Udev on /dev, Udev and selinux
by Ivan Gyurdiev
I'd like to ask for some help. I'm trying to test selinux, but selinux
won't work with devfs, so I've decided to finally get rid of it and
replace with udev. However, that's rather difficult to do.
First, why does the udev startup script declare its own udev_root and
not respect /etc/udev/udev.conf? Why are the nvidia devices not part of
the udev startup script (since they're widely used, and not yet in sysfs)?
Secondly, I tried creating static /dev/console and /dev/null so that I
can even get to the udev script - I placed it at the beginning after
proc and sys are mounted. However, the root filesystem at this point is
read-only, and the udev script doesn't create the nodes. I could make it
run on ramfs, but then how could I make static /dev/console and
/dev/null? ... and how could I use the selinux policy over ramfs -
that's why I'm getting rid of devfs in the first place.
Why does the udev stop script proceed to remove my static
/dev/console and /dev/null, which it did not create?
Is there any progress on placing udev in initramfs where it's supposed
to go eventually?
20 years
kernel RPM: Why is CONFIG_IEEE1394 unset?
by Martin Stone
Hi all,
Just wondering, in the supplied *i?86*.config files for the kernel src RPM, why
is CONFIG_IEEE1394 unset?
Also wondering why 4KSTACKS is turned on?
Thanks,
Martin
20 years
X.Org and the Dell Optiplex GX270
by Neil Thompson
Hi all,
Has anyone managed to get X working properly with the GX270? I can't
get more than 640x480 on this box.
Looking at the logs, it seems as if X and the BIOS are having a problem
deciding how much memory is available -
(II) I810(0): VESA VBE OEM: Intel(r)865G Graphics Chip Accelerated VGA BIOS
(II) I810(0): VESA VBE OEM Software Rev: 1.0
(II) I810(0): VESA VBE OEM Vendor: Intel Corporation
(II) I810(0): VESA VBE OEM Product: Intel(r)865G Graphics Controller
(II) I810(0): VESA VBE OEM Product Rev: Hardware Version 0.0
(II) I810(0): Integrated Graphics Chipset: Intel(R) 865G
(--) I810(0): Chipset: "865G"
(--) I810(0): Linear framebuffer at 0xF0000000
(--) I810(0): IO registers at addr 0xFEB80000
(II) I810(0): detected 892 kB stolen memory.
(II) I810(0): I830CheckAvailableMemory: 955388 kB available
(II) I810(0): Will attempt to tell the BIOS that there is 12288 kB VideoRAM
(WW) I810(0): Extended BIOS function 0x5f11 not supported.
Is this worth a bugzilla?
Cheers! (Relax...have a homebrew)
Neil
20 years
rawhide report: 20040408 changes
by Build System
Updated Packages:
anaconda-9.92-0.20040407220217
------------------------------
* Wed Apr 07 2004 Anaconda team <bugzilla(a)redhat.com>
- built new version from CVS
* Tue Feb 24 2004 Jeremy Katz <katzj(a)redhat.com>
- buildrequire libselinux-devel
* Thu Nov 06 2003 Jeremy Katz <katzj(a)redhat.com>
- require booty (#109272)
anaconda-help-9.2-1.200404080108
--------------------------------
* Sun Feb 23 2003 Jeremy Katz <katzj(a)redhat.com>
- add requirement on po2xml
* Tue Jul 23 2002 Matt Wilson <msw(a)redhat.com>
- added requirement for xmlto
* Tue Apr 16 2002 Jeremy Katz <katzj(a)redhat.com>
- translation updates
cdrtools-2.01-0.a27.2
---------------------
* Wed Apr 07 2004 Harald Hoyer <harald(a)redhat.com> - 8:2.01-0.a27.2
- added dvd patch from http://people.mandrakesoft.com/~warly/files/cdrtools/
- added note to manpage about configuration path change
curl-7.11.1-1
-------------
* Wed Apr 07 2004 Adrian Havill <havill(a)redhat.com> 7.11.1-1
- upgraded; updated nousr patch
- added COPYING (#115956)
-
device-mapper-1.00.14-1.0
-------------------------
* Tue Apr 06 2004 Alasdair Kergon <agk(a)redhat.com> 1.00.14-1
- Fix static selinux build.
* Tue Apr 06 2004 Alasdair Kergon <agk(a)redhat.com> 1.00.13-1
- Set selinux context when doing mknod.
dvdrtools-0.1.4-6
-----------------
* Wed Apr 07 2004 Harald Hoyer <harald(a)redhat.com> - 0.1.4-6
- made dvdrecord a stub to cdrecord
- changed manpage accordingly
firstboot-1.3.10-2
------------------
* Wed Apr 07 2004 Brent Fox <bfox(a)redhat.com> 1.3.10-2
- allow for correct text mode button translations (bug #120087)
gcc-3.3.3-6
-----------
* Wed Apr 07 2004 Jakub Jelinek <jakub(a)redhat.com> 3.3.3-6
- fix cselib MEM invalidation (Jan Hubicka)
- fix default argument handling in templates (Mark Mitchell, #120221,
PR c++/14763)
- fix PR c++/14724 (Match Mitchell)
* Sat Apr 03 2004 Jakub Jelinek <jakub(a)redhat.com> 3.3.3-5
- different PR optimization/13424 fix
- fix a bug in long long argument handling (Eric Botcazou,
PRs optimization/14235, optimization/13488)
- SPARC ldbl-128 fixes
* Mon Mar 29 2004 Jakub Jelinek <jakub(a)redhat.com> 3.3.3-4
- update from gcc-3_3-branch
- PRs 11527, bootstrap/14356, c++/14230, c++/14401, c++/14476, debug/11231,
debug/11983, debug/14079, driver/13577, middle-end/13448,
middle-end/14470, middle-end/14470, middle-end/14470,
middle-end/14535, opt/10776, optimization/13472, preprocessor/14438,
target/10730, target/13877, target/13889, target/13889, target/14260,
target/14533, target/14533, target/14558, target/14723
- fix PR c/14069
- fix gcj ICE on final unitialized local variable used in switch
(Andrew Haley, #118219, PR java/14581)
- link libgcc_s even to C programs and executables if they need
exception handling
- don't use 3dNOW! prefetches in x86-64 libgcj
(H.J.Lu, #119022, PR target/14326)
- fix up -march=nocona/-mtune=nocona support
- fix typos in ICE hack, add -frandom-seek=0
- another attempt to fix aggregates with mixed const and non-const
members and almost-zero initializer (Eric Botcazou, Mark Mitchell,
PR optimization/13424)
- fix bitfield handling in a.b++ == const to ++a.b == const + 1
transformations (PR c++/14755)
gnome-panel-2.6.0-4
-------------------
* Wed Apr 07 2004 Mark McLoughlin <markmc(a)redhat.com> - 2.6.0-4
- Add patch to make the applications list in the run dialog work
correctly with the new vfs menu module. Bug #118305.
ipsec-tools-0.2.5-1
-------------------
* Tue Apr 06 2004 Bill Nottingham <notting(a)redhat.com>
- update to 0.2.5
kernel-2.6.5-1.308
------------------
* Tue Apr 06 2004 Dave Jones <davej(a)redhat.com>
- More agpgart fixes.
kernel-utils-2.4-9.1.127
------------------------
* Thu Apr 08 2004 Arjan van de Ven <arjanv(a)redhat.com>
- fix bug #120347
libc-client-2002e-5
-------------------
* Wed Apr 07 2004 Joe Orton <jorton(a)redhat.com> 2002e-5
- rebuild
libselinux-1.10-2
-----------------
* Wed Apr 07 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10-2
- Add memleaks patch
* Wed Apr 07 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10-1
- Upgrade to latest from NSA and add more man pages
lvm2-2.00.10-1.3
----------------
* Wed Apr 07 2004 Alasdair Kergon <agk(a)redhat.com> 2.00.10-1
- Update to version 2.00.10, which incorporates the RH-specific patches
and includes various fixes and enhancements detailed in WHATS_NEW.
man-pages-pl-0.23-1
-------------------
* Wed Apr 07 2004 Karsten Hopp <karsten(a)redhat.com>
- use new tarball from ptm.linux.pl (#112253)
- disable rofffix patch
mozplugger-1.5.2-1
------------------
* Wed Apr 07 2004 Than Ngo <than(a)redhat.com> 1.5.2-1
- update to 1.5.2, fix #117424
- remove mozplugger-1.5.0.patch that included in upstream
nautilus-2.6.0-2
----------------
* Wed Apr 07 2004 Alex Larsson <alexl(a)redhat.com> 2.6.0-2
- Make network servers go to network:// again
* Thu Apr 01 2004 Alex Larsson <alexl(a)redhat.com> 2.6.0-1
- update to 2.6.0
* Tue Mar 16 2004 Mike A. Harrisn <mharris(a)redhat.com> 2.5.91-2
- Changed BuildRequires: XFree86-libs >= 4.2.99 to BuildRequires: XFree86-devel
- Fixed BuildRoot to use _tmppath instead of /var/tmp
openoffice.org-1.1.1-2
----------------------
* Tue Apr 06 2004 Dan Williams <dcbw(a)redhat.com> 1.1.1-2
- Fix annoying dialogs on execution of Autopilots
- Bring Tools->Word Count item back (patch was being misapplied)
php-4.3.4-11
------------
* Wed Apr 07 2004 Joe Orton <jorton(a)redhat.com> 4.3.4-11
- add back imap subpackage, using libc-client (#115535)
policy-1.10.1-4
---------------
* Mon Apr 05 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10.1-4
- Many fixes to minor problems
- Pamconsole
- slapd
- mailman
* Mon Apr 05 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10.1-3
- Add can_exec($1_t, usr_t) to allow the execing of third party apps.
rpmdb-fedora-1.91-0.20040408
----------------------------
sendmail-8.12.11-4.5
--------------------
* Wed Apr 07 2004 Dan Walsh <dwalsh(a)redhat.com> 8.12.11-4.5
- Fix security context of pid file for selinux
sysklogd-1.4.1-15
-----------------
* Wed Apr 07 2004 Bill Nottingham <notting(a)redhat.com> 1.4.1rh-15
- fix recvfrom() on 64-bit big-endian platforms (#120201)
system-config-users-1.2.11-4
----------------------------
* Wed Apr 07 2004 Brent Fox <bfox(a)redhat.com> 1.2.11-4
- disable SELinux widgets if it isn't running or isn't enabled (bug #120193)
tomcat-4.1.27-11
----------------
* Wed Apr 07 2004 Gary Benson <gbenson(a)redhat.com> 4.1.27-11
- Determine the gcjlib URL prefix correctly.
- Include the webapps again.
vim-6.2.457-1
-------------
* Wed Apr 07 2004 Karsten Hopp <karsten(a)redhat.de> 6.2.457-1
- patchlevel 457
20 years
FC2T2 boot floppies
by Pete Zaitcev
I have a laptop, Sony z505, which would otherwise be supported, except
the FC2T2 appears not to include any floppy images and the thing only
boots from a USB floppy. Presumably, vmlinux and initrd do not fit onto
a syslinux diskette anymore, but perhaps something can be done about it.
I am thinking about splitting vmlinuz and initrd onto two floppies,
if syslinux supports that.
Did anyone try it before?
-- Pete
20 years, 1 month
rawhide report: 20040407 changes
by Build System
New package libc-client
C-client mail access routines for IMAP and POP protocols
Removed package kterm
Updated Packages:
device-mapper-1.00.12-1.1
-------------------------
* Mon Apr 05 2004 Alasdair Kergon <agk(a)redhat.com> 1.00.11-1
- Cleanup build process. Add features: dmsetup targets, event_nr support.
distcache-1.4.5-1
-----------------
* Tue Apr 06 2004 Joe Orton <jorton(a)redhat.com> 1.4.5-1
- update to 1.4.5 (#119135)
- include sslswamp
- build shared libraries
gnome-mime-data-2.4.1-4
-----------------------
* Tue Apr 06 2004 Alexander Larsson <alexl(a)redhat.com> 2.4.1-4
- make gedit default for text/plain
im-sdk-11.4-35
--------------
* Tue Apr 06 2004 Yu Shao <yshao(a)redhat.com>
- fixed a bug of candidates in lookup window are mixed up when there is
multiple characters for each candidate, updated Patch13: im-sdk-x-xft.patch
- moved httx into bindir
inn-2.3.5-9
-----------
* Tue Apr 06 2004 Thomas Woerner <twoerner(a)redhat.com> 2.3.5-9
- /etc/rc.d/init.d/innd is owned by root now (#119131)
* Mon Feb 23 2004 Tim Waugh <twaugh(a)redhat.com>
- Use ':' instead of '.' as separator for chown.
kdegames-3.2.1-3
----------------
* Wed Apr 07 2004 Than Ngo <than(a)redhat.com> 3.2.1-3
- add missing icons, bug #118281
kdevelop-3.0.2-2
----------------
* Tue Apr 06 2004 Than Ngo <than(a)redhat.com> 9:3.0.2-2
- fix a bug in creating of new PHP project that causes kdevelop to crash, bug #117113
policy-1.10.1-2
---------------
* Mon Apr 05 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10.1-2
- Add unconfined_t
* Mon Apr 05 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10.1-1
- Update to match NSA policy
* Mon Apr 05 2004 Dan Walsh <dwalsh(a)redhat.com> 1.9.2-13
- Fixes for gpasswd
- Fix dhcp_defined macros
rdesktop-1.3.1-3
----------------
* Tue Mar 23 2004 Ville Skyttä <ville.skytta at iki.fi> - 1.3.1-3
- Honor $RPM_OPT_FLAGS.
- Include ChangeLog and TODO in docs.
redhat-artwork-0.95-3
---------------------
* Tue Apr 06 2004 Alex Larsson <alexl(a)redhat.com> 0.95-3
- silence grep in post
rpmdb-fedora-1.91-0.20040407
----------------------------
setools-1.2.1-6
---------------
* Tue Apr 06 2004 Dan Walsh <dwalsh(a)redhat.com> 1.2.1-6
- Fix location of
* Tue Apr 06 2004 Dan Walsh <dwalsh(a)redhat.com> 1.2.1-5
- Remove devel libraries
- Fix installdir for lib64
switchdesk-4.0.2-1
------------------
* Tue Apr 06 2004 Than Ngo <than(a)redhat.com> 4.0.2-1
- 4.0.2 release
- translation update
- fix #120143
* Tue Feb 03 2004 Than Ngo <than(a)redhat.com> 4.0.1-1
- 4.0.1 release
* Sun Feb 01 2004 Than Ngo <than(a)redhat.com> 4.0.0-1
- 4.0.0 release
- fixed #40226, #71711, #71990, #72744, #75751, #78603, #81801, #84043, #85077, #89347, #105880, #108582, #109683, #110312, #114190
- Thu Jun 26 2003 Than Ngo <than(a)redhat.com> 3.9.8-18
- build with gcc-3.3-12
- fix desktop file issue
- cleanup specfile
- disable debuginfo
system-config-date-1.7.3-2
--------------------------
* Tue Apr 06 2004 Brent Fox <bfox(a)redhat.com> 1.7.3-2
- fix desktop file icon path (bug #120173)
system-config-kickstart-2.5.10-1
--------------------------------
* Tue Apr 06 2004 Brent Fox <bfox(a)redhat.com> 2.5.10-1
- fix typo in package.py (bug #119257)
system-config-securitylevel-1.3.10-1
------------------------------------
* Thu Apr 01 2004 Brent Fox <bfox(a)redhat.com> 1.3.10-1
- add SELinux widgets and restructure UI accordingly
system-config-services-0.8.8-7
------------------------------
* Tue Apr 06 2004 Brent Fox <bfox(a)redhat.com> 0.8.8-7
- remove extra strip (bug #119624)
* Mon Apr 05 2004 Brent Fox <bfox(a)redhat.com> 0.8.8-6
- code around new verbosity in libglade (bug #119622)
* Wed Mar 31 2004 Brent Fox <bfox(a)redhat.com> 0.8.8-5
- fix typo (bug #119559)
system-config-users-1.2.11-3
----------------------------
* Tue Apr 06 2004 Brent Fox <bfox(a)redhat.com> 1.2.11-3
- remove Requires on policy-sources and setools (bug #120193)
tcpdump-3.8.2-3
---------------
* Tue Apr 06 2004 Harald Hoyer <harald(a)redhat.com> - 14:3.8.2-3
- added LICENSE files
up2date-4.3.15-2
----------------
* Mon Apr 05 2004 Adrian Likins <alikins(a)redhat.com>
- fix #119671 (selinux consolehelper roles)
- various other bits
* Wed Feb 11 2004 Adrian Likins <alikins(a)redhat.com>
- fix #115385
* Mon Feb 09 2004 Adrian Likins <alikins(a)redhat.com>
- point at RHN for rhel4 alpha
vsftpd-1.2.1-4
--------------
* Thu Mar 25 2004 Bill Nottingham <notting(a)redhat.com> 1.2.1-4
- don't call malloc()/free() in signal handlers (#119136,
<olivier.baudron(a)m4x.org>)
w3m-el-1.3.6-6
--------------
* Wed Apr 07 2004 Akira TAGOH <tagoh(a)redhat.com> 1.3.6-6
- w3m-el-1.3.6-m17n.patch: applied a backport patch from CVS to support w3m-0.5.
xemacs-21.4.15-4
----------------
* Wed Apr 07 2004 Jens Petersen <petersen(a)redhat.com> - 21.4.15-4
- add xemacs-nox subpackage (Jamie Zawinski, #110649) and xemacs-common
- add xemacs-debian-docdir-dump.patch and put dump files in docdir
- xemacs and xemacs-nox require xemacs-common
- define exectop and use it
- one configure and build for xemacs-nox and one for xemacs
- update package descriptions
- don't create backup of patched Emacs.ad since it gets installed, and
drop Canna-devel version requirement (Ville Skyttä, #115270)
- default ispell dictionary to english for CJK locale, since aspell doesn't
support widechars (#103145)
- rebuild against latest Canna built with xorg-x11 xmkmf (Kaj Niemi, #119562)
- simplify coding-system setup
- enable gpm for xemacs package
xemacs-sumo-20040202-3
----------------------
* Thu Apr 01 2004 Jens Petersen <petersen(a)redhat.com> - 20040202-3
- remove executable flags from erc Changelog files [Ville Skyttä]
xorg-x11-0.6.6-0.2004_03_30.5
-----------------------------
* Tue Apr 06 2004 Mike A. Harris <mharris(a)redhat.com> 0.6.6-0.2004_03_30.5
- Removed build_psyche build target, renamed build_rawhide to build_fc2, and
added new build_maintainer custom build target
- Various spec file cleanups, renamed macros to foo_bar format, etc.
* Tue Apr 06 2004 Mike A. Harris <mharris(a)redhat.com> 0.6.6-0.2004_03_30.4
- Updated our ppc64 support patch and submitted upstream to fix (FDO #303)
- Renamed xorg-ppc64-support-updates.patch to xorg-x11-ppc64-support-updates.patch
to establish consistency with the names my xdiff utility produces.
- Added xorg-x11-0.6.6-allow-XF86ExtraCardDrivers-on-AMD64.patch to allow
add on drivers to be specified using XF86ExtraCardDrivers in host.def on
AMD64 architecture, in order to enable the "voodoo" driver.
- Enable the "voodoo" driver for AMD64 in addition to x86.
- Removed build_shrike, build_yarrow, and build_taroon build target macros and
usage, as the package is not designed or intended to be used on those OS
releases, and there are various potential problems that could arise.
- Updated freetype and freetype-devel dependancies to require version 2.1.7, as
that is what version ships in the upstream sources, and there have been some
font display related bugs reported by people who have recompiled the SRPM on
older OS releases, and we do not support that anyway.
- Fixed bugs in spec file command substitution '[' tests discovered while
updating the build target macros.
- Disabled BuildRequires: Glide3, Glide3-devel dependancies as Glide is opened
via dlopen() for a while now, so it should not be needed at compile time any
more.
* Mon Apr 05 2004 Mike A. Harris <mharris(a)redhat.com>
- Updated xorg-ppc64-support-updates.patch with fix for endian related issue
(FC2 BLOCKER #119045)
- Removed obsolete_xfree86 conditional and usage, we hard code the Obsoletes
lines now.
- Restored "Conflicts" lines that I had previously removed in the transition
from XFree86 to Xorg X11, as they seem to still be needed on upgrades, or
it is possible there will be upgrade failure issues, in particular when
upgrading from Red Hat Linux 7.x or older releases to FC2.
- Added xorg-libX11-zh_CN.UTF8-crash-fix.patch to fix (FC2 BLOCKER #119032)
20 years, 1 month
Re: [RFC] User Accesable Filesystem Hierarchy Standard
by Jamethiel Knorth
>Date: Tue, 6 Apr 2004 09:40:03 +0300
>From: "Doncho N. Gunchev" <mr700(a)globalnet.bg>
>
>On Monday 05 April 2004 19:07, Robert Marcano wrote:
> > On Mon, 2004-04-05 at 11:30, Doncho N. Gunchev wrote:
> > > On Monday 05 April 2004 17:17, Michael A. Peters wrote:
> > > > ...
> > > > I personally don't like the idea.
> > > > If I want a bin directory in my home directory - export
>PATH=~/bin:$PATH
> > > >
> > > > The problem I see is security. A virus can not alter binaries it
>does
> > > > not have permission to alter, and that is why binaries, config
>files,
> > > > default templates, etc. should be installed with root ownership by
>the
> > > > root user.
> > > A virus/worm can damage only files owned by the user, so with
> > > or without binaries owned by the user who has run the virus/worm
> > > in her/his home, it can make the same damage. A virus/worm can make
> > > ~/.bin and also export PATH="~/.bin:$PATH" from your ~/.bashrc.
> > > What's the diference? The only way to stop the user from running
> > > untrusted applications is to mount /home and /tmp with noexec,
> > > which breaks some applications (rpmbuild, mc) :(
> > >
> >
> > But if the system allow an user to install shared applications without
> > any kind of authentication, a virus or worm can access the files of any
> > user, or it can start key loggers or any other garbage
> Shared for him/her only, not the whole system. These files will
>remain in the user's home directory only. There's no reason why another
>user should use them, or I did not get the idea right?
Actually, the idea does allow people to install shared programs. Part of the
purpose of this is that a user can install a shared program without
escalating their privileges. Of course, a system can be set up to prevent
this. The main advantage in a home environment is that, if a user does
install something, it needn't be installed with root permissions.
Looking at the current situation with Windows, it's fairly reasonable to
assume that regular users will intentionally install programs without
properly checking what they are and who made them. If they do this with root
privileges, the program could influence every portion of their system and
this could cause catastrophic problems.
However, if a user can install a shared program without ever having access
to system directories, the overall damage of installing malware would be
mitigated.
Due to this, I think that the shared directory would be an overall security
improvement. (Remembering of course that it probably wouldn't exist in a
corporate/lab environment)
_________________________________________________________________
FREE pop-up blocking with the new MSN Toolbar get it now!
http://toolbar.msn.com/go/onm00200415ave/direct/01/
20 years, 1 month
Strange Kudzu Behavior
by Pyroman[FO]
I have two ethernet cards. One is onboard (3c59x) and one is PCMCIA
(8139too). Kudzu sets the PCMCIA one to eth0 and the onboard to eth1.
When I change hwconf manually to make the onboard eth0 and the PCMCIA
eth1, it overwrites them when kudzu starts. If I use
system-config-network to set them that way, it still overwrites them on
startup. In fact, if I remove the PCMCIA card, start eth0 (which is now
the onboard), get an IP and then put the PCMCIA back in, kudzu still
sees the onboard as eth1. Is this proper kudzu behavior? or is
system-config-network broken?
Pyroman[FO]
20 years, 1 month