[OT] any good online doc for the details of compiling "hello, world"?
not really a fedora question, but i'm interested in a step-by-step description of what happens when one compiles and runs "hello, world". it's sort of a fedora question since i want to relate those steps to the essential fedora packages and where they come into play (gcc, cpp, glibc-devel, libgcc, and so on), related to things like crtbegin, crtend, etc. i'm thinking you get the idea. i wanted to write a short tutorial showing how that process works, adding in usage of nm, readelf and/or objdump to describe what happens at each step. is there anything out there something like that? thanks. rday -- Robert P. J. Day Waterloo, Ontario, CANADA Linux Consulting, Training and Kernel Pedantry. Web page: http://crashcourse.ca Twitter: http://twitter.com/rpjday -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
unable to burn disk in brasero disk burner (every-time it spoils the disk )
Dear all, I'm trying to burn a cd iso image with my brasero disk burner on FC 11, but not able to burn the disk ..it shows following error log and disk gets fail ... I've lost my 8 disks ( DVD also gets fail . but in ugly M$ xp can burn the disk without any problem..!!! it means there is no any fault at dvd burner ) can any-one tell me what is going wrong Checking session consistency (brasero_burn_check_session_consistency burn.c:1905) BraseroBurnURI called brasero_job_get_action BraseroBurnURI called brasero_job_get_action BraseroBurnURI called brasero_job_set_output_size_for_current_track BraseroBurnURI stopping BraseroBurnURI called brasero_job_get_action BraseroBurnURI called brasero_job_get_session_output_size BraseroBurnURI output set (IMAGE) image = /tmp/brasero_tmp_4HIQ2U.bin toc = none BraseroBurnURI called brasero_job_get_action BraseroBurnURI called brasero_job_get_current_track BraseroBurnURI called brasero_job_get_input_type BraseroBurnURI no burn:// URI found BraseroBurnURI stopping BraseroLocalTrack called brasero_job_get_action BraseroLocalTrack called brasero_job_get_action BraseroLocalTrack called brasero_job_set_output_size_for_current_track BraseroLocalTrack stopping BraseroLocalTrack called brasero_job_get_action BraseroLocalTrack called brasero_job_get_session_output_size BraseroLocalTrack output set (IMAGE) image = /tmp/brasero_tmp_6HHQ2U.bin toc = none BraseroLocalTrack called brasero_job_get_action BraseroLocalTrack called brasero_job_get_current_track BraseroLocalTrack called brasero_job_get_input_type BraseroLocalTrack no remote URIs BraseroLocalTrack stopping BraseroChecksumImage called brasero_job_get_current_track BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_flags BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_fd_in BraseroChecksumImage called brasero_job_set_output_size_for_current_track BraseroChecksumImage stopping BraseroChecksumImage called brasero_job_get_current_track BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_flags BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_session_output_size BraseroChecksumImage output set (IMAGE) image = /tmp/brasero_tmp_B5HQ2U.bin toc = none BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_action BraseroChecksumImage called brasero_job_get_input_type BraseroChecksumImage called brasero_job_set_current_action BraseroChecksumImage called brasero_job_get_fd_in BraseroChecksumImage called brasero_job_get_current_track BraseroChecksumImage called brasero_job_get_current_track BraseroChecksumImage Starting checksuming file /home/jk/RPM-packages/FC12.iso (size = 723488768) BraseroChecksumImage called brasero_job_get_fd_out BraseroChecksumImage called brasero_job_get_current_track BraseroChecksumImage Setting new checksum (type = 2) 8790491bfa9d00f283ed9dd2d77b3906 ( before) BraseroChecksumImage Finished track successfully BraseroChecksumImage stopping BraseroLibburn called brasero_job_get_action BraseroLibburn called brasero_job_get_action BraseroLibburn unsupported operation BraseroLibburn deactivating BraseroLibburn called brasero_job_get_action BraseroLibburn called brasero_job_get_action BraseroLibburn called brasero_job_get_device BraseroLibburn Drive (/dev/sr0) init result = 1 BraseroLibburn called brasero_job_get_flags BraseroLibburn called brasero_job_get_media BraseroLibburn called brasero_job_get_fd_in BraseroLibburn called brasero_job_get_tracks BraseroLibburn called brasero_job_get_session_output_size BraseroLibburn called brasero_job_set_current_action BraseroLibburn burn_drive_convert_fs_adr( /dev/sr0 ) BraseroLibburn called brasero_job_set_dangerous BraseroLibburn called brasero_job_set_current_action BraseroLibburn burn_drive_is_enumerable_adr( /dev/sr0 ) is true BraseroLibburn Async START UNIT succeeded after 0.1 seconds BraseroLibburn mmc_get_nwa: Track Info Block: NWA_V == 0 BraseroLibburn cd Profile= 09h , obs= 32768 , obs_pad= 0 BraseroLibburn mmc_get_nwa: Track Info Block: NWA_V == 0 BraseroLibburn SAO|RAW: Inquired nwa: 0 , ret= 0 , cap=0 BraseroLibburn called brasero_job_set_dangerous BraseroLibburn called brasero_job_set_current_action BraseroLibburn SCSI error condition on command 2Ah WRITE(10): [3 0C 00] Write error BraseroLibburn Libburn reported an error SCSI error on write(17578,16): [3 0C 00] Write error BraseroLibburn called brasero_job_error BraseroLibburn finished with an error BraseroLibburn asked to stop because of an error error= 1 message= "SCSI error on write(17578,16): [3 0C 00] Write error" BraseroLibburn stopping Session error : SCSI error on write(17578,16): [3 0C 00] Write error (brasero_burn_record burn.c:2599)
Re: evolution to MS exchange 2007 via MAPI
On Thu, 2009-10-29 at 10:40 -0700, Rick Stevens wrote: > As to getting IMAP opened on Exchange, I've never understood the > reluctance of IT people to permit this. There's nothing insecure > about it (other than the inherent insecurity of all M$ products). Learning to do yet another thing? Yet another thing to support users with? Do they have to pay more to add this service? IT seem to have the same attitude of Microsoft, they want to dictate how everybody uses a computer. -- [...@localhost ~]$ uname -r 2.6.27.25-78.2.56.fc9.i686 Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On 10/29/2009 02:23 PM, Mike Cloaked wrote: > > In my wife's case she reported that when hitting the enter key to login > under kdm the screen went black, and this was followed by a cursor at top > right and repeated lines containing text, with "nouveau_fifo_free:freeing > fifo 1" > > So this appears to have been a graphics issue concerning the nouveau driver > - however this evening I was able to boot this machine and am running on the > previous kernel for safety. (2.6.30.8-64.fc11.i686.PAE) in the above case, maybe her mistyped her password in one ocassion and when typed it correctly , the machine got the following bug https://bugzilla.redhat.com/show_bug.cgi?id=506171 " If password entered incorrectly in KDM, next successful login causes X server shutdown and hang " maybe you can try to mistype your password and enter correctly with kernel 2.6.30.8-64 to discard kernel-2.6.30.9-90.fc11.i686.PAE as the cause > The other machine is extinct - I cannot boot at all even to a liveCD so I > can't investigate it. However at the time that failed there were weird > graphics artifacts with multicoloured lines - and it is conceivable that it > could have also been a graphics issue - on boot it puts port00: after the > first message on the screen, and then some stuff on the screen (after the > post check complets) but no boot - I tried partedmagic DVD but it won't boot > at all. I suppose that the disc could have gone bad and over the weekend > will replace the drive and see if that allows a boot and re-install - but I > am out of ideas on that... however the nouveau failure on my wife's machine > worries me if you disconnect the hard drive, maybe you can boot from a livecd, to see if the motherboard and video card are fine. I don't know if the livecd include the memttest maybe the sata cable failed or the sata port where the disk is connected failed, if you have a sata port free you can connect the hard drive in it if using uuids in the partitions Gabriel -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: evolution 2.28 rpm for F11?
On Fri, 2009-10-30 at 07:48 +1100, L wrote: > Hi > > Evolution 2.28 is the current stable version. where to get a rom for > F11? The current version for F11 is 2.26. the support for MS exchange > is poor. evo-mapi crashes persistently. I'd guess Evo is too tightly integrated into GNOME to update without updating everything. (I think that was said some previous release where the same question was asked.) F12 is out soon... > > > Best > > Yuandan > > -- Matthew Saltzman Clemson University Math Sciences mjs AT clemson DOT edu http://www.math.clemson.edu/~mjs -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: fc-11 on IBM e server
I'm Sorry for not trying your suggestions yet I have been quite busy and this is a server I'm setting up on my spear time for our church school for the end of the year. I did down load CentOS 5.4 i386 live and was not able to get it to run with apci on I did get a CPU 0 stop responding error. I ran the bios hardware diagnoses and everything keeps coming up good except the usb but that might need some kind of loop back I don't know. Kevin Graff On Tue, Oct 27, 2009 at 8:56 AM, Gilboa Davara wrote: > On Sun, 2009-10-25 at 09:05 -0400, kevin graff wrote: > > Hello > > I have an IBM e-server x-series 335 with 2 xeon 2.6 GHz and 1 Gig > > of ram. > > Can you post the complete configuration of the machine? > (CPU model, etc) > > > It uses a built in raid controller I have set up as a Raid 1 with 2 36 > > GIG hard drives. If I try to install using 64 bit version it tells me > > that there are know 64 bit CPU and to use other version if I install > > 32 bit version with the ACPI=off I can get it to install but it locks > > up all the time. Most time I get a CPU 1 not responding error also > > when I check the hardware it reports back 2 cpu I would have thought > > that it should have shown 4 cpus since I have 2 dual core cpus running > > hyper threading. > > You sure you have dual core CPUs and not two single core / HT capable P4 > Xeon CPUs (hence the lack of x86_64 support)? > > > The severe is an old one and the problem could be in the hardware, I > > have been using Fedora since core 1 and never ran into so much trouble > > dose any one have any experience install fedora on this server? > > You best bet is to download CentOS 5.4 i386 DVD and see if it works. > If it doesn't, you're looking at a hardware issue. > If it does, you'll have to connect your machine via serial cable to > another machine so you could post the complete kernel boot log. > > - Gilboa > > -- > fedora-list mailing list > fedora-list@redhat.com > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list > Guidelines: > http://fedoraproject.org/wiki/Communicate/MailingListGuidelines > -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What goes on during 'Starting Install process'
Craig White wrote: On Thu, 2009-10-29 at 20:10 -0400, Robert Moskowitz wrote: What is going on under the covers while the progress bar for 'Starting install process. This may take several minutes'? On my Asus ee 701 it has been going for over an hour and only 3/4 done is this an upgrade? if so, walk away, don't watch because it takes a very long time to upgrade. I am doing an install. There was nothing of value, well, about 100Mb of files that I copied to USB and I want what a clean FC11 would be. But I did walk away. I just happened to glance over at it from this laptop's screen and saw where it was. Now it is doing the 1000+ package install, and that I know will take a couple hours. Just what was the setup startup? The partitions where already formatted. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What goes on during 'Starting Install process'
On Thu, 2009-10-29 at 20:10 -0400, Robert Moskowitz wrote: > What is going on under the covers while the progress bar for 'Starting > install process. This may take several minutes'? > > On my Asus ee 701 it has been going for over an hour and only 3/4 done is this an upgrade? if so, walk away, don't watch because it takes a very long time to upgrade. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
What goes on during 'Starting Install process'
What is going on under the covers while the progress bar for 'Starting install process. This may take several minutes'? On my Asus ee 701 it has been going for over an hour and only 3/4 done -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: firefox 3.5.4 broken?
suvayu ali writes: 2009/10/29 Michael Cronenworth : On 10/29/2009 06:26 PM, Michael Cronenworth wrote: 1. Highlight a word on a web page. 2. Right click on word. 3. Select "Search Google for "word"... 4. ??? 5. Crash box appears. Anyone else? Ignore this e-mail. Carry on. >.< Did a restart of Firefox fixed it? I think I experienced something similar last night. Yes -- I've noticed that a while ago -- after upgrading Firefox, any running instance needs to be shut down and restarted, otherwise the existing running Firefox goes bonkers. pgpD67YRqk7F6.pgp Description: PGP signature -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Where is V4L
Jim writes: Fc11 I must be missing something, but has V4L (video4Linux) changed it's name ? I can't find it under the V4L name. I think that most of V4L's drivers have been merged into the kernel a long time ago. pgpWoita4Xuxq.pgp Description: PGP signature -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: firefox 3.5.4 broken?
2009/10/29 Michael Cronenworth : > On 10/29/2009 06:26 PM, Michael Cronenworth wrote: >> >> 1. Highlight a word on a web page. >> 2. Right click on word. >> 3. Select "Search Google for "word"... >> 4. ??? >> 5. Crash box appears. >> >> Anyone else? >> > > Ignore this e-mail. Carry on. >.< > Did a restart of Firefox fixed it? I think I experienced something similar last night. -- Suvayu Open source is the future. It sets us free. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: firefox 3.5.4 broken?
On 10/29/2009 06:26 PM, Michael Cronenworth wrote: 1. Highlight a word on a web page. 2. Right click on word. 3. Select "Search Google for "word"... 4. ??? 5. Crash box appears. Anyone else? Ignore this e-mail. Carry on. >.< -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
firefox 3.5.4 broken?
1. Highlight a word on a web page. 2. Right click on word. 3. Select "Search Google for "word"... 4. ??? 5. Crash box appears. Anyone else? -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What are .config parameters for my kernel?
Jonathan Ryshpan wrote:
On Thu, 2009-10-29 at 15:17 -0700, Rick Stevens wrote:
The kernel source RPM ("kernel-whatever.src.rpm" package) does not
contain a ".config" file. You must create one by copying one of the
other "config-*" files in the RPM or via the "make menuconfig" or "make
xconfig" operations and saving the resulting configuration.
It looks like:
$ cd ~/rpmbuild
$ rpmbuild -bp SPECS/kernel.spec
generates a .configure file in the tree under BUILD -- There are both
a .configure and a .configure.old there. Here is what I find:
$ ll -At ~/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64
total 952
drwxr-xr-x. 83 jonrysh jonrysh 12288 Oct 27 20:25 Documentation/
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 mm/
-rw-r--r--. 1 jonrysh jonrysh 95272 Oct 27 20:25 .config
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 block/
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 configs/
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 init/
drwxr-xr-x. 6 jonrysh jonrysh 4096 Oct 27 20:25 kernel/
drwxr-xr-x. 22 jonrysh jonrysh 4096 Oct 27 20:25 include/
-rw-r--r--. 1 jonrysh jonrysh 148470 Oct 27 20:25 MAINTAINERS
drwxr-xr-x. 7 jonrysh jonrysh 4096 Oct 27 20:25 security/
drwxr-xr-x. 70 jonrysh jonrysh 4096 Oct 27 20:25 fs/
drwxr-xr-x. 6 jonrysh jonrysh 4096 Oct 27 20:25 lib/
-rw-r--r--. 1 jonrysh jonrysh 55238 Oct 27 20:25 Makefile
-rw-r--r--. 1 jonrysh jonrysh 109487 Oct 27 20:25 .config.old
-rw-r--r--. 1 jonrysh jonrysh 1782 Oct 27 20:25 config-arm
-rw-r--r--. 1 jonrysh jonrysh974 Oct 27 20:25 config-debug
-rw-r--r--. 1 jonrysh jonrysh 86400 Oct 27 20:25 config-generic
-rw-r--r--. 1 jonrysh jonrysh122 Oct 27 20:25 config-i586
-rw-r--r--. 1 jonrysh jonrysh 95 Oct 27 20:25 config-i686-PAE
...
That's entirely possible. What I was trying to say is that there is
no ".configure" file in the RPM, proper. It's created by an rpmbuild,
or one of the various "make" operations (make xconfig, make menuconfig,
make oldconfig, etc.) done after the source RPM is installed.
--
- Rick Stevens, Systems Engineer ri...@nerd.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
- The world is coming to an end ... SAVE YOUR FILES!!! -
--
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
Craig White wrote: On Thu, 2009-10-29 at 17:08 -0400, Robert Moskowitz wrote: Now I have to figure out how to deal with the small screen that the Eee 701 has... check out what I do with my Acer Aspire One https://fedoraproject.org/wiki/Acer_Aspire_One#xorg.conf 1024x600 screen I run virtual at 1280x1024. It works really well. Great, I will grab this after the install and try it out. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
Jim wrote: On 10/29/2009 05:08 PM, Robert Moskowitz wrote: Robert Moskowitz wrote: Kam Leo wrote: On Thu, Oct 29, 2009 at 6:42 AM, Robert Moskowitz wrote: I am now trying a FC11 install, I tried the recommendation below that worked with FC10, to press tab then enter askmethod. But this did not work. It went right along to install from CD, not giving me the option to point it to my local http repo server Aldo Foot wrote: On Wed, Sep 9, 2009 at 2:59 PM, Robert Moskowitz wrote: I am doing yet another install, this time on a Dell SFF with an internal CD. I want to do a network install from my local repo. With older Redhat stuff, I did a 'linux askmethod' at the enter prompt. I have noticed with FC10, that I would frequently not be given the chance to press enter, let alone type in the above command, but I would be given a menu that would allow me to supply a URL anyway. Well on this system I go right to the menu about install/recover/bootlocal/memcheck and from here it goes into the install from CD without ever being given the option to provide the URL of my local repo. Even if I let it go all the way to where you can provide which repos to load from, I cannot see how to point the installation repo to my network one. I have tried various combinations of F1, F2, F3 at that startup menu, but I never can get it to a point to let me provide the URL of my repo. Am I going to have to use a USB CD drive to trick it? _ Try with the TAB key as suggested here. http://docs.fedoraproject.org/release-notes/f10/en_US/What_is_New_for_Installation_and_Live_Images.html ~af I have no problem with either the F11 net-install CD or DVD. Which one of the ISO images (Live-CD, CD-disc 1, net-install, or DVD) did you use? It is the FC11 CD 1 that I downloaded back in August. I hit tab, got the prompt for the image load (don't have it in front of me, so I don't have exact details), entered: askmethod and pressed and it went on its merry way, not asking for any method I can try again... And this time it 'worked'. Now I have to figure out how to deal with the small screen that the Eee 701 has... I hav a E 701, you won't have any problem , just be sure it's setup for 800x600. Well I regularly did not see the bottom of the screen, and just 'knew' to press to move to the next screen. Fortunately all the important stuff for Disk Druid is on the top. But when it came to custom software install, I could only unclick office productivity and go with that, as the field for 'customize now' was off the screen, and I did not remember what the keystroke for it is. And isn't the E 701 800x480? -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What are .config parameters for my kernel?
On Thu, 2009-10-29 at 15:17 -0700, Rick Stevens wrote:
> The kernel source RPM ("kernel-whatever.src.rpm" package) does not
> contain a ".config" file. You must create one by copying one of the
> other "config-*" files in the RPM or via the "make menuconfig" or "make
> xconfig" operations and saving the resulting configuration.
It looks like:
$ cd ~/rpmbuild
$ rpmbuild -bp SPECS/kernel.spec
generates a .configure file in the tree under BUILD -- There are both
a .configure and a .configure.old there. Here is what I find:
$ ll -At ~/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64
total 952
drwxr-xr-x. 83 jonrysh jonrysh 12288 Oct 27 20:25 Documentation/
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 mm/
-rw-r--r--. 1 jonrysh jonrysh 95272 Oct 27 20:25 .config
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 block/
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 configs/
drwxr-xr-x. 2 jonrysh jonrysh 4096 Oct 27 20:25 init/
drwxr-xr-x. 6 jonrysh jonrysh 4096 Oct 27 20:25 kernel/
drwxr-xr-x. 22 jonrysh jonrysh 4096 Oct 27 20:25 include/
-rw-r--r--. 1 jonrysh jonrysh 148470 Oct 27 20:25 MAINTAINERS
drwxr-xr-x. 7 jonrysh jonrysh 4096 Oct 27 20:25 security/
drwxr-xr-x. 70 jonrysh jonrysh 4096 Oct 27 20:25 fs/
drwxr-xr-x. 6 jonrysh jonrysh 4096 Oct 27 20:25 lib/
-rw-r--r--. 1 jonrysh jonrysh 55238 Oct 27 20:25 Makefile
-rw-r--r--. 1 jonrysh jonrysh 109487 Oct 27 20:25 .config.old
-rw-r--r--. 1 jonrysh jonrysh 1782 Oct 27 20:25 config-arm
-rw-r--r--. 1 jonrysh jonrysh974 Oct 27 20:25 config-debug
-rw-r--r--. 1 jonrysh jonrysh 86400 Oct 27 20:25 config-generic
-rw-r--r--. 1 jonrysh jonrysh122 Oct 27 20:25 config-i586
-rw-r--r--. 1 jonrysh jonrysh 95 Oct 27 20:25 config-i686-PAE
...
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Where is V4L
Fc11 I must be missing something, but has V4L (video4Linux) changed it's name ? I can't find it under the V4L name. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What are .config parameters for my kernel?
Jonathan Ryshpan wrote:
On Thu, 2009-10-29 at 12:14 -0700, Rick Stevens wrote:
Jonathan Ryshpan wrote:
I had thought that they would come from the .config file from either the
kernel-source.rpm or the kernel-devel.rpm for my current kernel. But
these two files are different.CER=y
The config parameters for kernels installed by RPM packages are in
/boot. Look for "config-(kernelversion)" files. For example, to
see if my current kernel was compiled with PREEMPT:
[r...@bigdog ~]# grep PREEMPT /boot/config-`uname -r`
# CONFIG_PREEMPT_RCU is not set
# CONFIG_PREEMPT_RCU_TRACE is not set
CONFIG_PREEMPT_NOTIFIERS=y
# CONFIG_PREEMPT_NONE is not set
CONFIG_PREEMPT_VOLUNTARY=y
# CONFIG_PREEMPT is not set
So, no, my kernel is not compiled with PREEMPT set.
Thanks.
In fact the controlling config file is the one in kernel-devel.rpm,
which matches the one in /boot. In past releases, this has matched
the one in kernel-source.rpm, but apparently not in this release.
$ sum /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.config \
~/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config \
/boot/config-2.6.30.9-90.fc11.x86_64
2261493 /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.config
1641694
/home/jonrysh/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config
2261493 /boot/config-2.6.30.9-90.fc11.x86_64
The kernel binary RPM contains the /boot/config-(kernelversion) file
that was used to create the kernel. The ".config" file from the install
of the kernel-devel package is the same since the data in the
kernel-devel RPM was built at the same time as the kernel in the binary
RPM. Both of these are born out by your test results (first and third
lines of the results).
The kernel source RPM ("kernel-whatever.src.rpm" package) does not
contain a ".config" file. You must create one by copying one of the
other "config-*" files in the RPM or via the "make menuconfig" or "make
xconfig" operations and saving the resulting configuration. Again, your
results show that as well since the block count of the one in the second
line of your results is bigger and its checksum is different.
When building kernels from scratch, I usually install the source RPM,
use "rpmbuild -bp --target=x86)64", then switch to the destination,
"make xconfig", import the /boot config file and tweak things from
there--unless I'm making a very different kernel than the distribution
version. YMMV!
--
- Rick Stevens, Systems Engineer ri...@nerd.com -
- AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 -
--
-Brain: The organ with which we think that we think.-
--
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
On 10/29/2009 05:08 PM, Robert Moskowitz wrote: Robert Moskowitz wrote: Kam Leo wrote: On Thu, Oct 29, 2009 at 6:42 AM, Robert Moskowitz wrote: I am now trying a FC11 install, I tried the recommendation below that worked with FC10, to press tab then enter askmethod. But this did not work. It went right along to install from CD, not giving me the option to point it to my local http repo server Aldo Foot wrote: On Wed, Sep 9, 2009 at 2:59 PM, Robert Moskowitz wrote: I am doing yet another install, this time on a Dell SFF with an internal CD. I want to do a network install from my local repo. With older Redhat stuff, I did a 'linux askmethod' at the enter prompt. I have noticed with FC10, that I would frequently not be given the chance to press enter, let alone type in the above command, but I would be given a menu that would allow me to supply a URL anyway. Well on this system I go right to the menu about install/recover/bootlocal/memcheck and from here it goes into the install from CD without ever being given the option to provide the URL of my local repo. Even if I let it go all the way to where you can provide which repos to load from, I cannot see how to point the installation repo to my network one. I have tried various combinations of F1, F2, F3 at that startup menu, but I never can get it to a point to let me provide the URL of my repo. Am I going to have to use a USB CD drive to trick it? _ Try with the TAB key as suggested here. http://docs.fedoraproject.org/release-notes/f10/en_US/What_is_New_for_Installation_and_Live_Images.html ~af I have no problem with either the F11 net-install CD or DVD. Which one of the ISO images (Live-CD, CD-disc 1, net-install, or DVD) did you use? It is the FC11 CD 1 that I downloaded back in August. I hit tab, got the prompt for the image load (don't have it in front of me, so I don't have exact details), entered: askmethod and pressed and it went on its merry way, not asking for any method I can try again... And this time it 'worked'. Now I have to figure out how to deal with the small screen that the Eee 701 has... I hav a E 701, you won't have any problem , just be sure it's setup for 800x600. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
On Thu, 2009-10-29 at 17:08 -0400, Robert Moskowitz wrote: > > Now I have to figure out how to deal with the small screen that the > Eee > 701 has... check out what I do with my Acer Aspire One https://fedoraproject.org/wiki/Acer_Aspire_One#xorg.conf 1024x600 screen I run virtual at 1280x1024. It works really well. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What are .config parameters for my kernel?
On Thu, 2009-10-29 at 12:14 -0700, Rick Stevens wrote: > Jonathan Ryshpan wrote: > > I had thought that they would come from the .config file from either the > > kernel-source.rpm or the kernel-devel.rpm for my current kernel. But > > these two files are different.CER=y > The config parameters for kernels installed by RPM packages are in > /boot. Look for "config-(kernelversion)" files. For example, to > see if my current kernel was compiled with PREEMPT: > > [r...@bigdog ~]# grep PREEMPT /boot/config-`uname -r` > # CONFIG_PREEMPT_RCU is not set > # CONFIG_PREEMPT_RCU_TRACE is not set > CONFIG_PREEMPT_NOTIFIERS=y > # CONFIG_PREEMPT_NONE is not set > CONFIG_PREEMPT_VOLUNTARY=y > # CONFIG_PREEMPT is not set > > So, no, my kernel is not compiled with PREEMPT set. Thanks. In fact the controlling config file is the one in kernel-devel.rpm, which matches the one in /boot. In past releases, this has matched the one in kernel-source.rpm, but apparently not in this release. $ sum /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.config \ > ~/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config \ > /boot/config-2.6.30.9-90.fc11.x86_64 2261493 /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.config 1641694 /home/jonrysh/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config 2261493 /boot/config-2.6.30.9-90.fc11.x86_64 -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
Robert Moskowitz wrote: Kam Leo wrote: On Thu, Oct 29, 2009 at 6:42 AM, Robert Moskowitz wrote: I am now trying a FC11 install, I tried the recommendation below that worked with FC10, to press tab then enter askmethod. But this did not work. It went right along to install from CD, not giving me the option to point it to my local http repo server Aldo Foot wrote: On Wed, Sep 9, 2009 at 2:59 PM, Robert Moskowitz wrote: I am doing yet another install, this time on a Dell SFF with an internal CD. I want to do a network install from my local repo. With older Redhat stuff, I did a 'linux askmethod' at the enter prompt. I have noticed with FC10, that I would frequently not be given the chance to press enter, let alone type in the above command, but I would be given a menu that would allow me to supply a URL anyway. Well on this system I go right to the menu about install/recover/bootlocal/memcheck and from here it goes into the install from CD without ever being given the option to provide the URL of my local repo. Even if I let it go all the way to where you can provide which repos to load from, I cannot see how to point the installation repo to my network one. I have tried various combinations of F1, F2, F3 at that startup menu, but I never can get it to a point to let me provide the URL of my repo. Am I going to have to use a USB CD drive to trick it? _ Try with the TAB key as suggested here. http://docs.fedoraproject.org/release-notes/f10/en_US/What_is_New_for_Installation_and_Live_Images.html ~af I have no problem with either the F11 net-install CD or DVD. Which one of the ISO images (Live-CD, CD-disc 1, net-install, or DVD) did you use? It is the FC11 CD 1 that I downloaded back in August. I hit tab, got the prompt for the image load (don't have it in front of me, so I don't have exact details), entered: askmethod and pressed and it went on its merry way, not asking for any method I can try again... And this time it 'worked'. Now I have to figure out how to deal with the small screen that the Eee 701 has... -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On 29Oct2009 08:44, Craig White wrote: | On Thu, 2009-10-29 at 08:24 -0700, Mike Cloaked wrote: | > I am at a total loss as this takes out both operational desktops at home - | > it is of course possible that it is not connected with any updates - but two | > machines going out within 12 hours seems a very unfortunate coincidence - [...] | there are thousands updating F11 every day. If there is/was a problem, | we would be hearing about it. But you ARE hearing about it:-) -- Cameron Simpson DoD#743 http://www.cskk.ezoshosting.com/cs/ Gabriel Genellina: See PEP 234 http://www.python.org/dev/peps/pep-0234/ Angus Rodgers: You've got to love a language whose documentation contains sentences beginning like this: "Among its chief virtues are the following four -- no, five -- no, six -- points: [...]" from python-l...@python.org -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Freeze on resume from Suspend to Ram.
On Thu, Oct 29, 2009 at 9:56 PM, Linuxguy123 wrote: > For about the last month, occasionally my laptop will freeze when I > resume after suspending to RAM. About once in every 5 resumes. > > It responds to a keypress by starting to come to life. The fan goes on > high. But the screen stays dark and never displays anything. > > Does anyone else have this problem ? > > How would I troubleshoot it ? > > Thanks. > > -- > fedora-list mailing list > fedora-list@redhat.com > To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list > Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines > Maybe a memory failure, try to test ram using Memtest from Fedora DVD or LiveCD. -- Athmane Madjoudj -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
On 10/29/2009 02:43 PM, Yaakov Nemoy wrote:
2009/10/29 Jim:
On 10/29/2009 08:17 AM, Athmane Madjoudj wrote:
On Thu, Oct 29, 2009 at 12:52 PM, jdowwrote:
From: "Michael Cronenworth"
Sent: Wednesday, 2009/October/28 16:03
It seems in the past month brute force attacks are on the rise. They are
targeting anyone listening on port 22 and go after root. If you do not
have a hardened box, you will see thousands upon thousands of
connections in your logs. Once logged in they will set your system up in
their botnet.
Google: dt_ssh5
This little baby will get placed in /tmp and will be running. Looks to
be a SSH gateway for the attackers for easy access/control.
-Make sure your root password is not a dictionary word.
-Add iptables rules to limit multiple connections on SSH to 4 within a
minute.[1] Perhaps this needs to become a Fedora default.
Once within 3 minutes is entirely practical and effective. In the last
two days a pair of dolts kept trying 6621 times and 2185 times after the
door slammed shut in their faces. Their ISPs have been notified.
-Update your system.
-Use SELinux.
Why am I sending this message? Is it SPAM? No. I've seen this hit a
customer and cause an explosion in their network traffic. The backdoor
was installed on Sept. 30th and was not detected until recently. Google
results seem to indicate this past month with higher than normal brute
force activity.
[1]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--set --name DEFAULT --rsource
I love those rules and have been spreading them around for quite some
time now. I am glad to see somebody else has either adopted or discovered
the rule trick. It is devastatingly effective. Guessing a password as
simple as "mE3" would take decades of attempts. (Now I want to configure
sshd so that it logs the attempted password along with the attempted user
name.)
{^_-}
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines:
http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
You can install fail2ban
#yum install fail2ban
Links:
http://www.fail2ban.org/
Don't install fail2ban you will get twice the amount of "Gold Stars" .
I had fail2ban on a X86_64 box and I was constantly getting selinux Gold
Stars,
I relabelled fail2ban a number of times to no avail .
I was told it was the way fail2ban was structured wrong, what that means , I
have no Ideal. But I just uninstalled it.
Have you tried denyhosts yet? We haven't had any SELinux issues with it.
-Yaakov
No, but I will check it out.
Thanks.
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Freeze on resume from Suspend to Ram.
For about the last month, occasionally my laptop will freeze when I resume after suspending to RAM. About once in every 5 resumes. It responds to a keypress by starting to come to life. The fan goes on high. But the screen stays dark and never displays anything. Does anyone else have this problem ? How would I troubleshoot it ? Thanks. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
evolution 2.28 rpm for F11?
Hi Evolution 2.28 is the current stable version. where to get a rom for F11? The current version for F11 is 2.26. the support for MS exchange is poor. evo-mapi crashes persistently. Best Yuandan -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
Mike Cloaked wrote: > > > # service paranoia start > OK so the two machines conspired to fail in the same 12 hour period soon > after some updates - it is a hardware conspiracy! Now I know... > > Now I'll just have to make sure I don't update my phone, TV, or anything > else just in case they are part of the same plot! > # service paranoia stop > OK I have been working on this tonight - it turned out that my wife had the presence of mind to write down what was on the screen of her machine when it failed - and it was not as fatal/terminal as my own machine's problem. In my wife's case she reported that when hitting the enter key to login under kdm the screen went black, and this was followed by a cursor at top right and repeated lines containing text, with "nouveau_fifo_free:freeing fifo 1" So this appears to have been a graphics issue concerning the nouveau driver - however this evening I was able to boot this machine and am running on the previous kernel for safety. (2.6.30.8-64.fc11.i686.PAE) I have not yet sought to investigate whether there were changes in the new kernel (kernel-PAE-2.6.30.9-90.fc11.i686) that relate to the nouveau driver - however I have never until now had any graphics related issues with this machine and it does have an Nvidia 8300GS card. The other machine is extinct - I cannot boot at all even to a liveCD so I can't investigate it. However at the time that failed there were weird graphics artifacts with multicoloured lines - and it is conceivable that it could have also been a graphics issue - on boot it puts port00: after the first message on the screen, and then some stuff on the screen (after the post check complets) but no boot - I tried partedmagic DVD but it won't boot at all. I suppose that the disc could have gone bad and over the weekend will replace the drive and see if that allows a boot and re-install - but I am out of ideas on that... however the nouveau failure on my wife's machine worries me -- View this message in context: http://www.nabble.com/two-major-failures-after-yesterday-updates---anyone-else-tp26109441p26120073.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: What are .config parameters for my kernel?
Jonathan Ryshpan wrote: I had thought that they would come from the .config file from either the kernel-source.rpm or the kernel-devel.rpm for my current kernel. But these two files are different. I run the latest kernel, namely linux-2.6.30.x86_64 . In particular, is my current kernel PREEMPT or VOLUNTARY_PREEMPT? Any way to find this out? I know I can get the kernel I want (PREEMPT) by rebuilding, but it would be nice to avoid this, and also to be able to settle this question in general. Thanks - jon === diffs between kernel-source and kernel-devel === $ diff -c ~/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.config *** /home/jonrysh/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config Tue Oct 27 20:25:44 2009 --- /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.configSat Oct 17 08:38:07 2009 *** *** 1,7 # # Automatically generated make config: don't edit ! # Linux kernel version: 2.6.30.8 ! # Tue Oct 27 20:25:44 2009 # CONFIG_64BIT=y # CONFIG_X86_32 is not set --- 1,7 # # Automatically generated make config: don't edit ! # Linux kernel version: 2.6.30.9-90.fc11.x86_64 ! # Sat Oct 17 11:22:55 2009 # CONFIG_64BIT=y # CONFIG_X86_32 is not set *** *** 284,291 CONFIG_SCHED_SMT=y CONFIG_SCHED_MC=y # CONFIG_PREEMPT_NONE is not set ! # CONFIG_PREEMPT_VOLUNTARY is not set ! CONFIG_PREEMPT=y CONFIG_X86_LOCAL_APIC=y CONFIG_X86_IO_APIC=y CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y --- 284,291 CONFIG_SCHED_SMT=y CONFIG_SCHED_MC=y # CONFIG_PREEMPT_NONE is not set ! CONFIG_PREEMPT_VOLUNTARY=y ! # CONFIG_PREEMPT is not set CONFIG_X86_LOCAL_APIC=y CONFIG_X86_IO_APIC=y CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y *** *** 3298,3304 CONFIG_USB_STORAGE_ALAUDA=m CONFIG_USB_STORAGE_ONETOUCH=m CONFIG_USB_STORAGE_KARMA=m ! CONFIG_USB_STORAGE_CYPRESS_ATACB=m # CONFIG_USB_LIBUSUAL is not set # --- 3298,3304 CONFIG_USB_STORAGE_ALAUDA=m CONFIG_USB_STORAGE_ONETOUCH=m CONFIG_USB_STORAGE_KARMA=m ! # CONFIG_USB_STORAGE_CYPRESS_ATACB is not set # CONFIG_USB_LIBUSUAL is not set # *** *** 3969,3975 # CONFIG_DEBUG_OBJECTS is not set # CONFIG_SLUB_DEBUG_ON is not set # CONFIG_SLUB_STATS is not set - CONFIG_DEBUG_PREEMPT=y # CONFIG_DEBUG_RT_MUTEXES is not set # CONFIG_RT_MUTEX_TESTER is not set # CONFIG_DEBUG_SPINLOCK is not set --- 3969,3974 *** *** 3977,3983 # CONFIG_DEBUG_LOCK_ALLOC is not set # CONFIG_PROVE_LOCKING is not set # CONFIG_LOCK_STAT is not set - CONFIG_TRACE_IRQFLAGS=y CONFIG_DEBUG_SPINLOCK_SLEEP=y # CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set CONFIG_STACKTRACE=y --- 3976,3981 *** *** 4024,4031 # CONFIG_FUNCTION_TRACER=y # CONFIG_FUNCTION_GRAPH_TRACER is not set ! CONFIG_IRQSOFF_TRACER=y ! # CONFIG_PREEMPT_TRACER is not set CONFIG_SYSPROF_TRACER=y CONFIG_SCHED_TRACER=y CONFIG_CONTEXT_SWITCH_TRACER=y --- 4022,4028 # CONFIG_FUNCTION_TRACER=y # CONFIG_FUNCTION_GRAPH_TRACER is not set ! # CONFIG_IRQSOFF_TRACER is not set CONFIG_SYSPROF_TRACER=y CONFIG_SCHED_TRACER=y CONFIG_CONTEXT_SWITCH_TRACER=y The config parameters for kernels installed by RPM packages are in /boot. Look for "config-(kernelversion)" files. For example, to see if my current kernel was compiled with PREEMPT: [r...@bigdog ~]# grep PREEMPT /boot/config-`uname -r` # CONFIG_PREEMPT_RCU is not set # CONFIG_PREEMPT_RCU_TRACE is not set CONFIG_PREEMPT_NOTIFIERS=y # CONFIG_PREEMPT_NONE is not set CONFIG_PREEMPT_VOLUNTARY=y # CONFIG_PREEMPT is not set So, no, my kernel is not compiled with PREEMPT set. -- - Rick Stevens, Systems Engineer ri...@nerd.com - - AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 - -- - "How does that damned three seashell thing work?" - - - Sylvester Stallone, "Demolition Man" - -- -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Got Windows guests?
Hello fellow Fedora, libvirt and libguestfs users,
If you have any Windows guests, then you can help Fedora to support
Windows guests better by spending a few minutes testing the Windows
Registry feature we just added to libguestfs 1.0.75.
You will need:
- A Windows NT/200x/XP/Vista/7/... guest
- Fedora 12 or Fedora Rawhide host
- libguestfs-tools >= 1.0.75
(from updates or
http://koji.fedoraproject.org/koji/packageinfo?packageID=8391
)
- a few minutes of your time
The tests:
(1) Run the virt-win-reg commands shown in the following web page,
where "MyWinGuest" should be replaced with the name of the Windows
guest as known to libvirt:
http://libguestfs.org/virt-win-reg.1.html#examples
Do the commands run without any errors?
Does the output look sensible?
If you have several Windows guests, please try as many different
sorts as possible!
(2) Download the registry binary files and try to convert them to XML:
guestfish -i MyWinGuest --ro <<'EOF'
download win:\windows\system32\config\software software
download win:\windows\system32\config\system system
download win:\windows\system32\config\sam sam
download win:\windows\system32\config\security security
EOF
hivexml software > software.xml
hivexml system > system.xml
hivexml sam > sam.xml
hivexml security > security.xml
Do those commands run without error?
If there's an error, try adding the hivexml -k option.
Does the XML look complete? (Try running the XML through
tidy -xml -indent -quiet < foo.xml | less
)
I hope you don't find any bugs, but if you do:
Send a reply to this message, or report a bug in Bugzilla:
https://bugzilla.redhat.com/enter_bug.cgi?component=libguestfs&product=Virtualization+Tools
It's useful to include the following details:
HIVEX_DEBUG=1 hivexml regfile 2>&1 > log.out
The Registry file itself that is failing (but note that Registry
files can contain sensitive data).
It's also useful to have positive feedback ("it worked!").
Thanks for any testing you can give, and if you have any other
suggestions for handling Windows guests from Fedora, please let me
know.
Rich.
--
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
virt-df lists disk usage of guests without needing to install any
software inside the virtual machine. Supports Linux and Windows.
http://et.redhat.com/~rjones/virt-df/
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
2009/10/29 Jim :
> On 10/29/2009 08:17 AM, Athmane Madjoudj wrote:
>>
>> On Thu, Oct 29, 2009 at 12:52 PM, jdow wrote:
>>
>>>
>>> From: "Michael Cronenworth"
>>> Sent: Wednesday, 2009/October/28 16:03
>>>
>>>
>>>
It seems in the past month brute force attacks are on the rise. They are
targeting anyone listening on port 22 and go after root. If you do not
have a hardened box, you will see thousands upon thousands of
connections in your logs. Once logged in they will set your system up in
their botnet.
Google: dt_ssh5
This little baby will get placed in /tmp and will be running. Looks to
be a SSH gateway for the attackers for easy access/control.
-Make sure your root password is not a dictionary word.
-Add iptables rules to limit multiple connections on SSH to 4 within a
minute.[1] Perhaps this needs to become a Fedora default.
>>>
>>> Once within 3 minutes is entirely practical and effective. In the last
>>> two days a pair of dolts kept trying 6621 times and 2185 times after the
>>> door slammed shut in their faces. Their ISPs have been notified.
>>>
>>>
-Update your system.
-Use SELinux.
Why am I sending this message? Is it SPAM? No. I've seen this hit a
customer and cause an explosion in their network traffic. The backdoor
was installed on Sept. 30th and was not detected until recently. Google
results seem to indicate this past month with higher than normal brute
force activity.
[1]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--set --name DEFAULT --rsource
>>>
>>> I love those rules and have been spreading them around for quite some
>>> time now. I am glad to see somebody else has either adopted or discovered
>>> the rule trick. It is devastatingly effective. Guessing a password as
>>> simple as "mE3" would take decades of attempts. (Now I want to configure
>>> sshd so that it logs the attempted password along with the attempted user
>>> name.)
>>>
>>> {^_-}
>>>
>>> --
>>> fedora-list mailing list
>>> fedora-list@redhat.com
>>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>>> Guidelines:
>>> http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
>>>
>>>
>>
>> You can install fail2ban
>> #yum install fail2ban
>>
>> Links:
>> http://www.fail2ban.org/
>>
>>
>
> Don't install fail2ban you will get twice the amount of "Gold Stars" .
>
> I had fail2ban on a X86_64 box and I was constantly getting selinux Gold
> Stars,
>
> I relabelled fail2ban a number of times to no avail .
>
> I was told it was the way fail2ban was structured wrong, what that means , I
> have no Ideal. But I just uninstalled it.
Have you tried denyhosts yet? We haven't had any SELinux issues with it.
-Yaakov
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
2009/10/29 Gene Heskett :
> On Thursday 29 October 2009, Athmane Madjoudj wrote:
>>On Thu, Oct 29, 2009 at 12:52 PM, jdow wrote:
>>> From: "Michael Cronenworth"
>>> Sent: Wednesday, 2009/October/28 16:03
>>>
It seems in the past month brute force attacks are on the rise. They are
targeting anyone listening on port 22 and go after root. If you do not
have a hardened box, you will see thousands upon thousands of
connections in your logs. Once logged in they will set your system up in
their botnet.
Google: dt_ssh5
This little baby will get placed in /tmp and will be running. Looks to
be a SSH gateway for the attackers for easy access/control.
-Make sure your root password is not a dictionary word.
-Add iptables rules to limit multiple connections on SSH to 4 within a
minute.[1] Perhaps this needs to become a Fedora default.
>>>
>>> Once within 3 minutes is entirely practical and effective. In the last
>>> two days a pair of dolts kept trying 6621 times and 2185 times after the
>>> door slammed shut in their faces. Their ISPs have been notified.
>>>
-Update your system.
-Use SELinux.
Why am I sending this message? Is it SPAM? No. I've seen this hit a
customer and cause an explosion in their network traffic. The backdoor
was installed on Sept. 30th and was not detected until recently. Google
results seem to indicate this past month with higher than normal brute
force activity.
[1]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--set --name DEFAULT --rsource
>>>
>>> I love those rules and have been spreading them around for quite some
>>> time now. I am glad to see somebody else has either adopted or discovered
>>> the rule trick. It is devastatingly effective. Guessing a password as
>>> simple as "mE3" would take decades of attempts. (Now I want to configure
>>> sshd so that it logs the attempted password along with the attempted user
>>> name.)
>>>
>>> {^_-}
>>>
>>> --
>>> fedora-list mailing list
>>> fedora-list@redhat.com
>>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>>> Guidelines:
>>> http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
>>
>>You can install fail2ban
>>#yum install fail2ban
>>
>>Links:
>>http://www.fail2ban.org/
>>
> That may be all well and good, but how does one go about installing that on
> an x86 based dd-wrt router?
>
> I did install those two rules above though, as I used to watch it being
> banged on at subsecond intervals by some Id10t using a dictionary attack.
> They must have had a small dictionary as they usually went away after
> 300-3000 tries.
>
> It seems to have silenced the logging.
If you can't find a package for the router, you might want to find a
way to copy the log files off the router, process them on some
machine, and then pass the instructions back to the router.
-Yaakov
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
Kam Leo wrote: On Thu, Oct 29, 2009 at 6:42 AM, Robert Moskowitz wrote: I am now trying a FC11 install, I tried the recommendation below that worked with FC10, to press tab then enter askmethod. But this did not work. It went right along to install from CD, not giving me the option to point it to my local http repo server Aldo Foot wrote: On Wed, Sep 9, 2009 at 2:59 PM, Robert Moskowitz wrote: I am doing yet another install, this time on a Dell SFF with an internal CD. I want to do a network install from my local repo. With older Redhat stuff, I did a 'linux askmethod' at the enter prompt. I have noticed with FC10, that I would frequently not be given the chance to press enter, let alone type in the above command, but I would be given a menu that would allow me to supply a URL anyway. Well on this system I go right to the menu about install/recover/bootlocal/memcheck and from here it goes into the install from CD without ever being given the option to provide the URL of my local repo. Even if I let it go all the way to where you can provide which repos to load from, I cannot see how to point the installation repo to my network one. I have tried various combinations of F1, F2, F3 at that startup menu, but I never can get it to a point to let me provide the URL of my repo. Am I going to have to use a USB CD drive to trick it? _ Try with the TAB key as suggested here. http://docs.fedoraproject.org/release-notes/f10/en_US/What_is_New_for_Installation_and_Live_Images.html ~af I have no problem with either the F11 net-install CD or DVD. Which one of the ISO images (Live-CD, CD-disc 1, net-install, or DVD) did you use? It is the FC11 CD 1 that I downloaded back in August. I hit tab, got the prompt for the image load (don't have it in front of me, so I don't have exact details), entered: askmethod and pressed and it went on its merry way, not asking for any method I can try again... -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: KDE
> [r...@eva ~]# startx > hostname: Unknown host > xauth: creating new authority file /root/.serverauth.2006 > xinit: No such file or directory (errno 2): no server "/usr/bin/X" > in PATH > > Use the -- option, or make sure that /usr/bin is in your path and > that "/usr/bin/X" is a program or a link to the right type of server > for your display. Possible server names include: > >XorgCommon X server for most displays >XvfbVirtual frame buffer >Xfake kdrive-based virtual frame buffer >Xnest X server nested in a window on another X server >Xephyr kdrive-based nested X server > > xinit: Server error. > [r...@eva ~]# > > What have I to do? > Thank > Andrea You also have to install X.org do yum groupinstall 'X Window System' -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: KDE
kdebase-workspace I installed kdebase-workspace with yum. Then when I typed "startx" on my shell, I obtained this result that I post following: [r...@eva ~]# startx hostname: Unknown host xauth: creating new authority file /root/.serverauth.2006 xinit: No such file or directory (errno 2): no server "/usr/bin/X" in PATH Use the -- option, or make sure that /usr/bin is in your path and that "/usr/bin/X" is a program or a link to the right type of server for your display. Possible server names include: XorgCommon X server for most displays XvfbVirtual frame buffer Xfake kdrive-based virtual frame buffer Xnest X server nested in a window on another X server Xephyr kdrive-based nested X server xinit: Server error. [r...@eva ~]# What have I to do? Thank Andrea -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Now with FC11 -- RE: FC10 install will not offer 'askmethod'
On Thu, Oct 29, 2009 at 6:42 AM, Robert Moskowitz wrote: > I am now trying a FC11 install, I tried the recommendation below that worked > with FC10, to press tab then enter askmethod. But this did not work. It > went right along to install from CD, not giving me the option to point it to > my local http repo server > > Aldo Foot wrote: >> >> On Wed, Sep 9, 2009 at 2:59 PM, Robert Moskowitz >> wrote: >> >>> >>> I am doing yet another install, this time on a Dell SFF with an internal >>> CD. >>> >>> I want to do a network install from my local repo. >>> >>> With older Redhat stuff, I did a 'linux askmethod' at the enter prompt. >>> I >>> have noticed with FC10, that I would frequently not be given the chance >>> to >>> press enter, let alone type in the above command, but I would be given a >>> menu that would allow me to supply a URL anyway. >>> >>> Well on this system I go right to the menu about >>> install/recover/bootlocal/memcheck and from here it goes into the install >>> from CD without ever being given the option to provide the URL of my >>> local >>> repo. Even if I let it go all the way to where you can provide which >>> repos >>> to load from, I cannot see how to point the installation repo to my >>> network >>> one. >>> >>> I have tried various combinations of F1, F2, F3 at that startup menu, but >>> I >>> never can get it to a point to let me provide the URL of my repo. >>> >>> Am I going to have to use a USB CD drive to trick it? >>> >>> >> >> _ >> >> Try with the TAB key as suggested here. >> >> http://docs.fedoraproject.org/release-notes/f10/en_US/What_is_New_for_Installation_and_Live_Images.html >> >> ~af I have no problem with either the F11 net-install CD or DVD. Which one of the ISO images (Live-CD, CD-disc 1, net-install, or DVD) did you use? -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
What are .config parameters for my kernel?
I had thought that they would come from the .config file from either the kernel-source.rpm or the kernel-devel.rpm for my current kernel. But these two files are different. I run the latest kernel, namely linux-2.6.30.x86_64 . In particular, is my current kernel PREEMPT or VOLUNTARY_PREEMPT? Any way to find this out? I know I can get the kernel I want (PREEMPT) by rebuilding, but it would be nice to avoid this, and also to be able to settle this question in general. Thanks - jon === diffs between kernel-source and kernel-devel === $ diff -c ~/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.config *** /home/jonrysh/rpmbuild/BUILD/kernel-2.6.30/linux-2.6.30.x86_64/.config Tue Oct 27 20:25:44 2009 --- /usr/src/kernels/2.6.30.9-90.fc11.x86_64/.configSat Oct 17 08:38:07 2009 *** *** 1,7 # # Automatically generated make config: don't edit ! # Linux kernel version: 2.6.30.8 ! # Tue Oct 27 20:25:44 2009 # CONFIG_64BIT=y # CONFIG_X86_32 is not set --- 1,7 # # Automatically generated make config: don't edit ! # Linux kernel version: 2.6.30.9-90.fc11.x86_64 ! # Sat Oct 17 11:22:55 2009 # CONFIG_64BIT=y # CONFIG_X86_32 is not set *** *** 284,291 CONFIG_SCHED_SMT=y CONFIG_SCHED_MC=y # CONFIG_PREEMPT_NONE is not set ! # CONFIG_PREEMPT_VOLUNTARY is not set ! CONFIG_PREEMPT=y CONFIG_X86_LOCAL_APIC=y CONFIG_X86_IO_APIC=y CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y --- 284,291 CONFIG_SCHED_SMT=y CONFIG_SCHED_MC=y # CONFIG_PREEMPT_NONE is not set ! CONFIG_PREEMPT_VOLUNTARY=y ! # CONFIG_PREEMPT is not set CONFIG_X86_LOCAL_APIC=y CONFIG_X86_IO_APIC=y CONFIG_X86_REROUTE_FOR_BROKEN_BOOT_IRQS=y *** *** 3298,3304 CONFIG_USB_STORAGE_ALAUDA=m CONFIG_USB_STORAGE_ONETOUCH=m CONFIG_USB_STORAGE_KARMA=m ! CONFIG_USB_STORAGE_CYPRESS_ATACB=m # CONFIG_USB_LIBUSUAL is not set # --- 3298,3304 CONFIG_USB_STORAGE_ALAUDA=m CONFIG_USB_STORAGE_ONETOUCH=m CONFIG_USB_STORAGE_KARMA=m ! # CONFIG_USB_STORAGE_CYPRESS_ATACB is not set # CONFIG_USB_LIBUSUAL is not set # *** *** 3969,3975 # CONFIG_DEBUG_OBJECTS is not set # CONFIG_SLUB_DEBUG_ON is not set # CONFIG_SLUB_STATS is not set - CONFIG_DEBUG_PREEMPT=y # CONFIG_DEBUG_RT_MUTEXES is not set # CONFIG_RT_MUTEX_TESTER is not set # CONFIG_DEBUG_SPINLOCK is not set --- 3969,3974 *** *** 3977,3983 # CONFIG_DEBUG_LOCK_ALLOC is not set # CONFIG_PROVE_LOCKING is not set # CONFIG_LOCK_STAT is not set - CONFIG_TRACE_IRQFLAGS=y CONFIG_DEBUG_SPINLOCK_SLEEP=y # CONFIG_DEBUG_LOCKING_API_SELFTESTS is not set CONFIG_STACKTRACE=y --- 3976,3981 *** *** 4024,4031 # CONFIG_FUNCTION_TRACER=y # CONFIG_FUNCTION_GRAPH_TRACER is not set ! CONFIG_IRQSOFF_TRACER=y ! # CONFIG_PREEMPT_TRACER is not set CONFIG_SYSPROF_TRACER=y CONFIG_SCHED_TRACER=y CONFIG_CONTEXT_SWITCH_TRACER=y --- 4022,4028 # CONFIG_FUNCTION_TRACER=y # CONFIG_FUNCTION_GRAPH_TRACER is not set ! # CONFIG_IRQSOFF_TRACER is not set CONFIG_SYSPROF_TRACER=y CONFIG_SCHED_TRACER=y CONFIG_CONTEXT_SWITCH_TRACER=y -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: evolution to MS exchange 2007 via MAPI
Matthew Saltzman wrote: On Thu, 2009-10-29 at 12:10 +1100, L wrote: On Thu, Oct 29, 2009 at 11:48 AM, Michael Cronenworth wrote: On 10/28/2009 07:43 PM, L wrote: I am looking for information how to connect evolution to MS exchange mail server. The institute switched the mail server to MS exchange. The temporary solution is outlook on XP on VirtualBox, but this is not preferable. I tried evolution-MAPI, it seems tried to connect, unfortunate, MAPI account crashes every single time. Any one have good story to connect Evolution 2.26.3 on F11 to MS exchange 2007. Can you try to convince the exchange folks to enable IMAP? Then you can use Thunderbird or Evolution through an IMAP account. It will function the same, minus contact and calendar syncing. It may even be on already. Try to telnet ip 143 and see if it connects. well, the port is not opened. sent email IT desk. No very hopeful to to convince the exchange folks. Might be worth trying F12 Beta. AFAIK, MAPI connector development is active (I'm sure hoping...), but GNOME folks don't seem very determined to backport updates. When I first tied it, I got persistent crashes, but there was an update that fixed that problem. Now every time I access a folder, it does a complete sync with the host, which is pretty intolerable. There's a patch for that, I believe, but nobody has pulled it back into 2.26.3. Living without calendar and contacts here is not a very attractive alternative. Some other ideas (all of which require sysadmin cooperation): * Use the OWA connector (requires Exchange 2003 OWA compatibility). * Use the Brutus connector (requires a Brutus server running on Windows to manage the actual transactions with Exchange). As to getting IMAP opened on Exchange, I've never understood the reluctance of IT people to permit this. There's nothing insecure about it (other than the inherent insecurity of all M$ products). As to calendars and such...ical is a viable alternative. Address books over LDAP work fine, too. It'd be nice if M$ would try adopting some existing standards...nah! Never happen. Brings to mind an old joke: Q: How many M$ engineers does it take to change a lightbulb? A: None. They redefine darkness to be the standard. That joke would be funny--if it weren't so bloody true. -- - Rick Stevens, Systems Engineer ri...@nerd.com - - AIM/Skype: therps2ICQ: 22643734Yahoo: origrps2 - -- - If it's stupid and it works...it ain't stupid! - -- -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
> waits till you install new software to break. I've
> seen it happen way too often over the years in our lab
> at work for it to be a coincidence :-).
Powercycles do shake down hardware so there is more than an element of
truth to the belief. It's particularly visible for disks.
("How do you get a small disk array", "Buy a big one and wait for a power
cut")
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: evolution to MS exchange 2007 via MAPI
On Thu, 2009-10-29 at 12:10 +1100, L wrote: > On Thu, Oct 29, 2009 at 11:48 AM, Michael Cronenworth wrote: > > On 10/28/2009 07:43 PM, L wrote: > >> > >> I am looking for information how to connect evolution to MS exchange > >> mail server. The institute switched the mail server to MS exchange. > >> The temporary solution is outlook on XP on VirtualBox, but this is > >> not preferable. > >> > >> I tried evolution-MAPI, it seems tried to connect, unfortunate, MAPI > >> account crashes every single time. Any one have good story to connect > >> Evolution 2.26.3 on F11 to MS exchange 2007. > >> > >> > > > > Can you try to convince the exchange folks to enable IMAP? Then you can use > > Thunderbird or Evolution through an IMAP account. It will function the same, > > minus contact and calendar syncing. > > > > It may even be on already. Try to telnet ip 143 and see if it connects. > > > > well, the port is not opened. sent email IT desk. No very hopeful to > to convince the exchange folks. Might be worth trying F12 Beta. AFAIK, MAPI connector development is active (I'm sure hoping...), but GNOME folks don't seem very determined to backport updates. When I first tied it, I got persistent crashes, but there was an update that fixed that problem. Now every time I access a folder, it does a complete sync with the host, which is pretty intolerable. There's a patch for that, I believe, but nobody has pulled it back into 2.26.3. Living without calendar and contacts here is not a very attractive alternative. Some other ideas (all of which require sysadmin cooperation): * Use the OWA connector (requires Exchange 2003 OWA compatibility). * Use the Brutus connector (requires a Brutus server running on Windows to manage the actual transactions with Exchange). -- Matthew Saltzman Clemson University Math Sciences mjs AT clemson DOT edu http://www.math.clemson.edu/~mjs -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
Kevin J. Cummings wrote: > > > Could also be power related, though if its a coincidence, it a *very* > unfortunate one. > > It does make me wary about rebooting my machine now. B^) I think I'll > wait to see if you get any more responses. > > The two machines were/are on independent ups'es - so I can't see it is power related unless some spike managed to get through the ups boxen. -- View this message in context: http://www.nabble.com/two-major-failures-after-yesterday-updates---anyone-else-tp26109441p26117024.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
Tom Horsley-3 wrote: > > > I have this long standing theory that hardware deliberately > waits till you install new software to break. I've > seen it happen way too often over the years in our lab > at work for it to be a coincidence :-). > > # service paranoia start OK so the two machines conspired to fail in the same 12 hour period soon after some updates - it is a hardware conspiracy! Now I know... Now I'll just have to make sure I don't update my phone, TV, or anything else just in case they are part of the same plot! # service paranoia stop -- View this message in context: http://www.nabble.com/two-major-failures-after-yesterday-updates---anyone-else-tp26109441p26116980.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On Thu, 29 Oct 2009 09:41:22 -0700 (PDT) Mike Cloaked wrote: > OK - maybe I am just very very unlucky today I have this long standing theory that hardware deliberately waits till you install new software to break. I've seen it happen way too often over the years in our lab at work for it to be a coincidence :-). -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid from unused entries in ~/.thumbnails
Dr. Michael J. Chudobiak wrote: I use the excellent tool bleachbit (http://bleachbit.sourceforget.net) (rpms are provided) which frees you from many temp/auxiliary files Ughh, that's not the right URL. That's a spamming pop-up nightmare. You probably meant: http://bleachbit.sourceforge.net/ Wow! And such a simple typo too! At first, I did not even see the difference. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid from unused entries in ~/.thumbnails
On Thu, 29 Oct 2009 12:38:28 -0400 Dr. Michael J. Chudobiak wrote: > You probably meant: http://bleachbit.sourceforge.net/ It's apparently available from the standard Fedora repository too. "yum info bleachbit" tells me all about it. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
On Thursday 29 October 2009, Athmane Madjoudj wrote:
>On Thu, Oct 29, 2009 at 12:52 PM, jdow wrote:
>> From: "Michael Cronenworth"
>> Sent: Wednesday, 2009/October/28 16:03
>>
>>> It seems in the past month brute force attacks are on the rise. They are
>>> targeting anyone listening on port 22 and go after root. If you do not
>>> have a hardened box, you will see thousands upon thousands of
>>> connections in your logs. Once logged in they will set your system up in
>>> their botnet.
>>>
>>> Google: dt_ssh5
>>> This little baby will get placed in /tmp and will be running. Looks to
>>> be a SSH gateway for the attackers for easy access/control.
>>>
>>> -Make sure your root password is not a dictionary word.
>>> -Add iptables rules to limit multiple connections on SSH to 4 within a
>>> minute.[1] Perhaps this needs to become a Fedora default.
>>
>> Once within 3 minutes is entirely practical and effective. In the last
>> two days a pair of dolts kept trying 6621 times and 2185 times after the
>> door slammed shut in their faces. Their ISPs have been notified.
>>
>>> -Update your system.
>>> -Use SELinux.
>>>
>>> Why am I sending this message? Is it SPAM? No. I've seen this hit a
>>> customer and cause an explosion in their network traffic. The backdoor
>>> was installed on Sept. 30th and was not detected until recently. Google
>>> results seem to indicate this past month with higher than normal brute
>>> force activity.
>>>
>>> [1]
>>> -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
>>> --update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
>>> -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
>>> --set --name DEFAULT --rsource
>>
>> I love those rules and have been spreading them around for quite some
>> time now. I am glad to see somebody else has either adopted or discovered
>> the rule trick. It is devastatingly effective. Guessing a password as
>> simple as "mE3" would take decades of attempts. (Now I want to configure
>> sshd so that it logs the attempted password along with the attempted user
>> name.)
>>
>> {^_-}
>>
>> --
>> fedora-list mailing list
>> fedora-list@redhat.com
>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>> Guidelines:
>> http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
>
>You can install fail2ban
>#yum install fail2ban
>
>Links:
>http://www.fail2ban.org/
>
That may be all well and good, but how does one go about installing that on
an x86 based dd-wrt router?
I did install those two rules above though, as I used to watch it being
banged on at subsecond intervals by some Id10t using a dictionary attack.
They must have had a small dictionary as they usually went away after
300-3000 tries.
It seems to have silenced the logging.
Thanks & hi Joanne :)
--
Cheers, Gene
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
The NRA is offering FREE Associate memberships to anyone who wants them.
Never offend people with style when you can offend them with substance.
-- Sam Brown, "The Washington Post", January 26, 1977
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: [Solved] Yum install of fence-agents-3.0.4-1.fc11.i586
Michael Schwendt, > Packaging bug. Monitor the newer fence-agents update in > https://admin.fedoraproject.org/updates/ I found the RPM at the site you suggested and installed it and I no longer have the dependency problem. cman installs without any problems. Thanks for your help, James Harrison On Wed, 2009-10-28 at 21:56 +0100, Michael Schwendt wrote: > On Wed, 28 Oct 2009 20:24:10 + (GMT), James wrote: > > > Hi, > > I'm trying to install cman > > > > One of the dependencies is: fence-agents-3.0.4-1.fc11.i586 > > > > I am getting the yum message: > > Error: Missing Dependency: libvirt-client is needed by package > > fence-agents-3.0.4-1.fc11.i586 (updates) > > > > Also updating my system with the regular updates, I get a dependency > > failure : libvirt-client > > > -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On Thu, 29 Oct 2009 02:14:53 -0700 (PDT) Mike Cloaked wrote: > I would like to know if this is a chance event or related to kernel changes, > particularly related to ext4? This machine (an i7-940) is working fine using the latest F11 updates and it has an ext4 filesystem. I rebooted it immediately after getting the new updates and haven't seen any problems at all. -- MELVILLE THEATRE ~ Melville Sask ~ http://www.melvilletheatre.com -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
Craig White-6 wrote: > > > there are thousands updating F11 every day. If there is/was a problem, > we would be hearing about it. > > Craig > > OK - maybe I am just very very unlucky today - I had also wondered if there was anything in the update to the quota package that could have been connected. I don't use quotas but one of the systems guys at work told me that there were known problems with quotas in ext4 - and I am wondering if this is connected - if there is nothing possibly related to the updates then I will accept that I just had two disks die as an unhappy coincidence. I need to make further checks over the coming weekend, and maybe it is just a bad hair day for me Presumably those who have added to this thread are also using ext4 and (apart from one) have updated to the new kernel and new quota package? -- View this message in context: http://www.nabble.com/two-major-failures-after-yesterday-updates---anyone-else-tp26109441p26116539.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid from unused entries in ~/.thumbnails
I use the excellent tool bleachbit (http://bleachbit.sourceforget.net) (rpms are provided) which frees you from many temp/auxiliary files Ughh, that's not the right URL. That's a spamming pop-up nightmare. You probably meant: http://bleachbit.sourceforge.net/ - Mike -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid from unused entries in ~/.thumbnails
On Thu, Oct 29, 2009 at 3:53 PM, Robert Moskowitz wrote:
> Dr. Michael J. Chudobiak wrote:
>>
[cut]
>
> Considering I log in about once a month, that won't do for me.
>
> I have a cronjob that runs this script I got some years ago:
>
> #!/bin/sh
> find ~/.thumbnails -type f -atime +30 -exec rm {} \;
>
> But I don't even remember how I set up the cronjob to run daily! It is, as
> this system is rather clean in its ~/.thumbnails
>
>
I use the excellent tool bleachbit (http://bleachbit.sourceforget.net)
(rpms are provided) which frees you from many temp/auxiliary files
First time I ran I got back 1GB of space!!
Cheers,
-- Marco
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
On 10/29/2009 08:17 AM, Athmane Madjoudj wrote:
On Thu, Oct 29, 2009 at 12:52 PM, jdow wrote:
From: "Michael Cronenworth"
Sent: Wednesday, 2009/October/28 16:03
It seems in the past month brute force attacks are on the rise. They are
targeting anyone listening on port 22 and go after root. If you do not
have a hardened box, you will see thousands upon thousands of
connections in your logs. Once logged in they will set your system up in
their botnet.
Google: dt_ssh5
This little baby will get placed in /tmp and will be running. Looks to
be a SSH gateway for the attackers for easy access/control.
-Make sure your root password is not a dictionary word.
-Add iptables rules to limit multiple connections on SSH to 4 within a
minute.[1] Perhaps this needs to become a Fedora default.
Once within 3 minutes is entirely practical and effective. In the last
two days a pair of dolts kept trying 6621 times and 2185 times after the
door slammed shut in their faces. Their ISPs have been notified.
-Update your system.
-Use SELinux.
Why am I sending this message? Is it SPAM? No. I've seen this hit a
customer and cause an explosion in their network traffic. The backdoor
was installed on Sept. 30th and was not detected until recently. Google
results seem to indicate this past month with higher than normal brute
force activity.
[1]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--set --name DEFAULT --rsource
I love those rules and have been spreading them around for quite some
time now. I am glad to see somebody else has either adopted or discovered
the rule trick. It is devastatingly effective. Guessing a password as
simple as "mE3" would take decades of attempts. (Now I want to configure
sshd so that it logs the attempted password along with the attempted user
name.)
{^_-}
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
You can install fail2ban
#yum install fail2ban
Links:
http://www.fail2ban.org/
Don't install fail2ban you will get twice the amount of "Gold Stars" .
I had fail2ban on a X86_64 box and I was constantly getting selinux Gold
Stars,
I relabelled fail2ban a number of times to no avail .
I was told it was the way fail2ban was structured wrong, what that means
, I have no Ideal. But I just uninstalled it.
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
2009/10/29 Tom Horsley : > On Thu, 29 Oct 2009 09:59:27 -0400 > rgheck wrote: > >> On 10/28/2009 07:44 PM, Tom Horsley wrote: >> > On Wed, 28 Oct 2009 18:03:29 -0500 >> > Michael Cronenworth wrote: >> > >> > >> >> -Make sure your root password is not a dictionary word. >> >> >> > Better yet, make sure you only allow public key login from >> > outside the trusted local network. I've been setting up my >> > sshd that way for a long time now. >> > >> > >> Can you show how to do this? I only know how to make the choice globally. >> >> rh >> >> > > I globally disable various things in the main /etc/ssh/sshd_config > file, then I use a "Match" directive at the bottom, which for me > looks like: > > Match Address 127.0.0.1,192.168.1.* > Banner /etc/nohamster.txt > GSSApiAuthentication yes > KerberosAuthentication no > PasswordAuthentication yes > KbdInteractiveAuthentication no > RhostsRSAAuthentication no > RSAAuthentication no > > That overries the global settings for requests originating > from the matched IP addrs. I just mentioned this privately to someone. There are more vectors than just SSH, and the principal is the same. Unless you have no way into your network from the outside, (no VPN, no webservers, nothing), there's a potential for a bruteforce attack. Unfortunately, in our particular case, we can't restrict ssh to internal IP ranges, so we had to implement a different solution. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
On Thu, 29 Oct 2009 09:59:27 -0400 rgheck wrote: > On 10/28/2009 07:44 PM, Tom Horsley wrote: > > On Wed, 28 Oct 2009 18:03:29 -0500 > > Michael Cronenworth wrote: > > > > > >> -Make sure your root password is not a dictionary word. > >> > > Better yet, make sure you only allow public key login from > > outside the trusted local network. I've been setting up my > > sshd that way for a long time now. > > > > > Can you show how to do this? I only know how to make the choice globally. > > rh > > I globally disable various things in the main /etc/ssh/sshd_config file, then I use a "Match" directive at the bottom, which for me looks like: Match Address 127.0.0.1,192.168.1.* Banner /etc/nohamster.txt GSSApiAuthentication yes KerberosAuthentication no PasswordAuthentication yes KbdInteractiveAuthentication no RhostsRSAAuthentication no RSAAuthentication no That overries the global settings for requests originating from the matched IP addrs. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On Thu, 2009-10-29 at 08:24 -0700, Mike Cloaked wrote: > I am at a total loss as this takes out both operational desktops at home - > it is of course possible that it is not connected with any updates - but two > machines going out within 12 hours seems a very unfortunate coincidence - > last night I was convinced it was an unlucky disk failure - but I have not > had time to investigate. However I thought it was worth asking in case > anyone else who is running f11, and ran the same updates may have hit the > analogous problem - if so I am quite worried as I have several other > machines running f11 elsewhere (like on my desk at work!) > > All are fully up to date f11 - but with different hardware. The two that > failed were both Dell 530S less than 2 years old. there are thousands updating F11 every day. If there is/was a problem, we would be hearing about it. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On 10/29/2009 11:24 AM, Mike Cloaked wrote: > Yes I rebooted both machines yesterday morning shortly after the updates > were in. They appeared to run fine until the first failed catastrophically > last night. The second failed whilst I was on my way to work - my wife > phoned me to tell me that the screen had suddenly filled with coloured bars > and that there were weird messages on the screen - the machines are now > unbootable. It does sounds like a catastrophic disk failure but I was > wondering if it had anything to do with them running with ext4 file systems > - on / and /opt though /boot was ext3 as needed for f11 install with ext4 > for the rest. > > I am at a total loss as this takes out both operational desktops at home - > it is of course possible that it is not connected with any updates - but two > machines going out within 12 hours seems a very unfortunate coincidence - > last night I was convinced it was an unlucky disk failure - but I have not > had time to investigate. However I thought it was worth asking in case > anyone else who is running f11, and ran the same updates may have hit the > analogous problem - if so I am quite worried as I have several other > machines running f11 elsewhere (like on my desk at work!) Could also be power related, though if its a coincidence, it a *very* unfortunate one. It does make me wary about rebooting my machine now. B^) I think I'll wait to see if you get any more responses. > All are fully up to date f11 - but with different hardware. The two that > failed were both Dell 530S less than 2 years old. -- Kevin J. Cummings kjch...@rcn.com cummi...@kjchome.homeip.net cummi...@kjc386.framingham.ma.us Registered Linux User #1232 (http://counter.li.org) -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
Kevin J. Cummings wrote: > > On 10/29/2009 05:14 AM, Mike Cloaked wrote: >> >> I have had an unprecented pair of events last night and this morning - >> two >> machines (both Dell Inspiron 530s desktops) have died completely ( >> unbootable) - having been running on f11 very successfully for some time. >> I >> had no reason to suspect the hardware at all and both were running fine >> from >> new a couple of years ago - but I am now wondering if this has anything >> to >> do with updates that came in on 28th October. The new kernel and a number >> of >> other updates were installed yesterday morning on both machines. Both >> were >> also using ext4 files systems. > > Did you reboot after installing the new kernels? > > I have installed the new updates yesterday as well, but I have not yet > reboot to use the new kernels on either my x86_64 laptop, nor an i586 > desktop that I use only for testing. Both are still running. Possibly > because I have not yet rebooted. Neither have any ext4 filesystems on > them. > > Just a data point for you to compare to. > > Yes I rebooted both machines yesterday morning shortly after the updates were in. They appeared to run fine until the first failed catastrophically last night. The second failed whilst I was on my way to work - my wife phoned me to tell me that the screen had suddenly filled with coloured bars and that there were weird messages on the screen - the machines are now unbootable. It does sounds like a catastrophic disk failure but I was wondering if it had anything to do with them running with ext4 file systems - on / and /opt though /boot was ext3 as needed for f11 install with ext4 for the rest. I am at a total loss as this takes out both operational desktops at home - it is of course possible that it is not connected with any updates - but two machines going out within 12 hours seems a very unfortunate coincidence - last night I was convinced it was an unlucky disk failure - but I have not had time to investigate. However I thought it was worth asking in case anyone else who is running f11, and ran the same updates may have hit the analogous problem - if so I am quite worried as I have several other machines running f11 elsewhere (like on my desk at work!) All are fully up to date f11 - but with different hardware. The two that failed were both Dell 530S less than 2 years old. -- View this message in context: http://www.nabble.com/two-major-failures-after-yesterday-updates---anyone-else-tp26109441p26115173.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
2009/10/29 Athmane Madjoudj :
> On Thu, Oct 29, 2009 at 12:52 PM, jdow wrote:
>> From: "Michael Cronenworth"
>> Sent: Wednesday, 2009/October/28 16:03
>>
>>
>>> It seems in the past month brute force attacks are on the rise. They are
>>> targeting anyone listening on port 22 and go after root. If you do not
>>> have a hardened box, you will see thousands upon thousands of
>>> connections in your logs. Once logged in they will set your system up in
>>> their botnet.
>>>
>>> Google: dt_ssh5
>>> This little baby will get placed in /tmp and will be running. Looks to
>>> be a SSH gateway for the attackers for easy access/control.
>>>
>>> -Make sure your root password is not a dictionary word.
>>> -Add iptables rules to limit multiple connections on SSH to 4 within a
>>> minute.[1] Perhaps this needs to become a Fedora default.
>>
>> Once within 3 minutes is entirely practical and effective. In the last
>> two days a pair of dolts kept trying 6621 times and 2185 times after the
>> door slammed shut in their faces. Their ISPs have been notified.
>>
>>> -Update your system.
>>> -Use SELinux.
>>>
>>> Why am I sending this message? Is it SPAM? No. I've seen this hit a
>>> customer and cause an explosion in their network traffic. The backdoor
>>> was installed on Sept. 30th and was not detected until recently. Google
>>> results seem to indicate this past month with higher than normal brute
>>> force activity.
>>>
>>> [1]
>>> -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
>>> --update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
>>> -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
>>> --set --name DEFAULT --rsource
>>
>> I love those rules and have been spreading them around for quite some
>> time now. I am glad to see somebody else has either adopted or discovered
>> the rule trick. It is devastatingly effective. Guessing a password as
>> simple as "mE3" would take decades of attempts. (Now I want to configure
>> sshd so that it logs the attempted password along with the attempted user
>> name.)
>>
>> {^_-}
>>
>> --
>> fedora-list mailing list
>> fedora-list@redhat.com
>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
>> Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
>>
>
> You can install fail2ban
> #yum install fail2ban
>
> Links:
> http://www.fail2ban.org/
We've implemented a similar strategy here at the Genomics Center using
denyhosts.
When taking this to production, there are a few issues and problems
that can arise, that you could DOS your own servers if you're not
careful. We came up with a solution that i've documented in a blog
post recently, and so far it's been humming along nicely. I went away
for a week on vacation, came back, and there were no hiccups.
http://loupgaroublond.blogspot.com/2009/10/doing-denyhosts-bit-better.html
If people are interested, we have a puppet policy you can use for your
systems that implements this. The only trouble is the setup of the
policy is a bit complicated and custom. Namely, it's dependent on some
of our service accounts, and our firewall management tools.
-Yaakov
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid from unused entries in ~/.thumbnails
Dr. Michael J. Chudobiak wrote:
On 10/28/2009 01:47 PM, Bruno Wolff III wrote:
On Wed, Oct 28, 2009 at 11:39:01 -0400,
Todd Zullinger wrote:
When disk costs fractions of pennies, is that amount of space even a
concern? I've had my thumbnails dir grow over several GB before,
after moving my photos to new locations. sing the thumbnails are
stored based on the md5 of the path to the image, I ended up
duplicating a lot of thumbnails.
Backed up storage isn't nearly as cheap as throw away storage. Disk
bandwidth
has not been keeping up with disk size. It isn't getting cheaper to
back up
disk space at nearly the rate that plain disk space has.
Use gconf-editor to set:
/desktop/gnome/thumbnail_cache/maximum_age
in days
/desktop/gnome/thumbnail_cache/maximum_size
in MB
The default is 180 days and 512 MB. However, fspot overwrites these
default to much larger values if present.
This is a feature of gnome-settings-daemon (the "housekeeping"
plugin). The purge should occur a few minutes after each log-on.
Considering I log in about once a month, that won't do for me.
I have a cronjob that runs this script I got some years ago:
#!/bin/sh
find ~/.thumbnails -type f -atime +30 -exec rm {} \;
But I don't even remember how I set up the cronjob to run daily! It is,
as this system is rather clean in its ~/.thumbnails
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: How to get rid from unused entries in ~/.thumbnails
Use gconf-editor to set: /desktop/gnome/thumbnail_cache/maximum_age in days /desktop/gnome/thumbnail_cache/maximum_size in MB Also, the paranoid will be pleased to know that you can set these values to 0, in which case the cache will be cleared upon logout. Setting them to -1 disables cache cleaning. - Mike -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: udev messed up again
On Wed, 2009-10-28 at 09:41 -0400, William Case wrote: > Hi Aaron; > > I posted yesterday that mine was fixed. > > On Wed, 2009-10-28 at 08:17 -0500, Aaron Konstam wrote: > > Well I see someone messed up udev again. I can no longer play Audio CDs > > automagically in F11. No icon shows up when the CD is inserted and no > > program is launched. > > > > I know . File a Bugzilla. Well the last time a Bugzilla was filed on > > this nothing was done about it but to break the solution that was found > > by someone who was not developer , I think. Aram Agajanian, correct me > > if I am wrong. > > > > When is this problem going to be dealt with, or has it been dealt with > > and I missed it? > > I was told that it was in an update > DeviceKit-disks-004-5.fc11 > > Which I eventually found in the Announce list. > > Perhaps your previous fix is now messing up this new fix. You were right something was missing, but it was not the DeviceKit-disks rpm. It was the rpm: libudev-devel-141-7.fc11.i586 Once that was installed, everything was fine.. Although how that was missed in installation and why it was needed is still a mystery too me. I apologize to udev developers. -- === It is better to die on your feet than to live on your knees. === Aaron Konstam telephone: (210) 656-0355 e-mail: akons...@sbcglobal.net -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
On 10/28/2009 07:44 PM, Tom Horsley wrote: On Wed, 28 Oct 2009 18:03:29 -0500 Michael Cronenworth wrote: -Make sure your root password is not a dictionary word. Better yet, make sure you only allow public key login from outside the trusted local network. I've been setting up my sshd that way for a long time now. Can you show how to do this? I only know how to make the choice globally. rh -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Couple of install questions
Hi Jim first trial, i installed on ext4 as well, not using anaconda. Then i had problems, and had to re-install using anaconda this time. But anaconda said "cannot install yet on ext4" or similar, which made me go back to ext3 on all file-systems. now, fedora 11 runs on ext3 happily. suomi On 10/29/2009 11:03 AM, James Allsopp wrote: Hi, I need to ask a few questions about a new Fedora install which I need to do over today and tomorrow. Which is the better option, installing F11 or F12 beta? I would upgrade to the full F12 version as soon as it came out anyway. File Formats, has anyone had any problems with Ext4, primarily running on an LVM inside a RAID1. Thanks, Jim -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Now with FC11 -- RE: FC10 install will not offer 'askmethod'
I am now trying a FC11 install, I tried the recommendation below that worked with FC10, to press tab then enter askmethod. But this did not work. It went right along to install from CD, not giving me the option to point it to my local http repo server Aldo Foot wrote: On Wed, Sep 9, 2009 at 2:59 PM, Robert Moskowitz wrote: I am doing yet another install, this time on a Dell SFF with an internal CD. I want to do a network install from my local repo. With older Redhat stuff, I did a 'linux askmethod' at the enter prompt. I have noticed with FC10, that I would frequently not be given the chance to press enter, let alone type in the above command, but I would be given a menu that would allow me to supply a URL anyway. Well on this system I go right to the menu about install/recover/bootlocal/memcheck and from here it goes into the install from CD without ever being given the option to provide the URL of my local repo. Even if I let it go all the way to where you can provide which repos to load from, I cannot see how to point the installation repo to my network one. I have tried various combinations of F1, F2, F3 at that startup menu, but I never can get it to a point to let me provide the URL of my repo. Am I going to have to use a USB CD drive to trick it? _ Try with the TAB key as suggested here. http://docs.fedoraproject.org/release-notes/f10/en_US/What_is_New_for_Installation_and_Live_Images.html ~af -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: two major failures after yesterday updates - anyone else
On 10/29/2009 05:14 AM, Mike Cloaked wrote: > > I have had an unprecented pair of events last night and this morning - two > machines (both Dell Inspiron 530s desktops) have died completely ( > unbootable) - having been running on f11 very successfully for some time. I > had no reason to suspect the hardware at all and both were running fine from > new a couple of years ago - but I am now wondering if this has anything to > do with updates that came in on 28th October. The new kernel and a number of > other updates were installed yesterday morning on both machines. Both were > also using ext4 files systems. Did you reboot after installing the new kernels? > I would like to know if this is a chance event or related to kernel changes, > particularly related to ext4? > > If nobody else has anything remotely similar happen then I will conclude > that I am just very very unlucky - but I would like to know if anybody > else has had a mysterious total failure of their system in the past 24 > hours. I have installed the new updates yesterday as well, but I have not yet reboot to use the new kernels on either my x86_64 laptop, nor an i586 desktop that I use only for testing. Both are still running. Possibly because I have not yet rebooted. Neither have any ext4 filesystems on them. Just a data point for you to compare to. -- Kevin J. Cummings kjch...@rcn.com cummi...@kjchome.homeip.net cummi...@kjc386.framingham.ma.us Registered Linux User #1232 (http://counter.li.org) -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
On Thu, Oct 29, 2009 at 12:52 PM, jdow wrote:
> From: "Michael Cronenworth"
> Sent: Wednesday, 2009/October/28 16:03
>
>
>> It seems in the past month brute force attacks are on the rise. They are
>> targeting anyone listening on port 22 and go after root. If you do not
>> have a hardened box, you will see thousands upon thousands of
>> connections in your logs. Once logged in they will set your system up in
>> their botnet.
>>
>> Google: dt_ssh5
>> This little baby will get placed in /tmp and will be running. Looks to
>> be a SSH gateway for the attackers for easy access/control.
>>
>> -Make sure your root password is not a dictionary word.
>> -Add iptables rules to limit multiple connections on SSH to 4 within a
>> minute.[1] Perhaps this needs to become a Fedora default.
>
> Once within 3 minutes is entirely practical and effective. In the last
> two days a pair of dolts kept trying 6621 times and 2185 times after the
> door slammed shut in their faces. Their ISPs have been notified.
>
>> -Update your system.
>> -Use SELinux.
>>
>> Why am I sending this message? Is it SPAM? No. I've seen this hit a
>> customer and cause an explosion in their network traffic. The backdoor
>> was installed on Sept. 30th and was not detected until recently. Google
>> results seem to indicate this past month with higher than normal brute
>> force activity.
>>
>> [1]
>> -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
>> --update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
>> -A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
>> --set --name DEFAULT --rsource
>
> I love those rules and have been spreading them around for quite some
> time now. I am glad to see somebody else has either adopted or discovered
> the rule trick. It is devastatingly effective. Guessing a password as
> simple as "mE3" would take decades of attempts. (Now I want to configure
> sshd so that it logs the attempted password along with the attempted user
> name.)
>
> {^_-}
>
> --
> fedora-list mailing list
> fedora-list@redhat.com
> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
> Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
>
You can install fail2ban
#yum install fail2ban
Links:
http://www.fail2ban.org/
--
Athmane Madjoudj
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Heads up: Brute force attacks on the rise recently
From: "Michael Cronenworth"
Sent: Wednesday, 2009/October/28 16:03
It seems in the past month brute force attacks are on the rise. They are
targeting anyone listening on port 22 and go after root. If you do not
have a hardened box, you will see thousands upon thousands of
connections in your logs. Once logged in they will set your system up in
their botnet.
Google: dt_ssh5
This little baby will get placed in /tmp and will be running. Looks to
be a SSH gateway for the attackers for easy access/control.
-Make sure your root password is not a dictionary word.
-Add iptables rules to limit multiple connections on SSH to 4 within a
minute.[1] Perhaps this needs to become a Fedora default.
Once within 3 minutes is entirely practical and effective. In the last
two days a pair of dolts kept trying 6621 times and 2185 times after the
door slammed shut in their faces. Their ISPs have been notified.
-Update your system.
-Use SELinux.
Why am I sending this message? Is it SPAM? No. I've seen this hit a
customer and cause an explosion in their network traffic. The backdoor
was installed on Sept. 30th and was not detected until recently. Google
results seem to indicate this past month with higher than normal brute
force activity.
[1]
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--update --seconds 60 --hitcount 4 --name DEFAULT --rsource -j DROP
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -m recent
--set --name DEFAULT --rsource
I love those rules and have been spreading them around for quite some
time now. I am glad to see somebody else has either adopted or discovered
the rule trick. It is devastatingly effective. Guessing a password as
simple as "mE3" would take decades of attempts. (Now I want to configure
sshd so that it logs the attempted password along with the attempted user
name.)
{^_-}
--
fedora-list mailing list
fedora-list@redhat.com
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: When will totem play Apple.com/trailers again?
On Sun, Oct 25, 2009 at 15:26, Andre Costa wrote: > On Sun, Oct 25, 2009 at 09:55, Rahul Sundaram > wrote: > >> On 10/25/2009 09:45 AM, Andre Costa wrote: >> >> > >> > You're right. What I meant is that, even if you install the codecs >> > (which are automatically suggested if you try to watch a trailer), it >> > won't work until you replace the default media player plugin for another >> > one. That's one step further, it's not intuitive and shouldn't be >> > necessary IMHO. >> >> http://bugz.fedoraproject.org/totem if you want to report it. >> >> Rahul > > > Done: bug #530855 [https://bugzilla.redhat.com/show_bug.cgi?id=530855] has > been filed. Hope this gets fixed in time for F12 > > To all other folks annoyed by this: please comment on the bug, or vote for > it, or at least put yourselves on the CC list. > Just a quick followup: bug 530855 has been marked CLOSED - RAWHIDE, meaning it is already fixed on F12 and will not be backported to F11. IMHO it's a pitty, even though F12 is scheduled for Nov 17, because I never update right away, I prefer to wait a little until any serious issues are sorted out. I guess I'll just have to stick to gecko-mediaplayer in the meantime (BTW: it has some weird bug that makes sound decreases slowly as the movie is played...). Regards, Andre -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Re: Couple of install questions
On 10/29/2009 03:33 PM, James Allsopp wrote: Hi, I need to ask a few questions about a new Fedora install which I need to do over today and tomorrow. Which is the better option, installing F11 or F12 beta? I would upgrade to the full F12 version as soon as it came out anyway. Beta is not recommended on production environment File Formats, has anyone had any problems with Ext4, primarily running on an LVM inside a RAID1. Not sure may be this[1] can help [1] http://www.gagme.com/greg/linux/raid-lvm.php Thanks, Jim jk -- °v° /(_)\ ^ ^ Jatin Khatri No MS -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
Couple of install questions
Hi, I need to ask a few questions about a new Fedora install which I need to do over today and tomorrow. Which is the better option, installing F11 or F12 beta? I would upgrade to the full F12 version as soon as it came out anyway. File Formats, has anyone had any problems with Ext4, primarily running on an LVM inside a RAID1. Thanks, Jim -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
two major failures after yesterday updates - anyone else
I have had an unprecented pair of events last night and this morning - two machines (both Dell Inspiron 530s desktops) have died completely ( unbootable) - having been running on f11 very successfully for some time. I had no reason to suspect the hardware at all and both were running fine from new a couple of years ago - but I am now wondering if this has anything to do with updates that came in on 28th October. The new kernel and a number of other updates were installed yesterday morning on both machines. Both were also using ext4 files systems. I would like to know if this is a chance event or related to kernel changes, particularly related to ext4? If nobody else has anything remotely similar happen then I will conclude that I am just very very unlucky - but I would like to know if anybody else has had a mysterious total failure of their system in the past 24 hours. -- View this message in context: http://www.nabble.com/two-major-failures-after-yesterday-updates---anyone-else-tp26109441p26109441.html Sent from the Fedora List mailing list archive at Nabble.com. -- fedora-list mailing list fedora-list@redhat.com To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
