Apache and umask for document root
by Alex
Hi,
I've set up a virtual host for a joomla website and having some
permissions problems. I've seen numerous configurations online about
how to set umask for the apache user, but none have worked, including
creating a systemd file
(/etc/systemd/system/multi-user.target.wants/httpd.service) with the
following:
[Unit]
Description=The Apache HTTP Server
After=network.target remote-fs.target nss-lookup.target
[Service]
Type=notify
Environment=LANG=C
Umask=0006
ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND
ExecReload=/usr/sbin/httpd $OPTIONS -k graceful
# Send SIGWINCH for graceful stop
KillSignal=SIGWINCH
KillMode=mixed
PrivateTmp=true
[Install]
WantedBy=multi-user.target
The problem is that the files are owned by the joomla user, but also
need to have access (both read and write) to be able to modify some
files within the document root.
Does anyone have any suggestions on how to set umask for the apache user?
I'm also interested in recommended permissions settings for the joomla
document root.
Thanks,
Alex
3 months, 4 weeks
F36: removing systemd-resolved breaks chrony
by Sam Varshavchik
It seems that uninstalling systemd-resolved and repointing /etc/resolv.conf
ends up breaking chrony:
type=AVC msg=audit(1653741361.179:318): avc: denied { getattr } for
pid=856 comm="chronyd" path="/run/NetworkManager/no-stub-resolv.conf"
dev="tmpfs" ino=1525 scontext=system_u:system_r:chronyd_t:s0
tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=file
permissive=0
This is spamming me every minute, now.
Bug 2091275
4 months, 1 week
SATA optical drives
by David Fletcher
I'm currently running FC5, will probably upgrade to F7 in a couple of months.
Unfortunately my CD/DVD rewriter appears to have died, before it's
even seen a dual layer disk :'(
SATA hard drives run without problems for me, but now that SATA
optical drives are starting to appear in the shops, would it be OK to
buy one of these and get rid of another wide ribbon cable?
Is anybody already running them with Fedora?
Thanks for any advice/experiences.
Dave F
4 months, 2 weeks
[FC8] ssh and CAC card???
by Todd Denniston
From what I understood, the change to openssh listed in:
rpm -q --changelog openssh |less
as:
"* Wed Jun 20 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.5p1-7
- experimental NSS keys support
- correctly setup context when empty level requested (#234951)
"
was supposed to allow the Common Access Card (CAC) to work with the shipped
Fedora 8 ssh.
As per NSS usual, everything is undocumented, i.e., `ssh-add --help` does not
help at all, and `man ssh-add` points to `ssh-add -s reader`
# ssh-add -s 0
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 0
# ssh-add -s 1
Enter passphrase for smartcard:
SSH_AGENT_FAILURE
Could not add card: 1
So does anyone know how to use the possible functionality, or are we reduced
to reading the source?
--
Todd Denniston
Crane Division, Naval Surface Warfare Center (NSWC Crane)
Harnessing the Power of Technology for the Warfighter
4 months, 3 weeks
Changing date with procmail
by Michael A. Peters
Anyone know of a procmail recipe to change the date on incoming
messages?
If the date is in the future by more than 24 hours - I'd like to just
change it to the current date.
If the date is in the past by more than two weeks - I'd like to just
change it to the current date.
I'd like to do it in procmail - if someone knows how.
I've done some searching, still have some to do.
Found some stuff on extracting the date, but not on modifying it if
necessary.
5 months, 3 weeks
resurrecting old laptops
by jim.cromie＠gmail.com
so Ive got some old i686 computers,
electronics recycle day approaches, but before I do that,
I thought Id try to get them working
1st one (toshiba satellite core2 laptop) threw a hard-drive,
clunking noises, then finally falls back to pxe-boot.
I put fedora-30-live on a usb (last one with i686 support)
but booting it, I get a 2-line error:
This kernel requires x86-64, but only detected i686
unable to boot - ...
I know f30 supports i686 - I have 1 old desktop still running it.
next is hp pavilion g7
pressing power gives brief spin-up of fans, nothing else.
f2, f10, esc during boot dont help,
screen brightness or vga monitor dont help either
I pulled hard drive and memory to force BIOS / POST
to do something different, NO CHANGE.
Any suggestions?
but at least I have a new/old hard-drive for the toshiba.
I also have a dell pentium2-233,
running knoppix with a 2.6.19 kernel,
its reluctant to do anything (aptitude is trying forever)
I think its too old to have a bios that can usb boot
I have used fedora-live-usb to rescue machines
in the past, but Im running out of options.
I would welcome other distro suggestions for tired old hardware
thanks
5 months, 3 weeks
font tools (was "font longevity questions.").
by home user
(Fedora 35)
In the original post of the "font longevity questions/", I said:
> By the way, why do so many fonts show up twice
> in the font selection tools?
First, the only fonts I recall installing myself are the "Nimbus Roman
No9 L" fonts.
The tools are (in gnome) "Fonts" and "MATE Font Viewer". There might be
others not showing up when I click gnome's "Activities".
I did two screen captures to show what I'm referring to. They're on the
google drive here:
1.
"https://drive.google.com/file/d/1BkB55RW4jqym7_8xRdkExPtPD_XxR1Np/view?us...".
2.
"https://drive.google.com/file/d/1b7Pe_ASGEkfJj8XnIZAVaoznPHj1UOsp/view?us...".
Notice in the first, each of the "Nimbus" fonts shows up twice. When I
clicked on them, I saw no difference. In the second screen capture,
some "Open Sans" fonts show up twice. When I clicked on them, I saw no
difference. Is this how it should be, or is there a bug in the font
tools, or are some fonts actually on my work station twice?
A second issue is that fonts that are different show up in the font
tools with the same name. In this screen capture (on the google drive):
"https://drive.google.com/file/d/1qMfya_ObKot3jNbzYjTI7y17Kb0S83lz/view?us...",
notice 4 fonts called "Noto Sans". They are different from each other.
Notice 4 fonts called "Noto Sans, Bold". They are different from each
other. There are other examples. This is only my opinion, but they
should have different names. Is the problem in the font tools or in the
fonts themselves? If the problem is in the fonts themselves, then there
should be a standard requiring unique naming of fonts.
5 months, 4 weeks
font longevity questions.
by home user
Good morning,
I have about 240 microsoft office word 2010 documents, all 9+ years old,
that I'm converting to LibreOffice Writer in Fedora-35. I'm having to
do this in 3 steps:
1. In windows-7, content is copied from the word files to Writer files.
Tweaks are made to line spacing in tables. The word documents use two
fonts: Times New Roman (various sizes; sometimes regular, sometimes
italic, sometimes bold), and Vivaldi. Writer in windows-7 seems to
support all the fonts used in the word documents.
2. Writer files are copied to my Fedora workstation.
Unfortunately, neither Times New Roman nor Vivaldi are available in
Fedora-35. So I need a step 3: to convert the fonts to choices that are
available in Fedora-35, and are expected to be available for a long time
to come. It's that last condition that I need help with. It's happened
to me in the past that a font that I used in Writer (in Fedora) ceased
to be available, so I changed it to the closest match that was
available. Then that font ceased to be available. So before I start
step 3 with them 240ish Writer files, how do I know which fonts are
likely to be permanent or supported in Fedora for many years, and which
are most vulnerable to being sunset sooner rather than later?
By the way, why do so many fonts show up twice in the font selection tools?
Thank-you in advance.
5 months, 4 weeks
f36 - kernel update breaks resolv.conf
by Eyal Lebedinsky
I am on f36 for a few weeks now, upgraded from f34.
This is the second time this happened. A 'dnf update' runs fine but hangs at the very end, after the list of 'Veritying'.
dnf (the python3 process) is in state D+ (though I could kill it).
dnf.log ends with
2022-05-31T21:32:33+1000 DDEBUG RPM transaction start.
2022-05-31T21:37:51+1000 DDEBUG RPM transaction over.
It is missing the usual final stanza, like
2022-05-16T22:21:23+1000 DDEBUG RPM transaction over.
2022-05-16T22:21:23+1000 DDEBUG timer: verify transaction: 672 ms
2022-05-16T22:21:23+1000 DDEBUG timer: transaction: 2669 ms
dnf.rpm.log ends with this interesting line
2022-05-31T21:37:06+1000 INFO '/etc/resolv.conf' -> '../run/systemd/resolve/stub-resolv.conf'
and sure enough I lost connectivity which may have lead to dnf hanging.
Rebooting leave my network setup broken in the same way.
Restoring resolv.conf to my usual hand made file gets things going.
This seems to happen when a kernel is updated but not at other times.
While I can "fix" it (I keep a resolv.conf.good) when it happens, I would rather sort it out permanently if it is a local issue.
Any idea?
--
Eyal Lebedinsky (fedora(a)eyal.emu.id.au)
6 months
firefox ignores my temporary directory setting
by Eyal Lebedinsky
firefox 100.0.2
I set up a temp dir in about:config
browser.cache.disk.parent_directory /data/Firefox_temp
At no point did I see any activity there but if I empty that directory then FF creates it on launch, so it knows about it.
Here is what I do:
Open the URL
http://www.gnu.org/software/gzip/manual/
Click on
PDF file (304K bytes)
A popup asks "What should Firefox do with this file?"
- I have "always ask" set for this file type in Settings/General/Applications
at this point I see a new file in my home directory
-rw------- 1 eyal eyal 308839 May 14 17:33 _qBdbX0t.pdf.part
I now select
Open with xpdf
and click
OK
The above random file disappeared and another file appears
-rw-r--r-- 1 eyal eyal 308839 May 14 17:33 gzip.pdf
I now close firefox and this file remains.
I restart FF and it is still there.
On another machine the file is created in ~/Download.
How do I get FF to use the nominated directory?
--
Eyal Lebedinsky (fedora(a)eyal.emu.id.au)
6 months
