March 2009 - Arch-general - lists.archlinux.org

Re: [arch-general] [arch-dev-public] Out-of-date orphans in repo
by Damjan Georgievski 15 Mar '09

15 Mar '09

> Lately, I've been updating out-of-date orphans. So far I did the ones > that were easy to update/test so this is a status report on the > remaining ones. The purpose here is, ideally, to find maintainers for > them or at least testers (devs or users). > > BTW, make sure that you are listed as maintainer for both arches of > the packages you maintain even if you can't build the package for that > architecture. Several packages have only one of their arch adopted. > This clutters the list of orphaned and it spams the dev ML with > out-of-date notifications. > > Here the commented list: ... > userui: > I can't really test the rest. Is there anyone able/willing to test > updated packages for them? In fact, I didn't really checked them out. > evms and exim seems important so I'm not confortable to push them even > in testing without any good testing. For the rest, if noone comes > forward, I could test them as good as I can and push them to testing > then as for testers on the arch-general ML much like I did for the > scim stuff. Moving some of them to AUR is always a possibility. I use userui (since I use a TuxOnIce patched kernel) .. and I'm updateing this package myself too. Recently /usr/sbin/tuxoniceui_fbsplash can't be compiled on Arch since the Arch freetype package doesn't include the static (.a) library. So I can test an updated package. -- damjan

5 6

Re: [arch-general] [arch-dev-public] libcap rebuilds
by Gerardo Exequiel Pozzi 12 Mar '09

12 Mar '09

Hugo Doria wrote: > Packages that have libcap>=2.16 on makedepends: > > dnsmasq-2.45-2 > proftpd-1.3.1-2 (i updated to 1.3.2-1) > squid-2.7.STABLE6-2 > > > Hola Hugo :) Here are one change, proftpd with libcap-2.16 uses libcap as depend, (this don't happends with old libcap) See the diference: # readelf -a /usr/sbin/proftpd | grep cap 29: 00000000 67 FUNC GLOBAL DEFAULT UND capset(a)GLIBC_2.1 (3) 151: 00000000 67 FUNC GLOBAL DEFAULT UND capget(a)GLIBC_2.1 (3) # readelf -a /usr/sbin/proftpd | grep cap 0x00000001 (NEEDED) Shared library: [libcap.so.2] 46: 00000000 0 FUNC GLOBAL DEFAULT UND cap_set_proc 99: 00000000 0 FUNC GLOBAL DEFAULT UND cap_free 142: 00000000 0 FUNC GLOBAL DEFAULT UND cap_init 178: 00000000 0 FUNC GLOBAL DEFAULT UND cap_set_flag 183: 00000000 0 FUNC GLOBAL DEFAULT UND cap_to_text 184: 00000000 0 FUNC GLOBAL DEFAULT UND cap_get_proc It uses more advanced functions ;) syslog-ng, dnsmasq and squid are OK ;) -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 1

[arch-general] Keyboad in KDE locks up
by Leonid Grinberg 12 Mar '09

12 Mar '09

Hello, Every once in a while -- not too frequently to be unusable, but certainly enough to be annoying -- the keyboard in KDE will simply lock up. Mouse will still work fine, and keyboard inputs that don't go through KDE -- switching to virtual terminals, resetting X via <ctrl>-<alt>-backspace still work (and, indeed, resetting X and logging back in is the only thing that fixes it). I can't see any real pattern as to when this happens -- programs that I basically always have running, though, are Pidgin, Firefox and keytouchd, as well as, obviously, plasma, etc. I am running the vanilla KDE 4.2 packages. Thanks in advance. This is really starting to become annoying. -- Leonid Grinberg

7 9

Re: [arch-general] [arch-dev-public] [signoff] coreutils 7.1-2
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Andreas Radke wrote: > Somebody else? Any known issues? > > -Andy > > Yes, in ls -v "sort by version" problem with hidden files For example: (with coreutils-7.1) $ touch .0 .9 .a .z .A .Z 0 9 a z A Z $ /bin/ls -va . .A .Z .a .z 0 9 A Z a z .0 .9 .. (with coreutils-6.12) $ touch .0 .9 .a .z .A .Z 0 9 a z A Z $ /bin/ls -va . .. .0 .9 .A .Z .a .z 0 9 A Z a z You can see here the original bug report here http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/… And a patch here http://thread.gmane.org/gmane.comp.lib.gnulib.bugs/16902 -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

3 3

[arch-general] DST and suspend
by Sergey Manucharian 11 Mar '09

11 Mar '09

Hi folks, I wonder if anybody else is experiencing such a problem. Here in USA the Daylight Saving time started from the last Sunday, and my box has switched the clock properly. But then I found that every time when I suspend my ThinkPad R61 and bring it back to life the clock is switched back to old winter time! I run ntpdate to fix it, and everything is fine until the laptop is suspended again. Today I've updated tzdata and kernel - the same behaviour still persists... Am I missing something? Thanks for ideas. Sergey

4 5

Re: [arch-general] [arch-dev-public] Linuxtag 2009
by Dieter Plaetinck 11 Mar '09

11 Mar '09

On Mon, 9 Mar 2009 21:12:34 +0100 Andreas Radke <a.radke(a)arcor.de> wrote: > Am Mon, 9 Mar 2009 21:02:12 +0100 > schrieb Tobias Powalowski <t.powa(a)gmx.de>: > > > Hi guys, > > just saw this > > http://www.linuxtag.org:80/2009/ > > 24. till 27. June in Berlin. > > > > anyone interested in having a booth there? > > greetings > > tpowa > > I'll be there. With or without a booth. > > -Andy Are the talks in english or german? Dieter

4 3

Re: [arch-general] [arch-dev-public] [signoff] syslog-ng-3.0.1-1
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Tobias Powalowski wrote: > Am Mittwoch 11 März 2009 schrieb Allan McRae: > >> Gerardo Exequiel Pozzi wrote: >> >>> Pierre Schmitz wrote: >>> >>>> Does anybody know what this message in dmesg is about? Was syslog-ng >>>> compiled for i686? >>>> >>>> warning: `syslog-ng' uses 32-bit capabilities (legacy support in use) >>>> >>> Very out-of-date libcap, not only syslog-ng, also proftpd, vsftpd, >>> pulseaudio, ntpd, virtualbox, etc, etc... >>> >>> http://www.archlinux.org/packages/extra/i686/libcap/ (for linux 2.4) >>> >>> Need to have libcap2 package for kernel 2.6 in Arch Linux >>> http://www.kernel.org/pub/linux/libs/security/linux-privs/ >>> >> I was confused about this as libcap is in [extra] so how can it make >> problems with a package in [core]? >> >> So going from this comment in the bug report about libcap >> (http://bugs.archlinux.org/task/11917#comment41046) I get... >> >> >>> readelf -s /usr/sbin/syslog-ng | grep cap >>> >> 33: 00000000 0 FUNC GLOBAL DEFAULT UND capset(a)GLIBC_2.1 (4) >> 177: 00000000 0 FUNC GLOBAL DEFAULT UND capget(a)GLIBC_2.1 (4) >> 473: 08228bd8 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P >> >> Looks like libcap is a soft dep there. How? >> >> Then rebuild in clean chroot: >> >>> readelf -s syslog-ng | grep cap >>> >> 467: 08221b18 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P >> >> And then the dmesg warning goes away... So, the lesson to learn is to >> _always build in a clean chroot_! >> >> Allan >> > hrm i normally build in chroots, seems somehow this one slipped into it. > Shall i add it as makedepend? > > Yes, is a makedepends, capget, capset are glibc symbols. But these symbols are defined in sys/capability.h (that are part of libcap) don't confuse with linux/capability.h So you can make syslog-ng with capabilities, and don't have libcap installed. ;) See libc.so ;) # readelf -s /lib/libc.so.6 | grep cap 1745: 000d10e0 67 FUNC GLOBAL DEFAULT 11 capset@@GLIBC_2.1 1923: 000d1090 67 FUNC GLOBAL DEFAULT 11 capget@@GLIBC_2.1 3801: 000d1090 67 FUNC LOCAL DEFAULT 11 __GI_capget 4043: 000d10e0 67 FUNC LOCAL DEFAULT 11 __GI_capset 5388: 000d10e0 67 FUNC GLOBAL DEFAULT 11 capset 6337: 000d1090 67 FUNC GLOBAL DEFAULT 11 capget Allan: I hope you have cleared up the confusion. -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 0

Re: [arch-general] [arch-dev-public] [signoff] syslog-ng-3.0.1-1
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Allan McRae wrote: > Gerardo Exequiel Pozzi wrote: >> Pierre Schmitz wrote: >> >>> Does anybody know what this message in dmesg is about? Was syslog-ng >>> compiled for i686? >>> >>> warning: `syslog-ng' uses 32-bit capabilities (legacy support in use) >>> >>> >> Very out-of-date libcap, not only syslog-ng, also proftpd, vsftpd, >> pulseaudio, ntpd, virtualbox, etc, etc... >> >> http://www.archlinux.org/packages/extra/i686/libcap/ (for linux 2.4) >> >> Need to have libcap2 package for kernel 2.6 in Arch Linux >> http://www.kernel.org/pub/linux/libs/security/linux-privs/ >> > > I was confused about this as libcap is in [extra] so how can it make > problems with a package in [core]? > > So going from this comment in the bug report about libcap > (http://bugs.archlinux.org/task/11917#comment41046) I get... > >> readelf -s /usr/sbin/syslog-ng | grep cap > 33: 00000000 0 FUNC GLOBAL DEFAULT UND capset(a)GLIBC_2.1 (4) > 177: 00000000 0 FUNC GLOBAL DEFAULT UND capget(a)GLIBC_2.1 (4) > 473: 08228bd8 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P > > Looks like libcap is a soft dep there. How? > > Then rebuild in clean chroot: >> readelf -s syslog-ng | grep cap > 467: 08221b18 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P > > And then the dmesg warning goes away... So, the lesson to learn is to > _always build in a clean chroot_! > > Allan > Agree about clean chroot. But maybe this is useful, and more secure syslog-ng setup, because it drop some capabilities that don't use it ;) You can see the syslog-ng process running without capabilities enabled (from /proc/PID/status): CapPrm: fffffffffffffeff CapEff: fffffffffffffeff Capabilities for `27939': =ep cap_setpcap-ep ## getpcaps program from latest libcap Shows that have all capabilities, of course, i can't drop it. But running the syslog-ng, with capabilities enabled (accidentally enabled now) you can see, many capabilities are droped :) CapPrm: 0000000000202c06 CapEff: 0000000000200002 Capabilities for `23652': = cap_dac_override,cap_sys_admin+ep cap_dac_read_search,cap_net_bind_service,cap_net_broadcast,cap_net_raw+p More secure syslog-ng ;) OK, this isn't default behavior in Arch Linux, but... -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 0

[arch-general] udev-139 and file permissions of /dev/net/tun
by Attila 11 Mar '09

11 Mar '09

Hi, i use a script to prepare a bridged network for a kvm session and therefore i have this line in /etc/udev/rules.d/01-attila.rules: KERNEL=="tun", NAME="net/%k", MODE="0660", GROUP="network" After upgrading udev my file permissions of the new persistent /dev/net/tun looks so after booting up: crw-rw-rw- 1 root root 10, 200 8. Mär 00:43 /dev/net/tun I play with this lines in /etc/udev/permissions.d/00-my.permissions: a) tun:root:network:0660 b) net/tun:root:network:0660 I reboot even after changing the line but there is no change. If i do a "modprobe tun" there be the right permissions: crw-rw---- 1 root network 10, 200 8. Mär 00:43 /dev/net/tun So my questions is how and/or where can i control the file permissions of the persistent devices from the new udev? This is definitly not bad, i want more to know what i have overseen.-) See you, Attila

6 14

Re: [arch-general] [arch-dev-public] [signoff] syslog-ng-3.0.1-1
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Pierre Schmitz wrote: > Does anybody know what this message in dmesg is about? Was syslog-ng compiled > for i686? > > warning: `syslog-ng' uses 32-bit capabilities (legacy support in use) > > Very out-of-date libcap, not only syslog-ng, also proftpd, vsftpd, pulseaudio, ntpd, virtualbox, etc, etc... http://www.archlinux.org/packages/extra/i686/libcap/ (for linux 2.4) Need to have libcap2 package for kernel 2.6 in Arch Linux http://www.kernel.org/pub/linux/libs/security/linux-privs/ -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 1