Re: [PLUG] outdoor CAT5e
Graybar comes to mind, http://www.graybar.com/locations/or/portland. Seeing as they specialize in "high-quality electrical supplies, communications and data networking products", it's hard to imagine that you could find a better selection and/or price anywhere else in Portland. Although they might sell in larger quantities than you need... On Thu, Sep 25, 2014 at 8:48 PM, Jason Bergstrom wrote: > I would also look at Home Depot/Lowes. My recollection is that Home > Depot has it, and is cheaper than Fry's (which also has it). Both are > more expensive than Amazon (if there was no requirement to have it today). > > Jason, > ber...@bergie.net > > On Thu, Sep 25, 2014 at 03:01:50PM -0700, John Bartley K7AAY > j...@503bartley.com wrote: > > Try Platt Electric 800-25PLATT > > ___ > > PLUG mailing list > > PLUG@lists.pdxlinux.org > > http://lists.pdxlinux.org/mailman/listinfo/plug > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug > ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] outdoor CAT5e
I would also look at Home Depot/Lowes. My recollection is that Home Depot has it, and is cheaper than Fry's (which also has it). Both are more expensive than Amazon (if there was no requirement to have it today). Jason, ber...@bergie.net On Thu, Sep 25, 2014 at 03:01:50PM -0700, John Bartley K7AAY j...@503bartley.com wrote: > Try Platt Electric 800-25PLATT > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
> "Galen" == Galen Seitz writes: Tim> Is there a way to use less, or a less-like viewer, to view a Tim> growing file such that as the file grows, paging down will get me Tim> more and more content? Tim> As far as I can tell, just running 'less myfile.txt', when Tim> myfile.txt is being written to by another app, seems to just take Tim> a snapshot of myfile.txt -- I want to be able to look at the full Tim> extent of the file AS IT GROWS, to monitor ongoing long Tim> computations to see how they're doing. Tim> If you're tempted to just answer with "you don't want to do that" Tim> -- no, I do indeed want to do that, and I have good reason. Galen> When I want to do that, I typically press 'G', followed by 'F'. Galen> From the man page: Galen> F Scroll forward, and keep trying to read when the end of file Galen> is reached. Normally this command would be used when already Galen> at the end of the file. It is a way to monitor the tail of a Galen> file which is growing while it is being viewed. (The behavior Galen> is similar to the "tail -f" command.) +1 -- Russell Senior, President russ...@personaltelco.net ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
[PLUG] Stuff in /home/parents/.bin/arduino-1.0.1/
Success after fussing around trying to get a newer version of Arduino IDE, I discover a bunch(25) of arduino-1.0.1 files. I must have created those during my older attempts. The GUI package manager knows nothing of those. What is the safe way to purge them from my system? Can I just delete them? Thanks, -Denis ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
Consider: tail -f growingfile On Sep 25, 2014 2:17 PM, "Tim Wescott" wrote: > Is there a way to use less, or a less-like viewer, to view a growing > file such that as the file grows, paging down will get me more and more > content? > > As far as I can tell, just running 'less myfile.txt', when myfile.txt is > being written to by another app, seems to just take a snapshot of > myfile.txt -- I want to be able to look at the full extent of the file > AS IT GROWS, to monitor ongoing long computations to see how they're > doing. > > If you're tempted to just answer with "you don't want to do that" -- no, > I do indeed want to do that, and I have good reason. > > -- > > Tim Wescott > www.wescottdesign.com > Control & Communications systems, circuit & software design. > Phone: 503.631.7815 > Cell: 503.349.8432 > > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug > ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
On Thu, 2014-09-25 at 14:52 -0700, Bill Barry wrote: > On Thu, Sep 25, 2014 at 2:37 PM, Tim Wescott wrote: > > I need to be able to navigate around the whole file, not just look at > > the end. Bill's answer sounds like my solution. > > According to the less man page > will do the same thing as G and might > be easier to remember. > '>' works a charm. Usually I like the command-line stuff, but sometimes it seems like I've misplaced my Secret Decoder Ring. -- Tim Wescott www.wescottdesign.com Control & Communications systems, circuit & software design. Phone: 503.631.7815 Cell: 503.349.8432 ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
In less press a capital F (shift-f). To stop the scrolling press ctrl-c. Never took the time to figure out how to launch less from the command line like this. \\||/ Rod -- On September 25, 2014 2:17:59 PM Tim Wescott wrote: > Is there a way to use less, or a less-like viewer, to view a growing > file such that as the file grows, paging down will get me more and more > content? > > As far as I can tell, just running 'less myfile.txt', when myfile.txt is > being written to by another app, seems to just take a snapshot of > myfile.txt -- I want to be able to look at the full extent of the file > AS IT GROWS, to monitor ongoing long computations to see how they're > doing. > > If you're tempted to just answer with "you don't want to do that" -- no, > I do indeed want to do that, and I have good reason. > > -- > > Tim Wescott > www.wescottdesign.com > Control & Communications systems, circuit & software design. > Phone: 503.631.7815 > Cell: 503.349.8432 > > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] outdoor CAT5e
Try Platt Electric 800-25PLATT ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
On Thu, Sep 25, 2014 at 2:37 PM, Tim Wescott wrote: > I need to be able to navigate around the whole file, not just look at > the end. Bill's answer sounds like my solution. According to the less man page > will do the same thing as G and might be easier to remember. Bill ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
On Thu, 25 Sep 2014, Tim Wescott wrote:
> Is there a way to use less, or a less-like viewer, to view a growing
> file such that as the file grows, paging down will get me more and more
> content?
Tim,
Haven't tried this, but if one can watch a log file, such as
/var/log/maillog, as it has rows appended to the bottom, then it should work
for any file, yes?
How about 'tail -f mygrowingfile.txt'?
man tail:
"-f, --follow[={name|descriptor}] output appended data as the file grows; -f,
--follow, and --f
ollow=descriptor are equivalent"
Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
I need to be able to navigate around the whole file, not just look at the end. Bill's answer sounds like my solution. On Thu, 2014-09-25 at 14:18 -0700, Ronald Bynoe wrote: > Why not just tail -f myfile.txt? > > On Sep 25, 2014 2:17 PM, "Tim Wescott" wrote: > Is there a way to use less, or a less-like viewer, to view a > growing > file such that as the file grows, paging down will get me more > and more > content? > > As far as I can tell, just running 'less myfile.txt', when > myfile.txt is > being written to by another app, seems to just take a snapshot > of > myfile.txt -- I want to be able to look at the full extent of > the file > AS IT GROWS, to monitor ongoing long computations to see how > they're > doing. > > If you're tempted to just answer with "you don't want to do > that" -- no, > I do indeed want to do that, and I have good reason. > > -- > > Tim Wescott > www.wescottdesign.com > Control & Communications systems, circuit & software design. > Phone: 503.631.7815 > Cell: 503.349.8432 > > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug -- Tim Wescott www.wescottdesign.com Control & Communications systems, circuit & software design. Phone: 503.631.7815 Cell: 503.349.8432 ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
On 09/25/14 14:16, Tim Wescott wrote:
> Is there a way to use less, or a less-like viewer, to view a growing
> file such that as the file grows, paging down will get me more and more
> content?
>
> As far as I can tell, just running 'less myfile.txt', when myfile.txt is
> being written to by another app, seems to just take a snapshot of
> myfile.txt -- I want to be able to look at the full extent of the file
> AS IT GROWS, to monitor ongoing long computations to see how they're
> doing.
>
> If you're tempted to just answer with "you don't want to do that" -- no,
> I do indeed want to do that, and I have good reason.
>
When I want to do that, I typically press 'G', followed by 'F'. From
the man page:
F Scroll forward, and keep trying to read when the end of file is
reached. Normally this command would be used when already at
the end of the file. It is a way to monitor the tail of a file
which is growing while it is being viewed. (The behavior is
similar to the "tail -f" command.)
BTW, if a file gets deleted and recreated while you have it open in
less, I've discovered that entering and exiting the help screen('h'
followed by 'q') will cause the new version of the file to be opened.
galen
--
Galen Seitz
gal...@seitzassoc.com
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
You can also do a tail -f Cathy --- Cathy L. Smith IT Engineer Pacific Northwest National Laboratory Operated by Battelle for the U.S. Department of Energy Phone: 509.375.2687 Fax: 509.375.2330 Email: cathy.sm...@pnnl.gov -Original Message- From: plug-boun...@lists.pdxlinux.org [mailto:plug-boun...@lists.pdxlinux.org] On Behalf Of Bill Barry Sent: Thursday, September 25, 2014 2:22 PM To: t...@wescottdesign.com; Portland Linux/Unix Group Subject: Re: [PLUG] Using less on a growing file On Thu, Sep 25, 2014 at 2:16 PM, Tim Wescott wrote: > Is there a way to use less, or a less-like viewer, to view a growing > file such that as the file grows, paging down will get me more and > more content? > > As far as I can tell, just running 'less myfile.txt', when myfile.txt > is being written to by another app, seems to just take a snapshot of > myfile.txt -- I want to be able to look at the full extent of the file > AS IT GROWS, to monitor ongoing long computations to see how they're > doing. less itself works that way. shift-g will reveal anything new added to myfile.txt after you opened it with less. Bill ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
On Thu, Sep 25, 2014 at 2:16 PM, Tim Wescott wrote: > Is there a way to use less, or a less-like viewer, to view a growing > file such that as the file grows, paging down will get me more and more > content? > > As far as I can tell, just running 'less myfile.txt', when myfile.txt is > being written to by another app, seems to just take a snapshot of > myfile.txt -- I want to be able to look at the full extent of the file > AS IT GROWS, to monitor ongoing long computations to see how they're > doing. less itself works that way. shift-g will reveal anything new added to myfile.txt after you opened it with less. Bill ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Using less on a growing file
Why not just tail -f myfile.txt? On Sep 25, 2014 2:17 PM, "Tim Wescott" wrote: > Is there a way to use less, or a less-like viewer, to view a growing > file such that as the file grows, paging down will get me more and more > content? > > As far as I can tell, just running 'less myfile.txt', when myfile.txt is > being written to by another app, seems to just take a snapshot of > myfile.txt -- I want to be able to look at the full extent of the file > AS IT GROWS, to monitor ongoing long computations to see how they're > doing. > > If you're tempted to just answer with "you don't want to do that" -- no, > I do indeed want to do that, and I have good reason. > > -- > > Tim Wescott > www.wescottdesign.com > Control & Communications systems, circuit & software design. > Phone: 503.631.7815 > Cell: 503.349.8432 > > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug > ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
[PLUG] Using less on a growing file
Is there a way to use less, or a less-like viewer, to view a growing file such that as the file grows, paging down will get me more and more content? As far as I can tell, just running 'less myfile.txt', when myfile.txt is being written to by another app, seems to just take a snapshot of myfile.txt -- I want to be able to look at the full extent of the file AS IT GROWS, to monitor ongoing long computations to see how they're doing. If you're tempted to just answer with "you don't want to do that" -- no, I do indeed want to do that, and I have good reason. -- Tim Wescott www.wescottdesign.com Control & Communications systems, circuit & software design. Phone: 503.631.7815 Cell: 503.349.8432 ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] adding desktop config. file in Unity
You have led me to the solution: putting the .desktop file in /usr/share/applications is what gets it into Dash. The effects of all the stuff which is found in various .desktop files are unknown to me, but for my application that stuff is very limited, short, and mostly of clear meaning. -Denis On Thu, Sep 25, 2014 at 12:06 PM, Bill Morita wrote: > Denis > > Try looking for a .desktop file down in /usr/share/applications > and copy it to ~/Desktop > If you cannot find the one you want, try editing a copy of one of the > .desktop files from the above directory. > > -- Bill Morita > 512-569-6387 (Cell) > > On Thu, Sep 25, 2014 at 1:34 PM, Denis Heidtmann > wrote: > >> Update: >> >> I repeated my first method but chose a much simpler launcher to edit. >> Now I have something which works satisfactorily from the desktop. The >> question remains: how do I get it into the Dash? >> -Denis >> >> On Thu, Sep 25, 2014 at 11:18 AM, Denis Heidtmann >> wrote: >> > Ubuntu 12.04 does not have a context menu for this. I copied an >> > existing one in the Dash, edited it, and got something that works on >> > the desktop, but it is filled with stuff the meaning of which I do not >> > know, and launches slowly. I copied a very simple desktop >> > configuration file from my other system, made two simple edits >> > (command and icon), but the system objects--not certified, or >> > something like that. >> > >> > The program I am trying to create a launcher for is the Arduino IDE >> > 1.06 (Ubuntu is 3 years behind the times.) The executable is a script >> > located in /usr/local/src/arduino-1.0.6/ Can someone explain how >> > launchers are created, and how to get them into Dash? (I attempted to >> > read a thorough explanation of such files, but it was beyond my pay >> > grade.) >> > >> > Thanks, >> > -Denis >> ___ >> PLUG mailing list >> PLUG@lists.pdxlinux.org >> http://lists.pdxlinux.org/mailman/listinfo/plug >> > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Such a thing as a "single user" Linux?
On Thu, 25 Sep 2014, Larry Brigman wrote: > Nobody from the outside can get on this install as it doesn't have any > networking listening servers running, not even sshd. For what it's worth, sshd can be set non-executable on any distribution as far as I know. It's a function of that daemon running or not, not the distribution. Rich ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Such a thing as a "single user" Linux?
On Thu, Sep 25, 2014 at 11:39 AM, Richard Owlett wrote: > > Are there Red Hat derived Live CDs that I should try? > > Centos and Scientific Linux both have Live CD images for both 6.x and 7.x I just installed the latest minimal Ubuntu release. It's not a live system but it's small. Nobody from the outside can get on this install as it doesn't have any networking listening servers running, not even sshd. The minimal Linux distributions are probably as close to the old cp/m systems (w/ added functionality). ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] ALL BASH RELEASES STILL VULNERABLE [Re: cross-platform bash vulnerability widespread]
At least one person had different (but still rather wrong-looking) results
for that example (which is the one from CVE-2014-7169's cited links); I've
seen another one being passed around with a moderately different syntax, so
give it a try too:
V='() { function a a>\' bash -c 'iam-vulnerable';ls iam-vulnerable;rm -f
iam-vulnerable
(if it's not clear, the backslash there is a literal backslash, they don't
quote things in single-quote-mode. Also, despite the fact that the word
"env" is missing from the example, be assured it is setting V in the
environment. "VAR=foo cmd..." is a portable sh way to set cmd's env just
prior to executing it (without affecting anything in the outer/interactive
shell).)
-mjc
On Thu, Sep 25, 2014 at 12:31 PM, Micah Cowan
wrote:
> Sorry, that should be:
>
> $ env X='() { (a)=>\' bash -c "echo date"; cat echo
>
> The previous version obviously only works if your sh is bash, obviously.
>
> -mjc
>
> On Thu, Sep 25, 2014 at 12:25 PM, Micah Cowan
> wrote:
>
>> > $ env X='() { (a)=>\' sh -c "echo date"; cat echo
>>
>
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] ALL BASH RELEASES STILL VULNERABLE [Re: cross-platform bash vulnerability widespread]
Sorry, that should be:
$ env X='() { (a)=>\' bash -c "echo date"; cat echo
The previous version obviously only works if your sh is bash, obviously.
-mjc
On Thu, Sep 25, 2014 at 12:25 PM, Micah Cowan
wrote:
> > $ env X='() { (a)=>\' sh -c "echo date"; cat echo
>
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
[PLUG] ALL BASH RELEASES STILL VULNERABLE [Re: cross-platform bash vulnerability widespread]
Sorry, I should have done this title change in the previous message... it
certainly merits it.
Make sure you're testing with the revised "env X" example (below), not the
one from the original CVE earlier yesterday.
At the moment, they're saying so far they only know you can write to files
(certainly bad enough), and not necessarily execute arbitrary code (in the
patched versions, that is)... but it seems likely to me there's another
remote-code exploit lurking there.
-mjc
On Thu, Sep 25, 2014 at 11:53 AM, Micah Cowan
wrote:
>
>
> None of yesterday's fixes are complete (but still use yesterday's patch
> anyway in the meantime, as it's better than nothing).
>
> bash is STILL vulnerable everywhere, as tracked by this (newer) CVE:
> https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169
>
> I'm not currently aware of a patch for the revised issue as of yet. Some
> folks I know (my employer, for instance) are responding by completely
> disabling function exports completely, which does the job:
>
>
> https://github.com/akamai/bash/commit/7caac6ee41f645fc21b6e5eddc820151f6e6c43c
>
> Note that (as I discovered) the patch above will successfully apply
> INCORRECTLY to some older versions of bash, unless you also specify --fuzz
> 1 (fuzz 2, the default, lets it apply). In one version of bash
> (4.2.something) I patched, the results were BUILDABLE, but completely
> wrong. Eyeball it after patching to make sure it only excludes the body of
> a single if statement.
>
> Example of the still-existing exploit:
>
> $ env X='() { (a)=>\' sh -c "echo date"; cat echo
>
> (if the file "echo" exists afterwards, it's vulnerable)
>
> Again, as of this time, there is NO released patch for this one yet.
>
> -mjc
>
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Such a thing as a "single user" Linux?
On Thu, Sep 25, 2014 at 10:34:47AM -0500, Richard Owlett wrote: > The majority of the remaining problems might be classed as > "philosophy of OS design". Debian automatically pulls in to many > do-dads/gizmos/geegaws/etc. The majority of those problems can be > addressed by setting --norecomends for apt-get and judicious > creation of appropriate meta-packages. > > I've a project to determine which packages with Priority: > important or standard I actually want in a base install. > > I'll be ordering a collection of Live CDs to see what example(s) > I might wish to follow. > > Suggestions? What is your exposure to minimalist Linux distributions? https://en.wikipedia.org/wiki/Lightweight_Linux_distribution#Distributions_described_as_lightweight To which I would add Linux from Scratch and (ahem) Arch Linux. Each of these would install with a minimum set of applications that you could add to as needed. This would address the philosophy issue nicely. Arch is installed as a minimal base system, configured by the user upon which their own ideal environment is assembled by installing only what is required or desired for their unique purposes. https://wiki.archlinux.org/index.php/Arch_Linux And FWIW I've found maintaining a bunch of Arch systems easier than an Ubuntu system. -- Michael Rasmussen, Portland Oregon Be Appropriate && Follow Your Curiosity After your lover has gone you will still have PEANUT BUTTER! ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] adding desktop config. file in Unity
Denis Try looking for a .desktop file down in /usr/share/applications and copy it to ~/Desktop If you cannot find the one you want, try editing a copy of one of the .desktop files from the above directory. -- Bill Morita 512-569-6387 (Cell) On Thu, Sep 25, 2014 at 1:34 PM, Denis Heidtmann wrote: > Update: > > I repeated my first method but chose a much simpler launcher to edit. > Now I have something which works satisfactorily from the desktop. The > question remains: how do I get it into the Dash? > -Denis > > On Thu, Sep 25, 2014 at 11:18 AM, Denis Heidtmann > wrote: > > Ubuntu 12.04 does not have a context menu for this. I copied an > > existing one in the Dash, edited it, and got something that works on > > the desktop, but it is filled with stuff the meaning of which I do not > > know, and launches slowly. I copied a very simple desktop > > configuration file from my other system, made two simple edits > > (command and icon), but the system objects--not certified, or > > something like that. > > > > The program I am trying to create a launcher for is the Arduino IDE > > 1.06 (Ubuntu is 3 years behind the times.) The executable is a script > > located in /usr/local/src/arduino-1.0.6/ Can someone explain how > > launchers are created, and how to get them into Dash? (I attempted to > > read a thorough explanation of such files, but it was beyond my pay > > grade.) > > > > Thanks, > > -Denis > ___ > PLUG mailing list > PLUG@lists.pdxlinux.org > http://lists.pdxlinux.org/mailman/listinfo/plug > ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] cross-platform bash vulnerability widespread
These were tested using the env x= command in the Ars article.
OpenSuse 13.1 has been updated. I'm not sure when.
GNU bash, version 4.2.47(1)-release (x86_64-suse-linux-gnu)
OS X 10.9.5 is vulnerable.
GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13)
I run MobaXterm on Windows and it's also vulnerable:
GNU bash, version 4.1.10(3)-release (i686-pc-cygwin)
-- Brian
On Thu, Sep 25, 2014 at 12:35 PM, Fred James
wrote:
> Damo Gets wrote:
> >I would strongly recommend visiting the following link:
> >
> http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-security-hole-on-anything-with-nix-in-it/
> >
> >Long story short, if you can execute this shell command:
> >
> > env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
> >
> > and receive a successful execution (giving you the output:
> > 'vulnerable\nthis is a test', then you are vulnerable to the bash
> > exploit that's just been discovered.
> >
> >I was pretty surprised to realize that even my OpenBSD machine,
> > running bash only from an outside package from the ports collection to
> > keep my luddite users happy was vulnerable to this exploit. It's a
> > pretty serious concern; this is not limited to just Linux. Any *NIX
> > machine is vulnerable. Hell, probably even cygwin. I just tested a
> > hackintosh running OS/X and it's vulnerable there, too. :P
> >
> >Heads up, sys- & net- admins.
> >
> > - -Damo
> >
> Mageia pushed a update for the problem yesterday
>
> $ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
> bash: warning: x: ignoring function definition attempt
> bash: error importing function definition for `x'
> this is a test
> $
> ___
> PLUG mailing list
> PLUG@lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
>
--
"Anyone who has never made a mistake has never tried anything new." -Albert
Einstein
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] cross-platform bash vulnerability widespread
None of yesterday's fixes are complete (but still use yesterday's patch
anyway in the meantime, as it's better than nothing).
bash is STILL vulnerable everywhere, as tracked by this (newer) CVE:
https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169
I'm not currently aware of a patch for the revised issue as of yet. Some
folks I know (my employer, for instance) are responding by completely
disabling function exports completely, which does the job:
https://github.com/akamai/bash/commit/7caac6ee41f645fc21b6e5eddc820151f6e6c43c
Note that (as I discovered) the patch above will successfully apply
INCORRECTLY to some older versions of bash, unless you also specify --fuzz
1 (fuzz 2, the default, lets it apply). In one version of bash
(4.2.something) I patched, the results were BUILDABLE, but completely
wrong. Eyeball it after patching to make sure it only excludes the body of
a single if statement.
Example of the still-existing exploit:
$ env X='() { (a)=>\' sh -c "echo date"; cat echo
(if the file "echo" exists afterwards, it's vulnerable)
Again, as of this time, there is NO released patch for this one yet.
-mjc
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Such a thing as a "single user" Linux?
Dale Snell wrote: > On Thu, 25 Sep 2014 10:34:47 -0500 > Richard Owlett wrote: > >> Rich Shepard wrote: >>> >>> Perhaps because we don't have a clear understanding of your >>> problem we cannot offer a solution. I've not read anything that >>> makes a multiuser linux system/network unsuitable for you. Please >>> clarify if you wish to. >>> >> >> I'll paraphrase some of what was snipped. >> >> The Unix heritage of Linux just "gets in the way". Unix was >> intended to serve a large user base having diverse individual >> needs simultaneously. > > This is what I don't understand. How does the multi-user/ > multi-tasking system that Unix uses get in your way? ... You snipped my answer to that question ;< Are there Red Hat derived Live CDs that I should try? ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] adding desktop config. file in Unity
Update: I repeated my first method but chose a much simpler launcher to edit. Now I have something which works satisfactorily from the desktop. The question remains: how do I get it into the Dash? -Denis On Thu, Sep 25, 2014 at 11:18 AM, Denis Heidtmann wrote: > Ubuntu 12.04 does not have a context menu for this. I copied an > existing one in the Dash, edited it, and got something that works on > the desktop, but it is filled with stuff the meaning of which I do not > know, and launches slowly. I copied a very simple desktop > configuration file from my other system, made two simple edits > (command and icon), but the system objects--not certified, or > something like that. > > The program I am trying to create a launcher for is the Arduino IDE > 1.06 (Ubuntu is 3 years behind the times.) The executable is a script > located in /usr/local/src/arduino-1.0.6/ Can someone explain how > launchers are created, and how to get them into Dash? (I attempted to > read a thorough explanation of such files, but it was beyond my pay > grade.) > > Thanks, > -Denis ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
[PLUG] adding desktop config. file in Unity
Ubuntu 12.04 does not have a context menu for this. I copied an existing one in the Dash, edited it, and got something that works on the desktop, but it is filled with stuff the meaning of which I do not know, and launches slowly. I copied a very simple desktop configuration file from my other system, made two simple edits (command and icon), but the system objects--not certified, or something like that. The program I am trying to create a launcher for is the Arduino IDE 1.06 (Ubuntu is 3 years behind the times.) The executable is a script located in /usr/local/src/arduino-1.0.6/ Can someone explain how launchers are created, and how to get them into Dash? (I attempted to read a thorough explanation of such files, but it was beyond my pay grade.) Thanks, -Denis ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Adding timestamp to log file entry [RESOLVED]
On Thu, 25 Sep 2014, Robert Citek wrote:
> Assuming that is in a bash script, you can do something like this:
>
>echo $(date +%FT%T%:z) ${NEWIP} >> "/home/rshepard/getiplog"
Robert,
Yep, it's a bash script.
> See the man page for date for various formatting strings.
Will do.
Thanks,
Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Adding timestamp to log file entry
Hello Rich,
Assuming that is in a bash script, you can do something like this:
echo $(date +%FT%T%:z) ${NEWIP} >> "/home/rshepard/getiplog"
See the man page for date for various formatting strings.
Regards,
- Robert
On Thu, Sep 25, 2014 at 9:39 AM, Rich Shepard wrote:
>Cron runs a shell script to see if Frontier has changed my IP address. If
> the address has changed the new one is appended to a log file:
>
>echo $NEWIP >> "/home/rshepard/getiplog"
>
>How do I add a timestamp to that file along with the new IP address? Can I
> do something like 'echo $timestamp $NEWIP ...'?
>
> Rich
> ___
> PLUG mailing list
> PLUG@lists.pdxlinux.org
> http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Such a thing as a "single user" Linux?
On Thu, 25 Sep 2014 10:34:47 -0500 Richard Owlett wrote: > Rich Shepard wrote: > > > > Perhaps because we don't have a clear understanding of your > > problem we cannot offer a solution. I've not read anything that > > makes a multiuser linux system/network unsuitable for you. Please > > clarify if you wish to. > > > > I'll paraphrase some of what was snipped. > > The Unix heritage of Linux just "gets in the way". Unix was > intended to serve a large user base having diverse individual > needs simultaneously. This is what I don't understand. How does the multi-user/ multi-tasking system that Unix uses get in your way? If you don't want multiple users, simply never create accounts for them. That's what I do here. If you really want to enforce single-user mode, set your system to boot to that mode. I'm the only one with physical access to my system, unless some rude person breaks into my house, so I don't care. I have no user accounts other than myself. As for running apps from read-only media, set your /etc/fstab to mount /usr as read-only. I don't, because I'd have to remount it read/write whenever I updated my system. (Truly, I _like_ having a multi-tasking system. I can have, say, Firefox and/or Midori running, along with man, to check on documentation, which is usually local. I don't particularly like being on the Web all the time myself. Too darn many web-creatures. :-) [Who will get that reference, we wonders, yes, we wonders.] At the same time, I can be writing in Emacs, crunching the file buffer with Groff, and reading the resulting PDF with xpdf or qtpdfview. Actually, I'm using Emacs to write this, whilst Claws-Mail sits in the background.) Y'know, it occurs to me that what you might want is an Amiga. Lovely systems they were. Single user, multi-tasking. You won't get mine until you pry it out of my cold, dead hands. :-) I fear I can't help you with your Debian questions; I'm a Red Hat kinda guy. Hoping I didn't add too much noise to the conversation. --Dale -- Q: Why did the Klingon color his hair blond? A: Because it was a good day to dye. signature.asc Description: PGP signature ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
[PLUG] Adding timestamp to log file entry
Cron runs a shell script to see if Frontier has changed my IP address. If the address has changed the new one is appended to a log file: echo $NEWIP >> "/home/rshepard/getiplog" How do I add a timestamp to that file along with the new IP address? Can I do something like 'echo $timestamp $NEWIP ...'? Rich ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] cross-platform bash vulnerability widespread
Damo Gets wrote:
>I would strongly recommend visiting the following link:
> http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-security-hole-on-anything-with-nix-in-it/
>
>Long story short, if you can execute this shell command:
>
> env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
>
> and receive a successful execution (giving you the output:
> 'vulnerable\nthis is a test', then you are vulnerable to the bash
> exploit that's just been discovered.
>
>I was pretty surprised to realize that even my OpenBSD machine,
> running bash only from an outside package from the ports collection to
> keep my luddite users happy was vulnerable to this exploit. It's a
> pretty serious concern; this is not limited to just Linux. Any *NIX
> machine is vulnerable. Hell, probably even cygwin. I just tested a
> hackintosh running OS/X and it's vulnerable there, too. :P
>
>Heads up, sys- & net- admins.
>
> - -Damo
>
Mageia pushed a update for the problem yesterday
$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
$
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] cross-platform bash vulnerability widespread
It looks like Ubuntu (and Debian by extension) patched it as well, I ran the
test before and after an apt-get upgrade and got this output:
ronald@paragon:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a
test"
vulnerable
this is a test
ronald@paragon:~$ env x='() { :;}; echo vulnerable' bash -c "echo this is a
test"
bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
this is a test
Pleasantly,
Ronald Bynoe
From: plug-boun...@lists.pdxlinux.org [plug-boun...@lists.pdxlinux.org] on
behalf of Rich Shepard [rshep...@appl-ecosys.com]
Sent: Thursday, September 25, 2014 9:14 AM
To: Portland Linux/Unix Group
Subject: Re: [PLUG] cross-platform bash vulnerability widespread
On Thu, 25 Sep 2014, Damo Gets wrote:
> Long story short, if you can execute this shell command:
Damo,
Slackware's dev team released a patched version yesterday evening. I'm
upgrading all systems here.
Rich
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] cross-platform bash vulnerability widespread
On Thu, 25 Sep 2014, Damo Gets wrote: > Long story short, if you can execute this shell command: Damo, Slackware's dev team released a patched version yesterday evening. I'm upgrading all systems here. Rich ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
[PLUG] cross-platform bash vulnerability widespread
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
I would strongly recommend visiting the following link:
http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-security-hole-on-anything-with-nix-in-it/
Long story short, if you can execute this shell command:
env x='() { :;}; echo vulnerable' bash -c "echo this is a test"
and receive a successful execution (giving you the output:
'vulnerable\nthis is a test', then you are vulnerable to the bash
exploit that's just been discovered.
I was pretty surprised to realize that even my OpenBSD machine,
running bash only from an outside package from the ports collection to
keep my luddite users happy was vulnerable to this exploit. It's a
pretty serious concern; this is not limited to just Linux. Any *NIX
machine is vulnerable. Hell, probably even cygwin. I just tested a
hackintosh running OS/X and it's vulnerable there, too. :P
Heads up, sys- & net- admins.
- --
Opinions expressed are not necessarily those of the owner of this
corporeal, rotting porksuit, nor its fiat-currency waving handlers.
- -Damo
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.13 (OpenBSD)
iF4EAREIAAYFAlQkPXoACgkQerX40lUXtCPsTQEAknjjnyFUfNZd+fmovySWyM9P
Zqr+p4+PNslwX7Dp6YQA/ic3W8JLOapJQvoSyphFFnF04AAzgMnLuKYpGsmduJ7v
=F9TT
-END PGP SIGNATURE-
___
PLUG mailing list
PLUG@lists.pdxlinux.org
http://lists.pdxlinux.org/mailman/listinfo/plug
Re: [PLUG] Such a thing as a "single user" Linux?
Rich Shepard wrote: > > Perhaps because we don't have a clear understanding of your problem we > cannot offer a solution. I've not read anything that makes a multiuser linux > system/network unsuitable for you. Please clarify if you wish to. > I'll paraphrase some of what was snipped. The Unix heritage of Linux just "gets in the way". Unix was intended to serve a large user base having diverse individual needs simultaneously. Paraphrasing Julius Caesar, "All applications perform [system maintenance] XOR [web connection] XOR [computation]". In my case the "X" is enforced by having 3 physically distinct computers. While writing this I saw mention of Knoppix. Reading its site and having learned some of Debian's ins and outs, I believe a remastered version would nicely address all my web related needs. And, due to peculiarities of my environment, it is reasonable and practical to run ALL executables from read only media. That solves most of the problems that others would agree are problems. The majority of the remaining problems might be classed as "philosophy of OS design". Debian automatically pulls in to many do-dads/gizmos/geegaws/etc. The majority of those problems can be addressed by setting --norecomends for apt-get and judicious creation of appropriate meta-packages. I've a project to determine which packages with Priority: important or standard I actually want in a base install. I'll be ordering a collection of Live CDs to see what example(s) I might wish to follow. Suggestions? ___ PLUG mailing list PLUG@lists.pdxlinux.org http://lists.pdxlinux.org/mailman/listinfo/plug
