Re: [gentoo-user] SUDO: running /etc/init.d/cupsd restart
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi jak gentoo wrote: Hi all, I'm trying to allow users in the wheel group to run /etc/init.d/cupsd restart I edited /etc/sudoers with visudo to the following but it doesn't work, any ideas? %wheel ALL=(ALL)NOPASSWD: /sbin/runscript.sh You won't need the line above, it would be a risk if wheel group is allowed to to run any script wiht runscript.sh as root. %wheel ALL=(ALL)NOPASSWD: /etc/init.d/cupsd restart when I try with my normal acount I get [EMAIL PROTECTED] ~ $ /etc/init.d/cupsd restart * /sbin/runscript.sh: must be root to run init scripts But you have to start the cupsd script with sudo: $ sudo /etc/init.d/cupsd restart At least this is how I know sudo. - -- wabu -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5-ecc0.1.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFdCgfBbWbHb9PeLsRAn2eAKCDoJ0WS0Ji29u8bfWMfkXPLBIWVwCeO11w E9tcCK5q+LcwE4vVX9JteWg= =K6aG -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] problems with revdep-rebuild
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 JC Denton wrote: Hi group! It is the first time I had such kind of troubles. What can I do about it? I found that xmms is not longer supported under Gentoo. So how to solve this emerge problems when all the packages does not exist any more? Regards Hello, I think you have to remove xmms because it can't be rebuilded, something like emerge -C media-sound/xmms media-plugins/xmms-xmmsmplayer-0.5 (and all other xmms-packages that are in you world file). Afterwords the the revdep-rebuild and --depclean will hopefully work again. Ah, and you have to remove your .revdep-rebuild files in the /root dir. Regards - Der neue Internet Explorer 7 in deutscher Ausführung ist da! .. und das bekommt man auf ner gentoo liste ;) -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5-ecc0.1.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFcVyABbWbHb9PeLsRAjt3AJ9gAKrn6vCjR36jDSfR0Pw/ZiSHYQCfccbL 7TCJmacb0G5akAB4OKGGq6I= =r40m -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Escaping a * in bash script
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ow Mun Heng wrote: Does anyone know how to go about escaping a * in a bash script? I want to do the following query= select * from table where column1='something' As you use the it is still a * in the $query, but you have to be carefull when you use the variable. Try something like dbcommand $query and it will still be a * in your query - -- wabu -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5-ecc0.1.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFKNKSBbWbHb9PeLsRAk2mAJ4psxXuJdNLDUee/lZ3G/Ubr3LFJwCfZe9k CCHlA2M3Dwbmbo5GrAjLCZc= =YKY/ -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Audio CD support
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You won't need to mount the cd, but make sure the user who plays the cd is in the cdrom group. If this simple suggestion does not help, try to start xmms in a terminal and look what it has to say. Post the output here if you can't find the problem. - --wabu sdoma wrote: Hi, Does somebody know how I can get XMMS to play audio CSs? Play audio CD simply cleans the playlist and doesn't do anything else. In Preferences-Audio CD the Audio CD directory is set to /mnt/cdrom (We don't mount audio CDs - do we?) My cdrom drive is on /dev/hdc but I can't browse to this node. Should I set it by editing ~/.xmms/config? Is there a USE flag I'll have to set - I didn't find anything apropriate in use.desc. Thanks for any help Frank -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE+FyhBbWbHb9PeLsRAikRAJ4+wlD6muZyeFBpvwV9Dg4hfoUQGACeLinW EKCoG78B/ul7PZdcoXamQoY= =fZCx -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT logitech mouse recommendation (MX1000 vs G7)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hullo Richard Fish wrote: On 7/7/06, Daniel Waeber [EMAIL PROTECTED] wrote: At least in my laptop the devices still work like they did before. I only got one problem right now: xorg does not start, if the mouse is inside the xorg.conf (using evdev driver) but not attached. but perhaps this is my fault. Do you need to use the evdev driver? If not, just use the mouse driver and point it at /dev/input/mice. That is what I do for my logitech cordless. The touchpad uses the synaptics driver and an event interface, while the USB mouse is using the standard mouse driver and /dev/input/mice. The left and right movement of the mouse wheel is only supported by the evdev driver. As this feature is really handy I'll have to use evdev. In conjunction with imwheel it is usable for all applications. But as the reciver is just about 10mm x 30mm x 5mm big, you'll easily can carry it with you. Somewhere I read that you can configure udev so it chances the xorg.conf. Perhaps I'll try that some day and will post it if I have success. BTW, how is the mobility for the G7/MX1000? Do they come with bulky cradles that one would have to carry around? It has a bulky charging station, but this is only needed to changce the batteries. The receiver itself is very small and can be carried around easily. wabu -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEr5+TBbWbHb9PeLsRAmbqAJ4+4uShFRbRG5Yi420ax/yeTRpJrQCeL3JZ 1mS5+kfqhJ+BVX058qTVPjQ= =BScj -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Clean up world file
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 If I'm not mistaken, you can simply run vim /var/lib/portage/world, :sort it and ddelete the packages you don't need. It did work for me, but I'm not sure if something breaks if you just edit the world file or if you have to chance something else. Anthony E. Caudel wrote: There was a recent thread about about what should or should not be in the world file. Regarding that, my world file is bloated. Until recently, I had a tendency to do updates piecemeal but did not use --oneshot. This put packages in that I do not think belong. Looking for a means to clean up the world file, I ran across Ed Catmur's dep. Has anyone here used it? Is it the best means available to clean the world file? Anything in the gentoo tree to do this? Tony BTW, I ran it with the --pretend option and it told me that 44 of the 119 packages in my world file were redundant. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEr5/TBbWbHb9PeLsRAjFUAJ4sAcpXKSIVch0iT0H1jF9oRYC2tgCfc9Q4 TlDp5dIHwSdNwchjuaeKt7Q= =8E4L -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT logitech mouse recommendation (MX1000 vs G7)
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Allan Gottlieb wrote: Now that I have xorg-7.0-r1 installed, I am planning to upgrade my logitech cordless mouseman optical to one of the new toys, either the MX1000 or the G7. I have read the helpful gentoo-wiki entry. I'm currently using a G7 on my laptop and it works great, all 8 buttons and on-the-fly sensitivity just feel good. Moreover having two battaries is super. But i never tested the MX1000, so i just can say that G7 rocks :) I am looking for recommendations/experiences. Would I perceive any difference between them? In particular 1. This is for a laptop (dell 5150) so there will also be the synaptics two button touchpad on the keyboard. I assume either of the two new mice would work and would not disable the touchpad (I know about alwayscore). Correct? At least in my laptop the devices still work like they did before. I only got one problem right now: xorg does not start, if the mouse is inside the xorg.conf (using evdev driver) but not attached. but perhaps this is my fault. 2. I do not play high speed games, but would consider it a mild plus if such games were better supported since my children (low 20s) do play these games and very occasionally use my system. Your gaming children will love the 2000 dpi and the on-the-fly sensitivity. Its perfect for gaming. thanks in advance, allan wabu -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFErt3VBbWbHb9PeLsRAiXbAJ0W3sGYkGwTM33UWD6R6pwW+iP/sQCfbPe1 DtuZFO2stsH1y3F8t2EtviM= =nrZr -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] Encryption in Kopete
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bo Ørsted Andresen wrote: On Sunday 25 June 2006 21:02, Mick wrote: Is there a similar function in Gaim, or does it only do vanilla messaging (unencrypted)? I have no experience with encryption in instant messengers so can't help with that. But there is a plugin: # eix gaim-encryption * x11-plugins/gaim-encryption Available versions: 2.32-r1 2.34 2.35 2.36 2.37 2.38 [M]3.0[...] Installed: none Homepage:http://gaim-encryption.sourceforge.net/ Description: GAIM Encryption PlugIn The gaim-encryption protocol does not use any common encryption like gpg, so if you want to use it both sides have to use gaim-encryption. At the moment I use centericqs gpg-feature, but it is only implemented for the jabber protocol, so you have to switch to jabber. I have only tried these so I don't know about the rest of the IM-clients. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEnxWpBbWbHb9PeLsRAsyZAJ9YPzjWOyNdYGBcwhrNpJZMKlZ7LwCfYu0j NjCTiOAqPRYlhQt8Vr7iKjQ= =lvzK -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] post-tetex?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jorge Almeida wrote: Anyone has any idea about what will be the gentoo way to cope with the no-more-tetex issue? There was a discussion about it a some days ago in the dev-list: http://article.gmane.org/gmane.linux.gentoo.devel/38615 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEfJ5WBbWbHb9PeLsRAmYXAKCFTQ287zXn/nin8nAB5XJLUxq92QCfcs6U n+Yl9ze4z+EGDjn26CDq/Tc= =c+c5 -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT - which X terminal do you use?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Willie Wong wrote: On Tue, May 16, 2006 at 02:56:46PM -0500, Penguin Lover Harry Putnam squawked: I also looked for a drop-down term. Couldn't find one that I really liked, so just made a wrapper myself for aterm in fvwm using a borderless window, key binding for focus and shading, and EdgeCommand. It is quite convenient. What do you guys mean by `drop-down'? Do you play FPS? Think how in many of those games you can hit ~ to bring down a console that convers half the screen... The basic idea (for me, at least) is a terminal window that is sticky (so persists between desktops) and, normally, is shaded. It should be able to react to a keyboard trigger so it unrolls from the top of the screen and stays always on top and doesn't lose focus when it is unrolled. HTH, W Sounds nice. But i don't want kdelibs on my system. I use wmii-3. It is highly configurable, so hopefully i am able to make a script that can do this job with any x terminal. And if you use xcompmgr and transset-df you can make the terminal transparent. A twenty line bash script is a bit faster as kdelibs. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEaskPBbWbHb9PeLsRAui0AJ9auymj/vvLm/e1icJGxWgI/xdJsQCghUKJ OjmtCKyBrxkBkiUx0wuT9JE= =iVda -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] OT - which X terminal do you use?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mick wrote: On a limited resources box I have always used rxvt/aterm. I have also used Konsole but it slows things down. I am waiting for real transprency to work with aterm. Unlike pseudo-transparency which just looks pretty I think real transparency is useful as you can see the contents of other terminals/windows underneath the terminal you are currently working on. hardware accelerated real transparency can be accomplished with xcompmgr and transset. But i don't like it, because you can't read either contents anymore. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEZdWeBbWbHb9PeLsRAr3zAJ9Mr2U0vNL4tgCiIvROMhmDyrFxQwCgktXS gssitJnxaSGhWHNxJ2bBhMg= =yJJW -END PGP SIGNATURE- -- gentoo-user@gentoo.org mailing list
[gentoo-user] netfilter: -P INPUT DROP in kernel
Benno Schulenberg wrote:
(By the way, please do not reply to another message when starting a
new topic.)
Benno
Sorry for that. So I start a new thread now.
Daniel Waeber wrote:
I was looking for a way to set the default rule for the INPUT
chain to DROP. I do not want to change the rule with iptables -P
INPUT DROP after loading the kernel, I want that the
kernel/modules automatically DROPS everything after it has been
loaded.
You can do this with the FORWARD chain with the parameter
forward=0, but nothing is implemented for the INPUT chain as far
as i know. I looked inside the kernel source of the modules, and
hey, it is easy to change. I recompiled the module, reloaded it.
Perfect, now i have default DROP.
But as it is so easy to edit, why is there no option in the
kernel or a parameter for the module
Make a patch that adds this parameter, allowing one to set the
default policy for the input chain (and output chain too), and
submit it to the kernel list. Or show it here first. I'd be
interested.
Because I'm new to Linux, this is my first patch, so i don't know if
everything is done right. Perhaps someone can examine it before I send
it to kernel.org. I added code so you can pass the parameter input=0
and output=0 to the iptable_filter module to change the policies. It's
the same code already implemented for the forward chain, which can be
set to 0 to drop, 1 to accept.
I don't now if how/if this parameter can be passed, if netfilter is
build inside the kernel, so perhaps this is not the perfect solution.
Have fun with a default denying firewall :)
diff -upr linux-2.6.16-gentoo-r3/net/ipv4/netfilter/iptable_filter.c
netfilter_dorp_patch_linux/net/ipv4/netfilter/iptable_filter.c
--- linux-2.6.16-gentoo-r3/net/ipv4/netfilter/iptable_filter.c 2006-04-21
22:51:05.0 +0200
+++ netfilter_dorp_patch_linux/net/ipv4/netfilter/iptable_filter.c
2006-04-21 22:38:07.0 +0200
@@ -135,21 +135,45 @@ static struct nf_hook_ops ipt_ops[] = {
},
};
-/* Default to forward because I got too much mail already. */
+/* Default options for the kernel module */
+/* As default everything is accepted */
+static int input = NF_ACCEPT;
+module_param(input, bool, );
+
static int forward = NF_ACCEPT;
module_param(forward, bool, );
+static int output = NF_ACCEPT;
+module_param(output, bool, );
+
+
+
static int __init init(void)
{
int ret;
+ if (input 0 || input NF_MAX_VERDICT ) {
+ printk(iptables input must be 0 or 1\n);
+ return -EINVAL;
+ }
if (forward 0 || forward NF_MAX_VERDICT) {
printk(iptables forward must be 0 or 1\n);
return -EINVAL;
}
+ if (output 0 || output NF_MAX_VERDICT) {
+ printk(iptables output must be 0 or 1\n);
+ return -EINVAL;
+ }
+ /* Set the default policys according to the module parameters */
+ /* Entry 0 is the INPUT hook */
+ initial_table.entries[0].target.verdict = -input -1;
/* Entry 1 is the FORWARD hook */
initial_table.entries[1].target.verdict = -forward - 1;
+ /* Entry 2 is the OUTPUT hook */
+ initial_table.entries[2].target.verdict = -output -1;
+
+
/* Register table */
ret = ipt_register_table(packet_filter, initial_table.repl);
[gentoo-user] netfilter: -P INPUT DROP in kernel
I was looking for a way to set the default rule for the INPUT chain to DROP. I do not want to change the rule with iptables -P INPUT DROP after loading the kernel, I want that the kernel/modules automatically DROPS everything after it has been loaded. You can do this with the FORWARD chain with the parameter forward=0, but nothing is implemented for the INPUT chain as far as i know. I looked inside the kernel source of the modules, and hey, it is easy to change. I recompiled the module, reloaded it. Perfect, now i have default DROP. But as it is so easy to edit, why is there no option in the kernel or a parameter for the module that allows to edit the default entries when loading the module? I can't image that I am the first one, who wants to have a secure linux, even if the firewall script (that could set -P INPUT DROP) fails or is delayed (i use parallel startup, so it could be that eth0 starts before iptables). Is their a reason why a default INPUT DROP policy is not supported in the kernel? (i know that you can easyly remove the access to you system, if you only managed it via ssh, but why not the option, if you really want to do that) Or is there a better way to archive this goal? -- gentoo-user@gentoo.org mailing list
Re: [gentoo-user] setting the time
thank you for your help, everything is running perfect now :) it's easy if you know the difference between system and hwclock, but confusing if you only now about the date program. it would be nice if there would be a link to hwclock in the manpage of date, like it is the other way round. but this is not a gentoo specific problem i think. i'm new to linux so i don't know where to put my suggestion. (should i just write a mail to bug-coreutils@gnu.org, like the man page says?) -- gentoo-user@gentoo.org mailing list
[gentoo-user] setting the time
hi i have a problem with changing the time/date of my computer. I only can change it temporally till the next reboot. I tried date and ntptime to set it. after setting it the system shows the right time, but after a reboot i have the old time again. i have no other system running on the computer that could change the time, so it is a problem with linux/gentoo. do i somehow have to finalize the setting? thanks in advance ! -- gentoo-user@gentoo.org mailing list
