Re: [gentoo-user] Re: I lost the ability to boot into single user

2009-08-18 Thread Shawn Haggett
On Wednesday 19 August 2009 09:17:30 Albert Hopkins wrote:
 On Wed, 2009-08-19 at 01:20 +0200, Alan McKinnon wrote:
   In a pinch, you can also use the argument init=/bin/bash to get a
   bash shell up without using init.  It's saved me a CD or a heap of
   trouble a few times.
 
  Wait until some bastard runs
 
  mv /bin/bash /bin/bash.gotcha
 
  then you try init=/bin/bash :-)
 
  It causes utter carnage, without another shell handy, you do need a CD
  to get
  around that one.

 Hmm.. let's see, who could successfully run that command?

 $ ls -ld /bin /bin/bash
 4.0K drwxr-xr-x 2 root root 4.0K 2009-08-17 12:56 /bin/
 864K -rwxr-xr-x 1 root root 861K 2009-08-15 20:46 /bin/bash*

 Oh, the same bastard who can 'passwd root' or 'rm -rf /' or pretty
 much  anything else.

 So if you have a person who has the capability and will to do that then
 I think you have far more to worry about.

 So the moral to the story is don't give root access to bastards.

Does that include bastard operators? Or only when they come from hell? :P

Shawn



Re: [gentoo-user] emerge mythtv fails

2009-08-07 Thread Shawn Haggett
On Tuesday 04 August 2009 09:41:58 Stroller wrote:
 On 4 Aug 2009, at 00:07, Shawn Haggett wrote:
  ...
  This has been broken for over a week now (normally I just wait,
  resync and
  these things go away if they're an ebuild problem) but I'm starting
  to think
  it's a problem on my end.

 I don't yet use MythTV myself, but had reason to investigate it again
 this week.

 I saw this mentioned on the MythTV-users list (probably a more useful
 resource for you than this list, TBH). Perhaps you may find it useful:

 http://wiki.github.com/MarcT/mt-mythtv

 Stroller.

Thanks, although I'm already on that list too. I haven't seen this problem 
mentioned on the mythtv-users list (and a quick search doesn't turn anything 
up).

I chose this list to post to, since the problem appears to be a Gentoo/portage 
issue, rather then a mythtv issue. I suspect a bug needs to be filled for 
Gentoo, although I didn't want to needlessly file bugs and annoy the hard 
working bug wrangles/devs.

Shawn



[gentoo-user] emerge mythtv fails

2009-08-03 Thread Shawn Haggett
Some recent updates have broken my mythtv (missing libraries) so I'm of course 
trying to recompile it. Whenever I try however, the following happens:

sgc ~ # emerge -va mythtv

These are the packages that would be merged, in order:

Calculating dependencies... done!
[ebuild  N] media-tv/mythtv-0.21_p18314-r1  USE=aac alsa dvd ieee1394 mmx 
opengl perl python xvmc 
(-altivec) -autostart -debug -directv -dvb -fftw -jack -lcd -lirc 
VIDEO_CARDS=nvidia 0 kB

Total: 1 package (1 new), Size of downloads: 0 kB

Would you like to merge these packages? [Yes/No] y

 Verifying ebuild manifests

 Emerging (1 of 1) media-tv/mythtv-0.21_p18314-r1
 * mythtv-0.21_p18314.tar.bz2 RMD160 SHA1 SHA256 size ;-) ...[ 
ok ]
 * checking ebuild checksums ;-) ... [ 
ok ]
 * checking auxfile checksums ;-) ...[ 
ok ]
 * checking miscfile checksums ;-) ...   [ 
ok ]
 * This ebuild now uses a heavily stripped down version of your CFLAGS
 *
 * For NVIDIA based cards, the XvMC renderer only works on
 * the NVIDIA 4, 5, 6  7 series cards.
 Unpacking source...
 Unpacking mythtv-0.21_p18314.tar.bz2 
to /var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/work
/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/temp/environment: line 3924: 
cd: 
/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/work/branches/release-0-21-fixes/mythtv:
 
No such file or directory
sed: can't 
read 
/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/work/branches/release-0-21-fixes/mythtv/version.pro:
 
No such file or directory
 *
 * ERROR: media-tv/mythtv-0.21_p18314-r1 failed.
 * Call stack:
 *   ebuild.sh, line   49:  Called src_unpack
 * environment, line 3925:  Called die
 * The specific snippet of code:
 *   sed -e s:\`(svnversion \$\${SVNTREEDIR} 2\/dev\/null) || echo 
Unknown\`:${MYTHTV_REV}: -i ${S}/version.pro || die svnversion sed 
failed;
 *  The die message:
 *   svnversion sed failed
 *
 * If you need support, post the topmost build error, and the call stack if 
relevant.
 * A complete build log is located 
at '/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/temp/build.log'.
 * The ebuild environment file is located 
at '/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/temp/environment'.
 *

 Failed to emerge media-tv/mythtv-0.21_p18314-r1, Log file:

  '/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/temp/build.log'
sgc ~ # 


The error seems to be in the line: 
/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/temp/environment: line 3924: 
cd: 
/var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/work/branches/release-0-21-fixes/mythtv:
 
No such file or directory

There's a folder missing somewhere, and when I look, sure enough:

sgc ~ # ls /var/tmp/portage/media-tv/mythtv-0.21_p18314-r1/work/
mythtv-0.21_p18314
sgc ~ #  

It seems the work folder has a 'mythtv-0.21_p18314' folder, which has the 
branches folder inside that.

This has been broken for over a week now (normally I just wait, resync and 
these things go away if they're an ebuild problem) but I'm starting to think 
it's a problem on my end. Anyone have any suggestions on how to track down 
where the error is coming from. It the environment file, but I'm not sure if 
that's a distributed file, or generated by portage (I suspect the later). So 
where does that file get its contents from?

Thanks
Shawn



Re: [gentoo-user] Constant Load 1.00+ on new Toshiba laptop

2009-02-17 Thread Shawn Haggett
On Wednesday 18 February 2009 16:24:45 Paul Hartman wrote:
 On Tue, Feb 17, 2009 at 4:50 PM, Beau Henderson b...@thehenderson.com 
wrote:
  G'day,
 
  I was wondering if anyone might have any idea's as to what is causing my
  new Toshiba A300 Satelite to idle at a load of 1.00 when not in use.
  Right after boot up it settles at 1.00 when I do nothing. I'm not seeing
  anything out of ordinary in dmesg ( asside from an non issue with legacy
  usb and sd and sr drivers in the kernel ).
 
  I had Ubuntu on this thing for a week or so as I needed something quick
  fast when my workstation chipfan died on me and this wasn't an issue when
  I had that installed so I think I can rule out hardware. Also, its not an
  issue when I boot up via live cd ( sysrescuecd ).
 
  I've tried different cpufreq governors ( default is ondemand ) and that
  doesn't appear to be an issue.
 
  Any help or suggestions would be appreciated.
 
  Thanks.

 I've never known what those numbers represent (I know it is load
 average, but what it means, and what is the range, I have no idea)...
 Anyway, it seems mine are always around 1+. It's not perfectly idle
 but not running seti or anything intensive either.

I remember trying to google the meaning of those numbers once. It was VERY 
hard to find out what they were. It's something like, average number of 
processes in the running or ready to run states for the last 1, 5  15 
minutes.

Shawn



Re: [gentoo-user] Fake MAC Address Bungling Wireless

2009-02-15 Thread Shawn Haggett

daid kahl wrote:



2009/2/15 daid kahl daid...@gmail.com mailto:daid...@gmail.com

)On Sat, 2009-02-14 at 20:05 +0900, daid kahl wrote:
 I was bored and playing around with macchanger to change my
Wireless
 MAC address, and wireless has not worked since, even though
I'm using
 my hardware MAC address again.  I'm usually using
NetworkManager, but
 I


Well, no obvious solutions after 7 hours of actively trying things, so 
I'll restore from backup. 

For those interested, I deleted files from /var/lib/dhcpbd, and this 
allowed me to get new IP addresses, but all within the faulty 
subdomain of California.  I tried on another wireless networks, and 
still my machine tries to assign me an IP within the California 
domain.  I reinstalled my entire networking software (short of a 
kernel recompile), and deleted and remade any network configuration 
files I could find that might be relevant, and still the problem 
persisted.   I used wicd to assign myself static IP and DNS with known 
values that are functional, and then the network was recognized, but I 
could not access anything. 

It's not a California address. It's an IPv4LL address, used when a dhcp 
server can't be found adn is related to the zeroconf useflag the other 
poster mentioned. Read: 
http://en.wikipedia.org/wiki/Zero_configuration_networking




Re: [gentoo-user] How to remove packages from /usr/portage/packages ?

2009-01-28 Thread Shawn Haggett
On Wednesday 28 January 2009 17:14:46 Nikos Chantziaras wrote:
 Is there some automated way to remove the packages I created with
 'quickpkg' and reside inside /usr/portage/packages without doing it by
 hand?  I don't mean 'eclean'.  That won't remove those that are installed.

You want to get rid of ALL of them?

rm -rf /usr/portage/packages/*

Shawn



Re: [gentoo-user] cnn.com flash videos crash firefox

2009-01-21 Thread Shawn Haggett
On Thu, 22 Jan 2009 01:37:23 pm Grant wrote:
 Do cnn.com videos *not* crash for anyone with the latest Firefox?
 This one for example:

 http://www.cnn.com/2009/POLITICS/01/20/white.house.website/index.html

 ?

 - Grant

I couldn't see any videos on that page... although the one at:

http://www.cnn.com/2009/POLITICS/01/20/videos.obama/index.html

played just fine.

On:
Intel Core2 Duo (Running in 64-bit)
www-client/mozilla-firefox-3.0.4-r1
net-www/netscape-flash-10.0.21.1_alpha

You can try starting firefox from the command line, then when it crashes you 
can see if it prints any helpful messages before dying.

Shawn



Re: [gentoo-user] Re: Tips/Tricks for Gentoo on low-spec computer?

2009-01-20 Thread Shawn Haggett
On Wed, 21 Jan 2009 12:48:00 pm Grant Edwards wrote:
 snip Of course that's not be the same
 thing as practical for some machines (I believe my OOo emerge
 just passed hour 31).  It would be interesting to know how much
 further it's go to go, but as long as it's done in a week or so
 that'll be good enough.  I remember building binutils, gcc,
 X11, emacs, and so on from sources on a 25MHz 68000 with 4MB of
 RAM -- that took some patience as well.

Have a look at the 'genlop' package.



Re: [gentoo-user] tif libraries being ignored

2009-01-11 Thread Shawn Haggett
On Mon, 12 Jan 2009 02:59:47 pm Ted Miller wrote:
 Dale wrote:
  Ted Miller wrote:
  [snip]
 
   Things work pretty well EXCEPT that the KDE based applications cannot
   handle *.tif files.  I have the media-libs/tiff package emerged, but
   for some reason the KDE subsystem does not seem to be using it.
   I have run
   emerge --update --deep --newuse world
   revdep-rebuild
   with no improvement
  
   Any insight into what I need to do to get this working will be greatly
   appreciated.  Please be explicit (or include links to documentation)
   if I have to do anything unusual, but I will be glad to send any
   needed information to help you diagnose my problem.
  
   Ted Miller
   Indiana, USA
 
  I would assume you have tiff in your USE line in make.conf?

 [snip]

  Just in case you missed that little detail.  ;-)

 Yes, I missed that, and it did the trick (after re-emerging 11 packages,
 including kde-libs).

 Where was it hidden, that I missed it?  Or is it just one of those things
 you have to learn?  Seems like the tif package should add it, or tell me
 to consider adding it, when the package is installed.

 Ted Miller

Have a look at the documentation about USE flags. It's part of the Gentoo 
Handbook, in the section about working with Gentoo:
http://www.gentoo.org/doc/en/handbook/handbook-x86.xml?part=2chap=2

Because you had the tiff flag turned off, Gentoo assumed you didn't want all 
those packages on your system to be linked against the tiff libraries (for 
whatever various reason). Therefore even though you installed the libraries, 
the packages themselves hadn't linked against them.

You might want to check your use flags for other media related flags, 
depending on which file formats you'll be using (off the top of my head there 
are a couple of flags for various picture formats).

And welcome to Gentoo! :)

Shawn



Re: [gentoo-user] SSH login with both key AND password?

2009-01-07 Thread Shawn Haggett

Dave Jones wrote:

Paul Hartman wrote on 08/01/09 00:28:

Hi,

Normally I'm using SSH with regular password login, and I've read
about generating a keypair and having a password-less connection that
way. Is there a way to require both the key AND a password? Basically
if I put the key in my SSH client at work, I don't want a co-worker to
be able to login to my home PC, or someone to grab my phone, etc.

Is there a way to put a passphrase on the key (seperate from my user
account password)? Maybe that would work... Otherwise I've thought
about having a dummy SSH account and then su - realuser to get
access, but that seems kind of messy.

I've always used password login and IP-restricted it, but now I'm
traveling more and never know what IP I might be connecting from, so
using a key seems to be the best plan, or maybesome kind of
portknocking (but that's difficult from restricted ssh environments
such as a phone).
  

By default ssh-keygen creates a key pair with a passphrase. It's your choice to 
enter or omit a passphrase.

If you've generated a key without a passphrase, you can add a passphrase using 
ssh-keygen -p

Entering a passphrase encrypts the private part of the key, which you keep only 
on the server. You only need the public part of the key on the client.

Cheers, Dave



Other way around, the server (i.e. the machine your logging into) has the 
public key stored in the authorized_keys file. The client (i.e. the machine 
your sitting at) has the private key.

So the private key would be sitting on your machine at work, but is in turn 
encrypted and you need the passphrase to decrypt it.

On another note, ssh-agent has been mentioned, but you might want to take a 
look at keychain (it's in portage). It's a nice script you can add to your 
bashrc or similar, it will take car of checking if there's already a running 
ssh-agent or not, and if not, ask for the password to any private keys and 
start ssh-agent. I use it on all my machines so on first boot I put in my 
password, then passwordless access between machines. If an attacker manages to 
get the key file off disk however, it is still encrypted and not much good to 
them.

Shawn



Re: [gentoo-user] cannot burn cd: permissions error

2008-12-09 Thread Shawn Haggett

Andrey Vul wrote:

I get the following error:
[EMAIL PROTECTED] ~ $ cdrecord dev=ATA:1,0,0 vmware/Windows\ XP\
Professional/shared/vLite.iso
...
cdrecord: For possible targets try 'cdrecord -scanbus'. Make sure you are root.


I'm not familiar with cdrecord, but have you tried this?



Re: [gentoo-user] Curious pattern in log files from ssh...

2008-12-04 Thread Shawn Haggett

Dmitry S. Makovey wrote:

On December 3, 2008, Steve wrote:

Dmitry S. Makovey wrote:

well. Nobody but you knows your requiremens and specifics - we're just
listing options. It's up to you to either take 'em or leave 'em ;)

Fair enough - but I've still not found an option for sharing/using
shared block lists for bot-nets.


Open a Wiki page on Wikipedia, update it every so often and provide simple 
parser for it so others can recycle same IPs. Since it's a Wiki page - others 
can update it as well (including botnet owners, but then they'd have to 
reveal themselves - tricky situation) :)


I hear the botnet owners have 1 or 2 spare machine scattered around the world 
they can proxy through... :)

Shawn



Re: [gentoo-user] Re: [OT] filesystems

2008-11-30 Thread Shawn Haggett
On Sat, 29 Nov 2008 04:21:44 pm Jorge Peixoto de Morais Neto wrote:
 On Thu, Nov 27, 2008 at 10:12 AM, Daniel Troeder [EMAIL PROTECTED] 
wrote:
  Am Mittwoch, den 26.11.2008, 15:26 +0100 schrieb Florian Philipp:
  You can buy so called archival grade DVD-Rs that should work for 10-20
  years in a good environment. There are hugh differences between
  products. In germany you can buy very good ones from Verbatim for around
  2€/disk.

 This can be hard to find in my mid-sized Brazilian city. If I lived in
 the mega-metropolis of São Paulo, this would be far easier. And thanks
 very much for recommending Verbatim. I have heard of Taiyo Yuden, but
 that would likely be far harder to find.

 Speaking of md5sum/shasum, do you know some tool that adds data
 redundancy? I heard dvddistaster does this, but I guess it is limited
 to DVDs. It would be great fo find a general data redundancy tool. In
 the moment, with the tools I know, the best I can do is store the
 files twice, with md5sums/shasums to decide which version is correct.

Have a look at app-arch/par2cmdline ( http://parchive.sourceforge.net/ ). It 
will create parity files for an arbitrary set of data files and you can 
choose your level of redundency (from 0 = now redundency, just integrity 
checking, up to 100%). Although expect your parity files to be on the order 
of the percentage for size, i.e. 50% redundancy for some given files to take 
about 50% of their size for the parity files).

The down side I find with the tool is that it doesn't currently support 
directories. This isn't so bad for creating parity files, but during 
checking/restore, the program expects all files to exist in the current 
directory, despite which sub-dirs they were originally in. You can get around 
this with a tar/rar/zip first, then calculate parities on the archive though.

 By the way, it seems from my (limited) experience that even sha256sums
 are IO-bound (even on my not-so-powerful Athlon XP 2600+), so it makes
 sense to calculate sha256sums (as instead of md5sums) even it is
 overkill. To be doubly sure, one can calculate sha256sums *and*
 md5sums.



Re: [gentoo-user] Java bad version number - what to up/downgrade?

2008-11-17 Thread Shawn Haggett
On Tue, 18 Nov 2008 12:04:53 pm Grant wrote:
 I'm getting the following from dumphd:

 bad version number in .class file

 I gather that I may have the wrong version of something Java installed
 but I don't know how that works.  Can anyone tell me what package I
 should try upgrading or downgrading?

This normally means the class file is from a new version of Java then the 
virtual machine trying to run it (i.e. class files compiled under Java 1.5, 
but your trying to run it in Java 1.4).

java-config -L (without quotes) will show you what virtual machines you have 
installed. On my machine it shows (the asterisk is the currently selected 
one, i.e. what will be used to run java applications):

[EMAIL PROTECTED] ~ $ java-config -L
The following VMs are available for generation-2:
1)  Blackdown JDK 1.4.2.03 [blackdown-jdk-1.4.2]
2)  Sun JDK 1.5.0.16 [sun-jdk-1.5]
*)  Sun JDK 1.6.0.07 [sun-jdk-1.6]
[EMAIL PROTECTED] ~ $

If the newest VM isn't selected as the default, read the man page for 
java-config and tell it to set the newest one as default (1.6 is the newest 
version).

Shawn



Re: [gentoo-user] Java bad version number - what to up/downgrade?

2008-11-17 Thread Shawn Haggett

On Tue, 18 Nov 2008 02:56:57 pm Grant wrote:

 I'm getting the following from dumphd:

 bad version number in .class file

 I gather that I may have the wrong version of something Java installed
 but I don't know how that works.  Can anyone tell me what package I
 should try upgrading or downgrading?

 This normally means the class file is from a new version of Java then the
 virtual machine trying to run it (i.e. class files compiled under Java
 1.5, but your trying to run it in Java 1.4).

 java-config -L (without quotes) will show you what virtual machines you
 have installed. On my machine it shows (the asterisk is the currently
 selected one, i.e. what will be used to run java applications):

 [EMAIL PROTECTED] ~ $ java-config -L
 The following VMs are available for generation-2:
 1)  Blackdown JDK 1.4.2.03 [blackdown-jdk-1.4.2]
 2)  Sun JDK 1.5.0.16 [sun-jdk-1.5]
 *)  Sun JDK 1.6.0.07 [sun-jdk-1.6]
 [EMAIL PROTECTED] ~ $

 If the newest VM isn't selected as the default, read the man page for
 java-config and tell it to set the newest one as default (1.6 is the
 newest version).

 Shawn

Thank you very much.  Since I'm not a Java developer, do I want jre as
opposed to jdk?

- Grabt


Yeah, the JRE will be fine. The important thing is just which version is 
active. I do Java development, hence the JDK.


Shawn



Re: [gentoo-user] mtune=k6-2 and a *small* upgrade

2008-04-08 Thread Shawn Haggett

Anthony Metcalf wrote:

Alan McKinnon wrote:
Now the existing system should work with your new hardware and you can 
update your CFLAGS and 'emerge -e world' at your leisure.


That's the theory at least anyway :-)

  
Well, exactly. That is the theory. I want to know the likelihood of 
success. I know that using mtune=k6-2 means it won't run on anything 
before a k6-2, and most likely not on anything Intel, due to the symbols 
and optimisations used. What I want is some idea of the chance it will 
run on a *later* AMD processor. Will an Athlon honour the k6-2 
optimisations?


There's two points that come to mind.

1) mtune is a request for the compiler to make the code more suited to 
the given processor, but without breaking compatibility. march is 
telling the compiler, do everything you can to make this code fastest on 
this processor.


From the GCC docs for 4.2.3:
-mtune=cpu-type: Tune to cpu-type everything applicable about the 
generated code, except for the ABI and the set of available instructions.
-march=cpu-type: Generate instructions for the machine type cpu-type. 
The choices for cpu-type are the same as for -mtune. Moreover, 
specifying -march=cpu-type implies -mtune=cpu-type.


So mtune shouldn't be using any instructions that are in K-6 that 
weren't in a 386.


2) I believe x86 hardware never goes backwards. That is, if a new 
feature is added, all future versions of the chip have that feature, 
just with more added. Of course Intel and AMD both have their separate 
additions, but since your staying with AMD, moving to a new processor 
shouldn't break anything (even if you had used march).


Disclaimer: I'm not an expert on hardware architectures or compilers, so 
I might be wrong.


Shawn
--
gentoo-user@lists.gentoo.org mailing list



Re: [gentoo-user] what is a normal rsync?

2008-03-11 Thread Shawn Haggett

Grant Edwards wrote:

I'm behind a firewall that doesn't allow rsync connections, so
I did a emege-webrsync.  It appears to have downloaded and
installed a current snapshot and updated the portage cache:

  sent 9492088 bytes  received 762706 bytes  585988.23 bytes/sec
  total size is 152597091  speedup is 14.88
  cleaning up
  transferring metadata/cache
  
   Updating Portage cache:  100%
  
   *** Completed websync, please now perform a normal rsync if possible.

   Update is current as of the of MMDD: 20080310
   
I can't find any documentation that explains what a normal

rsync is or how somebody like me can perform one.

What is meant by perform a normal rsync?
   


I assume it would mean the normal emerge --sync if you can, which you 
can't. I would assume it would say this since the rsync would be more up 
to date then the webrsync snapshot


Shawn
--
gentoo-user@lists.gentoo.org mailing list



Re: [gentoo-user] DMZ on an vmware gentoo guest running on winXP host

2007-12-13 Thread Shawn Haggett

[EMAIL PROTECTED] wrote:

Setup:
Home Lan with principle desktop machine running Gentoo. 
Three other machines running WinXP that are a trio of video and sound

editing machines.  And finally my wifes WinXP machine in antoher room.
All connected by Gigabit lan thru a netgear FVP318 router/firewall.

I want to begin scanning thru the traffic that bounces off my
router/firewall.

The router logs themselves are in a bad cumbersom format.  And if I
use an available option to output them to a lan System logger the
information is greatly truncated and nearly useless.

Router logs can be emailed but again they are cumbersom and clunky.
That how I currently look through them.

So cutting to the chase, I don't want to even mess around with those
methods.  Been there done that... didn't like it.

The router has an option to route traffic to a DMZ machine.  In the
past when I got this same urge 2 or so years ago  I setup an Openbsd
OS on an older PC.  Buttoned it down what little I knew to do and had
lots of fun with incoming traffic I mean just studying and being
amazed etc. 


I want to do that again but don't have that old machine anymore and
don't want the unfamiliar hassle of relearning whatever I knew about
OpenBSD.

I don't want the hassle of hardening my main desktop... preferring to
keep it pretty loose behind the firewall. Running a lan webserver and
the like.

I wondered if any of the security buffs here could tell me if a vmware
gentoo guest running on one of the winXP boxes could be setup to have
an independant tap on the Firewall as DMZ and not be offering every
hack whiz out there a shot at my home lan.

As I remember you can setup vmware with its own network address, not
sharing its hosts address to some degree.


Yes, vmware allows you to run it in bridged mode for networking. This 
means that while you just have the one physical network card, it appears 
from the point of view of the rest of the network to be two devices, 
with different MAC addresses and IP address.



But I wondered.., since any traffic is really going thru that WinXP
hosts nic one way or another if it would be as safe as a truly
independant host with its own ethernet wire to the router. (which is
switched). 


I'm not a security expert, but my gut feeling here is that it *should* 
be fine. The windows host should never really see the traffic, beyond 
the driver level I suspect, as the driver will see the packet has a 
different MAC address on it, and pass it to vmware to deal with. Of 
course that's not to say some specially crafted packet couldn't exist to 
break this. Or that if they can exploit your vmware machine, they might 
some how from there exploit vmware itself and then execute code on the 
windows machine. Depends how paranoid you want to be...



Would I likely be opening my lan up for some christmas shopping by
having a gentoo guest on a WinXP host running as a DMZ machine?
It would be pretty barebones with a IPTABLE setup for logging and
tagging or whatever I get interested in doing with the traffic.

No X server or other frills.


Just to make sure here, the only traffic that is going to arrive at the 
DMZ host will be inbound packets that aren't routed to another host (due 
to port forwarding or PnP rules). Traffic between the other machines and 
the internet will NEVER be seen, since it will travel from that machine 
straight to the router, and return packets will go straight back to that 
machine, not the DMZ system.


If all your wanting to do is see what people are doorknocking on your 
system (like the people that keep trying to guess passwords for my ssh 
server), then this should work.


Shawn
--
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] gaming kernel

2007-12-13 Thread Shawn Haggett

CONFIG_HZ_100=y
# CONFIG_HZ_250 is not set
# CONFIG_HZ_300 is not set
# CONFIG_HZ_1000 is not set
CONFIG_HZ=100


Smaller numbers here actually mean less clock interrupts per second. 
This means that the CPU doesn't have to spend as much time switching 
between processes. However it also means that a process will have to 
wait longer if another one is currently using the CPU. Higher numbers 
tend to be good for getting faster responses, since the process on 
average shouldn't have to wait as long to actually get back on the CPU.


I believe the help messages suggest 100Hz for a server, where 
responsiveness is not a problem, you just don't want the CPU wasting 
time switching processes lots. 250Hz and 300Hz are for more for desktop 
machines, and the 1000Hz for a really low latency desktop machine. So 
have you tried the high speeds?


Shawn

--
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] rsync via ssh

2007-11-04 Thread Shawn Haggett

Roger Mason wrote:

I have passwordless ssh between mymachine and backup_machine and the
rsync command in the crontab runs perfectly from the command line.

Does someone know what else needs to be done to get this (seemingly
simple!) task to work?



How have you setup the passwordless ssh? If your using keys with the ssh 
keyagent, then when the command is run in cron it wouldn't know where to 
find your ssh-agent...


Shawn
--
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] Re: checking for XML::Parser... configure: error: XML::Parser perl module is required for intltool

2007-08-12 Thread Shawn Haggett

Sven Köhler wrote:

   emerge gnome fails. Does anyone recognize what portage is
complaining about here?

I'm not really sure, but I solved it by reemerging dev-perl/XML-Parser.


expat has been updated. Some Apps are now broken. They have to
recompiled to link against the new libexpat.

For me, it was gettext and XML-Parser that had to be re-emerged. Without
it, emerging gnome failed.



Same here. Remerged dev-perl/XML-Parser, then my update world failed at 
a different point complaining about gettext, remerged that and now the 
update world is compiling normally.

--
[EMAIL PROTECTED] mailing list



Re: [gentoo-user] portage date

2007-03-09 Thread Shawn Haggett
Arnau Bria wrote:
 Hi,
 
 I don't sync my portage everyday, I do it when I need a special
 (last) version of package or when I'm preparing a big update...
 
 But sometimes I look for the date when I did my last sync, cause
 maybe it's enough for what I want, but I don't know how to find it...
 
 is there any way?
 
 TIA
 

Try:

/usr/portage/metadata/timestamp

That's what portage uses to see if the tree on the server is newer then
the local one, and there if there is even a need to sync.
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] clamd / amavisd email virus scanning problem

2006-12-14 Thread Shawn Haggett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Hi

I've got amavisd setup with postfix for spam/virus filtering. However
I'm noticing in my logs an error:

Dec 15 14:20:27 [amavis] (28224-17) ClamAV-clamd: Can't send to socket
/var/amavis/clamd: Transport endpoint is not connected, retrying (1)

Now I've checked with ps, and clamd is defiantly running. It is
configured to put it's socket in /var/amavis/clamd and I can see it
there. I can start/stop clamd and the socket will appear and disappear.
Amavis is configured with exactly the same path, but obviously can't
seem to connect to clamd. All email still gets passed through the system
however.

Anyone have any ideas what could be causing this?

The relevant section from /etc/amavisd.conf:

# ### http://www.clamav.net/
['ClamAV-clamd',
  \ask_daemon, [CONTSCAN {}\n, /var/amavis/clamd],
  qr/\bOK$/, qr/\bFOUND$/,
  qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],

If you would like to see more of my config files, let me know.

Thanks Shawn
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFgh19Qv6DFiTKHhkRAnwiAJ9oXMHqojJCdp8BqooqhzOxL10NKgCggAtj
rDzI9gNrmkkTACuacB6lawc=
=NMQ1
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Symlinking out of a chroot

2006-11-12 Thread Shawn Haggett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Brian Davis wrote:
 Hey folks,
 
 I will be running my apache2 server in a chroot. Most of my data for the
 server (e.g. pictures, user webpages) are on another partition from my
 chroot.  I don't want to move all that data into the apache chroot if I
 don't have to.  Therefore I would have soft symlinks from the chroot to
 the data.  Does this effectively make the chroot worthless?
 
 Thanks!

At a quick guess, I suspect the symlink will end up pointing to
something like, /link will be a symlink pointing to '../../blah', which
won't be valid inside the chroot. Or will point to '/var/www/mydata'
which again, won't be valid inside the chroot. However I don't have a
chroot environment here with which to test this. But basically the
symlink will be broken inside the choort.

Shawn
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFVz/hQv6DFiTKHhkRAoDTAJwPq1dUX3+Lc6FkTXhXKdUaMnMYLgCfcJFN
yfy4N1cwW9QVvmOdtYyKmNE=
=ke/5
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Using Boinc under Gentoo

2006-09-01 Thread Shawn Haggett
Frank Jahn wrote:
 Hi all!
 
 I have a strange behavior in my BOINC client.
 
 All projects tell me that the platform 'i386-pc-linux-gnu' was not found.
 
 I might add, that I am quite new to Gentoo (not Linux in general) and
 just installed 2006.0
 
 Thanks in advance ;)

What is your CHOST setting in /etc/make.conf? I would guess you would
have a line such as: CHOST=i386-pc-linux-gnu in there. So boinc was
built thinking your platform is only a 386. Unless this is really old
hardware, you should probably update it to i686-pc-linux-gnu. There's
a big warning in my make.conf file though about not changing the setting
unless you are doing a Stage 1 install. So you might need a complete
rebuild of your system if you change it. Someone more knowledgeable on
these things should be able to tell you what you need to do to change
your CHOST setting.

Shawn
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] .keep

2006-08-21 Thread Shawn Haggett
Philip Webb wrote:
 060821 Shaochun Wang wrote:
 Does anyone know the function of .keep file in a directory?
 
 It prevents the dir from being deleted by a script,
 eg esp during a package update.
 
I believe it is to do with how tar handles directories. If there are no
files in a dir, tar won't include the dir in the archive. So to ensure
packages create dirs that will be needed by that package (i.e. an empty
data directory, or empty log directory or some such) there is a .keep
file placed in that directory. This will cause tar to create the
directory when the archive is unpacked.

Shawn
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Fwd: Delivery Status Notification (Failure)

2006-06-07 Thread Shawn Haggett
Mohammed Hagag wrote:
 [EMAIL PROTECTED]... User unknown
 --
 gentoo-user@gentoo.org mailing list

Spot the difference?
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: QT 4

2006-03-16 Thread Shawn Haggett
James wrote:
 Dmitry S. Makovey dmitry at athabascau.ca writes:
 
 since packages you use (I assume KDE etc.) are not using qt4 (i.e. 
 require specifically qt3 branch) portage doesn't find any reasons to 
 bump version of qt. AFAIR Qt is a slotted package and you can safely 
 go ahead and do 
 emerge =x11-libs/qt-4.1.1 
 but you packages wouldn't use it.
  
 Ok this kinda makes sense. But what exactly is a 'slotted package',
 how do I determine when a packages is slotted, and where do I read
 more about 'slotted'? I see this term used ofen, but, really have
 no clue exactly what slotted means or if it has various meanings
 based on the context of it's (verbiage) usage.

Slotted means you can have several different versions of a package
installed, *at the same time*. So in this case it would mean you would
end up with qt-3.x still installed and qt-4.x also installed. Since KDE
would be linked against 3.x, it would continue to use that, while you
could in theory link against the 4.x version.

James wrote:
 checking whats available, with 'emerge -pv qt', I see:
 x11-libs/qt-3.3.4-r8

 Nothing else... If I add x11-libs/qt to the package.keywords
 file, I get
 x11-libs/qt-4.1.1

 after editing the package.keyword file, If I run emerge -uDp world,
 it want to upgrade qt:
 Calculating world dependencies ...done!
 [ebuild U ] x11-libs/qt-3.3.4-r9 [3.3.4-r8]

If you go to http://packages.gentoo.org/search/?sstring=qt;offset=40 you
can see all the versions of qt (third one down on the page). 'emerge -pv
qt' first off shows you the latest stable version, 3.3.2-r8. When you
add qt to your package.keywords file though, emerge -pv qt' will want to
install the *latest* version of qt that is available, currently 4.1.1.
However the update world command will find that KDE specifically
requires 3.x, so therefore will update to the latest 3.x version, in
this case 3.3.4-r9 because even though that in the testing branch,
you've just enabled it by adding it in your package.keywords file.

Although I don't know why portage doesn't also want to install the 4.1.1
version of qt if they are slotted...

Shawn
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Max Number of Partitions

2006-02-11 Thread Shawn Haggett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Francesco Riosa wrote:
 Mick wrote:
 Hi All,

 I think that I have run out of partitions:

 http://publib.boulder.ibm.com/infocenter/dsichelp/ds6000ic/index.jsp?topic=/com.ibm.storage.smric.help.doc/f2c_linuxscsilimit_2hsag9.html

 Although I have created up to 17 partitions on a SATA, I cannot mount
 them.  :-(

 Before I start consolidating OS and data partitions to keep the number below
 15, is there an alternative to this?
   
 Not that I know, sata disk are managed like scsi ones limiting the
 number of partitions to 1-15 .
 
 Someone, somewhere, one time told me that lvm could address that in
 some manner but I've never seen how. 

LVM would indeed be a solution. Instead of creating many disk
partitions, you would simply create one large one the size of the disk.
Then using LVM create as many virtual partitions as you need (I forget
the correct LVM terminology, I believe it's logical volumes). There are
many howto's out there on setting up LVM and explaining what it does, I
would suggest having a look at that.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD7ZynQv6DFiTKHhkRAiwoAJ98PVJprssDCFsrSnum+QGtlhOslgCffC8p
FeOULJkkA8MdhB17E8kI8X8=
=M7NT
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Re: KDM and portage

2006-02-11 Thread Shawn Haggett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Daniel D Jones wrote:
 On Wednesday 08 February 2006 21:14, Harm Geerts wrote:
 On Wednesday 08 February 2006 15:45, Daniel D Jones wrote:
 I have kdebase-3.5.1-r1 installed.  Why is kdm-3.5.1 blocked?  Surely
 kdebase is a requirement for kdm, and it makes no sense to say that
 kdm-3.5.1 needs an earlier version of kdebase, does it?  I'm probably
 missing some fundamental understanding of what's going on here.  Thanks
 for any assistance.
 See the other replies for the monolithic ebuild explanation.
 
 Have done so.  Thanks to all who replied.
 
 kdm is part of the kdebase package, the only thing you need to do to use
 kdm is set DISPLAYMANAGER in /etc/rc.conf
 # echo 'DISPLAYMANAGER=kdm'  /etc/rc.conf
 
 The which command (as root) wasn't showing me kdm, so I assumed it wasn't 
 installed.  (/usr/kde/3.5/bin isn't in the path for the root user.  I assume 
 this is normal?)
 
 I've now modified /etc/rc.conf to use kdm.  But I now have a problem.  if I 
 log in through kdm, kde 3.3 runs.  However if I kill kdm, log into the 
 console, and manually run startx, kde 3.5 runs.  (I have exec startkde in 
 my ~/.xinitrc.)  

I don't have the KDM login window in front of me, but you should find
the pull down options button or something. There should be a session
type or something option there and you can choose what sort of session
you want, KDE 3.4, KDE 3.5, console session... etc. The default option
will be to load whatever your previous session was, so manually
selecting a 3.5 session should mean that in future it will automatically
load that version. That's how it works for my slotted 3.4/3.5 install
anyway.

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD7qbGQv6DFiTKHhkRAmufAJ0XtySxYbdJT1yJ6i2lx0ykMD+hlwCfTqrw
l0YGbLFZYaWovDTuTbIT7B4=
=Er/e
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



[gentoo-user] Weird USE flag behaviour

2006-02-10 Thread Shawn Haggett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

I recently installed the unstable version of portage (2.1_pre4-r1) so I
could get access to the logging facilities (specifically having it send
me emails of information instead of needing to watch the emerge output).

However a recent 'emerge -Duva world --newuse' turned up a long list of
packages. Closer inspection showed that packages had been built with
flags such as mysql, but thought it was now turned off and wanted to
rebuild without it. That was odd so I checked ufed first and found it
listed the flag as enables in use.defaults. I also then installed
profuse and it also reported the flag as enabled in use.defaults and
therefore the box was already selected for the use flag, only allowing
me to turn it off. I had to instead add the flag into my make.conf file
before emerge would see the flag as still being turned on as it should be.

Has anyone else experienced this behaviour? Is it something to do with
modifications to how the new portage version handles use flags that
hasn't been incorporated into ufed or profuse yet?

Shawn
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD7UnyQv6DFiTKHhkRAgOIAJ9dBO9YV5+XFg8JzDVbq0MVvueEQgCfcJK1
RAU5rklIhp3lHKCA2NeKC0w=
=Adc8
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Weird USE flag behaviour

2006-02-10 Thread Shawn Haggett
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Boyd Stephen Smith Jr. wrote:
 On Friday 10 February 2006 20:20, Shawn Haggett [EMAIL PROTECTED] wrote 
 about '[gentoo-user] Weird USE flag behaviour':
 I recently installed the unstable version of portage.

 However a recent 'emerge -Duva world --newuse' turned up a long list of
 packages. Closer inspection showed that packages had been built with
 flags such as mysql, but thought it was now turned off and wanted to
 rebuild without it.

 Has anyone else experienced this behaviour? Is it something to do with
 modifications to how the new portage version handles use flags that
 hasn't been incorporated into ufed or profuse yet?
 
 This is a well-documented change in portage.  The use.defaults file is no 
 longer used.  Previously, this file would turn on use flags that were 
 neither enabled nor disabled based on packages you had installed.  This 
 was a bad idea to begin with, IMHO; RIP use.defaults.
 
Ahh, I figured something like this, just hadn't RTFM apparently. That's
what I get for living on the edge.

Cheers
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFD7U+jQv6DFiTKHhkRAuVHAJ9+7xly9H7RDxmhmy4ZRWfIYZpWgQCglETa
YGCabDtFGCMYzMXLZRKrNMw=
=pzY4
-END PGP SIGNATURE-
-- 
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] Knoppix Install Method

2005-12-10 Thread Shawn Haggett

Drew Tomlinson wrote:


On 12/10/2005 1:17 PM Stroller wrote:



On Dec 10, 2005, at 5:08 pm, [EMAIL PROTECTED] wrote:



I have a system on an Abit motherboard with the Nvidia GeForce 4 
chipset.

There are two SATA disks in a hardward stripe configuration using the
controller built in to the motherboard.
...
I booted the latest Knoppix dated 9/23/05 and see two
icons on the desktop for my drives.  One for sda the other for sdb.  
I can
not mount either.  I assume this is because Knoppix is seeing each 
drive

individually instead of the one logical striped drive it is.




I'm no expert on this, but I believe that many ATA hardware RAID 
arrangements in fact just use their Windoze drivers to do software 
RAID. I'd do some research via Googling the chipset /or board's 
model number if I were you.




I haven't found anything yet but then I haven't looked real hard.  
However I suspect this does not rely on any Windows drivers as the 
controller is managed long before Windows boots.  Just after POST and 
before the OS starts, a brief message showing the controller is 
displayed.  By pressing F10, I can manage my stripe.  Much like I see 
most SCSI cards.



Have a look at:
http://people.redhat.com/~heinzm/sw/dmraid/
I bought an ABit motherboard a while ago with a SIL3114 raid 
controller. While it gives you an option at boot to manage the drives, 
all this does is configure the drivers so the software can see them as a 
raid set, i.e. it's not true hardware raid.


Shawn Haggett
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] caching DNS the Gentoo way?

2005-12-09 Thread Shawn Haggett

michael higgins wrote:


Hello, all. Need a clue, here.

I've found that it'll often takes longer to get DNS resolution than content over my connection, so I thought a caching DNS server the way to go. With that in mind, I installed BIND. 

I couldn't find anything like a quickie Gentoo example of this minimal use of the application, so on starting /etc/init.d/named, there was first an error about a missing /etc/bind/named.conf. 

I Googled around a bit and found something to start with, watched the syslog messages and tweaked it, finally managing to get named to run. The problem is, I'm still not convinced that I've got it set up correctly. From what I understand (right or wrong, IDK), I should only have to look up something once, then that info is available locally until I reboot. Or, like that... 
 

Check your /etc/resolv.conf file. Make sure it lists your local machine 
as a nameserver. Otherwise your system will ignore it and just use 
whatever sever is listed in there. Also be careful, if you use DHCP on a 
network or anything, it might be rewriting the resolv.conf file to have 
the nameserver entries that are gotten from DHCP.


What sort of set-up is this? Is this a single machine by itself 
connected to the internet, or is this part of a network? If it's part of 
a network, do you want it to also cache all the queries for other 
clients on the network?


Shawn
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] System Locking Up

2005-11-09 Thread Shawn Haggett

Peper wrote:


New debug info:
when locked up my pc responses to ping and ssh connection(I get only login 
respone, i cannot actually log in). Moreover ssh logs sshd: fatal: Timeout 
before authentication for IP.


I am not sure what to think about it...

 

I had a similar thing happen with mine. Turned out it was a dying HDD. I 
assumed the behaviour was caused by things like sshd trying to write to 
the log about a connection attempt, but it would block because it 
couldn't write to the disk. Same for logging into to a console. But 
network traffic was still passing through the machine, and it could 
still be pinged.

--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] [OT] binary comparison

2005-10-17 Thread Shawn Haggett

Andrew Gaydenko wrote:


Hi!

'diff' is text oriented tool. I there some kind of such tool
oriented to binary files/subtrees comparison?

Thanks!
 


'od | diff'
--
gentoo-user@gentoo.org mailing list



Re: [gentoo-user] portage: sendmail blocked by ssmtp...

2005-07-22 Thread Shawn Haggett

Jarry wrote:


Hi,

I wanted to emerge sendmail (for a few reasons I don't want to
use other MTA), and I see, that it is blocked by ssmtp. Because
I did not installed it, it must have been emerged as a dependency
of some other package.

Q1: Is it possible to find, which package depends on ssmtp and
caused ssmtp to be emerged?

I want to unmerge ssmtp and emerge sendmail, but I don't want to
break some dependencies on my system. In manual there is BIG WARNING
that portage does not check dependencies when unmerging...


If a package needs to send mail it requires that there be a package 
installed that can do it. If you don't have anything installed this will 
default to ssmtp. However you *SHOULD* be able to to simply unmerge it, 
then emerge sendmail and it will work. If you are worried about it 
breaking things, just try a:

emerge -Duvp world
If it complains about wanting to install ssmtp again, then there is 
something explicitly depending on it. However if it is quite happy then 
it was a dependency on ssmtp, but rather a dependency that there be some 
way to send mail, and ssmtp is the simplest way to acheive that. While I 
doubt it, something may also have been linked against ssmtp, you can try 
a revdep-rebuild after you unmerge it. If there is anything broken it 
will complain and re-emerge the broken packages so they can be re-linked.


Shawn
--
gentoo-user@gentoo.org mailing list