- Arch-general - lists.archlinux.org

Re: [arch-general] [arch-dev-public] [signoff] coreutils 7.1-2
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Andreas Radke wrote: > Somebody else? Any known issues? > > -Andy > > Yes, in ls -v "sort by version" problem with hidden files For example: (with coreutils-7.1) $ touch .0 .9 .a .z .A .Z 0 9 a z A Z $ /bin/ls -va . .A .Z .a .z 0 9 A Z a z .0 .9 .. (with coreutils-6.12) $ touch .0 .9 .a .z .A .Z 0 9 a z A Z $ /bin/ls -va . .. .0 .9 .A .Z .a .z 0 9 A Z a z You can see here the original bug report here http://groups.google.com/group/linux.debian.bugs.dist/browse_thread/thread/… And a patch here http://thread.gmane.org/gmane.comp.lib.gnulib.bugs/16902 -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

3 3

[arch-general] DST and suspend
by Sergey Manucharian 11 Mar '09

11 Mar '09

Hi folks, I wonder if anybody else is experiencing such a problem. Here in USA the Daylight Saving time started from the last Sunday, and my box has switched the clock properly. But then I found that every time when I suspend my ThinkPad R61 and bring it back to life the clock is switched back to old winter time! I run ntpdate to fix it, and everything is fine until the laptop is suspended again. Today I've updated tzdata and kernel - the same behaviour still persists... Am I missing something? Thanks for ideas. Sergey

4 5

Re: [arch-general] [arch-dev-public] Linuxtag 2009
by Dieter Plaetinck 11 Mar '09

11 Mar '09

On Mon, 9 Mar 2009 21:12:34 +0100 Andreas Radke <a.radke(a)arcor.de> wrote: > Am Mon, 9 Mar 2009 21:02:12 +0100 > schrieb Tobias Powalowski <t.powa(a)gmx.de>: > > > Hi guys, > > just saw this > > http://www.linuxtag.org:80/2009/ > > 24. till 27. June in Berlin. > > > > anyone interested in having a booth there? > > greetings > > tpowa > > I'll be there. With or without a booth. > > -Andy Are the talks in english or german? Dieter

4 3

Re: [arch-general] [arch-dev-public] [signoff] syslog-ng-3.0.1-1
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Tobias Powalowski wrote: > Am Mittwoch 11 März 2009 schrieb Allan McRae: > >> Gerardo Exequiel Pozzi wrote: >> >>> Pierre Schmitz wrote: >>> >>>> Does anybody know what this message in dmesg is about? Was syslog-ng >>>> compiled for i686? >>>> >>>> warning: `syslog-ng' uses 32-bit capabilities (legacy support in use) >>>> >>> Very out-of-date libcap, not only syslog-ng, also proftpd, vsftpd, >>> pulseaudio, ntpd, virtualbox, etc, etc... >>> >>> http://www.archlinux.org/packages/extra/i686/libcap/ (for linux 2.4) >>> >>> Need to have libcap2 package for kernel 2.6 in Arch Linux >>> http://www.kernel.org/pub/linux/libs/security/linux-privs/ >>> >> I was confused about this as libcap is in [extra] so how can it make >> problems with a package in [core]? >> >> So going from this comment in the bug report about libcap >> (http://bugs.archlinux.org/task/11917#comment41046) I get... >> >> >>> readelf -s /usr/sbin/syslog-ng | grep cap >>> >> 33: 00000000 0 FUNC GLOBAL DEFAULT UND capset@GLIBC_2.1 (4) >> 177: 00000000 0 FUNC GLOBAL DEFAULT UND capget@GLIBC_2.1 (4) >> 473: 08228bd8 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P >> >> Looks like libcap is a soft dep there. How? >> >> Then rebuild in clean chroot: >> >>> readelf -s syslog-ng | grep cap >>> >> 467: 08221b18 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P >> >> And then the dmesg warning goes away... So, the lesson to learn is to >> _always build in a clean chroot_! >> >> Allan >> > hrm i normally build in chroots, seems somehow this one slipped into it. > Shall i add it as makedepend? > > Yes, is a makedepends, capget, capset are glibc symbols. But these symbols are defined in sys/capability.h (that are part of libcap) don't confuse with linux/capability.h So you can make syslog-ng with capabilities, and don't have libcap installed. ;) See libc.so ;) # readelf -s /lib/libc.so.6 | grep cap 1745: 000d10e0 67 FUNC GLOBAL DEFAULT 11 capset@@GLIBC_2.1 1923: 000d1090 67 FUNC GLOBAL DEFAULT 11 capget@@GLIBC_2.1 3801: 000d1090 67 FUNC LOCAL DEFAULT 11 __GI_capget 4043: 000d10e0 67 FUNC LOCAL DEFAULT 11 __GI_capset 5388: 000d10e0 67 FUNC GLOBAL DEFAULT 11 capset 6337: 000d1090 67 FUNC GLOBAL DEFAULT 11 capget Allan: I hope you have cleared up the confusion. -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 0

Re: [arch-general] [arch-dev-public] [signoff] syslog-ng-3.0.1-1
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Allan McRae wrote: > Gerardo Exequiel Pozzi wrote: >> Pierre Schmitz wrote: >> >>> Does anybody know what this message in dmesg is about? Was syslog-ng >>> compiled for i686? >>> >>> warning: `syslog-ng' uses 32-bit capabilities (legacy support in use) >>> >>> >> Very out-of-date libcap, not only syslog-ng, also proftpd, vsftpd, >> pulseaudio, ntpd, virtualbox, etc, etc... >> >> http://www.archlinux.org/packages/extra/i686/libcap/ (for linux 2.4) >> >> Need to have libcap2 package for kernel 2.6 in Arch Linux >> http://www.kernel.org/pub/linux/libs/security/linux-privs/ >> > > I was confused about this as libcap is in [extra] so how can it make > problems with a package in [core]? > > So going from this comment in the bug report about libcap > (http://bugs.archlinux.org/task/11917#comment41046) I get... > >> readelf -s /usr/sbin/syslog-ng | grep cap > 33: 00000000 0 FUNC GLOBAL DEFAULT UND capset@GLIBC_2.1 (4) > 177: 00000000 0 FUNC GLOBAL DEFAULT UND capget@GLIBC_2.1 (4) > 473: 08228bd8 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P > > Looks like libcap is a soft dep there. How? > > Then rebuild in clean chroot: >> readelf -s syslog-ng | grep cap > 467: 08221b18 4 OBJECT GLOBAL DEFAULT 26 OPENSSL_ia32cap_P > > And then the dmesg warning goes away... So, the lesson to learn is to > _always build in a clean chroot_! > > Allan > Agree about clean chroot. But maybe this is useful, and more secure syslog-ng setup, because it drop some capabilities that don't use it ;) You can see the syslog-ng process running without capabilities enabled (from /proc/PID/status): CapPrm: fffffffffffffeff CapEff: fffffffffffffeff Capabilities for `27939': =ep cap_setpcap-ep ## getpcaps program from latest libcap Shows that have all capabilities, of course, i can't drop it. But running the syslog-ng, with capabilities enabled (accidentally enabled now) you can see, many capabilities are droped :) CapPrm: 0000000000202c06 CapEff: 0000000000200002 Capabilities for `23652': = cap_dac_override,cap_sys_admin+ep cap_dac_read_search,cap_net_bind_service,cap_net_broadcast,cap_net_raw+p More secure syslog-ng ;) OK, this isn't default behavior in Arch Linux, but... -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 0

[arch-general] udev-139 and file permissions of /dev/net/tun
by Attila 11 Mar '09

11 Mar '09

Hi, i use a script to prepare a bridged network for a kvm session and therefore i have this line in /etc/udev/rules.d/01-attila.rules: KERNEL=="tun", NAME="net/%k", MODE="0660", GROUP="network" After upgrading udev my file permissions of the new persistent /dev/net/tun looks so after booting up: crw-rw-rw- 1 root root 10, 200 8. Mär 00:43 /dev/net/tun I play with this lines in /etc/udev/permissions.d/00-my.permissions: a) tun:root:network:0660 b) net/tun:root:network:0660 I reboot even after changing the line but there is no change. If i do a "modprobe tun" there be the right permissions: crw-rw---- 1 root network 10, 200 8. Mär 00:43 /dev/net/tun So my questions is how and/or where can i control the file permissions of the persistent devices from the new udev? This is definitly not bad, i want more to know what i have overseen.-) See you, Attila

6 14

Re: [arch-general] [arch-dev-public] [signoff] syslog-ng-3.0.1-1
by Gerardo Exequiel Pozzi 11 Mar '09

11 Mar '09

Pierre Schmitz wrote: > Does anybody know what this message in dmesg is about? Was syslog-ng compiled > for i686? > > warning: `syslog-ng' uses 32-bit capabilities (legacy support in use) > > Very out-of-date libcap, not only syslog-ng, also proftpd, vsftpd, pulseaudio, ntpd, virtualbox, etc, etc... http://www.archlinux.org/packages/extra/i686/libcap/ (for linux 2.4) Need to have libcap2 package for kernel 2.6 in Arch Linux http://www.kernel.org/pub/linux/libs/security/linux-privs/ -- Gerardo Exequiel Pozzi ( djgera ) http://www.djgera.com.ar KeyID: 0x1B8C330D Key fingerprint = 0CAA D5D4 CD85 4434 A219 76ED 39AB 221B 1B8C 330D

1 1

Re: [arch-general] [arch-dev-public] [signoff] initscripts 2009.03-1
by Damjan Georgievski 10 Mar '09

10 Mar '09

> Thomas Bächler (2): > Fix bug #13205: better random-seed entropy - For the random-seed file > location to be more "FHS compliant" is better to put in > /var/lib/misc/random-seed (Variable state information, that persists after > reboot) than the /var/run/random-seed (Run-time variable data, that not > necessarily persists after reboot) for example with /var/run mounted as > TMPFS. - The random-seed file permision should be "0600" not "0644" - The > size of random-seed acording to random(4) manpage should be the size > specified in "/proc/sys/kernel/random/poolsize" in other case 512 bytes. > Use the device nodes from /lib/udev/devices/* instead of hardcoding > them in initscripts. This requires a new udev package (at least 139-1) I tested this on a minimal ArchLinux I installed in a virtual machine. /var/lib/misc/ was not present on that install so rc.shutdown complained, and the random-seed file of course wasn't created. -- damjan

2 1

[arch-general] [signoff] kernel26 2.6.28.7-2
by Tobias Powalowski 10 Mar '09

10 Mar '09

Hi guys, new kernel adresses the following things: - changes for better customizing the default kernel included http://bugs.archlinux.org/task/12384 --> firmware needed to be split off the package. It is now called kernel26-firmware - config features added: http://bugs.archlinux.org/task/13128 http://bugs.archlinux.org/task/12584 bug fixes: - http://bugs.archlinux.org/task/12826 please signoff for both arches. I haven't had issues with nvidia driver here, but please report issues if binary modules break, thanks. greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

4 6

[arch-general] OpenOffice.org on Acer Aspire One
by henrih81＠gmail.com 10 Mar '09

10 Mar '09

Hello. I'm trying to use OpenOffice.org on my Acer Aspire One. For some peculiar reason, all the characters in the menu and title bar etc. and everything I type to the document are displayed as "squares" instead of regular characters. Sourcing /etc/profile.d/openoffice.sh does nothing. Installing a JRE didn't do anything either. Other applications such as Firefox work fine. Any ideas?

5 4