Re: Seeking advice on router. (Problem solved)
by Pete Travis
On Aug 26, 2016 10:57, "Richard Shaw" <hobbes1069(a)gmail.com> wrote:
>
> Aug 26, 2016 at 10:47 AM, Erik P. Olsen <epodata(a)gmail.com> wrote:
>>
>> On 2016-08-20 at 17:44:02 Erik P. Olsen wrote:
>>
>> > I have a linksys router model WRT160NL but the range is too short. I
>> > experience many situations where the connection is dropped when the
>> > distance from the router is more than 25 feet. What is the recommended
>> > router when it comes to signal strength? I would prefer one which can
>> > be flashed with dd-wrt.
>>
>> Thought I'd let you know that I took the advice about using an access
>> point. I bought a UniFi AC-AP LR although the controller wont run on
>> Fedora 23. However the UniFi app does easily set up the AP. It took 10
>> minutes after having unpacked it and with the TX power on high it
>> knocks through all the obstacles.
>
>
> Never say never! I actually created an RPM from their linux zip file that
I used on my F22 box and now CentOS 7. It's not eligible for fedora because
much of it is prebuilt and I can't submit it to RPM Fusion non-free because
there's no clear licensing, but it does work although it is missing a few
features over the windows version.
>
> I even emailed them about the licensing but they seem to have gotten
confused since you can use it for "free". I gave up after that.
>
> You can use their zip file directly, I just packaged it because I package
everything I install and to tweak some install locations to be more FHS
compliant.
>
> Thanks,
> Richard
>
>
>
> --
>
I've had unifi packaging on the todo list, do you mind sharing your spec?
--Pete
7 years, 9 months
SELinux and Polkit on Fedora 24
by Earl Ramirez
Good day Fedora Community,
On the 21st of August there were a number of updates applied, which
includes:
Aug 21 06:06:17 INFO Upgraded: systemd-libs-229-13.fc24.x86_64
Aug 21 06:06:28 INFO Upgraded: selinux-policy-3.13.1-191.12.fc24.noarch
Aug 21 06:06:34 INFO Upgraded: systemd-229-13.fc24.x86_64
Aug 21 06:06:41 INFO Upgraded: systemd-udev-229-13.fc24.x86_64
Aug 21 06:06:42 INFO Upgraded: firewalld-filesystem-0.4.3.3-1.fc24.noarch
Aug 21 06:06:49 INFO Upgraded: python3-firewall-0.4.3.3-1.fc24.noarch
Aug 21 06:07:02 INFO Upgraded: firewalld-0.4.3.3-1.fc24.noarch
Aug 21 06:07:12 INFO Upgraded: systemd-container-229-13.fc24.x86_64
Aug 21 06:07:20 INFO Upgraded:
selinux-policy-targeted-3.13.1-191.12.fc24.noarch
Aug 21 06:07:29 INFO Upgraded:
selinux-policy-devel-3.13.1-191.12.fc24.noarch
Aug 21 06:07:29 INFO Upgraded: systemd-compat-libs-229-13.fc24.x86_64
After this update I am not able to start any KVM vms with SELinux in
Enforcing mode, each time I try to start a vm I will get the following
error, "Error starting domain: SELinux policy denies access."
Checked the SELinux labels for /var/lib/libvirt/ and it all looks okay to
me.
drwx--x--x. 2 root root system_u:object_r:virt_content_t:s0 4096 Jul 19
02:42 boot
drwxr-xr-x. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Aug 25
16:23 dnsmasq
drwx--x--x. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Jul 19
02:42 filesystems
lrwxrwxrwx. 1 root root system_u:object_r:virt_image_t:s0 13 Jul 19
02:42 images -> /mnt/kvmstore
drwx------. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Jul 19
02:42 libxl
drwx------. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Jul 19
02:42 lxc
drwx------. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Jul 19
02:42 network
drwxr-x--x. 27 qemu qemu system_u:object_r:qemu_var_run_t:s0 4096 Aug 26
13:02 qemu
drwx------. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Jul 19
02:42 uml
drwx------. 2 root root system_u:object_r:virt_var_lib_t:s0 4096 Jul 19
02:42 xen
Used restorecron -R -v to the directory and it made no difference; however
I do see the below from the audit.log, which I am getting for each vm, I
noticed that its showing old and new for memory, vcpu Etc., but nothing was
changed on the actual vms.
type=VIRT_RESOURCE msg=audit(1472209871.046:34586): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk
reason=start vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
old-disk="?" new-disk="/var/lib/libvirt/images/vm-f24-dev.qcow2"
exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1472209871.046:34587): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net
reason=start vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
old-net="?" new-net="52:54:00:c2:e4:ca" exe="/usr/sbin/libvirtd" hostname=?
addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1472209871.046:34588): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=dev
reason=start vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
bus=usb device=555342207265646972646576 exe="/usr/sbin/libvirtd" hostname=?
addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1472209871.046:34589): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=dev
reason=start vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
bus=usb device=555342207265646972646576 exe="/usr/sbin/libvirtd" hostname=?
addr=? terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1472209871.046:34590): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem
reason=start vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
old-mem=0 new-mem=4194304 exe="/usr/sbin/libvirtd" hostname=? addr=?
terminal=? res=success'
type=VIRT_RESOURCE msg=audit(1472209871.046:34591): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu
reason=start vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
old-vcpu=0 new-vcpu=2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=?
res=success'
type=VIRT_CONTROL msg=audit(1472209871.046:34592): pid=1338 uid=0
auid=4294967295 ses=4294967295
subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start
reason=booted vm="vm-f24-dev" uuid=72077648-c148-4121-97da-400baa4ce9f4
vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed'
Additionally, I have seen each time I use tab for word completion with
firewall-cmd I am being asked for my password for tab completion each time
I hit the tab key, if I enter my password completion will work and if I
don't I will get the following warning and will just sit there unless I
terminate it with ctrl+c
sudo firewall-cmd --add-sAuthorization failed.
Make sure polkit agent is running or run the application as superuser.
I have also confirmed that polkit.service is running.
systemctl -l status polkit.service
● polkit.service - Authorization Manager
Loaded: loaded (/usr/lib/systemd/system/polkit.service; static; vendor
preset: enabled)
Active: active (running) since Sun 2016-08-21 07:22:50 CEST; 5 days ago
Docs: man:polkit(8)
Main PID: 1237 (polkitd)
Tasks: 6 (limit: 512)
Memory: 4.1M
CPU: 1.517s
CGroup: /system.slice/polkit.service
└─1237 /usr/lib/polkit-1/polkitd --no-debug
Aug 26 09:42:43 rog-cc polkitd[1237]: Registered Authentication Agent for
unix-process:3544:44040824 (system bus name :1.1082 [/usr/bin/pkttyagent
--notify-fd 4
Aug 26 09:42:43 rog-cc polkitd[1237]: Unregistered Authentication Agent for
unix-process:3544:44040824 (system bus name :1.1082, object path
/org/freedesktop/Pol
Aug 26 09:54:38 rog-cc polkitd[1237]: Registered Authentication Agent for
unix-process:4162:44112284 (system bus name :1.1092 [/usr/bin/pkttyagent
--notify-fd 4
Aug 26 09:54:42 rog-cc polkitd[1237]: Operator of
unix-process:4162:44112284 successfully authenticated as unix-user:eramirez
to gain ONE-SHOT authorization for
Aug 26 09:54:42 rog-cc polkitd[1237]: Unregistered Authentication Agent for
unix-process:4162:44112284 (system bus name :1.1092, object path
/org/freedesktop/Pol
Aug 26 10:31:13 rog-cc polkitd[1237]: Registered Authentication Agent for
unix-process:5360:44331846 (system bus name :1.1109 [/usr/bin/pkttyagent
--notify-fd 4
Aug 26 10:31:17 rog-cc polkitd[1237]: Operator of
unix-process:5360:44331846 successfully authenticated as unix-user:eramirez
to gain ONE-SHOT authorization for
Aug 26 10:31:19 rog-cc polkitd[1237]: Unregistered Authentication Agent for
unix-process:5360:44331846 (system bus name :1.1109, object path
/org/freedesktop/Pol
Aug 26 13:03:00 rog-cc polkitd[1237]: Operator of unix-session:2
successfully authenticated as unix-user:eramirez to gain TEMPORARY
authorization for action org.
Aug 26 13:03:06 rog-cc polkitd[1237]: Operator of unix-session:2 FAILED to
authenticate to gain authorization for action
org.fedoraproject.FirewallD1.config for
Shall I file a bug for this?
--
Kind Regards
Earl Ramirez
7 years, 9 months
the "ls" command line
by Angelo Moreschini
what is the difference between these two commands ?
ls /*
and
ls /*/
-------------------
these two commands give me different output:
ls -ld /* =--->list all the files inside the directory (both files and
subdirectories)
ls -ld /*/ =---> give me the list of only the (subdirectory inside the
directory)
Thank you
Angelo
7 years, 9 months
encrypted partitions
by Patrick Dupre
Hello,
On a laptop, I would like to setup 2 encrypted partitions with the same
passphrase (this is easy). Now, when I boot the laptop, I would like to have
to provide the passphrase only one time.
Is it possible?
Thank.
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire de Physico-Chimie de l'Atmosphère | |
Université du Littoral-Côte d'Opale | |
Tel. (33)-(0)3 28 23 76 12 | | Fax: 03 28 65 82 44
189A, avenue Maurice Schumann | | 59140 Dunkerque, France
===========================================================================
7 years, 9 months
lirc on fedora?
by Tom Horsley
I see lirc rpms on fedora, but I wonder about the systemd
integration. The /usr/share/doc/lirc-core/README.fedora
file doesn't quite seem to document the actual installation.
The /usr/lib/systemd/system/lircd.service file says
it depends on the lircd-setup.service, which doesn't
seem to have a service file anywhere.
On the other hand, it might make more sense just to run
lirc as my normal user when I login using a startup script.
Anyone have any experience running lirc on fedora
using the packages from the repo?
7 years, 9 months
calendar program loops
by Jon LaBadie
Upgraded to F24 and had a big surprise this morning,
a mail queue clogged by over 400,000 messages.
Root runs a nightly cronjob of "/usr/bin/calendar -a"
to look at each users calendar file and send notices
of upcoming events. The new version loops endlessly
through all the users.
If I run calendar as myself without the -a option
it doesn't loop. Run it as "sudo calendar -a" and
I have to kill it quickly or the mail system will
clog again.
My google and bugzilla search did not find any
comparable reports. Is anyone using this ancient
command with the -a option?
Jon
--
Jon H. LaBadie jonfu(a)jgcomp.com
7 years, 9 months
Evercookies & other malware: A different approach
by Drew Samson
As I've been contemplating this over the last few days it occurred to me
tools to deal with this effectively are readily at our disposal. The
bullet-proof way to deal with this is related to what I wrote a few days
ago. As I mentioned, I do my web browsing inside virtualbox and
virtualbox has what are called immutable images. I can make my vm disk
read-only and it's easy to do. I know this is not a viable solution for
some, however for those who are able to go this route it really doesn't
matter what gets loose or written to obscure locations since it'll all
be wiped out after a restart. Hence: no tracking and no malware
possible...persistently anyway.
I also looked into other ways this may be accomplished from within the
OS itself. I haven't implemented or experimented with this since what
works for me takes all of 5 minutes yet I list it so that perhaps it may
be helpful in giving someone else a solution that works for them.
Tool: firejail & firectl - from their page...
*"Firejail* is a SUID program that reduces the risk of security breaches
by restricting the running environment of untrusted applications using
Linux namespaces <https://lwn.net/Articles/531114/> and seccomp-bpf
<https://l3net.wordpress.com/2015/04/13/firejail-seccomp-guide/>. It
allows a process and all its descendants to have their own private view
of the globally shared kernel resources, such as the network stack,
process table, mount table."
It also has a ready template for Firefox.
https://firejail.wordpress.com/
The latest version: 0.9.42-rc1 released 7/21/16
https://lwn.net/Articles/671534/ firejail review
http://www.pcreview.co.uk/threads/firejail.4069760/ another review
I'm not sure if this would prevent tracking however since I haven't used
the tool and don't know if it's easy to "reset" the environment once an
app closes. I also considered a permissions-based approach yet after
considering it it doesn't seem much different than using a gui plugin:
if a browser doesn't have permission to write a cookie or run a script
it would probably respond just like the gui tools banning the same.
Also let me be clear my "bulletproof" comment above was only in the
context of malware; not protection from a hacker/cracker since if they
were able to jump out of the vm into the host...then obviously they've
also left the ro env.
hth.
Drew
7 years, 9 months
Booting LiveCD from the Hard Disk
by Philip Rhoades
People,
Whether I use a GRUB2 configuration to boot from the XFCE LiveCD iso or
extract the files and not have to use the loopback option - I get the
same problem - the boot process gets past linux and initrd and then has
problems ie:
[ 3.141117] localhost kernel: clocksource: tsc: mask:
0xffffffffffffffff max_cycles: 0x73401d16425, max_idle_ns: 881590940111
ns
[ 3.400709] localhost iscsid[324]: can't open InitiatorName
configuration file /etc/iscsi/initiatorname.iscsi
[ 3.400773] localhost iscsid[324]: Warning: InitiatorName file
/etc/iscsi/initiatorname.iscsi does not exist or does not contain a
properly formated InitiatorName. If using s
[ 3.400810] localhost iscsid[324]: can't open InitiatorAlias
configuration file /etc/iscsi/initiatorname.iscsi
[ 3.400845] localhost iscsid[324]: can't open iscsid.safe_logout
configuration file /etc/iscsi/iscsid.conf
[ 124.495385] localhost kernel: random: nonblocking pool is initialized
[ 124.799208] localhost dracut-initqueue[472]: Warning:
dracut-initqueue timeout - starting timeout scripts
[ 125.306596] localhost dracut-initqueue[472]: Warning:
dracut-initqueue timeout - starting timeout scripts
. .
[ 184.496528] localhost dracut-initqueue[472]: Warning:
dracut-initqueue timeout - starting timeout scripts
[ 185.002817] localhost dracut-initqueue[472]: Warning:
dracut-initqueue timeout - starting timeout scripts
[ 185.003527] localhost dracut-initqueue[472]: Warning: Could not boot.
[ 185.004425] localhost dracut-initqueue[472]: Warning:
/dev/disk/by-label/Fedora-Live-Xfce-x86_64-24-1.2 does not exist
[ 185.005291] localhost dracut-initqueue[472]: Warning:
/dev/mapper/live-rw does not exist
[ 185.009415] localhost systemd[1]: Starting Setup Virtual Console...
[ 185.010711] localhost systemd[1]: Started Setup Virtual Console.
[ 185.119933] localhost kernel: audit_printk_skb: 3 callbacks
suppressed
[ 185.120246] localhost kernel: audit: type=1130
audit(1471958788.345:12): pid=1 uid=0 auid=4294967295 ses=4294967295
subj=kernel msg='unit=systemd-vconsole-setup comm="systemd
[ 185.012519] localhost audit[1]: SERVICE_START pid=1 uid=0
auid=4294967295 ses=4294967295 subj=kernel
msg='unit=systemd-vconsole-setup comm="systemd"
exe="/usr/lib/systemd/sys
[ 185.012891] localhost systemd[1]: Starting Dracut Emergency Shell...
Indeed, /dev/disk/by-label does not exist but I don't know to how to fix
the problem - assuming it is possible to fix . .
Any ideas / suggestions?
(BTW, this stuff is not "Mission Critical" - it is just an interesting
exercise . . )
Thanks,
Phil.
--
Philip Rhoades
PO Box 896
Cowra NSW 2794
Australia
E-mail: phil(a)pricom.com.au
7 years, 9 months
Re: Booting LiveCD from the Hard Disk
by Philip Rhoades
Tom,
On 2016-08-24 00:02, users-request(a)lists.fedoraproject.org wrote:
> Date: Tue, 23 Aug 2016 23:50:01 +1000
> From: Philip Rhoades <phil(a)pricom.com.au>
> Subject: Booting LiveCD from the Hard Disk
> To: Community support for Fedora users <users(a)lists.fedoraproject.org>
> Message-ID: <e4a73c09c88cb7d26c9a2189c0489f79@localhost>
> Content-Type: text/plain; charset=US-ASCII; format=flowed
>
> People,
>
> Whether I use a GRUB2 configuration to boot from the XFCE LiveCD iso or
> extract the files and not have to use the loopback option - I get the
> same problem - the boot process gets past linux and initrd and then has
> problems ie:
>
> [ 3.141117] localhost kernel: clocksource: tsc: mask:
> 0xffffffffffffffff max_cycles: 0x73401d16425, max_idle_ns: 881590940111
> ns
> [ 3.400709] localhost iscsid[324]: can't open InitiatorName
> configuration file /etc/iscsi/initiatorname.iscsi
> [ 3.400773] localhost iscsid[324]: Warning: InitiatorName file
> /etc/iscsi/initiatorname.iscsi does not exist or does not contain a
> properly formated InitiatorName. If using s
> [ 3.400810] localhost iscsid[324]: can't open InitiatorAlias
> configuration file /etc/iscsi/initiatorname.iscsi
> [ 3.400845] localhost iscsid[324]: can't open iscsid.safe_logout
> configuration file /etc/iscsi/iscsid.conf
> [ 124.495385] localhost kernel: random: nonblocking pool is
> initialized
> [ 124.799208] localhost dracut-initqueue[472]: Warning:
> dracut-initqueue timeout - starting timeout scripts
> [ 125.306596] localhost dracut-initqueue[472]: Warning:
> dracut-initqueue timeout - starting timeout scripts
>
> . .
>
> [ 184.496528] localhost dracut-initqueue[472]: Warning:
> dracut-initqueue timeout - starting timeout scripts
> [ 185.002817] localhost dracut-initqueue[472]: Warning:
> dracut-initqueue timeout - starting timeout scripts
> [ 185.003527] localhost dracut-initqueue[472]: Warning: Could not
> boot.
> [ 185.004425] localhost dracut-initqueue[472]: Warning:
> /dev/disk/by-label/Fedora-Live-Xfce-x86_64-24-1.2 does not exist
> [ 185.005291] localhost dracut-initqueue[472]: Warning:
> /dev/mapper/live-rw does not exist
> [ 185.009415] localhost systemd[1]: Starting Setup Virtual Console...
> [ 185.010711] localhost systemd[1]: Started Setup Virtual Console.
> [ 185.119933] localhost kernel: audit_printk_skb: 3 callbacks
> suppressed
> [ 185.120246] localhost kernel: audit: type=1130
> audit(1471958788.345:12): pid=1 uid=0 auid=4294967295 ses=4294967295
> subj=kernel msg='unit=systemd-vconsole-setup comm="systemd
> [ 185.012519] localhost audit[1]: SERVICE_START pid=1 uid=0
> auid=4294967295 ses=4294967295 subj=kernel
> msg='unit=systemd-vconsole-setup comm="systemd"
> exe="/usr/lib/systemd/sys
> [ 185.012891] localhost systemd[1]: Starting Dracut Emergency Shell...
>
> Indeed, /dev/disk/by-label does not exist but I don't know to how to
> fix
> the problem - assuming it is possible to fix . .
>
> Any ideas / suggestions?
>
> (BTW, this stuff is not "Mission Critical" - it is just an interesting
> exercise . . )
>
> Thanks,
>
> Phil.
>
> --
> Philip Rhoades
>
> PO Box 896
> Cowra NSW 2794
> Australia
> E-mail: phil(a)pricom.com.au
>
> ------------------------------
>
> Date: Tue, 23 Aug 2016 10:01:30 -0400
> From: Tom Horsley <horsley1953(a)gmail.com>
> Subject: Re: Booting LiveCD from the Hard Disk
> To: users(a)lists.fedoraproject.org
> Message-ID: <20160823100130.2134f9d6@zooty>
> Content-Type: text/plain; charset=US-ASCII
>
> On Tue, 23 Aug 2016 23:50:01 +1000
> Philip Rhoades wrote:
>
>> Whether I use a GRUB2 configuration to boot from the XFCE LiveCD iso
>
> I don't know if anyone ever tweaked fedora live cds to have
> the required support to boot via grub. I know at one time I
> read they wouldn't work that way. I do have several livecd
> images setup to boot from disk, but none of them are fedora.
You will note I said the boot process gets past the linux and initrd
stage - so it is past the grub stage and into the Fedora boot stage -
this is a Fedora problem not a GRUB2 problem . .
Thanks,
Phil.
--
Philip Rhoades
PO Box 896
Cowra NSW 2794
Australia
E-mail: phil(a)pricom.com.au
7 years, 9 months