Download debs of installed packages
Hi, How do I download the .debs of packages already installed in my system without having to reinstall them first via apt? The command I'm using right now is: apt-get --yes --reinstall install `cat package_list.txt` where package_list.txt contains the package names per line. TIA -- Rage Callao Free Software :: empower :: educate -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: new Etch install fails to boot
On 07/29/2007 04:43 PM, Steve Kleene wrote: I just made a fresh Etch Netinst CD and successfully completed an install on a PC that I bought six years ago. When I try to boot, this is as far as it gets: Verifying DMI Pool Data .. GRUB Loading stage1.5. Read It may or may not be relevant to mention an issue I had in the past with this box. I used to run Red Hat on it but with a Windows partition at the start of the disk. During the Red Hat installation, I had to select "Force LBA32" or it wouldn't find the Linux boot partition. Now, though, I have given the whole disk to Etch, so I'd be surprised if this is the issue. There are just two partitions: IDE5 master (hde) - 41.2 GB IC35L040AVER07-0 #1 primary 39.9 GB B f ext3 / #5 logical1.5 GB f swap swap The BIOS (AWARD 1998 / PCI/PNP 686 / 276079428) shows: IDE Primary Master Auto (other choices are None, Manual) Access Mode Auto (other choices are Normal, LBA, Large) I've tried various combinations, including LBA, to no avail. The hard drives are IBM Deskstar 40-GB IDE hard drives, model IC35L040AVER07-0. Any ideas how to fix this? Thanks. Older BIOSes have restrictions on where the Linux kernel and other boot files must be located. LBA32 should be able to get past these restrictions, but in your case it might not be working. If you can, try to get the boot files placed before the 1024th cylinder boundary. Sometimes this is at 0.5GB, 2.1GB or 8GB. Try a partition layout like so: /boot (primary #1, 2.1GB) / (primary #2, 37.8GB) swap (logical #5, 1.5GB) /boot must be the first partition, and try to keep all of it below the 1024th cylinder. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about Adobe Acrobat....
On Sun, 2007-29-07 at 15:12 -0500, Mumia W.. wrote: > On 07/29/2007 02:20 PM, Kelly Clowers wrote: > > > > The next version of Evince, due this fall, will also support form filling. > > > > Can anyone point me to example of PDFs that have fillable forms? I just > want to play with the various form-filling features in OO.o, Evince, > pdftk and the others. There are a few at http://www.rto.gov.bc.ca/ Click the forms & fee's link. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: new Etch install fails to boot
On Sun, Jul 29, 2007 at 11:00:30PM -0400, Steve Kleene wrote: > [I wrote that my fresh Etch install calls grub and then stops.] What happens if you reboot the installer in rescue mode and tell it to install grub again? Does the box have a floppy and do you have a grub-disk (I've never made a grub-stick)? Will that get you to a grub command line? Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Fonts -
On Sun, Jul 29, 2007 at 11:04:23PM -0400, Rick wrote: > On Sunday 29 July 2007 10:56:41 pm Douglas Allan Tutty wrote: > > On Sun, Jul 29, 2007 at 10:27:27PM -0400, Rick wrote: > > > Wonder, if there are any good mono-fonts for debian, > > > that I can install extra. > > > > What is a mono-font? > > fonts characters that are equally space apart from each other, and with the > same height.. > Oh, monospaced (not monochrome or monoline [as from a plotter] ). What about those in the dejavu?? package, or in gsfonts-x11. Terminus? Courier? Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Fonts -
Hi Rick. Rick, 30.07.2007 04:27: > Wonder, if there are any good mono-fonts for debian, > that I can install extra. Just search the web for a font you like. As long as they are in the usual TrueType format, you can just drop them into /usr/local/share/fonts/truetype. My all time favorites are Monaco and Lucida Console. Regards, Mathias -- debian/rules signature.asc Description: OpenPGP digital signature
Re: Fonts -
On Sunday 29 July 2007 10:56:41 pm Douglas Allan Tutty wrote: > On Sun, Jul 29, 2007 at 10:27:27PM -0400, Rick wrote: > > Wonder, if there are any good mono-fonts for debian, > > that I can install extra. > > What is a mono-font? > > Doug. fonts characters that are equally space apart from each other, and with the same height.. Richard -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about Adobe Acrobat....
On 07/29/2007 02:20 PM, Kelly Clowers wrote: The next version of Evince, due this fall, will also support form filling. Can anyone point me to example of PDFs that have fillable forms? I just want to play with the various form-filling features in OO.o, Evince, pdftk and the others. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: new Etch install fails to boot
[I wrote that my fresh Etch install calls grub and then stops.] On Mon, 30 Jul 2007 07:56:04 +0530, [EMAIL PROTECTED] replied: > Sometimes older bios has a virus protection enabled in the bios itself. > This does not allow anything to be written to the MBR to protect MBR > viruses. ... Can you check your bios once again and try disabling the > virus protection (re-enable it later once things are working) > and re-install the grub and check ? Thanks for a good suggestion. However, my BIOS already has "Virus Warning" set to "Disabled". This feature is described as follows: "Allows you to choose the VIRUS warning feature for IDE Hard Disk boot sector protection. If this function is enabled and someone attempts to write data into this area, BIOS will show a warning message on screen and alarm beep." Since this is already set to "Disabled", and since I didn't see a warning message, I'm not sure that this can account for the problem. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
pidgin problem
Dear all, I am using unstable brench. Today I did an "apt-get update; apt-get upgrade; reboot", then my pidgin can not response to keyboard at all. I can not key in anything, but my mouse works well (click, and paste text by right-click menu). And all other programs (firefox, and so on) have no problems. Thanks. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Fonts -
On Sun, Jul 29, 2007 at 10:27:27PM -0400, Rick wrote: > Wonder, if there are any good mono-fonts for debian, > that I can install extra. What is a mono-font? Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?
On Sun, Jul 29, 2007 at 10:42:29PM -0400, Celejar wrote: > On Sun, 29 Jul 2007 20:11:43 -0400 > Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > > > On Sun, Jul 29, 2007 at 03:32:44PM -0400, Celejar wrote: > > > > > I have issues similar to Doug's, and I have also wondered whether > > > kernel based traffic shaping is what I need. Since we both use > > > shorewall, which has an interface to the kernel's shaping capabilities, > > > I suppose we ought to read shorewall-doc/html/traffic_shaping.htm > > > > > > > As expected, shorewall can't help in this regard. > > Why not? > At best, it can duplicate wondershaper. However, its designed for high-speed internet access. Its hysteresis is larger than my dialup bandwidth. The big issue is that none of the available shaping methods work by throttling outgoing requests for a chunck of incoming data. They are intended to limit the rate of outbound data. What we need is a multi-protocol proxy server that does proper throttling of download requests. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Ok, one problem solved. Now another.
On 2007-07-29T21:20:37-0500, Brad B wrote: > I managed to get the errors mentioned in my last message to cease by > switching from my PCI to onboard video cards, but now X won't start. It > says it can't detect my screen, even though it seems to be correctly > configured to my onboard card when i view the data in xorg.conf. Anyone have > some input on why this is happening? Do you have the ability to post your xorg.conf, and the Xorg.log file somewhere? If not at least show us monitor, device, screen, and screenlayout sections, as well as the part of the log file showing the error. My wild guess is that your screenlayout points to the old graphics card. /Allan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?
On Sun, 29 Jul 2007 20:11:43 -0400 Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > On Sun, Jul 29, 2007 at 03:32:44PM -0400, Celejar wrote: > > > I have issues similar to Doug's, and I have also wondered whether > > kernel based traffic shaping is what I need. Since we both use > > shorewall, which has an interface to the kernel's shaping capabilities, > > I suppose we ought to read shorewall-doc/html/traffic_shaping.htm > > > > As expected, shorewall can't help in this regard. Why not? > Doug. Celejar -- mailmin.sourceforge.net - remote access via secure (OpenPGP) email ssuds.sourceforge.net - A Simple Sudoku Solver and Generator -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Fonts -
Wonder, if there are any good mono-fonts for debian, that I can install extra. Thanks - Richard -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: new Etch install fails to boot
Hi, Sometimes older bios has a virus protection enabled in the bios itself. This does not allow anything to be written to the MBR to protect MBR viruses. I have faced this problem whereby the MBR gets cooked and the GRUB does not get written properly. Looking at your information it looks like grub is not able to proceed. Can you check your bios once again and try disabling the virus protection (re-enable it later once things are working) and re-install the grub and check ? On Sun, 2007-07-29 at 17:43 -0400, Steve Kleene wrote: > I just made a fresh Etch Netinst CD and successfully completed an install on > a PC that I bought six years ago. When I try to boot, this is as far as it > gets: > > Verifying DMI Pool Data .. > GRUB Loading stage1.5. > Read > > It may or may not be relevant to mention an issue I had in the past with this > box. I used to run Red Hat on it but with a Windows partition at the start > of the disk. During the Red Hat installation, I had to select "Force LBA32" > or it wouldn't find the Linux boot partition. > > Now, though, I have given the whole disk to Etch, so I'd be surprised if this > is the issue. There are just two partitions: > > IDE5 master (hde) - 41.2 GB IC35L040AVER07-0 > #1 primary 39.9 GB B f ext3 / > #5 logical1.5 GB f swap swap > > The BIOS (AWARD 1998 / PCI/PNP 686 / 276079428) shows: > IDE Primary Master Auto (other choices are None, Manual) > Access Mode Auto (other choices are Normal, LBA, Large) > > I've tried various combinations, including LBA, to no avail. The hard drives > are IBM Deskstar 40-GB IDE hard drives, model IC35L040AVER07-0. > > Any ideas how to fix this? Thanks. > > -- Bhasker C V Registered Linux user: #306349 (counter.li.org) The box said "Requires Windows 95, NT, or better", so I installed Linux. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Ok, one problem solved. Now another.
I managed to get the errors mentioned in my last message to cease by switching from my PCI to onboard video cards, but now X won't start. It says it can't detect my screen, even though it seems to be correctly configured to my onboard card when i view the data in xorg.conf. Anyone have some input on why this is happening?
Re: Lost /home partition
On 30/07/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > On Mon, Jul 30, 2007 at 04:04:29AM +0300, Dotan Cohen wrote: > > The disk simply was not mounted! I've now mounted it, and I'm backing > > it up. Reading up on rsync, as well. Sorry for the false alarm... > > > > df is your friend. > > Once you have it backed up, compare it with your previous backup. It is > possible that some files may be missing. > > Doug. > Thanks, Doug. That last backup is way out of date, so it would not be an accurate check. But I will go through it and check for missing files. Thanks. Dotan Cohen http://lyricslist.com/ http://what-is-what.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
On Mon, Jul 30, 2007 at 04:04:29AM +0300, Dotan Cohen wrote: > The disk simply was not mounted! I've now mounted it, and I'm backing > it up. Reading up on rsync, as well. Sorry for the false alarm... > df is your friend. Once you have it backed up, compare it with your previous backup. It is possible that some files may be missing. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
The disk simply was not mounted! I've now mounted it, and I'm backing it up. Reading up on rsync, as well. Sorry for the false alarm... Dotan Cohen http://lyricslist.com/ http://what-is-what.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: [solved] Re: Problems with text file going from Linux to MS Windows
On Sun, 22 Jul 2007 12:19:17 +1000, Andy Goss wrote: > Rodolfo Medina <[EMAIL PROTECTED]> writes: > >>> If I want to send a text file to an MS Windows user there are problems: in >>> fact, in MS Windows a text file which has been composed under Linux is not >>> correctly read: the line ends are not recognised. >>> Can anybody suggest some solution to this problem? Use MS-DOS-file format, if you want to share text files between Linux and Windoze. As most have pointed out, most Linux text editors can recognize and use the MS-DOS-file format files. I'll add emacs to the list. >>> The remedy is to cut the text >>> and paste it into an MS Word file, then cut it again and re-paste it into >>> the >>> text file, which is not so good because this way I need rebooting every time >>> into the Windows partition. That's too much troublesome. Use unix2dos (/usr/bin/unix2dos) and dos2unix (/usr/local/bin/dos2unix) to convert file formats between Unix & Dos. The unix2dos & dos2unix is from the tofrodos package. HTH -- Tong (remove underscore(s) to reply) http://xpt.sourceforge.net/techdocs/ http://xpt.sourceforge.net/tools/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?
On Sun, Jul 29, 2007 at 03:32:44PM -0400, Celejar wrote: > I have issues similar to Doug's, and I have also wondered whether > kernel based traffic shaping is what I need. Since we both use > shorewall, which has an interface to the kernel's shaping capabilities, > I suppose we ought to read shorewall-doc/html/traffic_shaping.htm > As expected, shorewall can't help in this regard. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
On Mon, 30 Jul 2007, Dotan Cohen wrote: On 30/07/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: On Mon, Jul 30, 2007 at 02:05:38AM +0300, Dotan Cohen wrote: In a Debian-based distro (Ubuntu) I have had a corruption of my /home partition, which resides on sda4 of my Dell Inspiron laptop. Not knowing what to do, and with no way to boot and google the situation, I played Y, Y, Y to all fsck's questions. Now, /home is empty. I do have a backup from 4 weeks ago, as I backup the first of every month, but I have done quite a bit of work this past month. I'm very interested in recovering the data. A corrupted /home should not keep you from booting. You may need to go single-user or init=/bin/sh but it should boot. Probably should have backed up more recently. It sounds like you made things worse with the YYY. Good luck. Doug. Maybe something additional was corrupted, bu I only remember seeing references to sda4, which is /home. Any idea how to get the data back? Dotan Cohen Hi Dotan, So, when you boot up and get a prompt, I take it that /home is indeed being mounted? If so, one thing you might want to do, is look in /home/lost+found , in there you might be able to find your files, but they won't be named the same though. If they are there, they will be named numerically.. -+- 8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
On Mon, 30 Jul 2007, Dotan Cohen wrote: In a Debian-based distro (Ubuntu) I have had a corruption of my /home partition, which resides on sda4 of my Dell Inspiron laptop. Not knowing what to do, and with no way to boot and google the situation, I played Y, Y, Y to all fsck's questions. Now, /home is empty. I do have a backup from 4 weeks ago, as I backup the first of every month, but I have done quite a bit of work this past month. I'm very interested in recovering the data. More info: This is a Dell Inspiron machine, 2.0GHz dual-core Intel processor, 2GB RAM, 80GB 7000RPM hard drive, ATI X1400 video. The disk is partitioned with sda1: 15GB /; sda2: 15 GB blank (Fedora was to go here) ; sda3: 3GB swap ; sda4: ~47 GB /home. I set these partitions a few months ago when I last installed Ubuntu. I had begun install of Fedora 7 when the machine crashed- I didn't get to the real install part. Upon rebooting (into Ubuntu), it complained something about inodes. I gave it the root paassword (yes, I had previously set a root password) and ran fsck (or something else resembling a rather unacceptable work, appropriate name by the way). A few Y, Y, Y's later I could boot the system. However, as soon as I logged into KDE I was returned to the login screen. I CTRL-ALT-F4ed into a terminal and logged in as root. I then cd'ed into /home, and ls showed that there was nothing there. I immediatly ran shutdown -h and now that I'm home I'm writing from the wife's desktop. Any help in recovering the /home/user directory, or even specific files therein, whould be very much appreciated. Thank you in advance. Dotan Cohen http://lyricslist.com/ http://what-is-what.com/ Hi Dotan, So, when you boot up and get a prompt, I take it that /home is indeed being mounted? If so, one thing you might want to do, is look in /home/lost+found , in there you might be able to find your files, but they won't be named the same though. If they are there, they will be named numerically.. -+- 8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
Dotan Cohen wrote: > Now, /home is empty. Look in /home/lost+found. -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
On Mon, Jul 30, 2007 at 02:34:55AM +0300, Dotan Cohen wrote: > On 30/07/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > > On Mon, Jul 30, 2007 at 02:05:38AM +0300, Dotan Cohen wrote: > > > In a Debian-based distro (Ubuntu) I have had a corruption of my /home > > > partition, which resides on sda4 of my Dell Inspiron laptop. Not > > > knowing what to do, and with no way to boot and google the situation, > > > I played Y, Y, Y to all fsck's questions. Now, /home is empty. I do > > > have a backup from 4 weeks ago, as I backup the first of every month, > > > but I have done quite a bit of work this past month. I'm very > > > interested in recovering the data. > > > > A corrupted /home should not keep you from booting. You may need to go > > single-user or init=/bin/sh but it should boot. > Maybe something additional was corrupted, bu I only remember seeing > references to sda4, which is /home. Any idea how to get the data back? > Undeletion in *NIX is either very difficult, expensive, or impossible. Unless you got lucky and they ended up in lost+found only slightly mangled. If you want to try recovery, unmount sda4 and remove it from fstab. With it mounted, things change. Then aptitude search ~drecover and look at some tools. Try something like foremost or magicrescue. Read the documentation, follow the instructions, and only mount the partition again if it says to. Often such tools work by reading the block device itself, bypassing the filesystem. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
On Mon, Jul 30, 2007 at 02:34:55AM +0300, Dotan Cohen wrote: > Maybe something additional was corrupted, bu I only remember seeing > references to sda4, which is /home. Any idea how to get the data back? It may have been placed in /home/lost+found named after its inode number, i.e. filenames that are all numbers. Failing that, no, probably not. If they are text files you may be able to unmount the device and grep the raw device file for known text in the files, e.g. # less /dev/sda4 '/' to search for text -- http://bitfolk.com/ -- No-nonsense VPS hosting Encrypted mail welcome - keyid 0x604DE5DB signature.asc Description: Digital signature
Re: Lost /home partition
On 30/07/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > On Mon, Jul 30, 2007 at 02:05:38AM +0300, Dotan Cohen wrote: > > In a Debian-based distro (Ubuntu) I have had a corruption of my /home > > partition, which resides on sda4 of my Dell Inspiron laptop. Not > > knowing what to do, and with no way to boot and google the situation, > > I played Y, Y, Y to all fsck's questions. Now, /home is empty. I do > > have a backup from 4 weeks ago, as I backup the first of every month, > > but I have done quite a bit of work this past month. I'm very > > interested in recovering the data. > > A corrupted /home should not keep you from booting. You may need to go > single-user or init=/bin/sh but it should boot. > > Probably should have backed up more recently. It sounds like you made > things worse with the YYY. > > Good luck. > > Doug. > Maybe something additional was corrupted, bu I only remember seeing references to sda4, which is /home. Any idea how to get the data back? Dotan Cohen http://lyricslist.com/ http://what-is-what.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Lost /home partition
On Mon, Jul 30, 2007 at 02:05:38AM +0300, Dotan Cohen wrote: > In a Debian-based distro (Ubuntu) I have had a corruption of my /home > partition, which resides on sda4 of my Dell Inspiron laptop. Not > knowing what to do, and with no way to boot and google the situation, > I played Y, Y, Y to all fsck's questions. Now, /home is empty. I do > have a backup from 4 weeks ago, as I backup the first of every month, > but I have done quite a bit of work this past month. I'm very > interested in recovering the data. A corrupted /home should not keep you from booting. You may need to go single-user or init=/bin/sh but it should boot. Probably should have backed up more recently. It sounds like you made things worse with the YYY. Good luck. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Lost /home partition
In a Debian-based distro (Ubuntu) I have had a corruption of my /home partition, which resides on sda4 of my Dell Inspiron laptop. Not knowing what to do, and with no way to boot and google the situation, I played Y, Y, Y to all fsck's questions. Now, /home is empty. I do have a backup from 4 weeks ago, as I backup the first of every month, but I have done quite a bit of work this past month. I'm very interested in recovering the data. More info: This is a Dell Inspiron machine, 2.0GHz dual-core Intel processor, 2GB RAM, 80GB 7000RPM hard drive, ATI X1400 video. The disk is partitioned with sda1: 15GB /; sda2: 15 GB blank (Fedora was to go here) ; sda3: 3GB swap ; sda4: ~47 GB /home. I set these partitions a few months ago when I last installed Ubuntu. I had begun install of Fedora 7 when the machine crashed- I didn't get to the real install part. Upon rebooting (into Ubuntu), it complained something about inodes. I gave it the root paassword (yes, I had previously set a root password) and ran fsck (or something else resembling a rather unacceptable work, appropriate name by the way). A few Y, Y, Y's later I could boot the system. However, as soon as I logged into KDE I was returned to the login screen. I CTRL-ALT-F4ed into a terminal and logged in as root. I then cd'ed into /home, and ls showed that there was nothing there. I immediatly ran shutdown -h and now that I'm home I'm writing from the wife's desktop. Any help in recovering the /home/user directory, or even specific files therein, whould be very much appreciated. Thank you in advance. Dotan Cohen http://lyricslist.com/ http://what-is-what.com/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: poll: use of kernel schedulers?
Andrei Popescu wrote: On Sun, Jul 29, 2007 at 11:00:30PM +0300, Andrei Popescu wrote: On Sun, Jul 29, 2007 at 08:18:57AM -0500, Hugo Vanwoerkom wrote: I am currently running Debian's: [EMAIL PROTECTED]:~$ uname -a Linux debian 2.6.22-1-k7 #1 SMP PREEMPT Sun Jul 29 07:39:18 CDT 2007 i686 ^^^ Is this because of the -ck patch? I mean the 'PREEMPT' (if there are troubles with the alignement). I follow the Debian guide to recompiling its 2.6.22-1-k7 completely, except, I apply 2.6.22-ck1, apply debian-logo patch and change these configs: Preemption Model (Preemptible Kernel (Low-Latency Desktop)) [*] Debian GNU/Linux Open Use logo [*] Show timing information on printks Hugo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: RAD tool for debian?
On Fri, 06 Jul 2007 15:50:45 -0500, will trillich wrote: > RAD/rapid-application-development tool sought... (web page forms > interface to a database we define) "RAD tool for debian"? I think the subject needs to be fixed, 'cause when talking about RAD tool, you would definitely want that it is not limited within Debian. Nahh, just kidding... > i've got a friend who's trying to get a license-free solution that'll > provide an html/web front-end to a database... similar to ms access, > but we're seeking 1) no licensing fees 2) an html interface, not a > proprietary interface. we're NOT looking for a cms like joomla, but > rather an engine for presenting forms to interact with a back-end > database. IMHO, for such requirement, no tools fit better than symfony. http://xpt.sourceforge.net/techdocs/language/php/symfony/sf01-SymfonyGeneral/ar01s02.html#_What_is_symfony_ Extract: It is based on the following concepts: * compatible with as many environments as possible * easy to install and configure * simple to learn * enterprise ready * convention rather than configuration, supporting fallback calls * simple in most cases, but still flexible enough to adapt to complex cases * most common web features included * compliant with most of the web "best practices" and web "design patterns" * very readable code with easy maintenance * open source FYI, Symfony uses some code fragments of other open source projects: * Creole, for the database abstraction layer * Propel, for the object-relational mapping layer * Mojavi, for the Model-View-Controller model layer On seeing that, I told myself, "boy! That's it, That's what I want!" And it turned out that I made the right choice -- all you need to do is to describe your database schema in .xml file, or better a more human-readable, more easy .yml format. That's it! Put it this way, you only need to focus on the logical of your database design, ie, the schema, and describe it in a format much obvious and more human-readable than .xml, then Symfony takes care of the rest!!! "for presenting forms to interact with a back-end database" I bet I could finish all your preliminary requirements and give you such presenting forms within a day or even half a day! And definitely, Symfony does not simply ends there. Need to build a blog? Want AJAX support? How about drag and drop (shopping cart)? ... Your limit is only your imagination. Check it out: http://xpt.sourceforge.net/techdocs/language/php/symfony/ http://xpt.sourceforge.net/techdocs/language/php/symfony/sf01-SymfonyGeneral/index.html#_symfony -- Tong (remove underscore(s) to reply) http://xpt.sourceforge.net/techdocs/ http://xpt.sourceforge.net/tools/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
new Etch install fails to boot
I just made a fresh Etch Netinst CD and successfully completed an install on a PC that I bought six years ago. When I try to boot, this is as far as it gets: Verifying DMI Pool Data .. GRUB Loading stage1.5. Read It may or may not be relevant to mention an issue I had in the past with this box. I used to run Red Hat on it but with a Windows partition at the start of the disk. During the Red Hat installation, I had to select "Force LBA32" or it wouldn't find the Linux boot partition. Now, though, I have given the whole disk to Etch, so I'd be surprised if this is the issue. There are just two partitions: IDE5 master (hde) - 41.2 GB IC35L040AVER07-0 #1 primary 39.9 GB B f ext3 / #5 logical1.5 GB f swap swap The BIOS (AWARD 1998 / PCI/PNP 686 / 276079428) shows: IDE Primary Master Auto (other choices are None, Manual) Access Mode Auto (other choices are Normal, LBA, Large) I've tried various combinations, including LBA, to no avail. The hard drives are IBM Deskstar 40-GB IDE hard drives, model IC35L040AVER07-0. Any ideas how to fix this? Thanks. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Unable to handle Kernel paging request
Hey, thanks for the reply. I have two harddrives; one is never in the computer, and was blank. I bought it awhile ago and meant to put debian on it then, but never did. The other one has Windows XP on it, and it isn't in the computer right now. So put simply, I only have one computer, and the only HD in it right now is a linux hard drive. --Brad On 7/29/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > > On Sun, Jul 29, 2007 at 03:56:26PM -0500, Brad B wrote: > > I recently did the network installation of Debian to a spare HD, and > tried > > running it by itself in my PC, which usually runs windows. It boots into > > grub, but I get serveral different error messages at different times. > I'm > > never able to load the kernel, I believe. Here're the most common > errors: > > Unable to handle kernal paging request > > Kernal Panic -- Not Syncing > > Are you saying that you installed with the drive in one computer but are > trying to boot it in another computer? My guess is that the two > different computers would need different initramfs. > > Since I've never run into this, I've never had to fitz with initramfs; > just a pointer. > > Doug. > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] > with a subject of "unsubscribe". Trouble? Contact > [EMAIL PROTECTED] > >
Re: dumb question about Adobe Acrobat....
On Sun July 29 2007 13:14, Douglas Allan Tutty wrote: > On Sun, Jul 29, 2007 at 12:32:18PM -0700, Alan Ianson wrote: > > > The next version of Evince, due this fall, will also support form > > > filling. > > > > That is such good news.. exactly what I have been hoping to read.. I've > > been looking for a way to fill in pdf forms for an amd64 box I have > > here. > > I have been under the impression that evince and kpdf use xpdf behind > the scenes. Does this mean that xpdf will be able to do this too, or > are evince (and perhaps kpdf) more functional than xpdf? I'm not certain, I don't use pdf's often. I need to fill in forms in pdf files and print them at work quite regularly but aside from that I never use/see them. Once one of them can do it I'm sure the code will make the rounds (in a gpl compliant way, of course) and it won't be long until the others can do it to. I recently installed debian at work and struggled to get the printer and these pdf issues working so that is why I'm so glad to see we will have an easy way to edit forms in pdf's. :) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Unable to handle Kernel paging request
On Sun, Jul 29, 2007 at 03:56:26PM -0500, Brad B wrote: > I recently did the network installation of Debian to a spare HD, and tried > running it by itself in my PC, which usually runs windows. It boots into > grub, but I get serveral different error messages at different times. I'm > never able to load the kernel, I believe. Here're the most common errors: > Unable to handle kernal paging request > Kernal Panic -- Not Syncing Are you saying that you installed with the drive in one computer but are trying to boot it in another computer? My guess is that the two different computers would need different initramfs. Since I've never run into this, I've never had to fitz with initramfs; just a pointer. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?\
On Sun, Jul 29, 2007 at 01:54:36PM -0700, Mike Bird wrote: > Traffic "shaping" usually applies to output. "Policing"[0] usually applies > to input. Since we often can't shape on the router transmitting data to > us, in such cases we instead have to police on the receiving end and rely > on the sender's TCP flow control to reduce rates to the point where > packets aren't lost. This doesn't work for UDP and ICMP and works poorly > for varying loads. Right, but downloads happen by blocks. Couldn't something sit somewhere on the data stream and delay the requests for the net ftp or rsync block if there's an active http transfer in progress? In other words, controll the download bandwidth by throttling the rate of upbound requests. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Unable to handle Kernel paging request
Hey, I recently did the network installation of Debian to a spare HD, and tried running it by itself in my PC, which usually runs windows. It boots into grub, but I get serveral different error messages at different times. I'm never able to load the kernel, I believe. Here're the most common errors: Unable to handle kernal paging request Kernal Panic -- Not Syncing And another which only consists of addresses. I've tried modifying grub.conf to try and find the kernel, but that didn't help. Here're the specs on my system: 80GB Maxtor HD (With debian netinst'd on it) 1GB RAM Intel Celeron Processer, 2.7 ghz nVidia 6200 video card One CD-RW drive, one DVD-ROM drive If you think you'd be up to it, you could also give me a call by phone to help. (251)-978-1092 I'd like it if anyone pretty experienced with Debian could help me. --Brad
Re: how to set network io priority for a process?
On Sunday 29 July 2007 13:11, Douglas Allan Tutty wrote: > On Sun, Jul 29, 2007 at 03:32:44PM -0400, Celejar wrote: > > I have issues similar to Doug's, and I have also wondered whether > > kernel based traffic shaping is what I need. Since we both use > > shorewall, which has an interface to the kernel's shaping capabilities, > > I suppose we ought to read shorewall-doc/html/traffic_shaping.htm > > That's what I'm about to do. I've only recently (within the past hour > or two) determined that traffic shaping is what I'm trying to do. This is not a solution, just a tip to guide your research. Traffic "shaping" usually applies to output. "Policing"[0] usually applies to input. Since we often can't shape on the router transmitting data to us, in such cases we instead have to police on the receiving end and rely on the sender's TCP flow control to reduce rates to the point where packets aren't lost. This doesn't work for UDP and ICMP and works poorly for varying loads. --Mike Bird [0] http://www.cisco.com/warp/public/105/policevsshape.html#policingvsshaping -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: poll: use of kernel schedulers?
On Sun, Jul 29, 2007 at 11:00:30PM +0300, Andrei Popescu wrote: > On Sun, Jul 29, 2007 at 08:18:57AM -0500, Hugo Vanwoerkom wrote: > > > I am currently running Debian's: > > [EMAIL PROTECTED]:~$ uname -a > > Linux debian 2.6.22-1-k7 #1 SMP PREEMPT Sun Jul 29 07:39:18 CDT 2007 i686 > ^^^ > Is this because of the -ck patch? I mean the 'PREEMPT' (if there are troubles with the alignement). Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) pgpf3Mvh3h6FH.pgp Description: PGP signature
Re: dumb question about Adobe Acrobat....
On Sun, 29 Jul 2007 12:20:55 -0700 "Kelly Clowers" <[EMAIL PROTECTED]> wrote: Hello Kelly, > The next version of Evince, due this fall, will also support form > filling. More choice; I love it. :-) -- Regards _ / ) "The blindingly obvious is / _)radnever immediately apparent" Walking through town is quite scary I Predict A Riot - Kaiser Chiefs signature.asc Description: PGP signature
Re: IM on a home debian network
On Sun, Jul 29, 2007 at 04:22:23PM -0400, Douglas Allan Tutty wrote: > > > There was a time when I had Ctrl-Alt-UP set in inittab to open a new vt. > > > > Never heard of 'screen'? > > > > I have heard of it, but it relies, like so many other gnu tools, on the > operator (me) having either a good memory or a cheat-sheet for > keystrokes. I have a poor memory (learning disability) and a > cheat-sheet makes using it very slow. Whereas, Ctrl-Alt-UP is simple. The keybindings are configurable. Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) pgpqeMTxsEFEm.pgp Description: PGP signature
Re: dumb question about Adobe Acrobat....
On 7/29/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > On Sun, Jul 29, 2007 at 12:32:18PM -0700, Alan Ianson wrote: > > > > > The next version of Evince, due this fall, will also support form filling. > > > > That is such good news.. exactly what I have been hoping to read.. I've > > been looking for a way to fill in pdf forms for an amd64 box I have > > here. > > > > I have been under the impression that evince and kpdf use xpdf behind > the scenes. Does this mean that xpdf will be able to do this too, or > are evince (and perhaps kpdf) more functional than xpdf? Evince uses poppler, which was forked from xpdf quite some time ago. Kpdf upstream uses xpdf, but some distros hacked it to use poppler (I'm not sure if Debian did or not). I believe xpdf development is mostly dead. Okular, the KDE 4 universal viewer, will use poppler for pdfs. Cheers, Kelly -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: IM on a home debian network
On Sun, Jul 29, 2007 at 10:54:34PM +0300, Andrei Popescu wrote: > On Sat, Jul 28, 2007 at 11:30:05PM -0400, Douglas Allan Tutty wrote: > > > and leave this VC 1 open. VC 2 is ssh'd to the box and either mutt or > > $watch -n 20 "from -c" > > > > VC 3 is for net-related curses stuff (currently a wget session). > > VC 4 is where I type startx when I need to. > > > > There was a time when I had Ctrl-Alt-UP set in inittab to open a new vt. > > Never heard of 'screen'? > I have heard of it, but it relies, like so many other gnu tools, on the operator (me) having either a good memory or a cheat-sheet for keystrokes. I have a poor memory (learning disability) and a cheat-sheet makes using it very slow. Whereas, Ctrl-Alt-UP is simple. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: curses-interface ftp client with resume?
On Sun, Jul 29, 2007 at 10:51:14PM +0300, Andrei Popescu wrote: > On Sat, Jul 28, 2007 at 09:44:28PM -0400, Douglas Allan Tutty wrote: > > I'm on dialup and often access the internet via a slow computer by > > sshing into my fast computer (which has the modem). > > > > Right now, if I want to download something like an iso file via ftp > > (there being no rsync mirror available), I put the url in a file, e.g. > > No torrents either? No. For my current download, I found a mirror that also offers rsync (although it doesn't advertise it). However, lots of things are available via FTP that aren't available any other way. > > 3. It would be nice to have a curses interface like mc that lets me > > browse to the correct file, then tag the file for downloading which puts > > it into the above queue. > > AFAIK mc can do ftp. I didn't use it much, but it might do most of what > you need. mc can't resume; it only wants to overwrite, append, or cancel. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
On Sun, Jul 29, 2007 at 12:44:56PM -0700, Jeff D wrote: > On that note, one thing that you might want to consider as part of the > hardening process is to install aide or some other file integrity checker. > Using something like that greatly helps in detecting and identifying issues > such as this. I use samhain. However, since a compromised system can't reliably check for an intrusion, I use it as a check agains JFS. Since JFS doesn't journal data (just meta-data), it is possible that after a power failure, a file may be missing. Samhain would detect this. For security, you should have the samhain on a live-CD or something with the checksums stored on a CD or USB stick. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about Adobe Acrobat....
On Sun, Jul 29, 2007 at 12:32:18PM -0700, Alan Ianson wrote: > > > The next version of Evince, due this fall, will also support form filling. > > That is such good news.. exactly what I have been hoping to read.. I've > been looking for a way to fill in pdf forms for an amd64 box I have > here. > I have been under the impression that evince and kpdf use xpdf behind the scenes. Does this mean that xpdf will be able to do this too, or are evince (and perhaps kpdf) more functional than xpdf? Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: utf8 Problems
On 7/28/07, Bernhard Kuemel <[EMAIL PROTECTED]> wrote: > Hi debian-user! > > I converted to utf8 in the hope that my non ASCII character problems > would disappear. They are now ... different. > > I used utf8migrationtool and locale now says: > > [EMAIL PROTECTED]:~$ locale > LANG=en_US.UTF-8 > I wanted to print a German text containing umlauts from a web page. > I marked it in iceweasel and pasted it into a 'konsole' running bash > running 'cat >x'. 'lpr x' printed only a page with the character 'K'. > > 'hexdump -C x' says: > > 0010 20 20 20 20 20 20 4b fc 6e 64 69 67 75 6e 67 73 | > K.ndigungs| > 0020 62 65 73 63 68 72 e4 6e 6b 75 6e 67 65 6e 0a 0a > |beschr.nkungen..| > > so ü is 0xfc, ä is 0xf4, and the characters are printed as > periods '.'. > > mc's viewer says: > > 0010 20 20 20 20 20 20 4B FC 6E 64 69 67 75 6E 67 73 > Kündigungs > 0020 62 65 73 63 68 72 E4 6E 6B 75 6E 67 65 6E 0A 0A > beschränkungen.. > > Here ü is still only the single byte 0xFC, but it gets printed > as 'A' with a tilde and a '1/4' character. ä is again 0xE4 but > printed as 'A' with a tilde and a circle with 4 short lines > extending from the circle diagonally. > > Opening x in openoffice writer shows rhombuses with question marks > for each umlaut. > > Opening x.html in openoffice writer I was unable to remove all the > table etc. stuff and so was unable to reformat the text so it would > fit on one page. Hmm, it might work, if I copied the text from there > into a new document. But here I want to solve the locale problems, > or what should I call the problem? I think this has to do with the use of HTML entities (ä) instead of actual UTF-8 characters. An additional possible issue is that the web page may not be UTF-8. When I want to fix up an html page before printing it, I use a WYSIWYG html editor (I use vim when writing my own html). SeaMonkey Composer / Nvu / KompoZer (which are basically all the same program in different forms) have worked well for me. > mc (midnight commander, a norton commander clone) of course goes > crazy again, but I was not surprised and accepted that it prints 'a' > with '^' instead of line art, etc. More serious was that when I > 'ssh'ed to a different computer (not sure which) it got confused > about which line it was on and I messed up editing /etc/fstab. > > man gets quote characters wrong, printing 'a' with '^' instead and > so does gcc. > > I also have problems with kvirc. IIRC I can get it to display > iso8859-1 correctly, but not utf8, and the smart utf8/iso8859-1 mode > does not work. I chat with users who use iso8859-1 and utf8. This sounds more like a real locale problem. Have you tried running "dpkg-reconfigure locales"? That can fix some locale problems. Cheers, Kelly
Re: how to set network io priority for a process?
On Sun, Jul 29, 2007 at 03:32:44PM -0400, Celejar wrote: > I have issues similar to Doug's, and I have also wondered whether > kernel based traffic shaping is what I need. Since we both use > shorewall, which has an interface to the kernel's shaping capabilities, > I suppose we ought to read shorewall-doc/html/traffic_shaping.htm > That's what I'm about to do. I've only recently (within the past hour or two) determined that traffic shaping is what I'm trying to do. Ideally, I would just set ftp and rync to second priority and let everything else be normal. I'll keep the list posted. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: poll: use of kernel schedulers?
On Sun, Jul 29, 2007 at 08:18:57AM -0500, Hugo Vanwoerkom wrote: > I am currently running Debian's: > [EMAIL PROTECTED]:~$ uname -a > Linux debian 2.6.22-1-k7 #1 SMP PREEMPT Sun Jul 29 07:39:18 CDT 2007 i686 ^^^ Is this because of the -ck patch? To answer your question, no, I generally use only stock Debian kernels. Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) signature.asc Description: Digital signature
Re: IM on a home debian network
On Sat, Jul 28, 2007 at 11:30:05PM -0400, Douglas Allan Tutty wrote: > and leave this VC 1 open. VC 2 is ssh'd to the box and either mutt or > $watch -n 20 "from -c" > > VC 3 is for net-related curses stuff (currently a wget session). > VC 4 is where I type startx when I need to. > > There was a time when I had Ctrl-Alt-UP set in inittab to open a new vt. Never heard of 'screen'? Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) signature.asc Description: Digital signature
Re: curses-interface ftp client with resume?
On Sat, Jul 28, 2007 at 09:44:28PM -0400, Douglas Allan Tutty wrote: > I'm on dialup and often access the internet via a slow computer by > sshing into my fast computer (which has the modem). > > Right now, if I want to download something like an iso file via ftp > (there being no rsync mirror available), I put the url in a file, e.g. No torrents either? > 1.After so many interruptions, often there has been an error creep > in and the md5sum doesn't match. Without rsync, I don't know how to fix > a file that is the correct lenght but doesn't match. torrent solves this ... > 3.It would be nice to have a curses interface like mc that lets me > browse to the correct file, then tag the file for downloading which puts > it into the above queue. AFAIK mc can do ftp. I didn't use it much, but it might do most of what you need. Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) signature.asc Description: Digital signature
Re: /bin/login listening?
On Sun, 29 Jul 2007, Tyler Smith wrote: On 2007-07-29, Mathias Brodala <[EMAIL PROTECTED]> wrote: This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --enig6620D8D79CB50A9B1AFF7AB2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Douglas. Douglas Allan Tutty, 29.07.2007 18:35: Boot the box from something like the install CD, go to a shell, mount your / partition ro, noexec. =20 I think the install CD has md5sum installed. Run: #md5sum /bin/login. =20 On my i386, I get: =20 2ee32ff74e474c4d9fc9df6f1460980f /bin/login You should also tell the exact version of the "login" package you are usi= ng. Otherwise this number is useless. With 1:4.0.18.1-11 on i386 I get this: 004a41bb9196f1888bd89c2245910f46 /bin/login Which is just what I got too. I found an old Mepis CD, booted into that, mounted my / partition, ran md5sum on /bin/login, and out came the same answer, for the same version of /bin/login. So I'm going to proceed as if I've been lucky, have not been rootkit-ed, and will continue on with hardening my laptop without reinstalling. Thanks for your help! Tyler On that note, one thing that you might want to consider as part of the hardening process is to install aide or some other file integrity checker. Using something like that greatly helps in detecting and identifying issues such as this. -+- 8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?
On Sun, 29 Jul 2007 15:28:17 -0400 "Andrew J. Barr" <[EMAIL PROTECTED]> wrote: > On 7/29/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > > I'm on slow dialup. Downloads of iso's take days. Yet, I still want to > > be able to browse the internet. > > > > I would like to set up something like trickle that will run something > > but limit its bandwidth so that it lower's its priority. > > I think the QoS or traffic shaping features of the kernel may be able > to do what you want. I have issues similar to Doug's, and I have also wondered whether kernel based traffic shaping is what I need. Since we both use shorewall, which has an interface to the kernel's shaping capabilities, I suppose we ought to read shorewall-doc/html/traffic_shaping.htm > Andrew Barr Celejar -- mailmin.sourceforge.net - remote access via secure (OpenPGP) email ssuds.sourceforge.net - A Simple Sudoku Solver and Generator -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about Adobe Acrobat....
On Sun, 2007-29-07 at 12:20 -0700, Kelly Clowers wrote: > On 7/29/07, Brad Rogers <[EMAIL PROTECTED]> wrote: > > On Sun, 29 Jul 2007 20:20:59 +0200 > > Florian Kulzer <[EMAIL PROTECTED]> wrote: > > > > Hello Florian, > > > > > pdftk can be used to fill in PDF forms. It can generate an FDF file > > > > Yet another package I've not heard of. Hardly surprising, really, > > given that there seem to be dozens of ways of achieving one's goals > > with *nix OSs. Which is a good thing, of course. > > > > > Unfortunately I am not sure if this works with all versions of PDF > > > forms or only with older ones. > > > > PDF, like many formats, is an ever moving goalpost. Consequently, > > we're playing "catch-up" all the time. > > The next version of Evince, due this fall, will also support form filling. That is such good news.. exactly what I have been hoping to read.. I've been looking for a way to fill in pdf forms for an amd64 box I have here. You made my day.. :) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?
On 7/29/07, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > I'm on slow dialup. Downloads of iso's take days. Yet, I still want to > be able to browse the internet. > > I would like to set up something like trickle that will run something > but limit its bandwidth so that it lower's its priority. I think the QoS or traffic shaping features of the kernel may be able to do what you want. -- Andrew Barr We matter more than pounds and pence, your economic theory makes no sense... -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about Adobe Acrobat....
On 7/29/07, Brad Rogers <[EMAIL PROTECTED]> wrote: > On Sun, 29 Jul 2007 20:20:59 +0200 > Florian Kulzer <[EMAIL PROTECTED]> wrote: > > Hello Florian, > > > pdftk can be used to fill in PDF forms. It can generate an FDF file > > Yet another package I've not heard of. Hardly surprising, really, > given that there seem to be dozens of ways of achieving one's goals > with *nix OSs. Which is a good thing, of course. > > > Unfortunately I am not sure if this works with all versions of PDF > > forms or only with older ones. > > PDF, like many formats, is an ever moving goalpost. Consequently, > we're playing "catch-up" all the time. The next version of Evince, due this fall, will also support form filling. Cheers, Kelly -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about Adobe Acrobat....
On Sun, 29 Jul 2007 20:20:59 +0200 Florian Kulzer <[EMAIL PROTECTED]> wrote: Hello Florian, > pdftk can be used to fill in PDF forms. It can generate an FDF file Yet another package I've not heard of. Hardly surprising, really, given that there seem to be dozens of ways of achieving one's goals with *nix OSs. Which is a good thing, of course. > Unfortunately I am not sure if this works with all versions of PDF > forms or only with older ones. PDF, like many formats, is an ever moving goalpost. Consequently, we're playing "catch-up" all the time. -- Regards _ / ) "The blindingly obvious is / _)radnever immediately apparent" I must be hallucinating, watching angels celebrating There Must Be An Angel (Playing With My Heart) - Eurythmics signature.asc Description: PGP signature
Adpater network quad-port
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, We buy a net plate quadr-port, I am using debian etch in our server of firewall, but I am seeing that the plate did not show pra me the net interfaces, in any ones of the doors that I connect the server it I answer ping, what I he must make still to have the four interfaces of net functioning in difentes nets? I am using kernel 2.6.19-7. Thnx!!! -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.5 (MingW32) iD8DBQFGrNribjyCr4Ixg0wRAoUMAKCUSHhmkykxnAyJ3+vqJHxxMs6rYQCfV4gt laAHCOYMLOJy0T/SCgXw7FQ= =sG7y -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
On 2007-07-29, Mathias Brodala <[EMAIL PROTECTED]> wrote: > This is an OpenPGP/MIME signed message (RFC 2440 and 3156) > --enig6620D8D79CB50A9B1AFF7AB2 > Content-Type: text/plain; charset=UTF-8 > Content-Transfer-Encoding: quoted-printable > > Hi Douglas. > > Douglas Allan Tutty, 29.07.2007 18:35: >> Boot the box from something like the install CD, go to a shell, mount >> your / partition ro, noexec. >>=20 >> I think the install CD has md5sum installed. Run: >> #md5sum /bin/login. >>=20 >> On my i386, I get: >>=20 >> 2ee32ff74e474c4d9fc9df6f1460980f /bin/login > > You should also tell the exact version of the "login" package you are usi= > ng. > Otherwise this number is useless. > > With 1:4.0.18.1-11 on i386 I get this: > >> 004a41bb9196f1888bd89c2245910f46 /bin/login > Which is just what I got too. I found an old Mepis CD, booted into that, mounted my / partition, ran md5sum on /bin/login, and out came the same answer, for the same version of /bin/login. So I'm going to proceed as if I've been lucky, have not been rootkit-ed, and will continue on with hardening my laptop without reinstalling. Thanks for your help! Tyler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: bindgraph
Le Saturday 28 July 2007 08:49:50 koffiejunkie, vous avez écrit :
> Gilles Mocellin wrote:
> > Strange !
> > I just installed it today, and I found what is the problem.
> > It is not compatible with rrdtool 1.2.
> > I found it trying to display directly the image (look in the HTMl
> > source). RRD says it doesn't understand the data format...
> >
> > I backported the testing/unstable version 0.2a.
> > I saw this bug in BTS which was corrected.
>
> Hi Gilles,
>
> Thanks for this. I looked at the code for a long time, but it's greek
> to me - my perl is limited to "hello" world...
>
> I'm just on the way out for the weekend, will look into this again
> tomorrow night. As far as I remember I don't even get the images
> generated (that is triggered by the .cgi, isn't it?).
>
> # ./bindgraph.cgi
> Use of uninitialized value in substitution (s///) at
> /usr/share/perl/5.8/File/Basename.pm line 338.
> fileparse(): need a valid pathname at ./bindgraph.cgi line 181
>
> When I strace it, I get this snipped some of the "file not found" lines:
>
> stat64("/usr/lib/perl/5.8/re.pm", {st_mode=S_IFREG|0644, st_size=1340,
> ...}) = 0
> open("/usr/lib/perl/5.8/re.pm", O_RDONLY|O_LARGEFILE) = 5
> ioctl(5, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfffec48) = -1 ENOTTY
> (Inappropriate ioctl for device)
> _llseek(5, 0, [0], SEEK_CUR)= 0
> read(5, "package re;\n\nour $VERSION = 0.05"..., 4096) = 1340
> read(5, "", 4096) = 0
> close(5)= 0
> read(4, "[:>\\]])?(.*)/s);\n$dirpath ||"..., 4096) = 4096
> brk(0x8235000) = 0x8235000
> read(4, ".\'. fileparse() would return \'f"..., 4096) = 3069
> read(4, "", 4096) = 0
> close(4)= 0
> read(3, "t_date {\n\tmy ($when) = @_;\n\n\tmy "..., 4096) = 2195
> read(3, "", 4096) = 0
> close(3)= 0
> uname({sys="Linux", node="rimwards", ...}) = 0
> write(2, "Use of uninitialized value in su"..., 100Use of uninitialized
> value in substitution (s///) at /usr/share/perl/5.8/File/Basename.pm
> line 338.
> ) = 100
> [snip]
> stat64("/usr/share/perl/5.8/Carp/Heavy.pm", {st_mode=S_IFREG|0644,
> st_size=5747, ...}) = 0
> open("/usr/share/perl/5.8/Carp/Heavy.pm", O_RDONLY|O_LARGEFILE) = 3
> ioctl(3, SNDCTL_TMR_TIMEBASE or TCGETS, 0xb598) = -1 ENOTTY
> (Inappropriate ioctl for device)
> _llseek(3, 0, [0], SEEK_CUR)= 0
> read(3, "# Carp::Heavy uses some variable"..., 4096) = 4096
> brk(0x8256000) = 0x8256000
> read(3, "s($called, $caller, $cache);\n "..., 4096) = 1651
> read(3, "", 4096) = 0
> close(3)= 0
> write(2, "fileparse(): need a valid pathna"..., 63fileparse(): need a
> valid pathname at ./bindgraph.cgi line 181
> ) = 63
> exit_group(255) = ?
> Process 28639 detached
>
>
> Is this what you got too?
No, but I didn't try to execute the cgi on the command line.
I got RRD errors. The rrd command that generates images did not work for a
formatting reason.
The error was well known to me, since I had several time problems with
mailgraph / amavis-stats which are tools very similar to bindgraph.
Just try the newer version, no need to backport it since it's just a perl
script. You can use pinning or just downlad appart the deb file from testing.
signature.asc
Description: This is a digitally signed message part.
Re: dumb question about Adobe Acrobat....
On Sat, 28 Jul 2007 23:39:18 +0100, Brad Rogers wrote: [...] > IIRC, Xpdf doesn't have the ability to do form filling. With acroread, > you can fill out forms (they have to be set up to allow it, of course), > and then print them, already filled in. Obviously, you can't save the > filled out form. pdftk can be used to fill in PDF forms. It can generate an FDF file from the form fields of a PDF. You can edit the data in the FDF file with an ASCII editor and then use pdftk again to produce a "filled-in" PDF from the edited FDF and the original PDF file. You can furthermore "flatten" this new PDF file so that other people cannot change your data anymore if you send them this file. However, if someone wants you to submit the form electronically then it is important to send the file non-flattened because the other party will probably want to extract the data directly from the file. Unfortunately I am not sure if this works with all versions of PDF forms or only with older ones. -- Regards,| http://users.icfo.es/Florian.Kulzer Florian | -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: how to set network io priority for a process?
On Sun, Jul 29, 2007 at 06:14:46PM -, Paul Johnson wrote: > On Jul 29, 11:10 am, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > > I'm on slow dialup. Downloads of iso's take days. Yet, I still want to > > be able to browse the internet. > > > > I would like to set up something like trickle that will run something > > but limit its bandwidth so that it lower's its priority. > [...] > > What I want is something like ionice but for network bandwidth. > > I'm not sure if that's workable, but if you have your own home > network, > you might look into setting up your own squid cache. Squid is a web > proxy that maintains it's own cache of items people on your network > have already visited. If you use offline mode, you may have to force > a refresh on sites you know have new content (shift-refresh in most > browsers), but items you've already downloaded for viewing before > will load much more quickly on subsequent visits. > I already have polipo cache set up and working. Perhaps this is something else I'll have to write from scratch. I'll have to see how, at any given time, one sees what is using the bandwidth. Thanks, Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: essential services? ssh, nfs?
On Sun, Jul 29, 2007 at 05:52:12PM +, Tyler Smith wrote: > Now that I have nothing listening to the outside world, do I still > need a firewall? I have been using firestarter, but not consistently. > I look at a firewall as icing on the cake. If you reject and log local to net, anything trying to go out that you haven't configured gives you something to trace. For example, I recently put etch onto my 486 and installed ntp. Between the time I installed it and when I configured it to look to my main box, it came configured to try to access the debian ntp pool. Those packets were rejected but I go an email from my main box warning me about it. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: essential services? ssh, nfs?
On 2007-07-29, Jeff D <[EMAIL PROTECTED]> wrote: > > the general rule of thumb, is if you dont use it, turn it off. I'd turn > off almost every thing. You can leave exim and famd on. > to turn auth off, you can edit /etc/inetd.conf and comment out the line > that starts with ident. > > for portmap: > update-rc.d -f portmap remove > for rpc.statd: > update-rc.d -f rpc.statd remove > ssh: > update-rc.d -f ssh remove > > to bind apache to the localhost, in /etc/apache2/ports.conf change the > Listen 80 to Listen 127.0.0.1:80, then restart apache. > > Thanks Jeff, Doug, and everyone! I purged the ssh-server, and followed Jeff's advice to remove everything else. On rebooting now I have: root:tyler# netstat -tap | grep LISTEN localhost:www *:* LISTEN 4371/apache localhost:smtp *:* LISTEN 3331/exim4 I don't know what happened to famd, but it's gone now. I did have to change my bookmarks for doc-central from blackbart.mynetwork/dc to localhost/dc, and that's working. The actual change in the apache conf was in the file /etc/apache/httpd.conf. Other than that there were no surprises. Now that I have nothing listening to the outside world, do I still need a firewall? I have been using firestarter, but not consistently. Cheers, Tyler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
how to set network io priority for a process?
I'm on slow dialup. Downloads of iso's take days. Yet, I still want to be able to browse the internet. I would like to set up something like trickle that will run something but limit its bandwidth so that it lower's its priority. For example, wget and rsync allow one to limit the bandwidth to a set rate. However, if nothing else wants the connection, this wastes available bandwidth. Conversely, if I try to view a big web site, it would like the wget or rsync to get out of the way while I'm doing it. Trickle allows one to set a rate for programs that don't give the option. ionice does something similar for disk io. What I want is something like ionice but for network bandwidth. Any suggestions? Thanks, Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: searching for graphical torrent client
On Fri, Jul 27, 2007 at 01:07:17PM +0300, Giorgos D. Pallas wrote: > I tried google but can't seem to find something that both looks decent > *and* is available for debian (testing) as a binary. For example I tried > qtorrent, but it is so minimal that I don't like it... Or to put it in > another way: Which client resembles most the windows utorrent? (I also > tried ktorrent for KDE and it crashes often...) ktorrent crashed on me only when using DHT. Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) signature.asc Description: Digital signature
Re: essential services? ssh, nfs?
Tyler Smith wrote: Hi, I'm working through the security quick start how to, and I'm not clear on what services are required and which ones I can safely remove. I'm running a single laptop, which I connect to the net via wireless at home or at cafes, and via an ethernet cable at work. 1) I never login remotely, so I think I can safely do away with openssh-server? tcp6*:ssh *:* LISTEN 3026/sshd 2) The how-to suggests that for my setup I don't need anything to do with NFS - netstat reports rpc.statd and portmap as listening. Can I just purge nfs-common and portmap? tcp *:37381 *:* LISTEN 2603/rpc.statd tcp *:sunrpc*:* LISTEN 2578/portmap 3) I have apache installed as a dependency of doc-central. netstat shows it to be listening to all interfaces. Is there a way to set it to listen only for local connections? I don't understand this very well, but it seems I shouldn't need to listen to anyone from the outside to connect to my docs. tcp *:www *:* LISTEN 3826/apache you need to edit apache config file. look for "Listen" and replace the wildcard IP by 127.0.0.1. I personally avoid changing config files that come with packages. so here, just use an iptables rule to block incoming traffic unless you want it. 4) The only remaining listeners I have are: tcp localhost:929 *:* LISTEN 3721/famd tcp *:auth *:* LISTEN 3661/inetd tcp localhost:smtp *:* LISTEN 3385/exim4 What is auth? This is the (obsolete?) ident service. you can disable it (after all, windows people don't have it and they have no problem surfing...). If you use a firewall, make sure to reject packets coming in to this port, instead of a DROP. Otherwise, services that use ident will be slow at connection time. Since famd and exim4 are only listening to localhost, can I conclude they are not a security risk? In general, it's ok, but you still need to keep your eyes open: - make sure incoming traffic to localhost is blocked (just drop). 127.* should not appear on the wire. This really belongs to the IP stack, but as I am not sure it is filtered there, stay safe and add an explicit rule. - make sure you have no NAT rule that redirects incoming traffic to localhost. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: essential services? ssh, nfs?
On Sun, 29 Jul 2007, Tyler Smith wrote: Hi, I'm working through the security quick start how to, and I'm not clear on what services are required and which ones I can safely remove. I'm running a single laptop, which I connect to the net via wireless at home or at cafes, and via an ethernet cable at work. 1) I never login remotely, so I think I can safely do away with openssh-server? tcp6*:ssh *:* LISTEN 3026/sshd 2) The how-to suggests that for my setup I don't need anything to do with NFS - netstat reports rpc.statd and portmap as listening. Can I just purge nfs-common and portmap? tcp *:37381 *:* LISTEN 2603/rpc.statd tcp *:sunrpc*:* LISTEN 2578/portmap 3) I have apache installed as a dependency of doc-central. netstat shows it to be listening to all interfaces. Is there a way to set it to listen only for local connections? I don't understand this very well, but it seems I shouldn't need to listen to anyone from the outside to connect to my docs. tcp *:www *:* LISTEN 3826/apache 4) The only remaining listeners I have are: tcp localhost:929 *:* LISTEN 3721/famd tcp *:auth *:* LISTEN 3661/inetd tcp localhost:smtp *:* LISTEN 3385/exim4 What is auth? Since famd and exim4 are only listening to localhost, can I conclude they are not a security risk? Thanks for your help, Tyler -- erf, it's too early, not enough coffee yet, but you might want to add this one to the list too: update-rc.d -f nfs-common remove You can also just remove the packages that control these though. But, personally I like to keep them around, just incase I need to turn them back on at some point. It's come in handy for me a few time to have the services available -+- 8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: essential services? ssh, nfs?
On Sun, 29 Jul 2007, Tyler Smith wrote: Hi, I'm working through the security quick start how to, and I'm not clear on what services are required and which ones I can safely remove. I'm running a single laptop, which I connect to the net via wireless at home or at cafes, and via an ethernet cable at work. 1) I never login remotely, so I think I can safely do away with openssh-server? tcp6*:ssh *:* LISTEN 3026/sshd 2) The how-to suggests that for my setup I don't need anything to do with NFS - netstat reports rpc.statd and portmap as listening. Can I just purge nfs-common and portmap? tcp *:37381 *:* LISTEN 2603/rpc.statd tcp *:sunrpc*:* LISTEN 2578/portmap 3) I have apache installed as a dependency of doc-central. netstat shows it to be listening to all interfaces. Is there a way to set it to listen only for local connections? I don't understand this very well, but it seems I shouldn't need to listen to anyone from the outside to connect to my docs. tcp *:www *:* LISTEN 3826/apache 4) The only remaining listeners I have are: tcp localhost:929 *:* LISTEN 3721/famd tcp *:auth *:* LISTEN 3661/inetd tcp localhost:smtp *:* LISTEN 3385/exim4 What is auth? Since famd and exim4 are only listening to localhost, can I conclude they are not a security risk? Thanks for your help, Tyler -- the general rule of thumb, is if you dont use it, turn it off. I'd turn off almost every thing. You can leave exim and famd on. to turn auth off, you can edit /etc/inetd.conf and comment out the line that starts with ident. for portmap: update-rc.d -f portmap remove for rpc.statd: update-rc.d -f rpc.statd remove ssh: update-rc.d -f ssh remove to bind apache to the localhost, in /etc/apache2/ports.conf change the Listen 80 to Listen 127.0.0.1:80, then restart apache. -+- 8 out of 10 Owners who Expressed a Preference said Their Cats Preferred Techno. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: dumb question about aAdobe Acrobat....
On Sat, 28 Jul 2007 21:12:31 -0400 Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: Hello Douglas, > Sounds like a crazy propriatary scheme. Whatever happened to sending Quite probably. > out the Latex of a document. Recipients can latex it to view it, make > changes, get it right, then email the latex back. Because most people are completely unaware of TeX for generating documents. > As for printing but not saving an altered pdf, can't you print to file > (or get your print spooler to do it) so that you have a ps of the pdf? I've not tried, TBH. The odd PDF that I've come across that allowed data entry wasn't the sort of thing I needed to keep a copy of. I might play around and see what I can do. -- Regards _ / ) "The blindingly obvious is / _)radnever immediately apparent" I am alone there's nobody there I Look Alone - Buzzcocks signature.asc Description: PGP signature
Re: /bin/login listening?
On Sun, Jul 29, 2007 at 06:40:05PM +0200, Mathias Brodala wrote: > You should also tell the exact version of the "login" package you are using. > Otherwise this number is useless. Sorry. Stock, up-to-date Etch. Aptitude shows it as version 1:4.0.18.1-7. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: essential services? ssh, nfs?
On Sun, Jul 29, 2007 at 04:11:55PM +, Tyler Smith wrote: > > I'm working through the security quick start how to, and I'm not clear > on what services are required and which ones I can safely remove. I'm > running a single laptop, which I connect to the net via wireless at > home or at cafes, and via an ethernet cable at work. > > 1) I never login remotely, so I think I can safely do away with > openssh-server? If you don't need it, and a package isn't there to meet a dependancy, get rid of it. > > tcp6*:ssh *:* LISTEN 3026/sshd > > 2) The how-to suggests that for my setup I don't need anything to do > with NFS - netstat reports rpc.statd and portmap as listening. Can I > just purge nfs-common and portmap? > > tcp *:37381 *:* LISTEN 2603/rpc.statd > tcp *:sunrpc*:* LISTEN 2578/portmap > Ditto. > 3) I have apache installed as a dependency of doc-central. netstat > shows it to be listening to all interfaces. Is there a way to set it > to listen only for local connections? I don't understand this very > well, but it seems I shouldn't need to listen to anyone from the > outside to connect to my docs. > > tcp *:www *:* LISTEN 3826/apache > I've never run apache so don't know. > 4) The only remaining listeners I have are: > > tcp localhost:929 *:* LISTEN 3721/famd > tcp *:auth *:* LISTEN 3661/inetd > tcp localhost:smtp *:* LISTEN 3385/exim4 > > What is auth? Since famd and exim4 are only listening to localhost, > can I conclude they are not a security risk? > What do you have uncommented in /etc/inetd.conf? I don't have anything, so inetd doesn't start up at boot. Finally, as the last defence, do you have a good firewall setup? I use shorewall with a default net to all DROP and everything else REJECT, then open ports as needed in rules. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: IM on a home debian network
Ron Johnson wrote: > What ever happened to diald? It was obsoleted by the demand-dial feature of pppd which can be configured with pppconfig. Doug writes: > Its an external Courier. I meant push the button to turn it on. Why do you turn it off? -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
Hi Douglas. Douglas Allan Tutty, 29.07.2007 18:35: > Boot the box from something like the install CD, go to a shell, mount > your / partition ro, noexec. > > I think the install CD has md5sum installed. Run: > #md5sum /bin/login. > > On my i386, I get: > > 2ee32ff74e474c4d9fc9df6f1460980f /bin/login You should also tell the exact version of the "login" package you are using. Otherwise this number is useless. With 1:4.0.18.1-11 on i386 I get this: > 004a41bb9196f1888bd89c2245910f46 /bin/login Regards, Mathias -- debian/rules signature.asc Description: OpenPGP digital signature
essential services? ssh, nfs?
Hi, I'm working through the security quick start how to, and I'm not clear on what services are required and which ones I can safely remove. I'm running a single laptop, which I connect to the net via wireless at home or at cafes, and via an ethernet cable at work. 1) I never login remotely, so I think I can safely do away with openssh-server? tcp6*:ssh *:* LISTEN 3026/sshd 2) The how-to suggests that for my setup I don't need anything to do with NFS - netstat reports rpc.statd and portmap as listening. Can I just purge nfs-common and portmap? tcp *:37381 *:* LISTEN 2603/rpc.statd tcp *:sunrpc*:* LISTEN 2578/portmap 3) I have apache installed as a dependency of doc-central. netstat shows it to be listening to all interfaces. Is there a way to set it to listen only for local connections? I don't understand this very well, but it seems I shouldn't need to listen to anyone from the outside to connect to my docs. tcp *:www *:* LISTEN 3826/apache 4) The only remaining listeners I have are: tcp localhost:929 *:* LISTEN 3721/famd tcp *:auth *:* LISTEN 3661/inetd tcp localhost:smtp *:* LISTEN 3385/exim4 What is auth? Since famd and exim4 are only listening to localhost, can I conclude they are not a security risk? Thanks for your help, Tyler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
On Sun, Jul 29, 2007 at 03:56:08PM +, Tyler Smith wrote: > So if I'm compromised nothing is safe, and the only guaranteed way to > clear this up is to format my harddrive and reinstall. Given that the > only evidence of a problem is a warning about /bin/login listening > from rkhunter, which happened only once, and I have had no other > problems with my net connection or general performance of my laptop, > let alone mysterious withdrawals from my bank account or other signs > of stolen passwords, what should I be doing? > > >From the advice received and what I'm reading, I'm getting two very > different messages - I must reinstall to be 100% certain that I'm > safe, and while I can't be 100% certain I'm safe it's pretty unlikely > that I have a real problem. > > What would you do in my situation? > Try this: Boot the box from something like the install CD, go to a shell, mount your / partition ro, noexec. I think the install CD has md5sum installed. Run: #md5sum /bin/login. On my i386, I get: 2ee32ff74e474c4d9fc9df6f1460980f /bin/login If /bin/login is fine, then I'd forget about it. If it differs, I'd wipe the drive and reinstall; from backups before your first indication of a problem. Then examine the difference between that backup's data and your most recent backup. Actually, to put your mind at ease, I've attached a file bin-MD5SUMS which is the output of: $md5sum /bin/* > bin-MD5SUMS Put this onto a floppy and mount it when you boot your install CD. Then edit it so that, for example the /bin/login reads /mnt/bin/login. You can then verify the whole /bin with #md5sum -c bin-MD5SUMS Here's the file, and good luck. Doug. be2bfd8feb6bfb826593c087817be9d5 /bin/arch 72e1a7bbf8478e3dd08693bec6f4c50e /bin/bash 01fcfa4919953518bbbc97b2637a27ad /bin/bunzip2 a60f3c2c4dcedeec5b0e6cce4fd777c8 /bin/busybox 01fcfa4919953518bbbc97b2637a27ad /bin/bzcat dfaba3a92070a1881dd8ec64a26069a4 /bin/bzcmp dfaba3a92070a1881dd8ec64a26069a4 /bin/bzdiff 2b11565d85da178b3a1942a22d20c624 /bin/bzegrep ea97408418bc4c3a77c0048003198acc /bin/bzexe 2b11565d85da178b3a1942a22d20c624 /bin/bzfgrep 2b11565d85da178b3a1942a22d20c624 /bin/bzgrep 01fcfa4919953518bbbc97b2637a27ad /bin/bzip2 d231db40e391032509c4c4782653cb6e /bin/bzip2recover e243255b6cf3b9403df53cb9cd6176e1 /bin/bzless e243255b6cf3b9403df53cb9cd6176e1 /bin/bzmore c12e12da393d90fba841aa678aef5094 /bin/cat 117baf5142bb451a8a0c501cdbf43726 /bin/chgrp aa1ab822de26dd9d455c8ac9163ba30e /bin/chmod b28ba00d8345041e4955ed970ed174ee /bin/chown a096cd237ee340b66f84a7867a2da2a7 /bin/cp 901cc68b293e3249a681ab4f396d1cd4 /bin/cpio a9a89a3beefb30729ea4ae80d6335cb6 /bin/csh 2af9162bd0c10ecd3b77983a56d79f6c /bin/date 02aec16981ffee391d957a28cd1190af /bin/dd 53f20746bb14718e54a65b86510bcb82 /bin/df 1c4d91adb9b1fa383247d0334a389975 /bin/dir 5c54d6f8b6af629e4be985f52c21adb6 /bin/dmesg 638cead25982bc413a287e30a6b3fea4 /bin/dnsdomainname 177e77531159a20fbcf741136c02ce05 /bin/echo 73a8a6f1948231171a6586aef43f26a6 /bin/ed 1a1c4e75e82a51bc570350aa22184913 /bin/egrep 28b23332333e80869b5810c4105392c6 /bin/false 01b9524c8e60a5e167132a6e85452cd0 /bin/fgrep 5d3ff43e62be5f980abeb4100a018ff1 /bin/fuser d274e7a42d015822ea25fb08ed19262c /bin/grep df40328a2c30b3dd195ef2f55d60cef4 /bin/gunzip cd4aee768f1e3db05aac2b3f5a6219ae /bin/gzexe df40328a2c30b3dd195ef2f55d60cef4 /bin/gzip 638cead25982bc413a287e30a6b3fea4 /bin/hostname 01c8af0fc0fe16eab70368389a5482bb /bin/ip aca6202f58b4e514ac9c0501505c2076 /bin/kernelversion 083ec3e06bc9de75e00fcb6d6292b378 /bin/kill 2f67f424360319c65ab68c27984f4d06 /bin/ln 2ee32ff74e474c4d9fc9df6f1460980f /bin/login 3a409d2e7d87fa96c89650c6aec35ac7 /bin/ls 8903244917679b8f5a19909e7e5d0fcc /bin/lsmod 432c653790fe9d2562f0894bb922d46d /bin/lsmod.modutils e89d8739e436bf722668b838476d65cb /bin/lspci 2b71253ac2aa883f6b65cc4d636fe8c8 /bin/mkdir 95887a0809f5a6de47e26d8b60ae28b1 /bin/mknod 641ec128955d32c613c201d45a9bf224 /bin/mktemp cc51af5002e2d41a84aecb14fc9cbd79 /bin/more 27c66448968d6775d3f61ee07938938c /bin/mount dcfe6fa0df8251d56c7f6cd738181003 /bin/mountpoint 0658725a01811e897497f24838c79e75 /bin/mt 0658725a01811e897497f24838c79e75 /bin/mt-gnu 45fc16400d06a4cf9d69c8d619f9104b /bin/mv 68de2870b06443403332c81022010a24 /bin/nano f0169e77f969e17e013c295cd74346a6 /bin/nc f0169e77f969e17e013c295cd74346a6 /bin/netcat e00b5e934dfa34a968b33cb2566ecdec /bin/netstat 3aba7c43d7978452e790220b0deb0e4e /bin/pidof 7001afa26625989c85d05be0d4f93e4e /bin/ping d420db19497b56e632756884efd244e9 /bin/ping6 6140d156296de35a86fd154081b00f26 /bin/ps b7ec22f9d3040fff114acfd4f6d226e7 /bin/pwd 72e1a7bbf8478e3dd08693bec6f4c50e /bin/rbash 07e433957de1c39329ebd81d61ca44a2 /bin/readlink bdd022ca8ec797544b3eddb817ce97f5 /bin/rm 34dd0e07f6abdd1531c7c0953752ab1d /bin/rmdir 68de2870b06443403332c81022010a24 /bin/rnano 1622c90a9570641dd182d0eff4e9d95b /bin/run-parts d9be68996d0b87faeb83d1ad8951a481 /bin/sash 1fc6
Re: /bin/login listening?
On 2007-07-29, Celejar <[EMAIL PROTECTED]> wrote: >> >> That's what I was thinking. But is there any way a rootkit could >> interfere with my downloading and compiling from source? I was hoping >> that doing things 'by hand' would limit the possibilities for >> compromising the result. > > In theory, certainly. Your downloading agent is probably invoking > system libraries, which may be compromised and substituting bad > source. The system may not even be running your download agent at > all! Or it may subsequently lie to you and assure you that it's > running the downloaded app when it really isn't. Whether all this is > at all plausible is a different question. > So if I'm compromised nothing is safe, and the only guaranteed way to clear this up is to format my harddrive and reinstall. Given that the only evidence of a problem is a warning about /bin/login listening from rkhunter, which happened only once, and I have had no other problems with my net connection or general performance of my laptop, let alone mysterious withdrawals from my bank account or other signs of stolen passwords, what should I be doing? >From the advice received and what I'm reading, I'm getting two very different messages - I must reinstall to be 100% certain that I'm safe, and while I can't be 100% certain I'm safe it's pretty unlikely that I have a real problem. What would you do in my situation? Thanks, Tyler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Disable gnome-power-manager?
On Sun July 29 2007 06:25, Stefan Monnier wrote: > Am I the only one who finds the gnome-power-manager to be > fundamentally flawed? A power daemon needs intrinsically to be > system-global and not specific to a particular login session. > This becomes obvious when there are several logins active at the same time > (on different virtual consoles), typically with different users. > > Now, recent versions of the gnome-desktop-environment depend on > gnome-power-management, so it makes it inconvenient to deinstall the > gnome-power-management package. Is there a way to keep it installed but to > deactivate it? When I install gnome I don't install gnome-desktop-environment. I enter that in aptitude and pick the items I want from there. gnome-power-management is recommended by gnome-screen-saver so when I install that I temporarily disable aptitude from automatically installing recommended packages. Maybe the long way around but it gets me where I want to be.. :) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
> That's what I was thinking. But is there any way a rootkit could > interfere with my downloading and compiling from source? Of course. They could have trojaned any of the tools you would use. _No_ software on a rooted box can be trusted. Including the shell. -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: How Debian BTS and its tools can be improved (user poll).
On Thu, Jul 26, 2007 at 10:49:29AM -0700, Andrew Sackville-West wrote: > On Thu, Jul 26, 2007 at 03:34:58PM +, Oleg Verych wrote: > > What, on your opinion, can be done better in Debian BTS, reportbug? > > 1)I agree with kamaraju (sp?) that submitter should be automatically > subscribed to the bug, or even better, given the option to subscribe > from within reportbug at submittal time. Or making the subscription as easy as replying to the ACK mail (without and additional ACK, as the reply already verifies that I'm not a computer). Regards, Andrei -- If you can't explain it simply, you don't understand it well enough. (Albert Einstein) signature.asc Description: Digital signature
Re: /bin/login listening?
On 29 Jul 2007 13:47:30 GMT Tyler Smith <[EMAIL PROTECTED]> wrote: > On 2007-07-29, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > > On Sun, Jul 29, 2007 at 12:48:16PM +, Tyler Smith wrote: > >> On 2007-07-29, Jeff D <[EMAIL PROTECTED]> wrote: > > > >> I ran rkhunter again, and then for good measure I aptitude --purged > >> it, reinstalled, and ran again. And then I thought maybe the whole > >> thing was compromised, so I purged it again, installed rkhunter 1.30 > >> from sourceforge, and ran again. And I also ran chkrootkit. In all > >> cases they showed nothing happening, except for warning me that some > >> of my /bin executables had been replaced by scripts -- stuff like > >> egrep, fgrep etc. > >> > >> So perhaps it was just a false positive. I'm going to read up on > >> security stuff now, so maybe I'll have some idea how to proceed the > >> next time. > >> > > > > Its tricky. If you have been rooted, you can't trust anything on the > > system, including aptitude. As for reading, try the package harden-doc. > > > > That's what I was thinking. But is there any way a rootkit could > interfere with my downloading and compiling from source? I was hoping > that doing things 'by hand' would limit the possibilities for > compromising the result. In theory, certainly. Your downloading agent is probably invoking system libraries, which may be compromised and substituting bad source. The system may not even be running your download agent at all! Or it may subsequently lie to you and assure you that it's running the downloaded app when it really isn't. Whether all this is at all plausible is a different question. > I will look at harden-doc. I'm working through the Linux how-to > security quick start at the moment. > > Thanks, > > Tyler Celejar -- mailmin.sourceforge.net - remote access via secure (OpenPGP) email ssuds.sourceforge.net - A Simple Sudoku Solver and Generator -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
On 2007-07-29, Douglas Allan Tutty <[EMAIL PROTECTED]> wrote: > On Sun, Jul 29, 2007 at 12:48:16PM +, Tyler Smith wrote: >> On 2007-07-29, Jeff D <[EMAIL PROTECTED]> wrote: > >> I ran rkhunter again, and then for good measure I aptitude --purged >> it, reinstalled, and ran again. And then I thought maybe the whole >> thing was compromised, so I purged it again, installed rkhunter 1.30 >> from sourceforge, and ran again. And I also ran chkrootkit. In all >> cases they showed nothing happening, except for warning me that some >> of my /bin executables had been replaced by scripts -- stuff like >> egrep, fgrep etc. >> >> So perhaps it was just a false positive. I'm going to read up on >> security stuff now, so maybe I'll have some idea how to proceed the >> next time. >> > > Its tricky. If you have been rooted, you can't trust anything on the > system, including aptitude. As for reading, try the package harden-doc. > That's what I was thinking. But is there any way a rootkit could interfere with my downloading and compiling from source? I was hoping that doing things 'by hand' would limit the possibilities for compromising the result. I will look at harden-doc. I'm working through the Linux how-to security quick start at the moment. Thanks, Tyler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Disable gnome-power-manager?
Hi again. Mathias Brodala, 29.07.2007 15:50: > Hi Stefan. > > Stefan Monnier, 29.07.2007 15:25: >> Now, recent versions of the gnome-desktop-environment depend on >> gnome-power-management, so it makes it inconvenient to deinstall the >> gnome-power-management package. Is there a way to keep it installed but to >> deactivate it? > > I don’t have it installed, but maybe > /etc/dbus-1/system.d/gnome-power-manager.conf is of help. Apparently, it is not. But README.Debian.gz is: > GNOME Users: Starting GNOME Power Manager with your GNOME Session > = > > 1) Add yourself to the powerdev group; this group is created by hal >>= 0.5.6+cvs20060219-1. > 2) Open System -> Preferences -> Sessions > 3) In the Startup Programs tab, click Add > 4) Type "gnome-power-manager", click OK. > 5) Log out of your gnome session, and log back in again. You obviously can do the opposite to disable it. Regards, Mathias -- debian/rules signature.asc Description: OpenPGP digital signature
Re: Disable gnome-power-manager?
Hi Stefan. Stefan Monnier, 29.07.2007 15:25: > Now, recent versions of the gnome-desktop-environment depend on > gnome-power-management, so it makes it inconvenient to deinstall the > gnome-power-management package. Is there a way to keep it installed but to > deactivate it? I don’t have it installed, but maybe /etc/dbus-1/system.d/gnome-power-manager.conf is of help. It suggest that gnome-power-manager is launched through DBUS, so you should be able to disable it that way. Regards, Mathias -- debian/rules signature.asc Description: OpenPGP digital signature
Disable gnome-power-manager?
Am I the only one who finds the gnome-power-manager to be fundamentally flawed? A power daemon needs intrinsically to be system-global and not specific to a particular login session. This becomes obvious when there are several logins active at the same time (on different virtual consoles), typically with different users. Now, recent versions of the gnome-desktop-environment depend on gnome-power-management, so it makes it inconvenient to deinstall the gnome-power-management package. Is there a way to keep it installed but to deactivate it? Stefan -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Bug#403969: Info received (Bug#403969: tdfx crashes X with AIGLX but without (working) libglide3)
Thank you for the additional information you have supplied regarding this problem report. It has been forwarded to the package maintainer(s) and to other interested parties to accompany the original report. Your message has been sent to the package maintainer(s): Debian X Strike Force <[EMAIL PROTECTED]> If you wish to continue to submit further information on this problem, please send it to [EMAIL PROTECTED], as before. Please do not reply to the address at the top of this message, unless you wish to report a problem with the Bug-tracking system. Debian bug tracking system administrator (administrator, Debian Bugs database)
Re: dumb question about aAdobe Acrobat....
From: Douglas Allan Tutty <[EMAIL PROTECTED]> To: debian-user@lists.debian.org Subject: Re: dumb question about aAdobe Acrobat Date: Sat, 28 Jul 2007 21:12:31 -0400 On Sat, Jul 28, 2007 at 11:39:18PM +0100, Brad Rogers wrote: > On Sat, 28 Jul 2007 15:57:11 -0500 > John Hasler <[EMAIL PROTECTED]> wrote: > > Hello John, > > > Do you actually _need_ acroread? Xpdf isn't good enough? > > IIRC, Xpdf doesn't have the ability to do form filling. With acroread, > you can fill out forms (they have to be set up to allow it, of course), > and then print them, already filled in. Obviously, you can't save the > filled out form. > > With my cruddy handwriting, I need all the help I can get. :-) Sounds like a crazy propriatary scheme. Whatever happened to sending out the Latex of a document. Recipients can latex it to view it, make changes, get it right, then email the latex back. Nevertheless it was chosen by the UK authorities as a method of filing accounts electronically. As for printing but not saving an altered pdf, can't you print to file (or get your print spooler to do it) so that you have a ps of the pdf? Burst the ps pages apart, turn them into eps, encorporate them into your latex document and away you go. I am not interested in printing it. Just editing it and submitting it and filing the accounts. It may be that I could do it with an ordinary editor Adobe just had to reinvent their own wheel, convince everyone else that it was the only wheel around (so to speak) and make life difficult for us. Doug. That may be in part true. But there are a very large number of companies registered here and so a way of avoiding Adobe software is probably useful if I can figure it out and then point it out to others. Even if it is a slightly funny work around. Who knows, maybe I will discover some useful information in doing this that you can't find already by searching the web after all Or maybe not. Regards Michael Fothergill -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] _ The next generation of Hotmail is here! http://www.newhotmail.co.uk -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: lenny: getting non-free nvidia drivers issue
Douglas Allan Tutty wrote: On Sun, Jul 29, 2007 at 06:19:47AM -0500, Hugo Vanwoerkom wrote: > Yes I'm running amd64. However, since I'm on slow dialup and the amd64 box is the only one with a CD burner and lots of drive space, it would be a major headache to have something happen that caused stuff to not work. But what could happen if you tried it on a duplicate partition? So it doesn't work. You go back to the working partition. The box uses LVM so I can't give Lenny its own actual disk partitions. Also, downloading a whole new installation is non-trivial at 28.8 Kb/s (sometimes 14.4, sometimes 9600). I'm many miles from the telephone exchange. It took a few days to install an ia32 chroot with just base, mc, lynx, and iceweasel. True. I forgot: you stated before that you were using LVM. I am running on a dialup modem myself and the last Sid upgrade took 2.5 days. Hugo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
On Sun, Jul 29, 2007 at 12:48:16PM +, Tyler Smith wrote: > On 2007-07-29, Jeff D <[EMAIL PROTECTED]> wrote: > I ran rkhunter again, and then for good measure I aptitude --purged > it, reinstalled, and ran again. And then I thought maybe the whole > thing was compromised, so I purged it again, installed rkhunter 1.30 > from sourceforge, and ran again. And I also ran chkrootkit. In all > cases they showed nothing happening, except for warning me that some > of my /bin executables had been replaced by scripts -- stuff like > egrep, fgrep etc. > > So perhaps it was just a false positive. I'm going to read up on > security stuff now, so maybe I'll have some idea how to proceed the > next time. > Its tricky. If you have been rooted, you can't trust anything on the system, including aptitude. As for reading, try the package harden-doc. Good luck. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
poll: use of kernel schedulers?
Hi, I am curious, how many of you play with kernel schedulers that are not in mainline? To name just a few, there is CFS: http://www.linuxinsight.com/cfs-scheduler-to-appear-in-linux-kernel-2.6.23.html And there still is ck1 for 2.6.22 (and previous), but there will not be for 2.6.23 or beyond: http://members.optusnet.com.au/ckolivas/kernel/ I have used both, with good results "feeling-wise" but statistics-wise there only is the current flame war on the kernel list, ultimately the reason that Con Kolivas quit. I am currently running Debian's: [EMAIL PROTECTED]:~$ uname -a Linux debian 2.6.22-1-k7 #1 SMP PREEMPT Sun Jul 29 07:39:18 CDT 2007 i686 GNU/Linux to which 2.6.22-ck1 has been added. Hugo -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: Asus P5K WS motherboard / Marvell IDE - CDrom not detected by installer
On Sun, Jul 29, 2007 at 03:55:18AM -0800, Mike Messick wrote: > > I'm using the latest debian-testing-amd64-businesscard installer on an > Asus P5K motherboard with an ICH9 Southbridge and Marvell 88SE61xx SATA / > PATA chipset. I'm using an HP dvd1040i CDrom drive for installation. > > The installer boots fine but cannot find any cdrom device to use. When I > look at dmesg, I get the following output relating to the ide devices: > [snip dmesg] > an lspci yields the following IDE devices: [snip lspci] > So it looks like my 2 hard drives are showing up just fine, but I'm fairly > clueless as to why the kernel (2.6.21-2-amd64) isn't finding the CDrom > drive. > > I've verified that the Marvell IDE/eSATA controller is enabled in the BIOS > as well (hence the initial booting of the installer CD). > > I'm hoping someone on the list can point me in the right direction; if > this isn't the appropriate list then please accept my apologies for the > noise. Its not noise. However, check out the installation manual. It tells you how to submit an installation report via the BTS with email to bugs.debian.org to the (I think) installation-reports psudo-package. The 'maintainer' for the reports is the debian-boot team who write the installer. I would suggest that you subscribe to debian-boot, follow the instructions in the manual and submit an installation report. Since they know how the installer works, they can be of more specific help. They certainly were when I was in your shoes 8 months ago. Good luck, Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: /bin/login listening?
On 2007-07-29, Jeff D <[EMAIL PROTECTED]> wrote: > >>From the looks of it, it could have just been a false positive. ive seen > rkhunter report a few, not very often though. I'd run rkhunter again, > install chkrootkit, run that, see if the two match up. > > As far as debsums reporting back on the rkhunter files, those will > probably not match, as they can get updated. > I ran rkhunter again, and then for good measure I aptitude --purged it, reinstalled, and ran again. And then I thought maybe the whole thing was compromised, so I purged it again, installed rkhunter 1.30 from sourceforge, and ran again. And I also ran chkrootkit. In all cases they showed nothing happening, except for warning me that some of my /bin executables had been replaced by scripts -- stuff like egrep, fgrep etc. So perhaps it was just a false positive. I'm going to read up on security stuff now, so maybe I'll have some idea how to proceed the next time. Thanks for your help, Tyler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: lenny: getting non-free nvidia drivers issue
On Sun, Jul 29, 2007 at 06:19:47AM -0500, Hugo Vanwoerkom wrote: > > >Yes I'm running amd64. However, since I'm on slow dialup and the amd64 > >box is the only one with a CD burner and lots of drive space, it would > >be a major headache to have something happen that caused stuff to not > >work. > > But what could happen if you tried it on a duplicate partition? So it > doesn't work. You go back to the working partition. > The box uses LVM so I can't give Lenny its own actual disk partitions. Also, downloading a whole new installation is non-trivial at 28.8 Kb/s (sometimes 14.4, sometimes 9600). I'm many miles from the telephone exchange. It took a few days to install an ia32 chroot with just base, mc, lynx, and iceweasel. Doug. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: A question of fonts
On Sat, 28 Jul 2007 22:28:13 +0100, andy wrote: [...] > I do have the latest msttcorefonts installed. It just looks crap with > Xmms and sometimes Iceweasel seems difficult to read too. But > certainly Xmms is the worst of the bunch. This could also be a problem with your settings for font display rather than with the fonts themselves. I do not use XMMS, so here is a demonstration of the influence of font settings on iceweasel (PNG image, 55.6 KB): http://users.icfo.es/Florian.Kulzer/fontconfig/iceweasel-font-comparison.png Maybe you can post your font settings and we can have a look: awk '/fontconfig/,/^$/' /var/cache/debconf/config.dat xrdb -query | grep Xft -- Regards,| http://users.icfo.es/Florian.Kulzer Florian | -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Asus P5K WS motherboard / Marvell IDE - CDrom not detected by installer
Hi Folks, I'm using the latest debian-testing-amd64-businesscard installer on an Asus P5K motherboard with an ICH9 Southbridge and Marvell 88SE61xx SATA / PATA chipset. I'm using an HP dvd1040i CDrom drive for installation. The installer boots fine but cannot find any cdrom device to use. When I look at dmesg, I get the following output relating to the ide devices: Uniform Multi-Platform E-IDE driver Revision: 7.00alpha2 ide: Assuming 33MHZ system bus speed for PIO modes; override with idebus=xx pnp: the driver 'ide' has been registered ata_piix: :00:1f.2: version 2.10ac1 ata_piix: :00:1f.2: MAP [ P0 P2 P1 P3 ] ata1: SATA max UDMA/133 cmd 0x000101f0 ctl 0x000103f6 bmdma 0x0001ff90 irq 14 ata1: SATA max UDMA/133 cmd 0x000101f0 ctl 0x00010376 bmdma 0x0001ff98 irq 15 scsi0: ata_piix ata1.00: ATA-7: ST3500630AS, 3.AAK, max UDMA/133 ata1.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 0/32) ata1.00: configured for UDMA/133 scsi1: ata_piix ata2.00: ATA-7: ST3500630AS, 3.AAK, max UDMA/133 ata2.00: 976773168 sectors, multi 16: LBA48 NCQ (depth 0/32) ata2.00: configured for UDMA/133 scsi: 0:0:0:0: Direct-Access ATA ST3500630AS 3.AA PQ: 0 ANSI: 5 scsi: 1:0:0:0: Direct-Access ATA ST3500630AS 3.AA PQ: 0 ANSI: 5 ata_piix :00:1f.5: MAP [ P0 P2 P1 P3 ] ata3: SATA max UDMA/133 cmd 0x0001a000 ctl 0x00019c02 bmdma 0x00019480 irq 22 ata4: SATA max UDMA/133 cmd 0x00019880 ctl 0x00019802 bmdma 0x00019488 irq 22 scsi2: ata_piix ATA: abnormal status 0x7F on port 0x0001a007 scsi3: ata_piix ATA: abnormal status 0x7F on port 0x00019887 SCSI device sda: 976773168 512-byte hdwr sectors (500108 MB) sda: Write protect is off sda: Mode Sense: 00 3a 00 00 SCSI device sda: write cache: enabled, read cache: enabled, doesn't support DPO or FUA SCSI device sda: 976773168 512-byte hdwr sectors (500108 MB) sda: Write protect is off sda: Mode Sense: 00 3a 00 00 SCSI device sda: write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: unknown partition table sd: 0:0:0:0: Attached scsi disk sda SCSI device sdb: 976773168 512-byte hdwr sectors (500108 MB) sdb: Write protect is off sdb: Mode Sense: 00 3a 00 00 SCSI device sdb: write cache: enabled, read cache: enabled, doesn't support DPO or FUA SCSI device sdb: 976773168 512-byte hdwr sectors (500108 MB) sdb: Write protect is off sdb: Mode Sense: 00 3a 00 00 SCSI device sdb: write cache: enabled, read cache: enabled, doesn't support DPO or FUA sdb: unknown partition table sd: 1:0:0:0: Attached scsi disk sdb ide0: I/O resource 0x3F6-0x3F6 not free. ide0: ports already in use, skipping probe ide1: I/O resource 0x376-0x376 not free. ide1: ports already in use, skipping probe an lspci yields the following IDE devices: 00:1f.2 IDE interface: Intel Corporation Unknown device 2920 (rev 02) (prog-if 8a [Master SecP PriP]) Subsystem: ASUSTeK Computer Inc. Unknown device 8277 Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 22 I/O ports at 01f0 [size=8] I/O ports at 03f4 [size=1] I/O ports at 0170 [size=8] I/O ports at 0374 [size=1] I/O ports at ff90 [size=16] I/O ports at ffa0 [size=16] Capabilities: [70] Power Management version 3 Capabilities: [b0] Vendor Specific Information 00:1f.5 IDE interface: Intel Corporation Unknown device 2926 (rev 02) (prog-if 85 [Master SecO PriO]) Subsystem: ASUSTeK Computer Inc. Unknown device 8277 Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 22 I/O ports at a000 [size=8] I/O ports at 9c00 [size=4] I/O ports at 9880 [size=8] I/O ports at 9800 [size=4] I/O ports at 9480 [size=16] I/O ports at 9400 [size=16] Capabilities: [70] Power Management version 3 Capabilities: [b0] Vendor Specific Information 01:00.0 IDE interface: Marvell Technology Group Ltd. Unknown device 6121 (rev b1) (prog-if 8f [Master SecP SecO PriP PriO]) Subsystem: ASUSTeK Computer Inc. Unknown device 8296 Flags: bus master, fast devsel, latency 0, IRQ 10 I/O ports at bc00 [size=8] I/O ports at b880 [size=4] I/O ports at b800 [size=8] I/O ports at b480 [size=16] I/O ports at b400 [size=16] Memory at fe7ffc00 (32-bit, non-prefetchable) [size=1K] Capabilities: [48] Power Management version 2 Capabilities: [50] Messsage Signalled Interrupts: Mask- 64bit- Queue=0/0 Enable- Capabilities: [e0] Express Legacy Endpoint IRQ 0 So it looks like my 2 hard drives are showing up just fine, but I'm fairly clueless as to why the kernel (2.6.21-2-amd64) isn't finding the CDrom drive. I've verified that the Marvell IDE/eSATA controller is enabled in the BIOS as well (hence the initial booting of the installer CD). I'm hoping someone on the list can point me in the right direction; if this isn't the appropriate list then please accept my apologies for the noise. Thanks in advance, -Mike. == Mike Messick Dona n
Re: lenny: getting non-free nvidia drivers issue
Douglas Allan Tutty wrote: On Sat, Jul 28, 2007 at 05:23:26PM -0700, Alan Ianson wrote: On Sat July 28 2007 15:45, Douglas Allan Tutty wrote: Difficulty with nvidia is the main reason that I'm sticking with Etch. Are you running an amd64 there? I have had no trouble on the amd64 with the nvidia drivers. There a couple issues that I know of for the i386 but amd64 has been painless.. :) Yes I'm running amd64. However, since I'm on slow dialup and the amd64 box is the only one with a CD burner and lots of drive space, it would be a major headache to have something happen that caused stuff to not work. But what could happen if you tried it on a duplicate partition? So it doesn't work. You go back to the working partition. My other boxes are a 486 and a PII and etch stuff needs so much memory that using them to 'rescue' the amd64 is painful. I've tried it as part of verifying my backup strategy but its difficult. So, in effect, my Athlon box for me is mission-critical and I'll stick with stable now that its etch. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Documented NFS/statd Debian Bug
Subject: nfs-common: NFS volume no longer mounted on boo Sun Jul 29 08:31:18 2007: Setting up networking Sun Jul 29 08:31:18 2007: Configuring network interfaces...Starting portmap daemon Sun Jul 29 08:31:19 2007: mount.nfs: rpc.statd is not running but is required for remote locking Sun Jul 29 08:31:19 2007:Either use "-o nolocks" to keep locks local, or start statd. Sun Jul 29 08:31:19 2007: mount.nfs: rpc.statd is not running but is required for remote locking Sun Jul 29 08:31:19 2007:Either use "-o nolocks" to keep locks local, or start statd. Sun Jul 29 08:31:20 2007: mount.nfs: rpc.statd is not running but is required for remote locking Sun Jul 29 08:31:20 2007:Either use "-o nolocks" to keep locks local, or start statd. Sun Jul 29 08:31:20 2007: mount.nfs: rpc.statd is not running but is required for remote locking Sun Jul 29 08:31:20 2007:Either use "-o nolocks" to keep locks local, or start statd. Sun Jul 29 08:31:20 2007: mount.nfs: rpc.statd is not running but is required for remote locking Sun Jul 29 08:31:20 2007:Either use "-o nolocks" to keep locks local, or start statd. Sun Jul 29 08:31:21 2007: done. Sun Jul 29 08:31:21 2007: Starting portmap daemon...Already running.. Sun Jul 29 08:31:21 2007: Starting NFS common utilities: statd idmapd. http://groups.google.com/group/linux.debian.bugs.dist/browse_frm/thread/5872ffd5eb89d1bd/8f82d66c7f9870d3?lnk=st&q=mount.nfs%3A+rpc.statd+is+not+running+but+is+required+for+remote+locking&rnum=10#8f82d66c7f9870d3 http://www.mail-archive.com/[EMAIL PROTECTED]/msg369274.html Besides adding a manual fix for this, is there any ETA for a proper fix of the init scripts as NFS no longer mount due to statd not being started before it attempts to mount the shares from other machines? Justin. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: clamav returns an ERROR in exim 4 mainlog
Hi Robert, I've had the same problem on my server. I think this is due to an access deny on the mail data. You may want to add clamav user to the Debian-exim group and restart clamd so that the clamd process is able to access /var/spool/exim4/scan/whatever. Have a nice Sunday! On Sun, Jul 29, 2007 at 06:51:10AM +, Robert Cates wrote: > Hi all, > > I'm getting this error message in my exim mainlog and I have no idea why > and what to do about it, please help: > > malware acl condition: clamd: ClamAV returned > /var/spool/exim4/scan/1IF2JG-0004Oy-Sh: lstat() failed. ERROR > > I'm running debian etch and I suspect I need to add clamav as a trusted > user, in other words I need to change some permissions, but I'm not sure > where. I'm using exim in the combined configuration mode. > > So what's the best way to clear-up this problem? > > Thanks in advance! > Robert > > _ > Need a brain boost? Recharge with a stimulating game. Play now!? > http://club.live.com/home.aspx?icid=club_hotmailtextlink1 > > > -- > To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a > subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED] > -- work hard, die young http://www.mc-thias.org IT Stuff on http://blog.mc-thias.org Thias -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
Re: A question of fonts
On 07/28/2007 01:30 PM, Alan Ianson wrote: > On Sat July 28 2007 12:30, Glen Pfeiffer wrote: >> msttcorefonts >> >> It is available in the debian-multimedia repository. >> http://www.debian-multimedia.org/ > > This package is in contrib. No need for debian-multimedia for > this one. Whoops! Thanks for correcting that. -- Glen -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
