- Arch-general - lists.archlinux.org

[arch-general] Fwd: [arch-dev-public] systemd 207 ignores /etc/sysctl.conf
by Martti Kühne 13 Sep '13

13 Sep '13

On Fri, Sep 13, 2013 at 1:12 PM, Pierre Schmitz <pierre(a)archlinux.de> wrote: > Hi, > > a new features in systemd 207 is to no longer read /etc/sysctl.conf. > Instead /etc/sysctl.d/*.conf has to be used. Imho this needs a news item > and we also need to think about what to do with the file we ship as part > of procps-ng. > > From the systemd changelog: > * The systemd-sysctl tool no longer natively reads the > file /etc/sysctl.conf. If desired, the file should be > symlinked from /etc/sysctl.d/99-sysctl.conf. Apart from > providing legacy support by a symlink rather than built-in > code, it also makes the otherwise hidden order of application > of the different files visible. > I may sound lazy, but can't we just provide that symlink and get done with other problems? cheers! mar77i

5 4

[arch-general] Various questions regarding keyboard configuration
by Jakub Klinkovský 12 Sep '13

12 Sep '13

Hi, I'm currently rewriting some pages on ArchWiki regarding keyboard configuration, the current state is quite a mess. Here's the most relevant discussion: https://wiki.archlinux.org/index.php/Talk:Xorg#Keyboard_settings You can watch the progress on my user-pages, any feedback is welcome: https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_i… https://wiki.archlinux.org/index.php/User:Lahwaacz/Keyboard_configuration_i… I've got some questions that I think should be answered before I finish: 1) Why are keycodes as reported by xev different from those reported by showkey? This is not related to configuration, but I plan to update/rewrite https://wiki.archlinux.org/index.php/Extra_Keyboard_Keys too. 2) The man page vconsole.conf(5) mentions KEYMAP_TOGGLE variable to "configure a second toggle keymap", however, that's all the documentation says. Looking at the code (vconsole-setup.c at line 120), it uses the 'loadkeys' utility, which does not document any such feature. Instead it seems that the specified keymaps are loaded serially, resulting in KEYMAP_TOGGLE overwrites KEYMAP. Am I missing something here? Regards, Jakub Klinkovský (Lahwaacz)

1 0

[arch-general] iptables script
by F. Gr. 11 Sep '13

11 Sep '13

I'm newbie about iptables. I use this script <http://pastebin.ca/2447430> for my system. It is based on <http://wiki.archlinux.org/index.php/Simple_stateful_firewall>. Now I want to add an iptables log chain and others. What is the correct line to start adding the following? <script> ## Logging $IPT -N LOGDROP $IPT -A LOGDROP -m limit --limit 5/m --limit-burst 8 -j LOG --log-prefix "IPTables-Dropped: " $IPT -A LOGDROP -j DROP # log and drop packets that hit this rule $IPT -A INPUT -m conntrack --ctstate INVALID -j LOGDROP </script> Supposing I want to add the following lines as well, is there any rules that is superfluous? These rules have to place after or before the rule "$IPT -A INPUT -m conntrack --ctstate INVALID -j DROP"? <script> # SSH bruteforce attacks $IPT -N IN_SSH $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 3 --seconds 10 -j DROP $IPT -A IN_SSH -m recent --name sshbf --rttl --rcheck --hitcount 4 --seconds 1800 -j DROP $IPT -A IN_SSH -m recent --name sshbf --set -j ACCEPT $IPT -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -j IN_SSH ## Local Area Network Denial (LAND) attack # Block all packets from your own IP $IPT -A INPUT -s 192.168.201.2/32 -j DROP # Block any packet from local network $IPT -A INPUT -s 127.0.0.0/8 -j DROP # SYN Flood $IPT -A FORWARD -p tcp --syn -m limit --limit 1/s -j ACCEPT # SYN packets # Drop any tcp packet that does not start a connection with a syn flag $IPT -A INPUT -p tcp ! --syn -m conntrack --ctstate NEW -j DROP # NULL packets $IPT -A INPUT -p tcp --tcp-flags ALL NONE -j DROP # XMAS packets $IPT -A INPUT -p tcp --tcp-flags ALL ALL -j DROP # Fragments Packet $IPT -A INPUT -f -j DROP # ping of death $IPT -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT # Furtive port scanner $IPT -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT </script>

3 3

Re: [arch-general] [arch-dev-public] Dropping LXDM
by Christian Hesse 11 Sep '13

11 Sep '13

Gaetan Bisson <bisson(a)archlinux.org> on Tue, 2013/09/10 21:21: > [2013-09-11 08:56:42 +0200] Bartłomiej Piotrowski: > > On 2013-09-11 00:53, Allan McRae wrote: > > > Also "thanks to its developers and recent changes in package" and > > > "during 2 years since last release" make zero sense taken together. > > > > What exactly doesn't make sense? The fact that LXDM is based on > > ConsoleKit and even with git patch is unable to utilize logind correctly? > > Upstream seems pretty active; do you mean that all the problems we have > with our package are still present in git master? If not, we should try > to convince upstream to make a release - and if they are not willing to > we can always package a git snapshot. I vote for this. A lot of issues have been resolved in git master, some by myself. I have not followed the changes in community package but used the git package from AUR instead. It works great for me so far. Some time ago dgod (the developer) stated he "would like to release it, but the lxde release team has some problems to release it". He also thinks one should not wait for a release but using git is stable enough. I do not have any more information, but contacting him may be worth it. For me git is just fine, I do understand packagers do prefer releases, though. ;) -- main(a){char*c=/* Schoene Gruesse */"B?IJj;MEH" "CX:;",b;for(a/* Chris get my mail address: */=0;b=c[a++];) putchar(b-1/(/* gcc -o sig sig.c && ./sig */b/42*2-3)*42);}

1 0

[arch-general] new arch installation: user login not possible on virtual console
by Friedrich Strohmaier 11 Sep '13

11 Sep '13

Hi all, this is the first time writing to this list so first: hello to all. I'm a quite happy user of arch-linux since december last year, and up to now I managed to solve all tasks and difficulties using the rtfm button. ;o)) Now installing a further box (x86) I get this strange behaviour never met during ~15 years of linux usage: After setting up a new user I cannot login to it's account on the virtual console. I get: Login incorrect No matter whether password is set or not # passwd -S <user>: <user> P ... # password set <user> NP ... # password not set login as root works with and without password set (both times unset by deleting the /etc/shadow passwd entry). this also occured on another box currently installed - latter one a x86_64 user was added through # useradd -m -g <group> <user> password was set through # passwd user changing user from root via sudo or su works, as does login via xdm. login via lxdm and gdm doesn't, if that is of any help. If I do the same on my box writing this mail from (x86_64 - all updates included) everything works as expected. Couldn't find anything at the bugtracker. Before digging deeper my question: Any known issues or ideas on that? Friedrich

4 5

[arch-general] System-Wide Pulseaudio
by Dennis Lange 09 Sep '13

09 Sep '13

Hi everybody, I like to run more than one user in more than one X session at the same time and want to hear the audio from all users together. So i thought it would be nice to have a System-Wide Pulseaudio setup. I try to use this package: https://aur.archlinux.org/packages/pulseaudio-systemd/ and like shown here: http://www.freedesktop.org/wiki/Software/PulseAudio/Documentation/User/Syst… I put all users into pulse-access group after installing the pulseaudio-systemd package and reboot, but it will not work. Have anyone a hint for this situation?

7 22

[arch-general] Arch Linux Community on Gittip
by Karol Blazewicz 06 Sep '13

06 Sep '13

I asked about this before: https://mailman.archlinux.org/pipermail/arch-general/2013-May/033590.html but now Dusty wants to make it official (or "official") https://bbs.archlinux.org/viewtopic.php?id=169356 Some people didn't like the Official Arch Linux Google+ page, so I want to make sure if the kind of official Arch Linux community Dusty wants is OK with the Arch Overlords. It seems OK to me.

3 2

[arch-general] kernel 3.11 and virtualbox kernel module
by Genes Lists 03 Sep '13

03 Sep '13

Heads up - noew that 3.11 is out, there is a patch in upstream virtualbox which is not in vbox 4.2.16 that is necessary otherwise the kernel modules wont compile for 3.11 kernel. The file needing fixing is /usr/src/vboxguest-4.2.16/vboxsf/dirops.c I am happy to send the required patch if its needed. Gene/

2 4

[arch-general] linux-3.11-1 in [testing], broken community modules
by Tobias Powalowski 03 Sep '13

03 Sep '13

Hi, I built the kernel, now there are issues with following - community binary modules: virtualbox-modules Please find patches and fix those. greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

1 0

[arch-general] Isolate systemd target if service fails
by Buce 30 Aug '13

30 Aug '13

Hi, I just set up a custom systemd target on my laptop for the first time using [1] to split out services that I don't want running if I'm on a public wifi. I configured things so that by default, I boot into a custom 'home.target' which starts everything up, and then if I'm on an untrusted network I can `systemctl isolate multi-user` to bring down httpd, mysqld, sshd, and anything else I'd rather not have listening to outside traffic. Usually under those circumstances, my SSID wouldn't be available and netctl(a)homewifi.service would have failed, so in an effort to automate the process I added the following to the netctl service file and did `systemctl --system daemon-reload` to read in the changes. OnFailure=multi-user.target OnFailureIsolate=true The end result is that if systemd is unable to start netctl(a)homewifi.service, it will isolate the multi-user target, thus shutting down httpd, mysqld, sshd, and other services belonging to home.target. I'm just posting this because the solution wasn't obvious and a google search for the terms in the subject of this email didn't turn up anything about OnFailure and OnFailureIsolate. Hopefully the info will be useful to someone else. I also wouldn't mind feedback on this setup. Is what I'm doing sane? Could it be done better? My full home.target and netctl(a)homewifi.service are linked below [2]. [1] https://wiki.archlinux.org/index.php/systemd#Targets [2] https://gist.github.com/DMBuce/6390806 -Buce

1 0