MUA that
mishandles that is broken in this regard.
Reco
ould be better?
> ...t# Too much trouble
> t # Authoritative, but not self-important
> [t] # A stamp of approval, like a chop
But this - this is an abomination:
> 't # LISP is back
It's not a LISP unless it features round braces!
( Reco )
, or are
behind NAT is not relevant.
Reco
On Sat, Aug 01, 2020 at 03:34:27PM +0300, Reco wrote:
> On Fri, Jul 31, 2020 at 11:03:07PM -0300, riveravaldez wrote:
> > If there's any other simpler way (that doesn't imply the use of any
> > third party) please let me know, I could use anything that works.
>
&g
quot;tty" attribute does not match /dev/tty*, be it ssh,
screen, tmux, and (possibly) X/Wayland sessions.
Worked for me in the case of real servers, just in case.
Reco
Hi.
On Tue, Aug 04, 2020 at 04:20:58PM -0400, Dan Ritter wrote:
> Reco wrote:
> > On Tue, Aug 04, 2020 at 09:47:24AM +0200, Marco M?ller wrote:
> > > Is it possible (how?) to restrict a user to only be allowed to make use
> > > of its sudo usage permission
setting of the system?
>
>
> After install you have a powerful L3 firewall system
A small nitpick - netfilter is L4, not L3, although it can be used as
such. netfilter is more than capable of matching IP-based transport
level protocols and their properties.
Reco
.
Will parsing [1] do, for instance searching kernel-image?
Reco
[1]
http://ftp.debian.org/debian/dists/stable/main/installer-amd64/current/images/udeb.list
ss to the IBM
> paywall.
But some of us do. So, for the archives:
1) An error should be like this:
sd xx:0:x:0: [sdx] tag#0 Add. Sense: Logical block guard check failed
2) A firmware update to version 16.00.11.00 or later should fix it.
3) mpt3sas.prot_mask=128 *could* workaround it.
Reco
et 10.0.2.15/24 brd 10.0.2.255 scope global dynamic eth0...
...
# ifup --force eth0
Internet Systems Consortium DHCP Client 4.4.1 ...
Basically, by sending SIGKILL to dhclient you leave your current
interface configuration as is, and by running dhclient again (via ifup
in this case) you apply your dhclient.conf changes.
Reco
it's got to be stored somewhere.
Works for me in stable:
grep hwaddr /var/lib/lxc/*/config
Reco
d the importance of backups, tend to forget about
doing backups, and worse - tend to destroy a perfectly valid backup just
before it's actually needed.
Would not it be better to do a backup of users' files in a centralized
way on an admin (i.e. - you) controlled schedule?
A question two - "apt search backup" shows me at least half-dozen ready
to use (and free software) backup solution. Why bother implementing your
own?
Reco
rdware capabilities of
> a particular machine?
If you mean, "how do I check if my Intel/AMD CPU has that 64-bit
capability", then it's:
lscpu | grep -w lm
Otherwise your question is too broad.
Reco
t 64-bit
> > capability", then it's:
> >
> > lscpu | grep -w lm
>
> Will have to look up what each of the flags mean. That accomplish much
> of what I wanted to accomplish what a "reading list" would have.
lm means "Long Mode", i
ualbox.
In this context,
VDI is read-write.
ISO is read-only.
> Which one should I use? Which one and why has more advantages?
Whichever works, obviously. Unless you see a visible difference, choose
the one with lesser size.
Reco
ws about places from I can take
> drivers
> for these ( lsi53c810 , lsi53c895a) controllers for windows NT 4 and
> windows 2000?
Ask this guy - [2], seriously. He's *the* digital archeologist and a
Windows enthusiast at the same time.
Reco
[1] git://git.qemu.org/qemu.git
[2] https://virtuallyfun.com
xactly what's stated above, no more and no less.
Here, at this list, people are rarely using QEMU directly, without the
kludges like libvirt. The reason being - one of the few mature programs
to deal with QEMU is called virt-manager, and it's built on top of
libvirt. So, unless specified otherwise, here QEMU = libvirt, and
restrictions of the latter apply to the former.
Reco
act is low,
so it's hardly a surprise it is not fixed yet.
Reco
[1] https://security-tracker.debian.org/tracker/source-package/evolution
ne that.
But no package is bug-free, and ConsoleKit was not the best package in
this regard.
So, removing offending lines from the PAM configuration is the best
course of action.
Reco
[1] https://tracker.debian.org/pkg/consolekit
and create a replacement package
for libpam-systemd, both udisks2 or policykit - you'll just break those
and leave yourself with non-mounting storage media and without the
ability to suspend and poweroff.
Reco
md dependency. And systemd gets reinstalled.
apt install something systemd-
Works wonders in cases such as this.
Reco
On Wed, Sep 16, 2020 at 03:41:41PM -0400, Dan Ritter wrote:
> Reco wrote:
> > > To make a long story short, after two or so weeks of research and
> > > numerous failed trials, I came to the conclusion that systemd has
> > > become too entrenched in the dependency
down and up with 'ifdown
> eno1;ifup eno1' and see if it still have an IP.
It won't do anything since now /etc/network/interfaces does not contain an
IP for eno1.
What's actually needed is
ip addr del dev eno1 2.4.6.8/27
Similar thing needs to be done for the routing table.
Reco
r .linphone-friends.db, execute:
select * from friends;
Reco
is hanging on processing a
certain SCSI command. Could be the drive itself, its firmware, or (as
other helpfully suggested) - the SATA cable,
To answer your question - Linux can handle bad sectors just fine. It's
the failing hardware (especially consumer-quality failing hardware) that
it has difficulties with.
Reco
thing out into the nearest
garbage bin, and buy a real drive (WD or Toshiba).
Reco
[1] https://www.kernel.org/doc/htmldocs/libata/ataExceptions.html
ter idea. Does the student in question even connects to the server?
tcpdump -pni any tcp port 22
Should answer this.
BTW, is the server in question public? I.e. can any of the list members
connect to it and find out for themselves that's a good fingerprint
looks like?
Reco
one.
Last one. tcpdump. It's kind of obvious that there will be inbound
traffic on tcp:22 to your server, and that's expected, and there's
nothing to see there. But, what you would see (or the output would be
lacking it) is the problematic student IP. That's what interesting here.
For obvious reasons, it requires a knowledge of the student's IP.
Reco
port on a
> > motherboard.
>
> Without specialized test equipment, about all I can do is buy surplus
> hardware and apply a process of elimination.
I'd do the same, starting with SATA cable (the cheapest part of the
equation).
Reco
one.
>
> How do I get the deb files in order to install locally (via dpkg
> --install) the necessary utilities to run CRC32 and/or CRC64
Typical Debian install has perl already, so you don't have to install
anything - [1].
Reco
[1] http://billauer.co.il/blog/2011/05/perl-crc32-crc-xs-module/
= SmtpPort;
}
}
And getservbyname(3) will return port 25 for smtp, because it's the port
designated for smtp in /etc/services.
Of course, they *could* use "submission" (which is tcp:587) at that code
instead of "smtp", but they did not.
Reco
Hi.
On Tue, Sep 29, 2020 at 03:50:35PM +0200, Albretch Mueller wrote:
> On 9/24/20, Reco wrote:
> > On Thu, Sep 24, 2020 at 05:50:16PM +0200, Albretch Mueller wrote:
> >> >> How do I get all packages to be locally installed using dpkg from a
> &
s not use this module.
See /etc/pam.d/login and /etc/pam.d/sshd.
Reco
Hi.
On Thu, Oct 08, 2020 at 12:03:55PM -0700, Peter Ehlert wrote:
> Q: is there a reason to avoid it?
That "Electron" word might have something to do with it - [1]:
KopiaUI is built using Electron and packaged as native binary using
Electron Builder.
Reco
[1] https://git
Hi.
On Thu, Oct 15, 2020 at 12:26:52PM -0400, Gene Heskett wrote:
> But I've not been able to click on an "https" link and have it work.
Please provide an exact error message. Show, do not tell.
Reco
On Thu, Oct 15, 2020 at 12:49:01PM -0400, Gene Heskett wrote:
> On Thursday 15 October 2020 12:38:44 Reco wrote:
>
> > Hi.
> >
> > On Thu, Oct 15, 2020 at 12:26:52PM -0400, Gene Heskett wrote:
> > > But I've not been able to click on an "https"
On Thu, Oct 15, 2020 at 01:27:46PM -0400, Gene Heskett wrote:
> On Thursday 15 October 2020 13:07:54 Reco wrote:
>
> > On Thu, Oct 15, 2020 at 12:49:01PM -0400, Gene Heskett wrote:
> > > On Thursday 15 October 2020 12:38:44 Reco wrote:
> > > > Hi.
> &
is
> there a risk that AppArmor will block that?
No, because there's no shipped AppArmor policy for postfix in buster.
> Is there a simple way to disable AppArmor completely until I've had
> time to figure out what to do with it long-term?
Adding "apparmor=0" to your kernel cmdline should do the trick.
Reco
nfig iptables
update-alternatives --config ip6tables
update-alternatives --config arptables
update-alternatives --config ebtables
Last two are optional, and it all should be done after the migration to buster.
Reco
rng there) - you should install rng-tools, not haveged.
If you lack /dev/hwrng - haveged will solve this issue indeed.
If you need to do it enterprise way, and your hosts can connect to each
other - the entropybroker is the right answer for this question.
Reco
ou have local access to the system simply pressing keys on the
> keyboard will provide entropy and eventually allow the system to reach
> the login prompt.
Surely you agree that if you have many servers such workaround is
tedious at best.
Reco
Hi.
On Fri, Oct 16, 2020 at 03:39:29PM +0100, Tixy wrote:
> On Fri, 2020-10-16 at 13:30 +0300, Reco wrote:
> >
> > On Fri, Oct 16, 2020 at 12:23:30PM +0200, Jesper Dybdal wrote:
> [...]
> > > Is there a simple way to disable AppArmor completely until I'
ax67TUrw== | base64 -d | openssl enc -d -aes-256-cbc
-nosalt -k foo 2>/dev/null
That's the text
$ openssl version
OpenSSL 1.1.1d 10 Sep 2019
Reco
On Fri, Oct 16, 2020 at 06:24:31PM +0200, Philipp Ewald wrote:
> Thank you!
>
> I have used this : openssl base64 -d instead of "base64 -d" ..
You're welcome.
Reco
o do with it, it's rather the quality of amdgpu that
does.
In the ideal world all these blobs would be packaged in Debian, but it's
not the case as of stable. Obviously, if your hardware is working for
you, these update-initramfs warnings can be ignored.
Reco
pying the IMG straight to a flash drive:
Boot the thing via PXE. Syslinux can emulate a floppy from it's image
(memdisk module).
Reco
Hi.
On Tue, Oct 20, 2020 at 09:10:48PM -0400, Celejar wrote:
> On Tue, 20 Oct 2020 20:46:20 +0300
> Reco wrote:
>
> > On Tue, Oct 20, 2020 at 01:15:48PM -0400, Celejar wrote:
> > > Hi,
> > >
> > > I'm tearing my hair out trying to get
hidden file to keep it from filling your hard disks?
I fail to see the difference between .xsession-errors and some user-run
(cr)application logfile. Both can fill all the filesystem that you're
throwing at it.
Reco
e that uses it - the better ;)
> Keep a Python 2 binary around, download getmail, untar it,
> and run it right out of the directory - that's literally all that's required."
>
> what exactly the python 2 binary is I haven't had need to look as yet.
/usr/bin/python, currently provided by "python-minimal" package.
Reco
Hi.
On Tue, Oct 27, 2020 at 10:19:01AM -0400, Celejar wrote:
> On Tue, 27 Oct 2020 17:02:22 +0300
> Reco wrote:
>
> > Hi.
> >
> > On Tue, Oct 27, 2020 at 01:31:19PM +, mick crane wrote:
> > > > this was just a quick heads-up for those
On Tue, Oct 27, 2020 at 10:45:23AM -0400, songbird wrote:
> Reco wrote:
> ...
> > Indeed. Switch back to fetchmail, because the less you're depending on
> > python and the software that uses it - the better ;)
>
> i never used fetchmail so that wouldn't b
Hi.
On Tue, Oct 27, 2020 at 01:20:17PM -0400, songbird wrote:
> Reco wrote:
> ...
> > Because python. Be it python 2 or python 3 - it's (in)famous for one
> > thing - lack of backwards compatibility. Sooner or later they replace
> > python 3.8 (current sid) wi
27;t exist.
/bin/dmesg, probably. A part of util-linux package.
Reco
d to do things FreeBSD way (and building
something in controlled environment isn't something they do or promote)
- just assume that apt-build can do updates too.
Reco
t; The adapter worked until the previous HDD failed.
> Any insights?
Sure.
sha1sum firmware-ath9k-htc-1.4.0-97-g75b3e59+dfsg-3_all.deb
sha256sum firmware-ath9k-htc-1.4.0-97-g75b3e59+dfsg-3_all.deb
Reco
On Thu, Nov 05, 2020 at 12:22:44AM +0300, Reco wrote:
> On Wed, Nov 04, 2020 at 02:28:21PM -0600, pe...@easthope.ca wrote:
> > dpkg -i firm*
> > gives only this.
> > dpkg-deb: error: 'firmware-ath9k-htc-1.4.0-97-g75b3e59+dfsg-3_all.deb' is
> > not a
ves
> ifup: interface wlxe894f6248352 already configured
"allow-hotplug" tells udev to raise a network interface after it's
attached to the kernel. This result of ifup is expected.
Reco
[1] https://wiki.debian.org/WiFi/HowToUse#Command_Line
mention at least postfix and exim4 (possibly sendmail
too).
Reco
> ?
Yup, a critical one.
Conventional HDD (aka CMR) it the thing that allows you to use it any
way you want.
New wave HDD (aka SMR) are OK if you use them to write a single
append-only file, and dangerously bad at anything else.
Stay away from those CCTV HDDs, things will eat your data - [1],
can be executed
> either directly from the user's terminal or by running a script without
> any authentication request. There's certain inconsistency here, isn't it?
> IMHO, it does not feel like a safe approach.
It's a FreeDesktop standard, believe it or not.
A user should be allowed to reboot or poweroff the computer which they
have direct console access.
Reco
Hi.
On Tue, Nov 24, 2020 at 10:05:26AM +0100, to...@tuxteam.de wrote:
> On Tue, Nov 24, 2020 at 09:32:49AM +0300, Reco wrote:
> > On Mon, Nov 23, 2020 at 10:55:50PM -, Juan R. de Silva wrote:
> > > 1. Why, when the script is run by the user cron job, the executi
; modules to load?
echo rtc8821ae >> /etc/modules
Reco
the link works.
> Any ideas about buffer space?
The kernel has no free RAM to queue a packet or that Tp-Link device
you're is using low-quality kernel module. Happens with Tp-Link, but
there's a bright side - it could've been Broadcom.
Try increasing a value of vm.min_free_kbytes, it may help.
Reco
On Wed, Nov 25, 2020 at 09:19:08AM -0500, Celejar wrote:
> On Wed, 25 Nov 2020 10:42:59 +0300
> Reco wrote:
>
> > On Tue, Nov 24, 2020 at 03:06:59PM -0800, pe...@easthope.ca wrote:
> > > This is the only oddity evident after ifup wlxa0f3c10a28f7.
> > >
> >
On Wed, Nov 25, 2020 at 10:31:55AM -0500, Celejar wrote:
> On Wed, 25 Nov 2020 17:43:00 +0300
> Reco wrote:
>
> > On Wed, Nov 25, 2020 at 09:19:08AM -0500, Celejar wrote:
> > > On Wed, 25 Nov 2020 10:42:59 +0300
> > > Reco wrote:
> > >
> >
Hi.
On Wed, Nov 25, 2020 at 12:13:03PM -0700, Fred wrote:
> fred@ragnok:~$ ./ClipGrab-3.9.2-x86_64.AppImage --help
> bash: ./ClipGrab-3.9.2-x86_64.AppImage: cannot execute binary file: Exec
> format error
uname -m
Reco
legal in US, and you have to thank FCC for that - [1].
Applies to WiFi cards too.
Reco
[1] https://hackaday.com/2016/02/26/fcc-locks-down-router-firmware/
s
> unrealistic.
US FCC restriction applies to devices sold to consumers on a US market.
Somehow I doubt that Canada's market suppliers (or Europe for that
matter) are different from US ones.
Therefore US FCC restrictions magically apply to most of the first-world
countries.
I.e. of course nobody can forbid you (or me) to build an unlicensed WiFi
transmitter of arbitrary power or frequency. But they won't sell it to
you (or me).
Reco
t USB WiFi dongle is that you
get to free that USB slot though :)
Reco
ead
here.
> Wouldn't that pose a security issue?
Your threat model being?
Current scheme protects you from on-the-fly package substitution.
Reco
[1]
https://www.debian.org/doc/manuals/securing-debian-manual/deb-pack-sign.en.html
[2] https://wiki.debian.org/DebianRepository/Setup
o Thu, 26 Nov 2020 21:23:20 +0100
Currently this kernel version sits in stable-proposed-updates.
Reco
from the link.
Bot Type Good crawler (always identifies itself)
IP Range Distributed, Worldwide
Obeys Robots.txt *Yes*
Obeys Crawl Delay Yes
Data served atMajestic.com
I kindly suggest to all debian-user members to reflect on this, and to
stop this pointless discussion.
Reco
On Fri, Dec 04, 2020 at 12:06:41PM -0600, gru...@mailfence.com wrote:
> On Fri, 4 Dec 2020, Reco wrote:
>
> > Hi.
> >
> > On Fri, Dec 04, 2020 at 08:39:42AM -0500, Gene Heskett wrote:
> > > But I asked specifically how to enable it for one bot, and I
Hi.
On Mon, Dec 07, 2020 at 08:31:27AM +0100, mj wrote:
> Hi Roberto and Reco,
>
> Thanks for the replies!
A followup. They have released Debian 10.7 last weekend, kernel version
4.19.0-13 fixes this vulnerability.
Reco
ve in the first place.
As for sudo and others - there's only proper one solution for such
"unwelcome" users, and it's called userdel.
Reco
they are not welcome here"?
>
> passwd -l/--lock
sudo -u /bin/bash -i
That little trick defeats "locked" account status, an absence of a
password and even /usr/sbin/nologin set as a default shell.
Reco
On Thu, Dec 10, 2020 at 12:07:54PM +0200, Andrei POPESCU wrote:
> On Jo, 10 dec 20, 12:52:56, Reco wrote:
> > On Thu, Dec 10, 2020 at 11:46:02AM +0200, Andrei POPESCU wrote:
> > >
> > > passwd -l/--lock
> >
> > sudo -u /bin/bash -i
> >
> > Th
ts it, but does not
use it by default.
Things get really weird with grub-set-default unless you use
GRUB_DISABLE_SUBMENU=true.
Reco
Hi.
On Thu, Dec 10, 2020 at 01:46:18PM +0300, Reco wrote:
> On Thu, Dec 10, 2020 at 11:12:37AM +0100, to...@tuxteam.de wrote:
> > On Thu, Dec 10, 2020 at 12:00:20PM +0200, Andrei POPESCU wrote:
> >
> > [...]
> >
> > > 2. As far as I recall grub1
On Thu, Dec 10, 2020 at 03:36:47PM +0200, Andrei POPESCU wrote:
> On Jo, 10 dec 20, 13:34:55, Reco wrote:
> > On Thu, Dec 10, 2020 at 12:07:54PM +0200, Andrei POPESCU wrote:
> > > On Jo, 10 dec 20, 12:52:56, Reco wrote:
> > > > On Thu, Dec 10, 2020 at 11:46:02
side), or with Grub's
> reading and parsing it? I've not had any problems myself.
It's the selection of a top level menu instead of a menuentry that can
happen, unless you disable submenus.
While it does allow unattended boot, it does not allow the selection of
an old kernel, for instance. At least, in a easy way.
Reco
te panel (because it's
a special extension of a Wayland protocol) if you're planning on using
Wayland.
> If that's not true, then that changes a *lot*.
I wish it too, but it's deliberately not possible.
Reco
and
therefore access its contents.
> Maybe I just need two drives, and just do a cron job to rysnc to backup
> once a week or something.
RAID is not a substitute for a backup. Backup is not a substitute for
mirroring. One does not exclude another, so use both.
Reco
t serve? IMO it's not a backup unless it's
stored in a way that's inaccessible to the system its taken from (until
it's actually needed of course).
Reco
Solid State Device
Form Factor: 2.5 inches
Transport protocol: SAS (SPL-3)
SMART support is: Available - device has SMART capability.
SMART support is: Enabled
Temperature Warning: Enabled
...
Note that it's a SAS drive, not SATA.
Reco
On Thu, Dec 31, 2020 at 03:06:34PM +, Andy Smith wrote:
> On Thu, Dec 31, 2020 at 05:42:35PM +0300, Reco wrote:
> > It's a cheap model (relatively), and lack all those fancy BBU features,
> > but it works for my employer:
> >
> > # smartct
:charset=0939", you need to install
"fonts-noto-core" and "fonts-noto-ui-core", if you want to display those
glyphs.
Reco
to a
higher-level directory.
Taking your example literally:
root@x:/# mkdir /dir
root@x:/# chown user /dir
root@x:/# su - user
user@x:~$ rmdir /dir
rmdir: failed to remove '/dir': Permission denied
Why it behaves so? Because this:
# ls -lad /
drwxr-xr-x 23 root root 4096 Jan 6 15:33 /
Reco
horrible,
disgusting and amoral thing you can imagine. Doing that thing is an
experience that's superior to using megacli.
But, [1], [2] and [3] contain nearly anything that's a sane human being
can comprehend.
Reco
[1] http://www.vmwareadmins.com/megacli-working-examples-cheat-sheet
n, [1].
> And barring that, what is the best wifi(N?) card I can buy
> that doesn't require closed source drivers/firmware?
Anything that's ath9k supports does not require any firmware at all.
Ath9k is limited to 802.1n though. See [2] for an example list.
Reco
[1] https://hackaday.c
7;t call it consumer-friendly, and the price of the needed
hardware is orders of magnitude higher than a usual PCI-X WiFi card, and
of course there are multiple interoperability questions, but it's here
already.
[1] https://www.nuand.com/bladeRF-wiphy/
Reco
to use such card as a router - after all you'll need to
copy all the packets to the kernel and back, and that takes time.
But it still going to beat more common DIY combo of two/three USB-Ethernets.
Reco
S on your MTA - that does require some configuration
indeed - exim4_exim_crt(5), but that's redundant in your setup.
Reco
(see above).
3) libEGL.so.1, from mesa project preferably.
Your setup seems to lack something from this list.
> I have no idea what is wrong. I have had no problems with my Radeon
Anbox works on i965. Just a hint.
Reco
apparmor profile but keeping audit records
generation is done by
/usr/sbin/aa-complain /usr/bin/thunderbird
You'll want the first one, probably.
Reco
> Any ideas where can I take a look? Thanks in advance!
Try running this:
ifdown -a --force
ifup -a -v
Last command should show you the source of the trouble.
Reco
bility to control said nano-chips via
5G, and last, but not least - the secret cabal which benefits from it.
To be serious, first approach is welcome here. Please try second
approach elsewhere.
Reco
uest OS.
> Should a subnet be specified in /etc/network/interfaces?
Of course, as it's not a point-to-point connection.
Reco
c OS implementation details (such as NIC names) are left to the
specific OS to handle.
> Another detail I haven't found in the documentation.
QEMU's documentation is an unsuitable place to describe OS-specific
implementation details. Try [1], chapter 4, instead.
Reco
[1] https://wiki.debian.org/NetworkInterfaceNames
2,mac=$MAC2 \
-netdev tap,id=hostnet3,fd=6 \
-device virtio-net-pci,netdev=hostnet3,id=net3,mac=$MAC3 \
And it does not make guest OS network interfaces to be called hostnet0
or net0, for instance.
Reco
801 - 900 of 1177 matches
Mail list logo