users July 2015

users@lists.fedoraproject.org

158 participants
187 discussions

What starts /usr/bin/pulseaudio?
by JD 07 Jul '15

07 Jul '15

I looked in /lib/systemd and /etc/systemd, recursively, and none of the services or dependencies have the string pulseaudio in them.

5 9

RE: iptables with logging vs denyhosts
by Steve Berg 07 Jul '15

07 Jul '15

Have you looked at fail2ban? It watches /var/log/secure for break in attempts/failed logins and dynamically adds iptables rules to block the bad guys. It will do (automatically) pretty much what you're doing manually. ----- Original Message ----- From: dwoody5654 [mailto:dwoody5654@gmail.com] To: users(a)lists.fedoraproject.org Sent: Mon, 06 Jul 2015 22:35:51 -0500 Subject: iptables with logging vs denyhosts I have been using denyhosts for almost a year. To date I have only prevented one person logging in and that is ME ( I used the wrong login name). Also, I know of no successful break-ins. My iptables is as follows: -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT -N block -A INPUT -j block -A FORWARD -j block -A block -i wifi_card -p tcp -m tcp --dport 12123 -j ACCEPT -A block -i Nic_external -p tcp -m tcp --dport 12123 -j ACCEPT -A block -i Nic_enternal -j ACCEPT -A block -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A block -i lo -m conntrack --ctstate NEW -j ACCEPT -A block -j DROP First, I think that the above will keep the bad guys out, Is that a true statement? Sencondly, I have added a LOG rule just above the DROP rule and I have been monitoring it for about 1 1/2 weeks. As each entry is logged I have been adding it to /etc/hosts.deny. Currently there are 4318 ip adresses in the file and the number of packets that have been logged is 51592. Denyhosts is for stopping ssh attempts and nothing else as I understand it. Having over 4300 lines in /etc/hosts.deny causes almost no delay in logging in remotely. Am I being to paranoid about keeping the bad guys out or is the iptable above completely adequate? I would very much like to here your opinion on this, David -- users mailing list users(a)lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org

2 1

Firefox and flash-plugin on F20
by Kevin Cummings 07 Jul '15

07 Jul '15

I have a strange happening. On my F19.x86_64 home server, I have both firefox-34.0-1.fc19.x86_64 and the latest Adobe flash-plugin-11.2.202.468-release.x86_64 installed. About:plugins shows that it is the correct plugin, and all seems to work as expected. On my F20.x86_64 laptop, again, I have both firefox-38.0.5-1.fc20.x86_64 and the latest Adobe flash-plugin-11.2.202.468-release.x86_64 installed. About:plugins however shows that version 11.2.202.466 is the current installed version of the flash plugin being used by firefox. A quick look at my systems shows that there are only 2 libflashplayer.so files: /usr/lib64/flash-plugin/libflashplayer.so /usr/lib64/mozilla/plugins/libflashplayer.so And a quick check of both of them shows: strings /usr/lib64/flash-plugin/libflashplayer.so | grep 11.2.202 FlashPlayer_11_2_202_468_FlashPlayer LNX 11,2,202,468 11.2.202.468 drm/%s/%s/%s/11.2.202.468%s So, if the file in the location that firefox about:plugins shows that it is 11.2.202.468, then why does firefox say it is: Shockwave Flash File: libflashplayer.so Path: /usr/lib64/flash-plugin/libflashplayer.so Version: 11.2.202.466 State: Enabled (STATE_VULNERABLE_UPDATE_AVAILABLE) Shockwave Flash 11.2 r202 This is weird! -- Kevin J. Cummings kjchome(a)verizon.net cummings(a)kjchome.homeip.net cummings(a)kjc386.framingham.ma.us Registered Linux User #1232 (http://www.linuxcounter.net/)

2 2

Lost images in Firefox -
by Bob Goodwin 07 Jul '15

07 Jul '15

This morning's DNF update did the following: > Upgrading: > bash x86_64 4.3.39-3.fc22 > updates 1.6 M > file-roller x86_64 3.16.3-1.fc22 > updates 911 k > file-roller-nautilus x86_64 3.16.3-1.fc22 > updates 35 k > libwsman1 x86_64 2.4.15-1.fc22 > updates 130 k > openjpeg2 x86_64 2.1.0-5.fc22 > updates 108 k > perl-CGI noarch 4.21-1.fc22 > updates 203 k > perl-threads x86_64 1:2.02-1.fc22 > updates 57 k > policycoreutils x86_64 2.3-17.fc22 > updates 810 k > policycoreutils-python x86_64 2.3-17.fc22 > updates 444 k > stunnel x86_64 5.17-1.fc22 > updates 133 k > tigervnc-license noarch 1.4.3-8.fc22 > updates 31 k > tigervnc-server-minimal x86_64 1.4.3-8.fc22 > updates 1.0 M > xen-libs x86_64 4.5.1-1.fc22 > updates 490 k > xen-licenses x86_64 4.5.1-1.fc22 > updates 92 k > > Transaction Summary > ============================================================================================================================================== > Upgrade 14 Packages I notice that I no longer have images when viewing fox news, not all a bad thing, but sometimes I want to see one. More important I can't see any weather radar displays, discovered that this afternoon after I heard a crash of thunder ... I restarted with no add-ons but that made no difference. I have another F-22 computer that was not updated this morning and it works normally. My question is which of the updates has made this change and can I undo it? Bob -- Bob Goodwin - Zuni, Virginia, USA http://www.qrz.com/db/W2BOD box10 FEDORA-22/64bit LINUX XFCE

2 6

dnf command to download
by JD 07 Jul '15

07 Jul '15

dnf download command works but it is not documented in the manpage.

4 6

iptables with logging vs denyhosts
by dcw 06 Jul '15

06 Jul '15

I have been using denyhosts for almost a year. To date I have only prevented one person logging in and that is ME ( I used the wrong login name). Also, I know of no successful break-ins. My iptables is as follows: -P INPUT DROP -P FORWARD DROP -P OUTPUT ACCEPT -N block -A INPUT -j block -A FORWARD -j block -A block -i wifi_card -p tcp -m tcp --dport 12123 -j ACCEPT -A block -i Nic_external -p tcp -m tcp --dport 12123 -j ACCEPT -A block -i Nic_enternal -j ACCEPT -A block -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A block -i lo -m conntrack --ctstate NEW -j ACCEPT -A block -j DROP First, I think that the above will keep the bad guys out, Is that a true statement? Sencondly, I have added a LOG rule just above the DROP rule and I have been monitoring it for about 1 1/2 weeks. As each entry is logged I have been adding it to /etc/hosts.deny. Currently there are 4318 ip adresses in the file and the number of packets that have been logged is 51592. Denyhosts is for stopping ssh attempts and nothing else as I understand it. Having over 4300 lines in /etc/hosts.deny causes almost no delay in logging in remotely. Am I being to paranoid about keeping the bad guys out or is the iptable above completely adequate? I would very much like to here your opinion on this, David

1 0

TB - Sort add-on
by JD 06 Jul '15

06 Jul '15

Looked for an add-on that will sort a folder by date (not for display purposes) but to physically re-organize a floder's messages so that they are sorted from oldest to most recent. Any info on that?

7 36

mailto links under google-chrome in XFCE (Fedora 21)
by Frank McCormick 06 Jul '15

06 Jul '15

Does anyone know how to setup Google-Chromes handling of mailto links in webpages ? I have run the xfce default handlier application, which has Google-Chrome as my preferred webbrowser and Thunderbird as my mail reader. Everytime I click a mailto link either nothing happens, or I get the message failed to run MailReader (input/output error)...not much help. I have checked the mimelist and it has set links up this way: [Default Applications] text/html=userapp-google-chrome-AGO0MX.desktop x-scheme-handler/http=exo-web-browser.desktop x-scheme-handler/https=exo-web-browser.desktop x-scheme-handler/about=exo-web-browser.desktop x-scheme-handler/mailto=exo-mail-reader.desktop application/x-extension-eml=mozilla-thunderbird.desktop the xfce4.helpers file contains this: MailReader=thunderbird TerminalEmulator=xfce4-terminal WebBrowser=google-chrome FileManager=Thunar There is a link in /usr/bin to thunderbird. In the mime list the x-scheme-handlers for mailto is exo-mail-reader.desktop, which runs MailReader I don't understand any of this---apparently xfce changed the way these things are handled in the latest release. Can someone clear away the fog ? Thanks

1 0

Thunderbird question
by JD 06 Jul '15

06 Jul '15

Many emails in my Inbox no longer display. I mean I can see the emails listed in chronological order from oldest at top to newest at bottom. But many older emails simply do not display when I click on the email in the list. I have exited TB and restarted it to no avail.

5 21

F22: rebooting to emergency mode
by Craig Goodyear 06 Jul '15

06 Jul '15

I have done a fresh install of Fedora 22 on the same computer 4 times. Each time, after using the system from 1 day to 3 days and having successfully rebooted several times, a reboot results in being started in emergency mode. This computer was running Fedora 21 since its release without any problems. I am using an ASUS P9X79 Deluxe motherboard. At the emergency mode console the following is displayed in yellow: Ignoring BGRT: invalid status 0 (expected 1) ata16.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 ata16.00: irq_stat 0x40000001 ata16.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 1 dma 16640 in Inquiry 12 01 00 00 ff 00res 00/00:00:00:00:00/00:00:00:00:00/00 Emask 0x3 (HSM violation) Running journalctl -xb has the following lines in red: Jun 30 14:48:15 mac.localdomain kernel: Ignoring BGRT: invalid status 0 (expected 1) Jun 30 14:48:15 mac.localdomain kernel: ata16.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x6 Jun 30 14:48:15 mac.localdomain kernel: ata16.00: irq_stat 0x40000001 Jun 30 14:48:15 mac.localdomain kernel: ata16.00: cmd a0/01:00:00:00:01/00:00:00:00:00/a0 tag 1 dma 16640 in Inquiry 12 01 00 00 ff 00res 00/00:00:00:00:00/00:00:00:00:00/00 Emask 0x3 (HSM violation) Jun 30 14:48:32 mac.localdomain kernel: EDAC sbridge: ECC is disabled. Aborting Jun 30 14:48:32 mac.localdomain kernel: EDAC sbridge: Couldn't find mci handler I have tried installing to a new hard disk. I have tried a different video card. I have run fsck on the hard disk after booting a live image. No errors were found. Nothing I have tried has changed the result. Where do I start in order to determine the cause of this problem?

6 18

Jump to page: