Difference between LUKS drives with cryptsetup and Disks?

2016-11-04 Thread Joerg Desch
I've created a LUKS partition which I mount on demand. This partition was 
created using cryptsetup. While mounting the partition, GNOME asks me 
first for the passphrase and than for the "admin" password.

A while ago, I've created a LUKS partition on an USB thumb drive using 
GNOME Disks. In this case, mounting requires only the passphrase. And 
that doesn't depend on the used computer!

What is the difference? Can I change the behavior of my older LUKS 
partition too?



Re: Difference between LUKS drives with cryptsetup and Disks?

2016-11-04 Thread Gregor Zattler
Hi Joerg,
* Joerg Desch  [04. Nov. 2016]:
> I've created a LUKS partition which I mount on demand. This partition was 
> created using cryptsetup. While mounting the partition, GNOME asks me 
> first for the passphrase and than for the "admin" password.
> 
> A while ago, I've created a LUKS partition on an USB thumb drive using 
> GNOME Disks. In this case, mounting requires only the passphrase. And 
> that doesn't depend on the used computer!
> 
> What is the difference? Can I change the behavior of my older LUKS 
> partition too?


Most probably this is a permissions problem.  Mount the partition
which you encrypted with cryptsetup and do a

ls -ld /path/to/mountpoint

there you will see the owner (probably root) and the permissions
set for this mount point.

If this is the case you may change the owner like this:

sudo chown -R youruserid:youruserid  /path/to/mountpoint


HTH, Gregor
-- 
 -... --- .-. . -.. ..--.. ...-.-



Re: Difference between LUKS drives with cryptsetup and Disks?

2016-11-04 Thread Ansgar Burchardt
Hi,

Joerg Desch writes:
> I've created a LUKS partition which I mount on demand. This partition was
> created using cryptsetup. While mounting the partition, GNOME asks me
> first for the passphrase and than for the "admin" password.
>
> A while ago, I've created a LUKS partition on an USB thumb drive using
> GNOME Disks. In this case, mounting requires only the passphrase. And
> that doesn't depend on the used computer!
>
> What is the difference? Can I change the behavior of my older LUKS
> partition too?

GNOME uses udisks2 to manage devices.  udisks2 treats removable devices
(can mount as regular user) and system devices (can only mount as admin)
differently.

One can find the actions udisks2 uses PolicyKit for in
/usr/share/polkit-1/actions/org.freedesktop.udisks2.policy: the
interesting ones probably are:

  org.freedesktop.udisks2.filesystem-mount
  org.freedesktop.udisks2.filesystem-mount-system
  org.freedesktop.udisks2.filesystem-fstab

  org.freedesktop.udisks2.encrypted-unlock
  org.freedesktop.udisks2.encrypted-unlock-system
  org.freedesktop.udisks2.encrypted-unlock-crypttab

The default permissions allow the active user to use 'filesystem-mount'
(that is mount removable devices) and 'encrypted-unlock' (unlock
removable devices).  The other actions are only allowed for
administrators with a password prompt (`auth_admin` or
`auth_admin_keep`).

As you only want to manage a single partition, I would try to use the
'filesystem-fstab' and 'encrypted-unlock-crypttab' actions which should
only apply to specific devices instead of the '*-system' actions: add
the 'x-udisks-auth' option to the /etc/fstab and /etc/crypttab entries
and allow using them by the active user without a password prompt:

+---
| [Allow active user to mount x-udisks-auth filesystems]
| 
Action=org.freedesktop.udisks2.filesystem-fstab;org.freedesktop.udisks2.encrypted-unlock-crypttab
| ResultActive=yes
+---[ /etc/polkit-1/localauthority/50-local.d/x-udisks-auth.pkla ]

See man:pklocalauthority(8) for documentation of the *.pkla files.

Note that I haven't used PolicyKit that much, so some details might not
be quite correct.

Ansgar



Re: Difference between LUKS drives with cryptsetup and Disks?

2016-11-04 Thread Ansgar Burchardt
Ansgar Burchardt <"Ansgar Burchardt"@43-1.org> writes:
> As you only want to manage a single partition, I would try to use the
> 'filesystem-fstab' and 'encrypted-unlock-crypttab' actions which should
> only apply to specific devices instead of the '*-system' actions: add
> the 'x-udisks-auth' option to the /etc/fstab and /etc/crypttab entries
> and allow using them by the active user without a password prompt:
>
> +---
> | [Allow active user to mount x-udisks-auth filesystems]
> | 
> Action=org.freedesktop.udisks2.filesystem-fstab;org.freedesktop.udisks2.encrypted-unlock-crypttab
> | ResultActive=yes
> +---[ /etc/polkit-1/localauthority/50-local.d/x-udisks-auth.pkla ]
>
> See man:pklocalauthority(8) for documentation of the *.pkla files.

Ah, and I just noticed that the "Identity=" is not optional.  So that
needs an additional

  Identity=unix-user:*

(Or a username instead of "*".)

Ansgar



Re: How to get Claws Mail to download an over sized message

2016-11-04 Thread Brad Rogers
On Thu, 3 Nov 2016 17:27:48 -0500
sunr...@mailbug.com wrote:

Hello sunr...@mailbug.com,

>So my question is: Is there any way to force Claws Mail to retrieve a
>specific message that has not been completely downloaded? Or how does
>the Claws Mail GUI normally mark a message for download when the
>aforementioned button is clicked?

The button you mentioned is the only way I know of to initiate a large
message download.

You'll probably get a better response on the Claws Mail mailing list.
us...@lists.claws-mail.org
They're likely to ask are whether this happens with only one mail
provider (assuming you have more than one).  They'll also almost
certainly mention that v3.9 is quite old, and that an upgrade might be
in order.  Not that that would help with this specific problem, AFAIAA.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
Gary don't need his eyes to see.  Gary and his eyes have parted company
Gary Gilmore's Eyes - The Adverts


pgpEuBlaVCqyV.pgp
Description: OpenPGP digital signature


Re: list installed packages present only in stable

2016-11-04 Thread Jörg-Volker Peetz
Maybe, this "one-liner" does what you want?

aptitude -F "%p" search ~Astable| sort | \
(aptitude -F "%p" search ~Aunstable ~Atesting | sort -u | \
 comm -23 --nocheck-order /dev/fd/3 -) 3<&0

All three archives have to be present with the names used above in your
sources.list file (that is, e.g., "unstable" and not "sid").

Regards,
jvp.




Re: How to get Claws Mail to download an over sized message

2016-11-04 Thread sunrise
Hi Brad,

Thanks for your suggestions. In the meantime, I discovered a way to do what I 
wanted.
It's not a very elegant solution but workable. See below.

On Fri, 4 Nov 2016 10:52:03 +
Brad Rogers  wrote:

>On Thu, 3 Nov 2016 17:27:48 -0500
>sunr...@mailbug.com wrote:
>
>Hello sunr...@mailbug.com,
>
>>So my question is: Is there any way to force Claws Mail to retrieve a
>>specific message that has not been completely downloaded? Or how does
>>the Claws Mail GUI normally mark a message for download when the
>>aforementioned button is clicked?
>
>The button you mentioned is the only way I know of to initiate a large
>message download.

The file ~/.claws-mail/uidl/ACCOUNT_NAME seems to contain a list of the 
messages on the
server in a format like this:

732016110406345739451478266525  0
732016110406551661351478266525  0
732016110409085573471478266525  0
732016110409410406441478268386  0

The last field usually contains a 0 or 1 (I'm assuming '0' might mean 
'retrieved' and '1'
might mean 'not fully retrieved'). But if the 'Mark for Download' button is 
activated,
the entry for that message changes to something like:

732016110409410406441478268386  #mh/path/to/inbox:2180

where 2180 is the filename assigned by claws mail for that message. (I use 
maildir
format.) Knowing this, I can now manually edit the entry with the correct 
parameters and
claws mail retrieves the entire message without a hitch, at least it did for 
the one I
tried it on.

This would be somewhat awkward if I'd need to do it every day, but it works for 
getting
me out of an occasional pickle.


>
>You'll probably get a better response on the Claws Mail mailing list.
>us...@lists.claws-mail.org
>They're likely to ask are whether this happens with only one mail
>provider (assuming you have more than one).  They'll also almost

Am using only one mail provider.

>certainly mention that v3.9 is quite old, and that an upgrade might be
>in order.  Not that that would help with this specific problem, AFAIAA.

Thanks again!
Jason



Re: list installed packages present only in stable

2016-11-04 Thread Jörg-Volker Peetz
Jörg-Volker Peetz wrote on 11/04/16 14:39:
> Maybe, this "one-liner" does what you want?
> 
> aptitude -F "%p" search ~Astable| sort | \
> (aptitude -F "%p" search ~Aunstable ~Atesting | sort -u | \
>  comm -23 --nocheck-order /dev/fd/3 -) 3<&0
> 
This needs a correction, if I'm not mistaken:

aptitude -F "%p" search ~i | sort | \
(aptitude -F "%p" search ~Aunstable ~Atesting | sort -u | \
 comm -23 --nocheck-order /dev/fd/3 -) 3<&0

All installed packages should be checked, not all available from stable.

> All three archives have to be present with the names used above in your
> sources.list file (that is, e.g., "unstable" and not "sid").

Regards,
jvp.





Re: How to get Claws Mail to download an over sized message

2016-11-04 Thread Brad Rogers
On Fri, 4 Nov 2016 10:19:56 -0500
sunr...@mailbug.com wrote:

Hello sunr...@mailbug.com,

>Thanks for your suggestions. In the meantime, I discovered a way to do

YW.  Although, TBH, I didn't really do anything.

>what I wanted. It's not a very elegant solution but workable. See below.

Crikey!  I'd never have figured out all that stuff.  Your message will
be saved for future reference, should I suffer similar problems.  So,
thank *you*.

-- 
 Regards  _
 / )   "The blindingly obvious is
/ _)radnever immediately apparent"
An old custom to sell your daughter
Hong Kong Garden - Siouxsie & The Banshees


pgppY95KbUud6.pgp
Description: OpenPGP digital signature


Re: user agent headers and elinks?

2016-11-04 Thread Morten Bo Johansen
On 2016-11-03 Karen Lewellen wrote:

> Hi all,
> Here at shellworld we are using Ubuntu 16.04  with elinks compiled to 
> support java scripting.
> I am working with the partner indigogo site generosity,
> www.generosity.com
> even in elinks  the site does not allow one to log in or create an 
> account.
> Now, just for kicks, I tried visiting the same site in lynx but with the 
> send user agent  function turned off.
> I do not know what lynx uses if you turn off the send user agent feature, 
> but such often gets me past problem places, and  such was the case with 
> generosity.com
> So, I am wondering about the elinks user agent.
> The site may work better in general with elinks, if I can get it to work, 
> and since the user agent seemed to help, I wanted to try this possibility.
> Thoughts?
> Kare

Hi,

Elinks has an interactive configuration system accessible with
F10. What you need here is this:

F10 -> "Setup" -> "Options manager" -> "Protocols" (expand options
list with the '+' key) -> "HTTP" -> "User-agent identification" and
then push the "Edit" button. There you can craft your own
user-agent header. Setting it to " " causes Elinks to send no
user-agent header at all.

HTH, Morten




Re: list installed packages present only in stable

2016-11-04 Thread Jörg-Volker Peetz
Jörg-Volker Peetz wrote on 11/04/16 17:17:
> Jörg-Volker Peetz wrote on 11/04/16 14:39:
>> Maybe, this "one-liner" does what you want?
>>
>> aptitude -F "%p" search ~Astable| sort | \
>> (aptitude -F "%p" search ~Aunstable ~Atesting | sort -u | \
>>  comm -23 --nocheck-order /dev/fd/3 -) 3<&0
>>
> This needs a correction, if I'm not mistaken:
> 
> aptitude -F "%p" search ~i | sort | \
> (aptitude -F "%p" search ~Aunstable ~Atesting | sort -u | \
>  comm -23 --nocheck-order /dev/fd/3 -) 3<&0
> 
> All installed packages should be checked, not all available from stable.

Or just with aptitude:

aptitude -F "%p" search '!~Atesting!~Aunstable~i'

At least on my system it produces the same list of packages.

> 
>> All three archives have to be present with the names used above in your
>> sources.list file (that is, e.g., "unstable" and not "sid").

Regards,
jvp.




Re: pen testing beginner

2016-11-04 Thread emetib
first, thank you all for your honest input on this.

shawn wilson wrote:
"I'll caveat my response by saying I'm not in this field - I'm a lowly sysadmin 
:) "

i was asked one time what i wanted to do with my linux knowledge and replied 
that i wanted to be a sys admin and not a programmer.  told this gentleman that 
i know that i would need some programming to be a better sys admin, yet didn't 
want to just program.

i have a high level of respect for sys admins, since they need to know alot 
more than just programming.  i've met many programmers that can't set up a mail 
server, etc..., properly.

"A word on certs - don't get them until someone is paying you to do so (with 
the exception of RHCE and OSCP)."

for the OSCP, i was looking at getting this down the road.
for the RHCE, i don't know if i want to focus on a specific distro cert.  i was 
looking at the LPI cert since it isn't distro specific.

i don't know if one is better than the other, RH, LPI, LFS...
i do know that RH is a leader in enterprise systems, yet i believe that having 
cross distro knowledge would be better.  thoughts on this would be nice to hear.

cindy-sue causey wrote:
" I did local tech school in 1999, and... was pretty much bored."

when i took the linux security class, community college, it was very general.  
it seemed that the instructor liked to talk more about what he had done in 
general with his linux experience instead of the hardening of the system.  the 
students seemed to be impressed with my knowledge of linux at the time, yet 
they also knew nothing about linux in the first place.  and as you, i was 
pretty bored with what i was/wasn't learning in the class.

david christensen wrote:
"If you are serious about this, go get yourself a degree in computer
science."

i can understand what you are saying about this.  the process that is laid out 
on a specific course path and the steps that it takes, going from the ground 
floor to the upper limits of learning/knowledge.  don't know about brick and 
mortar, would have to move as to there is not much for advanced learning on 
this subject in rural iowa.  i have looked at some of the online colleges 
though, i just don't know how they stack up to being in an actual class room 
setting.  i would hope that they are comparable.

don't know if i want that extra $KK of debt at this time, even though it could 
be made up for in future earnings.


as to the specifics that cindy-sue asked about, i'm thinking more about 
cyber-security and hardening systems.  one of the reasons that i'm looking at 
pen testing is for this, understanding the vulnerabilities of a system and then 
be able to tighten them up, maybe throw some cryptography in there.
also, when i did have my server, i was more interested in making sure that i 
was following proper protocols to setting things up.  i.e. didn't want my mail 
server being bounced from others for not having the spf's set up correctly, 
etc, etc. 

shawn, yes the web has great offerings for learning.  i have downloaded many 
books in pdf to start my learning.
just a few-
debian handbook, i think everyone should read it
multiple books on pen testing with kali linux
multiple books and white papers on selinux
man pages and info file are always at my finger tips.

the book that i'm reading right now, 2013 the basic of hacking and pen 
tesingmade easy, has talked about CVE's and RFC's and seems like something 
that i will have to check into more in depth.  i have made a list of things 
that i have to read more on each time something new comes up.  sometimes i go 
read it right away, sometimes i wait until that section is done and then go 
read it.  as you said, read, find out more, return etc...

again, thank you all for your input and if you have anything else to contribute 
to the comments that i made everything is appreciated.

take care
em



Problem attempting to use xorriso

2016-11-04 Thread Richard Owlett
Due to limited bandwidth I purchase complete sets of Debian 
install DVDs.
I had successfully created *.iso files for 12 of the 13 DVDs for 
version 8.6.
[The MD5SUM of one DVD does not match list at 
http://cdimage.debian.org/debian-cd/8.6.0/i386/iso-dvd/MD5SUMS]


I attempted to follow the example given by Thomas Schmitt in 
https://lists.debian.org/debian-user/2015/09/msg00421.html He had 
suggested:


  for i in /media/distributionA/DVD*.iso
  do
xorriso -osirrox on:auto_chmod_on -overwrite nondir \
-indev "$i" \
-extract /pool /media/distributionA/poolA
  done

To account for my current directory structure I had modified it 
to bee:


  for i in /media/root/jessie-dvds/dvd8_*.iso
  do
xorriso -osirrox on:auto_chmod_on -overwrite nondir \
-indev "$i" \
-extract /pool /media/myrepo/pool
  done

My running copy of Debian is on /dev/sda9 and had ~4GB of 10GB used.
When my run crashed it had no free space left.

A extract of what showed on the terminal is:

Extracted from ISO image: file '/pool'='/media/myrepo/pool'
xorriso 1.3.2 : RockRidge filesystem manipulator, libburnia project.

Copying of file objects from ISO image to disk filesystem is: Enabled
xorriso : NOTE : Loading ISO image tree from LBA 0
xorriso : UPDATE : 5199 nodes read in 1 seconds
Drive current: -indev '/media/root/jessie-dvds/dvd8_11.iso'
Media current: stdio file, overwriteable
Media status : is written , is appendable
Media summary: 1 session, 2288090 data blocks, 4469m data, 5577m free
Volume id: 'Debian 8.6.0 i386 11'
xorriso : UPDATE : 35 files restored ( 47065k) in 1 seconds , 34.6xD
xorriso : UPDATE : 37 files restored ( 72465k) in 3 seconds , 11.8xD
.
.
*MASSIVE SNIP*
.
.
xorriso : UPDATE : 2991 files restored (2646.6m) in 336 seconds , 
0.9xD
xorriso : UPDATE : 3016 files restored (2648.1m) in 337 seconds , 
1.1xD
xorriso : FAILURE : Cannot write all bytes to disk filesystem 
path '/media/myrepo/pool/main/n/ns3/ns3-doc_3.17+dfsg-1_all.deb' 
: No space left on device
xorriso : FAILURE : Cannot restore regular file to disk 
filesystem: '/pool/main/n/ns3/ns3-doc_3.17+dfsg-1_all.deb'
xorriso : SORRY : Restoring failed: 
'/pool/main/n/ns3/ns3-doc_3.17+dfsg-1_all.deb' = 
'/media/myrepo/pool/main/n/ns3/ns3-doc_3.17+dfsg-1_all.deb'
xorriso : UPDATE : 3022 files restored (2649.4m) in 338 seconds = 
5.9xD

xorriso : aborting : -abort_on 'FAILURE' encountered 'FAILURE'
xorriso 1.3.2 : RockRidge filesystem manipulator, libburnia project.

Copying of file objects from ISO image to disk filesystem is: Enabled
xorriso : NOTE : Loading ISO image tree from LBA 0
xorriso : UPDATE : 4569 nodes read in 1 seconds
Drive current: -indev '/media/root/jessie-dvds/dvd8_12.iso'
Media current: stdio file, overwriteable
Media status : is written , is appendable
Media summary: 1 session, 2290589 data blocks, 4474m data, 5577m free
Volume id: 'Debian 8.6.0 i386 12'
xorriso : FAILURE : Cannot restore directory to disk filesystem: 
'/pool/contrib/b/beast-mcmc' : No space left on device
xorriso : SORRY : Restoring failed:  '/pool/contrib/b/beast-mcmc' 
= '/media/myrepo/pool/contrib/b/beast-mcmc'

xorriso : aborting : -abort_on 'FAILURE' encountered 'FAILURE'
xorriso 1.3.2 : RockRidge filesystem manipulator, libburnia project.

*NOTHING* had gotten thru to intended destination partition.

How many things did I do wrong?
Help please.





Re: Problem attempting to use xorriso

2016-11-04 Thread Thomas Schmitt
Hi,

Richard Owlett's xorriso wrote:
> xorriso : FAILURE : Cannot write all bytes to disk filesystem path 
> '/media/myrepo/pool/main/n/ns3/ns3-doc_3.17+dfsg-1_all.deb' : No space left 
> on device
> ...
> xorriso : aborting : -abort_on 'FAILURE' encountered 'FAILURE'

Looks like the filesystem to which you copy is full.


> My running copy of Debian is on /dev/sda9 and had ~4GB of 10GB used.

Determine the device file and mount point of the destination by

  df /media/myrepo/pool/main/n/ns3

or if missing by the lowest existing directory above that path.

It should tell you something like

  Filesystem 1K-blocks Used Available Use% Mounted on
  /dev/sda3  490205312 23072576 442208680   5% /

but with "Use%" 99% or 100% and possible a mount path longer than "/".
That's where you would have to make room.


Have a nice day :)

Thomas




Trivial script will NOT execute

2016-11-04 Thread Richard Owlett

Today I've been having weird problems executing scripts.
As I have no valuable data on the partition containing Debian, I 
wiped it and did a fresh install of Debian Jessie (8.6.0) MATE 
desktop environment from a purchased set of DVDs. Earlier today I 
had had reason to create an *,iso of DVD1 of 13 using xorriso. 
The ISO had a MD5SUM matching the one at debian.org .


More than a half-century of trouble shooting *screams* 'operator 
error' ;[

But what? [Caja reports the execute bit is set ;]

Cut-n-paste from MATE terminal:
root@full-jessier:~# #!/bin/bash -x
root@full-jessier:~# cd /media/root/myrepo
root@full-jessier:/media/root/myrepo# RCO
bash: RCO: command not found
root@full-jessier:/media/root/myrepo# ls
lost+found  new file  RCO  x2  xtract2 (copy)
root@full-jessier:/media/root/myrepo#


The content of RCO [with Linux line endings] is:

F='dvd8_'
N=0
E='.iso'
echo ""
while true
  do
read -p "press Enter (Ctrl+C to exit)" dummyvar
let N=N+1
FILENAME=$F$N$E
echo $FILENAME
echo ""
echo "*"
 done


Assistance appreciated.





Re: Trivial script will NOT execute

2016-11-04 Thread John L. Ries
Any chance the current directory is not in your path?

--|
John L. Ries  |
Salford Systems   |
Phone: (619)543-8880 x107 |
or (435)867-8885  |
--|

On 11/4/16 6:51 PM, Richard Owlett wrote:
> Today I've been having weird problems executing scripts.
> As I have no valuable data on the partition containing Debian, I wiped
> it and did a fresh install of Debian Jessie (8.6.0) MATE desktop
> environment from a purchased set of DVDs. Earlier today I had had
> reason to create an *,iso of DVD1 of 13 using xorriso. The ISO had a
> MD5SUM matching the one at debian.org .
>
> More than a half-century of trouble shooting *screams* 'operator
> error' ;[
> But what? [Caja reports the execute bit is set ;]
>
> Cut-n-paste from MATE terminal:
> root@full-jessier:~# #!/bin/bash -x
> root@full-jessier:~# cd /media/root/myrepo
> root@full-jessier:/media/root/myrepo# RCO
> bash: RCO: command not found
> root@full-jessier:/media/root/myrepo# ls
> lost+found  new file  RCO  x2  xtract2 (copy)
> root@full-jessier:/media/root/myrepo#
>
>
> The content of RCO [with Linux line endings] is:
>
> F='dvd8_'
> N=0
> E='.iso'
> echo ""
> while true
>   do
> read -p "press Enter (Ctrl+C to exit)" dummyvar
> let N=N+1
> FILENAME=$F$N$E
> echo $FILENAME
> echo ""
> echo "*"
>  done
>
>
> Assistance appreciated.
>
>
>



Re: Trivial script will NOT execute

2016-11-04 Thread Christian Seiler
On 11/05/2016 01:51 AM, Richard Owlett wrote:
> Today I've been having weird problems executing scripts.
> As I have no valuable data on the partition containing Debian, I
> wiped it and did a fresh install of Debian Jessie (8.6.0) MATE
> desktop environment from a purchased set of DVDs. Earlier today I had
> had reason to create an *,iso of DVD1 of 13 using xorriso. The ISO
> had a MD5SUM matching the one at debian.org .
> 
> More than a half-century of trouble shooting *screams* 'operator error' ;[
> But what? [Caja reports the execute bit is set ;]
> 
> Cut-n-paste from MATE terminal:
> root@full-jessier:~# #!/bin/bash -x
> root@full-jessier:~# cd /media/root/myrepo
> root@full-jessier:/media/root/myrepo# RCO
> bash: RCO: command not found

By default for security reasons the current directory is not in the
PATH environment variable on Linux. Perhaps in your previous install
you had manually added it to your environment, but in a fresh
installation with an empty home directory (or at the very least
without restoring dotfiles in your home directory) it will not be
present.

You can add it to PATH via:

export PATH=$PATH:.

in the current shell. You can also add that line to your ~/.bashrc
to make that permanent. (Note that you appear to be running this as
root, so ~ means the home directory of the root user here, typically
/root.)

Please be aware of the security implications of this though; while
adding it to the end of PATH (as my line above does) is not quite as
bad as adding it in the front, this could lead you to potentially
running programs from untrusted sources. (Example scenario: you have
a command line open in a directory which contains an executable or a
script with the name of something you want to execute, you
accidentally removed the command a month ago during a system update;
in that case typing in that command will execute the binary/script
from the current directory - and if the current directory comes from
an untrusted source, because it's on an external pendrive that you
don't trust, for example, then it could lead you to executing
malicious code.)

Alternatively, what most people do is not add the current directory
to PATH explicitly. Because there's another way to call a script or
binary from the current directory, by explicitly telling the shell
what you want - in this case by prepending './'. In your case, you
can do

./RC0

and that will execute the script "RC0" in the current directory. It
will also be explicit that you are executing something from the
current directory and not a system command - which is why I prefer
to do it this way instead of tinkering with PATH here.

As a side note: your script RC0 doesn't appear to start with a
shebang line. In that case the script will be executed via /bin/sh,
so it will work regardless, but I would suggest to make that
explicit by having the script start with #!/bin/sh. (Or #!/bin/bash
if you need bash features in the script.)

Regards,
Christian



Re: Trivial script will NOT execute

2016-11-04 Thread sunrise



On Fri, 4 Nov 2016 19:51:50 -0500
Richard Owlett  wrote:

>Today I've been having weird problems executing scripts.
>As I have no valuable data on the partition containing Debian, I 
>wiped it and did a fresh install of Debian Jessie (8.6.0) MATE 
>desktop environment from a purchased set of DVDs. Earlier today I 
>had had reason to create an *,iso of DVD1 of 13 using xorriso. 
>The ISO had a MD5SUM matching the one at debian.org .
>
>More than a half-century of trouble shooting *screams* 'operator 
>error' ;[
>But what? [Caja reports the execute bit is set ;]
>
>Cut-n-paste from MATE terminal:
>root@full-jessier:~# #!/bin/bash -x
>root@full-jessier:~# cd /media/root/myrepo
>root@full-jessier:/media/root/myrepo# RCO

Try specifying the full path name to the script, as in:

root@full-jessier:~# /media/root/myrepo/RCO

or

root@full-jessier:~# cd /media/root/myrepo
root@full-jessier:/media/root/myrepo# ./RCO


>bash: RCO: command not found
>root@full-jessier:/media/root/myrepo# ls
>lost+found  new file  RCO  x2  xtract2 (copy)
>root@full-jessier:/media/root/myrepo#
>
>
>The content of RCO [with Linux line endings] is:
>
>F='dvd8_'
>N=0
>E='.iso'
>echo ""
>while true
>   do
> read -p "press Enter (Ctrl+C to exit)" dummyvar
> let N=N+1
> FILENAME=$F$N$E
> echo $FILENAME
> echo ""
> echo "*"
>  done
>
>
>Assistance appreciated.
>
>


Thanks,
Jason



Re: Trivial script will NOT execute

2016-11-04 Thread Richard Owlett

On 11/4/2016 7:54 PM, John L. Ries wrote:

Any chance the current directory is not in your path?



That's not a mere 'scary' thought,
it is a *TERRIFYING* thought :<

"Why?" you may ask.
" 'cause it implies an intrinsic failure of *nix documentation."

As a computer *USER* I predate CPM80.
I've always assumed that 'cd xyz' implicitly implied that xyz now 
implicitly implied that {xyz} was not only the "Current Working 
Directory" but in default path.


After my post, but before your reply, I had tried
  echo $PATH
result was not encouraging :<

I now suspect not only "operator error" but "operator ignorance" ;<
What should I "be reading"/"have read" ?
TIA

P.S. a few hours ago a similar script had executed as I naively 
expected ;/






On 11/4/16 6:51 PM, Richard Owlett wrote:

Today I've been having weird problems executing scripts.
As I have no valuable data on the partition containing Debian, I wiped
it and did a fresh install of Debian Jessie (8.6.0) MATE desktop
environment from a purchased set of DVDs. Earlier today I had had
reason to create an *,iso of DVD1 of 13 using xorriso. The ISO had a
MD5SUM matching the one at debian.org .

More than a half-century of trouble shooting *screams* 'operator
error' ;[
But what? [Caja reports the execute bit is set ;]

Cut-n-paste from MATE terminal:
root@full-jessier:~# #!/bin/bash -x
root@full-jessier:~# cd /media/root/myrepo
root@full-jessier:/media/root/myrepo# RCO
bash: RCO: command not found
root@full-jessier:/media/root/myrepo# ls
lost+found  new file  RCO  x2  xtract2 (copy)
root@full-jessier:/media/root/myrepo#


The content of RCO [with Linux line endings] is:

F='dvd8_'
N=0
E='.iso'
echo ""
while true
   do
 read -p "press Enter (Ctrl+C to exit)" dummyvar
 let N=N+1
 FILENAME=$F$N$E
 echo $FILENAME
 echo ""
 echo "*"
  done


Assistance appreciated.










upgraded testing and now gpg is not working

2016-11-04 Thread H.S.


I upgraded my testing box last night and now my gpg decryption does not 
work anymore.


I have a file encrypted for myself which I have been using. Till 
recently I was able to decrypt it successfully for years.


After last night's upgrade, I get the following:
$> gpg -d somefile.txt.asc
gpg: encrypted with 2048-bit ELG key, ID , created 2012-02-01
  "my name and email here"
gpg: public key decryption failed: Timeout
gpg: decryption failed: No secret key

Is something broken in the updated GPG related package in testing?

Thanks.


--

Please reply to this list only. I read this list on its corresponding
newsgroup on gmane.org. Replies sent to my email address are just
filtered to a folder in my mailbox and get periodically deleted without
ever having been read.



Re: Trivial script will NOT execute

2016-11-04 Thread Ben Caradoc-Davies

On 05/11/16 14:19, Christian Seiler wrote:

By default for security reasons the current directory is not in the
PATH environment variable on Linux.


I will never again permit "." in my $PATH since the day I tried to run 
killall (meaning /usr/bin/killall) while in /etc/init.d on a production 
Red Hat server. Unbeknownst to me, a "helpful" fellow admin had put "." 
at the front of root's $PATH, so /etc/init.d/killall ran (part of the 
shutdown process) and left the system in an unusable hung state, 
requiring me to obtain physical access, perform a hard reset, and go 
into hiding.


+1 for ./scriptname or scripts installed in well-defined bin directories 
that have a well-considered order on the $PATH.


Kind regards,

--
Ben Caradoc-Davies 
Director
Transient Software Limited 
New Zealand



Re: Trivial script will NOT execute

2016-11-04 Thread John L. Ries
I actually found out about the path issue as a brand new UNIX user
(OSF/1, to be exact) in 1994 (I was a die hard DOS user before that).
To this day, I have "." in my path, but last and only on my personal
account (never as root).

--|
John L. Ries  |
Salford Systems   |
Phone: (619)543-8880 x107 |
or (435)867-8885  |
--|


On Friday 2016-11-04 19:37, Richard Owlett wrote:

>Date: Fri, 4 Nov 2016 19:37:53
>From: Richard Owlett 
>To: debian-user@lists.debian.org
>Subject: Re: Trivial script will NOT execute
>Resent-Date: Sat, 5 Nov 2016 01:38:19 +
>Resent-From: 
>
> On 11/4/2016 7:54 PM, John L. Ries wrote:
>> Any chance the current directory is not in your path?
>>
>
> That's not a mere 'scary' thought,
> it is a *TERRIFYING* thought :<
>
> "Why?" you may ask.
> " 'cause it implies an intrinsic failure of *nix documentation."
>
> As a computer *USER* I predate CPM80.
> I've always assumed that 'cd xyz' implicitly implied that xyz now implicitly
> implied that {xyz} was not only the "Current Working Directory" but in default
> path.
>
> After my post, but before your reply, I had tried
>  echo $PATH
> result was not encouraging :<
>
> I now suspect not only "operator error" but "operator ignorance" ;<
> What should I "be reading"/"have read" ?
> TIA
>
> P.S. a few hours ago a similar script had executed as I naively expected ;/
>
>
>
>>
>> On 11/4/16 6:51 PM, Richard Owlett wrote:
>>> Today I've been having weird problems executing scripts.
>>> As I have no valuable data on the partition containing Debian, I wiped
>>> it and did a fresh install of Debian Jessie (8.6.0) MATE desktop
>>> environment from a purchased set of DVDs. Earlier today I had had
>>> reason to create an *,iso of DVD1 of 13 using xorriso. The ISO had a
>>> MD5SUM matching the one at debian.org .
>>>
>>> More than a half-century of trouble shooting *screams* 'operator
>>> error' ;[
>>> But what? [Caja reports the execute bit is set ;]
>>>
>>> Cut-n-paste from MATE terminal:
>>> root@full-jessier:~# #!/bin/bash -x
>>> root@full-jessier:~# cd /media/root/myrepo
>>> root@full-jessier:/media/root/myrepo# RCO
>>> bash: RCO: command not found
>>> root@full-jessier:/media/root/myrepo# ls
>>> lost+found  new file  RCO  x2  xtract2 (copy)
>>> root@full-jessier:/media/root/myrepo#
>>>
>>>
>>> The content of RCO [with Linux line endings] is:
>>>
>>> F='dvd8_'
>>> N=0
>>> E='.iso'
>>> echo ""
>>> while true
>>>   do
>>> read -p "press Enter (Ctrl+C to exit)" dummyvar
>>> let N=N+1
>>> FILENAME=$F$N$E
>>> echo $FILENAME
>>> echo ""
>>> echo "*"
>>>  done
>>>
>>>
>>> Assistance appreciated.
>>>
>>>
>>>
>>
>>
>
>



Re: No ffmpeg?, howto convert/extract audio from webmd ,write to ogg?

2016-11-04 Thread Michael J. Ford
It's also in debian testing:

mford@voyager:~$ apt list | grep ^ffmpeg/
ffmpeg/testing,now 7:3.1.5-1 amd64 [installed]

On Mon, 2016-10-31 at 22:47 +0100, sp113438 wrote:
> On Mon, 31 Oct 2016 17:35:49 -0400
> Tony Baldwin  wrote:
> 
> > There seems to be no plain ffmpeg in the jessie repos.
> > 
> > 
> 
> I do have ffmpeg, perhaps from jessie backports.
> 

signature.asc
Description: This is a digitally signed message part


Resolved: No ffmpeg?, howto convert/extract audio from webmd ,write to ogg?

2016-11-04 Thread Tony Baldwin



On 11/04/2016 11:31 PM, Michael J. Ford wrote:

It's also in debian testing:

mford@voyager:~$ apt list | grep ^ffmpeg/
ffmpeg/testing,now 7:3.1.5-1 amd64 [installed]

On Mon, 2016-10-31 at 22:47 +0100, sp113438 wrote:

On Mon, 31 Oct 2016 17:35:49 -0400
Tony Baldwin  wrote:


There seems to be no plain ffmpeg in the jessie repos.




I do have ffmpeg, perhaps from jessie backports.


I thought I marked this thread resolved days ago.
I got it from backports, all set now.

Thanks,
Tony

--
http://tonybaldwin.me
all tony, all the time



Re: upgraded testing and now gpg is not working

2016-11-04 Thread Frank

Op 05-11-16 om 03:55 schreef H.S.:

I upgraded my testing box last night and now my gpg decryption does not
work anymore.


Until a couple of months ago, gpg was gpg1. It's gpg2 now and you need 
to specify gpg1 explicitely if you want to use the 'classic' version. 
You may have to install the gnupg1 package first. This provides 
/usr/bin/gpg1 and I seem to remember it didn't get pulled in 
automatically on my testing machine.


gpg2 can't find your secret keys because it stores them elsewhere. For 
gpg1 they are in the secring.gpg file and gpg2 looks at the files in the 
private-keys-v1.d directory. If this directory does not exist inside 
your gnupg directory (probably ~/.gnupg), then the automatic migration 
failed somehow.


Regards,
Frank