Re: How do packages that modify iptables rules prevent race conditions?

[Pascal Hambourg]

Patrick Schleizer a écrit :
> 
> as I just learned on the mailing list, that at least the packages
> fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
> modify iptables rules...

Firewall managers such as ufw, shorewall, firestarter...
Custom iptables scripts.
IDS such as portsentry.
"Port knocking" daemons such as knockd.

> Is there a chance for race conditions?

Plenty.

> I.e. two packages trying to add
> iptables rules at the same time and thereby failing to do so?

Yes, or mixing up their rules resulting in unpredictable results.

> What is the proper mechanism to add iptables rules [for packages] to
> avoid such race conditions?
> 
> Is using 'iptables --wait' sufficient or something else?

No it's not. You must also make sure that the rules created by each
program don't disrupt the rules created by the others.

Re: How do packages that modify iptables rules prevent race conditions?

[Erwan David]

Le 12/11/2015 20:47, Pascal Hambourg a écrit :
> Patrick Schleizer a écrit :
>> as I just learned on the mailing list, that at least the packages
>> fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
>> modify iptables rules...
> Firewall managers such as ufw, shorewall, firestarter...
> Custom iptables scripts.
> IDS such as portsentry.
> "Port knocking" daemons such as knockd.
>
>> Is there a chance for race conditions?
> Plenty.
>
>> I.e. two packages trying to add
>> iptables rules at the same time and thereby failing to do so?
> Yes, or mixing up their rules resulting in unpredictable results.
>
>> What is the proper mechanism to add iptables rules [for packages] to
>> avoid such race conditions?
>>
>> Is using 'iptables --wait' sufficient or something else?
> No it's not. You must also make sure that the rules created by each
> program don't disrupt the rules created by the others.
>
>

For fail2ban I prefer to use ipset and only modify the blocked set
without changing the rules themselves

Can't start VM after latest kernel update: weird mount failure

[Ross Boylan]

After the recent kernel updates one of my virtual machines won't start.
GRUB runs and messages indicate the kernel is loaded and the initial
ramdisk is loading.  Then it says it can't find the root device (identified
by correct UUID, though it wouldn't be visible until the logical volumes
are activated).  In busybox the logical volumes are visible, but when I
make a directory and attempt to mount to it I get
mount: mounting /dev/markov02/root on r failed: No such file or directory.
The same thing happens if I try to mount the boot partition (/dev/vda1).
This is weird because both the device and the directory are present.  I can
change into the directory and create a file in it

When I attach the virtual hard drives to another VM I have no problem
mounting either the boot partition or the logical volume.

I would appreciate any assistance figuring out what's going on or what I
can do to correct it.

If my initrd got corrupted, is there a way to regenerate it?

Thanks.
Ross Boylan


Details:
The host and guest are running Debian 7.9 wheezy.  I have another wheezy VM
that is fine, and a jessie VM that I used to read the virtual disks.  The
virtual disks look like this (vdc=vda on original vm; vdd=vdb on original):
Model: Virtio Block Device (virtblk)
Disk /dev/vdc: 21.0GB
Sector size (logical/physical): 512B/512B
Partition Table: msdos
Disk Flags:

Number  Start   End SizeType  File system  Flags
 1  1049kB  256MB   255MB   primary   ext2 boot
 2  257MB   21.0GB  20.7GB  extended
 5  257MB   21.0GB  20.7GB  logicallvm


Model: Virtio Block Device (virtblk)
Disk /dev/vdd: 16.1GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:

Number  Start   End SizeFile system  Name Flags
 1  10.5MB  16.1GB  16.1GB   primary  msftdata

vdc5 and vdd1 are part of a volume group markov02 which includes the root
file system and swap space.  vdc1 appears to have /boot; the timestamps of
its files indicate it was recently updated.

Running using kvm under libvirt.  The virtual disks are logical volumes on
the host system. amd64 architecture.

Iceweasel + NoScript: Google search results href anomaly

[Safwat]

I am running NoScript + Iceweasel, and I observed something weird.
Consider a Google search result which has this "a href" value:

https://www.google.com/url?q=https://en.wikipedia.org/wiki/Hello_(Adele_song)=U=0CCsQFjAIahUKEwjPuq3H34vJAhWDWhQKHW7eCbA=AFQjCNHJRKExeuRwwdFmAKkJ6dH7qv_TeQ

When I hover my mouse over it, the value instantly changes to
https://en.wikipedia.org/wiki/Hello_%28Adele_song%29

This should be impossible with NoScript, nothing should be able to
modify the DOM. Google is not white-listed.

What's going on?

[serveur Jessie LTSP] clé gpg impossible à récupérer derrière firewall

[Christophe De Natale]

Bonsoir à vous,

J’ai donc mis une solution en place dans mon projet pour école primaire : un 
serveur ipfire et un serveur LTSP sous Jessie.
La configuration demande quelques peaufinages mais l’ensemble fonctionne bien.

Cet après-midi, j’ai voulu mettre Jessie à jour et j’ai été confronté à un 
problème de récupération de la clé gpg, désolé, je n’ai pas noté le message qui 
disait : « clé non disponible … [NODATAS]
Ceci a été contourné en ajoutant le domaine « debian.fr » ainsi que les url de 
« sources.list » dans les sites de la liste blanche des domaines et url 
autorisées de Squid qui est implémenté dans ipfire.

Quelques recherches donnaient une piste sur la modification de bashrc ou 
/etc/apt/apt.conf en y ajoutant le protocole + nom du serveur + port utilisé 
mais cela n’a pas fonctionné.
Les logs du firewall ne font rien, apparaître rien sur l’ip du serveur Debian.

Une idée svp ? Je laisse tel quel dans la config Squid ou ce n’est pas correct 
et il vaut mieux se pencher sur la config du firewall afin que ça passe ?

Merci et bonne soirée,

Christophe De Natale

Re: How do packages that modify iptables rules prevent race conditions?

[John Hasler]

Patrick Schleizer writes:
> I.e. two packages trying to add iptables rules at the same time and
> thereby failing to do so?

They can't do that as each call to iptables locks the table be operated
on.  Without -w iptables exits when it can't get the lock.  With -w it
waits.

Pascal Hambourg writes:
> Yes, or mixing up their rules resulting in unpredictable results.

Yes, that could happen if the programs call iptables multiple times.
Best that programs that manipulate the tables assemble their changes and
install them all with a single call of iptables.  Otherwise you could
have short periods where an unintended ruleset is in effect (or the
program could exit before it completes).  Of course, you still might get
surprises if you run two such programs, but why would you do that?

If you have program that bypasses iptables you're on your own.
-- 
John Hasler 
jhas...@newsguy.com
Elmwood, WI USA

Re: LXDE Display Coordination

[Brad Rogers]

On Wed, 11 Nov 2015 16:45:19 +0100
 wrote:

Hello to...@tuxteam.de,

>I'm rather with "post here" -- if we are setting up a vote :-)

I'm all in favour of making it easy on the reader (not having to click
multiple links is a Good Thing), but that needs to be moderated by a
degree of reason:  I've seen some really silly behaviour - for example,
570kB images to relay information that could be conveyed in less than 10
words.  The irony there being that it takes longer to create the image
and attach it to an email than it does to just type the error message
into the MUA's editor.

Also, not everybody has an always on unlimited internet account.  For
those people, every byte counts.  So let's not forget their needs.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
I hit the ground, boy have I arrived!
The History Of The World (Part 1) - The Damned


pgpCBE6iBEee8.pgp
Description: OpenPGP digital signature

Re: Persistence

[Brad Rogers]

On Wed, 11 Nov 2015 10:51:37 -0500
Matilda Fins  wrote:

Hello Matilda,

Cc'ing, as it seems you may not be subscribed to list.

>Is there a way to create a Debian live usb flash drive with
>persistence? If so, how?

At least two replies exist in the thread where you asked the same
question yesterday.  The first of which is readable here;

https://lists.debian.org/debian-user/2015/11/msg00356.html

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
Junk floats on polluted water
Hong Kong Garden - Siouxsie & The Banshees


pgpRZGZBS1TaG.pgp
Description: OpenPGP digital signature

RE: Aplikasi Distro

[Dimas Prawira]

+1 openstack

-BR-
Dimas

-Original Message-
From: "faisal.abi...@gmail.com" 
Sent: ‎12/‎11/‎2015 05:26
To: "zanuar abrianto baskara" ; 
"debian-user-indonesian@lists.debian.org" 

Subject: Re: Aplikasi Distro

Kalo openstack atau owncloud ??
Thanks and Best Regards



From: zanuar abrianto baskara  
Date: Wed, 11 Nov 2015 21:31:12 +0700
To: 
Subject: Aplikasi Distro


Permisi 

saya menggunakan Debian 8 Jessie

yang saya tanyakan adalah,nama aplikasi untuk pembuat cloud Server apa 
ya,Terima Kasih

RE: Reseller Email Marketing Services

[Andrea Perkins|Technology]

 

 

Hi,

 

I am following on my previous email.

 

Please let me know your thoughts to acquire this database, so that I can
fetch you counts and few samples for your review.

 

Await for your response.

 

Regards

Andrea Perkins

 

 

From: Andrea Perkins|Data base [mailto:andrea.perk...@leadsforbiz.net] 
Sent: Monday, November 02, 2015 11:04 AM
To: 'debian-user@lists.debian.org'
Subject: Reseller Email Marketing Services 

 

Hi,

 

I understand that your company is involved into Email Marketing Services and
I believe there are possible synergies of us working together. I'm writing
to see if we can schedule a call sometime this week or next to discuss the
opportunities of working together as Partner.

 

We are a comprehensive data solutions provider, helping SMBs and large
enterprises successfully manage data for marketing and communication. We
provide with hand crafted, individual solutions to suit your business needs.
We compile and maintain the 30 million US multi-channel business contacts
with email addresses, 45 million Global multi-channel business contacts with
email addresses and 210 million Consumer records with email addresses and
over 300 demographic, lifestyle, interest, and transaction fields.

 

We are a trusted partner to agencies, market research firms, direct
marketing companies, marketing and advertising agencies, database management
companies, and various other brokers and resellers worldwide. 

 

Our B2B databases include primary fields such as: contact name, business
name, job title, mailing address, telephone number, fax number, website URL,
SIC codes, Industry type and contact person deliverable email address?
Search and download all the data that you need instantly by integrating our
very simple API directly into your website or using our online B2B portal at
no cost.

 

Let me know of a convenient time for a call to discuss and explore other
opportunities where can work as Partners.

 

I look forward to hearing from you.

 

Thank you and Regards,

Andrea Perkins,

Email: andrea.perk...@leadsforbiz.net

 

 

Multichannel Prospect Lists | Email Appending | Email Verification &
Validation | Contact Finder | 360 Degree Profiling | B2B Modeling | Tier
1/Tier 2 Real-time Tele-validation | Database 

If you no longer wish to receive our offers, send a message with the subject
line "Leave out" and indicate your email address to be removed from our
database

 

 

Re: Configurando touchpad de portátil Toshiba Satellite L50-B-23G en Debian 8

[Santiago José López Borrazás]

El 13/11/15 a las 00:12, Santiago José López Borrazás escribió:
> ection "ServerLayout"

Me comí una 'S', sorry.

-- 
Saludos de Santiago José López Borrazás.



signature.asc
Description: OpenPGP digital signature

Configurando touchpad de portátil Toshiba Satellite L50-B-23G en Debian 8

[Sergio Iglesias]

Buenas, llevo un tiempo usando Debian 8 en mi portátil, ya desde un principio 
no me detectaba el touchpad y decidi usar "xkbset m" como una solución 
temporal; no obstante tras muchas semanas en este estado y tras tirarme horas 
buscando en la web como configurarlo no encontré ninguna manera de hacerlo que 
funcionase, por eso me gustaría preguntar aquí si alguien ha tenido un problema 
semejante y en ese caso como lo solventó. 

Muchas gracias por su atención.

Re: Configurando touchpad de portátil Toshiba Satellite L50-B-23G en Debian 8

[Santiago José López Borrazás]

El 12/11/15 a las 23:33, Sergio Iglesias escribió:
> Buenas, llevo un tiempo usando Debian 8 en mi portátil, ya desde un principio 
> no me detectaba el touchpad y decidi usar "xkbset m" como una solución 
> temporal; no obstante tras muchas semanas en este estado y tras tirarme horas 
> buscando en la web como configurarlo no encontré ninguna manera de hacerlo 
> que funcionase, por eso me gustaría preguntar aquí si alguien ha tenido un 
> problema semejante y en ese caso como lo solventó. 
> 
> Muchas gracias por su atención.

Configura como lo que tengo yo en el fichero /etc/X11/xorg.conf:

ection "ServerLayout"
Identifier "Default Layout"
Screen "Default Screen" 0 0
InputDevice"Mouse0" "CorePointer"
InputDevice"Generic Keyboard"
InputDevice"Synaptics Touchpad"
EndSection
(...)
Section "InputDevice"
Identifier "Mouse0"
Driver "mouse"
Option "Protocol" "auto"
Option "Device" "/dev/psaux"
Option "Emulate3Buttons" "no"
Option "ZAxisMapping" "4 5"
EndSection

¡Y funcionando!

-- 
Saludos de Santiago José López Borrazás.



signature.asc
Description: OpenPGP digital signature

soundcard appearing as device, but not working

[tand read]

Dear Debian team,

I have a motherboard integrated sound card identified as

  lspci
00:1f.3 Audio device: Intel Corporation Device a170 (rev 31)

Debian 8.2 (linux 3.16.0-4-amd64) seems to recognize it and
loads several sound modules:

  lsmod | grep snd | cut -f 1 -d' '
snd_hda_codec_hdmi
snd_hda_codec_realtek
snd_hda_codec_generic
snd_hda_intel
snd_hda_controller
snd_hda_codec
snd_hwdep
snd_pcm
snd_timer
snd
soundcore

(but no alsa modules: lsmod | grep -i alsa shows nil and
 manually modprobe-ing them changes nothing)

and the sound system seems ok:

  cat /proc/asound/pcm
00-00: ALC1150 Analog : ALC1150 Analog : playback 1 : capture 1
00-01: ALC1150 Digital : ALC1150 Digital : playback 1
00-02: ALC1150 Alt Analog : ALC1150 Alt Analog : capture 1
00-03: HDMI 0 : HDMI 0 : playback 1

yet, nothing plays (analog output) and it is not a hardware
problem; the system is a dualboot one and in win10 it works
perfectly (sounding like “windows-have-the-correct-drivers”
and reporting itself as "Realtec High Definition Audio")

any idea if I can do anything about it? Any realistic
suggestion is welcomed and greatly appreciated

thanks for your time

tand read

Re: LXDE Display Coordination

[Chris Bannister]

On Thu, Nov 12, 2015 at 08:28:31AM +, Brad Rogers wrote:
> On Wed, 11 Nov 2015 16:45:19 +0100
>  wrote:
> 
> Hello to...@tuxteam.de,
> 
> >I'm rather with "post here" -- if we are setting up a vote :-)
> 
> I'm all in favour of making it easy on the reader (not having to click
> multiple links is a Good Thing), but that needs to be moderated by a
> degree of reason:  I've seen some really silly behaviour - for example,
> 570kB images to relay information that could be conveyed in less than 10
> words.  

Yeah, that's ridiculous. 

> Also, not everybody has an always on unlimited internet account.  For
> those people, every byte counts.  So let's not forget their needs.

I'm not. Are you suggesting that a person who sends a 570kB file without
a second thought, is going to bother using pastebin?

Another point I can think of, is if a person with a limited internet
account downloads an email but the link points to a 404, do you think
they're going to be pleased?

I personally would go WTF, what's the point of having the mailing list
archived at all! Come on guys, lets not throw common sense out the
window.

It's fine to post logs and configuration files to the mailing list, it's
been happening, like forever, no need to change it now.

-- 
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing." --- Malcolm X

Trimming posts (was ... Re: SSHD AllowUsers not limiting users anymore)

[Chris Bannister]

On Thu, Nov 12, 2015 at 07:25:49PM +0900, Joel Rees wrote:
> 2015/11/12 7:20 "Paulo Roberto" :
> >
> > Dear list,
> >
> > I need some help.
> >
> >
> > After upgrading the openssh-server package to the version:
> >
> > ii  openssh-server1:6.9p1-2+b1
> amd64 secure shell (SSH) server, for secure access from
> remote machines
> >
> > The option AllowUsers of /etc/ssh/sshd_config stopped working.
> > Any user can log through ssh even not present in this option.
> 
> AllowUsers assumes you have set the default to deny, I think. If that got
> changed when you merged settings, it would result in what you are seeing.
> 
> If you need more information, I tend to use the archives at marc.info for
> the openssh and openbsd lists. Check the archives before you post to the
> lists.

[230+ lines snipped!!]

Hey, come on people, please trim your posts! What surprises me is
someone complaining about a posted log file, but seems fine with
untrimmed replies. 

Using gmail is not an excuse, I've seen sensible replies from gmail
users. 

-- 
"If you're not careful, the newspapers will have you hating the people
who are being oppressed, and loving the people who are doing the 
oppressing." --- Malcolm X

Re: fslint ui

[franiortiz hotmail]

Sii me falto decir que use reportbug siguiendo las instrucciones que lei
y encontre este bug reportado y me apunte a la cola.

asi estaban definidos -rw-r--r--, entiendo que solo root puede escribir,
y asi es como deberian quedar -rw-rw-r-- no?
aunque eso no hace que mejore.
No tengo gnome, como escritorio, instale 
http://cdimage.debian.org/cdimage/unofficial/
64 bits,con  solo consola, a partir de ahi: lxde, plasma-desktop, e17 y mis 
programas favoritos como fslint.
sin embargo me funcionan kdesu y gksu ; )

amd64:~$ gksu -u user fslint-gui 
/home/
/media/
Traceback (most recent call last):
  File "/usr/bin/fslint-gui", line 1580, in 
on_select_all_but_newest_in_each_group_activate
self.on_select_all_but_one_in_each_group_activate("newest")
  File "/usr/bin/fslint-gui", line 1616, in 
on_select_all_but_one_in_each_group_activate
unselect_row = find_row_to_unselect(clist, row, which)
  File "/usr/bin/fslint-gui", line 1602, in find_row_to_unselect
while get_selectable(row, row_data) and row < clist.rows:
  File "/usr/bin/fslint-gui", line 421, in get_selectable
return row_data[row][0] != '#'
IndexError: list index out of range
Traceback (most recent call last):
  File "/usr/bin/fslint-gui", line 1582, in 
on_select_all_but_oldest_in_each_group_activate
self.on_select_all_but_one_in_each_group_activate("oldest")
  File "/usr/bin/fslint-gui", line 1616, in 
on_select_all_but_one_in_each_group_activate
unselect_row = find_row_to_unselect(clist, row, which)
  File "/usr/bin/fslint-gui", line 1602, in find_row_to_unselect
while get_selectable(row, row_data) and row < clist.rows:
  File "/usr/bin/fslint-gui", line 421, in get_selectable
return row_data[row][0] != '#'
IndexError: list index out of range

Sigue sin funcionar correctamente.
Toca esperar.
Saludos

Re: How to install Debian on 3TB drive.

[Darac Marjal]

On Thu, Nov 12, 2015 at 12:21:15PM +0500, Muhammad Yousuf Khan wrote:


Dear All,

I have 3TBx2 drives and want to install debian on them as RAID1. i know 
rest of the thing. i have been creating software raid on less then 2TB 
drives for years but now since HD size is growing as per the market 
trend i need to go with it.


Both drives are detected in the manual partition menu of Debian Jessi 
setup process. when i try to create bigger partition it give me 
error like this  partition length of sectors   exceeds the 
msdos-partition-table-imposed maximum of xxx


i know this is happening because of MBR limitation. therefore i need 
your help.


can you guys please guide me how can i create bigger partition while 
installing Debian.  Easiest way would be i install smaller drive and 
create bigger partition with gdisk . but i do not want this i only have 
3TB drives and want to install Debian on top of it and also want to 
make Debian to boot from the drives. i know the RAID part but missing 
part is How to create GPT partition during installation.


Any help would be highly appreciated.

Thanks, Yousuf


https://www.gnu.org/software/grub/manual/grub.html#GPT states how to do 
this. Basically, you need to partition your drives with a GPT, then 
create a tiny (~1MB) partition called the BIOS Boot Partition. Details 
are in the above link for how to mark the partition as the BIOS Boot 
Partition. You can then install grub to this partition.


-- For more information, please reread.


signature.asc
Description: PGP signature

Re: Debian på Tibble Gymnasium / Täby Friskola

[Per Andersson]

2015-11-11 22:43 GMT+01:00 Luna Jernberg :
> Hejsan, har uppdaterat en burk till Debian LTS på jobbet nu (tack till
> avtobiff till tipset då jag hörde dig snacka på FSCons) och resten ska
> uppdateras till 8 i veckan (4st till) nåt speciellt att tänka på eller
> bara köra på ?

Det kan vara bra att läsa de kommentarerna till utgåvan (eng. "Release notes")

   https://www.debian.org/releases/jessie/releasenotes

De finns översatta till svenska också.


Några intressanta saker:

- säkerhet: paketet needrestart, som berättar vad som behöver startas om för
  att kunna dra nytta av nyare/säkrare protokoll eller eventuella deaktiveringar
  av gamla osäkra.

- systemd är nytt standard-initsystem, det installeras alltså och blir det som
  används.

- Hela kapitel fem kan ju vara relevant då det innehåller saker som är bra att
  hålla koll på till uppgradering till Jessie.


--
Per

Re: Deux icônes wicd

[andre_debian]

 > > > On Wednesday 11 November 2015 00:26:17 Bernard Schoenacker wrote:
> > > réponse :
> > > tout simplement que tu emploie un réseau filaire et l'autre est
> > > prévu pour le wifi (adresse IP différente).  

> > Oui et merci,
> > mais pourquoi sur mes trois autres PC je n'ai qu'une seule icône wicd,
> > avec exactement la même configuration que celui qui affiche 
> > deux icônes ?  André

> > > On Wednesday 11 November 2015 00:26:17 Bernard Schoenacker wrote:
> ce n'est pas pareil, regarde en détail ton profil "wired" ...
> en vidéo :
> https://www.youtube.com/watch?v=9LhHqLGSpz8
> slt   bernard

Voici la réponse parfaitement adaptée te concernant, 
ainsi que pour ta réponse :

https://www.youtube.com/watch?v=sWy3s9Dhep0

> Bonjour Mr Bernard ;-)
>  Comment se fait il qu'il a réponse à presque tout ?
>  Je me régale de ses réponses, et à chaque fois je m'instruit un peu
>  plus ;-)  Merci Mr Bernard ;-) 

Il faut prendre cette remarque au * troisième * degré,
d'ailleurs je ne lis plus aucune de tes réponses sur la ML,
sachant d'avance que ça mène nulle part.

André

Re: [deb-cat] Trobada 2015

[Joan Cervan]

El Mon, 02 Nov 2015 11:29:12 +0100
Mònica Ramírez Arceda  va escriure:

> Hola,
> 
> > Vam quedar a mantenir la cita pel 21 de novembre al mateix local
> > (que està prou bé) i així donar-nos la oportunitat de conèixer més
> > usuaris de Debian.
> 
> Perfecte!
> 
> > El local disposa de diverses saletes petites amb capacitats d'entre
> > 10 i 25 persones, amb algunes taules i cadires, electricitat decent
> > i internet inalàmbric. Els automobilistes han d'arribar d'hora per
> > aparcar amb calma.
> > Si ve molta gent, el local serveix per fer coses per grups i/o
> > simultànies.
> 
> Sembla el lloc ideal.
> 
> > Les següents passes suposo que són: consolidar
> > el programa d'activitats,
> 
> Com ja vaig comentar, crec que la majoria estàvem parlant d'una
> trobada informal, on veure'ns, explicar-nos què fem, etc. 
> 
> Ara bé, si algú vol fer una xerrada o taller, suposo que tampoc hi ha
> cap problema, que digui el més ràpid possible el títol i ho
> incorporem al cartell.
> 
> > logística que faci falta
> 
> Si hi ha xerrades, projector.
> 
> Falta decidir l'hora de trobada. Jo proposo les 10 o les 11 del matí
> fins el migdia (cap a les 14) i anar a dinar. Com ho veieu? O preferiu
> per la tarda?

A mi pel matí m'ha sortit una reunió de la Coordinadora per la
Salvaguarda del Montseny... Merde! Si és fes per la tarda m'aniria
millor, però si no, igual miro d'estar per dinar amb valtros... Pd.: no
ho dic com a "vot"... De totes formes no ho dic per canviar res, eh? Si
pel matí va bé, jo no vull fer canviar res!!

Pd.: sobre lo de la xerrada d'Android, si no hi ha res més, tampoc és
que ho vegi malament, però ja posats es podria parlar de FirefoxOS (el
mòbil que pateixo de fa un temps :-) ). Però coincideixo amb el que
s'ha dit de que estaria bé de fer una xerrada més debianita... Ara bé,
quines propostes hi ha? Quins temes interessen? A mi uns cosa que em
crida l'atenció i mai he vist clara és com funciona la
internacionalització de la web de debian i documentació que hi
incorpora (118n, l10n)... Qu7an ho he mirat no m'ha semblat que hi
hagués un sistema senzill, però igual no m'ho he mirat bé...

Joan





> 
> > i un cartell o anunci per difondre massivament.
> 
> Algun artista que tingui ganes de fer-lo?
> 
> Salut!
> 



-- 
Joan Cervan Andreu
+34 635 40 31 04
calbasi.net - Desenvolupament web

Re: SSHD AllowUsers not limiting users anymore

[Joel Rees]

2015/11/12 7:20 "Paulo Roberto" :
>
> Dear list,
>
> I need some help.
>
>
> After upgrading the openssh-server package to the version:
>
> ii  openssh-server1:6.9p1-2+b1
amd64 secure shell (SSH) server, for secure access from
remote machines
>
> The option AllowUsers of /etc/ssh/sshd_config stopped working.
> Any user can log through ssh even not present in this option.

AllowUsers assumes you have set the default to deny, I think. If that got
changed when you merged settings, it would result in what you are seeing.

If you need more information, I tend to use the archives at marc.info for
the openssh and openbsd lists. Check the archives before you post to the
lists.

> Before the upgrade everything worked fine.
>
> I tested the same sshd_config file in my OpenBSD box and there everything
worked as expected.
>
> OpenSSH_6.7, LibreSSL 2.0
>
> Could it be a BUG?
>
> Below follow the sshd debug and my /etc/ssh/sshd_config
>
> Thanks in advance for your time and help.
>
>
> # /usr/sbin/sshd -D -f /etc/ssh/sshd_config -d
> debug1: sshd version OpenSSH_6.9, OpenSSL 1.0.2d 9 Jul 2015
> debug1: private host key #0: ssh-rsa SHA256:*
> debug1: private host key #1: ssh-dss SHA256:*
> debug1: private host key #2: ecdsa-sha2-nistp521
SHA256:*
> debug1: rexec_argv[0]='/usr/sbin/sshd'
> debug1: rexec_argv[1]='-D'
> debug1: rexec_argv[2]='-f'
> debug1: rexec_argv[3]='/etc/ssh/sshd_config'
> debug1: rexec_argv[4]='-d'
> Set /proc/self/oom_score_adj from 0 to -1000
> debug1: Bind to port 22 on 0.0.0.0.
> Server listening on 0.0.0.0 port 22.
> debug1: Bind to port 22 on ::.
> Server listening on :: port 22.
> debug1: Server will not fork when running in debugging mode.
> debug1: rexec start in 5 out 5 newsock 5 pipe -1 sock 8
> debug1: inetd sockets after dupping: 3, 3
> Connection from 200.137.21.34 port 53540 on 192.168.1.3 port 22
> debug1: Client protocol version 2.0; client software version
OpenSSH_6.6.1p1 Ubuntu-2ubuntu2
> debug1: match: OpenSSH_6.6.1p1 Ubuntu-2ubuntu2 pat OpenSSH_6.6.1* compat
0x0400
> debug1: Enabling compatibility mode for protocol 2.0
> debug1: Local version string SSH-2.0-OpenSSH_6.9p1 Debian-2+b1
> debug1: permanently_set_uid: 112/65534 [preauth]
> debug1: list_hostkey_types: ssh-rsa,ssh-dss,ecdsa-sha2-nistp521 [preauth]
> debug1: SSH2_MSG_KEXINIT sent [preauth]
> debug1: SSH2_MSG_KEXINIT received [preauth]
> debug1: kex: client->server aes256-...@openssh.com  none
[preauth]
> debug1: kex: server->client aes256-...@openssh.com  none
[preauth]
> debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
> debug1: SSH2_MSG_NEWKEYS sent [preauth]
> debug1: expecting SSH2_MSG_NEWKEYS [preauth]
> debug1: SSH2_MSG_NEWKEYS received [preauth]
> debug1: KEX done [preauth]
> debug1: userauth-request for user user1 service ssh-connection method
none [preauth]
> debug1: attempt 0 failures 0 [preauth]
> debug1: user user1 does not match group list hg-users at line 93
> debug1: PAM: initializing for "user1"
> debug1: PAM: setting PAM_RHOST to "200.137.21.34"
> debug1: PAM: setting PAM_TTY to "ssh"
> debug1: userauth-request for user user1 service ssh-connection method
publickey [preauth]
> debug1: attempt 1 failures 0 [preauth]
> debug1: test whether pkalg/pkblob are acceptable [preauth]
> debug1: temporarily_use_uid: 1000/1000 (e=0/0)
> debug1: trying public key file /home/user1/.ssh/authorized_keys
> debug1: fd 4 clearing O_NONBLOCK
> debug1: restore_uid: 0/0
> debug1: temporarily_use_uid: 1000/1000 (e=0/0)
> debug1: trying public key file /home/user1/.ssh/authorized_keys2
> debug1: Could not open authorized keys
'/home/user1/.ssh/authorized_keys2': No such file or directory
> debug1: restore_uid: 0/0
> Failed publickey for user1 from 200.137.21.34 port 53540 ssh2: RSA
SHA256:***
> debug1: userauth-request for user user1 service ssh-connection method
password [preauth]
> debug1: attempt 2 failures 1 [preauth]
> debug1: PAM: password authentication accepted for user1
> debug1: do_pam_account: called
> Accepted password for user1 from 200.137.21.34 port 53540 ssh2
> debug1: monitor_child_preauth: user1 has been authenticated by privileged
process
> debug1: monitor_read_log: child log fd closed
> debug1: PAM: establishing credentials
> User child is on pid 13122
> debug1: SELinux support disabled
> debug1: PAM: establishing credentials
> debug1: permanently_set_uid: 1000/1000
> debug1: ssh_packet_set_postauth: called
> debug1: Entering interactive session for SSH2.
> debug1: server_init_dispatch_20
> debug1: server_input_channel_open: ctype session rchan 0 win 1048576 max
16384
> debug1: input_session_request
> debug1: channel 0: new [server-session]
> debug1: session_new: session 0
> debug1: session_open: channel 0
> debug1: session_open: session 0: link with channel 0
> debug1: server_input_channel_open: confirm session
> debug1: 

Re: soundcard appearing as device, but not working

[Jörg-Volker Peetz]

Have you tried to use "alsamixer"? It gives some control over the volume and
muting of the different output/input channels/devices.
Regards,
jvp.

Re: soundcard appearing as device, but not working

[Nicolas George]

Le duodi 22 brumaire, an CCXXIV, tand read a écrit :
> (but no alsa modules: lsmod | grep -i alsa shows nil and

The ALSA modules are called snd-*, you already observed they are loaded.

> any idea if I can do anything about it? Any realistic
> suggestion is welcomed and greatly appreciated

Uninstall anything related to PULSE that you can (libraries can stay, the
server must absolutely go), and then use aplay -D hw:X,Y to make your tests,
it gives the error message without muddling things with automagic
workarounds.

Regards,

-- 
  Nicolas George


signature.asc
Description: Digital signature

Re: [OT] Controladora raid pc sobremesa

[Maykel Franco]

El día 30 de octubre de 2015, 20:51, Maykel Franco
 escribió:
>
> El 30 oct. 2015 4:10 p. m., "Camaleón"  escribió:
>>
>> El Thu, 29 Oct 2015 16:38:57 -0600, Ricky Gutierrez escribió:
>>
>> > El día 29 de octubre de 2015, 9:48, Camaleón 
>> > escribió:
>> >>
>>  Sinceramente, para un equipo de sobremesa le recomendaría a tu amigo
>>  mdraid (software raid) sin pensarlo, es muhco más flexible y como me
>>  temo que tendrá discos SATA convencionales no va a notar apenas
>>  diferencia en cuanto a rendimiento.
>> 
>>  Buenos fabricantes de controladoras hardware RAID son 3ware, LSI y
>>  Adaptec pero cuadadín con esta última que dependiendo de los modelos
>>  te puedes llevar sorpresas. En general cualquier controladora que
>>  tenga los drivers integrados en el kernel y no necesite de
>>  complementos o añadidos extra. Según el número de puertos que
>>  necesite y funcionalidades extra (batería)
>>  pues ya entra en juego un modelo concreto u otro.
>>
>> (...)
>>
>> > Hola yo estoy en lo mismo , y ligeramente he visto estos modelos de esta
>> > pagina
>> >
>> > http://www.openwebit.com/c/list-of-real-sata-raid-cards-for-linux/
>> >
>> >
>> > https://www.adaptec.com/en-us/support/raid/sata/aar-2810sa/
>> >
>> >
>> > habria que ver que tanto es buena.
>>
>> Esa tarjeta es hardware RAID pero es un modelo muy antiguo y bastante
>> limitado (sólo admite matrices de 2 TiB en total, bus PCI, SATA 1.5). No
>> la recomiendo :-(
>>
>> Saludos,
>>
>> --
>> Camaleón
>>
>
> Gracias.
>
> No me voy a complicar, le aconsejó un raid10 con mdadm y una buena placa con
> buen chipset. Discos duros red de wd y buen pc en general y marchando.


He visto esta:

http://www.amazon.es/gp/product/B005935MDS?keywords=controladora%20raid%20adaptec=1447329594_=sr_1_2=8-2#productDetails

Tiene muy buena pinta por 200 €, y además parece compatible con linux
y no sólo con suse linux enterprise y red hat, sino con debian
ubuntu...

https://www.adaptec.com/en-us/support/raid/sas_raid/sas-6405e/

Va a 6 Gbits, tiene buena pinta... habría que ver el rendimiento.

dconf-CRITICAL **: unable to create file '/run/user/1000/dconf/user'

[Hugues MORIN]

Bonjour


Je viens d'installer Jessie depuis quelques jours
J'ai depuis regulierement des log qui depasse l'entendement, plus de 500Mo
sur un syslog en 3 ou 4 heures O_o

L'origine du probleme vient de la repetition plusieurs fois par seconde de
l'erreur dconf-CRITICAL **: unable to create file
'/run/user/1000/dconf/user'

par exemple dans user.log, j'ai ce genre de chose:
Nov 12 12:25:00 x /etc/gdm3/Xsession[1271]: (mate-panel:1341):
dconf-CRITICAL **: unable to create file '/run/user/1000/dconf/user':
Permission non accordée.  dconf will not work properly.
Nov 12 12:42:42 x /etc/gdm3/Xsession[2472]: (iceweasel:2795):
dconf-CRITICAL **: unable to create file '/run/user/1000/dconf/user':
Permission non accordée.  dconf will not work properly.
Nov 12 12:44:12 x /etc/gdm3/Xsession[2472]: (mate-power-manager:2579):
dconf-CRITICAL **: unable to create file '/run/user/1000/dconf/user':
Permission non accordée.  dconf will not work properly.
Nov 12 12:47:10 x org.gnome.gedit[2517]: (gedit:2863): dconf-CRITICAL
**: unable to create file '/run/user/1000/dconf/user': Permission non
accordée.  dconf will not work properly.


Il semblerait que ce soit un bug qui est deja enregistre (depuis 2013 O_o):
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732209
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=769889


J'ai bien trouve une parade: chown monuser:monuser /run/user/1000/dconf/user
Mais il faut refaire a chaque demarrage ou changement d'utilisateur.

Je n'ai pas reussi a trouver de paliatif permanent.

Quel solutions vous avez trouvez face a ce bug?

Cordialement
Hugues


PS: un truc qui me semble bizarre mais qui n'a peut etre aucun rapport,
j'ai des ? sur gvfs, est ce normal?

root@x:/# ls -al /run/user/1000/
ls: impossible d'accéder à /run/user/1000/gvfs: Permission non accordée
total 0
drwx-- 7 monuser monuser 140 nov.  12 12:38 .
drwxr-xr-x 3 root   root60 nov.  12 12:38 ..
drwx-- 2 monuser monuser  60 nov.  12 13:00 dconf
d? ? ?  ??  ? gvfs
drwx-- 2 monuser monuser 120 nov.  12 12:38 keyring
drwx-- 2 monuser monuser  80 nov.  12 12:38 pulse
drwxr-xr-x 2 monuser monuser  80 nov.  12 12:38 systemd

Re: LXDE Display Coordination

[Lisi Reisz]

On Thursday 12 November 2015 08:28:31 Brad Rogers wrote:
> Also, not everybody has an always on unlimited internet account.  For
> those people, every byte counts.  So let's not forget their needs.

So, as Chris said, let's all try to snip and do it well.  But if the full conf 
file is needed now in order to trouble shoot the problem, it will be needed 
by whoever finds the thread in the archives.

And I have snipped too much here.  I have not mastered the art of good 
snipping.

Lisi

Re: LXDE Display Coordination

[ray]

Felix,

Thank you, that worked great.

> This is expected as a result of the absence of any video config options on
> kernel cmdline. I just wanted to confirm this is what was actually occurring. 

I made the xorg.conf to put in the configuration.  But there is still no 
cmdline entry for this config.

I input:
lightdm restart
and there was no change.  So I rebooted and it worked.

Re: i3 Window manager without any other desktop environment

[Dwijesh Gajadur]

Hello guys. Now I am facing another problem. Each time the system starts I
am getting the console and I have to type 'startx' each time in order to
launch i3. What can I do to automatically launch i3 whenever the system
starts without passing through the console.

On Wed, Nov 11, 2015 at 8:41 PM, Curt  wrote:

> On 2015-11-10, Dwijesh Gajadur  wrote:
> >
> > Yes it worked. After installing Xorg and typing 'startx' , i3 session
> > started.
> >
>
> It really, really, really, really worked.
>
>

open .cvx format

[lina]

Which package can be used to view this format.

Thanks,

Re: open .cvx format

[lina]

or which package can be used to convert to other format.

I tried the imagemagick,

$ convert a.cvx a.jpeg
convert: no decode delegate for this image format `CVX' @
error/constitute.c/ReadImage/501.

On Fri, Nov 13, 2015 at 3:29 PM, lina  wrote:
> Which package can be used to view this format.
>
> Thanks,

Re: [deb-cat] Trobada 2015

[Leopold Palomo-Avellaneda]

El Dijous, 12 de novembre de 2015, a les 14:13:03, Narcis Garcia va escriure:
> No tinc ni idea de si Firefox OS és un sistema operatiu GNU tal com ho
> és Debian, i tal com NO ho és Android.
> Si no ho és, igualment jo no tinc ni idea de com alliberrar Firefox OS
> per utilitzar GNU, en canvi sí que sé com fer-ho amb Android o derivats.
> 
> Així que, amb un aparell de butxaca, jo només us hi podré ensenyar
> Debian funcionant si aquest aparell havia sortit amb Android de fàbrica.
> Igualment, si no assistirà ningú que li interessi el tema, i també hi ha
> opinió de què està fora de context, seguiré amb ganes d'intercanviar
> coneixements del què sigui sobre Debian.

Hi ha llista d'assistents potencials?

Jo en principi estaré. Puc explicar 4 coses d'empaquetat i dels projectes 
debian-science i debian-robotics.

Leo




-- 
--
Linux User 152692 GPG: 05F4A7A949A2D9AA
Catalonia
-
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
A: Top-posting.
Q: What is the most annoying thing in e-mail?

signature.asc
Description: This is a digitally signed message part.

Are there packages that modify iptables rules?

[Patrick Schleizer]

Hi,

are there packages that modify the system's iptables rules?

Cheers,
Patrick

Re: Xorg reconfigure on keyboard/VGA screen connect with systemd?

[Andreas Henriksson]

Hello martin f krafft.

I'm not an expert on the topic but will try to help fill in some
info which might be useful for you.

On Thu, Nov 12, 2015 at 06:49:00PM +1300, martin f krafft wrote:
> Hello,
> 
> Can I use systemd to automatically run scripts as the owner of an
> X session when a USB keyboard or a VGA screen are connected to the
> local machine? Or what other mechanism would you use?

As far as I'm aware there's no "production ready" solution for this
yet (in Debian).

> 
> In the past, doing so automatically would involve some sort of hook
> in /etc (invoked as root), which would then have to /bin/su to the
> user (hoping it'd even know to whom), import the Xauthority and then
> run the command. What a hack.

You probably want to use something like this still, but please
beware that in testing/unstable X is now running without root
privilegies normally (unless you use a Display Manager which still
starts X as root or you use the xserver-xorg-legacy package that was
introduced for those who want the old behaviour back).
This probably only simplifies your task by removing some steps
from your hack.

> 
> systemd's integrates with everything desktop-ey, so I am led to
> believe it should be possible to do better nowadays.
> 
> How? Does anyone have an example?

I believe there are plans to make it possible to handle "user services"
in similar fashion to how systemd handles system services.

If you want to experiment with this, then looking at the arch wiki
is (as usual) probably a good start:
https://wiki.archlinux.org/index.php/Systemd/User

If you do, an equivalent page on the Debian wiki would be awesome!

> 
> Or if systemd is (still) not the right tool for the task, are there
> more modern approaches people use?
> 
> Thanks,

HTH.

Regards,
Andreas Henriksson

Re: Are there packages that modify iptables rules?

[Sven Hartge]

Patrick Schleizer  wrote:

> are there packages that modify the system's iptables rules?

fail2ban
miniupnpd

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

offtopic Re: Archivos Translation de los repos

[Gonzalo Rivero]

El mié, 11-11-2015 a las 19:13 -0300, Fabián Bonetti escribió:
> On Wed, 11 Nov 2015 14:29:42 + (UTC)
> Camaleón  wrote:
> 
> > El Wed, 11 Nov 2015 00:08:48 -0300, Fabián Bonetti escribió:
> > 
> > > Mi repositorio > http://repo.mamalibre.com.ar/Readme.txt
> > > 
> > > Andaba bien mi repo hasta hoy que un colega con una distro-
> > > híbrida
> > > intento usar el synaptic.
> > > 
> > > Ahí me di cuenta que tuve que actualizar mi repositorio...
> > > 
> > > Hasta ahí todo bien.
> > > 
> > > 
> > > Pero... me esta pidiendo estos archivos
> > > 
> > > Translation-es_AR.gz
> > > 
> > > Translation-es.gz
> > > 
> > > Translation-en.gz
> > > 
> > > 
> > > No doy como generar sos archivos en el repositorio.
> > 
> > Aquí tienes un ejemplo:
> > 
> > https://wiki.debian.org/RepositoryFormat#A.22Translation.22_indices
> > 
> > > Se que son de texto plano
> > > 
> > > Package: paquete1 Description-md5:
> > > Description-es:
> > > 
> > > Package: paquete12 Description-md5:
> > > Description-es: aqui la 2da descripcion
> > > 
> > > contenido en Translation-es.2.bz2
> > > 
> > > he generado el archivo en blanco, y luego comprimirlo para si ver
> > > si me
> > > sigue saliendo este error
> > > 
> > > W: Fallo al obtener
> > > gzip:/var/lib/apt/lists/partial/mamalibre.no-
> > ip.org_dists_karmic_main_i18n_Translation-es%5fAR.gz
> > >  Formato inválido de fichero
> > 
> > (...)
> > 
> > Te dice que el formato no es correcto.
> > 
> > Saludos,
> > 
> > -- 
> > Camaleón
> > 
> 
> Si lo se... pero lo dice al no poder bajarlos del servidor.
> 
> PD: Este mensaje debo borrar siempre que respondo ""A MI NO, ENVIA A
> LA LISTA" " creo que
> haces que todos tengamos que hacer un paso mas al responder.
> 
en evolution ctrl-l es para responder a la lista, en thunderbird creo
que también tiene algo para reponder así directamente.
Yo a veces al mandar un mail a la lista completo el responder a: pero
últimamente lo hago cada vez menos porque hay algunos que aún así
mandan con copia a mi correo privado :-/
-- 
(-.(-.(-.(-.(-.(-.-).-).-).-).-).-)

Re: [deb-cat] Trobada 2015

[Narcis Garcia]

No tinc ni idea de si Firefox OS és un sistema operatiu GNU tal com ho
és Debian, i tal com NO ho és Android.
Si no ho és, igualment jo no tinc ni idea de com alliberrar Firefox OS
per utilitzar GNU, en canvi sí que sé com fer-ho amb Android o derivats.

Així que, amb un aparell de butxaca, jo només us hi podré ensenyar
Debian funcionant si aquest aparell havia sortit amb Android de fàbrica.
Igualment, si no assistirà ningú que li interessi el tema, i també hi ha
opinió de què està fora de context, seguiré amb ganes d'intercanviar
coneixements del què sigui sobre Debian.


__
I'm using this express-made address because personal addresses aren't
masked enough at lists.debian.org archives.

El 12/11/15 a les 13:42, Joan Cervan ha escrit:
> 
> 
> El Mon, 02 Nov 2015 11:29:12 +0100
> Mònica Ramírez Arceda  va escriure:
> 
>> Hola,
>>
>>> Vam quedar a mantenir la cita pel 21 de novembre al mateix local
>>> (que està prou bé) i així donar-nos la oportunitat de conèixer més
>>> usuaris de Debian.
>>
>> Perfecte!
>>
>>> El local disposa de diverses saletes petites amb capacitats d'entre
>>> 10 i 25 persones, amb algunes taules i cadires, electricitat decent
>>> i internet inalàmbric. Els automobilistes han d'arribar d'hora per
>>> aparcar amb calma.
>>> Si ve molta gent, el local serveix per fer coses per grups i/o
>>> simultànies.
>>
>> Sembla el lloc ideal.
>>
>>> Les següents passes suposo que són: consolidar
>>> el programa d'activitats,
>>
>> Com ja vaig comentar, crec que la majoria estàvem parlant d'una
>> trobada informal, on veure'ns, explicar-nos què fem, etc. 
>>
>> Ara bé, si algú vol fer una xerrada o taller, suposo que tampoc hi ha
>> cap problema, que digui el més ràpid possible el títol i ho
>> incorporem al cartell.
>>
>>> logística que faci falta
>>
>> Si hi ha xerrades, projector.
>>
>> Falta decidir l'hora de trobada. Jo proposo les 10 o les 11 del matí
>> fins el migdia (cap a les 14) i anar a dinar. Com ho veieu? O preferiu
>> per la tarda?
> 
> A mi pel matí m'ha sortit una reunió de la Coordinadora per la
> Salvaguarda del Montseny... Merde! Si és fes per la tarda m'aniria
> millor, però si no, igual miro d'estar per dinar amb valtros... Pd.: no
> ho dic com a "vot"... De totes formes no ho dic per canviar res, eh? Si
> pel matí va bé, jo no vull fer canviar res!!
> 
> Pd.: sobre lo de la xerrada d'Android, si no hi ha res més, tampoc és
> que ho vegi malament, però ja posats es podria parlar de FirefoxOS (el
> mòbil que pateixo de fa un temps :-) ). Però coincideixo amb el que
> s'ha dit de que estaria bé de fer una xerrada més debianita... Ara bé,
> quines propostes hi ha? Quins temes interessen? A mi uns cosa que em
> crida l'atenció i mai he vist clara és com funciona la
> internacionalització de la web de debian i documentació que hi
> incorpora (118n, l10n)... Qu7an ho he mirat no m'ha semblat que hi
> hagués un sistema senzill, però igual no m'ho he mirat bé...
> 
> Joan
> 
> 
> 
> 
> 
>>
>>> i un cartell o anunci per difondre massivament.
>>
>> Algun artista que tingui ganes de fer-lo?
>>
>> Salut!
>>
> 
> 
> 

Re: SSHD AllowUsers not limiting users anymore

[Christoph Anton Mitterer]

On Wed, 2015-11-11 at 20:20 -0200, Paulo Roberto wrote:
> The option AllowUsers of /etc/ssh/sshd_config stopped working.
I did a small check, and it still works here, as expected... anything
special with your PAM? Are you sure that you checked on the right hosts
with the right sshd_config in place? Or could user1 be a synonym to the
allowed one (i.e. same UID)?)

Cheers,
Chris.

smime.p7s
Description: S/MIME cryptographic signature

How do packages that modify iptables rules prevent race conditions?

[Patrick Schleizer]

Hi,

as I just learned on the mailing list, that at least the packages
fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
modify iptables rules...

Is there a chance for race conditions? I.e. two packages trying to add
iptables rules at the same time and thereby failing to do so?

What is the proper mechanism to add iptables rules [for packages] to
avoid such race conditions?

Is using 'iptables --wait' sufficient or something else?

Cheers,
Patrick

Re: [deb-cat] Trobada 2015

[Robert Marsellés]

Hola,

On 12/11/15 14:24, Leopold Palomo-Avellaneda wrote:
> 
> Hi ha llista d'assistents potencials?
> 

Algú va proporcionar un enllaç a Duddle (que jo ja no sé on és) i alguns
s'hi van apuntar.

> Jo en principi estaré. Puc explicar 4 coses d'empaquetat i dels projectes 
> debian-science i debian-robotics.
> 

A mi m'agradaria assistir-hi a això. Amb aquests temes em passa el
mateix que al Joan amb els temes l18n i l10n. Quan intento fer el que
llegeixo a la documentació que he trobat, rés em sembla /tan/ senzill
com l'autor diu.

Salut i peles,

robert



signature.asc
Description: OpenPGP digital signature

Re: [deb-cat] Trobada 2015

[Alex Muntada]

Robert Marsellés:

> Algú va proporcionar un enllaç a Duddle (que jo ja no sé on és)
> i alguns s'hi van apuntar.

Anava a suggerir fer una pàgina al wiki.debian.org però tens raó
que ja tenim el dudle:

https://dudle.inf.tu-dresden.de/debian-catalan-2015/

Dit això, potser ens aniria bé crear un wiki per anar posant les
coses que fem, els resums de les trobades, etc.

Havent vist la llista d'entrades al wiki dels grups locals, crec
que tocaria crear una pàgina LocalGroups/DebianCat:

https://wiki.debian.org/LocalGroups#Catalonia

Prefereixo que la pàgina es digui DebianCat perquè sigui ambigu
sobre si fa referència a la llengua o al territori. Però és un
tema del que podem parlar a Girona.

D'altra banda, crec que estaria bé un recordatori dels detalls
del lloc de reunió, de com arribar-hi en transport públic i
privat, de l'hora de trobada, etc.

Salut,
Alex

Re: soundcard appearing as device, but not working

[Ric Moore]

On 11/12/2015 06:05 AM, Nicolas George wrote:

Le duodi 22 brumaire, an CCXXIV, tand read a écrit :

(but no alsa modules: lsmod | grep -i alsa shows nil and


The ALSA modules are called snd-*, you already observed they are loaded.


any idea if I can do anything about it? Any realistic
suggestion is welcomed and greatly appreciated


Uninstall anything related to PULSE that you can (libraries can stay, the
server must absolutely go), and then use aplay -D hw:X,Y to make your tests,
it gives the error message without muddling things with automagic
workarounds.


The OP might just need to use alsamixer to unmute something. If alsa is 
not configured properly, pulse doesn't stand a chance. Ric



--
My father, Victor Moore (Vic) used to say:
"There are two Great Sins in the world...
..the Sin of Ignorance, and the Sin of Stupidity.
Only the former may be overcome." R.I.P. Dad.
http://linuxcounter.net/user/44256.html

Re: Fsview

[Héctor Palacios]

Bien parece que hay poca información en la red al respecto.

Y algún par de usuarios se  han preguntrado lo mismo pero sin solución
definitiva: usar konqueror como navegador de archivos (como hasta recientemente
lo hacia).


Por ejemplo, acá:
http://opensuse.14.x6.nabble.com/Konqueror-insists-on-viewing-all-directories-with-fsview-td5049408.html

Entre otras cosas dicen:


Il Sat, 17 Oct 2015 16:22:32 +0200, James PEARSON ha scritto:

> I agree that Dolphin works fine but I was hoping that someone here might
> know of a work around or an option that can be changed to make Konqueror
> use other view profiles (such as "Web browsing") ?

Konqueror hasn't been ported to KF5 and released, and thus it can't load
the file management part (which is shared with Dolphin, which instead is
KF5 based from 15.08 onwards). So at the moment there isn't a proper
solution until Konqueror in KF5 form is released.




Así que si el usuario tiene razón, habrá que esperar un tanto.


Saludos

Re: Can't start VM after latest kernel update: weird mount failure

[Ross Boylan]

I can get around the mount problem by explicitly specifying the filesystem
type (e.g., mount -t ext2 /dev/vda1 somedir)--is that some limitation of
busybox mount?

I still don't know why the system is having trouble starting up.

The recent kernel update included a fix for a KVM vunerability(
https://security-tracker.debian.org/tracker/CVE-2015-5307).  Perhaps that
has something to do with it.

Is there a way I can proceed by hand after I mount the proper file systems?

Ross

P.S.  I also tried adding noresume to the options on grub's linux line; it
didn't help.

On Thu, Nov 12, 2015 at 1:57 PM, Ross Boylan 
wrote:

> After the recent kernel updates one of my virtual machines won't start.
> GRUB runs and messages indicate the kernel is loaded and the initial
> ramdisk is loading.  Then it says it can't find the root device (identified
> by correct UUID, though it wouldn't be visible until the logical volumes
> are activated).  In busybox the logical volumes are visible, but when I
> make a directory and attempt to mount to it I get
> mount: mounting /dev/markov02/root on r failed: No such file or directory.
> The same thing happens if I try to mount the boot partition (/dev/vda1).
> This is weird because both the device and the directory are present.  I
> can change into the directory and create a file in it
>
> When I attach the virtual hard drives to another VM I have no problem
> mounting either the boot partition or the logical volume.
>
> I would appreciate any assistance figuring out what's going on or what I
> can do to correct it.
>
> If my initrd got corrupted, is there a way to regenerate it?
>
> Thanks.
> Ross Boylan
>
>
>

Fsview

[Héctor Palacios]

Buen Día.

Konqueror me es útil en algunas ocasiones.

Pero éste nuevo que viene con Debian Testing,
tiene activado el modo fsview, un plugin molesto y nada
útil.

Buscando por la red no  hay mucha ayuda para desabilitarlo
o removerlo.

Seguí la indicación de alguna página donde se recomienda:

cp  /usr/share/kde4/services/fsview_part.desktop  .kde/share/kde4/services/

y en la copia agregar:

Hidden=true


Pero cuando deseo ir a cualquier carpeta konqueror abre dolphin.
Ni aún escribiendo la ruta en la barra de direcciones, siempre lleva
a abrir dolphin.


¿Alguna idea para solucionar este molesto bache?

--

Héctor

Re: [OT] Voz-IP

[Maykel Franco]

El día 11 de noviembre de 2015, 20:25, Ramses
 escribió:
> El 11 de noviembre de 2015 18:10:44 CET, Maykel Franco 
>  escribió:
>>Buenas, estoy buscando un proveedor para telefonía sip. Como requisito
>>me gustaría:
>>
>>- Tuviera conferencia, es decir, que puedan hablar varias personas en
>>la misma conversación.
>>
>>- Que se puedan conectar aplicaciones móviles, tales como CsipSimple y
>>algún teléfono Voz-IP como los Yealink.
>>
>>La idea es como tener una centralita, pero que lo lleve un proveedor,
>>poder administrar las cuentas y poder conectarse con parámetros de
>>configuración.
>>
>>No sé si pido mucho, solo si conocéis algo poder ayudarme.
>>
>>Gracias.
>
> Maykel, buenas tardes,
>
> Contacta con Azulcom, ellos te pueden dar lo que estás buscando.
>
> http://www.azulcom.net
>
>
> Saludos,
>
> Ramses
>
>


Muchas gracias a todos, voy a informarme y comparar precios. Comentaré
por cual me decido.

Gracias.

Re: Xorg reconfigure on keyboard/VGA screen connect with systemd?

[Julien Cristau]

On Thu, Nov 12, 2015 at 18:49:00 +1300, martin f krafft wrote:

> Hello,
> 
> Can I use systemd to automatically run scripts as the owner of an
> X session when a USB keyboard or a VGA screen are connected to the
> local machine? Or what other mechanism would you use?
> 
It should be easy enough to write an X client listening for DeviceNotify
(for new input devices) or ConfigureNotify (for output changes) on the
root window.  gnome-settings-daemon has a "hotplug-command" under
org.gnome.settings-daemon.peripherals.input-devices in its settings that
can do the former at least.

Cheers,
Julien


signature.asc
Description: PGP signature

Re: [deb-cat] Trobada 2015

[Narcis Garcia]

Que el programari sigui lliure i alhora tancat per alguns no és
incompatible. Tinc entès que Android és 99% lliure (també et puc
assegurar que funciona sobre Linux), però mira com es comporten.
Donat que Facebook corre sobre GNU/Linux i està fet en PHP, també
podriem tenir la mateixa confusió.

Que Firefox OS, el decodificador de la TDT o el què sigui utilitzin
nucli Linux no significa que siguin sistemes GNU.
Realment tens les utilitats GNU (incloent gestor de paquets i
compilador) quan obres un terminal sobre Firefox OS? No és el cas
d'Android, ni em sembla que tampoc el d'Ubuntu Phone.

També podriem parlar de l'equivalent quan ens arriba un ordinador
portàtil amb MS/Windows ja ficat. Podríem igual que en aquest cas
utilitzar Debian GNU/Linux o Debian GNU/Hurd en aquest aparell?
Si la resposta és que si amb un ordinador tradicional, la resposta també
podria ser que sí amb un aparell de butxaca.

https://wiki.debian.org/Mobile

http://wiki.gilug.org/index.php/Ubuntu_amb_Android


El 12/11/15 a les 16:33, Joan Cervan ha escrit:
> 
> 
> El Thu, 12 Nov 2015 14:13:03 +0100
> Narcis Garcia  va escriure:
> 
>> No tinc ni idea de si Firefox OS és un sistema operatiu GNU tal com ho
>> és Debian, i tal com NO ho és Android.
> 
> Firefox OS diria que és soft lliure 100% (amb un kernel de linux
> corrent per sota).
> 
> Diria que aquest plantejament és més interessant que els que parteixen
> de sistemes parcialment tancats. 
> 
> Però, d'altra banda, la gent està a Android (i Facebook, i Windows), i
> potser això fa interessant els intents de millorar-los des de dins...
> 
> Pd.: és una llàstima que Firefox OS no tingui més base d'usuaris...
> 
>> Si no ho és, igualment jo no tinc ni idea de com alliberrar Firefox OS
>> per utilitzar GNU, en canvi sí que sé com fer-ho amb Android o
>> derivats.
>>
>> Així que, amb un aparell de butxaca, jo només us hi podré ensenyar
>> Debian funcionant si aquest aparell havia sortit amb Android de
>> fàbrica. Igualment, si no assistirà ningú que li interessi el tema, i
>> també hi ha opinió de què està fora de context, seguiré amb ganes
>> d'intercanviar coneixements del què sigui sobre Debian.
>>
>>
>> __
>> I'm using this express-made address because personal addresses aren't
>> masked enough at lists.debian.org archives.
>>
>> El 12/11/15 a les 13:42, Joan Cervan ha escrit:
>>>
>>>
>>> El Mon, 02 Nov 2015 11:29:12 +0100
>>> Mònica Ramírez Arceda  va escriure:
>>>
 Hola,

> Vam quedar a mantenir la cita pel 21 de novembre al mateix local
> (que està prou bé) i així donar-nos la oportunitat de conèixer més
> usuaris de Debian.

 Perfecte!

> El local disposa de diverses saletes petites amb capacitats
> d'entre 10 i 25 persones, amb algunes taules i cadires,
> electricitat decent i internet inalàmbric. Els automobilistes han
> d'arribar d'hora per aparcar amb calma.
> Si ve molta gent, el local serveix per fer coses per grups i/o
> simultànies.

 Sembla el lloc ideal.

> Les següents passes suposo que són: consolidar
> el programa d'activitats,

 Com ja vaig comentar, crec que la majoria estàvem parlant d'una
 trobada informal, on veure'ns, explicar-nos què fem, etc. 

 Ara bé, si algú vol fer una xerrada o taller, suposo que tampoc hi
 ha cap problema, que digui el més ràpid possible el títol i ho
 incorporem al cartell.

> logística que faci falta

 Si hi ha xerrades, projector.

 Falta decidir l'hora de trobada. Jo proposo les 10 o les 11 del
 matí fins el migdia (cap a les 14) i anar a dinar. Com ho veieu? O
 preferiu per la tarda?
>>>
>>> A mi pel matí m'ha sortit una reunió de la Coordinadora per la
>>> Salvaguarda del Montseny... Merde! Si és fes per la tarda m'aniria
>>> millor, però si no, igual miro d'estar per dinar amb valtros...
>>> Pd.: no ho dic com a "vot"... De totes formes no ho dic per canviar
>>> res, eh? Si pel matí va bé, jo no vull fer canviar res!!
>>>
>>> Pd.: sobre lo de la xerrada d'Android, si no hi ha res més, tampoc
>>> és que ho vegi malament, però ja posats es podria parlar de
>>> FirefoxOS (el mòbil que pateixo de fa un temps :-) ). Però
>>> coincideixo amb el que s'ha dit de que estaria bé de fer una
>>> xerrada més debianita... Ara bé, quines propostes hi ha? Quins
>>> temes interessen? A mi uns cosa que em crida l'atenció i mai he
>>> vist clara és com funciona la internacionalització de la web de
>>> debian i documentació que hi incorpora (118n, l10n)... Qu7an ho he
>>> mirat no m'ha semblat que hi hagués un sistema senzill, però igual
>>> no m'ho he mirat bé...
>>>
>>> Joan
>>>
>>>
>>>
>>>
>>>

> i un cartell o anunci per difondre massivament.

 Algun artista que tingui ganes de fer-lo?

 Salut!

>>>
>>>
>>>
>>
> 
> 
> 

Re: [OT] Controladora raid pc sobremesa

[Camaleón]

El Thu, 12 Nov 2015 13:04:50 +0100, Maykel Franco escribió:

> El día 30 de octubre de 2015, 20:51, Maykel Franco
>  escribió:
>>
>> El 30 oct. 2015 4:10 p. m., "Camaleón"  escribió:
>>>
>>> El Thu, 29 Oct 2015 16:38:57 -0600, Ricky Gutierrez escribió:

(...)

>>> > Hola yo estoy en lo mismo , y ligeramente he visto estos modelos de
>>> > esta pagina
>>> >
>>> > http://www.openwebit.com/c/list-of-real-sata-raid-cards-for-linux/
>>> >
>>> >
>>> > https://www.adaptec.com/en-us/support/raid/sata/aar-2810sa/
>>> >
>>> >
>>> > habria que ver que tanto es buena.
>>>
>>> Esa tarjeta es hardware RAID pero es un modelo muy antiguo y bastante
>>> limitado (sólo admite matrices de 2 TiB en total, bus PCI, SATA 1.5).
>>> No la recomiendo :-(
>>>
>> Gracias.
>>
>> No me voy a complicar, le aconsejó un raid10 con mdadm y una buena
>> placa con buen chipset. Discos duros red de wd y buen pc en general y
>> marchando.
> 
> 
> He visto esta:
> 
> http://www.amazon.es/gp/product/B005935MDS?keywords=controladora%20raid%
20adaptec=1447329594_=sr_1_2=8-2#productDetails
> 
> Tiene muy buena pinta por 200 €, y además parece compatible con linux y
> no sólo con suse linux enterprise y red hat, sino con debian ubuntu...
> 
> https://www.adaptec.com/en-us/support/raid/sas_raid/sas-6405e/
> 
> Va a 6 Gbits, tiene buena pinta... habría que ver el rendimiento.

Cuidadín y lee bien lo que permite para no llevarte sorpresas. Por 
ejemplo, no veo que soporte niveles 5 o 6 de RAID, ¿raro, no? :-?

También veo que tiene problemillas con la temperatura (!), convendría que 
revisaras mensajes de hilos y foros para ver qué se cuenta la gente sobre 
esto. 

Tampoco indica el tamaño máximo de los volúmenes y no lleva batería de 
serie (tendrás que añadirla a parte o poner un SAI detrás), es mejor que 
leas de cabo a rabo el manual. El diablo está en los detalles :-)

Saludos,

-- 
Camaleón

Re: fslint ui

[Camaleón]

El Thu, 12 Nov 2015 10:18:29 +, franiortiz hotmail escribió:

> Sii me falto decir que use reportbug siguiendo las instrucciones que lei
> y encontre este bug reportado y me apunte a la cola.

Hiciste bien :-)

Cuanta más gente aparezca como afectada menos tiempo tardarán en 
resolverlo, vamos, que se darán más prisa.

> asi estaban definidos -rw-r--r--, entiendo que solo root puede escribir,
> y asi es como deberian quedar -rw-rw-r-- no?

Normalmente, todos los archivos que están en el directorio $HOME del 
usuario son accesibles por el propio usuario (además de root que tiene 
acceso a todo), así que no tenías que haberlo cambiado. 

> aunque eso no hace que mejore.

No, claro, el problema parece un fallo generalizado del paquete, tendrás 
que esperar a que lo arreglen.

> No tengo gnome, como escritorio, instale
> http://cdimage.debian.org/cdimage/unofficial/
> 64 bits,con  solo consola, a partir de ahi: lxde, plasma-desktop, e17 y
> mis programas favoritos como fslint.
> sin embargo me funcionan kdesu y gksu ; )

En XFCE no es necesario usar gksu/kdesu por lo que en LXDE quizá pase lo 
mismo pero si alguna aplicación gráfica no funciona correctamente usa 
esos comandos (gksu/kdesu) cuando quieras ejecutarla desde consola para 
evitar errores.

> amd64:~$ gksu -u user fslint-gui 
   

Tienes que reemplazar "user" por el nombre de tu usuario.

(...)

> Sigue sin funcionar correctamente.
> Toca esperar.
> Saludos

No, claro... es un bug, no creo que se solucione sin que corrijan el 
paquete :-)

Saludos,

-- 
Camaleón

Re: Archivos Translation de los repos

[Camaleón]

El Wed, 11 Nov 2015 19:13:58 -0300, Fabián Bonetti escribió:

> On Wed, 11 Nov 2015 14:29:42 + (UTC)
> Camaleón  wrote:

(...)

>> > No doy como generar sos archivos en el repositorio.
>> 
>> Aquí tienes un ejemplo:
>> 
>> https://wiki.debian.org/RepositoryFormat#A.22Translation.22_indices
>> 
>> > Se que son de texto plano
>> > 
>> > Package: paquete1 Description-md5:
>> > Description-es:
>> > 
>> > Package: paquete12 Description-md5:
>> > Description-es: aqui la 2da descripcion
>> > 
>> > contenido en Translation-es.2.bz2
>> > 
>> > he generado el archivo en blanco, y luego comprimirlo para si ver si
>> > me sigue saliendo este error
>> > 
>> > W: Fallo al obtener gzip:/var/lib/apt/lists/partial/mamalibre.no-
>> ip.org_dists_karmic_main_i18n_Translation-es%5fAR.gz
>> >  Formato inválido de fichero
>> 
>> (...)
>> 
>> Te dice que el formato no es correcto.
>> 
>> 
>> 
> Si lo se... pero lo dice al no poder bajarlos del servidor.

Bueno, no dice que "no encuentra el archivo" sino que el formato no es el 
que espera. Si yo fuera un ordenador y no encontrara un archivo te diría 
"file not found" o similar. Mira a ver si los has creado bien como dicen 
las instrucciones.

> PD: Este mensaje debo borrar siempre que respondo ""A MI NO, ENVIA A LA
> LISTA" " creo que haces que
> todos tengamos que hacer un paso mas al responder.

Eso es porque estás respondiendo mal, tienes que seleccionar "responder a 
la lista" en lugar de "responder". Si tu cliente no tiene esa opción 
cambia de cliente o edita manualmente el destinatario ;-)

Saludos,

-- 
Camaleón

Re: [deb-cat] Trobada 2015

[Joan Cervan]

El Thu, 12 Nov 2015 14:13:03 +0100
Narcis Garcia  va escriure:

> No tinc ni idea de si Firefox OS és un sistema operatiu GNU tal com ho
> és Debian, i tal com NO ho és Android.

Firefox OS diria que és soft lliure 100% (amb un kernel de linux
corrent per sota).

Diria que aquest plantejament és més interessant que els que parteixen
de sistemes parcialment tancats. 

Però, d'altra banda, la gent està a Android (i Facebook, i Windows), i
potser això fa interessant els intents de millorar-los des de dins...

Pd.: és una llàstima que Firefox OS no tingui més base d'usuaris...

> Si no ho és, igualment jo no tinc ni idea de com alliberrar Firefox OS
> per utilitzar GNU, en canvi sí que sé com fer-ho amb Android o
> derivats.
> 
> Així que, amb un aparell de butxaca, jo només us hi podré ensenyar
> Debian funcionant si aquest aparell havia sortit amb Android de
> fàbrica. Igualment, si no assistirà ningú que li interessi el tema, i
> també hi ha opinió de què està fora de context, seguiré amb ganes
> d'intercanviar coneixements del què sigui sobre Debian.
> 
> 
> __
> I'm using this express-made address because personal addresses aren't
> masked enough at lists.debian.org archives.
> 
> El 12/11/15 a les 13:42, Joan Cervan ha escrit:
> > 
> > 
> > El Mon, 02 Nov 2015 11:29:12 +0100
> > Mònica Ramírez Arceda  va escriure:
> > 
> >> Hola,
> >>
> >>> Vam quedar a mantenir la cita pel 21 de novembre al mateix local
> >>> (que està prou bé) i així donar-nos la oportunitat de conèixer més
> >>> usuaris de Debian.
> >>
> >> Perfecte!
> >>
> >>> El local disposa de diverses saletes petites amb capacitats
> >>> d'entre 10 i 25 persones, amb algunes taules i cadires,
> >>> electricitat decent i internet inalàmbric. Els automobilistes han
> >>> d'arribar d'hora per aparcar amb calma.
> >>> Si ve molta gent, el local serveix per fer coses per grups i/o
> >>> simultànies.
> >>
> >> Sembla el lloc ideal.
> >>
> >>> Les següents passes suposo que són: consolidar
> >>> el programa d'activitats,
> >>
> >> Com ja vaig comentar, crec que la majoria estàvem parlant d'una
> >> trobada informal, on veure'ns, explicar-nos què fem, etc. 
> >>
> >> Ara bé, si algú vol fer una xerrada o taller, suposo que tampoc hi
> >> ha cap problema, que digui el més ràpid possible el títol i ho
> >> incorporem al cartell.
> >>
> >>> logística que faci falta
> >>
> >> Si hi ha xerrades, projector.
> >>
> >> Falta decidir l'hora de trobada. Jo proposo les 10 o les 11 del
> >> matí fins el migdia (cap a les 14) i anar a dinar. Com ho veieu? O
> >> preferiu per la tarda?
> > 
> > A mi pel matí m'ha sortit una reunió de la Coordinadora per la
> > Salvaguarda del Montseny... Merde! Si és fes per la tarda m'aniria
> > millor, però si no, igual miro d'estar per dinar amb valtros...
> > Pd.: no ho dic com a "vot"... De totes formes no ho dic per canviar
> > res, eh? Si pel matí va bé, jo no vull fer canviar res!!
> > 
> > Pd.: sobre lo de la xerrada d'Android, si no hi ha res més, tampoc
> > és que ho vegi malament, però ja posats es podria parlar de
> > FirefoxOS (el mòbil que pateixo de fa un temps :-) ). Però
> > coincideixo amb el que s'ha dit de que estaria bé de fer una
> > xerrada més debianita... Ara bé, quines propostes hi ha? Quins
> > temes interessen? A mi uns cosa que em crida l'atenció i mai he
> > vist clara és com funciona la internacionalització de la web de
> > debian i documentació que hi incorpora (118n, l10n)... Qu7an ho he
> > mirat no m'ha semblat que hi hagués un sistema senzill, però igual
> > no m'ho he mirat bé...
> > 
> > Joan
> > 
> > 
> > 
> > 
> > 
> >>
> >>> i un cartell o anunci per difondre massivament.
> >>
> >> Algun artista que tingui ganes de fer-lo?
> >>
> >> Salut!
> >>
> > 
> > 
> > 
> 



-- 
Joan Cervan Andreu
+34 635 40 31 04
calbasi.net - Desenvolupament web

jessie/kde: o,ly root can read usb sticks

[baldyeti]

Hello, under wheezy i had no problem mounting usb keys
with dolphin and reading their content. Under jessie
only root can do so (and the mount point dynamically
created under /media is owned by root indeed).

Can someone suggest a remedy ?

Re: Fsview

[Camaleón]

El Thu, 12 Nov 2015 10:40:25 -0500, Héctor Palacios escribió:

> Konqueror me es útil en algunas ocasiones.
> 
> Pero éste nuevo que viene con Debian Testing,
> tiene activado el modo fsview, un plugin molesto y nada útil.
> 
> Buscando por la red no  hay mucha ayuda para desabilitarlo o removerlo.
> 
> Seguí la indicación de alguna página donde se recomienda:
> 
> cp  /usr/share/kde4/services/fsview_part.desktop 
> .kde/share/kde4/services/
> 
> y en la copia agregar:
> 
> Hidden=true
> 
> 
> Pero cuando deseo ir a cualquier carpeta konqueror abre dolphin.
> Ni aún escribiendo la ruta en la barra de direcciones, siempre lleva a
> abrir dolphin.
> 
> 
> ¿Alguna idea para solucionar este molesto bache?

No entiendo bien el problema porque no veo relación entre desactivar el 
modo de visualización fsview y que se abra dolphin ya que entiendo este 
último es el gestor de archivos predeterminado.

Si preguntas cómo poner a konqueror como explorador de archivos 
predeterminado. Si es así, mira esto:

I'd like Konqueror to be my default file manager
https://userbase.kde.org/Konqueror#I.27d_like_Konqueror_to_be_my_default_file_manager

Saludos,

-- 
Camaleón

Re: Ransomware meets Linux - on the command line!

[Ralph Katz]

On 11/11/2015 10:24 PM, Cindy-Sue Causey wrote:

[...]

> Brian Krebs of Krebs On Security had
> something on ransomware and Linux, just not labeled Ransm-C or
> anything:
> 
> http://krebsonsecurity.com/2015/11/ransomware-now-gunning-for-your-web-sites/
> 
> IF I'm understanding correctly, he appears to have updated that
> article with a *potential* way to beat it via a *potential*
> vulnerability at least until the perpetrators upgrade their own
> tactics, anyway.
> 
> I like what Brian's been doing. I can cognitively understand a LOT of
> what he writes about. He's caught SlashDot's eye a time or two, too.
> 
> Adding another keyword here, Linux.Decoder.1, which Brian says was a
> name dubbed by "Russian antivirus and security firm Dr.Web". It may or
> may not be the same as the other, but sounds like it works
> similar'ISH.
> 
> Next stop is to pop over to a group called BlindWebbers. I'd seen
> Brian's email subject line earlier and thought instantly of them, just
> didn't get around to opening it then. The guy in Brian's article makes
> it sound like it's a little time consuming and still has incidental
> glitches afterwards.
> 
> That's presumably coming from someone with no visual disabilities. The
> difficulty level of getting one's website back would understandably
> rise relative to one's ability or lack thereof to actually see what's
> going on within the file hierarchy. AND apparently each single
> file that reportedly stands to potentially gather random bits AFTER
> the files have been decrypted.

As a user, I too, find Krebs informative.  Also notable was this recent
Washington Post article about Linus Torvalds and Linux security:

http://www.washingtonpost.com/sf/business/2015/11/05/net-of-insecurity-the-kernel-of-the-argument/

"Fast, flexible and free, Linux is taking over the online world. But
there is growing unease about security weaknesses."

Regards,
Ralph





signature.asc
Description: OpenPGP digital signature

[RESOLU]Re: pas de son avec STEAM

[geonpi]

On 07/11/2015 14:28, Bernard Schoenacker wrote:

Le Sat, 07 Nov 2015 12:32:59 +0100,
geonpi  a écrit :


On 07/11/2015 12:30, Bernard Schoenacker wrote:

Le Sat, 07 Nov 2015 10:42:06 +0100,
geonpi  a écrit :
  

Bonjour je viens d'installer Steam sur Jessie mais impossible
d'avoir du son avec les jeux. Dans les settings il n'y a rien pour
configurer (sauf le micro).
Avec 'pavucontrol' il n'apparait même pas. Et je ne n'ai rien
trouvé sur le wiki.
Je ne sais pas quel fichier configurer ou même savoir si il manque
une lib.

Sur le forum archlinux
 ça a été résolu
en modifiant le ~/.asoundrc mais je 'nai pas ce dossier dans
mon /home/user.

Merci

bonjour,

voici un lien :

http://www.alsa-project.org/main/index.php/Asoundrc

slt
bernard
  

merci Bernard, je vais regarder ça.


bonjour,

voici asoundrc :

https://forum.ubuntu-fr.org/viewtopic.php?id=409577
http://www.linuxmao.org/ALSA+Asoundrc
http://alsa.opensrc.org/Asoundrc
http://www.donchristophe.be/divers/asoundrc-exemple.php

slt
bernard


j'ai crée le .asoundrc de base, reboot la machine et ça fonctionne. Je 
peux maintenant réglé la sortie dans 'pavucontrol'


merci

Re: [RESOLU]Re: pas de son avec STEAM

[Bernard Schoenacker]

Le Thu, 12 Nov 2015 18:55:10 +0100,
geonpi  a écrit :

> On 07/11/2015 14:28, Bernard Schoenacker wrote:
> > Le Sat, 07 Nov 2015 12:32:59 +0100,
> > geonpi  a écrit :
> >  
> >> On 07/11/2015 12:30, Bernard Schoenacker wrote:  
> >>> Le Sat, 07 Nov 2015 10:42:06 +0100,
> >>> geonpi  a
> >>> écrit : 
>  Bonjour je viens d'installer Steam sur Jessie mais impossible
>  d'avoir du son avec les jeux. Dans les settings il n'y a rien
>  pour configurer (sauf le micro).
>  Avec 'pavucontrol' il n'apparait même pas. Et je ne n'ai rien
>  trouvé sur le wiki.
>  Je ne sais pas quel fichier configurer ou même savoir si il
>  manque une lib.
> 
>  Sur le forum archlinux
>   ça a été
>  résolu en modifiant le ~/.asoundrc mais je 'nai pas ce dossier
>  dans mon /home/user.
> 
>  Merci  
> >>> bonjour,
> >>>
> >>> voici un lien :
> >>>
> >>> http://www.alsa-project.org/main/index.php/Asoundrc
> >>>
> >>> slt
> >>> bernard
> >>> 
> >> merci Bernard, je vais regarder ça.
> >>  
> > bonjour,
> >
> > voici asoundrc :
> >
> > https://forum.ubuntu-fr.org/viewtopic.php?id=409577
> > http://www.linuxmao.org/ALSA+Asoundrc
> > http://alsa.opensrc.org/Asoundrc
> > http://www.donchristophe.be/divers/asoundrc-exemple.php
> >
> > slt
> > bernard  
> 
> j'ai crée le .asoundrc de base, reboot la machine et ça fonctionne.
> Je peux maintenant réglé la sortie dans 'pavucontrol'
> 
> merci
> 

bonjour,

le fichier exemple :

/usr/share/doc/libasound2/examples/asoundrc.txt.gz

slt 
bernard

Re: Trobada 2015. Girona 21 Novembre

[Mònica Ramírez Arceda]

Leopold Palomo-Avellaneda  writes:

> Bones,
>
> estem a menys de dues setmanes.

Sí Hauríem d'espavilar :-)

> Tenim algun pla: hora,

Si us plau ompliu aquesta enquesta abans de diumenge 15 de novembre. El
que votem és l'hora d'inici de la trobada i podem calcular que durarà
unes 3 o 4 hores.

http://dudle.inf.tu-dresden.de/debian-catalan-2015-hora/

> lloc

Carrer Sanat Eugènia 202, baixos A, Girona

> què farem

Trobar-nos, xerrar dels nostres projectes i qui vulgui fer alguna
xerrada o taller endavant!

Però el consens era trobada informal, veure'ns i explicar-nos les
batalletes debianeres :-)

També queda pendent si algú vol fer un cartell per difondre-ho. Algú
s'anima?

Re: SSHD AllowUsers not limiting users anymore

[Paulo Roberto]

Hi Chris,

I'm not aware of anything special in my PAM configuration, I think It is
still using the default configs.

user1 is a complete different user than any other, It has its unique user
id.
If a create a brand new user, the same problem happens.

I could say I'm using the correct /etc/ssh/sshd_config because other
changes to the file are read.
To be sure, as you can see at my last e-mail, I passed the -f  command line
option to run sshd.

The DenyUsers option is not working as well. I tried it with user1 and it
does not block the user.

Below follow my /etc/pam.d/sshd, if you need any other file, please, let me
know.

Thanks again for your help.

# PAM configuration for the Secure Shell service

# Standard Un*x authentication.
@include common-auth

# Disallow non-root logins when /etc/nologin exists.
accountrequired pam_nologin.so

# Uncomment and edit /etc/security/access.conf if you need to set complex
# access limits that are hard to express in sshd_config.
# account  required pam_access.so

# Standard Un*x authorization.
@include common-account

# SELinux needs to be the first session rule.  This ensures that any
# lingering context has been cleared.  Without this it is possible that a
# module could execute code in the wrong domain.
session [success=ok ignore=ignore module_unknown=ignore default=bad]
pam_selinux.so close

# Set the loginuid process attribute.
sessionrequired pam_loginuid.so

# Create a new session keyring.
sessionoptional pam_keyinit.so force revoke

# Standard Un*x session setup and teardown.
@include common-session

# Print the message of the day upon successful login.
# This includes a dynamically generated part from /run/motd.dynamic
# and a static (admin-editable) part from /etc/motd.
sessionoptional pam_motd.so  motd=/run/motd.dynamic
sessionoptional pam_motd.so noupdate

# Print the status of the user's mailbox upon successful login.
sessionoptional pam_mail.so standard noenv # [1]

# Set up user limits from /etc/security/limits.conf.
sessionrequired pam_limits.so

# Read environment variables from /etc/environment and
# /etc/security/pam_env.conf.
sessionrequired pam_env.so # [1]
# In Debian 4.0 (etch), locale-related environment variables were moved to
# /etc/default/locale, so read that as well.
sessionrequired pam_env.so user_readenv=1
envfile=/etc/default/locale

# SELinux needs to intervene at login time to ensure that the process starts
# in the proper default security context.  Only sessions which are intended
# to run in the user's context should be run after this.
session [success=ok ignore=ignore module_unknown=ignore default=bad]
pam_selinux.so open

# Standard Un*x password updating.
@include common-password

On Thu, Nov 12, 2015 at 12:34 PM, Christoph Anton Mitterer <
cales...@scientia.net> wrote:

> On Wed, 2015-11-11 at 20:20 -0200, Paulo Roberto wrote:
> > The option AllowUsers of /etc/ssh/sshd_config stopped working.
> I did a small check, and it still works here, as expected... anything
> special with your PAM? Are you sure that you checked on the right hosts
> with the right sshd_config in place? Or could user1 be a synonym to the
> allowed one (i.e. same UID)?)
>
> Cheers,
> Chris.

Re: How do packages that modify iptables rules prevent race conditions?

[John Hasler]

I think that the best solution would be for the script to construct a
single iptables command string and then run it.
-- 
John Hasler 
jhas...@newsguy.com
Elmwood, WI USA

Re: How do packages that modify iptables rules prevent race conditions?

[Sven Hartge]

Patrick Schleizer  wrote:

> as I just learned on the mailing list, that at least the packages
> fail2ban and miniupnpd [and most likely arno-iptables-firewall also]
> modify iptables rules...

> Is there a chance for race conditions? I.e. two packages trying to add
> iptables rules at the same time and thereby failing to do so?

fail2ban und miniupnpd create their own chains and a rule to jump to
that personal chain on startup. Subsequent rules are only ever added to
that personal chain. This effectivly avoids any race with different
rules inserted at different places of the ruleset.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.