- Arch-general - lists.archlinux.org

[arch-general] messing with external USB and .mount/.automount drive
by arnaud gaboury 22 Jan '16

22 Jan '16

I want to timer a simple backup of part of my system with rsync. The partition I want to use for backup is on an external USB drive. For safety reasons (avoid any accidental erase), I want the partition be mounted only for the time of the rsync, then be umounted Here is my setup: /etc/fstab ----------------- UUID=868560c1-ab69-423f-b76d-b8ea5af1b066 /mnt/backup ext2 noauto,x-systemd.automount,x-systemd.device-timeout=5,x-systemd.idle-timeout=60 0 2 ----------------------- /etc/systemd/system/backup-external.service ---------------------------------------------------- [Unit] Description=Backup system to external drive Requires=mnt-backup.mount After=mnt-backup.mount [Service] Type=oneshot ExecStart=/usr/bin/rsync -av --delete --exclude-from /etc/conf.d/exclude-hortensia / /mnt/backup/hortensia ExecStartPost=/usr/bin/umount /mnt/backup ------------------------------------------------------------------------- /etc/systemd/system/backup-external.timer ------------------------------------------ [Unit] Description=Start external-backup service periodically [Timer] OnCalendar=Mon *-*-* 00:00:00 Persistent=True [Install] WantedBy=timers.target --------------------------------------------------- $ ls /run/systemd/generator ..... mnt-backup.automount mnt-backup.mount --------------------------------- The setup works BUT in fact /mnt/backup/hortensia is always mounted, even after boot, and I want to avoid it.(maybe because it is USB and autmounted like any USB device?) What surprised me is if I run: # umount /mnt/backup I come back to command with no text BUT /dev/dev/mapper/vg1-backup_hortensia (my backup partition) is still mounted. Furthermore, I can mount/umount it elsewhere (mnt/toto for example). I can't see what is wrong and how can I achieve my goal. Thank you for help -- google.com/+arnaudgabourygabx

1 1

Re: [arch-general] Experiences with SELinux on Arch
by Nicolas Iooss 22 Jan '16

22 Jan '16

On Fri, Jan 22, 2016 at 11:25 AM, Remi Gacogne < listes+arch-general(a)valombre.net> wrote: > Hi Niels, > > > since I won't get an answer on the forum except "Read the Wiki" which > > isn't helpful, I ask here. > > Is here anybody with real world experiences with SELinux on Arch? The > > forum states the userland tools as "work in progress" which doesn't say > > anything about the progress… > > I'd like to know how easy SELinux is to use on Arch. I am just starting > > out to (re-)enabling it on my CentOS-servers and there it is actually > > not that hard after all nowadays because of the great tools available. > > But how about Arch? > > You might want to look at this project: > > https://github.com/archlinuxhardened/selinux > https://github.com/archlinuxhardened/selinux-policy-arch > > I know Nicolas is working on making it as easy as possible to use > SELinux on Arch, and he is doing a great job. > I am this Nicolas :) I am currently maintaining the SELinux packages in the AUR and can answer you with information which is more up to date than the wiki page (that I don't update often, and thankfully other people are taking care of it). First, about the userspace tools and library (libselinux, setools...) and the programs which need to be recompiled with SELinux support, there are AUR packages which are working (I am not aware of any bug right now, and am using them on my systems). I have been working on making the install process easier for a few years and as there can be some difficulties (like the build-time circular dependency between util-linux and systemd, which is not a bug according to https://bugs.archlinux.org/task/39767) I recently published an install script which builds and installs all SELinux packages (build_and_install_all.sh in https://github.com/archlinuxhardened/selinux) You may be interested in using it to get SELinux on Arch. Then, about the policy, there is currently no publicly-available policy for Arch Linux, unlike Gentoo, Debian, Fedora and CentOS. For those on the ML which are not familiar with SELinux but who know firewall configuration, SELinux is like a firewall for applications and "a SELinux policy" is a set of rules to filter accesses in a way which is similar to iptables rules filtering network communications. There is an "upstream" (reference) policy, from Tresys Technologies ( https://github.com/TresysTechnology/refpolicy) which is used by Debian and Gentoo (not by Fedora). I am currently working on bringing Arch Linux support into refpolicy, and this work is still in progress. For example refpolicy did not have systemd support before its last release (which happened in December), and now there are still issues with partially-supported systemd services. I recently updated selinux-refpolicy-arch AUR packages with some commits from my personal policy which I'll submit upstream ( https://github.com/archlinuxhardened/selinux-policy-arch/commits/2.20151208) but it is still not complete for a "base system". By the way, if anyone wants to take a look at what looks like Arch Linux with SELinux, for example in a virtual machine, it is possible to create a Vagrant VM by following the instructions on https://github.com/archlinuxhardened/selinux/tree/master/_vagrant and then play in a "vagrant ssh" session. Finally, for the reasons why SELinux is not integrated to Arch Linux like Debian (i.e. compiled without being activated by default, contrary to CentOS and Fedora where SELinux is enabled by default), I believe the three main points are: * support of audit in the kernel (currently there is an annoying bug in chromium seccomp filters which spams the logs when audit is enabled, https://code.google.com/p/chromium/issues/detail?id=456535) * LSM support in the kernel (e.g. https://bugs.archlinux.org/task/37578 , which is more detailed than https://bugs.archlinux.org/task/31448) * and package management (libsepol, libselinux and libsemanage would need to be added to core repository and thus maintained by Arch devs). I do not see anything today which would lead to the solving of any of these issues in the short run, so I maintain packages in the AUR and continue working on the policy. If you feels like helping this work, feel free to submit pull requests on GitHub (or submit patches upstream). Nicolas PS : for the record, I am running a kernel with both SELinux and grsec (without RBAC) on my systems. These two security systems target different things and it is possible to use both.

1 0

[arch-general] Conflict after 3 week upgrade pause
by Patrick Hofmann 18 Jan '16

18 Jan '16

Hello all I had no internet for 3 weeks after moving and I Just updated for the first time again. Pacman now tells me that xf86-input-libinput and xorg-server are in confict and wants to remove xorg-server. I use xorg-server not wayland, so I dont think that is a good idea. I tried removing xf86-input-libinput with pacman -Rdd xf86-input-libinput but that results in: target not found. How can there be a conflict if xf86-input-libinput isnt there? Regards Patrick

4 4

[arch-general] which nfs startup services to enable ?
by niya levi 16 Jan '16

16 Jan '16

Hi i have set up a keberised nfsv4/v3 server and kerberised v3 clients. i have these services enabled on the nfs server nfs-server rpcbind rpc-gssd gssproxy nfs-idmapd rpc-statd and these enabled on the nfs client rpcbind rpc-statd nfs-client.target remote-fs.target rpc-gssd nfs-idmapd the nfs wiki page says for the nfs server to enable nfs-server rpcbind do the following need to be enabled for a kerberised nfs server: rpc-gssd gssproxy nfs-idmapd rpc-statd ? the nfs wiki page says for the nfs client to enable rpcbind nfs-client.target remote-fs.target plus rpc-gssd for kerberos do the following need to be enabled for a kerberised nfs client: rpc-statd nfs-idmapd ? thanks Shadrock

1 0

[arch-general] [bug] python-setuptools 1:19.3-1 breaks youtube-dl
by Jonathan Roemer 16 Jan '16

16 Jan '16

Since there is no section in the bugtracker for [community] packages, and the maintainer was not in #archlinux, it seemed that this was the best place for this. python-setuptools 1:19.3-1 breaks youtube-dl. Steps to reproduce: Update python-setuptools to 1:19.3-1 and use youtube-dl. Output: Traceback (most recent call last): File "/usr/bin/youtube-dl", line 5, in <module> from pkg_resources import load_entry_point File "/usr/lib/python3.5/site-packages/pkg_resources/__init__.py", line 48, in <module> from pkg_resources.extern import six File "/usr/lib/python3.5/site-packages/pkg_resources/extern/__init__.py", line 60, in load_module "distribution.".format(**locals()) ImportError: The 'six' package is required; normally this is bundled with this package so if you get this warning, consult the packager of your distribution. Workaround: Downgrade python-setuptools to version 1:19.2-1. I am not familiar enough with youtube-dl to propose a solution, but it would seem a simple rebuild would be sufficient.

2 2

[arch-general] linux 4.4 bad package - wont install
by Genes Lists 16 Jan '16

16 Jan '16

There is a bug with the PKGFILE which is too aggressive copying files with names containing Kconfig. Consequence is upon install attempt: error: failed to commit transaction (conflicting files) /usr/lib/modules/4.4.0-1-ARCH/build/Documentation/kbuild/Kconfig.recursion-issue-01 exists in both 'linux-docs' and 'linux-headers' /usr/lib/modules/4.4.0-1-ARCH/build/Documentation/kbuild/Kconfig.recursion-issue-02 exists in both 'linux-docs' and 'linux-headers' /usr/lib/modules/4.4.0-1-ARCH/build/Documentation/kbuild/Kconfig.select-break exists in both 'linux-docs' and 'linux-headers' Errors occurred, no packages were upgraded. A "dumb" fix is to remove the duplicate by adding a line to PKGFILE something like: rm "${pkgdir}/usr/lib/modules/${_kernver}/build/Documentation/kbuild"/Kconfig.*-* gene

2 4

[arch-general] Samsung EVO 850 TRIM Bug Fixed?
by Andrew Martin 15 Jan '16

15 Jan '16

Hello, I installed Arch on an EVO 850 120GB SSD. I read about the linux EVO 800-series TRIM bug a few months ago: https://blog.algolia.com/when-solid-state-drives-are-not-that-solid/ However it appeared to have been fixed in the 4.1 kernel release: https://github.com/torvalds/linux/commit/9a9324d3969678d44b330e1230ad2c8ae6… However a few days ago, my root partition suddenly became corrupted and I was forced to reinstall. While I cannot be 100% certain it was this bug, it seems likely. Has it been confirmed that this bug has been fixed in Arch? If so, at which kernel version? Thanks, Andrew

4 5

[arch-general] Unable to get remote rpcinfo information
by niya levi 14 Jan '16

14 Jan '16

Hi everyone can anyone see why i cannot get remote rpcinfo information from across the network ? ------------------------------------------------------------------------ ## NFS SERVER # testy systemctl status rpcbind ● rpcbind.service - RPC bind service Loaded: loaded (/usr/lib/systemd/system/rpcbind.service; indirect; vendor preset: disabled) Active: active (running) since Thu 2016-01-14 00:39:21 GMT; 12h ago Process: 16918 ExecStart=/usr/bin/rpcbind -w ${RPCBIND_ARGS} (code=exited, status=0/SUCCESS) Main PID: 16921 (rpcbind) Tasks: 1 (limit: 512) CGroup: /system.slice/rpcbind.service └─16921 /usr/bin/rpcbind -w Jan 14 00:39:21 testy systemd[1]: Starting RPC bind service... Jan 14 00:39:21 testy systemd[1]: Started RPC bind service. lsof +M -i4 | grep rpcbind rpcbind 16921 rpc 6u IPv4 32401 0t0 UDP *:sunrpc[portmapper] rpcbind 16921 rpc 7u IPv4 32402 0t0 UDP *:982 rpcbind 16921 rpc 8u IPv4 32403 0t0 TCP *:sunrpc[portmapper] (LISTEN) rpcinfo -s program version(s) netid(s) service owner 100000 2,3,4 local,udp,tcp,udp6,tcp6 portmapper superuser 100024 1 tcp6,udp6,tcp,udp status superuser 100005 3,2,1 tcp6,udp6,tcp,udp mountd superuser 100003 4 udp6,tcp6,udp,tcp nfs superuser rpcinfo -p program vers proto port service 100000 4 tcp 111 portmapper 100000 3 tcp 111 portmapper 100000 2 tcp 111 portmapper 100000 4 udp 111 portmapper 100000 3 udp 111 portmapper 100000 2 udp 111 portmapper 100024 1 udp 32765 status 100024 1 tcp 32765 status 100005 1 udp 20048 mountd 100005 1 tcp 20048 mountd 100005 2 udp 20048 mountd 100005 2 tcp 20048 mountd 100005 3 udp 20048 mountd 100005 3 tcp 20048 mountd 100003 4 tcp 2049 nfs 100003 4 udp 2049 nfs rpcinfo -s ashanti rpcinfo: can't contact rpcbind: RPC: (unknown error code) ------------------------------------------------------------------------ ## NFS CLIENT # ashanti systemctl status rpcbind ● rpcbind.service - RPC bind service Loaded: loaded (/usr/lib/systemd/system/rpcbind.service; indirect; vendor preset: disabled) Active: active (running) since Thu 2016-01-14 00:16:10 GMT; 13h ago Process: 16287 ExecStart=/usr/bin/rpcbind -w ${RPCBIND_ARGS} (code=exited, status=0/SUCCESS) Main PID: 16288 (rpcbind) CGroup: /system.slice/rpcbind.service └─16288 /usr/bin/rpcbind -w Jan 14 00:16:10 ashanti systemd[1]: Starting RPC bind service... Jan 14 00:16:10 ashanti systemd[1]: Started RPC bind service. alarm]# lsof +M -i4 | grep rpcbind rpcbind 16288 rpc 6u IPv4 41019 0t0 UDP *:sunrpc[portmapper] rpcbind 16288 rpc 7u IPv4 41020 0t0 UDP *:acmaint-transd rpcbind 16288 rpc 8u IPv4 41021 0t0 TCP *:sunrpc[portmapper] (LISTEN) rpcinfo -s program version(s) netid(s) service owner 100000 2,3,4 local,udp,tcp,udp6,tcp6 portmapper superuser 100005 3,2,1 tcp6,udp6,tcp,udp mountd superuser 100024 1 tcp6,udp6,tcp,udp status superuser rpcinfo -p program vers proto port service 100000 4 tcp 111 portmapper 100000 3 tcp 111 portmapper 100000 2 tcp 111 portmapper 100000 4 udp 111 portmapper 100000 3 udp 111 portmapper 100000 2 udp 111 portmapper 100005 1 udp 20048 mountd 100005 1 tcp 20048 mountd 100005 2 udp 20048 mountd 100005 2 tcp 20048 mountd 100005 3 udp 20048 mountd 100005 3 tcp 20048 mountd 100024 1 udp 59433 status 100024 1 tcp 56392 status rpcinfo -s testy rpcinfo: can't contact rpcbind: RPC: (unknown error code) ------------------------------------------------------------------------ thanks Shadrock

1 0

[arch-general] Kali rt2800usb driver on Arch for wireshark tcp capture
by Fulcrum Mike 13 Jan '16

13 Jan '16

Hi everybody I spent days trying to get my Alfa AWUS036H work with Wireshark on Arch Linux. It captured all sorts of fancy protocols, but no tcp. I booted Kali linux on the same PC and followed the same procedure for data capture and this time everything worked. I could see http requests to multiple wifi access points nearby. After some more googleing, I think the problem is with the rt2800usb driver on arch. I read somewhere that kali comes with a 'modified' wifi driver for capturing tcp data. I was wondering if its possible to somehow get kali's driver working on arch? any help would be appreciated! Regards

4 13

[arch-general] pulseaudio
by flow 11 Jan '16

11 Jan '16

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 How to deny to touch mixer setings? - -- Have a nice day! ~~~ This PGP signature only certifies the sender and date of the message. It implies no approval from the administrators of nym.mixmin.net. Date: Mon Jan 11 11:39:41 2016 GMT From: flow(a)nym.mixmin.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iEYEARECAAYFAlaTlH0ACgkQViYZwngkfDvf1ACgiEOSVhxqjEShptEyA3z2oB/2 o6kAnjWdmNU4KNV4wizGh9UOG5AmkPNZ =V7b1 -----END PGP SIGNATURE-----

1 0