and measuring resources.  At the point at
which you could get more jobs run by adding slots, but total throughput
drops, it's time to start looking at adding more firepower.


While there are a slew of batching systems out there, a well designed
system of queues, and mix of goading and system design (e.g.:  replace
default command for a process with one which automatically submits it to
batch), can often provide benefits.


-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://

Re: executable compatible with Debian and Redhat?

2000-11-30 Thread David Z Maze
David Z Maze <[EMAIL PROTECTED]> writes:
DZM> Jinsong Zhao <[EMAIL PROTECTED]> writes:
 JZ> I used this command: "sh pgp" and then the error message is:
 JZ> 
 JZ> cannot execute binary file
DZM> 
DZM> This generally means there's some sort of library problem.

Now that I'm looking at this again, it's worth noting that 'sh foo'
tries to run 'foo' as a Bourne shell script; if it's anything else,
it'll fail.  It's easier to write shell scripts that begin with the
line '#!/bin/sh' and are executable.  'file' will often tell you what
a given file is.

-- 
David Maze [EMAIL PROTECTED]  http://www.mit.edu/~dmaze/
"Theoretical politics is interesting.  Politicking should be illegal."
-- Abra Mitchell



Re: How to make useful boot disk (was: Re: How to get rid of LILO)

2000-11-30 Thread Jiri Klouda
> Then insert new floppy and proceed as root:
> 
> mke2fs /dev/fd0
> mount -t ext2 /dev/fd0 /floppy
> cp /boot/vmlinuz /boot/boot.b /boot/mbr.b /floppy/
> cp /root/lilo-fd.conf /root/fixmbr /bin/dd /bin/sash /floppy/
> mkdir /floppy/dev
> mknod /floppy/dev/hda b 3 0
> chmod 666 /floppy/dev/hda 
> cd floppy
> lilo -C lilo-fd.conf
> cd /
> umount /floppy
> 
> PS: I hope I did not make there some mistake, writing this out of my head.

Eeek.. I knew I forgot something... libraries :)
And also sash is a bit too large, ash would be better.
Its getting a bit complicated... but if you still want
to proceed, you can get from install file root.bin and
get the files from there:

cd /root/
mv root.bin root.bin.gz
gzip -d root.bin.gz
mount -t ext2 -o loop root.bin /mnt
mkdir /floppy/lib/
cp /mnt/lib/ld-2.1.3.so /mnt/lib/libc-2.1.3.so /floppy/lib/
ln /floppy/lib/ld-2.1.3.so /floppy/lib/ld-linux.so.2
ln /floppy/lib/libc-2.1.3.so /floppy/lib/libc.so.6
cp /mnt/bin/ash /mnt/bin/dd /floppy/
umount /mnt
rm root.bin

And change the script accordingly to run ash instead of sash.

Jirka

PS: If you are lucky and your vmlinuz is around 750k, you should fit :)

-- 
Jiri Klouda <[EMAIL PROTECTED]>
http://atrey.karlin.mff.cuni.cz/~jk



Re: UNIX help

2000-11-30 Thread Bek Oberin
Jonathan D. Proulx wrote:
> Get a cheap machine, free if possible (486DX2 or so.th)
> Install it with Debian
> configure it
> break it
> read the HOWTOs
> read the man pages
> re-install it
> re-configure it
> break it
> email debian-user with your questions
> fix it
> repeat as often as possible

*grin*  I've been doing this for several years now and it's lots
of fun.  I still regularly break things and scream for help from
my other tech friends and from this list.  I'm still learning
heaps and heaps.  And I'd say I'm an experienced Linux user now
... I answer probably as many questions as I asked, and I act as
"the techie person" for linux-newbie friends as well.

It's a neverending cycle :)


bekj

-- 
: --Hacker-Neophile-Eclectic-Geek-Grrl-Queer-Disabled-Boychick--
: [EMAIL PROTECTED]   http://www.tertius.net.au/~gossamer/
: Growing old is mandatory, 'growing up' is optional.



Re: executable compatible with Debian and Redhat?

2000-11-30 Thread Jonathan D. Proulx
Hi,

WARNING!
this is pure hearsay, which I have no documentation for

I heard about this problem (from what I consider knowlegable people),
red hat seems to be using a development branch of either gcc or glibc
(I forget which, sorry), the result RedHat 7.0 is frequently if not
always binary incompatable with any other GNU/Linux implementation.

As I said this is hear say, I'll try and find references one way or
the other.

Corrections welcome flames > /dev/null

-Jon



Re: Xwrapper.config -- values for allowed_users?

2000-11-30 Thread Eric G . Miller
On Thu, Nov 30, 2000 at 12:00:29PM -0800, kmself@ix.netcom.com wrote:
> I'm getting the following errors running startx from console as a
> nonpriviledged user:
> 
> X: cannot stat /etc/X11/X (No such file or directory), aborting.
> var: allowed_users, value: rootonly.
> var: nice_value, value: -10.

I came across this error while trying to figure out why the new X 4
power management was killing my login sessions (still unsolved).  Turned
out it was fixed by small changes to XF86Config-4.  You may not have the
same options, but I had some options in the ServerFlags that were
written like:

Section "ServerFlags"
BlankTime  10
StandbyTime 20
SuspendTime 25
Offtime 30
EndSection

changing to:

Section "ServerFlags"
Option "BlankTime"   "10"
Option "StandbyTime" "20"
Option "SuspendTime" "25"
Option "Offtime" "30"
Option "NoPM""true"
EndSection


made the problem go away.  The "NoPM" told X not to use it's idea of
power management (the kernel/BIOS is already configured to do this, and
blanking/offtime still happen -- some kind of conflict I guess).

So, you might have some syntax problems.

-- 
Eric G. Miller 



Re: umlauts-in-terminal/console-problem after upgrading to woody

2000-11-30 Thread Peter Palfrader
Hi Michael!

Michael Mertins schrieb am Donnerstag, dem 30. November 2000:

> I have a large problem getting umlauts to work since I upgraded to woody.

If you are who I think you are, then we solved this problem by
setting the LC* variables in /etc/environment, right?

also see man locale (not esp you Michael but everyone else
interested in the subject)

So long,
Weasel

-- 
PGP signed and encrypted messages preferred.
http://www.palfrader.org/


pgpI5K0ALGQfc.pgp
Description: PGP signature


Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 07:09:02PM -0500, Chris Gray ([EMAIL PROTECTED]) wrote:
> > "kmself" == kmself   writes:
> 
> >>  The other root programs shouldn't be looking at memory other
> >> than their own, or else they'd segfault.  The major thing with
> >> memory-locking is that the memory never gets written to disk.
> 
> kmself> What about /proc/kcore or /dev/mem?
> 
> You're probably right about this (IANA security expert), but these
> should only be readable by root.  Also, if you have a malicious root,
> your private key isn't going to be all that safe anyway.

Well, on disk, your private key is secured by your passphrase (right?).
Granted, various sniffers could pick this up, but only when active, not
at all times.  So memory access is probably an easier avenue to the same
goal.

Yes, ultimately, you do have to trust your system.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpgKAgQWwoyZ.pgp
Description: PGP signature


Re: Configure networking?

2000-11-30 Thread Jonathan D. Proulx
Hi

for a laptop you should look at /etc/pcmcia/network.options (not sure
if that path is 100%)

this, if configured properly, will automaticly bring up the interface
with the proper settings when the card is inserted.

you can also do tricks like have different ip,dns,etc for different
cards, my laptop uses this as I have wireless at work and wired at
home, you probably won't need anything that fancy.

I'd provide more specifics on the file format, but my laptop is in my
office and turned off, while I at home. It's pretty straight forward
and well commented, if you know how to use ifconfig, you should have
no problems.

-Jon



Re: UNIX help

2000-11-30 Thread Jonathan D. Proulx
Hi,

What worked for me (starting from zero Un*x experience):

Get a cheap machine, free if possible (486DX2 or so.th)
Install it with Debian
configure it
break it
read the HOWTOs
read the man pages
re-install it
re-configure it
break it
email debian-user with your questions
fix it
repeat as often as possible

-Jon

--
[EMAIL PROTECTED]
systems administrator
Massachusetts Institute of Technology
Artificial Intelligence Lab



Re: recommend a secure shell client for Windows

2000-11-30 Thread Jonathan D. Proulx
Hi,

I have both putty and SecureCRT, here's my oppinions:

putty:
better color terminal emulation
Un*x like cut & paste mouse events
More Un*x like feel
also has available scp client, though you don't need putty to get
pscp.exe
FREE


SecureCRT:
Better port forwarding
More Windows-like (pulldown menus etc)
Relatively inexpensive, 30 day trial


I use SecureCRT mostly for windows clients at the lab who need
transparent X forwarding.

I use putty at home (exclusively though I do have SecureCRT
installed), if I need an X display I just set $DISPLAY, since teh
windoze box is completly firewalled off (only net connection via Squid
proxy on the real machine), who cares.

-Jon



Re: executable compatible with Debian and Redhat?

2000-11-30 Thread David Z Maze
Jinsong Zhao <[EMAIL PROTECTED]> writes:
JZ> This is the first horrible thing I can think of: code compiled on
JZ> Debian does not run on Redhat! Several programs I compiled on the
JZ> Debian run fine on Debian, but when I installed Redhat and tried to
JZ> run those programs, say in bash you type "./pgp", then the error
JZ> message is:
JZ> 
JZ> bash: ./pgp: No such file or directory
JZ> 
JZ> I used this command: "sh pgp" and then the error message is:
JZ> 
JZ> cannot execute binary file

This generally means there's some sort of library problem.  Try
running 'ldd pgp'; it should display a listing of the libraries needed 
by the program.

(I'd imagine this could also happen if either (a) you had an a.out
binary from a *really* old Linux distribution, or (b) you had a binary 
for another architecture.  I'd assume neither of these to be the case
here.)

JZ> I downloaded the binary geomview package from www.geomview.org. It
JZ> runs fine on Debian, but it has the several problem as above.
JZ> 
JZ> My redhat is 7.0. What is happening here? Does anyone have similar
JZ> experience?

Mmm, Red Hat, the paragon of stability and usability.  You might try
falling back to Red Hat 6.2; its libraries are more likely to be
compatible (particularly with Debian stable) and it's known to work
out-of-the-box.

-- 
David Maze [EMAIL PROTECTED]  http://www.mit.edu/~dmaze/
"Theoretical politics is interesting.  Politicking should be illegal."
-- Abra Mitchell



RE: executable compatible with Debian and Redhat?

2000-11-30 Thread Kenrick, Chris
Title: RE: executable compatible with Debian and Redhat?





>Several programs I compiled on the
>Debian run fine on Debian, but when I installed Redhat and tried to
>run those programs, say in bash you type "./pgp", then the error
>message is:


>bash: ./pgp: No such file or directory


>I used this command: "sh pgp" and then the error message is:


>cannot execute binary file



I take it the file has execute permission on the Redhat box?


The second error message in particular is usually a lack of execute
permissions.


- CHris





Re: Command to determine resolution

2000-11-30 Thread David Z Maze
Robert D Hilliard <[EMAIL PROTECTED]> writes:
RDH> Is there a command available in Debian to determine what
RDH> resolution is being used in an X session?

In amidst all of the information 'xdpyinfo' displays is this:

screen #0:
  dimensions:1280x1024 pixels (325x260 millimeters)

I assume from the format (and that the program explicitly mentions
"displays") that xdpyinfo will print information on every screen on
the referenced server.  This might matter on Debian if you're using
XFree86 4.0 and have more than one screen configured on it.  It also
might matter if you're running programs not-on-the-local-machine and
the remote machine has multiple screens.

-- 
David Maze [EMAIL PROTECTED]  http://www.mit.edu/~dmaze/
"Theoretical politics is interesting.  Politicking should be illegal."
-- Abra Mitchell



How to make useful boot disk (was: Re: How to get rid of LILO)

2000-11-30 Thread Jiri Klouda
> > > fdisk /mbr (undocumented feature of fdisk)
> > > does the trick.
> > > 
> > > Joop
> > 
> > Just wondering, is there a linux way to do this?
> > -samuel
> 
> Yes... but only if you still have linux intact...
> Lilo saves a copy of your bootsector on first install.
> this can be recovered with lilo -u or lilo -U
> 
> RTFM... it's all there (lilo(8))
 
Hmm its always good idea to keep your mbr on your linux boot disk
with a quick script to recover it. You will find the saved mbr record
in /boot/mbr.b usually. Then:

Create files /root/lilo-fd.conf and /root/fixmbr:

cat >/root/lilo-fd.conf 

Re: CD to MP3 Util

2000-11-30 Thread Jens Gecius
"Timothy C. Phan" <[EMAIL PROTECTED]> writes:

> Hi ,
> 
>   Is there any utility to convert CD files to MP3 files on Linux?
>   TIA!

Take a look at grip in conjunction with cdparanoia and lame (or any
other cd-ripper and mp3-encode; be careful about patent issue,
therefore not included in debian package system).

-- 

Tschoe,
 Jens



Re: DESTROY (perl experts please) (fwd)

2000-11-30 Thread Damien
> > 
> > deb http://spidermonkey.helixcode.com/distributions/debian unstable main
>Thats Woody, not Potato   
>  Potato is stable _not_ unstable

hrm. afaik, unstable refers to the helixcode distribution - thus unstable
helixcode will work fine with potato.

cheers

damien

-- 
We don't know how bad things are in north korea, but here are some pictures of
hungry children. -- CNN



pgps5M9Wo5uZR.pgp
Description: PGP signature


Re: none

2000-11-30 Thread Adam Di Carlo
"Jasper Spit" <[EMAIL PROTECTED]> writes:

> Hi,
> 
> Trying to install Debian 2.2 on my new system which has the main
> hard drive connected to a Promise Ultra 100 connector. Problem ofcourse
> is that when I boot from the Debian CD, the promise controller and hard
> drive are not detected.
> 
> So I created a boot disk with the 2.2.17 kernel and the Promise patches
> applied. This works, I can boot with the boot disk, and I see that the
> controller and harddisk are detected (hde, lol !), BUT, now I want to
> proceed installing from the debian CD. So how can I get my system to
> boot from the bootdisk I created, and then proceed with the normal setup
> from the Debian binary #1 CD ? I tried stuff like root=/dev/hdc in the
> /etc/lilo.conf on the disk, but that didn't work.
> 
> I think I need to load /install/root.bin on the CD, but how ?

I would suggest you make floppies based on the images provided on the
cd, simply replacing the kernel on the rescue disk.  You'll probably
get module errors but that's not a deal-breaker for installation.

-- 
.Adam Di [EMAIL PROTECTED]http://www.onShore.com/>



Pctel driver

2000-11-30 Thread Sean McIlwain

I have a zoltrix phantom 56K "winmodem".  Their wesite claims to
have linux drivers that uses the pctel.o module.  All of the drivers I
have found on the internet are library file that are a different kernel
version than what I have, 2.2.17.  Is there a way to get the entire
source so that I can compile this for the current kernel that  I have?
Is there a debian package that provides this?

  Thanks,
   Sean McIlwain




Re: MYSQL

2000-11-30 Thread Wayne Topa

Subject: RE: MYSQL
Date: Thu, Nov 30, 2000 at 12:29:53PM -

In reply to:James Preece

Quoting James Preece([EMAIL PROTECTED]):
> 
> This is working fine now.
> 
> How do I go about building a database?
> 
> Does anyone have a recourse I can look at on the web, or anyone one to take
> me to one side and beat me ?
> 
> Any help as always gratefully received
> 

apt-cache search mysql

mysql-manual - Unofficial MySQL 3.20 Documentation


so then
apt-get install mysql-manual

is easynet easier then that?
-- 
WINDOWS stands for Will Install Needless Data On Whole System.
___



Re: potato-n-woody side by side?

2000-11-30 Thread Glenn Becker

Thanks!

I think I've committed to retreating to stable until I'm a more
knowledgeable user ... I think in my case the upgrading to Woody was kind
of hubris-driven anyway: y'know, the need to have the latest and greatest
and all the great apps. Really, though, why do I think I *need* Perl 5.6
if I really don't know Perl terribly well yet?

Just wish I could put a stack of (O'Reilly?) books under my pillow and
wake up all ready to achieve wizard-status the next morning ...
_
 |
// G l e n n  B e c k e r|
 | 
// "Ah, how do you sleep?|  
// Ah, how do you sleep at night?"   |  
// -- John Lennon|
 | 
// [EMAIL PROTECTED]   | 
_|

At 9:16am on Fri, 1 Dec 2000, Nick Croft wrote:

> Glenn,
> I also lost my backspace key in the process. 
> In desperation I rang a friend who logged in to my box and offered advice.
> 
> It seems that you need to nudge apt to keep going with installation. It
> comes to an end, you start to use your machine and then find some packages
> won't work.
> 
> Have a look in /var/cache/apt/archives. See if the package is there. If
> you need it straight away, then just dpkg -i .deb . Otherwise
> issue:  apt-get dist-upgradeagain to start the ball rolling.
> Eventually you get there. 
> 
> I spent about 30 hours on the net in all, ftping woody by way of apt-get.
> __
> If you're having trouble with the backspace key - so am I. It may be a
> quirk of xfree86-4.
> You can fix it with
>   xmodmap -e "keycode 22 = BackSpace"
> which is case sensitive.
> 
> This works for the duration of the session. You can make it permanent by
> writing a .Xmodmap file for your user, containing just the line
>   keycode 22 = BackSpace
> 
> No doubt the gurus will notice this problem which lots of people are
> getting at the moment.
> 
> Nick
> 
> 



executable compatible with Debian and Redhat?

2000-11-30 Thread Jinsong Zhao
This is the first horrible thing I can think of: code compiled on
Debian does not run on Redhat! Several programs I compiled on the
Debian run fine on Debian, but when I installed Redhat and tried to
run those programs, say in bash you type "./pgp", then the error
message is:

bash: ./pgp: No such file or directory

I used this command: "sh pgp" and then the error message is:

cannot execute binary file

I downloaded the binary geomview package from www.geomview.org. It
runs fine on Debian, but it has the several problem as above.

My redhat is 7.0. What is happening here? Does anyone have similar
experience?

Jinsong



Re: Why non-free (was Re: unzip - again)

2000-11-30 Thread Jimmy O'Regan
On Thu, 30 Nov 2000, Chris Gray wrote:

> I knew I had seen a better copyright somewhere:
> 
> --
> Latest Release
> 
> New features in UnZip 5.41, released 16 April 2000: 
> 
> 
>  new BSD-like license 
>  
Yeah, that's why zip is in main. Unzip, however, still contains some
non-free code. Read the debian.copyright file.
--
"The Information Superhighway made it possible for the average person
to find out what some nerd thinks about Star Trek"

http://lit.compsoc.com/
http://www.litsu.ie/

GPG Fingerprint: B6C4 9E2B C62F 1B05 FC0D  F543 6800 67C7 FF5D 8291



Re: CDs

2000-11-30 Thread Glenn Becker

I got my 3 disk set (Potato) from XComputing for about $5.00 and they
have done fine by me through multiple Woody-Gotterdammerungs:

http://www.xcomputing.com

I have no affiliation with them.

G
_
 |
// G l e n n  B e c k e r|
 | 
// "Ah, how do you sleep?|  
// Ah, how do you sleep at night?"   |  
// -- John Lennon|
 | 
// [EMAIL PROTECTED]   | 
_|

At 7:06pm on Thu, 30 Nov 2000, urbanyon wrote:

> can anyone recommend a reliable source for CDs, and also what i need to
> order?  i have been struggling with a CD that i think may have been
> modified, and am just having more trouble than i need.  i don't mind
> buying one (hell, it's cheaper than m$), but i am a newbie and do not know
> what i need to get.  a link to a site (vendor or individual) that you are
> familiar with would be most appreciated.
> 
> OR...
> 
> i could also download to a windows machine (i have a decent 'net
> connection), and burn a CD, but the CD image page was confusing to me.  if
> i were to ftp enough files to get a box up and running (basically, i'm
> having trouble getting my network card recognized and therefore cannot
> apt-get any new stuff), what should i get?
> 
> thanks in advance...
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
> 
> 



Re: DESTROY (perl experts please) (fwd)

2000-11-30 Thread Wayne Topa

Subject: DESTROY (perl experts please) (fwd)
Date: Wed, Nov 29, 2000 at 05:05:25PM -0500

In reply to:Debian Ghost

Quoting Debian Ghost([EMAIL PROTECTED]):
> Subject: RE: DESTROY (perl experts please)
> 
> I don't seem to get the same reply back when I apt-cache search for the
> packages. Are my sources.list wrong for potato?
> 
> Man, I just don't get that list of perl stuff when I apt-cache search grep
> for perl. Maybe my sources are not what they should be:
> 
> deb http://spidermonkey.helixcode.com/distributions/debian unstable main
   Thats Woody, not Potato   
 Potato is stable _not_ unstable

-- 
Why do we want intelligent terminals when there are so many stupid
users?
___



Re: Printing in Woody

2000-11-30 Thread Wayne Topa

Subject: Printing in Woody
Date: Wed, Nov 29, 2000 at 03:27:53PM -0600

In reply to:Kelly Corbin

Quoting Kelly Corbin([EMAIL PROTECTED]):
> After upgrading to Woody, (and not changing anything)  I can't print 
> correctly anymore.  I used magicfilterconfig to setup /etc/printcap 
> using the HP laserjet4l driver.  The first page is like:
> %PS-Adobe-3.0
>   %%BoundingBox: 54 72 558 720
>   %%Creator: Mozilla (Netscape)
> 
> and then it prints about 100 blank pages with a banner page at the end. 
>   The banner page is perfectly normal:
> 
> Anyone else experienced this anomaly?

Yes, but on Potato.  Drove me nuts until I discovered it was Mozilla.
I had tried changing sizes, in the print function, and got the same
results you did.  I them tried the same thing with netscape 4.75 and 
it worked fine.  I then reloaded Mozilla and it worked correctly.  

-- 
It is easier to write an incorrect program than understand a correct
one.
___



Re: OT: nice'ing jobs

2000-11-30 Thread Dave Sherohman
On Thu, Nov 30, 2000 at 06:10:20PM -0500, Brian Stults wrote:
> However, if one more CPU-intensive job were
> added by user1, all jobs would be slowed proportionately.

Have you tested that this actually happens?  Empirical data is harder to
argue with than theory.

> My argument
> is that nice'ing the CPU-intensive jobs would cause the I/O-intensive
> job to run faster without slowing the CPU-jobs at all.  The reason is
> that the I/O-intensive job doesn't use much CPU-time.  So when it gets
> its turn on the CPU it doesn't use all of its allotted time.

> Generally speaking, is this correct in theory?

Nope.  When a process is blocked waiting for I/O, it's automatically put to
sleep until it can run again.  In theory, the I/O-intensive job won't receive
any CPU time at all until there's more data available for it to process (or,
on the output side, the hard drive catches up) and, when it gets a turn, it
will block and go back to sleep when it needs to wait for I/O again.

Niceness affects how frequently a task is allocated CPU time (and, sometimes,
the amount of CPU time it gets when it comes up).  How the task handles its
time once it comes up is not affected by niceness.

> It seems especially
> considerate to nice the CPU-intensive jobs, since that user gets more
> aggregate CPU time anyway since they're running multiple big jobs.

Agreed, and that's what nice is there for.  It is definitely a Good Thing to
use on big jobs, just not for the reason you think it is.

(Of course, I'm just a userland programmer and have never looked at the
kernel's scheduler, so my understanding of this may be slightly less than
perfect...)

-- 
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphillis. Good thing we have penicillin." - Matthew Alton
Geek Code 3.1:  GCS d? s+: a- C++ UL++$ P++>+++ L+++> E- W--(++) N+ o+
!K w---$ O M- V? PS+ PE Y+ PGP t 5++ X+ R++ tv b+ DI D G e* h+ r++ y+



Re: Help: Trouble updating Slink -> Potato

2000-11-30 Thread Dean

Hi Berthold:
Since no experts have spoken yet, I'll throw some
ideas out. If its' always perl-base giving the
trouble, can you try upgrading or downloading
this first? Sometimes when installing or up-grading
I've had to dpkg -i several times to get everything
working. hth Dean

Berthold Cogel wrote:


I NEED HELP!!!

Each time I try to update Debian Slink, the process is terminated
because of some problems with the perl packages. The update of perl
fails because perl-base is not configured. 
It doesn't matter how I update the system. It's the same problem with
'apt-get dist-upgrade', deselect-apt, via Internet or cdrom. 
After this bug happens, the whole system is in an undefinded state so

that I have to restore my backup.
Is there anybody, who can help?

Thanks in advance

Berthold Cogel




Re: Who is 'nobody'?

2000-11-30 Thread Henrique M Holschuh
On Thu, 30 Nov 2000, kmself@ix.netcom.com wrote:
> on Thu, Nov 30, 2000 at 04:37:47PM -0200, Henrique M Holschuh ([EMAIL 
> PROTECTED]) wrote:
> > 'nobody' is a 'system' user. User 'nobody' should never ever have ANY files
> > in the filesystem (if it does, that's probably a security hole), and should

> -rw-rw1 nobody   mail12487 Jun  2  2000
> /var/spool/mail/nobody

You should probably have nobody as an alias for root in your email
routing... (and root as an alias for someone else, actually).

> /tmp/.font-unix:
> total 0
> srwxrwxrwx1 nobody   nogroup 0 Nov 19 04:02 fs7100
> srwxr-xr-x1 root root0 Nov 19 04:02 fs7101

For Xfree86 3.3.6 I think one could crash an Xserver by killing the font
server. It's a good thing that unliking a socket won't kill the pipe of
anything that has opened it already... (AFAIK, that is).

Anyway, the above are not security risks. Do notice the sticky bit set in
the directory.

> I'm not sure that nobody should own *no* files.  But files owned by
> nobody *should* be minimized.  Note that nobody is just another

Yes, indeed. 'nobody' should own only files that in no way allow a security
compromise.

> In some cases, daemons run as 'nobody' (apache under RH, I believe), and
> it may be necessary to create temporary files as 'nobody'.
> 
> Other thoughts?

Filesystem races are a major problem, if the daemon running as 'nobody' does
not act in an extremely paranoid way when creating its temp files. This is a
rather common exploit technique.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


pgpn58RkpNKyw.pgp
Description: PGP signature


Re: Why non-free (was Re: unzip - again)

2000-11-30 Thread Chris Gray
> "kmself" == kmself   writes:

kmself> on Thu, Nov 30, 2000 at 04:52:51PM -0500, Chris Gray
kmself> ([EMAIL PROTECTED]) wrote:
>> > "Carel" == Carel Fellinger <[EMAIL PROTECTED]> writes:
>> 
Carel> unzip is not truly free, so it ain't part of Debian pure.
Carel> Try adding non-free to your default deb line in your
Carel> /etc/apt/sources.list:
>>  This is strange to me.  I've seen the unzip licence, and it
>> looks like one of the most free out there.  Could someone
>> explain why it's in non-free?
>> 
>> (Actually there's one in non-US, which I can understand because
>> of the encryption, and one in non-free which I can't
>> understand).

kmself> Which specific copyright?

kmself> /usr/doc/unzip-crypt/copyright stipulates several
kmself> restrictions on use in commercial software or software
kmself> sold for a profit.  This would tend to run against the
kmself> directives of the DFS guidelines.  Ergo: non-free.

I knew I had seen a better copyright somewhere:

--
Latest Release

New features in UnZip 5.41, released 16 April 2000: 


 new BSD-like license 
 
 new Novell Netware NLM port 
 support for testing/extraction of archives with more than 65535 files 
 integrated decryption source code 
 fix for broken attribute handling in VMS port 
--

This is from the google cached copy of
http://www.info-zip.org/pub/infozip/UnZip.html  

The info-zip.org site seems to be down right now, but the license
should be at 
http://www.info-zip.org/pub/infozip/license.html

Cheers,
Chris

-- 
Every child in America MUST get one of these things for Christmas or
Chanukah or Kwanzaa or Atheist Children Get Presents Day.
-- Dave Barry



Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread Chris Gray
> "kmself" == kmself   writes:

>>  The other root programs shouldn't be looking at memory other
>> than their own, or else they'd segfault.  The major thing with
>> memory-locking is that the memory never gets written to disk.

kmself> What about /proc/kcore or /dev/mem?

You're probably right about this (IANA security expert), but these
should only be readable by root.  Also, if you have a malicious root,
your private key isn't going to be all that safe anyway.

Cheers,
Chris

-- 
Every child in America MUST get one of these things for Christmas or
Chanukah or Kwanzaa or Atheist Children Get Presents Day.
-- Dave Barry



CDs

2000-11-30 Thread urbanyon
can anyone recommend a reliable source for CDs, and also what i need to
order?  i have been struggling with a CD that i think may have been
modified, and am just having more trouble than i need.  i don't mind
buying one (hell, it's cheaper than m$), but i am a newbie and do not know
what i need to get.  a link to a site (vendor or individual) that you are
familiar with would be most appreciated.

OR...

i could also download to a windows machine (i have a decent 'net
connection), and burn a CD, but the CD image page was confusing to me.  if
i were to ftp enough files to get a box up and running (basically, i'm
having trouble getting my network card recognized and therefore cannot
apt-get any new stuff), what should i get?

thanks in advance...



Re: startkde

2000-11-30 Thread David Bellows
Hello,

> Sorry, but I must ask again:
> How do I have KDE2 and Gnome on a potato system and start either or?
> 

to get KDE I type this whole line:
startx startkde

for Gnome I type:
startx gnome-session

Good luck,
David Bellows



Re: Command to determine resolution

2000-11-30 Thread Ray Percival
xwinvid

-- Original Message --
From: [EMAIL PROTECTED] (Robert D. Hilliard)
Date: 30 Nov 2000 17:26:02 -0500

> Is there a command available in Debian to determine what
>resolution is being used in an X session?
>
> Please Cc: me on any replies.
>
>Bob
>-- 
>   _
>  |_)  _  |_   Robert D. Hilliard  <[EMAIL PROTECTED]>
>  |_) (_) |_)  1294 S.W. Seagull Way   <[EMAIL PROTECTED]>
>   Palm City, FL  USA  GPG Key ID: 390D6559 
>   PGP Key ID: A8E40EB9
>
>
>
>-- 
>To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
>with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
>
>



Re: startkde

2000-11-30 Thread Robert Epprecht
Josh McKinney <[EMAIL PROTECTED]> writes:

> You need to have X started to run KDE.

Ah, I see (thought 'startkde' would do that )

>  You can edit your /etc/X11/xinit/xinitrc file, at the bottom it will have 
> the stuff about starting gnome probably, you can just comment out the gnome 
> part and put 'exec startkde'

Hmm, sounds easy, but I must confess to my shame, that I do not quite under-
stand how it is working. 
/etc/X11/xinit/xinitrc just does '. /etc/X11/Xsession' I do not understand
this X stuff well enough (and aren't fluent in bash syntax either) and
couldn't even find out, how Xsession finds out to start gnome...

While I can start gnome with 'startx' the only way I found to start KDE2
is to give startx a nonsense parameter ('startx nonsense'), which gives
me a X session with grey dotted background and a kind of terminal 'window'
where I can type 'startkde'. Still this does not look right ;-) (and the
KDE session can only be terminated by CTRL+ALT+BACKSPACE)

Sorry, but I must ask again: 
How do I have KDE2 and Gnome on a potato system and start either or? 

Thank you for your help,
Robert Epprecht.



Re: StartX error

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 10:54:04PM -, william Elling ([EMAIL PROTECTED]) 
wrote:
> i have read about 5 different online scripts trying to tell me the easiest 
> way to get the x windows to start and have tried a couple but i keep coming 
> back the problem of
> 
> Could not find config file!
> - Tired:
> /etc/XF86Config
> /usr/X11R6/lib/XF86Config.master
> /usr/X11R6/lib/XF86Config
> 
> Fatal server error:
> no Config file found!
> 
> 
> ive done the step by step instructions i have found with no luck at all So 
> if u can give me another way to do it without downloading all the files 
> again that would be greatly appericated thank you
> Will

This is the problem I experienced a few weeks back.  I had a previously
working X installation.  XFree86 3.3.6.

I had to create a symlink from /etc/X11/XF86Config to /etc/XF86Config.

IMO this is a bug.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpw166FaOq7e.pgp
Description: PGP signature


Re: CD to MP3 Util

2000-11-30 Thread John Griffiths


At 03:21 PM 11/30/2000 -0800, Aaron Brashears wrote:
>To give you yet another option, I use grip with cdparanoia and lame.

i've had VERY good results with that



Re: deleted root directory - fixed, actually a lib problem

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 10:46:31PM +0100, Thomas Halahan ([EMAIL PROTECTED]) 
wrote:
> Adam & Karsten,
> 
> thanks very much for your postings.  i am a fool for not backing up 
> better - i suppose i was waiting to buy a CD writer but didn't want 
> to spend.  
> 
> anyway hints from your emails gave me enough to go on.  i ran fsck to 
> repair.  you also mentioned libraries which i looked into, and sure 
> enough the contents to lib had been moved!
> 
> so i'm sorry to say i was obviously wrong - i had not deleted the 
> root (i don't think anyway) but somehow the essential system 
> libraries had been moved and hence 'ls' and other command did not 
> work.
> 
> i would not have been able to do this without your promt help.  thank 
> you very much. 

WRT libs.

For most programs, you're basically hosed if you manage to shitcan them,
which can happen more easily than you might think.  E.g.:  there's a
reason libraries are maintained as links to the actual files.

   $ rm oldlib; cp newlib oldlib

...fails if 'cp' requires lib.  I believe 'mv' is implemented as a 'rm;
cp', effectively, though I want to check sources.

   $ ln -sf newlib lib

...safely overwrites the symbolic link previously pointing to oldlib.
Which is how libraries are updated on an active system.

It's also helpful to keep a statically linked shell, such as sash, the
stand-alone shell, around.  It can do things when your libs are trashed
(or other system binaries are compromised, e.g.:  by a cracker).

You can also, as I indicated, do a fair bit with whatever command
interpreter you have currently loaded.  Once a program is in memory, it
stays there.  You can blow away your system and still have a running
shell [1].  Can't do much, unless you can get a filesystem mounted or
similar, but you're still active.

Understanding the workings of this can be helpful if you find yourself
in dire straits.

[1] I won't reveal how I came by this information.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpaS8yUnjAOE.pgp
Description: PGP signature


Re: Applying LFS patch kernel + glib

2000-11-30 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>,
Robin Collins <[EMAIL PROTECTED]> wrote:
>I want to apply the large file system (LFS) patch to 2.2.14 and
>glibc-.2.1.3.  I'm happy with the kernel bit but not the glibc.

You are using the patch from Andrea Archangeli right, from SuSe.
There is another one around that is not compatible with the 2.4.x
series while the one from Andrea is (well, AFAIK that is)

>Clearly I can get the source of Debian, apply the LFS patch and re-build,
>but I'm very wary of re-building glib for obvious reasons.

It takes a lot of time but it isn't rocket science.

>Alternatively, there's a .RPM for RedHat which I could install.

Getting that to work _would be_ rocket science ;)

>My question is: which is the lesser of these two evils?

Get the Andreas/suse LFS patch, build a new kernel, boot it.
Then get the glibc 2.2 sources from woody (I don't think 2.1.3 from
potato has all it takes for complete LFS support, I could be wrong)
and build it with the header files from the new kernel, or from the
most recent 2.4 kernel.

I haven't done this yet but I am playing with the idea...

>BTW, I must use 2.2.14 due to massive corruption problems with
>2.2.17/NFS/loop/crypto which I don't get with 2.2.14.

Tried 2.2.18pre24 yet? If you're still experiencing problems
with that version, now is the time to post your debug messages
to the linux-kernel mailinglist so that someone can fix it
before the real 2.2.18 gets released.

Mike.



Re: CD to MP3 Util

2000-11-30 Thread Aaron Brashears
To give you yet another option, I use grip with cdparanoia and lame.

On Thu, Nov 30, 2000 at 04:20:22PM -0600, Timothy C. Phan wrote:
> Hi ,
> 
>   Is there any utility to convert CD files to MP3 files on Linux?
>   TIA!



Re: OpenGL Segfaulting...

2000-11-30 Thread Evan Van Dyke
After tonight's update to woody, I'm still having all OpenGL apps
(including xlock) segf when they try to draw things.  xlock goes
so far as to terminate X and drop me back to xdm.  Other things such
as q3demo/ut just die with a segf after trying to draw to the screen.
I've tried rebooting a few times, tried several known-working kernel
versions/etc and still no luck.  Does anyone have any ideas?  Is anyone
else experiancing this?

--Evan

--
Evan Van Dyke   E-mail: [EMAIL PROTECTED]
Page: [EMAIL PROTECTED]  ICQ#: 15442232
DNRC's Minister of Lost Internet Packets.   O-
Amateur Radio Call Sign:  KB8PVEElder ResCon at Northwestern

GCS/S d+(-) s:+ a--- C UH+I++LS++V P+ L+++> E W++ N++
w-- O- M-- !V PS+ PE+ Y+ PGP t+ 5+++ X+ R+ tv+ b+++ DI D+ g e h !r
y-

   "Quoth the Raven...  'Nevermore!'" --Edgar Allen Poe
   "I'll bet that all you can do is watch the ball bounce around the
screen.
  --Dilbert to Management



Re: recommend a secure shell client for Windows

2000-11-30 Thread Cory Snavely
I'll second that. I tried putty and ttssh both and came away with ttssh.
ttssh does port forwarding, which is very convenient for X, ftp, etc.

- Original Message -
From: "Slin Lee" <[EMAIL PROTECTED]>
To: "Silver" <[EMAIL PROTECTED]>; 
Sent: Thursday, November 30, 2000 7:47 AM
Subject: Re: recommend a secure shell client for Windows


> terraterm with the SSH plugin works very well with exceed.
>
> Slin
>
>
> - Original Message -
> From: "Silver" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, November 30, 2000 8:09 PM
> Subject: Re: recommend a secure shell client for Windows
>
>
> > Ok, everyone is saying putty is working fine...
> > I use SecureCRT (http://www.vandyke.com)
> > which does also nice linux handling with a color terminal and stuff.
> >
> > Silver
> >
> > - Original Message -
> > From: "Harry Henry Gebel" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Thursday, November 30, 2000 11:27 AM
> > Subject: recommend a secure shell client for Windows
> >
> >
> > > A friend of mine wants me to set up an account for him on our server,
> and
> > > since I do not allow telnet logins he needs a Windows SSH client. I
> > checked
> > > around and there are quite a number of them out there, can anybody
> > > recommend which is the best? I do not have a Windows machine to test
> them
> > > out on, but I figured this must be a pretty common problem so somebody
> > must
> > > have a good idea of which one is the best. Once he has attained
> > > proficiency on the command line I want him to be able to use X, so it
> > would
> > > be nice if it is a client that supports port forwarding (of course at
> that
> > > point I will have to find a Windows X server for him, but that is a
> > problem
> > > I'll deal with when it comes up, maybe by then he'll be willing to put
> > > Linux on one of his machines.)
> > >
> > > --
> > > Harry Henry Gebel, ICQ# 76308382
> > > West Dover Hundred, Delaware
> >
> >
> >
> > --
> > To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> > with a subject of "unsubscribe". Trouble? Contact
> [EMAIL PROTECTED]
> >
> > 
> > Get your FREE personal .com domain name and
> > NAMEzero Personal Portal at: http://www.namezero.com.
> > For customer service, mailto:[EMAIL PROTECTED]
> >
> >
>
>
> --
> To UNSUBSCRIBE, email to [EMAIL PROTECTED]
> with a subject of "unsubscribe". Trouble? Contact
[EMAIL PROTECTED]
>



Re: Gnome Sound Problems Continued

2000-11-30 Thread Bek Oberin
Josh McKinney wrote:
> I know that your problem with the gnome sounds is that esd and the
> gnome sounds are fighting over the sound card basically.  I can't
> help you much more than that, I just don't use sounds with gnome,
> but it may help.

If anybody knows how to get gnome to co-exist with esd, I'd be
very happy to hear about it.  I don't use sound with gnome
either, for the same reason.


bekj

-- 
: --Hacker-Neophile-Eclectic-Geek-Grrl-Queer-Disabled-Boychick--
: [EMAIL PROTECTED]   http://www.tertius.net.au/~gossamer/
: I am no longer afraid of storms, for I am learning how to sail
: my own ship.  -- Louisa May Alcott



Re: StartX error

2000-11-30 Thread Philipp Schulte
On Thu, Nov 30, 2000 at 10:54:04PM -, william Elling wrote: 

> Fatal server error:
> no Config file found!
> 
> 
> ive done the step by step instructions i have found with no luck at all So 
> if u can give me another way to do it without downloading all the files 
> again that would be greatly appericated thank you

Just run XF86Setup (maybe have to install it) and this tool will
create a XF86Config for you. 
Phil



Command to determine resolution

2000-11-30 Thread Robert D. Hilliard
 Is there a command available in Debian to determine what
resolution is being used in an X session?

 Please Cc: me on any replies.

Bob
-- 
   _
  |_)  _  |_   Robert D. Hilliard  <[EMAIL PROTECTED]>
  |_) (_) |_)  1294 S.W. Seagull Way   <[EMAIL PROTECTED]>
   Palm City, FL  USA  GPG Key ID: 390D6559 
   PGP Key ID: A8E40EB9




OT: nice'ing jobs

2000-11-30 Thread Brian Stults
Sorry for the off-topic post, but I'd like to draw on the general
computing expertise of this group.

Where I work, we have a unix server with 4 CPU's.  There is not a "nice"
police at our center, and I have been trying to make the case to the
sysadmin that there should be.  Could someone please review my brief
argument and tell me if I am incorrect in my thinking?  Here's an
example...

Here is some truncated ps output:

USER   PID %CPU %MEMSTIME NI COMM
   user1 2573 24.6  0.3 10:52:45 20 EMMIX
   user1  1067 24.3  1.0 09:33:22 20 EMMIX
   user1  2636 24.1  0.9 10:58:42 20 EMMIX
   user2  7153 20.4  0.2 17:35:39 20 SPSS

The first three jobs are CPU-intensive and will run for about 24 hours. 
The fourth job is I/O intensive and will run for maybe 2 hours.  Since
there are four processors, at this point the jobs are not going to
interfere with each other.  However, if one more CPU-intensive job were
added by user1, all jobs would be slowed proportionately.  My argument
is that nice'ing the CPU-intensive jobs would cause the I/O-intensive
job to run faster without slowing the CPU-jobs at all.  The reason is
that the I/O-intensive job doesn't use much CPU-time.  So when it gets
its turn on the CPU it doesn't use all of its allotted time.  However,
it still has to wait an equal amount of time to get its turn at the CPU
again.

Generally speaking, is this correct in theory?  It seems especially
considerate to nice the CPU-intensive jobs, since that user gets more
aggregate CPU time anyway since they're running multiple big jobs.

Thanks,
Brian

-- 

Brian J. Stults
Doctoral Candidate
Department of Sociology
University at Albany - SUNY
Phone: (518) 442-4652  Fax: (518) 442-4936
Web: http://www.albany.edu/~bs7452



Re: StartX error

2000-11-30 Thread Svante Signell
I think it should be in /etc/X11/

william Elling writes:
 > i have read about 5 different online scripts trying to tell me the easiest 
 > way to get the x windows to start and have tried a couple but i keep coming 
 > back the problem of
 > 
 > Could not find config file!
 > - Tired:
 > /etc/XF86Config
 > /usr/X11R6/lib/XF86Config.master
 > /usr/X11R6/lib/XF86Config
 > 
 > Fatal server error:
 > no Config file found!
 > 
 > 
 > ive done the step by step instructions i have found with no luck at all So 
 > if u can give me another way to do it without downloading all the files 
 > again that would be greatly appericated thank you
 > Will
 > 
 > 
 > _
 > Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com
 > 
 > 
 > -- 
 > To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
 > with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: CD to MP3 Util

2000-11-30 Thread David Z Maze
Timothy C Phan <[EMAIL PROTECTED]> writes:
TCP> Is there any utility to convert CD files to MP3 files on Linux?

I highly recommend abcde.  You'll have to provide your own encoder.

On Woody, abcde defaults to producing OggVorbis files; it's the same
concept as MP3, but free of nasty patent problems.  (See
http://www.xiph.org/ogg/vorbis/ for details on both Vorbis and the
patent issues with MP3.)  The current version of xmms has a Vorbis
player, and ogg123 works for the command-line.

-- 
David Maze [EMAIL PROTECTED]  http://www.mit.edu/~dmaze/
"Theoretical politics is interesting.  Politicking should be illegal."
-- Abra Mitchell



Re: CD to MP3 Util

2000-11-30 Thread J. Reilink
"Timothy C. Phan" wrote:
> 
> Hi ,
> 
>   Is there any utility to convert CD files to MP3 files on Linux?
>   TIA!
> 

XMMS can
(look for plugins, configs... +p if I'm not mistaken)

Digital Overdrive

-- 
 .~.   http://www.dsinet.org/hackfaq | http://www.dsinet.org
 /V\   [EMAIL PROTECTED]
/( )\   
^^-^^  "Microsoft: We make virii work!"



Re: Gnome Sound Problems Continued

2000-11-30 Thread Josh McKinney

I know that your problem with the gnome sounds is that esd and the gnome sounds 
are
fighting over the sound card basically.  I can't help you much more than that, 
I just 
don't use sounds with gnome, but it may help.

On approximately Tue, Nov 28, 2000 at 12:08:29PM -0500, Arlen Carlson wrote:
> Well I'm making progress on my Gnome sound problem...seems that esd is at
> fault.  If I kill the esd process I get my sound back under Gnome.
> 
> The big question is why?  And how did this problem start?  How do I prevent 
> esd
> from running under Gnome, or do I need it?
> 
> ---
> Arlen Carlson <[EMAIL PROTECTED]>
> 
> You will have long and healthy life.
> 
> 
> This message was sent by XFmail (Linux)
> 
> -o)
> /\\
>_\_v
> 
> The penguins are coming...
>  the penguins are coming...
> 
> 
> 
> -- 
> To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
> with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



StartX error

2000-11-30 Thread william Elling
i have read about 5 different online scripts trying to tell me the easiest 
way to get the x windows to start and have tried a couple but i keep coming 
back the problem of


Could not find config file!
- Tired:
   /etc/XF86Config
   /usr/X11R6/lib/XF86Config.master
   /usr/X11R6/lib/XF86Config

Fatal server error:
no Config file found!


ive done the step by step instructions i have found with no luck at all So 
if u can give me another way to do it without downloading all the files 
again that would be greatly appericated thank you

Will


_
Get more from the Web.  FREE MSN Explorer download : http://explorer.msn.com



Re: deleted root directory - fixed, actually a lib problem

2000-11-30 Thread Thomas Halahan
Adam & Karsten,

thanks very much for your postings.  i am a fool for not backing up 
better - i suppose i was waiting to buy a CD writer but didn't want 
to spend.  

anyway hints from your emails gave me enough to go on.  i ran fsck to 
repair.  you also mentioned libraries which i looked into, and sure 
enough the contents to lib had been moved!

so i'm sorry to say i was obviously wrong - i had not deleted the 
root (i don't think anyway) but somehow the essential system 
libraries had been moved and hence 'ls' and other command did not 
work.

i would not have been able to do this without your promt help.  thank 
you very much. 

regards tom



CD to MP3 Util

2000-11-30 Thread Timothy C. Phan
Hi ,

  Is there any utility to convert CD files to MP3 files on Linux?
  TIA!

---
tcp



Wierd ISP Email Processing

2000-11-30 Thread Steve Witt

I just changed ISPs, to Flashcom, and have noticed that they seem to have
a strange email processing system. I have a potato box using exim as my
email MTA. The email arrangement is pretty standard for ISP email, I get
mail via POP3 using fetchmail from a Flashcom POP3 server and send mail
using SMTP to a different (at least hostname) Flashcom SMTP server.

I have been able to send some email successfully through their
outgoing SMTP server. But last night I received 3 rejected messages from
their mail server. The text of one of the messages follows:

-

Date: Wed, 29 Nov 2000 21:51:43 -0800
From: Mail Delivery System <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Mail delivery failed: returning message to sender

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. The following address(es) failed:

  [EMAIL PROTECTED]:
SMTP error from remote mailer after RCPT TO:<[EMAIL PROTECTED]>:
host smtp.flashcom.net.criticalpath.net [209.228.150.115]:
553 To send mail, first check your mail with a valid POP account; this 
prevents unauthorized SPAM relaying. (#5.7.1)

-- This is a copy of the message, including all the headers. --

Return-path: <[EMAIL PROTECTED]>
Received: from sawitt by electra.flashcom.net with local-esmtp (Exim 3.12 #1 
(Debian))
id 141Mcw-00011z-00; Wed, 29 Nov 2000 21:51:26 -0800
Date: Wed, 29 Nov 2000 21:51:26 -0800 (PST)
From: Steve Witt <[EMAIL PROTECTED]>
To:  <[EMAIL PROTECTED]>
Subject: Re: Address verification request
In-Reply-To: <[EMAIL PROTECTED]>
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

Form-Type: [List-Manager-Commands]
Command: [auth 421fae58]
Command: [subscribe <[EMAIL PROTECTED]>]
Command: [end]

-

It appears that they are doing some processing to relate checking mail
with sending mail. I believe there is some time interval, on the order of
minutes, that one must check their POP mail account before sending SMTP
mail or else they reject the sending email message. I've called their
customer service and have gotten absolutely nowhere with them. I can't get
them to address the error message that is shown above, they only want to
talk about how Outlook is configured. I'm afraid this is going to be a
long drawn-out battle with them.

Anyway, I've never run across anything like this before, and was wondering
if anyone had, and whether there was a solution for it or not. I looked
through the exim docs and didn't see any configuration that would seem to
accomplish this.

Thanks...




Re: Harddisk controller

2000-11-30 Thread Josh McKinney
>From my personal experience I have not been able to get the kernel patches for 
>2.2* to work.  
The patches are not so great backports from the 2.4* kernels, so the easiest 
way to get the 
card to work with my experience is to use 2.4* kernels, I have been using them 
with the card 
since around 2.4.0test1 or so, and it works out great for me, but your luck may 
be different 
with the test kernels.  Just my 2 cents worth.



Re: OT: port scan

2000-11-30 Thread Richard Cobbe
Lo, on Wednesday, November 29, brian moore did write:

> On Tue, Nov 28, 2000 at 05:38:12PM -0600, Richard Cobbe wrote:
> > 
> > Well, they can be.  Connections to TCP ports 137, 138, and 139 are part of
> > Windows file- and printer-sharing.  I don't know all that much about how
> > SMB works, but I'm fairly sure there are broadcasts to these ports
> > involved, primarily in setting up the Network Neighborhood.
> 
> Yes, and here are even worms for Windows that go probing looking for
> open SMB shares to write themselves into.
> 
> > So, if you happen to be on a network (like, say, a cable modem local loop)
> > with some Windows PCs that have file/print sharing turned on, these may not
> > represent a security problem.  (Well, for *you*, anyway.)
> 
> Or if you happen to be on a network 'near' (typically within a dozen
> /24's or so) of someone with one of the above worms running

This doesn't surprise me in the least.  However:

1) I don't think there's really any way to distinguish one of these worms
   from a legit SMB broadcast, at least not with the level of detail that
   ipchains logging gives you.  (I'm not even sure that a packet
   sniffer/protocol analyzer like ethereal would allow you to distinguish
   between the two, but then I don't know anything about the details of the
   SMB protocol.)

2) This could only affect a Linux user if they've got samba installed and
   running on their machine.  Since they would have to have some sort of
   ipchains firewalling stuff to get the logs in the first place, then
   blocking SMB traffic to/from the outside world is trivial.  (This is why
   I claimed that such probes were not necessarily a security problem for a
   Linux machine---Windows machines are another story altogether.)

I can't think of any legitimate reason to allow SMB traffic to/from the
outside world.  VPNs are fine, but that's different.

Richard



Why non-free (was Re: unzip - again)

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 04:52:51PM -0500, Chris Gray ([EMAIL PROTECTED]) wrote:
> > "Carel" == Carel Fellinger <[EMAIL PROTECTED]> writes:
> 
> Carel> unzip is not truly free, so it ain't part of Debian pure.
> Carel> Try adding non-free to your default deb line in your
> Carel> /etc/apt/sources.list:
> 
> This is strange to me.  I've seen the unzip licence, and it looks like
> one of the most free out there.  Could someone explain why it's in
> non-free?  
> 
> (Actually there's one in non-US, which I can understand because of the
> encryption, and one in non-free which I can't understand).

Which specific copyright?

/usr/doc/unzip-crypt/copyright stipulates several restrictions on use in
commercial software or software sold for a profit.  This would tend to
run against the directives of the DFS guidelines.  Ergo:  non-free.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpm7wEWcxAWf.pgp
Description: PGP signature


Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread kmself
on Thu, Nov 30, 2000 at 04:36:18PM -0500, Chris Gray ([EMAIL PROTECTED]) wrote:
> > "kmself" == kmself   writes:
> 
> kmself> I'd also confirmed this on another box.  Though I can
> kmself> never remember what the [EMAIL PROTECTED]&*() mode bit is for 
> SUID.
> kmself> '4577' was what I was looking for, IIRC.
> 
> 4755.  Though you should probably use suidregister (see
> /var/lib/dpkg/info/gnupg.postinst for how to do it).
> 
> >> Applications with access to gnupg's memory are either running
> >> as root or as the user owner of the gnupg process. You must
> >> trust root, and I don't think that a bad process running as you
> >> would read gnupg's memory (strace the shell and hook exec, for
> >> example).
> 
> >> The issue is the swap; locked pages are never swapped out, so
> >> the disk never seeks them. If someone could pick over your swap
> >> then they could pickout sectors with high-entropy and possibly
> >> they would be your privkey.
> 
> kmself> So: the locked pages are still accessible to other root
> kmself> processes, but not to user-land programs, and they're not
> kmself> swapped to disk?
> 
> The other root programs shouldn't be looking at memory other than
> their own, or else they'd segfault.  The major thing with
> memory-locking is that the memory never gets written to disk.

What about /proc/kcore or /dev/mem?

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpEZyOwu53Dl.pgp
Description: PGP signature


Re: potato-n-woody side by side?

2000-11-30 Thread Nick Croft
Glenn,
I also lost my backspace key in the process. 
In desperation I rang a friend who logged in to my box and offered advice.

It seems that you need to nudge apt to keep going with installation. It
comes to an end, you start to use your machine and then find some packages
won't work.

Have a look in /var/cache/apt/archives. See if the package is there. If
you need it straight away, then just dpkg -i .deb . Otherwise
issue:  apt-get dist-upgradeagain to start the ball rolling.
Eventually you get there. 

I spent about 30 hours on the net in all, ftping woody by way of apt-get.
__
If you're having trouble with the backspace key - so am I. It may be a
quirk of xfree86-4.
You can fix it with
xmodmap -e "keycode 22 = BackSpace"
which is case sensitive.

This works for the duration of the session. You can make it permanent by
writing a .Xmodmap file for your user, containing just the line
keycode 22 = BackSpace

No doubt the gurus will notice this problem which lots of people are
getting at the moment.

Nick



Re: gpg: "Warning: using shared memory" - SUID?

2000-11-30 Thread Chris Gray
> "kmself" == kmself   writes:

kmself> I'd also confirmed this on another box.  Though I can
kmself> never remember what the [EMAIL PROTECTED]&*() mode bit is for SUID.
kmself> '4577' was what I was looking for, IIRC.

4755.  Though you should probably use suidregister (see
/var/lib/dpkg/info/gnupg.postinst for how to do it).

>> Applications with access to gnupg's memory are either running
>> as root or as the user owner of the gnupg process. You must
>> trust root, and I don't think that a bad process running as you
>> would read gnupg's memory (strace the shell and hook exec, for
>> example).

>> The issue is the swap; locked pages are never swapped out, so
>> the disk never seeks them. If someone could pick over your swap
>> then they could pickout sectors with high-entropy and possibly
>> they would be your privkey.

kmself> So: the locked pages are still accessible to other root
kmself> processes, but not to user-land programs, and they're not
kmself> swapped to disk?

The other root programs shouldn't be looking at memory other than
their own, or else they'd segfault.  The major thing with
memory-locking is that the memory never gets written to disk.

Chris


-- 
Every child in America MUST get one of these things for Christmas or
Chanukah or Kwanzaa or Atheist Children Get Presents Day.
-- Dave Barry



Re: unzip - again

2000-11-30 Thread Chris Gray
> "Carel" == Carel Fellinger <[EMAIL PROTECTED]> writes:

Carel> unzip is not truly free, so it ain't part of Debian pure.
Carel> Try adding non-free to your default deb line in your
Carel> /etc/apt/sources.list:

This is strange to me.  I've seen the unzip licence, and it looks like
one of the most free out there.  Could someone explain why it's in
non-free?  

(Actually there's one in non-US, which I can understand because of the
encryption, and one in non-free which I can't understand).

Thanks,
Chris

-- 
Every child in America MUST get one of these things for Christmas or
Chanukah or Kwanzaa or Atheist Children Get Presents Day.
-- Dave Barry



libmng problem

2000-11-30 Thread Frank Frijns
Hi,

After installing Qt I'm trying to install KDE.

After collecting all the needed packages (debian; e.g. .deb) I fail to
collect all needed ones. One of them is libmng.
I downloaded the .tar.gz versions of the few missing packages. So far,
so good. However the package libmng_0.9.2.org.tar.gz won't gunzip! It
still keeps calling "unexpected end of file".
I downloaded this one from 5 different sites, still the same result. I
worked this package with tar zxvf. It constructs the directory but
breakes off in the middle: unexpected EOF.

KDE (Kdebase for instance) won't install because of dependencies with
this package. Has anyone a good package (this failing package is 168 Kb)
or, even better, a .deb version of this library.

Thanx,
Frank.




Re: Wrong message - Was: How to install LAMP the Debian way

2000-11-30 Thread Rino Mardo
On Fri, Dec 01, 2000 at 08:16:07AM +1100 or thereabouts, John Griffiths wrote:
> >Fatal error: Call to undefined function: mysql_connect() in
> >/var/www/test2.php on line 15
> 
> apt-get install php4-mysql
> 

wooo! thanks alot.  now off to lamp land...

btw, in case someone is also looking for the same info here's what i
did to install lamp the debian way:

apt-get install apache mysql-server mysql-client php4-mysql

(well actually the last one was "php4" which was wrong)

-- 



Key fingerprint = 9DE1 5825 77B4 FF45 7485  D3EB DCCF DE48 09B6 4426


"Who's watching the watchmen?"



Re: ftp on a non standard port

2000-11-30 Thread Daniel de los Reyes
On Jue 30 Nov 2000 22:20, Alexey Vyskubov wrote:
> On Thu, Nov 30, 2000 at 10:09:49PM +0100, Daniel de los Reyes wrote:
> > > /etc/proftpd.conf or something). I have done that over here, with no
> > > problems.
> >
> > I am using wu-ftp and I can't find any place to set the port on config
> > files under /etc/wu-ftp.
>
> From man wu-ftpd:
>
>The  -p  and  -P options override the port numbers used by
>the daemon.  Normally, the daemon determines the port num-
>bers by looking in /etc/services for "ftp" and "ftp-data".
>If there is no /etc/services entry for "ftp-data" and  the
>-P  option is not specified, the daemon uses the port just
>prior to the control connection port.  The  -p  option  is
>only available if running as a standalone daemon.

I tryed to set this option on /etc/init.d/wu-ftp but it had no effect
-- 
__
Daniel de los Reyes
S2-Selling Soluciones
Valencia Spain
e-mail: [EMAIL PROTECTED]
Powered by Debian GNU-Linux 2.2r0
__



umlauts-in-terminal/console-problem after upgrading to woody

2000-11-30 Thread Michael Mertins
Hi,
I have a large problem getting umlauts to work since I upgraded to woody.
I made the XFree4.0-Server run although I use a voodoo3-2000. Caused me
some problems etc. but it works now. Aswell I got that new locales-package. I
edited /etc/locale.gen and generated de_DE aswell I edited
/etc/X11/XF86Config-4 and changed us to de and 104 keys to 102. Now I have a 
german keymap.
But still _no_ Umlauts like (äöü) under any terminal or console. Neither
without nor under X.
I already asked around in debian-chat but the only thing they could tell
me was: export LC_ALL=de_DE and then restart bash. Which really made Umlauts
work under a single console/terminal, but not systemwide!
How can I apply this systemwide now?
Greetings,
Michael

-- 
Sent through GMX FreeMail - http://www.gmx.net



Re: xplanet: error while loading shared libraries: libdpstk.so.1

2000-11-30 Thread kmself
on Wed, Nov 29, 2000 at 10:41:30AM -0800, kmself@ix.netcom.com 
(kmself@ix.netcom.com) wrote:
> I'm getting the following error after my latest Woody dist-upgrade
> yesterday.  Anyone else?
> 
> xplanet: error while loading shared libraries: libdpstk.so.1: cannot
> open shared object file: No such file or directory
> 
> ...attempting to read a PNG file

This was resolved by running:

   $ dpkg --configure --pending

In some cases, additional apt-get dist-upgrade (s) may be necessary.

-- 
Karsten M. Self  http://www.netcom.com/~kmself
 Evangelist, Zelerate, Inc.  http://www.zelerate.org
  What part of "Gestalt" don't you understand?  There is no K5 cabal
   http://gestalt-system.sourceforge.net/http://www.kuro5hin.org


pgpBe1zyaUIyg.pgp
Description: PGP signature


Re: ftp on a non standard port

2000-11-30 Thread Sven Hoexter
On Thu, Nov 30, 2000 at 10:09:49PM +0100, Daniel de los Reyes wrote:
> On Jue 30 Nov 2000 22:01, Frederik Vanrenterghem wrote:
> > On Thu, 30 Nov 2000, Daniel de los Reyes wrote:
> > > I need to set up an ftp server on a non standard port. If I change the
> > > entry in /etc/services I get it to listen in the required port, but my
> > > client ftp sessions from this machine also make their requests to the
> > > non-standard port, so they fail.
> >
> > Just specify the port in the configuration file of your ftpd (eg
> > /etc/proftpd.conf or something). I have done that over here, with no
> > problems.
> I am using wu-ftp and I can't find any place to set the port on config files 
> under /etc/wu-ftp.
> 
> By the way is there something better than wu-ftp?
Hehe, look at www.proftpd.net and find a very nice ftpd!
Simple config, well documented, very stable!
Hint: Use a CVS checkout (it's stable) cause the rc2 had 2 bugs (which
are important). PASV and chmod won't work.

Cu,
Sven

-- 
ACHTUNG! Aktuelle e-mail Adresse ist [EMAIL PROTECTED]
==
One Unix to rule them all, One Resolver to find them,
One IP to bring them all and in the zone to bind them



PSGML problems since upgrade

2000-11-30 Thread Harry Henry Gebel
Ever since I upgraded from Mandrake to Debian I have been getting the
following errors from XEmacs psgml-mode:

Docbook documents:

/usr/lib/sgml/entities/ISOamsa line 11 col 22 entity ISOamsa
/usr/lib/sgml/entities/docbook-3.1/dbcent.mod line 54 col 9 entity dbcent
/usr/lib/sgml/dtd/docbook-3.1/docbook.dtd line 69 col 8 entity BOOK
/home/hgebel/development/PyBackup/doc/doctest.sgml line 1 col 54 
Delimiter MDC (>) expected; at: "[cularr]"--

HTML documents:

/usr/lib/sgml/entities/HTMLlat1 line 12 col 22 entity HTMLlat1
/usr/lib/sgml/dtd/html-4.01-loose.dtd line 174 col 10 entity HTML
/home/hgebel/development/PyBackup/doc/test.html line 1 col 62 
Delimiter MDC (>) expected; at: " " -- 

I reformated all of my partitions except /home , so all of the files in
other partitions are installed from .deb packages. Since I kept my old home
directory I thought it might be a problem with an old configuration file;
but I created a new user and got the same problem when logged in as that
user. 

Does anyone have an idea what is going on here? I wish I knew more about
psgml (and sgml in general) internals so I could figure it out on my own,
but I don't.

-- 
Harry Henry Gebel, ICQ# 76308382
West Dover Hundred, Delaware



Re: ftp on a non standard port

2000-11-30 Thread Alexey Vyskubov
On Thu, Nov 30, 2000 at 10:09:49PM +0100, Daniel de los Reyes wrote:

> > /etc/proftpd.conf or something). I have done that over here, with no
> > problems.
> I am using wu-ftp and I can't find any place to set the port on config files 
> under /etc/wu-ftp.

>From man wu-ftpd:

   The  -p  and  -P options override the port numbers used by
   the daemon.  Normally, the daemon determines the port num-
   bers by looking in /etc/services for "ftp" and "ftp-data".
   If there is no /etc/services entry for "ftp-data" and  the
   -P  option is not specified, the daemon uses the port just
   prior to the control connection port.  The  -p  option  is
   only available if running as a standalone daemon.

-- 
Alexey Vyskubov
(at home)
Hi! I'm a .signature virus! Copy me into your ~/.signature to help me spread!



Re: Wrong message - Was: How to install LAMP the Debian way

2000-11-30 Thread John Griffiths
>Fatal error: Call to undefined function: mysql_connect() in
>/var/www/test2.php on line 15

apt-get install php4-mysql



  1   2   3   >