- WLUG - wlug.mailman3.com

Tripwire vs rpm -V

by Eric Martin

I have a weird problem with tripwire on at least two of my servers. A run of tripwire --check shows a few tripwire binaries have changed, which since I didn't do it is very suspicious: ------------------------------------------------------------------------------- Rule Name: Tripwire Binaries (/usr/sbin/tripwire) Severity Level: 100 ------------------------------------------------------------------------------- ---------------------------------------- Modified Objects: 1 ---------------------------------------- Modified object name: /usr/sbin/tripwire Property: Expected Observed ------------- ----------- ----------- Object Type Regular File Regular File Device Number 64768 64768 * Inode Number 9698 10390 Mode -rwxr-xr-x -rwxr-xr-x Num Links 1 1 UID root (0) root (0) GID root (0) root (0) Size 1145520 1145520 Modify Time Mon 05 Jul 2010 08:55:49 PM EDT Mon 05 Jul 2010 08:55:49 PM EDT Blocks 2240 2240 * CRC32 XXXXX YYYYY * MD5 XXXXXXXXXXMJedgAef0 XXXXXXXXXXPFRiVSdGoG/q The inode number is fine, it's the CRC32 and MD5 sums that worry me. As per my usual procedure, I then issue rpm -V ${PACKAGE_NAME} to verify the package: [emartin@mx1 ~]$ sudo rpm -V tripwire S.5....T. c /etc/tripwire/twpol.txt I expect twpol.txt to be changed since you update the policy. What is / isn't missing is the glaring alert that tripwire doesn't match the RPM. Also, the MD5 sum in tripwire on one machine doesn't match it on another, and neither do the SHA1 sums as computed from the command line. While I'm pretty good with CentOS, there are a few things that I'm still learning so I'm thinking that I'm missing something here. Can anybody please shed some light on this, especially the differing sha1sums? If these are binaries, shouldn't they have the same sha1um? Also, do I need to blow away this machine and rebuild? TIA, -- Eric Martin

April 18, 2014

"Heartbleed" OpenSSL bug in pictures

by Chuck Anderson

Today's XKCD comic explains in pictures how the "Heartbleed" OpenSSL bug works: http://xkcd.com/1354/

April 12, 2014

Mail User Agent: mail (/bin/mail)

by Larry Camilli

This message has two parts. The first is about the basic mail program. The second (which is more important to me) is about how to avoid having to use the mail program. Part I: The Basic mail program (I'm running CentOS.) I asked last night about the basic mail program - specifically about navigating through the headers. Chuck looked up some documentation and said that the "h+" and "h-" commands should do it. And, somebody came up to me with his laptop and showed the "z" command.) Here's what the help file within mail shows about the "z" command: (Yes. -It says nothing about the z command.) Here's what I found with the h+ and h- commands: When I invoke mail, it displays the headers of 38 unread messages (numbers 1 - 38) and a prompt ("&"). (The terminal window is 132 characters wide by 42 lines long.) If I type h+, it displays the same 38 headers again. (h- gets "Referencing before 1") If I type h7865782365, I get "Invalid message number". If I type h 1-a, I get "Non-numeric second argument". If I type h 1-4, I get the first 38 headers. The program seems to be parsing what follows an "h", but royally screws up acting on what it finds. If I type "39", I get message 39. (There doesn't seem to be a "LAST" command to see the last message - and find out its number. So, typing, say, 100, gets an error because there's no such message.) Anyway, after viewing message 39, if I THEN type h, it shows headers for messages 39 - 51. (h+ shows the same headers, 39 - 51.) But, h- now shows the first 38. (That makes sense.) But, after using h- to get back to the 1 - 38 list, h+ shows the first 38 messages again. After displaying the first 38 headers, the "z" command DOES cause the next set of headers to be displayed (39 - 51). I figured that, until I figure out how to set things up to forward the logwatch mail to a gmail account, I could tolerate using a separate, basic mail program to check the logs. But, this is crap. People were asking about the guy who screwed up the OpenSSL heartbeat code. What about the guy who wrote this piece of crap? It's very basic stuff that doesn't work. Not too difficult to test... Part II: Getting EMail Forwarded from the Linux System as a Client I have two interests here. One is just academic. -Understanding how to use the mail program, despite (or because of) its suckiness. The other is so I can see the messages that the log scrapers send via /bin/mail to the root account's email. Ideally, I would set things up to have all of root's email get forwarded to, say, a gmail account. But, my setup seems to place some limits on what I can do. I set up an MTA on my VMS box long ago. I used to be able to send email directly from that system. But, it stopped working at some point, and I found that Verizon reports all of the DHCP addresses that they allocate to residential DSL customers as spam sources, so everything was getting blocked. I have written programs (in PHP) that use a PEAR class/API to send email from the Linux box, via a gmail account, to arbitrary addressees. [It requires such information as host (smtp.gmail.com) port (587), username & password for the gmail account...] So, I'm not sure if an MTA is what I really need. Can at MTA be set up to send email as a client of sorts to a real MTA (e.g., google mail)? Or do I need some other type of utility? Sure, I can write my own, but I would hope that somebody else has already done it. (Well, as long as it's not the person who wrote "mail".)

April 11, 2014

Sr SW Engineer contract openings - C++, Linux kernel, drivers

by John Spencer

Our client in Chelmsford, MA has 2-3 contract openings for Sr Software Engineers with a strong background with C++ and low level Linux kernel and drivers experience. These are 6 month contracts. Must be able to interview and work on site as well as pass background check and drug test. Consultants will be responsible for Linux driver and kernel development and board bring up. Any experience with VxWorks is a plus Please feel free to forward this email to your friends and associates If interested, please send a copy of your resume to jspencer (at) connectedsp.com Your resume will not be sent anywhere without your prior approval. Regards, John Spencer Connected Systems Partners Connecting Top Talent with Top Companies Office: 978-455-5550 x208 Cell: 978-621-9743 jspencer(a)connectedsp.com www.connectedsp.com GET CONNECTED! Unless otherwise explicitly instructed by sender, all information in this email is considered confidential and intended for the view and use of the recipient(s) only.

April 10, 2014

Re: [Wlug] Simpleton Question

by Colin Novick

Mike, You rock! The embedded player won't play, but that is a problem in part due to the content provider, BUT now I can download it (which was the desired end point anyways) and use a standalone player! FANTASTIC! David, I am also playing around with the Flash Video option, thanks for the tip. You guys are awesome. Thank you for taking pity on me. Colin On Tue, Apr 8, 2014 at 10:24 PM, Mike Peckar <fog(a)fognet.com> wrote: > Hey Colin! > > > > The download helper plug-in for firefox should at least deal with the > permissions issues... > > > > https://addons.mozilla.org/en-US/firefox/addon/video-downloadhelper/ > > > > Mike > > > > *From:* wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] *On > Behalf Of *Colin Novick > *Sent:* Tuesday, April 8, 2014 9:47 PM > *To:* Worcester Linux Users Group > *Subject:* [Wlug] Simpleton Question > > > > WLUG folk, > > You guys crunch heavy issues, and I have a cream puff of an issue I just > can't crack, and I am not too ashamed to admit it. > > There is a site with a series of m4v (Quicktime) files I want to be able > to at least stream, if not download, but I have two problems. > > The first is that the site www.worcestercatholictv.com has set the > permissions on the files so that they will only play embedded in their > webpage, AND they have the files as invisible unless the embedded web page > searches for them, and as a result, standalone items like VLC can't touch > it, and I can't download it. > > The second is that the issue seems to be related to my running Ubuntu > 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X > > It makes no difference if it is Chromium of Firefox that tries to playback. > > Default User Agent Switcher has been installed to see if that was > generating a conflict, but that doesn't seem to be it either. > > Totem 3.0.1 > > Gecko-mediaplayer 1.0.4 > > I have searched for similar issues and don't seem to come up with anything. > > I have scanned help files and that doesn't seem to address this either. > > At this point, if I had a guess, it is the result of funny permissions on > a file that no one is worried about being Linux compatible. > > Thoughts are most welcome, > > Colin > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > >

April 9, 2014

Re: [Wlug] Simpleton Question

by David Glaser

Colin, There is a plugin for Firefox called "Flash Video Downloader" that will download videos that are currently playing on a web page. -David On 04/08/2014 09:46 PM, Colin Novick wrote: > WLUG folk, > > You guys crunch heavy issues, and I have a cream puff of an issue I > just can't crack, and I am not too ashamed to admit it. > > There is a site with a series of m4v (Quicktime) files I want to be > able to at least stream, if not download, but I have two problems. > > The first is that the site www.worcestercatholictv.com > <http://www.worcestercatholictv.com> has set the permissions on the > files so that they will only play embedded in their webpage, AND they > have the files as invisible unless the embedded web page searches for > them, and as a result, standalone items like VLC can't touch it, and I > can't download it. > > The second is that the issue seems to be related to my running Ubuntu > 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X > > It makes no difference if it is Chromium of Firefox that tries to > playback. > > Default User Agent Switcher has been installed to see if that was > generating a conflict, but that doesn't seem to be it either. > > Totem 3.0.1 > Gecko-mediaplayer 1.0.4 > > I have searched for similar issues and don't seem to come up with > anything. > I have scanned help files and that doesn't seem to address this either. > > At this point, if I had a guess, it is the result of funny permissions > on a file that no one is worried about being Linux compatible. > > Thoughts are most welcome, > > Colin > > > > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug

April 9, 2014

Re: [Wlug] Simpleton Question

by Mike Peckar

Hey Colin! The download helper plug-in for firefox should at least deal with the permissions issues. https://addons.mozilla.org/en-US/firefox/addon/video-downloadhelper/ Mike From: wlug-bounces(a)mail.wlug.org [mailto:wlug-bounces@mail.wlug.org] On Behalf Of Colin Novick Sent: Tuesday, April 8, 2014 9:47 PM To: Worcester Linux Users Group Subject: [Wlug] Simpleton Question WLUG folk, You guys crunch heavy issues, and I have a cream puff of an issue I just can't crack, and I am not too ashamed to admit it. There is a site with a series of m4v (Quicktime) files I want to be able to at least stream, if not download, but I have two problems. The first is that the site www.worcestercatholictv.com has set the permissions on the files so that they will only play embedded in their webpage, AND they have the files as invisible unless the embedded web page searches for them, and as a result, standalone items like VLC can't touch it, and I can't download it. The second is that the issue seems to be related to my running Ubuntu 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X It makes no difference if it is Chromium of Firefox that tries to playback. Default User Agent Switcher has been installed to see if that was generating a conflict, but that doesn't seem to be it either. Totem 3.0.1 Gecko-mediaplayer 1.0.4 I have searched for similar issues and don't seem to come up with anything. I have scanned help files and that doesn't seem to address this either. At this point, if I had a guess, it is the result of funny permissions on a file that no one is worried about being Linux compatible. Thoughts are most welcome, Colin

April 9, 2014

Simpleton Question

by Colin Novick

WLUG folk, You guys crunch heavy issues, and I have a cream puff of an issue I just can't crack, and I am not too ashamed to admit it. There is a site with a series of m4v (Quicktime) files I want to be able to at least stream, if not download, but I have two problems. The first is that the site www.worcestercatholictv.com has set the permissions on the files so that they will only play embedded in their webpage, AND they have the files as invisible unless the embedded web page searches for them, and as a result, standalone items like VLC can't touch it, and I can't download it. The second is that the issue seems to be related to my running Ubuntu 12.0.4 LTS, and a buddy is having no issues reportedly in 13.X It makes no difference if it is Chromium of Firefox that tries to playback. Default User Agent Switcher has been installed to see if that was generating a conflict, but that doesn't seem to be it either. Totem 3.0.1 Gecko-mediaplayer 1.0.4 I have searched for similar issues and don't seem to come up with anything. I have scanned help files and that doesn't seem to address this either. At this point, if I had a guess, it is the result of funny permissions on a file that no one is worried about being Linux compatible. Thoughts are most welcome, Colin

April 9, 2014

Re: [Wlug] WLUG meeting Thu April 10 7PM

by Jeff Moyer

Tim Keller <turbofx(a)gmail.com> writes: > Thanks Chunk! I'll update the facebook group! ^^^^^ lol! Been watching Goonies lately, Tim? =P -Jeff

April 8, 2014

Re: [Wlug] WLUG meeting Thu April 10 7PM

by Tim Keller

Thanks Chunk! I'll update the facebook group! On Tue, Apr 8, 2014 at 9:35 AM, Chuck Anderson <cra(a)wpi.edu> wrote: > Thanks for the reminder. I updated the website last night, then got > sucked into OpenSSL suckiness. That may be a good topic to talk > about. > > So, yes there is a WLUG meeting this Thursday, April 10, at 7PM, in > the WPI Campus Center Mid-Century room (our usual room). > > On Tue, Apr 08, 2014 at 05:15:41AM -0700, The Hammer wrote: > > Tim, > > > > I'm not an "official" and figured I'd reply as no one has yet. I > thought the meeting times were changed to Thursdays. The website at: > > http://wlug.org/ > > Says it will be Thursday April 10th. > > Hopefully someone will confirm. > > > > Ron > > > > > > > > > > ________________________________ > > From: Tim Keller <turbofx(a)gmail.com> > > To: Worcester Linux Users Group <wlug(a)mail.wlug.org> > > Sent: Monday, April 7, 2014 5:05 PM > > Subject: [Wlug] Meeting on Wednesday? > > > > > > > > I presume we're having a meeting on Wednesday? > > > > Thanks, > > Tim. > > _______________________________________________ > Wlug mailing list > Wlug(a)mail.wlug.org > http://mail.wlug.org/mailman/listinfo/wlug > > -- I am leery of the allegiances of any politician who refers to their constituents as "consumers".

April 8, 2014