bind-chroot obsolete due to SElinux?
by Chris Tyler
I noticed that the bind-chroot package is no longer installed by default
(FC5t3 & rawhide), even through it's still present. Should we consider
bind-chroot obsolete, since SElinux should be able to provide similar
protection (preventing named from touching files it should not, even if
compromised)?
--
Chris Tyler
18 years, 1 month
re: Help Needed: FC5 Blocker List and Rawhide Install Testing
by Gianluca Cecchi
I could help for testing installations these latest days.
I have a Dell 6650 with 4x3GHz cpus (8 with HT enabled) and 4GB of ram.
I can use it for 2-3 weeks.
I have configured the dell with pxe boot, picking up kickstart file
via http from one server and installing via nfs from another server
(this last is a FC5 X86_64 workstation).
It works with fc5 test3. I'm going to automate the process of updating
pxeboot fc 5 images and nfs repository, so that in about 25 minutes I
can have the machine installed from scratch.
and test on a daily basis or request basis (matching with my free
time, of course...)
Some questions:
- any particular %packages directive is suggested for better help?
can I use something like @all ? I have not seen in interactive
installation a way to install everything, like before...
If anyone has any test to be run on this machine, I'm available.
lspci of this server gives:
00:00.0 Host bridge: Broadcom CMIC-HE (rev 22)
00:00.1 Host bridge: Broadcom CMIC-HE
00:00.2 Host bridge: Broadcom CMIC-HE
00:00.3 Host bridge: Broadcom CMIC-HE
00:03.0 SCSI storage controller: Adaptec AIC-7892P U160/m (rev 02)
00:04.0 VGA compatible controller: ATI Technologies Inc Rage XL (rev 27)
00:0f.0 Host bridge: Broadcom CSB5 South Bridge (rev 93)
00:0f.1 IDE interface: Broadcom CSB5 IDE Controller (rev 93)
00:0f.2 USB Controller: Broadcom OSB4/CSB5 OHCI USB Controller (rev 05)
00:0f.3 ISA bridge: Broadcom CSB5 LPC bridge
00:10.0 Host bridge: Broadcom CIOB30 (rev 03)
00:10.2 Host bridge: Broadcom CIOB30 (rev 03)
00:11.0 Host bridge: Broadcom CIOB30 (rev 03)
00:11.2 Host bridge: Broadcom CIOB30 (rev 03)
00:12.0 Host bridge: Broadcom CIOB30 (rev 03)
00:12.2 Host bridge: Broadcom CIOB30 (rev 03)
03:01.0 RAID bus controller: LSI Logic / Symbios Logic MegaRAID (rev 01)
08:01.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5700
Gigabit Ethernet (rev 14)
08:02.0 Ethernet controller: Broadcom Corporation NetXtreme BCM5700
Gigabit Ethernet (rev 14)
13:01.0 Ethernet controller: Intel Corporation 82546EB Gigabit
Ethernet Controller (Copper) (rev 01)
13:01.1 Ethernet controller: Intel Corporation 82546EB Gigabit
Ethernet Controller (Copper) (rev 01)
18 years, 1 month
nvidiafb
by Rudolf Kastl
Hello!
I am well aware that the nvidiafb/rivafb driver doesent work well
together with the nvidia binary driver... that said... id be happy if
nvidiafb would be built aswell. as far as i know and read it should be
in the mainline kernel but it seems that the module isnt built in
latest fedora development kernels, rivafb is.
I am not really aware about the details regarding this "issue" or
"feature request" but is there a sound reason why the nvidiafb driver
isnt beeing built so one could atleast test it?
regards,
Rudolf Kastl
p.s. radeonfb on my thinkpad works great ;)
18 years, 1 month
username best practices and other conventions
by Dax Kelson
I was wondering if Fedora had any guidelines for valid usernames.
Especially usernames that are part of base and extra packages?
Since, well forever, I've understood the UNIX and Linux username best
practices to be:
(a) all lowercase
(b) alphanumeric with exception that first char must not be a number
(c) 8 char max length
The origin of (a) I believe comes from the fact that historically there
was a one-to-one mapping between email addresses and usernames and since
email addresses are not case sensitive, usernames that only differ by
case cause email ambiguities.
I'm not sure the origin of (b).
The origin of (c) comes from the fact that's the way it has always been
and older tools and file formats make only have room for 8 characters
such as old tar or cpio. Additionally once a username exceeds 8
characters some tools such as /bin/ps and /bin/ls start behaving
differently. This can cause a cascade problem when sys admins write
elaborate scripts or even one-off temporary scripts that because
non-temporary and parse the output of /bin/ps or /bin/ls.
For example, a script that is expecting the first column of /bin/ps
output to be a username, might go bonkers if it encounters:
avahi 2250 0.0 0.0 2744 436 ? Ss Mar01 0:00 avahi-daemon: chroot helper process
root 2259 0.0 0.0 3084 1172 ? Ss Mar01 0:00 cups-config-daemon
68 2269 0.0 0.1 5072 3476 ? Ss Mar01 0:02 hald
root 2270 0.0 0.0 3084 1140 ? S Mar01 0:00 hald-runner
68 2276 0.0 0.0 2192 896 ? S Mar01 0:00 /usr/libexec/hald-addon-acpi
68 2285 0.0 0.0 2196 900 ? S Mar01 0:00 /usr/libexec/hald-addon-keyboard
root 2292 0.0 0.0 2152 840 ? S Mar01 0:00 /usr/libexec/hald-addon-storage
root 2305 0.0 0.0 1548 448 tty2 Ss+ Mar01 0:00 /sbin/mingetty tty2
IMHO, Fedora should respect the traditional best practices and
conventions (not speaking solely about usernames) and not violate them
without good reason. It seems there is maybe a carefree indifference or
possibly ignorant attitude about the "old ways". Breaking long standing
conventions in itself violates the principal of least surprise --
something sys admins do not care for.
In regards to the username violations on my FC4 box I see three
usernames exceeding the 8 characters in length and on my rawhide box I
see five. It is getting worse.
For the sake of conversation here is list from a fresh rawhide install
with a moderate amount of packages installed.
lp = 2
adm = 3
bin = 3
ftp = 3
gdm = 3
ntp = 3
rpc = 3
rpm = 3
xfs = 3
dbus = 4
halt = 4
mail = 4
news = 4
nscd = 4
pcap = 4
root = 4
sshd = 4
sync = 4
uucp = 4
vcsa = 4
avahi = 5
games = 5
named = 5
smmsp = 5
squid = 5
apache = 6
daemon = 6
gopher = 6
nobody = 6
netdump = 7
rpcuser = 7
torrent = 7
mailnull = 8
operator = 8
shutdown = 8
distcache = 9
haldaemon = 9
nfsnobody = 9
webalizer = 9
beagleindex = 11
It isn't a universal trend, but it seems that the newer the program the
longer the username.
Any comments from the powers that be on this topic? Personally I'd love
to see these 9+ usernames "fixed".
Dax (getting a grey goatee) Kelson
18 years, 1 month
is system-config-keyboard still necessary?
by Gianluca Cecchi
On my system with system-config-keyboard-1.2.7-1.1
If I run in Gnome the System --> Administration --> Keyboard tool, it
gives absolutely nothing: only an empty window with title "Keyboard" and
inside a keyboard-key icon with the text "select the appropriate
keyboard for the system".
Wouldn't be useful to bind this menu with the gnome-keyboard-properties
command?
But the last one is inside gnome control-center rpm, so I don't know
impact for kde users.
It could be that System --> Administration --> Keyboard actually tests
for the running DE environment and depending on result it runs the
corresponding program (for gnome, kde, xfce, etc.).
18 years, 1 month
rawhide of 20060223: KDE fails to start
by Marcel J.E. Mol
Hello,
(this is a repeat from my previous report on udev and kde, but as this does not
seem to be related to udev, I reposted without the udev stuff).
After I uppgraded rawhide from a couple of weeks ago to rawhide of yesterday.
it seems not possible to start kde or gnome as a normal user. Starting kde
as root works fine. (note X is running fine. Using failsafe xterm mode keeps
X up and running)
startkde: Starting up...
DCOP aborting call from 'anonymous-776' to 'kded'
startkde: Shutting down...
klauncher: Exiting on signal 1
startkde: Running shutdown scripts...
startkde: Done.
Starting startkde from the failsafe xterm gives the same error message.
I cant find any more info on waht is going wrong. KDE seems to be very
silent wheng things go wrong...
I reinstalled the whole kde set, and even went back to kde of FC5test3,
but that does not help. Also removing the .kde tree does not help.
Any suggestions?
Thanks
-Marcel
--
======-------- Marcel J.E. Mol MESA Consulting B.V.
=======--------- ph. +31-(0)6-54724868 P.O. Box 112
=======--------- marcel(a)mesa.nl 2630 AC Nootdorp
__==== www.mesa.nl ---____U_n_i_x______I_n_t_e_r_n_e_t____ The Netherlands ____
They couldn't think of a number, Linux user 1148 -- counter.li.org
so they gave me a name! -- Rupert Hine -- www.ruperthine.com
18 years, 1 month
Sluggish window moving with EXA acceleration
by Émeric Maschino
Hi,
Quickly moving windows on my GNOME desktop isn't fluent with the EXA
acceleration although the old XAA acceleration performs normally. Is there
anybody out there experiencing the same issue? This is on an Itanium
workstation sporting an AGP ATI FireGL X1 graphics adapter (R300 chipset). I
didn't add any tweaking option to my xorg.conf file except for AccelMethod when
using EXA.
Cheers,
Émeric
18 years, 1 month
glxgears
by Louis Garcia
Where is glxgears in FC54T3? I just put my radeon 9250 in abgmode 8 and
think it is actually slower.
-Thanks
18 years, 1 month
Postfix+LDAP segfault issues anyone?
by David Hollis
I updated my home server to FC5-test3/development over the weekend and
everything went fine except for Postfix. I'm using Postfix to host my
virtual mail domains using LDAP (Phamm schemas). After updating to
Postfix-2.2.8-1.2.x86_64, trivial-rewrite would bomb out upon every
message delivery. Doing some straces on it, it looks like it queries
LDAP and gets a result, but suddenly segfaults for some reason, thus
preventing mail delivery from happening. I tried rebuilding the postfix
SRPM on my system in case it was some odd-ball library dependency issue,
but I had the exact same issue.
After a lot of trial and error, I pulled the postfix SRPM from FC4
(2.2.2-2) and rebuilt it on my system and downgraded to it, and all is
well. I'm just wondering if this is a problem specific to something in
my installation, or if other folks have seen this as well?
--
David Hollis <dhollis(a)davehollis.com>
18 years, 1 month