I've installed a new F11 server, w/OpenLDAP. Users access an lvm/ext4 volume via netatalk & samba. Selinux is permissive.
Some users were getting "sharing violation" or "disk full" for afp and smb respectively on some existing files, though 2.2TB are free and new files were fine.
I found that when opening a shell as these users (#su - username), they indeed could NOT edit the files, at least with vim. What they could do was "append" to the files via "# echo 1 >>badfile.html ". Then after appending, vim would write to that file just fine and netatalk & samba were now happy with that file too.
I've run lsattr, I've run setfacl to list permissions, I've updated the kernel, I've rebooted, I've run fsck, I've checked "mount" for acl, I've checked syslog . . . I'm stumped.
I thought that if you couldn't write, you couldn't append either? Any ideas?
~]# rpm -q openldap-servers kernel pam
when pressing CTRL-ALTF-F2 to switch to text console, the screen stay
in graphic mode, only the mouse cursor disappears.
I can blindly login, type some command; see the hard disk light blink
at each command, then go back using ALT-F1 and see I logged in on
But switching between tty1 an tty2 never change my display.
I have a Laptop Compaq Evo N610c with a ATI RADEON Mobility M7.
It was working fine with FC8.
Any idea ?
aspineux gmail com
May the sources be with you
I have F11 on the physical box and under KVM I have virtual system where I
run Apache as a web server. Physical box has two public IPs - one is used
for physical box management,
anohter (VDMZ_PUBL_IP) is used to access virtual system. Virtual system
itself has private IPs, so I have NAT configured in IPTABLES. It also means
that virtual system is not aware of it's public IP and it "thinks" it has
only the private IP. Also please note to make things simple - I do not have
IPTABLES rules set on the virtual server - all rules are set on physical
First I made SSH work so I can log-in into virtual system - it works fine.
Then (using the similar rules) I configured Apache on virtual box - and it
works from outside as expected.
However before I setup web application from outside successfuly, I was
forced to setup a fixed URI link in my application - which I did as
http://public_IP/ to make it work from outside.
My (design) problem occured when I discovered that actually I cannot access
my Application using public IP directly from virtual system (=from inside) -
as I have no rules for this situation.
I tried to add some - but it did not work, however I'm in doubt if it can
work at all:
My idea was to set the rule in PREROUTING (on the physical box) in a way
that if virtual server tries to access its own public address, it will be
changed back to private one and (hopefully) forwared back:
I tried both of below rules (one at a time) and none really worked:
iptables -t nat -A PREROUTING -p TCP -i virbr0 -m physdev --physdev-in
vnet1-d $VDMZ_PUBL_IP -j DNAT --to-destination $VDMZ_PRIV_IP
iptables -t nat -A PREROUTING -p TCP -i virbr0 -d $VDMZ_PUBL_IP -j DNAT
However now I'm in doubt if this is ever possible:
- Will iptables allow packet to be forwarded back to the same interface
where it was received from?
- Or should I set some rules in Apache itself using mod_rewrite? (so in such
a case packet won't leave the virtual machine)
- Are there any risks with that when I decide to use HTTPS? (However HTTP
only from inside of the virtual system and HTTPS from outside is acceptable
Is there any other solution so I can access my own system from the virtual
system using it's public IP?
Thank you in advance,
i have just installed a fedora 11 laptop.
but when i got the login screen
i don't get any keybord session or window mamanger menu in the down bar
i only have the accessibility menu and the clock.
does someone know how to solve that problem?
i use gdm-2.26.1-13.fc11.i586
Lately i did some research on security issues related to
differnt package managers including YUM and found out that
there can be some vulnerabilities in YUM. So far YUM checks
the signature which is on each individual package,In this
model, the package manager has no signatures to check until
it gets to the point where it downloads the actual packages
it intends to install.
Keeping this in mind the vulnerabilities that are possible
are as follows:
---->Metadata Manipulation Attack: The attack in
this case involves a malicious party responding to a package
manager’s request by making their own metadata, There are
two main things attackers can do First, they can
mix-and-match the versions of packages that are listed.
Second, they can trick clients into thinking that packages
have different dependencies and provide different
functionality than they really do.
In mixing-and-matching vulnerable package versions by
listing them in the same metadata given to a client,
attackers make it more likely that, whatever new package a
client installs, it is installing a version with a known
---->Freeze Attack: In this an attacker can keep giving
the client a single version of the metadata starting at one
point in time (that is, “freezing” the metadata), the
attacker can prevent the client from knowing about new
metadata and thus new packages that are available that fix
---->Endless data Attack: It involves a malicious party
responding to a client request, be it for metadata or for a
package, with an endless stream of data. The possible
effects include filling up the partition where the package
manager saves downloaded files or exhausting memory.
These are few "possible" vulnerabilities which can be found
Get your new Email address!
Grab the Email name you've always wanted before someone else does!
I like to install mysql client and mysql-server with default charset as utf8.
I tried "yum install mysql mysql-server -with-charset=utf8 ". It was not right.
Any suggestion and help are much appreciated!
I've just installed F11 x86_64. First thing I want to do after
install is to say 'yes' to apply all the updates I was notified about.
573 updates. I'm looking forward at having an updated system, so I've
choosen 'yes' when KPackageKit popped up automatically.
'There was a (possibly temporary) problem ...'
'Caching enabled but no local cache of /var/cache/yum/fedora/(lots of
If that package is causing trouble, I'd like to remove it from the
update process. I don't use sqlite. Things is, KPackageKit does not
show the packages in alphabetical order and there's no search method.
I will not scroll 573 items to find sqlite.
So how can the update be done and, what is this problem anyways ?
Thanks for all suggestions and help. F11 looks nice as far as the
artwork is concerned. Looks promising.
I'm sure this is pilot error of some sort, but I can't figure it out.
I'm running F11, x86_64, fully updated. I use 12 desktops. Until I did
the update that brought in KDE 4.3, I had a nice pager widget (not on the
panel) with 4 rows and 3 columns, the small images of the desktops
filled the widget, and I could adjust the size. With 4.3, KDE seems to
insist on a particular shape for the pager--the 12 desktops in this 4x3
configuration take up about half of it and it is not in the same aspect
ratio as my display. Also, there's a minimum size it won't let me go
below. I created a new user and tried to make a pager with 12 desktops
this way and got the same thing, so I *think* it's not something else in
my configuration. (If I put a pager on the panel, it doesn't seem to use
any extra space, but it's too small for me to use.)
How do I get rid of the extra space the pager widget is insisting on
using? And why can't I make it smaller?