[expert] please help with lo

[paul hammat]

I'm trying to run freeciv.
It will not allow me to run it from root.  I go to a user account try to 
run it and it will not work.  Loopback lo is not running and will not allow 
civ client to connect to civserver.

How do I set up lo for the user account?  it functions ok as root

Im using ML7 the original iso image.

Im using the latest freeciv rpm for mandrake.

Thanks for you assistance.

Paul

[expert] sysinit and halt scripts

[Ernest N. Wilcox Jr.]

In the event that any one has had a problem keeping consistant sound settings,
I have been mucking about in the /etc/rc.d/sysinit and /etc/rc.d/inet.d/halt
scripts. Where these scripts save / load sound settings, I find two problems:

1) there is no /etc/.aumixrc file
2) there is no /bin/aumix-minimal executable file (or script)

My solution consists of four steps:

1) create a .aumixrc file by running aumix in a terminal window in
interactive mode as a regular user, and using the [s] command to save the mixer
settings to $HOME/.aumixrc (the default location).

2) copy the .aumixrc file to /etc (too obvious to include, but I want
to be complete).

3) edit /etc/rc.d/sysinit to use /usr/bin/aumix rather than
/bin/aumix-minimal.

4) edit /etc/rc.d/inet.d/halt as in number 3.

I will paste the appropriate parts of the files at the end of this message for
the use of anyone interested. I have included comments etc, and please do not
read any sarcasm into them, as none was intended (I'm simply direct).

If anyone has comment or improvements, please respond.

this is from /etc/rc.d/sysinit

---snip---

# load sound modules
if [ -n "$USEMODULES" ]; then
   if grep -s -q "^alias sound " /etc/conf.modules ; then
  action "Loading sound module" modprobe sound
   fi
   if grep -s -q "^alias midi " /etc/conf.modules ; then
   action "Loading midi module" modprobe midi
   fi
fi

# Load mixer settings
# if grep -q "\(sparcaudio\|sound\)" /proc/devices 2>/dev/null && [ -f /etc/.aumixrc 
-a -x /bin/aumix-minimal ]; then
#   action "Loading mixer settings" /bin/aumix-minimal -f /etc/.aumixrc -L
# fi

# The above does not work.
# There is no /bin/aumix-minimal file, and there is no /etc/.aumixrc file.
# I have run /usr/bin/aumix in interactive mode and saved the desired settings
# with the save command (s), which saves the settings in  the .aumixrc file and
# places the file in the users home folder.
# I next opened the filemanager (superuser mode), and copied the [$HOME}/.aumixrc file
# to /etc/.aumixrc - the following two lines reflect the changes in code which now will
# allow mixer settings to be loaded at srart-up.
# Note that a similar hack to /etc/rc.d/init.d/halt will save settings at shutdown

if grep -q "\(sparcaudio\|sound\)" /proc/devices 2>/dev/null && [ -f /etc/.aumixrc -a 
-x /usr/bin/aumix ]; then
action "Loading mixer settings" /usr/bin/aumix -f /etc/.aumixrc -L
fi

if [ -f /proc/sys/kernel/modprobe ]; then
   if [ -n "$USEMODULES" ]; then
   echo "/sbin/modprobe" > /proc/sys/kernel/modprobe
   else
   echo "" > /proc/sys/kernel/modprobe
   fi
fi

# Load modules (for backward compatibility with VARs)
if [ -f /etc/rc.d/rc.modules ]; then
/etc/rc.d/rc.modules
fi

# Add raid devices

---end snip---

this is from /etc/rc.d/inet.d/halt

---snip---

# Save mixer settings, here for lack of a better place.
# See /etc/rc.d/sysinit for an explaination of the following changes.
# Simply put the following code does not work. It points to nonexisting files,
# (namely /etc/.aumixrc [settings] and /bin/aumic-minimal [non-existing]).
# /etc/.aumixrc must be created using aumix, and the script code must be changed
# to use /usr/bin/aumix, then all will be well.
# grep -q "\(sparcaudio\|sound\)" /proc/devices
# if [ $? = 0 -a -x /bin/aumix-minimal ]; then
#   runcmd "Saving mixer settings" /bin/aumix-minimal -f /etc/.aumixrc -S
#fi
grep -q "\(sparcaudio\|sound\)" /proc/devices
if [ $? = 0 -a -x /usr/bin/aumix ]; then
   runcmd "Saving mixer settings" /usr/bin/aumix -f /etc/.aumixrc -S
fi

---end snip---

 -- 

___
Ernie ([EMAIL PROTECTED]

Re: [expert] Netscape 6 pr1 and https

[Rial Juan]

I believe there were issues with netscape 6 and SSL... I thought I read it
somewhere in the docs or on the site, not sure. Anyway, since netscape 6
installs separately from the old 4.7, I'd advise you to just stick to 4.7 for
those sites. There's more stuff in NS6 that's not working yet, and still quite
some bugs, so I'd recommend it only to freaks (like me) who want to try it out
to see what it looks like.

On May 16 Craig Woods wrote:

> Hi Lang,
> 
> It sounds like Netscape 6 does not support the SSL version being used by the
> sites you are attempting to access. I use Netscape 4.72 with 128 bit
> encryption so I do not know about Netscape 6 but you can look at the
> documentation to see what kind of SSL Netscape 6 works with, if it works
> with secured sites at all
> 
> Craig
> 
> Lang Zhi wrote:
> 
> > Hi..
> > Any idea why my netscape 6 pr1 cannot connect to https website ?
> > It gimme the error : "https is not a registered protocol"
> >
> > I'm using Mandrake 7.0
> > BTW, one of my PC that using Mandrake 6.1 don't have this problem..
> >
> > Any idea ?
> > 
> > Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
> 

-- 

Rial Juan
e-mail:  [EMAIL PROTECTED]
Belgiumtel:(++32) 89/856533
ulyssis system admininstrator   

The little critters in nature; they don't know they're ugly.
That's very funny... A fly marying a bumble-bee...



Sign the petition at http://www.libranet.com/petition.html
Help bring us more Linux Drivers

Re: [expert] GNOME instead of KDE...

[Alan N.]

Andrew Post wrote:
> 
> A promising candidate for a real GUI PPP dialer is the rp3 package in
> the latest Redhat. It's a front end to wvdial and ifup, and it's as easy
> as you can get: you supply it with the phone number of your ISP, your
> username and password, and it takes care of the rest. It even figures
> out how to navigate ISPs in the dark ages that still use terminal
> sessions without _any_ user intervention.  It's not a finished product
> (the applet in the latest version is broken, for example), but it has a
> lot of potential.
> 
> Andrew
> 

I'm showing my Linux ignorance here.. ( My face is red ).

This is the "gnome" ppp dialer I am using..

It works fine.. rp3 is exactly what I am using.  I apolgize for not
knowing there was a differnce..
This dialer worked from day 1.. No need to fix it if it ain't broke.. :)

Alan

-- 
-
[EMAIL PROTECTED] ([EMAIL PROTECTED]) Running RedHat Linux 6.2 and/or 
BeOS 5.0.  No Windows involved!
-

Re: [expert] GNOME instead of KDE...

[Andrew Post]

A promising candidate for a real GUI PPP dialer is the rp3 package in
the latest Redhat. It's a front end to wvdial and ifup, and it's as easy
as you can get: you supply it with the phone number of your ISP, your
username and password, and it takes care of the rest. It even figures
out how to navigate ISPs in the dark ages that still use terminal
sessions without _any_ user intervention.  It's not a finished product
(the applet in the latest version is broken, for example), but it has a
lot of potential.

Andrew

Anton Graham wrote:
> 
> Submitted 16-May-00 by Alan N.:
> | Gavin Clark wrote:
> | >
> | > >From: "José Ignacio Alvear Zapata" <[EMAIL PROTECTED]>
> | > > I'm trying to use KDE as less as possible, but there are some features that
> | > > I still don't know how to set up with GNOME. Could some of you help me?
> | > >
> | > > 1) I would like to dial to my ISP using some aplication like Kppp. Is there
> | > > some for GNOME?
> | >
> | > there is a ppp dial util in gnome but it sucks. you can still use kppp by
> | > opening it via the command line.
> | >
> | I'm not sure what you mean.  I'm using the gnome ppp dialer, it works
> | just fine.
> |
> | However, kppp which I used to use, I cannot dial unless root.. Since the
> | gnome dialer worked fine, I never put much thought into fixing it.
> 
> For that matter, the modem lights applet makes a handy dialer if you set
> it up right.  Set up the dialup through linuxconf as ppp0.  Oce you are
> satisfied that users can "/sbin/ifup ppp0" successfully, open up the
> properties for the modem lights applet and put that as the dialup command
> and "/sbin/ifdown ppp0" for the disconnect.  After that, the button on the
> bottom or left of it (depending on how you have it setup) acts as a
> dial/disconnect button.
> 
> --
>_
>  _|_|_
>   ( )   *Anton Graham
>   /v\  / <[EMAIL PROTECTED]>
> /(   )X
>  (m_m)   GPG ID: 18F78541
> Penguin Powered!

Re: [expert] How to install firewall?

[Bruce E. Harris]

If you really want security, your firewall should be on another computer
strictly devoted to that one function.  As firewall on your desktop is better
then nothing, but not as much as you would think.

Go to my website and you will find a link to EDGE firewall/router by Fireplug. I
have this desktop running behind an EDGE firewall. As a bonus, it is also a
router for my home network using IP masq. Pretty slick. The software is free
for download, and the hardware can be a 486 with a floppy and 16mb of RAM or
harddrive version (more tools and the like) on a 486 with 32mb of RAM. Lineo,
the Thinclient split of Caldera bought Fireplug a couple weeks ago...guess they
were impressed with it too.

On Tue, 16 May 2000, you wrote:
> 
> Hi
> I am just a new starter in Linux, I like to install and config a firewall for my 
>computer.  How can I install firewall and where can I get information about firewall 
>installation? 
> 
> Please help
> Thank
> 


Content-Type: text/html; name="unnamed"
Content-Transfer-Encoding: quoted-printable
Content-Description: 


-- 
Best Regards, Bruce

My website: http://harrisherd.ahv.cx

Re: [expert] GNOME instead of KDE...

[John Aldrich]

On Tue, 16 May 2000, you wrote:
> 
> I'm not sure what you mean.  I'm using the gnome ppp dialer, it works
> just fine.
> 
> However, kppp which I used to use, I cannot dial unless root.. Since the
> gnome dialer worked fine, I never put much thought into fixing it.
> 
Known bug with RedHat. Go read the "Gotcha" pages on
RedHat's website.
John

[expert] Latest Mandrake

[Sridhar Govindarajulu]

What is the latest stable release of Mandrake and where can I download it
from.

Second, I'd like to create a bootable CD with my CDRW drive, any
instructions please.

Cheers
Sridhar

Re: [expert] GNOME instead of KDE...

[Gavin Clark]

--
>From: "Alan N." <[EMAIL PROTECTED]>
>> me:
>> there is a ppp dial util in gnome but it sucks. you can still use kppp by
>> opening it via the command line.
>>
> I'm not sure what you mean.  I'm using the gnome ppp dialer, it works
> just fine.

I suppose it's been updated since I tried it last, but I tried to get on
line with it for two days then gave up. kde has lots of docs and
troubleshooting info for kppp.

Gavin

Re: [expert] GNOME instead of KDE...

[Anton Graham]

Submitted 16-May-00 by Alan N.:
| Gavin Clark wrote:
| > 
| > >From: "José Ignacio Alvear Zapata" <[EMAIL PROTECTED]>
| > > I'm trying to use KDE as less as possible, but there are some features that
| > > I still don't know how to set up with GNOME. Could some of you help me?
| > >
| > > 1) I would like to dial to my ISP using some aplication like Kppp. Is there
| > > some for GNOME?
| > 
| > there is a ppp dial util in gnome but it sucks. you can still use kppp by
| > opening it via the command line.
| > 
| I'm not sure what you mean.  I'm using the gnome ppp dialer, it works
| just fine.
| 
| However, kppp which I used to use, I cannot dial unless root.. Since the
| gnome dialer worked fine, I never put much thought into fixing it.

For that matter, the modem lights applet makes a handy dialer if you set
it up right.  Set up the dialup through linuxconf as ppp0.  Oce you are
satisfied that users can "/sbin/ifup ppp0" successfully, open up the
properties for the modem lights applet and put that as the dialup command
and "/sbin/ifdown ppp0" for the disconnect.  After that, the button on the
bottom or left of it (depending on how you have it setup) acts as a
dial/disconnect button.
 
-- 
   _
 _|_|_
  ( )   *Anton Graham
  /v\  / <[EMAIL PROTECTED]>
/(   )X
 (m_m)   GPG ID: 18F78541
Penguin Powered!

[expert] Couple of questions..

[Scott Walker]

Is there a supermount page soemwhere that I can grab the patch for the
kernel? Also, Is there a USB patch fro the kernel also?

Re: [expert] How to install firewall?

[Alan N.]

Adrian Saidac wrote:
> 
> Linux Firewalls by Ziegler (New Riders)
> 
> > Vu Nguyen wrote:
> >
> > Hi
> > I am just a new starter in Linux, I like to install and config a
> > firewall for my computer.  How can I install firewall and where can I
> > get information about firewall installation?
> >
> > Please help
> > Thank

Or goto freshmeat.net and search for PMfirewall.  EASY EASY to get
running and works.

( If all Linux software was this easy to install.. :) )

-- 
-
[EMAIL PROTECTED] ([EMAIL PROTECTED]) Running RedHat Linux 6.2 and/or 
BeOS 5.0.  No Windows involved!
-

Re: [expert] GNOME instead of KDE...

[Alan N.]

Gavin Clark wrote:
> 
> >From: "José Ignacio Alvear Zapata" <[EMAIL PROTECTED]>
> > I'm trying to use KDE as less as possible, but there are some features that
> > I still don't know how to set up with GNOME. Could some of you help me?
> >
> > 1) I would like to dial to my ISP using some aplication like Kppp. Is there
> > some for GNOME?
> 
> there is a ppp dial util in gnome but it sucks. you can still use kppp by
> opening it via the command line.
> 
I'm not sure what you mean.  I'm using the gnome ppp dialer, it works
just fine.

However, kppp which I used to use, I cannot dial unless root.. Since the
gnome dialer worked fine, I never put much thought into fixing it.

Alan

-- 
-
[EMAIL PROTECTED] ([EMAIL PROTECTED]) Running RedHat Linux 6.2 and/or 
BeOS 5.0.  No Windows involved!
-

Re: [expert] How to install firewall?

[Adrian Saidac]

Linux Firewalls by Ziegler (New Riders)

> Vu Nguyen wrote:
> 
> Hi
> I am just a new starter in Linux, I like to install and config a
> firewall for my computer.  How can I install firewall and where can I
> get information about firewall installation?
> 
> Please help
> Thank

[expert] How to install firewall?

[Vu Nguyen]

Hi
I am just a new starter in Linux, I like to install 
and config a firewall for my computer.  How can I install firewall and 
where can I get information about firewall installation? 
 
Please help
Thank

Re: [expert] I need to rename a bunch of files

[Anton Graham]

Submitted 16-May-00 by Timothy Litwiller:
| I found mmv but can't seem to get the proper command line
| 
| the files that I have are like this
| picture-thumb.jpg  and the new album software requires them to be
| picture.thumb.jpg
| 
| 
| what kind of command line am I looking for?
| 
| of if someone has a quick script that they use for this type of thing
| with instructions I would gladly use that.

how about omething like:

for i in *.jpg; do mv $i $(echo $i | tr '-' '.'); done

-- 
   _
 _|_|_
  ( )   *Anton Graham
  /v\  / <[EMAIL PROTECTED]>
/(   )X
 (m_m)   GPG ID: 18F78541
Penguin Powered!

RE: [expert] Can't mount CDrom and Floppy

[Arild Sunde]

Try 
the complete version of that command: 
# 
mount /dev/fd0 /mnt/floppy -t fstype
 
change 
fstype with the correct type.  I.e: ext2, msdos, vfat, iso9660 
..
 
If 
this works you need to edit your /etc/fstab file.
 
Check 
out 'man fstab'
 
Greetings Arild S.

  -Original Message-From: Vu Nguyen 
  [mailto:[EMAIL PROTECTED]]Sent: 17. mai 2000 01:05To: 
  [EMAIL PROTECTED]Subject: [expert] Can't mount CDrom and 
  Floppy
  Hi everyone
  Before I configured the multi processor, I could 
  mount the CDrom and Floppy but since I had the multi processor works, I can 
  not mount my CDrom and floppy no more.  
   
  When ever I type (#mount /mnt/floppy) 
  
   
  it said that: 
  (mount:  wrong fs type, bad option, bad 
  superblock on /dev/fd0, or too many mounted file system).  
   
  I do not know what i really did 
  wrong.
   
  Please give me some help
  Thank

[expert] Can't mount CDrom and Floppy

[Vu Nguyen]

Hi everyone
Before I configured the multi processor, I could 
mount the CDrom and Floppy but since I had the multi processor works, I can not 
mount my CDrom and floppy no more.  
 
When ever I type (#mount /mnt/floppy) 
 
it said that: 
(mount:  wrong fs type, bad option, bad 
superblock on /dev/fd0, or too many mounted file system).  
 
I do not know what i really did wrong.
 
Please give me some help
Thank

[expert] I need to rename a bunch of files

[Timothy Litwiller]

I found mmv but can't seem to get the proper command line

the files that I have are like this
picture-thumb.jpg  and the new album software requires them to be
picture.thumb.jpg


what kind of command line am I looking for?

of if someone has a quick script that they use for this type of thing
with instructions I would gladly use that.

Re: [expert] Multiple entries in inetd.conf

[Cecil Watson]

Have you installed/upgraded Linuxconf multiple times?  In order to use
linuxconf via the web the root password is needed.  You can of course rem
out the statements in inetd.con or if you what/need web access you can
configure linuxconf to only accept connections from certain IPs.  You can
also try webmin http://www.webmin.com/webmin, here is a link to securely
administering your linux box over the net.
http://plainmail.com/linux/secure.html.

Cecil
- Original Message -
From: John Aldrich <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, May 16, 2000 2:40 PM
Subject: Re: [expert] Multiple entries in inetd.conf


> On Tue, 16 May 2000, you wrote:
> > Hi,
> > I have just been looking at my inetd.conf and found the following on the
> > end.  Can anyone suggest what process may have put them there as I
> > didn't consciously do it!
> >
> > # # End of inetd.conf
> >
> > linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> > #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
> >
> > linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> >
> > linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> > #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
> >
> I've been told that making Linuxconf available via HTTP is
> a big security hole as it can make your system configurable
> by others. I'd comment 'em out myself. At least I did.
> John
>

Re: [expert] ipchains logging

[Vincent Danen]

On Tue, 16 May 2000, Lee Willis wrote:

> > What file, specifically, does ipchains log to when I use -l?  It says it
> > writes to syslog but when I look in /var/log, I don't see anything that it
> > writes to and I'm trying to debug a firewall script...  any info is
> > appreciated.
> 
> Typically it is /var/log/messages unless you have specified otherwise in
> /etc/syslog.conf
> 
> Hope that helps

I look in /var/log/messages and don't see anything logged by
ipchains.  How would I change it in syslog.conf to log to another file so
I can check it?  It should be logging stuff but it isn't to my knowledge
as I don't see anything at all.

-- 
[EMAIL PROTECTED], OpenPGP key available on www.keyserver.net
Freezer Burn BBS:  telnet://bbs.freezer-burn.org . ICQ: 54924721
Webmaster for the Linux Portal Site Freezer Burn:  http://www.freezer-burn.org

[expert] SHM File System

[Juan A. Magallon]

I am using the 2.3.99-preX kernel series, and so I have to mount
the shm file system. Following kernel docs, I know where to
mount it (/var/shm), but don't know when. And those docs also say
that /var/shm is just an election, it could change between
distributions.

Any one knows if this process has been standarised in Mandrake ?
When (in rc scripts) and where (mount point) should I mount shm ?

TIA

-- 
Juan Antonio Magallon Lacarta
mailto:[EMAIL PROTECTED]
Grupo de Informatica Grafica Avanzada
http://giga.cps.unizar.es
Tlf: 34-976-762354,1916 - Fax: 34-976-761914

Re: [expert] test

[Wolfgang Bornath]

On Mon, May 15, 2000 at 13:47 -0600, Jonathan Oppenheim wrote:
> anyone know how one gets on the digest version of the list?

Yes. Every reader of 
   http://www.linux-mandrake.com/en/flists.php3
knows how to.

Either enter this url in your favourite browser or go to
Mandrake website and choose "Mailinglists" from the menue.

Big deal!

wobo
-- 
GPG-Fingerprint: FE5A 0891 7027 8D1B 4E3F  73C1 AD9B D732 A698 82EE
For Public Key mailto [EMAIL PROTECTED] with Subject: GPG-Request
---
ISDN4LINUX-FAQ -- Deutsch: http://www.wolf-b.de/i4l/i4lfaq-de.html

Re: [expert] Mandrake 7 Security Levels.

[Gavin Clark]

the 'user guide and refference manual' has a chapter on security, more info
than I expected really. they call the thing "MSEC"

Gavin

--
>From: Anton Graham <[EMAIL PROTECTED]>
> Submitted 16-May-00 by Luis Henriques:
> | Hi, is it just me or is there some documentation somewhere that explains in
> | DETAIL what each of the various security levels in Mandrake actually  do ?!
> | I'm not a hard core programmer to go digging through source to figure out
> | what the various levels are actually doing. Please point me to some
> | detailed description.
>
> Level 5 is documented in the msec documentation.

Re: [expert] Mandrake 7 Security Levels.

[Alan Shoemaker]

Joséif you're talking about the "User Guide & Reference
Manual" it can be downloaded from here:

http://www.linux-mandrake.com/en/fdoc.php3

Alan


"José Ignacio Alvear Zapata" wrote:
> 
> Hi
> 
> The security issues are well docummented on Mandrake's refference book. I
> only have it in spanish, so If you dont't have the book, I can translate (as
> well as I can =( ) the security related part for you.
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

Re: [expert] Multiple entries in inetd.conf

[Gavin Clark]

these are in mine too. it must be the mandrake installer setting things up
for you

>From: bill <[EMAIL PROTECTED]>
> Hi,
> I have just been looking at my inetd.conf and found the following on the
> end.  Can anyone suggest what process may have put them there as I
> didn't consciously do it!
>
> # # End of inetd.conf
>
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat

Re: [expert] GNOME instead of KDE...

[Gavin Clark]

>From: "José Ignacio Alvear Zapata" <[EMAIL PROTECTED]>
> I'm trying to use KDE as less as possible, but there are some features that
> I still don't know how to set up with GNOME. Could some of you help me?
>
> 1) I would like to dial to my ISP using some aplication like Kppp. Is there
> some for GNOME?

there is a ppp dial util in gnome but it sucks. you can still use kppp by
opening it via the command line.

> 2) I'd prefer to use gdm as my login manager. How could I set it to start by
> default instead of kdm?

I think you have to set that in the kde control center

Gavin

Re: [expert] Mandrake 7 Security Levels.

[José Ignacio Alvear Zapata]

Hi

The security issues are well docummented on Mandrake's refference book. I 
only have it in spanish, so If you dont't have the book, I can translate (as 
well as I can =( ) the security related part for you.

Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

Re: [expert] Netscape 6 pr1 and https

[Craig Woods]

Hi Lang,

It sounds like Netscape 6 does not support the SSL version being used by the
sites you are attempting to access. I use Netscape 4.72 with 128 bit
encryption so I do not know about Netscape 6 but you can look at the
documentation to see what kind of SSL Netscape 6 works with, if it works
with secured sites at all

Craig

Lang Zhi wrote:

> Hi..
> Any idea why my netscape 6 pr1 cannot connect to https website ?
> It gimme the error : "https is not a registered protocol"
>
> I'm using Mandrake 7.0
> BTW, one of my PC that using Mandrake 6.1 don't have this problem..
>
> Any idea ?
> 
> Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

Re: [expert] Mandrake 7 Security Levels.

[Anton Graham]

Submitted 16-May-00 by Luis Henriques:
| Hi, is it just me or is there some documentation somewhere that explains in
| DETAIL what each of the various security levels in Mandrake actually  do ?! 
| 
| - There appears to be no help with description in the install procedure
| - Using locate in the shell to look for "paranoid, security" and other
| words doesn't seem to turn up anything.
| - Using the search engine on Mandrake's web page for unique words like
| "paranoid" turns up zip, nada!
| - Google can't find anything either
| - Nobody on IRC seems to know
| - Nobody seems to be asking this question in newsgroups (i searched deja.com)
| 
| I'm not a hard core programmer to go digging through source to figure out
| what the various levels are actually doing. Please point me to some
| detailed description.  If there is one, it sure as heck should be more
| obvious!! I saw dozens of posts on newsgroups and IRC channels of people
| selecting paranoid and then not being able to login as root !

Paranoid = security setting 5.  The word means nothing to the system.  It
a mnemonic to help users decide on settings.  Level 5 is documented in the
msec documentation.

-- 
   _
 _|_|_
  ( )   *Anton Graham
  /v\  / <[EMAIL PROTECTED]>
/(   )X
 (m_m)   GPG ID: 18F78541
Penguin Powered!

[expert] Mandrake 7 Security Levels.

[Luis Henriques]

Hi, is it just me or is there some documentation somewhere that explains in
DETAIL what each of the various security levels in Mandrake actually  do ?! 

- There appears to be no help with description in the install procedure
- Using locate in the shell to look for "paranoid, security" and other
words doesn't seem to turn up anything.
- Using the search engine on Mandrake's web page for unique words like
"paranoid" turns up zip, nada!
- Google can't find anything either
- Nobody on IRC seems to know
- Nobody seems to be asking this question in newsgroups (i searched deja.com)

I'm not a hard core programmer to go digging through source to figure out
what the various levels are actually doing. Please point me to some
detailed description.  If there is one, it sure as heck should be more
obvious!! I saw dozens of posts on newsgroups and IRC channels of people
selecting paranoid and then not being able to login as root !

Thanks in advance,

Luis.

[expert] GNOME instead of KDE...

[José Ignacio Alvear Zapata]

Hi to all:

I'm trying to use KDE as less as possible, but there are some features that 
I still don't know how to set up with GNOME. Could some of you help me?

My problems are:

1) I would like to dial to my ISP using some aplication like Kppp. Is there 
some for GNOME?
2) I'd prefer to use gdm as my login manager. How could I set it to start by 
default instead of kdm?

THANKS

Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

[expert] OT: - Wine & StarCraft

[GAGLIANO, ANGELO]

Title: [expert] OT: - Wine & StarCraft





I tried sending this yesterday but didn't see it there so I apologize if anyone gets this twice:


Wine & StarCraft



I am not sure if this is a Wine issue or a MDK 7 and Wine issue but here:


I used to run StarCraft with Wine (I forgot the version) in MDK 6. I installed MDK 7 a few months earlier this year and have not been able to get StarCraft to start anymore with the version that comes with 7.0 and with the latest version from the winehq site. I set up my wine.conf file as usually but now when I try to run StarCraft I get a relocation error and the message telling me to run the "StarCraft.exe" manually.  I have checked on the linuxgames site but they do not have any updated information. 

Thanks for any help


Angelo
=== 
 The goal is to understand how if at all anything and everything from 
 politics to math to realizing what is real is connected. 


 http://ourminds.n3.net
 http://hammer.prohosting.com/~ourminds/ 
 [EMAIL PROTECTED]


 .~. 
 /V\    Let the penguin show you the way 
    // \\    The way to Linux 
   /(   )\ 
    ^`~'^ 
 === 

Re: [expert] Multiple entries in inetd.conf

[John Aldrich]

On Tue, 16 May 2000, you wrote:
> Hi,
> I have just been looking at my inetd.conf and found the following on the
> end.  Can anyone suggest what process may have put them there as I
> didn't consciously do it!
> 
> # # End of inetd.conf
> 
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
> 
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> 
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
> 
I've been told that making Linuxconf available via HTTP is
a big security hole as it can make your system configurable
by others. I'd comment 'em out myself. At least I did.
John

Re: [expert] PPPd and ISDN

[Charles Curley]

On Tue, May 16, 2000 at 10:05:43AM +, Lang Zhi wrote:
-> Hi.
-> I get this error message while trying to connect to my ISP via ISDN line.
-> 
-> May 16 09:58:20 gkar pppd[743]: Serial connection established.
-> May 16 09:58:20 gkar pppd[743]: Using interface ppp0
-> May 16 09:58:20 gkar pppd[743]: Connect: ppp0 <--> /dev/ttyS0
-> May 16 09:58:51 gkar pppd[743]: LCP: timeout sending Config-Requests
-> May 16 09:58:51 gkar pppd[743]: Connection terminated.
-> May 16 09:58:51 gkar pppd[743]: Receive serial link is not 8-bit clean:
-> May 16 09:58:51 gkar pppd[743]: Problem: all had bit 7 set to 0
-> May 16 09:58:51 gkar pppd[743]: Hangup (SIGHUP)
-> May 16 09:58:51 gkar pppd[743]: Exit.
-> 
-> What does it mean  by all this 8-bit and 7-bit thingy ?
-> Any idea guyz ??

Your serial port is mis-matched to the ISDN device as to whether it should
be set for 8 bits or 7. Check your documentation for the ISDN box. If it
wants 7 bits, set your serial line to 7 bits, etc. Use setserial to set
the serial port correctly.


-- 

-- C^2

No windows were crashed in the making of this email.

Looking for fine software and/or web pages?
http://w3.trib.com/~ccurley

[expert] Boot framebuffer question.

[Ron Greer]

Okay, I'm looking for a way to have a fully/mostly graphical boot on my
linux machine.
I'm assuming this is done by using the Framebuffer techniques (Same ones
used to show the Tux in the upper corner during boot), but I have two
questions.
1:  Is this really what I need?  How did Corel do it in their distro?  That
looks sort of like what I need to get started.

2:  Where can I find good solid documentation on how to use the framebuffer
stuff Just for boot?

-=Ron=-

Re: [expert] Multiple entries in inetd.conf

[Dan Westlake]

Did you just update our version of Samba? SWAT is a html based configuration tool
for Samba.


- Original Message -

> Hi,
> I have just been looking at my inetd.conf and found the following on the
> end.  Can anyone suggest what process may have put them there as I
> didn't consciously do it!
>
> # # End of inetd.conf
>
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
>
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
>
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
>
> Thanks
> Bill
>

[expert] apache ... localhost up and running

[hans]

hi all,

yeap! have found my little idiot !!! was only the port 8080 - have
changed to 80 and now localhost, IP, Domainname - all is running.

Think, it was my nervousness, because the job I have to do is extremely
timerelated. Anyway - now I'm happy in both ways :
first, that in such situations anyone is there, who is willing to help,
and the other way - I can do my job now.

T h a n k s   a g a i  n

bye
Hans Schneidhofer

Re: [expert] Multiple entries in inetd.conf

[Eugene Grimsdell]

SWAT is a samba port usaly 901 

if you unhash them and use your browser you can go to 127.0.0.1:901 and you
will see the best interface ever to set samba 

It usaly is there from install, if it wasn't there before I would say that you
either installed samba or upgraded it.



On Tue, 16 May 2000, bill wrote:
> Hi,
> I have just been looking at my inetd..conf and found the following on the
> end.  Can anyone suggest what process may have put them there as I
> didn't consciously do it!
> 
> # # End of inetd.conf
> 
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
> 
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> 
> linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
> #swat  stream  tcp nowait.400  root /usr/sbin/swat swat
> 
> Thanks
> Bill
-- 
Eugene GrimsdellSystem Administrator
OSRAM South Africa  www.osram.co.za
Tell: +27 11 805-1777
Cell: +27 83 491-0955
Fax:  +27 11 405-6695
[EMAIL PROTECTED]

Re: [expert] apache ... httpd.conf

[Lee Willis]

hans wrote:

> I have attached my httpd.conf. Maybe, I have not seen a possible failer.
> But I cannot find out, what's the reason, why a connection to
> "localhost" is NOT possible.

[httpd.conf]
> # Port: The port to which the standalone server listens. For
> # ports < 1023, you will need httpd to be run as root initially.
> #
> Port 8080

Web browsers by default send requests to port 80, but your apache server
is listening on port 8080. To check this is the problem try entering:

http://127.0.0.1:8080/

into your web browser and you should get a response.

To fix it simply change the line that says "Port 8080" to "Port 80" 
(Without the quotes of course ...) and restart apache with
"/etc/rc.d/init.d/httpd restart" or "/usr/local/apache/bin/apachectl
restart" depending on how you installed (I didn't really follow the rest
of the thread, sorry :( )

Lee
-- 
Lee Willis  [EMAIL PROTECTED]

[expert] apache ... httpd.conf

[hans]

hi  Jean-Michel,
hi list,

I have attached my httpd.conf. Maybe, I have not seen a possible failer.
But I cannot find out, what's the reason, why a connection to
"localhost" is NOT possible.

Thank again for helping me

Hans Schneidhofer


##
## httpd.conf -- Apache HTTP server configuration file
##

#
# Based upon the NCSA server configuration files originally by Rob McCool.
#
# This is the main Apache server configuration file.  It contains the
# configuration directives that give the server its instructions.
# See http://www.apache.org/docs/> for detailed information about
# the directives.
#
# Do NOT simply read the instructions in here without understanding
# what they do.  They're here only as hints or reminders.  If you are unsure
# consult the online docs. You have been warned.  
#
# After this file is processed, the server will look for and process
# /usr/local/apache/conf/srm.conf and then /usr/local/apache/conf/access.conf
# unless you have overridden these with ResourceConfig and/or
# AccessConfig directives here.
#
# The configuration directives are grouped into three basic sections:
#  1. Directives that control the operation of the Apache server process as a
# whole (the 'global environment').
#  2. Directives that define the parameters of the 'main' or 'default' server,
# which responds to requests that aren't handled by a virtual host.
# These directives also provide default values for the settings
# of all virtual hosts.
#  3. Settings for virtual hosts, which allow Web requests to be sent to
# different IP addresses or hostnames and have them handled by the
# same Apache server process.
#
# Configuration and logfile names: If the filenames you specify for many
# of the server's control files begin with "/" (or "drive:/" for Win32), the
# server will use that explicit path.  If the filenames do *not* begin
# with "/", the value of ServerRoot is prepended -- so "logs/foo.log"
# with ServerRoot set to "/usr/local/apache" will be interpreted by the
# server as "/usr/local/apache/logs/foo.log".
#

### Section 1: Global Environment
#
# The directives in this section affect the overall operation of Apache,
# such as the number of concurrent requests it can handle or where it
# can find its configuration files.
#

#
# ServerType is either inetd, or standalone.  Inetd mode is only supported on
# Unix platforms.
#
ServerType standalone

#
# ServerRoot: The top of the directory tree under which the server's
# configuration, error, and log files are kept.
#
# NOTE!  If you intend to place this on an NFS (or otherwise network)
# mounted filesystem then please read the LockFile documentation
# (available at http://www.apache.org/docs/mod/core.html#lockfile>);
# you will save yourself a lot of trouble.
#
# Do NOT add a slash at the end of the directory path.
#
ServerRoot "/usr/local/apache"

#
# The LockFile directive sets the path to the lockfile used when Apache
# is compiled with either USE_FCNTL_SERIALIZED_ACCEPT or
# USE_FLOCK_SERIALIZED_ACCEPT. This directive should normally be left at
# its default value. The main reason for changing it is if the logs
# directory is NFS mounted, since the lockfile MUST BE STORED ON A LOCAL
# DISK. The PID of the main server process is automatically appended to
# the filename. 
#
#LockFile /usr/local/apache/logs/httpd.lock

#
# PidFile: The file in which the server should record its process
# identification number when it starts.
#
PidFile /usr/local/apache/logs/httpd.pid

#
# ScoreBoardFile: File used to store internal server process information.
# Not all architectures require this.  But if yours does (you'll know because
# this file will be  created when you run Apache) then you *must* ensure that
# no two invocations of Apache share the same scoreboard file.
#
ScoreBoardFile /usr/local/apache/logs/httpd.scoreboard

#
# In the standard configuration, the server will process this file,
# srm.conf, and access.conf in that order.  The latter two files are
# now distributed empty, as it is recommended that all directives
# be kept in a single file for simplicity.  The commented-out values
# below are the built-in defaults.  You can have the server ignore
# these files altogether by using "/dev/null" (for Unix) or
# "nul" (for Win32) for the arguments to the directives.
#
#ResourceConfig conf/srm.conf
#AccessConfig conf/access.conf

#
# Timeout: The number of seconds before receives and sends time out.
#
Timeout 300

#
# KeepAlive: Whether or not to allow persistent connections (more than
# one request per connection). Set to "Off" to deactivate.
#
KeepAlive On

#
# MaxKeepAliveRequests: The maximum number of requests to allow
# during a persistent connection. Set to 0 to allow an unlimited amount.
# We recommend you leave this number high, for maximum performance.
#
MaxKeepAliveRequests 100

#
# KeepAliveTimeout: Number of seconds to wait for the next request from the
# same client on the same connection.
#
KeepAliveTimeout 15

#
# Server-

[expert] Multiple entries in inetd.conf

[bill]

Hi,
I have just been looking at my inetd.conf and found the following on the
end.  Can anyone suggest what process may have put them there as I
didn't consciously do it!

# # End of inetd.conf

linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
#swat  stream  tcp nowait.400  root /usr/sbin/swat swat

linuxconf stream tcp wait root /bin/linuxconf linuxconf --http

linuxconf stream tcp wait root /bin/linuxconf linuxconf --http
#swat  stream  tcp nowait.400  root /usr/sbin/swat swat

Thanks
Bill

Re: [expert] ipchains logging

[Lee Willis]

Vincent Danen wrote:
> 
> What file, specifically, does ipchains log to when I use -l?  It says it
> writes to syslog but when I look in /var/log, I don't see anything that it
> writes to and I'm trying to debug a firewall script...  any info is
> appreciated.

Typically it is /var/log/messages unless you have specified otherwise in
/etc/syslog.conf

Hope that helps

Lee