WLAN: link must be UP before ESSID is set
by Pekka Savola
Hi,
On new USB stick WLAN interface (driver zd1211rw) it seems that the
'ip link set $DEVICE up' needs to be done before ESSID is set for the
card to come up at all. (On the other hand, for example, the old
orinoco_cs doesn't require this.)
Even though DHCP client (run after ESSID is set) brings up the link,
the WLAN card is not associated to the AP (the state as shown below),
and IP doesn't work yet.
zd1211rw people had the opinion that this is a problem with ifup:
"This is a distro bug - it should bring the interface up before using
it. Many drivers require the interface to be up before scanning is
possible, since for a lot of hardware, scanning is just transmission
and reception of frames so requires the entire MAC layer to be
activated just the same as if you were transmitting/receiving data."
Should this be fixed by setting the link up before setting ESSID in
ifup-wireless (or even before setting some other iwconfig options)?
Is there any drawback in doing so? (At least it seems to me that you
may not be able to specify a new MACADDR if this was done.)
Is there already a bug report on this (based on very quick search I
couldn't find one)?
eth1 IEEE 802.11b/g ESSID:"S" Nickname:"zd1211"
Mode:Managed Frequency:2.412 GHz Access Point: Invalid
Bit Rate=1 Mb/s
Encryption key:off
Link Quality:0 Signal level:0 Noise level:0
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0
--
Pekka Savola "You each name yourselves king, yet the
Netcore Oy kingdom bleeds."
Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings
17 years, 2 months
Re: Is there a NFS alternative?
by Daniel Yek
At 12:52 PM 2/7/2007, Arthur Pemberton wrote:
>> >>It was a while ago when I read that NFS was difficult to secure with (the
>> >>use of) ssh and iptables (or something like that).
>> >>
>> >>I really needed an alternative that works and can be made secure.
>> >> If not, what is the closest thing to NFS?
>>
>> >Subdue NFS to use only one port, firewall all other ports
>> >off....possible filter the NFS port too?
>>
>>That is what I read and I was looking for an alternative to that. Is there
>>other solution? Or this is the best available solution already?
>
>Well, if you can suggest how the solution could be made better, I or
>others can maybe suggest how to implement it.
>The only other thing i can think of is have port mapper interface with
>iptables in a plug and play type firewall way (or however Windows
>refers to it)
At 01:52 PM 2/7/2007, Olivier Galibert wrote:
>What is your threat model? What do you want to be secured against?
>
> OG.
At 02:04 PM 2/7/2007, Lamont Peterson wrote:
>Kerberized NFS, preferably NFS4.
>
>AndrewFS or CodaFS.
Thanks everybody for replying!
I am hoping for a secure solution to mount directories "shared out" from my
other computer located remotely over the Internet. So that I can edit
source files and execute programs "locally" and compile remotely (a much
faster machine).
Whether I go with subdued NFS or NFS4, I will have to secure the
communication channels with ssh tunnels and doing it the ad-hoc way
(scripted) is a lot of hassles for daily use with connection that can get
cut once in a while (daily, for example.)
Without a secure solution, I would just use scp (and possibly develop other
solutions to sync files.)
With Fedora Core's iptables policies and selinux, I feel secure leaving
computers exposed to the Internet, knowing that I won't ending up
suspecting a breach and spending a lot of time dealing with it. It would be
regrettable to use a network service (likes NFS without ssh tunnels) that
makes me feel uncertain and insecure. The peace of mind is invaluable.
I have at most read about AFS (and used it as an end user in an
administered environment) and CodaFS, but don't know if encryption of
network communication is built in or integrated. I suspect not. (Haven't
done the research yet...)
Is NFS(4) still the best (and easiest-to-use?) solution?
Thanks.
--
Daniel Yek
17 years, 2 months
For your dining pleasure.. i give you experimental packages of usbsink
by Jef Spaleta
Good Alaskan Evening!
I have produced a set of packages and a package review request for
usbsink. I thought I'd let everyone on the list know about it..
because I think this is actually pretty super keen, and I think a lot
of people might want to try it out and see how well it works. If a
lot of people find it useful, perhaps it will be useful enough to
think about as an f7 or later desktop 'feature' for a default desktop
install. I make no such claim yet...but I see this
application's..potential.. since its one of the rare applications I
ask my wife about which illicts a response like 'oooooh that would be
handy.'
-jef"Because my wife has a far better feel for the pulse of mainstream
desktop users than I..she keeps her desktop effects turned on..and I
cringe at the sight of the wasted gpu cycles"spaleta
References:
http://usbsink.sourceforge.net/
USBSink is a GNOME program for automatic file synchronization over
USB. It is designed for users of removable drives, such as flash
drives or external hard disks. In USBSink you define a task associated
to a particular USB drive, and then have a complete automation of data
trasfers. With file monitoring and hardware detection features,
USBSink is able to respond and act according to relevant events on the
desktop.
Experimental Package Location:
http://jspaleta.thecodergeek.com/Fedora%20SRPMS/usbsink/
binaries for fe6 and fe-development are available
Review Request Ticket:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228188
17 years, 2 months
F7 test1 x64 DVD install report
by Mladen Kuntner
Hi.
Sending a F7 test1 x64 DVD install report.
Early in install there was an error like unable to find install media
and window with drivers selection list.
After few tries the right one was AMD PATA so i was able to continue
installation.
This is on Gigabyte nforce motherboard.
lspci shows:
00:06.0 IDE interface: nVidia Corporation CK804 IDE (rev a2)
Install and post install went ok.
On first boot monitor (Hansol 900P) was not found so i had
max resolution of 800x600.
After “yum install system-config-display ” i set monitor manually
and can set resolution to 1600x1200.
On turning printer (Samsung ML 1610 usb) there was a window to select
printer but on ok nothing happened.
After “yum install system-config-printer” it was posible to install
printer manually and is working ok.
Usb memory stick works ok.
lsusb shows
Bus 002 Device 002: ID 0457:0151 Silicon Integrated Systems Corp. Super
Flash 1GB Flash Drive
No luck with Canon S1 IS digital camera.
lsusb shows
Bus 001 Device 002: ID 04a9:309c Canon, Inc. PowerShot S1 IS .
On turning camera on there is gthumb's window to import photos
but clicking on ok does nothing.
I found that there is no disk device associated with camera created
in /dev directory.
(udev bug?)
For memory stick:
brw-r----- 1 root disk 8, 17 2007-02-10 22:01 sdb1
crw------- 1 root root 21, 2 2007-02-10 22:01 sg2
brw-r----- 1 root disk 8, 16 2007-02-10 22:01 sdb
crw------- 1 root root 253, 7 2007-02-10 22:01 usbdev2.2_ep83
crw------- 1 root root 253, 6 2007-02-10 22:01 usbdev2.2_ep82
crw------- 1 root root 253, 5 2007-02-10 22:01 usbdev2.2_ep01
crw------- 1 root root 253, 4 2007-02-10 22:01 usbdev2.2_ep00
for camera:
crw------- 1 root root 253, 11 2007-02-10 22:04 usbdev1.2_ep83
crw------- 1 root root 253, 10 2007-02-10 22:04 usbdev1.2_ep82
crw------- 1 root root 253, 9 2007-02-10 22:04 usbdev1.2_ep01
crw------- 1 root root 253, 8 2007-02-10 22:04 usbdev1.2_ep00
TV card AverMedia 007 FM works ok (no radio)
lspci shows
01:08.0 Multimedia controller: Philips Semiconductors SAA7133/SAA7135
Video Broadcast Decoder (rev d0)
As usual after
modprobe saa7134-alsa
sox -q -c 2 -s -l -r 32000 -t ossdsp /dev/dsp1 -l -r 32000 -t
ossdsp /dev/dsp &
to get sound (is there a better way?) tvtime works ok.
I was unable to get sound with gnomeradio (was ok in FC6).
Video camera JVC GR DVL 157E firewire (not working)
lsmod shows
fw_ohci 23432 0
fw_core 45512 1 fw_ohci
and there is, when i turn camera on
crw------- 1 root root 252, 0 2007-02-10 22:35 fw1
in /dev
but dvgrab is not working:
raw1394 - failed to get handle: No such file or directory.
I understand that it is new firewire stack in 2.6.20 kernels
and it looks ok but what about user programs?
This all on rawhide updated 10.2.2007
kernel 2.6.20-1.2922.fc7 #1 SMP
mladen kuntner
17 years, 2 months
bz relnotes flag
by Karsten Wade
Today a new flag was added to bugzilla for Fedora components. By
flipping the 'fedora_requires_release_notes' flag, the release notes
team is alerted that the something in this bug report is worth tracking
in the release notes.[1]
The release notes process has now been updated to reflect the "Six Ways
to Submit a Release Note":
http://fedoraproject.org/wiki/DocsProject/ReleaseNotes/Process
Six Ways to Submit a Release Note
These are in order of preference, starting with the best option:
1. Edit the content directly within the appropriate beat at
http://fedoraproject.org/wiki/Docs/Beats.
2. Email relnotes(a)fedoraproject.org.
3. Add relnotes(a)fedoraproject.org as a Cc: in an existing bug
report.
4. Change the fedora_requires_release_note flag on an existing
Bugzilla entry to '+' (NEW)
5. Enter a new release note request, comment, etc. into this
pre-filled bugzilla request (http://tinyurl.com/nej3u).
6. Include the *docs* keyword in your CVS commit log.
[1] Kudos to Uli Drepper for finding and using this flag within three
hours of it being added; thanks to Dave Lawrence for coming out of
retirement to add the flag.
- Karsten
--
Karsten Wade, RHCE, 108 Editor ^ Fedora Documentation Project
Sr. Developer Relations Mgr. | fedoraproject.org/wiki/DocsProject
quaid.108.redhat.com | gpg key: AD0E0C41
////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
17 years, 2 months
Release process
by John Poelstra
This page refers to a release process "proposed" at the Fedora Summit a few months ago:
http://fedoraproject.org/wiki/FedoraSummit/ReleaseProcess
1) Curious if this been "approved" or "finalized" somewhere else or if this is what we decided to do and can adopted as the current process?
2) The section on "rawhide" refers to a "rawhide repo"... will there be an actual repo named "rawhide" or is this assumed to be the current "development" repo?
Thanks,
John
17 years, 2 months
qemu 0.9.0 in -devel
by David Woodhouse
I've built qemu 0.9.0 into FE-devel. Please poke at it and scream if you
don't want me to put it into FE6.
I've already closed UPSTREAM the RFE for kqemu, so don't bother hassling
me about it. I would rather roger myself with a chainsaw than muck
around with the abomination that is external kernel modules.
--
dwmw2
17 years, 2 months
Announcing LHCP - Linux Hardware Compatibility Project
by Phil Knirsch
Hello everyone.
We've recently started working on a project called Linux Hardware
Compatibility
Project or in short LHCP. Goals are:
* Provide a list of working hardware for people wanting to buy a new
computer
* Provide an idea on what hardware our/your distribution in run on
* Provide a list of hardware we need to improve support for
* Provide an interface to all above that allows simple and complicated
queries
* Get the user a list of thing that should work and a way to test that
* Tell the user how good his hardware is supported
There have been several Hardware Compatibility lists from vendors and
other projects in the past, but most of them were limited in one
aspect or another - so we start our own.
To achive this we are building a modular framework to generate, collect,
submit
and analyze information about all components of systems running Linux
and how well each component works.
The project is currently in it's infancy, but following the typical
pragmatic
approach of open source projects ("Release early, release often!") we've
decided to already officially announce it.
Current status is that the basic GUI application for testing is up and
running
with some test modules. We're now in the process of writing the first real
data collection and test modules and are currently starting to design the
server end of the side.
The home page of the project can be found here:
https://hosted.fedoraproject.org/projects/LHCP
If you want to take a look at the current source code you can checked it out
using Mercurial in read only mode like this:
hg clone http://hg.fedoraproject.org/hg/hosted/LHCP
For development discussions a mailing list has been set up here:
https://www.redhat.com/mailman/listinfo/lhcp-devel
Although the project is hosted under Fedora we're aiming it to be very
distribution independant, so supporting other distributions should be
easy to
do. We have some basic requirements on what is needed on the system for
it to
simply work, but a lot of things will be optional.
Happy hacking,
Read ya, Phil & Fabi
--
Philipp Knirsch | Tel.: +49-711-96437-470
Development | Fax.: +49-711-96437-111
Red Hat GmbH | Email: Phil Knirsch <phil(a)redhat.de>
Hauptstaetterstr. 58 | Web: http://www.redhat.de/
D-70178 Stuttgart
Motd: You're only jealous cos the little penguins are talking to me.
17 years, 2 months
Is there a NFS alternative?
by Daniel Yek
Hi,
It was a while ago when I read that NFS was difficult to secure with (the
use of) ssh and iptables (or something like that).
I really needed an alternative that works and can be made secure. Is GFS a
suitable replacement for NFS? If not, what is the closest thing to NFS?
Thanks.
--
Daniel Yek
17 years, 2 months