latest selinux policy update errors
by Mark Haney
Is anyone else seeing these types of failures with the latest selinux
updates?
libsemanage.semanage_direct_remove: Module dpkg was not found.
semodule: Failed on dpkg!
error: %trigger(selinux-policy-strict-2.6.4-21.fc7.noarch) scriptlet
failed, exit status 1
libsemanage.semanage_direct_remove: Module dpkg was not found.
semodule: Failed on dpkg!
error: %trigger(selinux-policy-strict-2.6.4-23.fc7.noarch) scriptlet
failed, exit status 1
Should I file a bug report?
--
Da mihi sis bubulae frustrum assae, solana tuberosa in modo gallico
fricta, ac quassum lactatum coagulatum crassum
Mark Haney
Sr. Systems Administrator
ERC Broadband
(828) 350-2415
Call (866) ERC-7110 for after hours support
14 years, 5 months
IcedTea Firefox and SELinux
by Kip Thomas
guys,
help me. I made the link, checked SELinux like i did. I've got the
experience ya know? I've done all this on all F* up to F7
I also learned a new command "alternatives"
nothing helped. "applet not initialized" testing again "google java
tester"....just a blank pink box
info on the new brave, free, iced cool java is scant.
i386 32 bit F8
help the poor soul....ktnx
15 years, 3 months
Turbo Memory
by Claude Jones
I was spec'ing a new laptop tonight, and noticed it had 1 GB of 'Turbo
Memory' -- this is a new Intel specification that uses flash memory to cache
frequently used items and is only available in Windows-land with Vista. It is
not CPU cache nor RAM.
Does anyone know of any work being done to access this new technology in
Linux?
--
Claude Jones
Brunswick, MD, USA
15 years, 4 months
X and Intel 965
by Jeffrey Ross
so far the installation of FC6 has gone relatively smoothly albeit some
additional learning and bumps due to the 64 bit architecture of this
machine.
The mother board is an Intel DG965RYCK which uses Intel's 965 express
chipset. Based upon what I've been able to find on the web, Intel has
released the drivers for this chipset to OSS, although there have been
issues as to what Intel actually released and how complete they might be.
Regardless I unable to run mplayer (or Realplayer) for that matter
without the display first freezing then going black followed by garbage
along the bottom of the screen. A Control-Alt-Backspace does not stop X
from running. The only way to recover the machine from this point is to
reboot the system. I am still able to connect from a remote system, its
just the display that has become unstable.
lspci -v shows the following for the graphics adapter
00:02.0 VGA compatible controller: Intel Corporation Integrated
Graphics Controller (rev 02) (prog-if 00 [VGA])
Subsystem: Intel Corporation Unknown device 514d
Flags: bus master, fast devsel, latency 0, IRQ 177
Memory at 50200000 (32-bit, non-prefetchable) [size=1M]
Memory at 40000000 (64-bit, prefetchable) [size=256M]
I/O ports at 3110 [size=8]
Capabilities: [90] Message Signalled Interrupts: 64bit-
Queue=0/0 Enable-
Capabilities: [d0] Power Management version 2
suggestions would be appreciated.
Thanks
15 years, 5 months
OFF-TOPIC: Fedora 7 already installed, can't install XP on empty partition
by Andre Costa
Hi,
this is somehow off-topic, but hopefully someone here has been through
this already...
I just bought a shiny new Core 2 Duo machine (Intel DG33BU mobo), with
a nice 250G SATA disk. Fedora 7 installation went surprisingly well
(and fast), only problem was that onboard NIC was not recognized, but
upgrading the kernel offline fixed this. Everything is amazingly fast
=)
BUT... I need this machine to dual-boot to Windows XP (still addicted
to some Windows-only games =( ). XP setup CD hangs just after showing
"examining hardware configuration" or something like that. It doesn't
really hangs, it just switches to a blank screen and sits there
forever (I already left it there for more than 15min to no avail).
Keyboard is responsive and HD led stays on. CTRL+ALT+DEL reboots as
expected.
I talked to IT guys at work and they told me they've been through this
already lots of times, it seems XP is unable to properly recognize the
disk when only Linux is installed on it (?!?), and only solution would
be to reformat the whole thing and install XP first.
Is that true?
My system is configured as:
~ fdisk -l /dev/sda
Disk /dev/sda: 250.0 GB, 250059350016 bytes
255 heads, 63 sectors/track, 30401 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Device Boot Start End Blocks Id System
/dev/sda1 * 1 13 104391 83 Linux
/dev/sda2 14 10467 83971755 8e Linux LVM
HD specs are:
~ hdparm -I /dev/sda
/dev/sda:
ATA device, with non-removable media
Model Number: SAMSUNG SP2504C
Serial Number: S09QJ1SP208120
Firmware Revision: VT100-50
GRUB is installed on MBR. All remaining space is sitting there,
waiting for XP to take over... =/
Anyone knows of a workaround? Should I try to create an additional
partition on the empty space and format it as VFAT hoping this would
make Windoze less stupid? Or am I doomed to remove all partitions and
start from scratch, starting with XP?
TIA
Andre
15 years, 6 months
vstpd.conf
by dhottinger@harrisonburg.k12.va.us
Im having a devil of a time getting vsftpd configured for auth. with
an ldap backend on Fedora Core 5. I keep getting a 530 530 Login
incorrect.
Unable to make a connection. Please try again.
The server has a username incorrect message.
Anonymous works fine. I have standard vsftpd.conf here is the snippet:
anonymous_enable=No
#
# Uncomment this to allow local users to log in.
local_enable=YES
#
# Uncomment this to enable any form of FTP write command.
write_enable=YES
#
# Default umask for local users is 077. You may wish to change this to 022,
# if your users expect that (022 is used by most other ftpd's)
local_umask=022
#
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
#anon_upload_enable=YES
#
# Uncomment this if you want the anonymous FTP user to be able to create
# new directories.
#anon_mkdir_write_enable=YES
#
# Activate directory messages - messages given to remote users when they
# go into a certain directory.
dirmessage_enable=YES
#
# Activate logging of uploads/downloads.
xferlog_enable=YES
ascii_upload_enable=YES
ascii_download_enable=YES
#
# You may fully customise the login banner string:
#ftpd_banner=Welcome to blah FTP service.
#
# You may specify a file of disallowed anonymous e-mail addresses. Apparently
# useful for combatting certain DoS attacks.
#deny_email_enable=YES
# (default follows)
#banned_email_file=/etc/vsftpd.banned_emails
#
# You may specify an explicit list of local users to chroot() to their home
# directory. If chroot_local_user is YES, then this list becomes a list of
# users to NOT chroot().
chroot_local_user=YES
#chroot_list_enable=YES
# (default follows)
#chroot_list_file=/etc/vsftpd.chroot_list
#
# You may activate the "-R" option to the builtin ls. This is disabled by
# default to avoid remote users being able to cause excessive I/O on large
# sites. However, some broken FTP clients such as "ncftp" and "mirror" assume
# the presence of the "-R" option, so there is a strong case for enabling it.
ls_recurse_enable=YES
pam_service_name=vsftp
userlist_enable=YES
#enable for standalone mode
listen=YES
tcp_wrappers=YES
User authentication is against an ldap server. That seems to be
working fine. AFP users can connect ok. I read about an issue with
the pam module, but that doesnt seem to be the case. I keep beating
this thing around and around with no joy so far.
--
Dwayne Hottinger
Network Administrator
Harrisonburg City Public Schools
15 years, 8 months
Kernel numbers
by Jeff Stevens
What does it mean to see an rpm with a kernel of 2.6.10-1.741_FC3, when
we go to a site like http://www.kernel.org and see the latest kernel is
at 2.6.10? If one wanted to compile their own kernel from this site,
would they be losing fixes/etc. from the "-1.741_FC3" portion?
Thanks, still learning here...
--
Jeffrey Stevens
gpg --keyserver pgp.mit.edu --recv-keys D2E5A4E8
Key fingerprint: 1C86 8717 E485 FA4D B9EF 96E2 A1AC 4B00 D2E5 A4E8
15 years, 9 months
Re: Rescuing files from a LVM partition
by Andrew Stewart
> Before doing any more damage,
> make at least one disk image of what you have.
> If a disk image is a file of a larger drive,
> you can use loopback to examine it.
> If you want to make changes, don't use your only copy.
>
> --
> Mike hennebry(a)web.cs.ndsu.NoDak.edu
> "Horse guts never lie." -- Cherek Bear-Shoulders
I'm not sure how to do that when I can't even mount the disk.
Any suggestions on what to do next?
I've noticed that lvm archives a volume group configuration when a change is
made to it (under /etc/lvm/archive.. In plain text too!) By looking at
these I can tell exactly what commands I ran in order to muck things up...
Fri Sep 21 17:56:48 2007: 'vgextend VolGroup00 /dev/sdb2'
Fri Sep 21 18:25:40 2007: 'vgreduce VolGroup00 /dev/sdb2'
Fri Sep 21 18:25:45 2007: 'vgcreate VolGroup01 /dev/sdb2'
Mon Sep 24 18:37:52 2007: 'vgremove VolGroup01'
Tue Sep 25 13:51:10 2007: 'vgcreate VolGroup01 /dev/sdb2'
I can also tell what pv's and lv's belonged to the corresponding VolGroup in
each archive.
(btw, I've seen archived threads from what looks to be an old linux-lvm
specific mailing list. Anyone know if this still exists? I can't find it
anywhere)
15 years, 10 months
tar backup on tape doesn't work
by Budiono
Hi all,
I 'm just install a scsi card BusLogic BT-958 and HP DAT 40, on my
fedora core 6 system. I usually backup my system, using tar.
My problem is backup doesn't running well.
And this is my backup script:
#tar -b 1024 -cvf /dev/st0 /usr/local/src/my_home/yahoomail | bzip2 -9 >
/var/log/Backup.log.bz2
Backup only run a while, and archive some files in directory and then stop.
[root@mis-s155 ~]# tar -b 1024 -cvf /dev/st0
/usr/local/src/my_home/yahoomail | bzip2 -9 > /var/tmp/Backup.log.bz2
tar: Removing leading `/' from member names
tar: /dev/st0: Cannot write: Device or resource busy
tar: Error is not recoverable: exiting now
But when I put out -b parameter on tar. It run a while and not backup
directory at all
The backup script I used was running well when I'm using redhat 9.0 system.
I attach some message from my system
scsi: ***** BusLogic SCSI Driver Version 2.1.16 of 18 July 2002 *****
scsi: Copyright 1995-1998 by Leonard N. Zubkoff <lnz(a)dandelion.com>
scsi5: Configuring BusLogic Model BT-958 PCI Wide Ultra SCSI Host Adapter
scsi5: Firmware Version: 5.06I, I/O Address: 0xDC00, IRQ Channel:
225/Level
scsi5: PCI Bus: 2, Device: 3, Address: 0xFEAFF000, Host Adapter SCSI ID: 7
scsi5: Parity Checking: Enabled, Extended Translation: Enabled
scsi5: Synchronous Negotiation: Fast, Wide Negotiation: Enabled
scsi5: Disconnect/Reconnect: Enabled, Tagged Queuing: Enabled
scsi5: Scatter/Gather Limit: 128 of 8192 segments, Mailboxes: 211
scsi5: Driver Queue Depth: 211, Host Adapter Queue Depth: 192
scsi5: Tagged Queue Depth: Automatic, Untagged Queue Depth: 3
scsi5: SCSI Bus Termination: Both Enabled, SCAM: Disabled
scsi5: *** BusLogic BT-958 Initialized Successfully ***
scsi5 : BusLogic BT-958
Vendor: HP Model: C5683A Rev: YP61
Type: Sequential-Access ANSI SCSI revision: 03
scsi 5:0:3:0: Attached scsi generic sg1 type 1
st: Version 20050830, fixed bufsize 32768, s/g segs 256
st 5:0:3:0: Attached scsi tape st0
st0: try direct i/o: yes (alignment 512 B)
[root@mis-s155 ~]# mt -f /dev/st0 status
SCSI 2 tape drive:
File number=-1, block number=-1, partition=0.
Tape block size 0 bytes. Density code 0x26 (DDS-4 or QIC-4GB).
Soft error count since last status=0
General status bits on (1010000):
ONLINE IM_REP_EN
I very appeciate for any solution and comment.
Thank you
Budiono
15 years, 10 months
Re: Port forwarding
by Andy
Hi,
Jari Marikainen wrote:
> I would like to forward incoming traffic from internet to
> "<195.198.111.x> port 80" to "<some other ip on the internet> port 80"
> in FC3 on the same interface.
I would try the DNAT/SNAT iptables targets, along the lines of:
iptables -t nat -A PREROUTING -p tcp --dport 80 -d 195.198.111.x \
-j DNAT --to-destination 65.114.4.69
iptables -t nat -A POSTROUTING -p tcp --dport 80 -d 65.114.4.69 \
-j SNAT --to-source <your external IP address on this machine>
The second line makes the real server send it's replies through the same
path (otherwise it will reply directly to the client)
You have to enable/allow forwarding for everything to work.
hth,
/Andy
15 years, 10 months