| 00:00.10 | *** join/#debian twirl83_ (halayli@212.98.145.88) |
| 00:00.23 | lazarus | JoshTriplett: in your man pages |
| 00:00.37 | JoshTriplett | lazarus: The bots, I mean. |
| 00:00.44 | *** join/#debian j4cbo (jacob@pool-68-160-157-141.bos.east.verizon.net) |
| 00:00.54 | JoshTriplett | lazarus: I'm not that dense. :) |
| 00:00.59 | *** join/#debian Rich (~java@62.162.18.72) |
| 00:01.22 | lazarus | JoshTriplett: ah, in that case ... apt-get install blootbot :) |
| 00:01.31 | lazarus | JoshTriplett: /msg dpkg help first though |
| 00:01.36 | j4cbo | is there a way of making ssh (client, not sshd) take input from a script for things like the password and the "unknown host key" message? |
| 00:01.37 | Techdeck | peterS, hmm, whats orange? |
| 00:01.54 | JoshTriplett | j4cbo: Use RSA keys, not passwords. |
| 00:01.58 | peterS | Techdeck: there really isn't one. 'ansicolors' prints out all the standard ones. |
| 00:02.01 | lazarus | JoshTriplett: you didn't read the documentation, did you? :( |
| 00:02.07 | *** join/#debian D0C_ (~fullname@69-170-160-45.ironoh.adelphia.net) |
| 00:02.13 | lazarus | j4cbo: you didn't read the documentation, did you? :( |
| 00:02.14 | JoshTriplett | j4cbo: Run ssh-keygen -t rsa . |
| 00:02.15 | D0C_ | Hi All |
| 00:02.16 | lazarus | JoshTriplett: sorry |
| 00:02.21 | Techdeck | peterS damn :( |
| 00:02.41 | peterS | Techdeck: now, you can tune your own color palette in xterm, or rxvt, or konsole, or whatever you use |
| 00:02.46 | *** join/#debian joaquinz (~joaquinz@200-42-51-133.cab.prima.net.ar) |
| 00:02.48 | j4cbo | that's not really an option, I need to connect to a freshly-booted knoppix cd so i can't use predefined keys |
| 00:02.49 | peterS | Techdeck: but that won't change what other people see from other terminals |
| 00:02.52 | D0C_ | anyone know a util similar to hdparm that will work with ataraid ? |
| 00:02.56 | *** join/#debian Rich (Bulent98@81.212.119.35) |
| 00:02.57 | Techdeck | okie |
| 00:02.59 | Techdeck | thanks a lot |
| 00:03.10 | lazarus | j4cbo: THIS IS *NOT* #knoppix!!! |
| 00:03.11 | *** join/#debian VolcomPimp (~volcom@cpe-66-87-94-163.ca.sprintbbd.net) |
| 00:03.11 | *** part/#debian ollebull (ollebull@h86n2fls34o841.telia.com) |
| 00:03.12 | lazarus | man! |
| 00:03.12 | netbrain3 | what am i missing since i i don't have the command fsck.hfs? |
| 00:03.15 | VolcomPimp | hey |
| 00:03.25 | JoshTriplett | JoshTriplett: I did read /msg dpkg help, I just wanted something for offline use. |
| 00:03.37 | j4cbo | lazarus: i knew someone would say that, but my question has nothing to do with knoppix |
| 00:03.38 | *** join/#debian Rich (AnTiSpam@62.220.218.204) |
| 00:03.42 | JoshTriplett | lazarus: Well, it he's connecting _from_ Debian it would be on-topic. |
| 00:03.48 | cafuego | Techdeck: for i in `seq 29 47`; do echo -e "$i: \e[1;${i}mTest String\e[m" >> test; done; cat test |
| 00:03.51 | VolcomPimp | Debian sucks... Unstable is outdated... |
| 00:03.55 | *** join/#debian Tachoh (~Tachoh@69.158.6.156) |
| 00:03.56 | *** part/#debian VolcomPimp (~volcom@cpe-66-87-94-163.ca.sprintbbd.net) |
| 00:03.57 | j4cbo | i am in this case |
| 00:04.00 | peterS | cafuego: that's basically what my ansicolors script does |
| 00:04.01 | fooz | heh |
| 00:04.04 | peterS | cafuego: which I posted a link to (: |
| 00:04.04 | Techdeck | cafuego, yeah I saw it |
| 00:04.09 | *** join/#debian Award (~jpdp@209.120.200.171) |
| 00:04.10 | cafuego | peterS: pfft :-) |
| 00:04.15 | j4cbo | and #ssh doesn't seem to exist at the moment |
| 00:04.19 | fooz | bugs.debian.org needs to be upgraded to an athlon |
| 00:04.26 | lazarus | j4cbo: your lack of proper $HOME *is* *not* *a* *debian* *concern* |
| 00:04.37 | cafuego | fooz: Ok, maybe I'll offer hosting once my new dedicated host server is up. |
| 00:04.46 | cafuego | fooz: What's it run now? |
| 00:04.55 | JoshTriplett | j4cbo: Well, you could burn a custom Knoppix (or Morphix which is easier), or use the persistent home directory option. |
| 00:04.55 | fooz | that was a joke, heh :) it's going really slow |
| 00:04.55 | j4cbo | lazarus: fine, where do i go then? |
| 00:05.02 | lazarus | JoshTriplett: i connected to a web site using debian, i don't like the profanity there, please fix it |
| 00:05.07 | lazarus | JoshTriplett: (same idea) |
| 00:05.11 | *** join/#debian ricochet (~ricochet@adsl-69-107-89-95.dsl.pltn13.pacbell.net) |
| 00:05.11 | D0C_ | anyone know a util similar to hdparm that will work with ataraid ? |
| 00:05.13 | fooz | my apt is acting very very strangely |
| 00:05.15 | JoshTriplett | lazarus: You know, you could just not answer. |
| 00:05.19 | fooz | and i'm trying to figure out why |
| 00:05.30 | cafuego | D0C_: it's called "decent kernel" |
| 00:05.31 | lazarus | j4cbo: you have a knoppix mess, ask about it in #knoppix |
| 00:05.39 | lazarus | !topicsmite j4cbo |
| 00:05.39 | dpkg | And the wrath of /TOPIC descended with terrible fury upon j4cbo. And all the people marveled, saying, Behold, we too should read the /TOPIC, lest we be stricken. And all the people read the /TOPIC, and went away edified. |
| 00:05.40 | j4cbo | sorry for shouting |
| 00:05.49 | D0C_ | cafuego, huh ? |
| 00:05.52 | j4cbo | but this has NOTHING TO DO with knoppix |
| 00:05.53 | *** join/#debian emmetea (~emmetea@66.28.244.170) |
| 00:05.59 | j4cbo | ok, let's rephrase the question: |
| 00:06.09 | lazarus | JoshTriplett: why would i not answer? the answer is that he's asking in the wrong place |
| 00:06.11 | *** join/#debian D{RaCuL}a (~Aprodite_@61.68.100.183) |
| 00:06.13 | *** join/#debian greenfir (~bsmith@216.168.103.139) |
| 00:06.14 | peterS | j4cbo: if it has nothing to do with knoppix, what makes you think it has anything to do with debian? |
| 00:06.15 | D0C_ | 2.6.6 not good enough for ya ? |
| 00:06.23 | *** join/#debian jayjayjay (~jay@beaujon-1-81-57-7-55.fbx.proxad.net) |
| 00:06.25 | JoshTriplett | j4cbo: Actually, it does, since any non-CD distribution would support the public-key option. |
| 00:06.44 | lazarus | JoshTriplett: the guy doens't belong here, ,that's the issue |
| 00:06.49 | j4cbo | rephrase the question: i want to send a predefined input to a program which doesn't like reading from a non-tty |
| 00:06.58 | j4cbo | how's that sound? |
| 00:07.00 | JoshTriplett | peterS: Well, most things that have to do with Debian don't have to do with Knoppix. |
| 00:07.01 | lazarus | j4cbo: ask in #knoppix |
| 00:07.11 | j4cbo | sheesh |
| 00:07.13 | peterS | j4cbo: investigate the 'expect' language, then |
| 00:07.17 | lazarus | sheesh is right! |
| 00:07.20 | cafuego | D0C_: If you have dma issues with your ata disks, your kernel doesn't support your controller. Typically, we check that sort of thing before buying the hardware. |
| 00:07.27 | peterS | j4cbo: or find a better program which does allow input from a non-tty |
| 00:07.35 | peterS | j4cbo: for 'passwd', for example, that would be 'chpasswd' |
| 00:07.38 | cafuego | D0C_: Also, 2.6.6 has a bug which can let any user lock it up ;-) |
| 00:08.01 | lazarus | 2.6.7 rox btw |
| 00:08.01 | *** join/#debian Virusmaster (~Virusmast@pD9E65841.dip.t-dialin.net) |
| 00:08.02 | JoshTriplett | j4cbo: Or read the public key from a floppy. |
| 00:08.11 | *** part/#debian wizard_2 (~wizard@24-90-249-130.nyc.rr.com) |
| 00:08.11 | *** join/#debian aija (aija@d88e.dsl.mtv3.fi) |
| 00:08.19 | D0C_ | thats a local exploit, no concern to me |
| 00:08.22 | j4cbo | i tried writing a small c program to run a command within its own nice little pty, but there has to be a better way |
| 00:08.25 | cafuego | lazarus: it would if it was out, i suppose |
| 00:08.31 | D0C_ | and the hardware works fine |
| 00:08.39 | D0C_ | its a hdparm issue |
| 00:08.42 | lazarus | cafuego: sorry your time machine is broken again |
| 00:08.48 | cafuego | D0C_: whatcha need hdparm for then? |
| 00:08.52 | JoshTriplett | j4cbo: That's what kdesu does to talk to su. |
| 00:09.03 | D0C_ | id like to see the performance improvments |
| 00:09.04 | cafuego | "The latest stable version of the Linux kernel is: 2.6.6" |
| 00:09.13 | D0C_ | i set up the raid a couple nites ago |
| 00:09.14 | fooz | gee, apt doesn't have any error handling at all, does it |
| 00:09.16 | lazarus | cafuego: actually, i really did expecct 2.6.7 oday, since i compiled 2.6.6 SO many times yesterday :/ |
| 00:09.20 | jayjayjay | hello, can you tell me how to see how video ram i have ? thanks |
| 00:09.23 | fooz | it's failing an mmap and just segfaulting instead of complaining about it |
| 00:09.42 | j4cbo | JoshTriplett: are there any general, minimal programs to do that? |
| 00:09.44 | lazarus | cafuego: .. combined with the public stink on the bug in /topic i mean |
| 00:09.47 | cafuego | ~mmap |
| 00:09.54 | j4cbo | or will i have to bang my head against pselect some more? :) |
| 00:10.17 | JoshTriplett | j4cbo: Or you could read "man ssh" and look at the SSH_ASKPASS environment variable. |
| 00:10.23 | *** join/#debian stonecolddsl (~rob@wbar5.tampa1-4-11-126-128.dsl-verizon.net) |
| 00:10.25 | D0C_ | i used hdparm -Tt /dev/hda1 and noted the results, id like to see how much faster it is this way |
| 00:10.51 | stonecolddsl | does anyone know of a support room for palm os based handhelds and linux |
| 00:10.54 | D0C_ | errrr /dev/hda |
| 00:11.08 | JoshTriplett | j4cbo: On a different note, what exactly do you want to do that requres a scripted ssh connection to <insert CD distribution here>. |
| 00:11.20 | Weeble | nn |
| 00:11.22 | cafuego | lazarus: 2.6.7-rc3-bk6 does work fine, though |
| 00:11.29 | cafuego | lazarus: *and* doesn't hang |
| 00:11.37 | fooz | does 2.6.6 hang or something? |
| 00:11.38 | lazarus | stonecolddsl: visor.o |
| 00:11.51 | peterS | JoshTriplett: actually that's a very common requirement - usually met via ssh-agent and RSA keys |
| 00:11.52 | *** join/#debian Rich (~iHtiLaL@dsl81-215-21576.adsl.ttnet.net.tr) |
| 00:11.56 | j4cbo | JoshTriplett: instant lan party; we aren't allowed to install anything on the computers at school but quake2 and bzflag fit nicely in a ramdisk |
| 00:11.59 | lazarus | fooz: most all 2.4 and 2.6 do |
| 00:12.06 | fooz | 2.6 works fine for me |
| 00:12.13 | fooz | 2.6.5 i mean |
| 00:12.18 | JoshTriplett | peterS: He can't do anything that requires a key in the home directory on the server. |
| 00:12.20 | *** join/#debian wizard_2 (~wizard@24-90-249-130.nyc.rr.com) |
| 00:12.24 | lazarus | fooz: 2.6.5 is vulnerable, see /topic |
| 00:12.30 | peterS | JoshTriplett: I don't understand why not |
| 00:12.35 | lazarus | fooz: 2.6.5 is vulnerable, see /topic's first url, i mean |
| 00:12.38 | JoshTriplett | peterS: He's using the distribution mentioned in the topic that isn't Debian. |
| 00:12.40 | j4cbo | unfortunately my classmates are totally linux-illiterate so i need the config to be as easy as possible |
| 00:12.43 | fooz | lazarus, everything's vulnerable to something |
| 00:12.44 | peterS | JoshTriplett: it's not like that public key on the server is sensitive |
| 00:12.50 | stonecolddsl | lazarus what is visor.o |
| 00:12.50 | z|bandito | i did apt-get install php4 and restarted the httpd, but my server just sends php pages to the browser to download; it doesn't parse the php.. what did i do wrong? |
| 00:12.51 | *** join/#debian woot (~jason@C04-147.netonecom.net) |
| 00:13.07 | JoshTriplett | peterS: In other words, he would have to burn a custom CD to do that. |
| 00:13.17 | stonecolddsl | Z|bandito did you have perl installed also |
| 00:13.20 | *** part/#debian D0C_ (~fullname@69-170-160-45.ironoh.adelphia.net) |
| 00:13.31 | lazarus | stonecolddsl: kernel-source-2.6.6/drivers/usb/serial/visor.[ch] |
| 00:13.31 | peterS | JoshTriplett: sounds like he's doing custom stuff anyway. doesn't that imply that he's already burning a custom CD, or writing a floppy, or something? |
| 00:13.32 | j4cbo | and my computer at home sucks, i don't have enough disk space for that |
| 00:13.35 | *** join/#debian boris^ (ryan@S010600d009d7bccd.ok.shawcable.net) |
| 00:13.43 | z|bandito | i dunno, it didn't list perl as a dependency for php4 though |
| 00:13.46 | JoshTriplett | peterS: Ask him. |
| 00:13.56 | j4cbo | peterS: everything custom is running from my blazingly fast p/150 laptop |
| 00:14.06 | cafuego | fooz: Yep, quite badly. When compiled with gcc 3.3.3 anyway. |
| 00:14.14 | stonecolddsl | lazarus where is my kernel source in debian as it not under /usr/src/ or is there an apt-get command to get the source |
| 00:14.18 | JoshTriplett | j4cbo: Try morphix, it is easy to customize and to make small. |
| 00:14.29 | lazarus | stonecolddsl: get it from kernel.org, like anyone would |
| 00:14.34 | JoshTriplett | stonecoldsdl: apt-get install kernel-source-2.4.26 |
| 00:14.37 | cafuego | z|bandito: You failed to cinfigure the webserver. |
| 00:14.39 | *** join/#debian idimmu (Jesus@cpc2-port1-3-0-cust232.cos2.cable.ntl.com) |
| 00:14.47 | JoshTriplett | stonecolddsl: Or whatever version you want. |
| 00:14.51 | lazarus | stonecolddsl: if you MUST use apt-get, then apt-get install kernel-source-2.6.6 or such |
| 00:14.53 | boris^ | this is my first experience in linux. i have installed debian. i have two cdrom, one is dvd. in /dev there is only one cdrom. how can i use this combo cd drive? |
| 00:15.02 | z|bandito | hmm, php claimed it had configured apache modules.. |
| 00:15.16 | cafuego | z|bandito: That's nice, but it obviously lied. |
| 00:15.20 | stonecolddsl | lazurus you act like it such an impsition to have and use apt-get |
| 00:15.22 | j4cbo | boris^: you probably want /dev/hdc and /dev/hdd |
| 00:15.24 | z|bandito | heh |
| 00:15.27 | lazarus | stonecolddsl: but all that does is fetch a package with a tarball, which you can get from kernel.org much easier |
| 00:15.28 | *** join/#debian Gurbetci (~PiSKoLoJi@62.220.218.49) |
| 00:15.55 | lazarus | stonecolddsl: you'd still need to unpack that tarball manually anyway |
| 00:16.04 | JoshTriplett | lazarus: Except the Debian kernels have various patches and bugfixes, like every other package that differs from upstream. |
| 00:16.04 | stonecolddsl | apt-get install kernel-srouce blah blah bhla still seems easier |
| 00:16.18 | z|bandito | cafuego do you know what part to configure ? :) |
| 00:16.21 | lazarus | stonecolddsl: build your own kernel-source-2.6.6, /msg dpkg kp |
| 00:16.30 | lazarus | JoshTriplett: you mean breakages |
| 00:16.44 | PrideF | i'm with lazarus. some of the packages stuff seems screwy. kernel.org works better for me |
| 00:16.45 | lazarus | JoshTriplett: i NEVER trust any distro's mangling of the kernel tree |
| 00:17.05 | JoshTriplett | lazarus: To each their own. |
| 00:17.21 | *** join/#debian LSorensen (lsorense@lsorense.tor.istop.com) |
| 00:17.29 | *** join/#debian macpato (~luigi@201.224.106.209) |
| 00:17.34 | cafuego | z|bandito: Yes, a section in httpd.conf |
| 00:17.40 | *** join/#debian sbk (~kbs@adsl-69-110-21-216.dsl.pltn13.pacbell.net) |
| 00:17.50 | z|bandito | i see this is DSO support : |
| 00:17.52 | lazarus | JoshTriplett: referencee the recent flamage about the debbian maintainer breaking the 2.4 kernels with his <cough> "backports" of the crypto from 2.6.x |
| 00:17.54 | z|bandito | # LoadModule php4_module /usr/lib/apache/1.3/libphp4.so |
| 00:17.56 | *** join/#debian carles (~carles@164.125.64.51) |
| 00:18.07 | *** join/#debian greenfir (~bsmith@216.168.103.139) |
| 00:18.08 | *** join/#debian Ra1stlin (~raistlin@pD9EA0665.dip0.t-ipconnect.de) |
| 00:18.19 | lazarus | JoshTriplett: and i'm as pro-crypto as they come btw |
| 00:18.29 | z|bandito | that needs to be uncommented right? anyone know anything else needed offhand? :) |
| 00:18.29 | *** join/#debian Rich (java@CPE00036d17fb7b-CM014340013197.cpe.net.cable.rogers.com) |
| 00:18.32 | JoshTriplett | lazarus: As opposed to the flamage about many other packages broken by packages in the Debian version? |
| 00:18.53 | lazarus | JoshTriplett: more things brken by "debian" kernels? it wouldn't surprise me |
| 00:19.01 | *** join/#debian boilermaker (~gary@CPE-65-28-191-228.neb.rr.com) |
| 00:19.12 | boris^ | the dvd drive is slave to the cdrom which is accesible as /dev/cdrom how to access the dvd drive? |
| 00:19.19 | *** join/#debian Rich (~MeRwEciq_@193.230.234.110) |
| 00:19.28 | JoshTriplett | lazarus: No, I mean that many other packages also patch the upstream version, and these patches sometimes break things too. |
| 00:20.05 | Techdeck | hey peterS, you still there? |
| 00:20.09 | peterS | Techdeck: no |
| 00:20.15 | z|bandito | what causes this error:? [Tue Jun 15 14:20:02 2004] [alert] apache: Could not determine the server's fully qualified domain name, using 127.0.0.1 for ServerName |
| 00:20.23 | *** join/#debian cj_work (~cjcollier@gw0-cust-DOTCORPORATE-COM.sttl.eli.net) |
| 00:20.24 | Techdeck | peterS, whats wrong with this? PS1='${debian_chroot:+($debian_chroot)}^[[1;30m[^[[1;32m\u^[[1;33m@^[[1;31m\h^[[1;33m:\w\$^[[1;30m]^[[1;39m ' |
| 00:20.40 | aija | What is debian sarge status? it should be come already! |
| 00:20.45 | lazarus | JoshTriplett: this isn't "sometimes break things" this is a DELIBERATE (unforgivable) deviation from upstream in a way that numerous bug reports were filed about, due to how he broke theings, yet he refused to fix it ... shameful! |
| 00:20.48 | JoshTriplett | lazarus: Regarding crypto - do you have any advice about (or pointers to advice about) good GPG key practices? I read the entire GPG handbook. |
| 00:20.55 | *** join/#debian need_help (jc910@shell.inpherno.net) |
| 00:21.01 | JoshTriplett | !tell aija about WIR |
| 00:21.02 | _cj | how do I go about modifying exim4 config files by hand and keeping those changes with dpkg-reconfigure exim4-config ? |
| 00:21.08 | _cj | is there a particular file I need to change? |
| 00:21.18 | peterS | Techdeck: aside from being *way* too much color for sanity... |
| 00:21.21 | joaquinz | hi |
| 00:21.26 | Techdeck | peterS hehehe |
| 00:21.27 | lazarus | JoshTriplett: the handbook from gnupg.org? that's really a good starting point .. if you have a specific question, i may know, shoot it |
| 00:21.30 | peterS | Techdeck: you ignored my advice about putting escape sequences inside \[ \] pairs |
| 00:21.35 | joaquinz | does anybody know how to change the keymap? |
| 00:21.48 | joaquinz | wich command do it? |
| 00:21.53 | *** join/#debian Rich (~aNaSTaCia@ip68-0-153-91.tc.ph.cox.net) |
| 00:21.54 | need_help | hey gusy, ia mtrying to get onto network using debian, i configured the interface file. but when i bring eth0 up andi look into routing table, the gateway is not present tehre (displays a '*') what should i do? |
| 00:21.59 | lazarus | JoshTriplett: let me think of what comes to the top of my head .. secure your private key better than you already do, that's probably a good one :) |
| 00:22.11 | JoshTriplett | lazarus: Just stuff like how paranoid to be about private keys, etc. |
| 00:22.44 | JoshTriplett | lazarus: I've heard everything from "just be careful" to "keep a master key on a non-connected machine, and use subkeys". |
| 00:22.49 | peterS | Techdeck: I've got this theory. using a highly colorful / cute skin, bash prompt, or theme is a reverse indicator of how much serious hacking you actually do on your computer |
| 00:22.55 | lazarus | JoshTriplett: who else has read access to /home/*/.gnupg/secring.gpg |
| 00:23.08 | lazarus | JoshTriplett: ie, root |
| 00:23.14 | JoshTriplett | lazarus: No one has an account on my machine but me. |
| 00:23.16 | boris^ | j4cbo oh sorry i missed that. yes it is /dev/hdd |
| 00:23.18 | boris^ | thanx |
| 00:23.23 | *** join/#debian resist148 (~resist148@adsl-63-196-195-154.dsl.snlo01.pacbell.net) |
| 00:23.28 | lazarus | JoshTriplett: that's a good reason not to use a trtusted key on a remote host |
| 00:23.44 | j4cbo | boris^: you may want to make a symlink like /dev/dvd -> /dev/hdd |
| 00:23.49 | peterS | Techdeck: you also ignored my advice that \e works as an escape character in a bash prompt, and is easier to type and read |
| 00:23.49 | JoshTriplett | lazarus: And I don't plan to put my key on any machine other than my personal laptop. |
| 00:24.01 | *** join/#debian zyz (~zyz@218.20.250.31) |
| 00:24.12 | j4cbo | "/dev/cdrom" just points to /dev/hdc |
| 00:24.17 | *** join/#debian fooz (~jesus@ip68-224-33-15.lv.lv.cox.net) |
| 00:24.18 | lazarus | JoshTriplett: the catch, ,i'd rather tell mutt to sign ALL my amil, even if i'm on an untrusted host, in principle ... thus the conflict |
| 00:24.38 | *** join/#debian kevin (kevin@c66-235-50-49.sea2.cablespeed.com) |
| 00:24.42 | kevin | heya |
| 00:24.43 | lazarus | JoshTriplett: therefore you should use some other less-valued key for mail signing in that situation, imo |
| 00:24.45 | fooz | stupid apt problem was really a limits problem |
| 00:24.46 | JoshTriplett | lazarus: I don't do mail remotely. I take my laptop with me if I need access. |
| 00:24.47 | resist148 | does anyone know if flash7 is packaged? flashplugin-nonfree seems to still be the old version |
| 00:24.49 | kevin | question: I just installed a new kernel (went from 2.4.18 to 2.6.6), and I need to load the kernel module radeonfb, which is where it should be, /lib/modules/2.6.6/..... but insmod/modprobe cant find it, can anyone help? |
| 00:24.54 | fooz | no way to keep su to root from inheriting limits |
| 00:25.02 | lazarus | JoshTriplett: i don't have a laptop, give me one and i'll follow suit i'm sure |
| 00:25.04 | fooz | even though root can override them if it feels like it. grrrr. |
| 00:25.16 | j4cbo | that's the danger; public key assumes that you have an untrusted network but a totally trusted, secure computer |
| 00:25.34 | JoshTriplett | lazarus: So you think that keeping it only on my laptop where no-one but me has an account is secure enough. |
| 00:25.34 | *** join/#debian eLeman (~FaRStome@81.212.180.120) |
| 00:25.35 | lazarus | JoshTriplett: carrying your laptop, ssh fr everything, and you're probably safe if you exercise caution |
| 00:25.35 | peterS | fooz: shouldn't su use /etc/security/limits.conf? at least if /etc/pam.d/su includes "session required pam_limits.so" in it |
| 00:25.42 | j4cbo | and complete ibutton-based cryptosystems are a long way away |
| 00:25.48 | fooz | peterS, yep but all you can do is change the limits |
| 00:26.01 | peterS | fooz: but if root has no limit set, it should change the limits to unlimited |
| 00:26.05 | fooz | peterS, limits.conf has no concept of 'unlimited' |
| 00:26.07 | lazarus | JoshTriplett: up until the day your llaptop gets stolen on the bus, like so many many i keep hearing about lately (stolen, not bus) |
| 00:26.09 | fooz | peterS, it doesn't. |
| 00:26.25 | peterS | fooz: but it does have a concept of "limit is not specified", does it not? |
| 00:26.30 | fooz | peterS, apparently not |
| 00:26.47 | JoshTriplett | lazarus: My laptop doesn't leave my hand unless I'm at home, so short of an armed robbery... |
| 00:26.48 | peterS | fooz: so you're saying this isn't just a su problem |
| 00:26.52 | fooz | just uses whatever was set previously by setrlimit |
| 00:26.53 | *** join/#debian bghfhfg (~debian@alb-24-194-1-64.nycap.rr.com) |
| 00:26.56 | peterS | fooz: if you log in on console, as root, it will get the same limits? |
| 00:27.01 | JoshTriplett | lazarus: And that's what revocation certificates are for, right? |
| 00:27.10 | fooz | peterS, I wouldn't know, as I have no other way besides su to move from one proces with known limits to another one |
| 00:27.13 | lazarus | JoshTriplett: you should probably tar up your $home and then gpg -c home.tar.bz2 |
| 00:27.17 | *** join/#debian greenfir (~bsmith@216.168.103.139) |
| 00:27.23 | fooz | I don't know what limits getty or login run with |
| 00:27.24 | *** part/#debian bghfhfg (~debian@alb-24-194-1-64.nycap.rr.com) |