- Arch-general - lists.archlinux.org

[arch-general] We need a maintained-by-TU chrome/chromium...
by Hamo 21 Nov '09

21 Nov '09

Dear Archlinux users, Chrome is likely to be a daily-use web browser and with the Chrome OS releasing,it will become more and more reliable.Archlinux is a rolling-release distribution and it aims at being bleeding edge.So we should have a maintained-by-TU chrome/chromium and it is really useful... -- Nick Name:Hamo Website:http://hamobai.com/

15 20

[arch-general] [PATCH] send hostname to DHCP server / router
by Suraj Kurapati 21 Nov '09

21 Nov '09

Hello, For the longest time, the default ArchLinux networking setup had one deficiency: it would not send the machine hostname to the DHCP server / router when acquiring a DHCP lease. As a result, I was never able to ping/ssh my ArchLinux system by its hostname from other machines in my home network --- instead, I was always forced to type out my ArchLinux system's IP address in full. I looked high and low across the 'net before I finally found the answer in the dhcpcd.conf man page: the solution is to add the following line to your /etc/dhcpcd.conf file: hostname One thing that confused me is this line in the default ArchLinux /etc/dhcpd.conf file: # dhcpcd-run-hooks uses these options. option domain_name_servers, domain_name, domain_search, host_name The "option host_name" part *seems* like it would send your machine's hostname to the DHCP server, but it really doesn't. Maybe that's a bug? I request the developers in charge of the default ArchLinux networking setup to make the above change, so that ArchLinux systems send their hostnames to the DHCP server (and therefore can be pinged/ssh'ed/accessed by their hostname) out of the box! Thanks for your consideration.

3 3

[arch-general] Borken kernel-2.6.31.6-1.tar.gz ?
by David Dupin 20 Nov '09

20 Nov '09

Hi, It seems that kernel-2.6.31.6-1.tar.gz is broken and can't be updated on i686 arch. On my x86_64 it works fine. If i unzip the download package i get message "invalid compressed data--format violated" Someone can confirm it ? PS : i try more than one repo but all fails.

3 4

[arch-general] The ultimate Home Theater / media center computer
by RedShift 20 Nov '09

20 Nov '09

Hi list Somehow I got it into my head that I want a home theater PC. I'm growing tired of having to watch television and movies on my computer's 17" LCD screen. At the shop I used to work at, once in a while we'd build a media center computer, but the concept never really took off here (Belgium). There are many reasons for that, such as: * Television is major suckage here (thanks to That Big Company and Government-Not-Governing). The entire country is split into very small regions where broadcast frequencies differ, there's no unified TV guide system, not all regions can receive all channels. Digital television is even worse: That Big Company forces you to buy one of their proprietary decoders. The only way to receive digital television without restrictions is DVB-T with a very limited number of channels (basically nothing). * At that time, the hardware sucked (noisy, too big, not stylish enough to put it along your other hi-fi components, not powerful enough, limited digital outputs, etc...). The software wasn't much better (too complicated, took a long time to start, etc...). Anyway, my goal is to build the *ULTIMATE* HTPC. As such, strong demands must be met: The hardware: * It should be stylish, a timeless look which fits with your other hi-fi components. * It must be entirely silent. Zero moving components. No exceptions. * Unrestricted fully digital outputs. * Must be able to play at least 720p MKV's using x264 encoded video. * Easy remote control. No remote controls with more buttons than there are stars in the sky and certainly no "dual function" buttons (those functions in a different color which you need to flick a switch or are context dependent). * Able to receive DVB-C. The software: * There is no room for "Digital Rights Management" fascism. All content must play flawless and in the highest quality possible. In some cases this will mean circumventing protections. That'll probably make the device illegal in some countries, but I don't care. * Easy user interface (also see hardware remote control point). * Can connect to NAS or other storage devices such as USB sticks. In total: * Must be a complete replacement for your DVD player and other media devices. The goal here is keeping the number of remote controls down. Ideally you should only have two: one for controlling your HTPC and one for your hi-fi set. * It is geared towards modern television, that means stuff like HDTV and no legacy connector stuff (like composite). With those goals set, I started looking for hardware. Here's what I've come up with: * Case: Silverstone LC19 http://www.silverstonetek.com/products/p_spec.php?pno=lc19&area=usa + Fanless PSU. + Casefans can be removed + Comes with PCI-e and PCI risercards + Integrated cardreader and slimline optical slot + Available in black and silver + Accommodates standard ATX I/O shield + Room for a 3.5" storage device (SSD?) + Vents right above the CPU + Slim - Fits only small motherboard sizes - Only 120 watt PSU - No infrared receiver, no remote control * Motherboard: Asus P5N7A-VM http://www.asus.com/product.aspx?P_ID=8YiUFvK51IergAqY&templete=2 + Powerful on-board graphics (nVidia 9300) + Supports 16 GB of RAM + eSATA port + Optical audio output + HDMI, DVI and VGA video output + Gigabit ethernet + Solid caps - nVidia on-board graphics (requiring proprietary driver) - On-board graphics use system memory - Crappy realtek audio codec * DVB-C receiver: ? I have zero experience with DVB-C receivers for computers. I've come across the "DVBWorldDTV Cable" (http://www.worlddvb.com/product/htm/pcic.htm) which seems to provide what I'm looking for. Anyone know how good this hardware actually is and how well it's supported by linux? I have an old hauppauge PVR-350 card which works well, unfortunately hauppauge doesn't seem to have DVB-C products. * Remote control: ? I want to have something simple here. Maybe a small USB infrared receiver and a simple remote control with buttons up, down, left, right, enter? Anyone know if such hardware exists? * Processor: Intel Celeron? No idea how much processing power would be required for a decent HTPC. Preferably as low powered as possible, as the CPU will have to be passively cooled. * Processor cooling: ? I was thinking of a big block with small fins which you see a lot in 1U rackservers. Copper would be the logical choice but from what I've read, aluminum allows for better heat transfer to the environment. So a copper base with alu fins would be ideal. * Storage: ? For storing the operating system I was thinking of those IDE compact flash cards. Downside is that they are very slow. An SSD can be considered but I want to leave the option open to use the 3.5" bay for a hard drive for people that don't have the luxury of a NAS or don't want to leave a NAS running all times. Moving along. The most annoying aspect: software. Obviously we want all our software to be open source. A shortlist of open source media center software: * MythTV (http://www.mythtv.org/) * XBMC (http://xbmc.org/) * Elisa (http://elisa.fluendo.com/) The point I really want to focus on is ease of use. Take this as a benchmark: you only have to explain your parents once how it works. Any suggestions, comments, thoughts, etc... are appreciated. Thanks, Best regards, Glenn

5 6

[arch-general] stability of pbzip2 ?
by Ian-Xue Li 19 Nov '09

19 Nov '09

Hi, I'm quote fond of pbzip2's ability to multitask the compression, which comes really handy when backuping large archives of server files. But just heard from my friend: pbzip2 has stability issues, sometimes leads to corruption of archive, and hence unable to recover them. I wonder if this is true (in the sense that anyone once had a problem with pbzip2), because myself had never run into one of them. If so, it really a shame to abandon such a good tool though... -- Ian-Xue Li <da.mi.spirit(a)gmail.com>

4 3

[arch-general] MUA
by Arvid Picciani 19 Nov '09

19 Nov '09

Mutt grows old and still doesn't do threads the way i want. i've tried sup, but find it too early in development. Especcially it is unusable slow. Can somone recommend another MUA? thanks -- Arvid Asgaard Technologies

22 32

[arch-general] Test - Sorry but good reason for it. Please ignore
by Geoff 19 Nov '09

19 Nov '09

Sorry to post a test message, but I am an infrequent poster whose e-mails have not been getting through. I wrote to the list admins about it a while ago but got no response, so I have unsubscribed / resubscribed.

3 6

[arch-general] pam settings INSECURE
by Caleb Cushing 18 Nov '09

18 Nov '09

so here's the problem I've discovered http://xenoterracide.blogspot.com/2009/11/bypassing-disabled-accounts-with-… < links to arch bug included posting here because I believe both kde's and arch's developers responses are less than satisfactory. This is a security bug an easy to fix without making users lives more difficult. so I'm starting with /etc/pam.d/login auth required pam_shells.so #add this: why let someone login who has an invalid shells. /etc/pam.d/kdm # I'm pretty sure it should be 99% the same as login since it allows logins. #%PAM-1.0 auth requisite pam_nologin.so auth required pam_unix.so nullok auth required pam_shells.so # as my blog says setting an invalid shell is a common way of disabling accounts. auth required pam_tally.so onerr=succeed file=/var/log/faillog # use this to lockout accounts for 10 minutes after 3 failed attempts #auth required pam_tally.so deny=2 unlock_time=600 onerr=succeed file=/ account required pam_access.so account required pam_time.so account required pam_unix.so password required pam_unix.so #password required pam_cracklib.so difok=2 minlen=8 dcredit=2 ocredit=2 ret #password required pam_unix.so md5 shadow use_authtok session required pam_unix.so session required pam_env.so session required pam_limits.so also I believe pam_tally2 replaces pam_tally may wish to consider migrating (non urgent next release?) -- Caleb Cushing http://xenoterracide.blogspot.com

9 15

Re: [arch-general] arch-general Digest, Vol 61, Issue 39
by jelle van der waa 18 Nov '09

18 Nov '09

Re: We need a maintained-by-TU chrome/chromium... (Juan Diego) There are enough arch user maintained repo's, you could ask them to package it beside that how much work is AUR ;) 2009/11/18 <arch-general-request(a)archlinux.org> > Send arch-general mailing list submissions to > arch-general(a)archlinux.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.archlinux.org/mailman/listinfo/arch-general > or, via email, send a message with subject or body 'help' to > arch-general-request(a)archlinux.org > > You can reach the person managing the list at > arch-general-owner(a)archlinux.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of arch-general digest..." > > > Today's Topics: > > 1. Re: MUA (Alexandr Bashmakov) > 2. Re: pam settings INSECURE (bender02) > 3. Re: pam settings INSECURE (Xavier) > 4. Re: pam settings INSECURE (bender02) > 5. Re: pam settings INSECURE (Jan de Groot) > 6. We need a maintained-by-TU chrome/chromium... (Hamo) > 7. Re: pam settings INSECURE (Xavier) > 8. Re: We need a maintained-by-TU chrome/chromium... (Daenyth Blank) > 9. Re: We need a maintained-by-TU chrome/chromium... (Juan Diego) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 18 Nov 2009 17:26:04 +0700 > From: Alexandr Bashmakov <alex.teorver(a)gmail.com> > Subject: Re: [arch-general] MUA > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <7d16d2700911180226q14e0d1bbtf1ad3095687a38a5(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > http://notmuchmail.org/ > > > ------------------------------ > > Message: 2 > Date: Wed, 18 Nov 2009 12:58:46 +0100 > From: bender02 <bender02(a)archlinux.us> > Subject: Re: [arch-general] pam settings INSECURE > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <6eefa5460911180358n14f3937esc3a3dea388c09ef3(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > 2009/11/18 Ng Oon-Ee <ngoonee(a)gmail.com>: > > The *disadvantage* is that the devs/maintainers have to patch up-stream. > > This should be kept to a minimum, primarily to reduce their workload, > > and also because it is ASSUMED that if you use Arch, you're capable of > > doing the Right Thing (tm) according to your situation, or at least > > finding out how to. > > If you would take the time to look at the packages that are involved > in this (namely shadow and kdebase-workspace), you'd see that both > /etc/pam.d/login and /etc/pam.d/kde are manually suplied alongside the > PKGBUILDs. So in this case, it's not "patching" but straight > "replacing" the "upstream". > > > ------------------------------ > > Message: 3 > Date: Wed, 18 Nov 2009 14:07:39 +0100 > From: Xavier <shiningxc(a)gmail.com> > Subject: Re: [arch-general] pam settings INSECURE > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <91752840911180507l43f7899ncea46da9f73e2e1e(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > On Wed, Nov 18, 2009 at 6:40 AM, Caleb Cushing <xenoterracide(a)gmail.com> > wrote: > > so here's the problem I've discovered > > > http://xenoterracide.blogspot.com/2009/11/bypassing-disabled-accounts-with-… > > < links to arch bug included posting here because I believe both kde's > > and arch's developers responses are less than satisfactory. This is a > > security bug an easy to fix without making users lives more difficult. > > > > so I'm starting with /etc/pam.d/login > > > > auth ? ? ? ?required ? ?pam_shells.so #add this: why let someone login > > who has an invalid shells. > > > > > > /etc/pam.d/kdm # I'm pretty sure it should be 99% the same as login > > since it allows logins. > > > > #%PAM-1.0 > > auth ? ? ? ?requisite ? pam_nologin.so > > auth ? ? ? ?required ? ?pam_unix.so nullok > > auth ? ? ? ?required ? ?pam_shells.so # as my blog says setting an > > invalid shell is a common way of disabling accounts. > > auth ? ? ? ?required ? ?pam_tally.so onerr=succeed file=/var/log/faillog > > # use this to lockout accounts for 10 minutes after 3 failed attempts > > #auth ? ? ? required ? ?pam_tally.so deny=2 unlock_time=600 onerr=succeed > file=/ > > account ? ? required ? ?pam_access.so > > account ? ? required ? ?pam_time.so > > account ? ? required ? ?pam_unix.so > > password ? ?required ? ?pam_unix.so > > #password ? required ? ?pam_cracklib.so difok=2 minlen=8 dcredit=2 > ocredit=2 ret > > #password ? required ? ?pam_unix.so md5 shadow use_authtok > > session ? ? required ? ?pam_unix.so > > session ? ? required ? ?pam_env.so > > session ? ? required ? ?pam_limits.so > > > > also I believe pam_tally2 replaces pam_tally may wish to consider > > migrating (non urgent next release?) > > > > So basically you just need to add "auth required > pam_shells.so" to all pam files related to login, correct ? > Or what were the other problematic settings of pam.d/kde ? > > The comments about this being an upstream problem are invalid, as > these pam files are all shipped by arch : > http://repos.archlinux.org/wsvn/packages/kdebase-workspace/trunk/ > http://repos.archlinux.org/wsvn/packages/shadow/trunk/login > > Note that this problem probably exists with all login managers. For > example gdm does not have pam_shells.so either. > http://repos.archlinux.org/wsvn/packages/gdm/trunk/ > > And I am curious to know what the pam settings of other distro are > (debian,fedora,gentoo,..). > > Finally, maybe it makes sense to try keeping all the different pam > login files as consistent as possible. But I don't know enough about > pam to tell. > > > ------------------------------ > > Message: 4 > Date: Wed, 18 Nov 2009 14:17:24 +0100 > From: bender02 <bender02(a)archlinux.us> > Subject: Re: [arch-general] pam settings INSECURE > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <6eefa5460911180517m50a1edcbt518c04950f7203bb(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > On Wed, Nov 18, 2009 at 2:07 PM, Xavier <shiningxc(a)gmail.com> wrote: > > And I am curious to know what the pam settings of other distro are > > (debian,fedora,gentoo,..). > > > > Finally, maybe it makes sense to try keeping all the different pam > > login files as consistent as possible. But I don't know enough about > > pam to tell. > > Some other distros (opensuse, ubuntu, fedora at least) use > 'common-auth' (and probably some other 'common-*' files) in > /etc/pam.d/, which are then included in the particular pam files. > Hence all pam files are consistent. On the other hand, if you need > more fine-grained control, you need to edit and consolidate more files > than with the current arch setup. [I like arch's system better, but > who cares about that :)] > > > ------------------------------ > > Message: 5 > Date: Wed, 18 Nov 2009 14:24:24 +0100 > From: Jan de Groot <jan(a)jgc.homeip.net> > Subject: Re: [arch-general] pam settings INSECURE > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: <1258550664.4737.4.camel@jan> > Content-Type: text/plain; charset="UTF-8" > > On Wed, 2009-11-18 at 14:17 +0100, bender02 wrote: > > On Wed, Nov 18, 2009 at 2:07 PM, Xavier <shiningxc(a)gmail.com> wrote: > > > And I am curious to know what the pam settings of other distro are > > > (debian,fedora,gentoo,..). > > > > > > Finally, maybe it makes sense to try keeping all the different pam > > > login files as consistent as possible. But I don't know enough about > > > pam to tell. > > > > Some other distros (opensuse, ubuntu, fedora at least) use > > 'common-auth' (and probably some other 'common-*' files) in > > /etc/pam.d/, which are then included in the particular pam files. > > Hence all pam files are consistent. On the other hand, if you need > > more fine-grained control, you need to edit and consolidate more files > > than with the current arch setup. [I like arch's system better, but > > who cares about that :)] > > The reason for shipping custom pam files is because we don't have > common-* files in arch. The gdm file is a straight copy from the login > file, with some added modules for gnome-keyring to get that daemon > started on login. With common-auth, we could just @include common-auth > from the pam file, which is much easier. > > > > ------------------------------ > > Message: 6 > Date: Wed, 18 Nov 2009 21:48:26 +0800 > From: Hamo <hamo.by(a)gmail.com> > Subject: [arch-general] We need a maintained-by-TU chrome/chromium... > To: arch-general(a)archlinux.org > Message-ID: > <55b9903b0911180548r19eda9b9x1687aab9085c11eb(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Dear Archlinux users, > Chrome is likely to be a daily-use web browser and with the Chrome OS > releasing,it will become more and more reliable.Archlinux is a > rolling-release distribution and it aims at being bleeding edge.So we > should have a maintained-by-TU chrome/chromium and it is really > useful... > > -- > Nick Name:Hamo > Website:http://hamobai.com/ > > > ------------------------------ > > Message: 7 > Date: Wed, 18 Nov 2009 14:52:42 +0100 > From: Xavier <shiningxc(a)gmail.com> > Subject: Re: [arch-general] pam settings INSECURE > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <91752840911180552u6626b43at10e6e2c7667a2426(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > On Wed, Nov 18, 2009 at 2:24 PM, Jan de Groot <jan(a)jgc.homeip.net> wrote: > > On Wed, 2009-11-18 at 14:17 +0100, bender02 wrote: > >> On Wed, Nov 18, 2009 at 2:07 PM, Xavier <shiningxc(a)gmail.com> wrote: > >> > And I am curious to know what the pam settings of other distro are > >> > (debian,fedora,gentoo,..). > >> > > >> > Finally, maybe it makes sense to try keeping all the different pam > >> > login files as consistent as possible. But I don't know enough about > >> > pam to tell. > >> > >> Some other distros (opensuse, ubuntu, fedora at least) use > >> 'common-auth' (and probably some other 'common-*' files) in > >> /etc/pam.d/, which are then included in the particular pam files. > >> Hence all pam files are consistent. On the other hand, if you need > >> more fine-grained control, you need to edit and consolidate more files > >> than with the current arch setup. [I like arch's system better, but > >> who cares about that :)] > > > > The reason for shipping custom pam files is because we don't have > > common-* files in arch. The gdm file is a straight copy from the login > > file, with some added modules for gnome-keyring to get that daemon > > started on login. With common-auth, we could just @include common-auth > > from the pam file, which is much easier. > > > > > > That sounds good. > I filed http://bugs.archlinux.org/task/17188 > > > ------------------------------ > > Message: 8 > Date: Wed, 18 Nov 2009 08:54:40 -0500 > From: Daenyth Blank <daenyth+arch(a)gmail.com <daenyth%2Barch(a)gmail.com>> > Subject: Re: [arch-general] We need a maintained-by-TU > chrome/chromium... > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <ea09a6380911180554w59527b1bg81fd22d94fa75d55(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > On Wed, Nov 18, 2009 at 08:48, Hamo <hamo.by(a)gmail.com> wrote: > > Dear Archlinux users, > > Chrome is likely to be a daily-use web browser and with the Chrome OS > > releasing,it will become more and more reliable.Archlinux is a > > rolling-release distribution and it aims at being bleeding edge.So we > > should have a maintained-by-TU chrome/chromium and it is really > > useful... > > > If you're interested, I recommend finding a sponsor so that you can > apply... > > There are lots of software projects that would be good to have, but it > only makes sense to keep them in the repos if someone is interested in > maintaining them. > > > ------------------------------ > > Message: 9 > Date: Wed, 18 Nov 2009 23:05:06 +0900 > From: Juan Diego <juantascon(a)gmail.com> > Subject: Re: [arch-general] We need a maintained-by-TU > chrome/chromium... > To: General Discusson about Arch Linux <arch-general(a)archlinux.org> > Message-ID: > <b3095c50911180605h211fe211oee2a7b3902ab482a(a)mail.gmail.com> > Content-Type: text/plain; charset=UTF-8 > > I would be happy to maintain that package, but unfortunately Im not a TU > > dont you think archlinux should have something similar to ppa from > ubuntu so that it will be easier to maintain and promote personal > repositories, aur is a good option but if I would have to choose > between using a packages from aur or using a package from a personal > repository from somebody I wouldnt think it twice, I would choose the > personal repo one. > > On Wed, Nov 18, 2009 at 10:54 PM, Daenyth Blank <daenyth+arch(a)gmail.com<daenyth%2Barch(a)gmail.com>> > wrote: > > On Wed, Nov 18, 2009 at 08:48, Hamo <hamo.by(a)gmail.com> wrote: > >> Dear Archlinux users, > >> Chrome is likely to be a daily-use web browser and with the Chrome OS > >> releasing,it will become more and more reliable.Archlinux is a > >> rolling-release distribution and it aims at being bleeding edge.So we > >> should have a maintained-by-TU chrome/chromium and it is really > >> useful... > >> > > If you're interested, I recommend finding a sponsor so that you can > apply... > > > > There are lots of software projects that would be good to have, but it > > only makes sense to keep them in the repos if someone is interested in > > maintaining them. > > > > > ------------------------------ > > _______________________________________________ > arch-general mailing list > arch-general(a)archlinux.org > http://mailman.archlinux.org/mailman/listinfo/arch-general > > > End of arch-general Digest, Vol 61, Issue 39 > ******************************************** > -- Jelle

2 1

[arch-general] archlinuxfr bad virtualbox_bin-3.0.10-1 package
by David C. Rankin 18 Nov '09

18 Nov '09

Guys, The archlinuxfr server has a bad virtualbox package on it. There is a lot of things virtualbox is, but one thing it isn't is an 8 meg package: :: Retrieving packages from archlinuxfr... error: failed retrieving file 'virtualbox_bin-3.0.10-1-x86_64.pkg.tar.bz2' from repo.archlinux.fr : Not Found 22:57 alchemy:~/img/arch> pms virtualbox_bin :: Synchronizing package databases... testing is up to date core is up to date extra is up to date community-testing is up to date community is up to date archlinuxfr is up to date resolving dependencies... looking for inter-conflicts... Targets (1): virtualbox_bin-3.0.10-1 Total Download Size: 8.09 MB Total Installed Size: 88.87 MB Probably just a bad rsync... -- David C. Rankin, J.D.,P.E. Rankin Law Firm, PLLC 510 Ochiltree Street Nacogdoches, Texas 75961 Telephone: (936) 715-9333 Facsimile: (936) 715-9339 www.rankinlawfirm.com

7 9