April 2014 - WLUG - wlug.mailman3.com

Fedora Next

by dulsi＠identicalsoftware.com

Recently I decided to try to get my program Bt Builder into Fedora (https://bugzilla.redhat.com/show_bug.cgi?id=1079064) They identified some issues during review which I've fixed. Initially I didn't do the "introdution" email to the devel because I was joining to package my project and eventually maybe some others. I did eventually join the list and send the email. However I've also been reading the Fedora Present and Future articles on the Fedora Magazine site http://fedoramagazine.org/fedora-present-and-future-a-fedora-next-2014-upda… It's left me wondering if I should bother going with sponsorship into Fedora. I can setup a COPR and perhaps move into the distribution via the Playground. Do you Fedora will continue with the current sponsorship model? Will new projects instead come in through the personal repositories of COPR?

April 29, 2014

Lightning Talks @ LOPSA-East 2014!

by Evan Pettrey

LOPSA East 2014 starts in one week! All the talks have been scheduled, all the tutorials and instructors have been book, now all you need to do is show up, right? In http://scottberkun.com/essays/24-how-to-get-the-most-out-of-conferences/ Scott Berkun (author of five books, including _The Year Without Pants_) states: "There is no better way to meet others and access the most interesting and friendly people than participating." The good news is that even this late in the game, there's still a way you you to participate: Lightning Talks! Lightning Talks are a series of five-minute talks (no slides!) where enthusiasm is paramount and almost anything that might be of interest to sysadmins is on-topic. Have an idea for a talk or tutorial for a future conference you want to try out? Give a Lightning Talk. Want to share a cool new trick with your peers? Give a Lightning Talk. Have an idea for a tool and want feedback? Give a Lightning Talk. Want to convince your peers to change how they do their jobs, or quit their jobs, or not to make the same mistake you did, or step away from the keyboard and learn to cook? Give a Lightning Talk. The Lightning Talks session is Saturday, May 3rd, at 3:30 p.m. There's room for at least nine talks, more if people use fewer than their allotted time (five minutes). To sign up for a Lightning Talk, send email to <lightningtalks(a)lopsaeast.org> or contact the Lightning Talks coordinator (Adam Moskowitz) at the conference and sign up in person. Talk slots are on a first-come, first-served basis; there will be a waiting list, and if there's time at the end of the session you can just step up to the microphone without signing up in advance (but don't count on this as all the slots are usually taken). Remember: Five minutes (hard limit), no slides, pretty much any topic. Yes, even cooking -- if you can find a way to tie it to system administration. There's no easier way to actively participate in the conference than to give a Lightning Talk! Best regards, Evan & the rest of the LOPSA-East Committee

April 25, 2014

Re: [Wlug] Tripwire vs rpm -V

by Eric Martin

Thanks! On Fri, Apr 18, 2014 at 06:17:45AM -0400, Eric Martin wrote: > I have a weird problem with tripwire on at least two of my servers. A run > of tripwire --check shows a few tripwire binaries have changed, which since > I didn't do it is very suspicious: > I expect twpol.txt to be changed since you update the policy. What is / > isn't missing is the glaring alert that tripwire doesn't match the RPM. > Also, the MD5 sum in tripwire on one machine doesn't match it on another, > and neither do the SHA1 sums as computed from the command line. While I'm > pretty good with CentOS, there are a few things that I'm still learning so > I'm thinking that I'm missing something here. Can anybody please shed some > light on this, especially the differing sha1sums? If these are binaries, > shouldn't they have the same sha1um? One word. Prelink. rpm -V undoes the prelink on-the-fly to be able to checksum the original unmodified binary. > Also, do I need to blow away this machine and rebuild? No, but you may want to un-prelink all your binaries and then disable prelink from running again. _______________________________________________ Wlug mailing list Wlug(a)mail.wlug.org http://mail.wlug.org/mailman/listinfo/wlug

April 18, 2014

Re: [Wlug] Tripwire vs rpm -V

by Chuck Anderson

On Fri, Apr 18, 2014 at 06:17:45AM -0400, Eric Martin wrote: > I have a weird problem with tripwire on at least two of my servers. A run > of tripwire --check shows a few tripwire binaries have changed, which since > I didn't do it is very suspicious: > I expect twpol.txt to be changed since you update the policy. What is / > isn't missing is the glaring alert that tripwire doesn't match the RPM. > Also, the MD5 sum in tripwire on one machine doesn't match it on another, > and neither do the SHA1 sums as computed from the command line. While I'm > pretty good with CentOS, there are a few things that I'm still learning so > I'm thinking that I'm missing something here. Can anybody please shed some > light on this, especially the differing sha1sums? If these are binaries, > shouldn't they have the same sha1um? One word. Prelink. rpm -V undoes the prelink on-the-fly to be able to checksum the original unmodified binary. > Also, do I need to blow away this machine and rebuild? No, but you may want to un-prelink all your binaries and then disable prelink from running again.

April 18, 2014

Tripwire vs rpm -V

by Eric Martin

I have a weird problem with tripwire on at least two of my servers. A run of tripwire --check shows a few tripwire binaries have changed, which since I didn't do it is very suspicious: ------------------------------------------------------------------------------- Rule Name: Tripwire Binaries (/usr/sbin/tripwire) Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Modified Objects: 1 ---------------------------------------- Modified object name: /usr/sbin/tripwire Property: Expected Observed ------------- ----------- ----------- Object Type Regular File Regular File Device Number 64768 64768 * Inode Number 9698 10390 Mode -rwxr-xr-x -rwxr-xr-x Num Links 1 1 UID root (0) root (0) GID root (0) root (0) Size 1145520 1145520 Modify Time Mon 05 Jul 2010 08:55:49 PM EDT Mon 05 Jul 2010 08:55:49 PM EDT Blocks 2240 2240 * CRC32 XXXXX YYYYY * MD5 XXXXXXXXXXMJedgAef0 XXXXXXXXXXPFRiVSdGoG/q The inode number is fine, it's the CRC32 and MD5 sums that worry me. As per my usual procedure, I then issue rpm -V ${PACKAGE_NAME} to verify the package: [emartin@mx1 ~]$ sudo rpm -V tripwire S.5....T. c /etc/tripwire/twpol.txt I expect twpol.txt to be changed since you update the policy. What is / isn't missing is the glaring alert that tripwire doesn't match the RPM. Also, the MD5 sum in tripwire on one machine doesn't match it on another, and neither do the SHA1 sums as computed from the command line. While I'm pretty good with CentOS, there are a few things that I'm still learning so I'm thinking that I'm missing something here. Can anybody please shed some light on this, especially the differing sha1sums? If these are binaries, shouldn't they have the same sha1um? Also, do I need to blow away this machine and rebuild? TIA, -- Eric Martin

April 18, 2014

"Heartbleed" OpenSSL bug in pictures

by Chuck Anderson

Today's XKCD comic explains in pictures how the "Heartbleed" OpenSSL bug works: http://xkcd.com/1354/

April 12, 2014

Mail User Agent: mail (/bin/mail)

by Larry Camilli

This message has two parts. The first is about the basic mail program. The second (which is more important to me) is about how to avoid having to use the mail program. Part I: The Basic mail program (I'm running CentOS.) I asked last night about the basic mail program - specifically about navigating through the headers. Chuck looked up some documentation and said that the "h+" and "h-" commands should do it. And, somebody came up to me with his laptop and showed the "z" command.) Here's what the help file within mail shows about the "z" command: (Yes. -It says nothing about the z command.) Here's what I found with the h+ and h- commands: When I invoke mail, it displays the headers of 38 unread messages (numbers 1 - 38) and a prompt ("&"). (The terminal window is 132 characters wide by 42 lines long.) If I type h+, it displays the same 38 headers again. (h- gets "Referencing before 1") If I type h7865782365, I get "Invalid message number". If I type h 1-a, I get "Non-numeric second argument". If I type h 1-4, I get the first 38 headers. The program seems to be parsing what follows an "h", but royally screws up acting on what it finds. If I type "39", I get message 39. (There doesn't seem to be a "LAST" command to see the last message - and find out its number. So, typing, say, 100, gets an error because there's no such message.) Anyway, after viewing message 39, if I THEN type h, it shows headers for messages 39 - 51. (h+ shows the same headers, 39 - 51.) But, h- now shows the first 38. (That makes sense.) But, after using h- to get back to the 1 - 38 list, h+ shows the first 38 messages again. After displaying the first 38 headers, the "z" command DOES cause the next set of headers to be displayed (39 - 51). I figured that, until I figure out how to set things up to forward the logwatch mail to a gmail account, I could tolerate using a separate, basic mail program to check the logs. But, this is crap. People were asking about the guy who screwed up the OpenSSL heartbeat code. What about the guy who wrote this piece of crap? It's very basic stuff that doesn't work. Not too difficult to test... Part II: Getting EMail Forwarded from the Linux System as a Client I have two interests here. One is just academic. -Understanding how to use the mail program, despite (or because of) its suckiness. The other is so I can see the messages that the log scrapers send via /bin/mail to the root account's email. Ideally, I would set things up to have all of root's email get forwarded to, say, a gmail account. But, my setup seems to place some limits on what I can do. I set up an MTA on my VMS box long ago. I used to be able to send email directly from that system. But, it stopped working at some point, and I found that Verizon reports all of the DHCP addresses that they allocate to residential DSL customers as spam sources, so everything was getting blocked. I have written programs (in PHP) that use a PEAR class/API to send email from the Linux box, via a gmail account, to arbitrary addressees. [It requires such information as host (smtp.gmail.com) port (587), username & password for the gmail account...] So, I'm not sure if an MTA is what I really need. Can at MTA be set up to send email as a client of sorts to a real MTA (e.g., google mail)? Or do I need some other type of utility? Sure, I can write my own, but I would hope that somebody else has already done it. (Well, as long as it's not the person who wrote "mail".)

April 11, 2014

Sr SW Engineer contract openings - C++, Linux kernel, drivers

by John Spencer

Our client in Chelmsford, MA has 2-3 contract openings for Sr Software Engineers with a strong background with C++ and low level Linux kernel and drivers experience. These are 6 month contracts. Must be able to interview and work on site as well as pass background check and drug test. Consultants will be responsible for Linux driver and kernel development and board bring up. Any experience with VxWorks is a plus Please feel free to forward this email to your friends and associates If interested, please send a copy of your resume to jspencer (at) connectedsp.com Your resume will not be sent anywhere without your prior approval. Regards, John Spencer Connected Systems Partners Connecting Top Talent with Top Companies Office: 978-455-5550 x208 Cell: 978-621-9743 jspencer(a)connectedsp.com www.connectedsp.com GET CONNECTED! Unless otherwise explicitly instructed by sender, all information in this email is considered confidential and intended for the view and use of the recipient(s) only.

April 10, 2014

Re: [Wlug] Simpleton Question

by Colin Novick

Mike, You rock! The embedded player won't play, but that is a problem in part due to the content provider, BUT now I can download it (which was the desired end point anyways) and use a standalone player! FANTASTIC! David, I am also playing around with the Flash Video option, thanks for the tip. You guys are awesome. Thank you for taking pity on me. Colin On Tue, Apr 8, 2014 at 10:24 PM, Mike Peckar <fog(a)fognet.com> wrote: > Hey Colin! > > > > The download helper plug-in for firefox should at least deal with the > permissions issues... > > > > https://addons.mozilla.org/en-US/firefox/addon/video-downloadhelper/ > > > > Mike > > > > *From:* wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] *On > Behalf Of *Colin Novick > *Sent:* Tuesday, April 8, 2014 9:47 PM > *To:* Worcester Linux Users Group > *Subject:* [Wlug] Simpleton Question > > > > WLUG folk, > > You guys crunch heavy issues, and I have a cream puff of an issue I just > can't crack, and I am not too ashamed to admit it. > > There is a site with a series of m4v (Quicktime) files I want to be able > to at least stream, if not download, but I have two problems. > > The first is that the site www.worcestercatholictv.com has set the > permissions on the files so that they will only play embedded in their > webpage, AND they have the files as invisible unless the embedded web page > searches for them, and as a result, standalone items like VLC can't touch > it, and I can't download it. > > The second is that the issue seems to be related to my running Ubuntu > 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X > > It makes no difference if it is Chromium of Firefox that tries to playback. > > Default User Agent Switcher has been installed to see if that was > generating a conflict, but that doesn't seem to be it either. > > Totem 3.0.1 > > Gecko-mediaplayer 1.0.4 > > I have searched for similar issues and don't seem to come up with anything. > > I have scanned help files and that doesn't seem to address this either. > > At this point, if I had a guess, it is the result of funny permissions on > a file that no one is worried about being Linux compatible. > > Thoughts are most welcome, > > Colin > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

April 9, 2014

Re: [Wlug] Simpleton Question

by David Glaser

Colin, There is a plugin for Firefox called "Flash Video Downloader" that will download videos that are currently playing on a web page. -David On 04/08/2014 09:46 PM, Colin Novick wrote: > WLUG folk, > > You guys crunch heavy issues, and I have a cream puff of an issue I > just can't crack, and I am not too ashamed to admit it. > > There is a site with a series of m4v (Quicktime) files I want to be > able to at least stream, if not download, but I have two problems. > > The first is that the site www.worcestercatholictv.com > <http://www.worcestercatholictv.com> has set the permissions on the > files so that they will only play embedded in their webpage, AND they > have the files as invisible unless the embedded web page searches for > them, and as a result, standalone items like VLC can't touch it, and I > can't download it. > > The second is that the issue seems to be related to my running Ubuntu > 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X > > It makes no difference if it is Chromium of Firefox that tries to > playback. > > Default User Agent Switcher has been installed to see if that was > generating a conflict, but that doesn't seem to be it either. > > Totem 3.0.1 > Gecko-mediaplayer 1.0.4 > > I have searched for similar issues and don't seem to come up with > anything. > I have scanned help files and that doesn't seem to address this either. > > At this point, if I had a guess, it is the result of funny permissions > on a file that no one is worried about being Linux compatible. > > Thoughts are most welcome, > > Colin > > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

April 9, 2014