SELinux Troubleshooter
by Fred Williams
First time posting to here, so forgive me any slight mistakes.
In the past, where I've been inexperienced with an SELinux setup, I kept
telling the troubleshooter to ignore alerts, rather than doing something
about them and having them bother me often. I thought that did something.
Well, now I've actually looked at a few of the reports and grown a bit more
experienced, I now know that sometimes it offers suggestions which help,
such as in the case of a workaround for the adobe flash plugin and such.
My problem is, I can't figure out how to get it to start showing all the
ones I marked for it to ignore (and thus no longer show) so I can see what
suggestions it had on each of them.
All I want really is to just get them to show up again, or even reset it so
triggering them again would bring them up once more.
Short of a reinstall (Not until F13, please) is there any way of handling
this?
Thanks.
14 years, 1 month
Can't mount cd/dvd-rom on fedora 12
by Fabiano Gomes
Hi all,
its my first email for the list. My problem: can't mount my cd/dvd-rom on
fedora 12. The device just don't apear in '/dev' or it have another label
that its not cdrom?:
[fabiano@dolphin ~]$ ls /dev/
agpgart fd loop1 MAKEDEV ppp ram2
root stderr tty14 tty24 tty34 tty44 tty54 tty7 usbmon3 vcsa
block full loop2 mapper ptmx ram3
rtc stdin tty15 tty25 tty35 tty45 tty55 tty8 usbmon4 vcsa1
bsg fuse loop3 mcelog pts ram4
rtc0 stdout tty16 tty26 tty36 tty46 tty56 tty9 usbmon5 vcsa2
bus gpmctl loop4 mem ram0 ram5
sda systty tty17 tty27 tty37 tty47 tty57 ttyS0 v4l vcsa3
char hidraw0 loop5 net ram1 ram6
sda1 tty tty18 tty28 tty38 tty48 tty58 ttyS1 vcs vcsa4
console hpet loop6 network_latency ram10 ram7
sda2 tty0 tty19 tty29 tty39 tty49 tty59 ttyS2 vcs1 vcsa5
core hvc0 loop7 network_throughput ram11 ram8
sda3 tty1 tty2 tty3 tty4 tty5 tty6 ttyS3 vcs2 vcsa6
cpu input lp0 null ram12 ram9
sg0 tty10 tty20 tty30 tty40 tty50 tty60 urandom vcs3
vga_arbiter
cpu_dma_latency kmsg lp1 nvram ram13 random
shm tty11 tty21 tty31 tty41 tty51 tty61 usbmon0 vcs4
video0
disk log lp2 oldmem ram14 raw
snapshot tty12 tty22 tty32 tty42 tty52 tty62 usbmon1 vcs5 zero
fb loop0 lp3 port ram15 rfkill
snd tty13 tty23 tty33 tty43 tty53 tty63 usbmon2 vcs6
it doesn't appear in /etc/fstab too.
In the forums i found how to mount cd/dvd-rom manualy:
mount -t iso9660 /dev/cdrom0/ /media/cdrom/
mount: o dispositivo especial /dev/cdrom0/ não existe (that mean "the
special device /dev/cdrom doesn't exists", I'm from Brazil)
Like you saw in "ls /dev", it's true.
I think that, fisically, it's nothing wrong with my device because I just
installed fedora 12 with the dvd-rom.
Sorry for my poor english.
Thanks in advance,
--
Fabiano Gomes
14 years, 1 month
logrotate
by Kaushal Shriyan
Hi,
is there a way to scp or rsync the files to a remote host older than
15 days in the logrotate config and than delete it on localhost older
than 15 days, so that at a time only 15 days of logs are available on
localhost.
Thanks,
Kaushal
14 years, 1 month
Re: Dump/Restore Errors
by Dr J Austin
Yes I had thought along these lines as I originally
had the source partition mounted.
The case shown below was with the source unmounted
and hence I believe the errors are present in source partition.
I have seen this suggestion but I don't know enough
about SELinux to feel confident about using it.
Disable selinux; reboot and then
find . -exec setfattr -h -x security.selinux '{}' \;
John
>
> On Wed, 3 Mar 2010, John Austin wrote:
>
> > Date: Wed, 03 Mar 2010 13:06:11 +0000
> > From: John Austin <ja(a)jaa.org.uk>
> > Reply-To: ja(a)ee.port.ac.uk,
> > Community support for Fedora users <users(a)lists.fedoraproject.org>
> > To: users(a)lists.fedoraproject.org
> > Subject: Dump/Restore Errors
> >
> > Hi
> >
> > I have been following recent threads about the best way to clone/backup
> > disks.
> >
> > "Risks of backing up live mounted filesystems using dump(8)"
> >
> > I have just tested dump/restore using a System Rescue CD
> > using dump 0.4b42
> >
> > The source /dev/sda7 is a fully working updated F12 / partition
> > (including /boot)
> >
> > The destination is a similar partition on the same disk /dev/sda9
> >
> > mkfs -t ext3 /dev/sda9
> > mkdir /mnt/out
> > mount /dev/sda9 /mnt/out
> > dump 0f - /dev/sda7 | (cd /mnt/out; restore -rf -)
> > 40GB dump/restore took 46 minutes
> >
> > I received 9 errors of the type
> >
> > resync restore, skipped 1 blocks
> > error in EA block 1
> > magic = 0
> >
> > Google tells me that dump saves as is
> > and that restore is finding an error in an Attribute Block
> > (maybe/sometimes associated with NFS)
> >
> > I have not been able to find definitive answers to some obvious
> > questions.
> >
> > 1. Are these fatal for the file concerned hence invalidating the clone/backup?
> > I am unsure how to interpret the error message
> >
> > 2. Why are they present in the first place?
> >
> > 3. How can I find which files they are caused by?
> >
> > 4. Can I correct the errors, do I need to?
> >
> > Grateful for any help
> >
> > Regards
> > John
>
>On Wed, 2010-03-03 at 18:56 -0600, Paul Thompson wrote:
>I believe these generally fall on files which were deleted between when
> the index was created and the file is reached in the backup.
>
Hi Paul
Yes I had thought along those lines as I originally
had the source partition mounted.
However I repeated the dump/restore and the case shown above was
with the source unmounted and hence I believe the errors are
present in the source partition/file system.
I assume something is wrong in the SElinux extended attributes?
I have seen this suggestion for "processing" the source file system
before executing the dump/restore.
However I don't know enough about SELinux to feel confident about using it.
Disable selinux; reboot and then
find . -exec setfattr -h -x security.selinux '{}' \;
Is it a good idea to zap all SELinux attributes in the first place?
a. When the partition/file system is / for the operating system
b. When the partition/file system is mounted from a rescue CD boot?
John
14 years, 1 month
Automatically forcing umount ncp filesystems
by Boggiano
Sometimes I need to mount a Novell filesystem like this:
/sbin/ipx_configure --auto_interface=on --auto_primary=on
/usr/bin/ncpmount -S NAMEBOX -u500 -U cn=ale.ou=tecs.o=foo -Pfoobar -V
Vol1 /mnt/Novell/
If I forgot to manually unmount it, the computer hangs at shutdown: I
waited few minutes, after that
I pushed the poweroff button (I know... shame on me!!!) ;)
How can I avoid it ?
Can I set a timeout, somewhere ?
F12 here.
Thanks
14 years, 1 month
FLV4 video - which codec do I need?
by John Wendel
I've got an FLV4 encoded video that I'd like to watch. Mplayer says
> [mkv] Track ID 1: video (V_MS/VFW/FOURCC), -vid 0
> [mkv] Track ID 2: audio (A_MPEG/L3), -aid 0, -alang jpn
> [mkv] Track ID 3: subtitles (S_TEXT/ASS), -sid 0, -slang eng
> [mkv] Will play video track 1.
> Matroska file format detected.
> VIDEO: [FLV4] 640x368 0bpp 25.000 fps 0.0 kbps ( 0.0 kbyte/s)
> [vdpau] Error when calling vdp_device_create_x11: 1
> ==========================================================================
> Cannot find codec matching selected -vo and video format 0x34564C46.
> ==========================================================================
I downloaded and installed the "all" codec pack from the mplayer
website, didn't help.
Any clues appreciated.
Thanks,
John
14 years, 1 month
Configuring iptables firewall for FTP server (or TFTP server)
by Philip Prindeville
I'm running an FTP server on an FC12 box (using proftpd) and I've also
enabled the iptables firewall.
I've made the following config changes:
Changed /etc/sysconfig/iptables-config to have:
IPTABLES_MODULES="nf_conntrack_ftp"
Added /etc/modprobe.d/netfilter.conf and put in it:
options nf_conntrack_ftp ports=21
(you can probably skip this step, as it looks like the defaults for the
module are correct... unless you're doing some funky port forwarding or
virtual hosting and you're running your server on a relocated port #.)
Added to /etc/sysconfig/iptables:
-A INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
via system-config-firewall by checking "FTP".
And then restarted iptables as "service iptables restart".
Seems to work fine, after some quick tests.
Thought I'd save others the trouble of having to troubleshoot the firewall.
Adding TFTP is similar... put nf_conntrack_tftp into the
IPTABLES_MODULES variable, add "options nf_conntrack_tftp ports=69" to
your netfilter.conf file, and select the service "TFTP" in the firewall
(which generates: -A INPUT -m state --state NEW -m udp -p udp --dport 69
-j ACCEPT).
Thanks,
-Philip
14 years, 1 month
FC12+control-center-extras -> DEATH
by Terry Horsnell
Hi all,
Having just spent a nice few days moving over to FC12 I thought I'd add
the final touch and install control-center-extras so that I could regain
focus control over my windows. (Why was this removed to an optional extra I wonder?)
The result of doing this is that I now get millions of instantiations of the
Gnome File-Manager and everythib=ng eventually grinds to a halt.
My way out of this was to break into basic screen mode with CTRL/ALT/F1
then modify /etc/inittab to force the system to start up in mode3 instead of
mode5 and reboot. This then gave me the oppotunity to 'yum remove control-center-extras'
but this hasnt fixed the problem.
I had previously tried installing the ndiswrapper stuff, and so was running with
kernel 2.6.31.5-127.fc12.i686.PAE, but rebooting with the original kernel
(2.6.31.12-174.2.22.fc12.i686) makes no difference.
Does anyone know a fix for this or have I got to do a complete re-install?
Cheers,
Terry
14 years, 1 month
Setting GDM Login Screen Background
by Sawrub
Hi All,
Appearance Preferences > Background and selecting 'Make Default' used to
set the selected desktop background as the background image for the GDM
login screen and used to work till F11, but is not working as desired
under F12. Is there any other setting that i'm missing under F12 to do
the same.
--
Saurabh Sharma
Linux user number: 490644
http://sawrub-blog.blogspot.com/
Open your doors.......It's time to look beyond Windows
14 years, 1 month