Re: NETDEV WATCHDOG: internal(r8152): transmit queue 0 timed out
On 16.01.2015 00:38, sean darcy wrote: I've got F20 on an old laptop I'm using as a router. The external interface uses the RJ45 port. The internal uses a USB ethernet adapter. Every 2-3 weeks, the internal USB adapter fails. I can fix it by just moving it to the other USB port. In another 2-3 weeks, it will fail again, and I move it back to the original USB port, and so on. No problems with the external RJ45 interface. The logs aren't very helpful: 12:39:22 kernel: NETDEV WATCHDOG: internal (r8152): transmit queue 0 timed out 12:39:22 kernel: Modules linked in: xt_conntrack xt_nat ipt_MASQUERADE xt_DSCP iptable_mangle iptable_nat nf_conntrack_ipv4 nf_defrag_ipv4 nf_nat_ipv4 iptable_raw sch_pie nf_nat_sip nf_nat nf_conntrack_sip nf_conntrack bnep bluetooth arc4 snd_hda_codec_hdmi snd_hda_codec_realtek b43 bcma snd_hda_codec_generic snd_hda_intel snd_hda_controller mac80211 snd_hda_codec uvcvideo snd_hwdep snd_seq snd_seq_device coretemp sdhci_pci snd_pcm acer_wmi videobuf2_vmalloc cfg80211 sparse_keymap microcode sdhci videobuf2_memops iTCO_wdt videobuf2_core rfkill iTCO_vendor_support v4l2_common tg3 ssb cdc_ether ptp joydev pps_core usbnet videodev media i2c_i801 serio_raw mmc_core irda r8152 lpc_ich shpchp tifm_7xx1 snd_timer snd soundcore mfd_core tifm_core crc_ccitt wmi mii acpi_cpufreq firewire_ohci firewire_core crc_itu_t 12:39:22 kernel: r8152 2-2:1.0 internal: Tx timeout 12:39:23 kernel: r8152 2-2:1.0 internal: Tx timeout 12:39:24 kernel: r8152 2-2:1.0 internal: Tx timeout .. This looks like a USB problem. Is there a way to get usb (or NetworkManager) to reinitialize the driver when this happens? sean I would ask these people for advice, therefore. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: MC Midnight Commander: error opening PDF files refers to Dolphin
On 15-01-15 22:16, poma wrote: On 15.01.2015 14:46, A.J. Bonnema wrote: So I was wondering, could the pdf extention be hidden in a regular expression in such a way that I don't recognize it as being pdf? I have no idea why mc wants to load /usr/bin/dolphin. Kind regards, Guus. Check within the newly created user. In a newly created user, mc works with pdf as expected. It does not try to invoke /usr/bin/dolphin. So, I moved .mc out of the way and viola! ..it still calls /usr/bin/dolphin .. :( This is so weird. Where could the directive to load /usr/bin/dolphin be hidden if not in .mc configuration files? I suspect mc is listening to a different default setting configuration file, but I am running gnome, not kde. Dolphin is the default kde file manager, so I removed .kde, but still the same response. I wonder where mc gets the instruction to load /usr/bin/dolphin when I enter on a pdf file? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: NETDEV WATCHDOG: internal(r8152): transmit queue 0 timed out
On 16.01.2015 10:37, Hayes Wang wrote: poma [mailto:pomidorabelis...@gmail.com] Sent: Friday, January 16, 2015 4:25 PM [...] This looks like a USB problem. Is there a way to get usb (or NetworkManager) to reinitialize the driver when this happens? I would ask these people for advice, therefore. Our hw engineers need to analyse the behavior of the device. However, I don't think you have such instrument to provide the required information. If we don't know the reason, we couldn't give you the proper solution. Besides, your solution would work if and only if reloading the driver is helpful. The issue have to debug from the hardware, and I have no idea about what the software could do before analysing the hw. Maybe you could try the following driver first to check if it is useful. http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=2PNid=13PFid=56Level=5Conn=4DownTypeID=3GetDown=false Best Regards, Hayes Thanks for your response, Mr. Hayes. Mr. Sean, please download and check if timeout is still present with built RTL8153 module from REALTEK site, as Mr. Hayes proposed. http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=2PNid=13PFid=56Level=5Conn=4DownTypeID=3GetDown=false#2 r8152.53-2.03.0.tar.bz2 Procedure - should be equal for both, Fedora 21 20: $ uname -r 3.17.8-300.fc21.x86_64 $ su -c 'yum install kernel-devel' $ tar xf r8152.53-2.03.0.tar.bz2 $ cd r8152-2.03.0/ $ make $ su # cp 50-usb-realtek-net.rules /etc/udev/rules.d/ # udevadm trigger --action=add # modprobe -rv r8152 # cp r8152.ko /lib/modules/$(uname -r)/updates/ # depmod # modprobe -v r8152 poma -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: MC Midnight Commander: error opening PDF files refers to Dolphin
On 16.01.2015 11:58, A.J. Bonnema wrote: On 15-01-15 22:16, poma wrote: On 15.01.2015 14:46, A.J. Bonnema wrote: So I was wondering, could the pdf extention be hidden in a regular expression in such a way that I don't recognize it as being pdf? I have no idea why mc wants to load /usr/bin/dolphin. Kind regards, Guus. Check within the newly created user. In a newly created user, mc works with pdf as expected. It does not try to invoke /usr/bin/dolphin. So, I moved .mc out of the way and viola! ..it still calls /usr/bin/dolphin .. :( This is so weird. Where could the directive to load /usr/bin/dolphin be hidden if not in .mc configuration files? I suspect mc is listening to a different default setting configuration file, but I am running gnome, not kde. Dolphin is the default kde file manager, so I removed .kde, but still the same response. I wonder where mc gets the instruction to load /usr/bin/dolphin when I enter on a pdf file? See if you can find something interesting: $ find ~/.local -name mime* -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Nagios 4?
On 16.01.2015 03:13, Konstantin Svist wrote: How come Fedora repos include Nagios 3.5 and not 4? Version 4 seems to have been released in Oct 2013... Someone needs to build, test and propose to upgrade, with patch if possible, at https://bugzilla.redhat.com. Can you do it? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On Fri, 2015-01-16 at 08:28 +0100, Heinz Diehl wrote: On 16.01.2015, Tim wrote: Of course *you* do not *use* it, it's there as a protective device against *things* on your system. Any recent Linux distribution can be secured without using selinux. Selinux requires at least basic knowledge and administration. Most of the people I installed Linux for didn't even know it was there or what it's good for. You mean like the fuses in your house or the airbag in your car? When Selinux is working you don't know it's there. When it alerts you it means there's something wrong. I agree that the alerts are not always as clear as they might be, but it's a fallacy to suggest that it doesn't provide benefit. poc -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Nagios 4?
On 01/15/2015 08:13 PM, Konstantin Svist wrote: How come Fedora repos include Nagios 3.5 and not 4? Version 4 seems to have been released in Oct 2013... Unfortunately the maintainers for nagios have not submitted a new update. https://bugzilla.redhat.com/show_bug.cgi?id=1005974 Feel free to reach out to a maintainer - there are quite a few. https://admin.fedoraproject.org/pkgdb/package/nagios/ -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: KVM/QEMU remote connection [SOLVED]
On Jan 15, 2015 7:12 PM, Glenn Holmer shad...@lyonlabs.org wrote: On 01/15/2015 07:26 PM, Pete Travis wrote: On Jan 15, 2015 11:49 AM, Glenn Holmer shad...@lyonlabs.org mailto:shad...@lyonlabs.org wrote: On 12/31/2014 03:40 PM, Flavio Leitner wrote: On Wednesday, December 31, 2014 03:21:46 PM Glenn Holmer wrote: On 12/31/2014 02:33 PM, Flavio Leitner wrote: On Wednesday, December 31, 2014 02:11:38 PM Glenn Holmer wrote: I'm trying to connect to another machine using virt-manager (File/Add Connection). I select QEMU/KVM as hypervisor, connect to remote host, method SSH, and a username and hostname on the remote machine. The result is always that I get prompted for my passphrase, but then see authentication failed: no agent is available to authenticate. I get this going from either machine to the other. Virtualization is set up OK because I can run virtual machines on both VM hosts. SSH is set up OK, I can ssh with public key in both directions both as myself and as root. I tried setenforce 0 on both machines to see if SELinux was blocking it, but the result was the same. What am I missing? Do you see the process ssh-agent running? I see this on both machines: /usr/bin/ssh-agent /bin/sh -c exec -l /bin/bash -c /usr/bin/startkde Right, do you see your identity there? $ ssh-add -l If so, is there any chance of you are running the virt-manager out of the established session? I'd start the virt-manager on the same shell running the ssh-add above to confirm. I finally got some more time to work on this. At first, it seemed like a KDE thing, as ssh-add -l didn't show anything when I first logged in. So I added ssh-add to the list of startup programs, and now the KDE version of ssh-askpass prompts me for a password when I log in, and I can ssh to the remote machine without entering a passphrase for the key. But I still get the same error when I try to create a new KVM connection! Anybody have any other ideas? If you are using a regular user, do something like this on the host: https://fedorapeople.org/groups/docs/cookbook/#access-to-libvirt-without-root-privileges Thanks, that solved it. -- Glenn Holmer (Linux registered user #16682) After the vintage season came the aftermath -- and Cenbe. -- Great, glad I could help. BTW, the Cookbook is WIP and not formally published because there isn't a lot of content yet. Contributions welcome :) --Pete -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: MC Midnight Commander: error opening PDF files refers to Dolphin
On 16-01-15 13:32, poma wrote: I wonder where mc gets the instruction to load /usr/bin/dolphin when I enter on a pdf file? See if you can find something interesting: $ find ~/.local -name mime* Well, that got me a file called .local/share/xfce4/helpers/custom-FileManager.desktop that contained the instruction to load /usr/bin/dolphin. So I changed dolphin to nautilus and voila: I got nautilus. When I removed the xfce4 directory from .local/share, the most weird thing happened. Restarting MC I entered on the pdf again, and this time got an XFCE request to choose a default filemanager. Remark that I am working from gnome! Ok, so apparantly MC has a connection to XFCE4 even if it is not running. What does MC want with XFCE configuration? Why does it want to open a filemanager in stead of a pdf reader? I attached the 2 dialogs in screenprint I got from mc. Regards, Guus. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Short, flickering horizontal lines in GTK apps
https://drive.google.com/file/d/0B9ZGcvLVEr8kd0swQmNNc1ZSblE/view?usp=sharing Is anyone else seeing anything like the effect in the linked video? I'm seeing this occasionally since upgrading my ThinkPad T430s with Intel graphics (Core i7-3520M) to Fedora 21. I am running KDE with desktop effects enabled, and thus far I have only seen this in GTK applications (Firefox, Thunderbird, and LibreOffice). -- Ian Pilcher arequip...@gmail.com I grew up before Mark Zuckerberg invented friendship -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: NETDEV WATCHDOG: internal(r8152): transmit queue 0 timed out
On 01/16/2015 07:09 AM, poma wrote: On 16.01.2015 10:37, Hayes Wang wrote: poma [mailto:pomidorabelis...@gmail.com] Sent: Friday, January 16, 2015 4:25 PM [...] This looks like a USB problem. Is there a way to get usb (or NetworkManager) to reinitialize the driver when this happens? I would ask these people for advice, therefore. Our hw engineers need to analyse the behavior of the device. However, I don't think you have such instrument to provide the required information. If we don't know the reason, we couldn't give you the proper solution. Besides, your solution would work if and only if reloading the driver is helpful. The issue have to debug from the hardware, and I have no idea about what the software could do before analysing the hw. Maybe you could try the following driver first to check if it is useful. http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=2PNid=13PFid=56Level=5Conn=4DownTypeID=3GetDown=false Best Regards, Hayes Thanks for your response, Mr. Hayes. Mr. Sean, please download and check if timeout is still present with built RTL8153 module from REALTEK site, as Mr. Hayes proposed. http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=2PNid=13PFid=56Level=5Conn=4DownTypeID=3GetDown=false#2 r8152.53-2.03.0.tar.bz2 Procedure - should be equal for both, Fedora 21 20: $ uname -r 3.17.8-300.fc21.x86_64 $ su -c 'yum install kernel-devel' $ tar xf r8152.53-2.03.0.tar.bz2 $ cd r8152-2.03.0/ $ make $ su # cp 50-usb-realtek-net.rules /etc/udev/rules.d/ # udevadm trigger --action=add # modprobe -rv r8152 # cp r8152.ko /lib/modules/$(uname -r)/updates/ # depmod # modprobe -v r8152 poma OK, will do. In the meantime, here's the kernel log showing the timeout, the removal of the usb ethernet adapter, and it's reinsertion: Jan 15 00:15:18 kernel: r8152 2-1:1.0 internal: Tx timeout Jan 15 00:15:23 kernel: r8152 2-1:1.0 internal: Tx timeout Jan 15 00:15:29 kernel: usb 2-1: USB disconnect, device number 4 Jan 15 00:15:29 kernel: r8152 2-1:1.0 internal: Tx status -108 . Jan 15 00:15:29 kernel: r8152 2-1:1.0 internal: Tx status -108 Jan 15 00:15:29 kernel: r8152 2-1:1.0 internal: Tx status -108 Jan 15 00:15:31 kernel: usb 2-1: new high-speed USB device number 5 using ehci-pci Jan 15 00:15:31 kernel: usb 2-1: New USB device found, idVendor=0bda, idProduct=8152 Jan 15 00:15:31 kernel: usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Jan 15 00:15:31 kernel: usb 2-1: Product: USB 10/100 LAN Jan 15 00:15:31 kernel: usb 2-1: Manufacturer: CE-LINK Jan 15 00:15:31 kernel: usb 2-1: SerialNumber: ... Jan 15 00:15:31 kernel: usb 2-1: reset high-speed USB device number 5 using ehci-pci Jan 15 00:15:31 kernel: r8152 2-1:1.0 eth0: v1.06.1 (2014/10/01) Jan 15 00:15:32 kernel: r8152 2-1:1.0 internal: renamed from eth0 Jan 15 00:15:32 systemd-udevd[12869]: renamed network interface eth0 to internal Jan 15 00:15:32 kernel: IPv6: ADDRCONF(NETDEV_UP): internal: link is not ready Jan 15 00:15:34 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): internal: link becomes ready -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Blocking POODLE
On Fri, Jan 16, 2015 at 3:45 AM, Matthew Saltzman m...@clemson.edu wrote: On Thu, 2015-01-15 at 19:09 +0100, Andre Speelmans wrote: On Thu, Jan 15, 2015 at 3:40 AM, Matthew Saltzman m...@clemson.edu wrote: SSLLabs reports a couple of servers of mine have SSL v3 enabled and are vulnerable to POODLE. I followed instructions for Apache httpd at https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/, but that does not seem to cure the problem. SSLLabs still reports the servers as vulnerable. Does anyone know what I'm missing? Given that you are on the university network, are you sure there is no proxy in between and that SSLLabs is testing the proxy? Good question. One of the servers is actually outside the university firewall, so I *thinK* that's not an issue, at least for that machine. I'm pretty sure that machines on the campus network are behind a network firewall, but not behind a campus proxy. Perhaps a simple way to test it would be to disable TLS in your browser and try connecting to them? As you are inside the campus network, you would probably not hit a proxy and if you only accept SSL and not TLS, the connection should fail. In firefox I would set security.tls.version.min to 10 or so and see what happens. Note: I have not actually tried it, but I think that would do the trick. -- Best regard, André -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Cannot boot laptop due to video driver
On 01/16/2015 01:20 AM, Robin Laing wrote: Hello, I am trying to help my child whom is across the country repair their laptop after installing the wrong video driver. They can boot into emergency mode but not any of the other kernels. During booting into the system, the boot process stops close to the point of starting KDM. We tried the following the guides on the net to remove the bad package and keep getting stuck. Tried to modify grub2 during boot to try booting into single mode and that didn't work or we put the single in the wrong place. A link that I can send them on how to use yum to remove the driver from emergency mode or get into single user mode would be appreciated. Either that or instructions on how to do either. I told them to ask around the computer club as someone there might be able to help them instead of me trying over the phone. Current Fedora documentation for using the rescue mode is very sparse. Tried the procedures on this page with no success. They said that they couldn't get the chroot command to work. They may have typed something wrong because it was very late. Going to deal with it tomorrow (Friday). http://docs.fedoraproject.org/en-US/Fedora/16/html/Installation_Guide/rescuemode_drivers.html I would think a live disk (from any version of Linux) would allow them to access anything on the failed system and modify it. It would help if you have enough information about the computer and its video card to tell them what they need to do, specifically. --doug -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Removing obsolete selinux setup
I have a machine that has dokuwiki loaded. In order to get it to work with selinux, I followed some advice that was on: https://www.dokuwiki.org/install:fedora to allow apache to edit some files: semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki' restorecon -v '/etc/dokuwiki' semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki/users.auth.php' restorecon -v '/etc/dokuwiki/users.auth.php' semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki/local.php' restorecon -v '/etc/dokuwiki/local.php' This worked on 19 and 20, but when I upgraded the machine to Fedora 21 and the httpd_mediawiki_rw_content_t no longer exists. I tried semanage fcontext -d -t httpd_mediawiki_rw_content_t '/etc/dokuwiki' but I get complaints about the media wiki context being invalid. How do I remove these obsolete entries from the selinux database? Pete -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: MC Midnight Commander: error opening PDF files refers to Dolphin
On 16.01.2015 16:57, A.J. Bonnema wrote: On 16-01-15 13:32, poma wrote: I wonder where mc gets the instruction to load /usr/bin/dolphin when I enter on a pdf file? See if you can find something interesting: $ find ~/.local -name mime* Well, that got me a file called .local/share/xfce4/helpers/custom-FileManager.desktop that contained the instruction to load /usr/bin/dolphin. So I changed dolphin to nautilus and voila: I got nautilus. When I removed the xfce4 directory from .local/share, the most weird thing happened. Restarting MC I entered on the pdf again, and this time got an XFCE request to choose a default filemanager. Remark that I am working from gnome! Ok, so apparantly MC has a connection to XFCE4 even if it is not running. What does MC want with XFCE configuration? Why does it want to open a filemanager in stead of a pdf reader? I attached the 2 dialogs in screenprint I got from mc. Regards, Guus. This works for me. $ cp /etc/mc/mc.ext ~/.config/mc/ $ sed -i 's/\/usr\/libexec\/mc\/ext.d\/doc.sh open pdf/\ xpdf ${MC_EXT_FILENAME} \/dev\/null 2\1 \/g' ~/.config/mc/mc.ext $ grep xpdf ~/.config/mc/mc.ext xpdf ${MC_EXT_FILENAME} /dev/null 21 If this doesn't work for you, start over with a clean user environment. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On 01/16/2015 07:47 AM, Patrick O'Callaghan wrote: On Fri, 2015-01-16 at 08:28 +0100, Heinz Diehl wrote: On 16.01.2015, Tim wrote: Of course *you* do not *use* it, it's there as a protective device against *things* on your system. Any recent Linux distribution can be secured without using selinux. Selinux requires at least basic knowledge and administration. Most of the people I installed Linux for didn't even know it was there or what it's good for. You mean like the fuses in your house or the airbag in your car? When Selinux is working you don't know it's there. When it alerts you it means there's something wrong. I agree that the alerts are not always as clear as they might be, but it's a fallacy to suggest that it doesn't provide benefit. poc Here is a case of SELinux protecting your house. http://danwalsh.livejournal.com/71122.html -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Removing obsolete selinux setup
On 01/16/2015 12:19 PM, Pete Stieber wrote: I have a machine that has dokuwiki loaded. In order to get it to work with selinux, I followed some advice that was on: https://www.dokuwiki.org/install:fedora to allow apache to edit some files: semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki' restorecon -v '/etc/dokuwiki' semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki/users.auth.php' restorecon -v '/etc/dokuwiki/users.auth.php' semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki/local.php' restorecon -v '/etc/dokuwiki/local.php' This worked on 19 and 20, but when I upgraded the machine to Fedora 21 and the httpd_mediawiki_rw_content_t no longer exists. I tried semanage fcontext -d -t httpd_mediawiki_rw_content_t '/etc/dokuwiki' but I get complaints about the media wiki context being invalid. How do I remove these obsolete entries from the selinux database? Pete semanage fcontext -d '/etc/dokuwiki/users.auth.php' Although I am surprised they do not work. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On 16.01.2015 19:47, Daniel J Walsh wrote: On 01/16/2015 07:47 AM, Patrick O'Callaghan wrote: On Fri, 2015-01-16 at 08:28 +0100, Heinz Diehl wrote: On 16.01.2015, Tim wrote: Of course *you* do not *use* it, it's there as a protective device against *things* on your system. Any recent Linux distribution can be secured without using selinux. Selinux requires at least basic knowledge and administration. Most of the people I installed Linux for didn't even know it was there or what it's good for. You mean like the fuses in your house or the airbag in your car? When Selinux is working you don't know it's there. When it alerts you it means there's something wrong. I agree that the alerts are not always as clear as they might be, but it's a fallacy to suggest that it doesn't provide benefit. poc Here is a case of SELinux protecting your house. http://danwalsh.livejournal.com/71122.html Not to fall to false sense of security, does SElinux need SElinux? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
X server not starting on boot
My X server is no longer starting at boot time. Plymouth simply stops and X does not start. I use the open source ATI radeon drivers on a fully updated Fedora 21 system. systemctl status kdm.service reports that the X server failed to start: Jan 16 13:16:02 host kdm[1885]: X server for display :0 terminated unexpectedly But /var/log/Xorg.0.log contains absolutely no errors, except that where the following lines would normally be printed: [ 171.281] (II) RADEON(0): EDID vendor NEC, prod id 26260 [ 171.282] (II) RADEON(0): Using EDID range info for horizontal sync [ 171.282] (II) RADEON(0): Using EDID range info for vertical refresh [ 171.282] (II) RADEON(0): Printing DDC gathered Modelines: [ 171.282] (II) RADEON(0): Modeline 1680x1050x0.0 146.25 1680 1960 2136 2240 1050 1053 1059 1089 -hsync +vsync (65.3 kHz eP) ... instead it looks like it just starts shutting down: [24.280] (II) UnloadModule: wacom [24.280] (II) evdev: Eee PC WMI hotkeys: Close [24.280] (II) UnloadModule: evdev ... [ more close / unloads, until log end ] I am able to start X by ssh'ing in to the box (no VTs are available either), and restarting the kdm service manually (sudo systemctl restart kdm), at which point everything works perfectly well. Any ideas what is going on here? Regards, Raman -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On 01/16/2015 01:57 PM, poma wrote: On 16.01.2015 19:47, Daniel J Walsh wrote: On 01/16/2015 07:47 AM, Patrick O'Callaghan wrote: On Fri, 2015-01-16 at 08:28 +0100, Heinz Diehl wrote: On 16.01.2015, Tim wrote: Of course *you* do not *use* it, it's there as a protective device against *things* on your system. Any recent Linux distribution can be secured without using selinux. Selinux requires at least basic knowledge and administration. Most of the people I installed Linux for didn't even know it was there or what it's good for. You mean like the fuses in your house or the airbag in your car? When Selinux is working you don't know it's there. When it alerts you it means there's something wrong. I agree that the alerts are not always as clear as they might be, but it's a fallacy to suggest that it doesn't provide benefit. poc Here is a case of SELinux protecting your house. http://danwalsh.livejournal.com/71122.html Not to fall to false sense of security, does SElinux need SElinux? SELinux is the kernel, so does the Kernel need the kernel. But theoretically SELinux/Kernel can protect itself. We can prevent privileged processes (root) from manipulating the SELinux settings. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Swapping to a large sparse file
Can it be done? So far, swapon says: swapon: /var/swapfile: skipping - it appears to have holes. I was hoping that the kernel's swapper would allow the filesystem to allocate real blocks to the sparse file when they are needed rather than check up front to see if they already exist. Maybe the devs can have a look and see if they can modify the swapper to allow sparse swap files?? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Removing obsolete selinux setup
On 01/16/2015 12:19 PM, PS = Pete Stieber wrote: PS I have a machine that has dokuwiki loaded. PS In order to get it to work with selinux, I PS followed some advice that was on: PS PS https://www.dokuwiki.org/install:fedora PS PS to allow apache to edit some files: PS PS semanage fcontext -a -t httpd_mediawiki_rw_content_t '/etc/dokuwiki' PS restorecon -v '/etc/dokuwiki' PS semanage fcontext -a -t httpd_mediawiki_rw_content_t PS '/etc/dokuwiki/users.auth.php' PS restorecon -v '/etc/dokuwiki/users.auth.php' PS semanage fcontext -a -t httpd_mediawiki_rw_content_t PS '/etc/dokuwiki/local.php' PS restorecon -v '/etc/dokuwiki/local.php' PS PS This worked on 19 and 20, but when I PS upgraded the machine to Fedora 21 the PS httpd_mediawiki_rw_content_t no longer PS exists. I tried PS PS semanage fcontext -d -t httpd_mediawiki_rw_content_t '/etc/dokuwiki' PS PS but I get complaints about the media wiki PS context being invalid. PS PS How do I remove these obsolete entries PS from the selinux database? On 1/16/2015 10:50 AM, DW = Daniel Walsh wrote: DW semanage fcontext -d '/etc/dokuwiki/users.auth.php' DW DW Although I am surprised they do not work. Thanks for the quick reply. Here's the complaints I get when I try... # semanage fcontext -d '/etc/dokuwiki/users.auth.php' libsepol.context_from_record: type httpd_mediawiki_rw_content_t is not defined (No such file or directory). libsepol.context_from_record: could not create context structure (Invalid argument). libsemanage.validate_handler: invalid context system_u:object_r:httpd_mediawiki_rw_content_t:s0 specified for /etc/dokuwiki [all files] (Invalid argument). libsemanage.dbase_llist_iterate: could not iterate over records (Invalid argument). OSError: Invalid argument It seems like I have to temporarily add the obsolete context (httpd_mediawiki_rw_content_t) back so I can continue and I don't know how. Dose that make any sense? Thanks again, Pete -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On 16.01.2015 20:35, Daniel J Walsh wrote: On 01/16/2015 01:57 PM, poma wrote: On 16.01.2015 19:47, Daniel J Walsh wrote: On 01/16/2015 07:47 AM, Patrick O'Callaghan wrote: On Fri, 2015-01-16 at 08:28 +0100, Heinz Diehl wrote: On 16.01.2015, Tim wrote: Of course *you* do not *use* it, it's there as a protective device against *things* on your system. Any recent Linux distribution can be secured without using selinux. Selinux requires at least basic knowledge and administration. Most of the people I installed Linux for didn't even know it was there or what it's good for. You mean like the fuses in your house or the airbag in your car? When Selinux is working you don't know it's there. When it alerts you it means there's something wrong. I agree that the alerts are not always as clear as they might be, but it's a fallacy to suggest that it doesn't provide benefit. poc Here is a case of SELinux protecting your house. http://danwalsh.livejournal.com/71122.html Not to fall to false sense of security, does SElinux need SElinux? SELinux is the kernel, so does the Kernel need the kernel. You've probably wanted to write, SELinux is a Linux(kernel) feature. But in some another context, the kernel needs the kernel, and not only. But theoretically SELinux/Kernel can protect itself. We can prevent privileged processes (root) from manipulating the SELinux settings. Can SELinux, AppArmor and Grsecurity perform together, to achieve an even greater level of security? -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Swapping to a large sparse file
On Fri, Jan 16, 2015 at 1:08 PM, jd1008 jd1...@gmail.com wrote: Can it be done? So far, swapon says: swapon: /var/swapfile: skipping - it appears to have holes. I was hoping that the kernel's swapper would allow the filesystem to allocate real blocks to the sparse file when they are needed rather than check up front to see if they already exist. Maybe the devs can have a look and see if they can modify the swapper to allow sparse swap files?? No the issue is that the swap code doesn't actually write through the file system. Essentially it gets the LBA range of the file from the file system, and then asserts direct control to write to those blocks. And in this case the sparse file has no real blocks so swapon fails. It's similar problem to swapfiles on NFS and Btrfs. There are patches floating around to get this working on NFS that Btrfs was also going to leverage. I don't know the status of that work, it seems a bit stalled to me. You could probably create a sparsefile to back a loop device, and then specify the loop device as swap. But reports are this will be slower than a swapfile. -- Chris Murphy -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Blocking POODLE
On Fri, 2015-01-16 at 17:41 +0100, Andre Speelmans wrote: On Fri, Jan 16, 2015 at 3:45 AM, Matthew Saltzman m...@clemson.edu wrote: On Thu, 2015-01-15 at 19:09 +0100, Andre Speelmans wrote: On Thu, Jan 15, 2015 at 3:40 AM, Matthew Saltzman m...@clemson.edu wrote: SSLLabs reports a couple of servers of mine have SSL v3 enabled and are vulnerable to POODLE. I followed instructions for Apache httpd at https://scotthelme.co.uk/sslv3-goes-to-the-dogs-poodle-kills-off-protocol/, but that does not seem to cure the problem. SSLLabs still reports the servers as vulnerable. Does anyone know what I'm missing? Given that you are on the university network, are you sure there is no proxy in between and that SSLLabs is testing the proxy? Good question. One of the servers is actually outside the university firewall, so I *thinK* that's not an issue, at least for that machine. I'm pretty sure that machines on the campus network are behind a network firewall, but not behind a campus proxy. Perhaps a simple way to test it would be to disable TLS in your browser and try connecting to them? As you are inside the campus network, you would probably not hit a proxy and if you only accept SSL and not TLS, the connection should fail. In firefox I would set security.tls.version.min to 10 or so and see what happens. Note: I have not actually tried it, but I think that would do the trick. Thanks for the suggestion. Changing the min (and fallback-limit, because I didn't know what that did) to 10 does not cause a failure to connect. So either (a) the server change didn't take or (b) the browser change didn't take or (c) I need to do something else in the browser to force SSLv3. Still confused... -- Matthew Saltzman Clemson University Math Sciences mjs AT clemson DOT edu -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Swapping to a large sparse file
On 01/16/2015 01:57 PM, Chris Murphy wrote: On Fri, Jan 16, 2015 at 1:08 PM, jd1008 jd1...@gmail.com wrote: Can it be done? So far, swapon says: swapon: /var/swapfile: skipping - it appears to have holes. I was hoping that the kernel's swapper would allow the filesystem to allocate real blocks to the sparse file when they are needed rather than check up front to see if they already exist. Maybe the devs can have a look and see if they can modify the swapper to allow sparse swap files?? No the issue is that the swap code doesn't actually write through the file system. Essentially it gets the LBA range of the file from the file system, and then asserts direct control to write to those blocks. And in this case the sparse file has no real blocks so swapon fails. It's similar problem to swapfiles on NFS and Btrfs. There are patches floating around to get this working on NFS that Btrfs was also going to leverage. I don't know the status of that work, it seems a bit stalled to me. You could probably create a sparsefile to back a loop device, and then specify the loop device as swap. But reports are this will be slower than a swapfile. Thank you Chris. Yes, it works if I losetup /dev/loop? as the device. Reason I asked, is that I just upgraded my laptop to 8GB ram and I really do not want to have to repartition the drive to have a larger swap space and restore everything from backup. In older traditional practices, swap space was normally about twice the ram size. Today, with some systems having 64 and even 128GB and even larger RAM, it becomes interesting how big swap space should be. Where is the cutoff for performance? Paging in and out 128GB memory space could prove to be itself a performance bottleneck on very busy or memory bound servers. Cheers, JD -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Swapping to a large sparse file
On Fri, 2015-01-16 at 13:08 -0700, jd1008 wrote: Can it be done? So far, swapon says: swapon: /var/swapfile: skipping - it appears to have holes. ... Maybe the devs can have a look and see if they can modify the swapper to allow sparse swap files?? There is a reason why it acts like it does. The system would panic if it tried and failed to allocate blocks when it needed them and the drive was full. The whole point is that swap is treated 'like ram, only slower' and thus it is not prepared for it to be in a 'quantum' state until the moment of actual use. signature.asc Description: This is a digitally signed message part -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Adding shortcut to desktop
Hi, I have a fedora21 desktop that I'm building for my father-in-law and have installed gnome-tweak-tool to enable icons on the desktop. Now, I'd like to add an icon on the desktop to automatically start a qemu instance of windows7. I'd even settle for an icon that opens virt-manager in such a way as to be able to start the instance. How about adding it to the menu that appears when you move the mouse all the way to the left? I found this link at gnome.org but I can't believe that it's still this hard for an end-user (my father-in-law) to add links to his own programs? https://developer.gnome.org/integration-guide/stable/desktop-files.html.en Maybe there's a desktop that isn't so deficient? Any ideas greatly appreciated. Thanks, Alex -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Adding shortcut to desktop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am 17.01.2015 um 00:35 schrieb Alex Regan: Hi, I have a fedora21 desktop that I'm building for my father-in-law and have installed gnome-tweak-tool to enable icons on the desktop. Now, I'd like to add an icon on the desktop to automatically start a qemu instance of windows7. I'd even settle for an icon that opens virt-manager in such a way as to be able to start the instance. How about adding it to the menu that appears when you move the mouse all the way to the left? I found this link at gnome.org but I can't believe that it's still this hard for an end-user (my father-in-law) to add links to his own programs? https://developer.gnome.org/integration-guide/stable/desktop-files.html.en Sorry that I can't help you with this particular problem. (I'm using XFCE/dwm) But maybe you could use the gnome-fallback mode. Maybe there's a desktop that isn't so deficient? Or maybe you want to try another desktop environment like Mate or Cinnamon. They look quite like Windows and I think your father-in-law can work with them without any big help from you. XFCE could also be a choice. Adding shortcuts to the desktop is quite easy. - --Erik -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQIcBAEBAgAGBQJUuaPVAAoJEG+l8sBmqru1uxQP/0aaH6pT8YjWdvess8clIett i9OpXVytsaaZUVwz0RG2mqO9OowIcDUWgoLiMD4cDSk2iAQ871KNnAD+A45xBlkn OU4ewFZ/eiQsKegAPfOUGeA6tvnV+hrOrijFc87mEJoBDdUJ/135yiQrCkvhX311 UGit5NNSnb1cQKuE+So274yUyEjraPHEdG/XbnRuATzv5TVQi1J//Lzp8Eofl2U8 ZW4O92qio+2xzavFPhW5SPbWhgxKhYa8va3wd3r0ln0roXKrZ+cI4xTz8SQHH3jL zbOJYxPqek2MY9W54JE0mmAK1b6/8uLmF1ogA+9fwe9mxwj+/cDU+LXEafLJS3AN 30S226Te9o7/bvSR101HKlnQr4c6kYm8xfOFsK5noRFxfgndJggvHVIDBidKjd0H lZk21fIzg7X/GPCjjY1hamzhH75xV6jFT/TrnrRbWemGbiPXLVprp0lUCWiaco9L XX9u1Nu54W8AMkY7ujrVSZdrT0yHat+dqrrLSYQEN+prCRJnBxZRY4rqOeX/jwdW GlIMl+yCh1BsKlWxzHb0vzGxD3H0C9lojyWStzPKBebXFi7LnTXiDA6huiBiUfgc jTW1gU5LDk8IcGkuPyERkChNkxb6Xu1xU/fpYM4ykWJJfI2nTZzLdUbosU8DHLzF lbdK3tuRAMte/TV38g8j =D7N5 -END PGP SIGNATURE- -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: NETDEV WATCHDOG: internal(r8152): transmit queue 0 timed out
On 01/16/2015 07:09 AM, poma wrote: On 16.01.2015 10:37, Hayes Wang wrote: poma [mailto:pomidorabelis...@gmail.com] Sent: Friday, January 16, 2015 4:25 PM [...] This looks like a USB problem. Is there a way to get usb (or NetworkManager) to reinitialize the driver when this happens? I would ask these people for advice, therefore. Our hw engineers need to analyse the behavior of the device. However, I don't think you have such instrument to provide the required information. If we don't know the reason, we couldn't give you the proper solution. Besides, your solution would work if and only if reloading the driver is helpful. The issue have to debug from the hardware, and I have no idea about what the software could do before analysing the hw. Maybe you could try the following driver first to check if it is useful. http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=2PNid=13PFid=56Level=5Conn=4DownTypeID=3GetDown=false Best Regards, Hayes Thanks for your response, Mr. Hayes. Mr. Sean, please download and check if timeout is still present with built RTL8153 module from REALTEK site, as Mr. Hayes proposed. http://www.realtek.com.tw/downloads/downloadsView.aspx?Langid=2PNid=13PFid=56Level=5Conn=4DownTypeID=3GetDown=false#2 r8152.53-2.03.0.tar.bz2 Procedure - should be equal for both, Fedora 21 20: $ uname -r 3.17.8-300.fc21.x86_64 $ su -c 'yum install kernel-devel' $ tar xf r8152.53-2.03.0.tar.bz2 $ cd r8152-2.03.0/ $ make $ su # cp 50-usb-realtek-net.rules /etc/udev/rules.d/ # udevadm trigger --action=add # modprobe -rv r8152 # cp r8152.ko /lib/modules/$(uname -r)/updates/ # depmod # modprobe -v r8152 poma OK. Did all that. Now to see if I get the same problem over the next couple of weeks. I'd never heard about the updates subfolder in modules. Very slick. But when I update the kernel, I get to do this again correct? How will I know that this module has been incorporated in the running kernel. modinfo doesn't give any version info. BTW, I'm not sure what modprobe --dump-modversions is supposed to do, but it doesn't: #modprobe --dump-modversions r8152 modprobe: FATAL: Module r8152 not found. # modprobe --dump-modversions r8152.ko modprobe: FATAL: Module r8152.ko not found. #lsmod | grep 8152 r8152 49646 0 Thanks for all your help. sean -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On 01/15/2015 11:28 PM, Heinz Diehl wrote: Selinux requires at least basic knowledge and administration. Most of the people I installed Linux for didn't even know it was there or what it's good for. If you do not use file system permissions for something useful, chmod -R a+w / File system permissions require at least basic knowledge and administration. Most of the people I installed Linux for don't even know what they're good for. If your computer is single-user anyway, why does it need a security subsystem? *eyeroll* -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: MC Midnight Commander: error opening PDF files refers to Dolphin
On 16-01-15 19:44, poma wrote: This works for me. $ cp /etc/mc/mc.ext ~/.config/mc/ $ sed -i 's/\/usr\/libexec\/mc\/ext.d\/doc.sh open pdf/\ xpdf ${MC_EXT_FILENAME} \/dev\/null 2\1 \/g' ~/.config/mc/mc.ext $ grep xpdf ~/.config/mc/mc.ext xpdf ${MC_EXT_FILENAME} /dev/null 21 If this doesn't work for you, start over with a clean user environment. Hey Poma, Thanks. That did it. Although I just inserted it by hand without sed. Now I changed it to okular cause that is what I normally work with. Still weird that only this user has this problem. Anyway, thanks for pointing the way. Kind regards, Guus. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Swapping to a large sparse file
On Fri, 2015-01-16 at 14:26 -0700, jd1008 wrote: In older traditional practices, swap space was normally about twice the ram size. Today, with some systems having 64 and even 128GB and even larger RAM, it becomes interesting how big swap space should be. Where is the cutoff for performance? Paging in and out 128GB memory space could prove to be itself a performance bottleneck on very busy or memory bound servers. My advice is don't bother unless you know you need it. I find 512MB or 1GB to be plenty of swap. You need some swap just so the system can ditch memory that was used once to initialize code but isn't accessed again and other similar things that can be safely tossed to swap and forgot about. But if the system is actually swapping hundreds of megabytes in and out you will quickly be in a world of pain. Plus most of the time when that sort of memory pressure hits it is a runaway process that the OOM killer will eventually take out and having a lot of swap only increases how long you suffer with an almost totally unresponsive machine until that happens. If you are swapping and it isn't a runaway process or an exception to process a one off huge dataset it is a sign you need to bite the bullet and get more ram. If you know you are going to need a lot of swap to get through some script you banged out that allocates memory like mad, just add an extra swapfile on a temporary basis and drop it when you are done. You are allowed to have multiple swap files, partitions or any combination of them within sensible limits. signature.asc Description: This is a digitally signed message part -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Swapping to a large sparse file
On 01/16/2015 07:11 PM, John Morris wrote: On Fri, 2015-01-16 at 14:26 -0700, jd1008 wrote: In older traditional practices, swap space was normally about twice the ram size. Today, with some systems having 64 and even 128GB and even larger RAM, it becomes interesting how big swap space should be. Where is the cutoff for performance? Paging in and out 128GB memory space could prove to be itself a performance bottleneck on very busy or memory bound servers. My advice is don't bother unless you know you need it. I find 512MB or 1GB to be plenty of swap. You need some swap just so the system can ditch memory that was used once to initialize code but isn't accessed again and other similar things that can be safely tossed to swap and forgot about. But if the system is actually swapping hundreds of megabytes in and out you will quickly be in a world of pain. Plus most of the time when that sort of memory pressure hits it is a runaway process that the OOM killer will eventually take out and having a lot of swap only increases how long you suffer with an almost totally unresponsive machine until that happens. If you are swapping and it isn't a runaway process or an exception to process a one off huge dataset it is a sign you need to bite the bullet and get more ram. If you know you are going to need a lot of swap to get through some script you banged out that allocates memory like mad, just add an extra swapfile on a temporary basis and drop it when you are done. You are allowed to have multiple swap files, partitions or any combination of them within sensible limits. Well, I need at least 8GB of swap if I want to hibernate, and often I need to hibernate so I can let an important app continue where it left off (apps that do not depend on an internet continuous connection) . -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On Fri, 2015-01-16 at 16:31 -0800, Gordon Messmer wrote: If your computer is single-user anyway, why does it need a security subsystem? *eyeroll* That actually isn't as crazy as you seem to think. Security should always be seen as tradeoff between the cost of the security vs the potential loss and the odds of a breech. Seen in that light simply disabling permissions could indeed be justified under some conditions. But there are some important differences between SELinux and the UNIX model, 1. You can teach a total newb (assuming IQ over room temp) the basics of the UNIX permissions system in under an hour and every admin is expected to know pretty much all details of it. Nobody understands SELinux beyond a few developers at RedHat and the NSA. Even after reading the O'Reilly book since it is already obsolete. Contrast to the UNIX model that hasn't changed in longer than the median age of the typical Linux user and has extensive documentation that is accurate. 2. The UNIX security model is integral to UNIX and Linux. SELinux exists almost entirely outside the normal filesystems and toolset. Normal tools rarely preserve SELInux attributes when taking backups or transferring files between machines. RPM only partially understands it after it being a standard feature for a decade. 3. Any machine configured even slightly differently than the RH devels expected -WILL- break SELinux. Or I have just been very very unlucky on multiple occasions. Unless one is, or has access to, one of the extremely limited number of SELinux experts the best solution is to simply disable it when it breaks. Doubly so if the machine in question isn't a server. 4. Consider the points above and realize SELinux has been a mandatory at install time feature on Fedora even longer than PulseAudio, and neither are even close to being reliable... yet were pushed into production and removal apparently isn't a topic for civilized discussion. At what point is it legitimate to question the wisdom of this? signature.asc Description: This is a digitally signed message part -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: C/C++ Compiler Invalidly Turning Warnings into Errors? - Realtek RTL8811AU USB WiFi
On 01/16/2015 08:38 AM, Stephen Morris wrote: On 01/15/2015 11:46 PM, poma wrote: On 15.01.2015 08:50, Stephen Morris wrote: I have a driver for a wifi usb device that I need to compile because there are no drivers in the kernel, which has been obtained from the vendor of the device. When I attempt to compile the code the compile fails on the grounds that some warnings are being translated into errors. From my perspective these errors should not be happening because, when a debugging module wants to time stamp the build, that is not an error and is perfectly acceptable. How do I get the compiler to stop producing these errors. The messages I get are listed below. Authentication requested [root] for make driver: make ARCH=x86_64 CROSS_COMPILE= -C /lib/modules/3.17.8-300.fc21.x86_64/build M=/usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411 modules make[1]: Entering directory '/usr/src/kernels/3.17.8-300.fc21.x86_64' CC [M] /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_cmd.o CC [M] /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_security.o CC [M] /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.o /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c: In function ‘dump_drv_version’: /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c:66:64: error: macro __DATE__ might prevent reproducible builds [-Werror=date-time] DBG_871X_SEL_NL(sel, build time: %s %s\n, __DATE__, __TIME__); ^ /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c:66:1: error: macro __TIME__ might prevent reproducible builds [-Werror=date-time] DBG_871X_SEL_NL(sel, build time: %s %s\n, __DATE__, __TIME__); ^ /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c:66:1: error: macro __DATE__ might prevent reproducible builds [-Werror=date-time] /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c:66:1: error: macro __TIME__ might prevent reproducible builds [-Werror=date-time] /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c:66:1: error: macro __DATE__ might prevent reproducible builds [-Werror=date-time] /usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.c:66:1: error: macro __TIME__ might prevent reproducible builds [-Werror=date-time] cc1: some warnings being treated as errors scripts/Makefile.build:257: recipe for target '/usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.o' failed make[2]: *** [/usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411/core/rtw_debug.o] Error 1 Makefile:1377: recipe for target '_module_/usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411' failed make[1]: *** [_module_/usr/local/downloads/dlink/RTL8812AU_linux_v4.3.2_11100.20140411/driver/rtl8812AU_linux_v4.3.2_11100.20140411] Error 2 make[1]: Leaving directory '/usr/src/kernels/3.17.8-300.fc21.x86_64' Makefile:1350: recipe for target 'modules' failed make: *** [modules] Error 2 ## Compile make driver error: 2 Please check error Mesg ## $ sed -i '/uninitialized/ i\EXTRA_CFLAGS += -Wno-error=date-time' Makefile If it crashes, try your luck with these: $ git clone https://github.com/gnab/rtl8812au.git $ cd rtl8812au/ ... $ git clone https://github.com/abperiasamy/rtl8812AU_8821AU_linux.git $ cd rtl8812AU_8821AU_linux/ ... $ make $ su # cp 8812au.ko /lib/modules/$(uname -r)/updates/ # depmod # modprobe -v 8812au Thanks poma, I'll check these out. The git source might be better than what I have at the moment as the vendor source I have seems to be requiring kernel config parameters that appear to not be active in the kernels I am using. I've compiled the code and after copying the compiled module and running the modprobe the device immediately connected. I'll run a few more tests and try a reboot to see if it still works successfully. I am assuming that I will need to perform all these steps everytime the kernel is upgraded, would that be correct? attachment: samorris.vcf-- users mailing list
Issue with reinstall live image to same disk
Installed Fedora 21 live image to disk. Now we want to reinstall to the same disk but it does not show up in the storage selection. Wiped partitions with fdisk hoping that would make it work. Next cat'd file to raw device to wipe or corrupt the MBR. Still no joy. How in H do you get the live image installer to find the disk you want to install to? Bye the way this is not a new issue as we have run into this problem in the past but never found a solution to it. We always had to go to another install method which is very painful and time consuming. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Cannot boot laptop due to video driver
On 2015-01-16 10:07, Doug wrote: On 01/16/2015 01:20 AM, Robin Laing wrote: Hello, I am trying to help my child whom is across the country repair their laptop after installing the wrong video driver. They can boot into emergency mode but not any of the other kernels. During booting into the system, the boot process stops close to the point of starting KDM. We tried the following the guides on the net to remove the bad package and keep getting stuck. Tried to modify grub2 during boot to try booting into single mode and that didn't work or we put the single in the wrong place. A link that I can send them on how to use yum to remove the driver from emergency mode or get into single user mode would be appreciated. Either that or instructions on how to do either. I told them to ask around the computer club as someone there might be able to help them instead of me trying over the phone. Current Fedora documentation for using the rescue mode is very sparse. Tried the procedures on this page with no success. They said that they couldn't get the chroot command to work. They may have typed something wrong because it was very late. Going to deal with it tomorrow (Friday). http://docs.fedoraproject.org/en-US/Fedora/16/html/Installation_Guide/rescuemode_drivers.html I would think a live disk (from any version of Linux) would allow them to access anything on the failed system and modify it. It would help if you have enough information about the computer and its video card to tell them what they need to do, specifically. --doug I agree that a live disk/usb would be the tool but that is hard to get at the wee hours of the morning and no other computer in use. I did get it fixed. Thanks for the comments. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Issue with reinstall live image to same disk
David Highley wrote: Installed Fedora 21 live image to disk. Now we want to reinstall to the same disk but it does not show up in the storage selection. Wiped partitions with fdisk hoping that would make it work. Next cat'd file to raw device to wipe or corrupt the MBR. Still no joy. How in H do you get the live image installer to find the disk you want to install to? Bye the way this is not a new issue as we have run into this problem in the past but never found a solution to it. We always had to go to another install method which is very painful and time consuming. Figured it out. There was a command wipefs we did not know about which got us part way there, but not quite all the way. After doing a wipefs -af, forced all the device would show up in the selection and we could configure partitioning but then the install would crash. The device is raid 1 SSD and the raid was corrupted by the wipe so we had to use the bios raid utility to delete and recreate the raid. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: Cannot boot laptop due to video driver
On 2015-01-16 00:55, poma wrote: On 16.01.2015 07:20, Robin Laing wrote: Hello, I am trying to help my child whom is across the country repair their laptop after installing the wrong video driver. They can boot into emergency mode but not any of the other kernels. During booting into the system, the boot process stops close to the point of starting KDM. It is *boot*-ing OK, only the *init*-ialization of the userspace service - in your case display/login manager(KDM), doesn't work. KDM depends on the X server, which in turn depends on functional X video module *and* kernel video module. You should deal with modules within 'multi-user.target'. i.e. non-graphical user environment and shouldn't touch the configuration of the boot loader, at all. It was the wee hours of the morning for my child and I am not that familiar with the new systemd commands and couldn't figure out how to get into a single or multi-user with no X. The boot process didn't leave things at a terminal window or allow ctrl+alt+F{x} to work. Basically it was reboot to do anything. Emergency mode didn't work as per the documentation with chroot and being so late, it was easier to take sometime to read up on it. The laptop wasn't needed until Saturday. Some searching later and found that I was close last night, just didn't know the correct services command to run. I think this would be beneficial in the Fedora documentation and I am willing to write it for addition. What we ended up doing. 1. On boot, we paused grub and in the edit mode added single to the end of the vmlinuz line. linux/vmlinuz-3.17.7-300 ... single 2. Once booted into emergency mode, entered the root password. 3. Started Network Manager with systemctl start NetworkManager.service This started the network but it wasn't working wireless or wired. The only wired connection was for a different network with a static IP and different gateway IP. 4. Listed the connections nmcli connection show 5. Created a new network connection with nmcli connection edit con-name name of new connection where the ethernet port was used and ipv4 selected. Saved on quit. 6. Restarted Network Manager (not sure if this step was needed or not) systemctl restart NetworkManager.service 7. On restart, Network Manager selected the wrong connection again. Started the correct one. nmcli connection down id wrong connection name nmcli connection up id new connection name 8. Tested network connections to see if DHCP had worked and it did. We used ping tests to 8.8.8.8 (Google public name server) and ping Google.ca for a DNS test. 9. Use RPM to find the problem driver. rpm -qa | grep nvidia 10. Used yum to erase the problem driver yum erase problem driver 11. Rebooted shutdown -r now And all is well on the reboot. I have to find time to learn systemd better. Hope this helps someone else. Robin -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Fedora-21 vs NFS
I have just upgraded amito, the client from Fedora-20 to Fedora-21. The server, weather, is still running Fedora-20. After the upgrade, an attempt by amito to nfs mount a filesystem on weather fails with an access denial by by weather. Before the upgrade, everything worked fine. It looks like the mount should succeed, since showmount indicates that the export from weather is OK. Nevertheless it fails. How can I debug this? I'm pretty much an NFS newbie. Here is the relevant info: [root@amito jonrysh]# cat /etc/fstab # # /etc/fstab # Created by anaconda on Sun Jan 4 19:54:47 2015 # # Accessible filesystems, by reference, are maintained under '/dev/disk' # See man pages fstab(5), findfs(8), mount(8) and/or blkid(8) for more info # /dev/mapper/fedora00-root / ext4 defaults1 1 UUID=7e3eb9f4-44eb-4120-8593-5570190feded /boot ext4 defaults1 2 /dev/mapper/fedora00-home /home ext4 defaults1 2 /dev/mapper/fedora00-Windows /srv/c vfat shortname=winnt 0 0 /dev/mapper/fedora00-swap swapswap defaults0 0 # NFS Mounts weather:/ /srv/weathernfs4 users,defaults 0 0 weather:/var /srv/weather/varnfs4 users,defaults 0 0 [root@amito jonrysh]# ls -l /srv total 36 drwxr-xr-x. 11 root root 32768 Dec 31 1969 c drwxr-xr-x. 2 root root 4096 Jan 16 22:01 weather [root@amito jonrysh]# showmount -e weather Export list for weather: /home amito.gateway.2wire.net / amito.gateway.2wire.net [root@amito jonrysh]# mount /srv/weather mount.nfs4: access denied by server while mounting weather:/ -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
Re: swapping
On Fri, 2015-01-16 at 08:28 +0100, Heinz Diehl wrote: Selinux requires at least basic knowledge and administration. I can't agree with that. In general, it requires none. The average user doesn't have to do anything, it just does what it's supposed to do. They're not likely to even know it's there until a warning pops up about something, which shouldn't happen unless there's a fault, or the user is doing something they shouldn't do. In which case, the right answer is sort out what's going wrong, not shoot the messenger. -- tim@localhost ~]$ uname -rsvp Linux 3.17.8-200.fc20.i686 #1 SMP Fri Jan 9 00:01:03 UTC 2015 i686 All mail to my mailbox is automatically deleted, there is no point trying to privately email me, I will only read messages posted to the public lists. George Orwell's '1984' was supposed to be a warning against tyranny, not a set of instructions for supposedly democratic governments. -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
[SOLVED] Re: X server not starting on boot
On 01/16/2015 02:18 PM, Raman Gupta wrote: My X server is no longer starting at boot time. Plymouth simply stops and X does not start. I use the open source ATI radeon drivers on a fully updated Fedora 21 system. systemctl status kdm.service reports that the X server failed to start: Jan 16 13:16:02 host kdm[1885]: X server for display :0 terminated unexpectedly But /var/log/Xorg.0.log contains absolutely no errors [...] Switching to sddm as display manager rather than kdm, which is the default in Fedora 21 for KDE, solves the problem. I don't know why. Regards, Raman -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
[F21] NetworkManager won't connect
Hello, I have connectivity problem since the last two updates of NM. Specifically, when I boot the system and I log in in the graphical environment (XFCE in my case), the NM applet continuesly animates, trying to connect to my network. I can wait any time (actually I've tried for a max waiting time of 10 minutes), but NM seems to have trouble to connect. In order to connect I have to: 1. Right-click on the NM applet and deselect Enable Networking. The applet stops animating 2. Again, right-click on the NM applet and re-select Enable Networking. Now, NM successfully connects to the network. Am I alone to experience such problem? The NM version is 0.9.10.1-1.2.20150109git for Fedora 21 x86_64 Cheers, -- Marco -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org