Old version of rkhunter on extras repository
by Paul Smith
Dear All
The current version of rkhunter is the 1.2.7 one. However, 1.1.9-2 is
the one on extras repository. Is there some reason for this long
delay?
Thanks in advance,
Paul
18 years, 6 months
Telling konqueror to show previews
by Andy Pieters
Hi list
When using Konqueror to browse remote places, such as a ftp folder, how can
one tell it to make previews of the images and icons in that folder?
Konqueror does it automatically when browsing a local folder.
With kind regards
Andy
--
Now listening to Mr. B - Love Fantasy on amaroK
Geek code: www.vlaamse-kern.com/geek
Registered Linux User No 379093
If life was for sale, what would be its price?
www.vlaamse-kern.com/sas/ for free php utilities
--
18 years, 6 months
RE: SSH on Multiple ports Fedora Core 4
by John Gallagher
> -----Original Message-----
> From: John Gallagher [mailto:john.gallagher@ciosystems.com]
>
>
> Part of my original post was that I ran this on FC1.
> Actually it is running on FC1, however the same behavior can
> be seen if you use the service command to start/stop the one
> of the processes. Apparently because the last process
> started becomes the PID, the start, stop function of the init
> script can effect both processes.
>
> /var/run/sshd.pid
> Contains the process ID of the sshd listening
> for connections (if
> there are several daemons running concurrently
> for different
> ports, this contains the process ID of the one
> started last).
> The content of this file is not sensitive; it
> can be world-read-
> able.
>
> Does anyone know of a way to change that behavior short of
> compiling another binary that uses another PID?
I did some more research on this issue and figured out a work around to the
problem above.
I thought (incorrectly) that you could define the PID File in the init
script because it has a variable for it:
PID_FILE=/var/run/sshd.pid
It turns out that the init script never sources this variable for any
purpose.
Man of sshd_config indicated that you could add this option to change the
default pid file.
PIDFILE /var/run/sshd-ext.pid
This in fact created a new PID, however the init script would still kill
this process.
I am not a shell scripting expert but my guess is that it was killing it
because it is doing a killproc on $SSHD -TERM where $SSHD is the path to the
executable /usr/sbin/sshd.
{
echo -n $"Stopping $prog: "
if [ -n "`pidfileofproc $SSHD`" ] ; then
killproc $SSHD -TERM
else
failure $"Stopping $prog"
fi
RETVAL=$?
[ "$RETVAL" = 0 ] && rm -f /var/lock/subsys/sshd
echo
}
To get it working I needed to do the following:
Copy the binary in /usr/sbin/sshd to /usr/sbin/sshd-ext
Copy /etc/pam.d/sshd to /etc/pam.d/sshd-ext
Modify the init script by replacing sshd with sshd-ext:
#!/bin/bash
#
# Init file for OpenSSH server daemon
#
# chkconfig: 2345 55 25
# description: OpenSSH server daemon
#
# processname: sshd-ext
# config: /etc/ssh/ssh_host_key
# config: /etc/ssh/ssh_host_key.pub
# config: /etc/ssh/ssh_random_seed
# config: /etc/ssh/sshd_config-ext
# pidfile: /var/run/sshd-ext.pid
# source function library
. /etc/rc.d/init.d/functions
# pull in sysconfig settings
[ -f /etc/sysconfig/sshd-ext ] && . /etc/sysconfig/sshd-ext
RETVAL=0
prog="sshd-ext"
# Some functions to make the below more readable
KEYGEN=/usr/bin/ssh-keygen
SSHD=/usr/sbin/sshd-ext
RSA1_KEY=/etc/ssh/ssh_host_key
RSA_KEY=/etc/ssh/ssh_host_rsa_key
DSA_KEY=/etc/ssh/ssh_host_dsa_key
PID_FILE=/var/run/sshd-ext.pid
do_rsa1_keygen() {
if [ ! -s $RSA1_KEY ]; then
echo -n $"Generating SSH1 RSA host key: "
if $KEYGEN -q -t rsa1 -f $RSA1_KEY -C '' -N '' >&/dev/null;
then
chmod 600 $RSA1_KEY
chmod 644 $RSA1_KEY.pub
if [ -x /sbin/restorecon ]; then
/sbin/restorecon $RSA1_KEY.pub
fi
success $"RSA1 key generation"
echo
else
failure $"RSA1 key generation"
echo
exit 1
fi
fi
}
do_rsa_keygen() {
if [ ! -s $RSA_KEY ]; then
echo -n $"Generating SSH2 RSA host key: "
if $KEYGEN -q -t rsa -f $RSA_KEY -C '' -N '' >&/dev/null;
then
chmod 600 $RSA_KEY
chmod 644 $RSA_KEY.pub
if [ -x /sbin/restorecon ]; then
/sbin/restorecon $RSA_KEY.pub
fi
success $"RSA key generation"
echo
else
failure $"RSA key generation"
echo
exit 1
fi
fi
}
do_dsa_keygen() {
if [ ! -s $DSA_KEY ]; then
echo -n $"Generating SSH2 DSA host key: "
if $KEYGEN -q -t dsa -f $DSA_KEY -C '' -N '' >&/dev/null;
then
chmod 600 $DSA_KEY
chmod 644 $DSA_KEY.pub
if [ -x /sbin/restorecon ]; then
/sbin/restorecon $DSA_KEY.pub
fi
success $"DSA key generation"
echo
else
failure $"DSA key generation"
echo
exit 1
fi
fi
}
do_restart_sanity_check()
{
$SSHD -t
RETVAL=$?
if [ ! "$RETVAL" = 0 ]; then
failure $"Configuration file or keys are invalid"
echo
fi
}
start()
{
# Create keys if necessary
do_rsa1_keygen
do_rsa_keygen
do_dsa_keygen
echo -n $"Starting $prog: "
$SSHD $OPTIONS && success || failure
RETVAL=$?
[ "$RETVAL" = 0 ] && touch /var/lock/subsys/sshd-ext
echo
}
stop()
{
echo -n $"Stopping $prog: "
if [ -n "`pidfileofproc $SSHD`" ] ; then
killproc $SSHD -TERM
else
failure $"Stopping $prog"
fi
RETVAL=$?
[ "$RETVAL" = 0 ] && rm -f /var/lock/subsys/sshd-ext
echo
}
reload()
{
echo -n $"Reloading $prog: "
if [ -n "`pidfileofproc $SSHD`" ] ; then
killproc $SSHD -HUP
else
failure $"Reloading $prog"
fi
RETVAL=$?
echo
}
case "$1" in
start)
start
;;
stop)
stop
;;
restart)
stop
start
;;
reload)
reload
;;
condrestart)
if [ -f /var/lock/subsys/sshd-ext] ; then
do_restart_sanity_check
if [ "$RETVAL" = 0 ] ; then
stop
# avoid race
sleep 3
start
fi
fi
;;
status)
status $SSHD
RETVAL=$?
;;
*)
echo $"Usage: $0
{start|stop|restart|reload|condrestart|status}"
RETVAL=1
esac
exit $RETVAL
18 years, 6 months
Converter from AVI to video DVD format
by Paul Smith
Dear All
I would like to convert a AVI file to a video DVD format. Could
someone please give me some advice regarding the tool to use?
Thanks in advance,
Paul
18 years, 6 months
Using low ports without root, capabilities, CAP_NET_BIND_SERVICE
by Kenneth Porter
I want to spawn a user process which can use low (< 1024) ports. Googling
around, I've determined that I need to spawn the process and grant it the
"capability" of CAP_NET_BIND_SERVICE (from
/usr/include/linux/capability.h). It looks like I need to use sucap,
execcap, or setpcaps. I haven't found any good examples showing how to
actually do this. (The binary is commercial with no source so I can't
compile in code to do this. At best I can write a wrapper.)
I tried using setpcaps to give the capability to a known bash process
running in a second window from a su session, and I get this:
# setpcaps CAP_NET_BIND_SERVICE=eip 11516
[caps set to:
= cap_net_bind_service+eip
]
Failed to set cap's on process `11516': (Operation not permitted)
What's going wrong? I see from some googling that the kernel may be
compiled to not give init the CAP_SETPCAP capability. Is that the situation
with Fedora kernels? Do I need a custom kernel? (I tried the latest kernel
on FC4 and also on a FC2 box.)
18 years, 6 months
Panics during boot with 2.6.14-1.1644_FC4 and 2.6.14-1.1637_FC4 smp kernels?
by Jim Cox
I see panics during boot with the last two FC4 kernel updates on a dual
Opteron 248 Sun V20z (2 146GB SCSI drives). From watching the log messages
it seems to be correlated with mounting the SCSI partitions towards the
latter end of the boot phase -- I'd gladly post the boot log if it's
relevant and someone can tell me how to recover that log after re-booting
successfully with the 1369 kernel.
Anyone else seeing this and/or have any information/pointers/hints to offer?
18 years, 6 months
one more Sony Clie post
by jack wallen
Okay,
So before I give my Clie the boot I thought I'd post one last time. I've
pretty much tried everything I can...to no avail. The sony clie just
won't sync with FC4. I find this rather strange because I was at least
able to get it to sync with some success (though not much) with FC1,
FC2, and (to an even lesser extent) FC3.
I know this is probably not the place for this rant (because I've ranted
about it here a number of times) but why is it that the Fedora (and
quite possibly the Linux community all together) can't seem to support
hardware that all other platforms have zero problems with? I can sync
with my mac without a hitch and I could sync to Windows (of course I
have no Windows machines in my house - thank goodness) without a
problem.
Has anyone had any success syncing a Peg SJ30 with FC4? If so, what's
the secret? What magic must I perform to get this PDA to sync?
Thanks anyone.
--
\||/ jack wallen, jr
00 www.monkeypantz.net
>
-
18 years, 6 months
What microsoft has to say about XP
by Dotan Cohen
I think that more people mould move away from WIndows if they read the notices
on the microsoft website:
"The simple act of visiting an Internet site can be extremely damaging to the
system"
from:
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/...
Important to note that the article quoted's purpose is to convince the user to
create and use a standard account, and not the system's default Administrator
account. What this means is that the system's default beaviour is to make the
simple act of visiting an internet site extremely damaging to the system. Why
on earth would people use such an OS?
18 years, 6 months
FC3 --> FC4. New gui l&f only on root desktop.
by Nat Gross
I recently upgraded from fc3 to fc4.
When I login via root on the gnome desktop I get the new sleek l&f.
However on my own login, I get the same old l&f as FC3.
The version# under Desktop>About is 2.1.0. (in both accounts.)
Hope this is a quickie.
-nat
18 years, 6 months
Limit access to internet
by Peter Loof
Hi all,
I wan't to limit my kids access to internet, preferable with some kind of
white-list approach on user-level (not on IP address). Running a Fedora C3
installation as GW to Internet and mostly MS/Windows clinet accessing the
net.
Any ideas?
Thank's
/Peter
18 years, 6 months