Linux-Misc Digest #993, Volume #18               Fri, 12 Feb 99 04:13:10 EST

Contents:
  Re: simple question about text editing tools (Michael Powe)
  Re: hacked login ([EMAIL PROTECTED])
  Re: how to compile and run a c program in Linux? (Michael Powe)
  Re: how to compile and run a c program in Linux? (Michael Powe)
  Re: Umount won't unmount /usr (Bill Unruh)
  Re: Uninstalling a tarball application? (Villy Kruse)
  Re: Q: How do I stop a 4:02 AM scheduled mystery process? (Bill Unruh)
  Re: workspaces-menu under WindowMaker (Olaf Mueller)
  Re: From RedHat to Slackware (Andreas Krogh)
  Re: Partition deletion problem (Tim Moore)
  Re: simple question about text editing tools (Grant Leslie)
  Re: UPS restores power after system is halted; will it boot? (Bill Unruh)
  Re: [Q] RPM and can't open files ("Michael 'BeLFrY' S. E. Kraus")
  linux + winpopup (Marko Brandes)
  Re: SMP Support (Tim Moore)
  Re: interesting web page against LINUX (Karel Jansens)
  X problems (Debian) (David Bach)

----------------------------------------------------------------------------

From: Michael Powe <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.help,comp.os.linux.questions
Subject: Re: simple question about text editing tools
Date: 11 Feb 1999 22:20:37 -0800

=====BEGIN PGP SIGNED MESSAGE=====
Hash: SHA1

[posted and mailed]
>>>>> "Steve" == Steve Sanyal <[EMAIL PROTECTED]> writes:

    Steve> Hi, My editor put in tab characters, and my programs look
    Steve> horrendous because of the indenting.  I have since switched
    Steve> to "emulate tabs" mode only.

    Steve> Is there an easy way that I can replace each existing tab
    Steve> character with 3 spaces?

sed -e 's/      /   /g' infile > outfile

The first blank space above contains an actual TAB character, the
second one contains 3 spaces.  In bash, use ^V on the command line to
get an actual TAB character into a command.

mp

- - --
Michael Powe                                          Portland, Oregon USA
           [EMAIL PROTECTED]    http://www.trollope.org
  "Three hours a day will produce as much as a man ought to write."
                         -- Anthony Trollope

=====BEGIN PGP SIGNATURE=====
Version: GnuPG v0.9.0 (GNU/Linux)
Comment: Encrypted with Mailcrypt 3.5.1 and GNU Privacy Guard

iD8DBQE2w8gj755rgEMD+T8RAgCSAJ9PsXRHA96Y155bC1MgJq0FcEYzNACfSFiy
lgJTrfD8d0rMdy0nSgSwyXo=
=oeGa
=====END PGP SIGNATURE=====

------------------------------

From: [EMAIL PROTECTED]
Crossposted-To: comp.os.linux.admin,comp.os.linux.networking
Subject: Re: hacked login
Date: Wed, 10 Feb 1999 22:03:45 GMT

In article <[EMAIL PROTECTED]>,
  [EMAIL PROTECTED] wrote:
> Someone probably hacked the login program in  my Linux system and it
> doesn't record te remote host address for a remote telnet login in the
> "wtmp" file. I recompiled the login program but the problem persists.
> Any idea what else I should check to solve the problem.
>                                    Thanks
>                                     Rafael.

I had this problem.  The real problem is that once someone like this gets in
they generally really go after the system.  The install all kinds of versions
of their own software.  What I did was step by step go through the cert.org
list of steps for dealing with root compromise.  I actually did this several
times.  Each time I went through it I found more that was hidden by other
problems that I removed.  A couple of things that I found that we not
specifically listed were.

The guy had setup some cgi in an inactive web site.

A packet sniffer had been installed.  (this is mentioned)  The results of the
packet sniffer were retrieveable through a modified version of the name
server.  The query was for an class other than in and for a type that would
not normally exist and provided a "nice" set of resource records -- a list of
all of the accounts and their possible passwords.  Note this was not coming
from the modified version of the login, but from the packet sniffer, as it
was producing records for other servers in our zone.

That is a second warning check all your other machines.


============= Posted via Deja News, The Discussion Network ============
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own    

------------------------------

From: Michael Powe <[EMAIL PROTECTED]>
Subject: Re: how to compile and run a c program in Linux?
Date: 11 Feb 1999 22:29:51 -0800

>>>>> "Andrew" == Andrew Comech <[EMAIL PROTECTED]> writes:

    Andrew> One should not have `.' in the path, except for when
    Andrew> hunting for Trojan horses, that is. Wonder why you
    Andrew> suggested that.  Cheers, Andrew


------------------------------

From: Michael Powe <[EMAIL PROTECTED]>
Subject: Re: how to compile and run a c program in Linux?
Date: 11 Feb 1999 22:35:22 -0800

=====BEGIN PGP SIGNED MESSAGE=====
Hash: SHA1

>>>>> "Andrew" == Andrew Comech <[EMAIL PROTECTED]> writes:

    Andrew> One should not have `.' in the path, except for when
    Andrew> hunting for Trojan horses, that is. Wonder why you
    Andrew> suggested that.  Cheers, Andrew

It's certainly not dangerous on your home box and it's not dangerous
if you have proper permissions set on your directories.  You should
not be allowing other people to write to your directories.  And you
should not be in the habit of executing commands in world-writable
temp directories, either.

mp

- --
Michael Powe                                          Portland, Oregon USA
           [EMAIL PROTECTED]    http://www.trollope.org
  "Three hours a day will produce as much as a man ought to write."
                         -- Anthony Trollope

=====BEGIN PGP SIGNATURE=====
Version: GnuPG v0.9.0 (GNU/Linux)
Comment: Encrypted with Mailcrypt 3.5.1 and GNU Privacy Guard

iD8DBQE2w8uc755rgEMD+T8RAtR5AJ94bfjZ9gzjHHBTkgQDMSctylayegCglBZX
toKb2TY7syLI2oukFOqtzUY=
=uWKm
=====END PGP SIGNATURE=====

------------------------------

From: [EMAIL PROTECTED] (Bill Unruh)
Subject: Re: Umount won't unmount /usr
Date: 11 Feb 1999 00:07:54 GMT

In <79qmh5$sg$[EMAIL PROTECTED]> [EMAIL PROTECTED] (Rick Walker) writes:

>: My rc.6 script that runs to do a system shutdown does a umount -a to
>: unmount all filesystems.  This used to work just fine.  Recently, however,

>Some process is cd'd into /usr.  You can take a look in /proc after the
>umount fails and find the current working directory for all the

Well, the shutdown script usually kills all running processes first. Is
there also some message saying that some processes have not been
killed?

------------------------------

From: [EMAIL PROTECTED] (Villy Kruse)
Subject: Re: Uninstalling a tarball application?
Date: 29 Jan 1999 09:50:54 +0100

In article <78rq1h$mmo$[EMAIL PROTECTED]>,
jdn <[EMAIL PROTECTED]> wrote:
>I tend to like to try out various applications, and often ones that I know I
>probably won't use on a regular basis, but just want to see what they are
>like.
>
>Anyway, suppose I've come to my senses and decide to get rid of some of
>these applications to free up disk space.  Is there a basic procedure to do
>this, or is it more of a "hunt down and kill" process?  Obviously, with
>RedHat, you just uninstall the RPM.  Is there anything similar with tar.gz
>installs?
>


The only thing you could do if the tarball doesn't include an uninstall 
script is to get a list of files in the tar archive and go from there.
An uninstall script ought to be mandatory for every tarball package.



Villy

------------------------------

From: [EMAIL PROTECTED] (Bill Unruh)
Subject: Re: Q: How do I stop a 4:02 AM scheduled mystery process?
Date: 11 Feb 1999 00:12:16 GMT

In <[EMAIL PROTECTED]> Joel Shellman <[EMAIL PROTECTED]> writes:


]I'll second that. Our server was dying at about that time
]each morning and I found that updatedb in the
]/etc/cron.daily directory. I seriously considered emailing a
]nasty message to RedHat (do other distributions do that?).

]Why on earth do I want a process that searches through every
]single file on my machine to run every day! We had hundreds
]of thousands of files on that machine (perhaps more--I have
]no idea how many). Anyway, I removed it and it stopped
]dying.

The locate command is an extremely useful command, especially when you
have thousands of files. I loose files all the time, and locate helps me
find them . Unfortunately locate uses the file database which updatedb
was designed to keep up to date. No updatedb, no locate.

------------------------------

From: [EMAIL PROTECTED] (Olaf Mueller)
Subject: Re: workspaces-menu under WindowMaker
Date: 12 Feb 1999 04:11:11 GMT

[EMAIL PROTECTED] (Hans Wolters) writes,

Hello Hans,

>> Workspaces-Menu to an other submenu, maybe called "Configuration".
> Just open the menu file which is located in ~/GNUstep/Library/WindowMaker
> with your editor and change the locations of the menu's.

I don't know who this should be done.
I think you don't know, too.

The file "menu" under ~/GNUstep/Library/WindowMaker just contains the
string ' "Workspaces" WORKSPACE_MENU '.

So, where is the file "WORKSPACE_MENU"?

Think twice, I don't want to edit *just* an entry of the menu.
What I realy want is to move something from the *workspaces* menu.

regards,
Olaf

------------------------------

From: Andreas Krogh <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup,comp.os.linux.help
Subject: Re: From RedHat to Slackware
Date: 10 Feb 1999 23:05:05 +0100

"Fuzzy" <[EMAIL PROTECTED]> writes:

> It's probably the most popular (or was at one time and still is).  Be
> forewarned that you can't as easily remove and install a package as with 
> 
> rpm -e 
> rpm -i
> 
> Also note that Slackware is different that RedHat as far as it's
> configuration files (for startup).  One is s5 like the other is bsd like
> but I forget which is which.  You won't have all the nice gui tools like
> usercfg and netcfg that RedHat has either so configuring your network and
> other things will be more difficult (read: normal for a Unix box). 
> Everything else though is the same.
> 
> Fuzzy
> 
> White Home <[EMAIL PROTECTED]> wrote in article
> <[EMAIL PROTECTED]>...
> > I recently installed RedHat but am wanting to give Slackware a shot.
> > The machine I have can read a CD while running the RedHat.  I also have
> > access to Windoze machines to use rawrite if I need to.  The slackware
> > install isn't quite as simple as the RedHat, all the same, I'd like to
> > go ahead with it. The RedHat is simple enough to go back to.  Any
> > pointers for good resources on installing slackware.
> > 
> > Thanks,
> > 
> > Jason
> > [EMAIL PROTECTED]
> > 
> > 

I my self preffer slackware due to its bsd-like startup config files,
and I hate the RedHat "lets make it easy for win9X users to migrate to
Linux and make wrappers to _everything_" motto. If you want to learn
UNIX go with slackware, if you consider yourself as a "user"(ie. only
want to "easy" install programs, and use precompiled packages) use
RedHat. When it comes to installation just read the docs.

--
Andreas Joseph Krogh <[EMAIL PROTECTED]>

------------------------------

Date: Thu, 11 Feb 1999 23:33:50 -0800
From: Tim Moore <[EMAIL PROTECTED]>
Subject: Re: Partition deletion problem

Please post the output from 'fdisk -l'
-- 
[Replies: remove the D]

"Everything is permitted.  Nothing is forbidden."
                                   WS Burroughs.

------------------------------

From: Grant Leslie <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.help,comp.os.linux.questions
Subject: Re: simple question about text editing tools
Date: Fri, 12 Feb 1999 03:23:27 -0400

In addition to the above suggestions, I'd like to say, that after you've
edited you file, and saved it, try running 

$ indent foobar.c

Setup indenting right nicely, nice thing to do before distrubuting
source code anyway, not sure if it would help in your case or not, just
thought I'd throw it in ;-)

Steve Sanyal wrote:
> 
> Hi,
> 
> My editor put in tab characters, and my programs look horrendous because
> of the indenting.  I have since switched to "emulate tabs" mode only.
> 
> Is there an easy way that I can replace each existing tab character with
> 3 spaces?
> 
> If so, can someone please tell me the command?
> 
> Please send your reply by email, if possible.
> 
> Thanks
> 
> Steve

-- 
"It looks so lovely, and fragile. Imagine how many millions of people
 are living on it, and don't even realize how fragile it is."
  Alan B. Shepard, 1971, said with a tear in his eye, on the
            Apollo 14 mission looking back at earth from the moon

------------------------------

From: [EMAIL PROTECTED] (Bill Unruh)
Subject: Re: UPS restores power after system is halted; will it boot?
Date: 11 Feb 1999 00:19:15 GMT

In <[EMAIL PROTECTED]> Anthony Christofides 
<[EMAIL PROTECTED]> writes:
>The problem is that I halt the machine and I _don't_ unplug it; just after the
>system has been halted, but before the battery goes out, the electric company
>restores the power. The UPS thus never "unplugs" the system.

If the machine is halted, then it needs a reset to restart it (eg power
off and on, or a signal on the reset line). If your UPS can deliver that
fine. If not, I guess it is up to you.


------------------------------

From: "Michael 'BeLFrY' S. E. Kraus" <[EMAIL PROTECTED]>
Subject: Re: [Q] RPM and can't open files
Date: Fri, 29 Jan 1999 19:42:20 +1100

G'day...


> mike~$ rpm -q gtk+-
> cannot open file //var/lib/rpm/nameindex.rpm:
> rpmQuery: rpmdbOpen() failed

Are you sure you are root with the $ prompt? =)


> If I try to install something I get this error message:
>
> mike~& rpm -Uvh enlightenment-0.15.0-10.i386.rpm
> cannot open file //var/lib/rpm/nameindex.rpm:
> error: cannot open //var/lib/rpm/packages.rpm

Either you need to rebuild the db or you have your permissions screwed
up....


> The version of RPM that I am using now is 2.5.7.  I have tried to rebuild
> the rpm database with rpm --rebuilddb but I get and error about "can't
> open file..." again.
>
> The files are were they are supposed to be and they are chmod 644 in the
> /var/lib/rpm directory.  They are owned by root.  I am running these
> commands under root (not an su to root).

I don't suggest you chmod files that don't need to be - leave them according
to what they were from the distribution.

This is your most likely culprit.  (Were they supposed to be chown'ed to
root, or was another (su) id needed?)

To get the setting correct (as in my version):

su or login as root
cd /var/lib
chmod a+r rpm
chmod a-w rpm
chmod a+x rpm
chmod u+w rpm
cd rpm
chmod a-w *
chmod a-x *
chmod a+r *
chmod u+w *

Should have things working...  (Now try to rpm --rebuildb as root)

Also, are you using the latest stable rpm version?

All the best...

Michael.


------------------------------

From: Marko Brandes <[EMAIL PROTECTED]>
Crossposted-To: comp.os.linux.setup,alt.uu.comp.os.linux.questions
Subject: linux + winpopup
Date: Thu, 11 Feb 1999 01:13:40 +0100

Hi everyone,

i'm looking for a tool or script which allows me to let my linux-box
open a popup window on winNT if something special happens on my linux
box (e.g. mail arrives or a fax could not be sent). The linux-server and
the NT-clients are connected over a LAN using the samba-suite, it would
be very grateful if someone could say me where to get such a program
from or even where to find documentation with this topic.

Tia ........ Marko


------------------------------

Date: Thu, 11 Feb 1999 23:26:43 -0800
From: Tim Moore <[EMAIL PROTECTED]>
Subject: Re: SMP Support

> I recompiled my kernel for smp but do not know how to check if the OS see's
> both.  How can I do this?

A two processor system should have twice the information as below

[tim@asus ~]# more /proc/cpuinfo
processor       : 0
cpu             : 686
model           : Pentium II (Klamath)
vendor_id       : GenuineIntel
stepping        : 4
fdiv_bug        : no
hlt_bug         : no
f00f_bug        : no
fpu             : yes
fpu_exception   : yes
cpuid           : yes
wp              : yes
flags           : fpu vme de pse tsc msr pae mce cx8 sep mtrr pge mca cmov mmx
bogomips        : 332.60

-- 
[Replies: remove the D]

"Everything is permitted.  Nothing is forbidden."
                                   WS Burroughs.

------------------------------

From: jansens_at_ibm_dot_net (Karel Jansens)
Reply-To: jansens_at_ibm_dot_net
Subject: Re: interesting web page against LINUX
Date: 11 Feb 1999 00:25:39 GMT

On Wed, 10 Feb 1999 06:58:16, "Efi Merdler" <[EMAIL PROTECTED]> wrote:

> It's not English.
> [EMAIL PROTECTED] wrote in message <79qdrn$2na$[EMAIL PROTECTED]>...
> >I think he is not impartial and i advise other people who trust in Linux
> power
> >to look at Matin's pages
> [ http://worldserver2.oleane.com/dmartin/linux.htm ].
> 
> 
> 
Learn French or live with it.

Karel Jansens
jansens_at_ibm_dot_net

=======================================================
If we could have our cake and eat it,
people would start whining about seconds.
=======================================================

------------------------------

From: David Bach <[EMAIL PROTECTED]>
Subject: X problems (Debian)
Date: Thu, 11 Feb 1999 20:12:46 -0800
Reply-To: [EMAIL PROTECTED]

I get the following messages when doing startx:
--

X: exec of   failed
_X11TransSocketUNIXConnect: Can't connect: errno = 2
_X11TransSocketUNIXConnect: Can't connect: errno = 2
_X11TransSocketUNIXConnect: Can't connect: errno = 2
_X11TransSocketUNIXConnect: Can't connect: errno = 2
_X11TransSocketUNIXConnect: Can't connect: errno = 2
_X11TransSocketUNIXConnect: Can't connect: errno = 2
giving up.
xinit: No such file or directory (errno 2) : unable to connect to X server
xinit; No such process (errno 3): Server error.

--
I have killed gpm and I have checked to see that all of the following are installed:
                        
makedev         1.6-32
ncurses-base    1.9.9g-8.8
ncurses-bin     1.9.9g-8.8
ncurses-term    1.9.9g-8.8
ncurses3.4      1.9.9g-8.8
ncurses3.4-dev  1.9.9g-8.8
xbase           3.3.2.2-4
xcolors         1.5-4.1
xcolorsel       1.1a-7
xcontrib        3.3.1-2
xlib6           3.3.2.2-4
xlib6g          3.3.2.2-4
xlib6g-dev      3.3.2.2-4
xfntbase        3.3.2.2-4
xfnt75          3.3.2.2-4
xfntpex         3.3.2.2-4
xfntscl         3.3.2.2-4
xpm-bin         3.4j-0.6
xpm-4g          3.4j-0.6
xpm-4g-dev      3.4j-0.6
xserver-vga16   3.3.2.2-4
xserver-S3      3.3.2.2-4       This is the X server for my computer.
xserver-svga    3.3.2.2-4
zlib1g          1.1.1-0.1
olvwm           4.1.3.2p1.4
olvm            3.2p1.4-4

I have configured XF86Config with all the necessary parameters. SuperProbe
identifies the video card as S3 Trio64. The monitor is a Sony 100sx and I have
entered the correct parameters for it.

I'm at my wit's end and would appreciate some help.

Thanks in advance.

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and comp.os.linux.misc) via:

    Internet: [EMAIL PROTECTED]

Linux may be obtained via one of these FTP sites:
    ftp.funet.fi                                pub/Linux
    tsx-11.mit.edu                              pub/linux
    sunsite.unc.edu                             pub/Linux

End of Linux-Misc Digest
******************************

Reply via email to