| 00:00.23 | *** join/#debian fstd (~fstd@unaffiliated/fisted) |
| 00:00.27 | usrnix | themill: http://paste.debian.net/plainh/7b100511 |
| 00:00.58 | *** join/#debian DrOwl (~drowl@n36l.23.me.uk) |
| 00:01.09 | themill | And what do the suggested logs say? |
| 00:01.42 | *** join/#debian catpig (~catpig@p54BD6BBA.dip0.t-ipconnect.de) |
| 00:02.12 | *** join/#debian anyMoreHC (~471691050@116.236.120.162) |
| 00:05.01 | *** join/#debian blazed (~blazed@gateway/tor-sasl/bninja) |
| 00:05.57 | usrnix | themill: the nginx.service status just says generic stuff: http://paste.debian.net/plainh/df435726 , journalctl says http://paste.debian.net/plainh/40f9c1fe |
| 00:06.33 | *** join/#debian Sebtoast (~Toaster@174-138-204-80.cpe.distributel.net) |
| 00:07.01 | *** join/#debian winb (~pi@2001:4663:7fff:0:a00:ff:fe00:1) |
| 00:07.04 | *** join/#debian chatsiri_ (~chatsiri_@cm-58-10-138-131.revip7.asianet.co.th) |
| 00:07.42 | Twinkletoes | garyserj: Thanks for your reply earlier about changing the senders name when using heirloom-mailx, I just need to put: set from="Name <address>" in .mailrc. But how do I specify this on the command line? set from="Name <addr>" echo "Hello World" |mailx -s "Some subject" <addr> doesn't take the from variable like it does from .mailrc |
| 00:07.56 | themill | usrnix: Sep 26 00:59:39 T400ix nginx[21910]: nginx: configuration file /etc/nginx/nginx.conf test failed |
| 00:08.01 | themill | usrnix: does that file exist? |
| 00:08.21 | garyserj | Twinkletoes: i just managed to do it from the command line with no file.. i'll see what I used.. |
| 00:08.41 | usrnix | themill: yea, it's just a config error because I'm working on the files, it just means the webserver won't start up |
| 00:08.46 | *** join/#debian ki0 (~ki0@92.58.126.35) |
| 00:08.53 | *** join/#debian TyrfingMjolnir (~Tyrfing@cm191.iota111.maxonline.com.sg) |
| 00:08.57 | themill | so fix it |
| 00:09.28 | usrnix | themill: I need the new version to completely do that :/ |
| 00:09.40 | garyserj | Twinkletoes: this worked for me #mailx -v -s "abc" -S from="me@yahoo.co.uk(abcname)" -S smtp=smtp://127.0.0.1:25 me@yahoo.co.uk |
| 00:09.43 | usrnix | So the software needs to work for dpkg to remove it? crazay |
| 00:09.58 | themill | usrnix: no, dpkg is trying to install it, not remove it |
| 00:10.21 | garyserj | though that took input from stdin.. i didn't try it with echo |
| 00:10.44 | *** join/#debian Artemis3v (~artemis3@201.248.72.170) |
| 00:12.12 | *** join/#debian Drool (~drool@host86-143-180-191.range86-143.btcentralplus.com) |
| 00:12.13 | Twinkletoes | garyserj: Thank you - thaty's percfect! |
| 00:12.19 | *** join/#debian dimir (~dimir@83.99.142.86) |
| 00:12.40 | *** join/#debian Sebtoast (~Toaster@174-138-204-80.cpe.distributel.net) |
| 00:12.41 | garyserj | np |
| 00:12.48 | usrnix | themill: thanks though - frustrating though, program complains so apt can't fix it |
| 00:12.48 | *** join/#debian Corrupt (~Asylum@h60.62.172.72.dynamic.ip.windstream.net) |
| 00:13.19 | garyserj | usrnix: out of interest do you have stuff in /var/log/dpkg/info/ngin* |
| 00:13.25 | themill | usrnix: what's stopping you from creating the correct config file? Why isn't there a correct config file there already? |
| 00:13.46 | usrnix | garyserj: no |
| 00:14.16 | garyserj | k.. one time i did for ssmtp and that was the issue in that situation though doesn't apply to you |
| 00:14.43 | usrnix | themill: just a, seemingly, unnecessary pain, but not too much I suppose |
| 00:15.21 | usrnix | themill: mainly because it produced unhelpful errors and made it seem hopeless, because I wouldn't assume a config file check would stop an uninstall/install |
| 00:15.51 | *** join/#debian digin4 (~digin4@194.126.136.42) |
| 00:16.24 | themill | usrnix: well installing the package creates a working config file and starts the service. |
| 00:16.27 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:16.34 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:16.44 | themill | And the error messages weren't unhelpful at all... they did tell you exactly what you needed to do |
| 00:17.57 | *** join/#debian huayra (~ruben@ubuntu/member/hubuntu) |
| 00:18.31 | *** join/#debian Duststorm_ (~Duststorm@ip-83-101-50-13.customer.schedom-europe.net) |
| 00:19.45 | *** join/#debian |oop (~loop@174.sub-174-236-133.myvzw.com) |
| 00:19.45 | *** join/#debian |knack| (~loop@174.sub-174-236-133.myvzw.com) |
| 00:21.24 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:21.35 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:23.30 | *** join/#debian RobertJDohnert (~rjdohnert@2606:a000:b441:5d00:49c:c257:52:36e1) |
| 00:23.49 | *** join/#debian DURgod (~DURgod@2001:470:1f11:e4d:3117:8098:d8d9:6729) |
| 00:25.07 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 00:25.24 | robinsz | I guess now is a bad time to still be running Squeeze |
| 00:25.31 | Cpuroast | huh why? |
| 00:25.33 | *** join/#debian __raven (~raven@dslb-094-216-068-145.094.216.pools.vodafone-ip.de) |
| 00:25.41 | Cpuroast | squeeze-lts issued an update |
| 00:25.42 | Cpuroast | to BASH |
| 00:25.58 | robinsz | yeah, but, I isntalled that |
| 00:26.01 | *** join/#debian Sri_Designer (~Sir_Desig@wikipedia/mareklug) |
| 00:26.03 | Cpuroast | and switching to squeeze-lts is trivial |
| 00:26.06 | robinsz | logged in with a new shell |
| 00:26.16 | robinsz | and it appears still to be vulnerable |
| 00:26.26 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:26.32 | themill | aiui there's only 1 of the 2 fixes in squeeze-lts so far |
| 00:26.35 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:26.40 | heurist | robinsz: squeeze lts only fixed for 6271 not 7169 |
| 00:26.45 | Cpuroast | they'll get to it |
| 00:27.01 | Cpuroast | the 1st fix was issued by the debian security team |
| 00:27.13 | Cpuroast | which isn't even supposed to maintain squeeze |
| 00:27.17 | robinsz | yep |
| 00:27.26 | robinsz | OK, yes its just 7169 |
| 00:27.42 | *** join/#debian subleq (~gavin@208.186.116.206) |
| 00:27.54 | robinsz | thats not too bad then |
| 00:28.47 | garyserj | I just did apt-get update, it didn't take long.. would that have done everything? |
| 00:29.05 | garyserj | like any security update? |
| 00:29.11 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 00:29.19 | imaami | garyserj: apt-get upgrade |
| 00:29.21 | Brigo | apt-get upgrade may be? |
| 00:29.39 | garyserj | ah I see, thanks |
| 00:30.07 | robinsz | got to love these stackexchnage posts telling people how to install a "wheezy" bash on squeeze |
| 00:30.20 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 00:31.02 | *** join/#debian Duststorm_ (~Duststorm@ip-83-101-76-250.customer.schedom-europe.net) |
| 00:31.05 | garyserj | is that unix.stackexchange? or ubuntu? |
| 00:31.36 | *** join/#debian gidibo (~gidibo@ip72-207-22-53.sd.sd.cox.net) |
| 00:32.39 | Brigo | garyserj, unix.stackexchange? |
| 00:32.51 | Brigo | http://unix.stackexchange.com/questions/157414/how-to-only-install-security-updates-on-debian |
| 00:32.52 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:33.30 | *** join/#debian gregc2 (~gregc2@66.186.175.48) |
| 00:33.50 | *** join/#debian spadetmp (~spade@91.108.183.50) |
| 00:33.58 | *** join/#debian |oop (~loop@174.sub-174-236-133.myvzw.com) |
| 00:34.47 | garyserj | oh ok, the questioner put that in, rather than an answerer, and he was corrected in comment |
| 00:34.54 | *** join/#debian |knack| (~loop@174.sub-174-236-133.myvzw.com) |
| 00:34.54 | *** join/#debian |oop (~loop@174.sub-174-236-133.myvzw.com) |
| 00:34.59 | garyserj | I imagine if that were an answer it'd have been downvoted |
| 00:36.01 | *** join/#debian Duststorm (~Duststorm@ip-83-101-76-124.customer.schedom-europe.net) |
| 00:36.01 | *** mode/#debian [+l 1424] by debhelper |
| 00:37.23 | *** join/#debian tokik (~tokik@122x212x176x138.ap122.ftth.ucom.ne.jp) |
| 00:37.54 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:40.30 | *** join/#debian Duststorm_ (~Duststorm@ip-83-101-50-89.customer.schedom-europe.net) |
| 00:40.50 | *** join/#debian ariscop (~Phase4@icookc.lnk.telstra.net) |
| 00:41.45 | *** join/#debian SuperG1134 (~textual@2.216.86.59) |
| 00:41.57 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 00:42.03 | *** join/#debian rgr (~user@host-2-97-250-186.as13285.net) |
| 00:42.30 | *** join/#debian Duststorm (~Duststorm@ip-83-101-76-92.customer.schedom-europe.net) |
| 00:42.47 | *** join/#debian ariscop (~Phase4@icookc.lnk.telstra.net) |
| 00:43.51 | *** join/#debian eristisk (~eristisk@gateway/tor-sasl/eristisk) |
| 00:44.04 | *** join/#debian diniwed (~gavron@pool-74-108-225-30.nycmny.fios.verizon.net) |
| 00:44.24 | *** join/#debian arcke (~arcke@095-097-127-044.static.chello.nl) |
| 00:45.11 | *** join/#debian blivande (~Chw@189.193.69.170) |
| 00:46.00 | *** mode/#debian [+l 1430] by debhelper |
| 00:46.42 | *** join/#debian wakd (~wakd@202-159-168-166.dyn.iinet.net.au) |
| 00:47.07 | *** join/#debian Asylum (~Asylum@h244.60.172.72.dynamic.ip.windstream.net) |
| 00:48.53 | *** join/#debian Corrupt (~Asylum@h253.222.88.75.dynamic.ip.windstream.net) |
| 00:49.10 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 00:49.45 | *** join/#debian dayangkun (~dayangkun@101.78.195.61) |
| 00:50.03 | *** join/#debian joobus (~kira@pool-71-170-181-175.dllstx.fios.verizon.net) |
| 00:52.38 | *** join/#debian DynamicFail (~DynamicFa@173-14-159-105-NewEngland.hfc.comcastbusiness.net) |
| 00:53.25 | *** join/#debian Asylum (~Asylum@h244.159.91.75.dynamic.ip.windstream.net) |
| 00:53.54 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 00:54.01 | *** join/#debian snuffeluffegus (~snuff@2001:9b0:10:2104:216:3eff:feb7:f845) |
| 00:54.11 | *** part/#debian LinuxGuy2020 (~mark@cpe-65-25-54-189.neo.res.rr.com) |
| 00:55.07 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 00:56.13 | *** join/#debian Yoshi1 (~yoshi@dsl-173-206-19-230.tor.primus.ca) |
| 00:57.12 | *** join/#debian optraz_ (~cyzie@175.139.114.193) |
| 00:57.56 | *** join/#debian Corrupt (~Asylum@h141.60.172.72.dynamic.ip.windstream.net) |
| 01:01.37 | *** join/#debian Asylum (~Asylum@h96.155.91.75.dynamic.ip.windstream.net) |
| 01:01.45 | *** join/#debian dmbaturin (~dmbaturin@46.253.202.162) |
| 01:02.46 | dmbaturin | When I 'apt-get source' a package, it appears to lack some changes available in security updates. How do I obtain the most recent source package? |
| 01:03.12 | *** join/#debian Ard1t2 (~Ardit@109.69.5.107) |
| 01:03.35 | *** join/#debian Sri_Designer (~Sir_Desig@wikipedia/mareklug) |
| 01:03.37 | *** join/#debian m_tadeu_ (~quassel@bl5-2-9.dsl.telepac.pt) |
| 01:05.49 | *** join/#debian asandwhich (~thissand@ip-18-16.net.ksu.edu) |
| 01:06.06 | *** join/#debian kpease (~kpease@pool-71-184-94-4.bstnma.fios.verizon.net) |
| 01:08.08 | *** join/#debian rryoumaa (~user@ip68-226-110-213.ph.ph.cox.net) |
| 01:08.21 | *** join/#debian _asandweech (~thissand@ip-18-16.net.ksu.edu) |
| 01:08.30 | *** join/#debian swordsmanz (~swordsman@unaffiliated/swordsmanz) |
| 01:09.14 | *** join/#debian ki0 (~ki0@92.58.126.35) |
| 01:09.19 | *** join/#debian dvs (~colin@cwv.teksavvy.com) |
| 01:10.11 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 01:13.56 | *** join/#debian dvs (~colin@cwv.teksavvy.com) |
| 01:16.16 | *** join/#debian Streusel (~Anonymous@unaffiliated/streusel) |
| 01:17.29 | *** join/#debian yofun (sid4817@gateway/web/irccloud.com/x-ssdkbfiibwutccmp) |
| 01:18.14 | *** join/#debian sidmo (~sidmo@p5489E0C3.dip0.t-ipconnect.de) |
| 01:18.40 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 01:20.06 | *** join/#debian k_sze[work] (~kvirc@unaffiliated/kira) |
| 01:22.33 | *** join/#debian rryoumaa (~user@ip68-226-110-213.ph.ph.cox.net) |
| 01:23.50 | *** join/#debian staylor (~staylor@S0106602ad0901f12.cg.shawcable.net) |
| 01:26.00 | *** mode/#debian [+l 1423] by debhelper |
| 01:26.32 | *** join/#debian kevinbenko (~kevinbenk@67-61-214-58.cpe.cableone.net) |
| 01:29.16 | *** join/#debian asandweech (~thissand@unaffiliated/asandweech) |
| 01:30.31 | *** join/#debian Duststorm (~Duststorm@ip-83-101-76-90.customer.schedom-europe.net) |
| 01:30.36 | *** join/#debian bsims (~bsims@173-19-165-246.client.mchsi.com) |
| 01:32.47 | *** join/#debian pet2001 (~peter@p548230D9.dip0.t-ipconnect.de) |
| 01:33.04 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 01:33.58 | *** join/#debian klync (~klync@gentoo/user/klync) |
| 01:34.06 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 01:34.17 | *** join/#debian scuwolf (~scuwolf@123.58.191.68) |
| 01:34.33 | klync | hey all, shellshock fix not being ported to squeeze/updates? I need to dist-upgrade to wheezy? |
| 01:34.56 | dvs | !squeeze-lts |
| 01:34.56 | dpkg | Volunteer-provided security support for Debian 6.0 "Squeeze" will continue until 2016-02-06 for a limited set of packages for i386 and amd64. An appropriate line for your sources.list is «deb http://http.debian.net/debian/ squeeze-lts main». See also the «check-support-status» command from the debian-security-support package and https://wiki.debian.org/LTS for more information. #debian-lts on irc.oftc.net. |
| 01:35.00 | *** join/#debian smue (~smue@gateway/tor-sasl/smue) |
| 01:35.31 | klync | oh neat, thanks dvs ... i'd rather not dist-upgrade this very minute, but i guess i will soon |
| 01:35.58 | *** join/#debian Corrupt (~Asylum@h123.56.172.72.dynamic.ip.windstream.net) |
| 01:38.03 | *** join/#debian bsims (~bsims@173-19-165-246.client.mchsi.com) |
| 01:38.13 | *** join/#debian un214 (~un214@2602:306:ce78:1af9:224:8cff:fed2:ef57) |
| 01:38.22 | *** join/#debian Jaood (Jaood@2600:3c02::f03c:91ff:fe6e:7e43) |
| 01:38.31 | un214 | I'm on debian wheezy |
| 01:38.41 | dvs | yay |
| 01:38.44 | un214 | apt-get update && apt-get dist-upgrade is not picking up the patch for shellshock |
| 01:39.19 | un214 | I thought I saw the patch was available for debian on slashdot |
| 01:39.21 | dvs | un214: do you have the security repo in the /etc/apt/sources.list file? |
| 01:39.53 | un214 | oh GAK that's the problem |
| 01:39.58 | un214 | for some reason it's commented out |
| 01:40.14 | dvs | prepare for the onslaught! |
| 01:40.17 | *** join/#debian Asylum (~Asylum@h220.58.172.72.dynamic.ip.windstream.net) |
| 01:40.35 | *** join/#debian justanotheruser (~Justan@unaffiliated/justanotheruser) |
| 01:40.49 | un214 | actually that explains the whole bloody thing |
| 01:41.00 | un214 | I upgraded to wheezy while it was testing |
| 01:41.09 | un214 | those repos didn't exist yet |
| 01:41.28 | *** join/#debian |oop (~loop@174.sub-174-236-133.myvzw.com) |
| 01:41.28 | *** join/#debian |knack| (~loop@174.sub-174-236-133.myvzw.com) |
| 01:41.43 | un214 | only 300 mb updates |
| 01:42.19 | un214 | hmm I wonder why I was getting /any/ updates this past year |
| 01:42.45 | slurpymcdurpy | !topic |
| 01:42.47 | klync | well, thank goodness for bashocalype (I prefer that name, but it didn't stick) ... now you get a whole truck-full o' security! |
| 01:43.19 | un214 | probably didn't matter |
| 01:43.20 | dvs | likes bashing bugs! |
| 01:43.25 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 01:43.32 | un214 | the exposed point is firefox which I keep reasonably up to date |
| 01:43.35 | klync | heh ... anyone know if this fixes both cve's or just the first one? |
| 01:44.00 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 01:44.11 | heurist | klync: deb7u3 fixes both |
| 01:44.17 | Jaood | what's the point of squeeze-lts if squeeze is still supported? |
| 01:44.30 | heurist | Jaood: it is not, only lts |
| 01:44.32 | dvs | Jaood: Squeeze isn't supported anymore |
| 01:44.44 | klync | heurist: oh joy! |
| 01:44.49 | Jaood | oh darn |
| 01:45.40 | Jaood | I should have read the damn articles instead of just the headline ;) |
| 01:45.49 | Jaood | https://www.debian.org/News/2014/20140719 |
| 01:46.05 | *** join/#debian mig5 (~mig5@pdpc/supporter/professional/mig5) |
| 01:46.21 | Jaood | to be fair, that headline should have mentioned something! |
| 01:46.42 | klync | aah, it feels good to be a gangsta' ...err, I mean, Debian user :D |
| 01:46.48 | *** join/#debian Sri_Designer (~Sir_Desig@wikipedia/mareklug) |
| 01:46.51 | *** join/#debian lnovy (~lnovy@2002:4d57:f055::1) |
| 01:46.56 | mig5 | anyone know why bash 4.1-3+deb6u2 is not yet in the squeeze-lts repositories despite the DLA? just not synced out or something? |
| 01:47.03 | centrx | right |
| 01:49.24 | *** join/#debian die71 (~nino@p54A7642A.dip0.t-ipconnect.de) |
| 01:49.26 | *** join/#debian Quashie (~boingredd@12.185.199.2) |
| 01:50.21 | *** join/#debian zhaodx (~Thunderbi@218.76.52.64) |
| 01:50.57 | *** join/#debian Wulf (~Wulf@unaffiliated/wulf) |
| 01:51.23 | lnovy | somebody consider changing the dsa in topic to 3035... having the old one there is misleading |
| 01:52.02 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 01:52.32 | lnovy | ugh... bot has no clue about dsa3035 |
| 01:52.56 | centrx | !bot |
| 01:52.56 | dpkg | I ain't no stinkin' bot. I am a finely tuned and hand crafted tool. Oh wait... I guess I am a bot (that you should not abuse). |
| 01:53.13 | dvs | smacks the bot |
| 01:54.20 | slurpymcdurpy | asalmonates the bot. |
| 01:54.28 | CarlGel | I had an ssh key that I was using to ssh into one of my servers when I was still on windows. I still have the private key, but I cannot figure out how to ssh in. Using ssh -i /path/to/key my.server doesn't seem to be working. |
| 01:55.49 | *** part/#debian ee2455 (~ee2455@unaffiliated/ee2455) |
| 01:55.58 | *** join/#debian sifeic (~sifeic@c-75-71-117-103.hsd1.co.comcast.net) |
| 01:56.23 | *** join/#debian Scall (~chat@unaffiliated/scall) |
| 01:56.28 | lnovy | if that key is as old as I think, you should probably just toss it away and never use again :) |
| 01:56.42 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 01:56.47 | *** join/#debian Ricardo__ (~rick@unaffiliated/ricardo--/x-7903455) |
| 01:56.57 | CarlGel | It's a few weeks old |
| 01:57.05 | CarlGel | did something happen? |
| 01:57.22 | lnovy | CarlGel: but anyway, try to add some -v to command line to see if keys are offered ect. |
| 01:57.57 | lnovy | CarlGel: i was thinking much older... take a look at CVE-2008-0166 when you have some time |
| 01:58.30 | *** join/#debian Duststorm_ (~Duststorm@ip-83-101-78-60.customer.schedom-europe.net) |
| 01:58.39 | *** join/#debian Knaldgas (~pdj@95-210-249-198.ip.skylogicnet.com) |
| 01:58.45 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:00.27 | CarlGel | Heh, I haven't even been using windows properly for 6 years. I just installed debian earlier this morning. :P |
| 02:00.50 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:00.56 | *** join/#debian jje (~jimericks@unaffiliated/jimerickson) |
| 02:01.39 | CarlGel | Figured it out, putty actually apparently has a tool for linux to convert from putty to openssh |
| 02:01.44 | CarlGel | Which is nice of them. :| |
| 02:01.48 | centrx | ah yes that is important |
| 02:01.59 | *** join/#debian meinaeiner2 (~meinaeine@193.159.171.203) |
| 02:02.01 | CarlGel | Sorry I forgot to mention that, I thought I had. :v |
| 02:03.07 | *** join/#debian kRush (~kRush@unaffiliated/krush) |
| 02:03.09 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:03.43 | *** join/#debian Asylum (~Asylum@h60.153.91.75.dynamic.ip.windstream.net) |
| 02:04.23 | *** join/#debian patterson (~patterson@c-50-174-179-173.hsd1.ca.comcast.net) |
| 02:04.49 | Jaood | mig5: where did you see a 4.1-3+deb6u2 release? |
| 02:05.20 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:05.40 | mig5 | Jaood: I don't, that's the problem. Yet I received a DLA 63-1 via the lts-announce mailing list, stating that it exists and that the previous release didn't fully fix the vuln |
| 02:05.47 | mig5 | so we have the announcement of the new package, but no new package |
| 02:05.59 | mig5 | you can also see mention of it here: https://tracker.debian.org/pkg/bash |
| 02:06.00 | *** join/#debian BenNZ (~Ben__@121-72-172-75.dsl.telstraclear.net) |
| 02:06.02 | *** join/#debian nux (nux@unaffiliated/nux) |
| 02:06.03 | *** join/#debian Corrupt (~Asylum@h69.158.91.75.dynamic.ip.windstream.net) |
| 02:06.22 | mig5 | i guess just no .deb package been built for it/pushed into the repos yet, but it's been about 3.5 hours since the DLA |
| 02:06.45 | mig5 | so seemed a bit premature to send the announcement if you can't get it |
| 02:06.57 | mig5 | i'll just try be patient, it is LTS after all :) |
| 02:07.11 | Jaood | mig5: I see, thanks |
| 02:07.16 | *** join/#debian Knaldgas (~pdj@95-210-249-198.ip.skylogicnet.com) |
| 02:07.32 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:07.42 | Jaood | Jaood plans on shutting down some squeeze boxes |
| 02:08.00 | centrx | It has been uploaded so I think it is in the midst of propagating to mirrors |
| 02:08.11 | centrx | mig5, DLA == DSA ? |
| 02:08.12 | mig5 | excellent |
| 02:08.38 | mig5 | centrx: i guess equivalent. i just noticed that the debian-lts-announce mailing list started referring to the squeeze-lts security advisories as 'DLA' instead of the usual DSA |
| 02:08.42 | mig5 | perhaps to differentiate |
| 02:08.52 | *** join/#debian ki0 (~ki0@92.58.126.35) |
| 02:08.55 | mig5 | https://lists.debian.org/20140925223521.E5E675A279@kinkhorst.com |
| 02:09.00 | mig5 | is what I got ^^ |
| 02:09.46 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:10.08 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 02:11.05 | Jaood | so great of Debian to do a squeeze-lts :) |
| 02:11.14 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:12.03 | *** join/#debian Core84 (~Corey84@unaffiliated/corey84) |
| 02:12.06 | *** join/#debian tilda_ (~tilda@unaffiliated/tildaturn) |
| 02:12.40 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:13.25 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:13.57 | *** join/#debian |xk05| (~xk05@70.176-62-69.ftth.swbr.surewest.net) |
| 02:14.33 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:14.35 | *** join/#debian tekkbuzz (~oijvlj@cpe-67-240-151-83.rochester.res.rr.com) |
| 02:14.48 | *** join/#debian {41444d494e} (~kvirc@46.56.64.14) |
| 02:15.25 | *** join/#debian LanDi (~LanDi@186.232.216.90) |
| 02:15.47 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:16.29 | *** join/#debian Cabanossi (~Cabanossi@p50895A75.dip0.t-ipconnect.de) |
| 02:17.15 | *** join/#debian azizLIGHT (~azizLIGHT@unaffiliated/azizlight) |
| 02:18.59 | *** join/#debian DrRodneyMckay (~drrodneym@202.161.67.166) |
| 02:19.29 | *** join/#debian whiterice (~poeticrpm@2600:100c:b021:d4b:2677:3ff:fede:405c) |
| 02:22.21 | *** join/#debian avshalom (~brown@c-24-12-215-229.hsd1.il.comcast.net) |
| 02:22.55 | *** join/#debian hothman (~chatzilla@62.212.85.107) |
| 02:22.56 | *** join/#debian noisland (~hw1979@li752-135.members.linode.com) |
| 02:24.04 | *** join/#debian netsnail (~netsnail@119.161.140.202) |
| 02:25.30 | *** join/#debian lcafiero (~lcafiero@adsl-76-254-66-225.dsl.pltn13.sbcglobal.net) |
| 02:25.37 | *** join/#debian addaitech (lennox@addaitech.com) |
| 02:25.43 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 02:27.43 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 02:27.49 | *** join/#debian avshalom (~brown@c-24-12-215-229.hsd1.il.comcast.net) |
| 02:28.16 | *** join/#debian shellox (~paul@1.34.43.59) |
| 02:28.18 | shellox | hi |
| 02:28.22 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 02:28.28 | shellox | is there an official guide how to check for shellshock? |
| 02:28.45 | shellox | i found this, but I'm unsure if that's complete https://shellshocker.net/ |
| 02:28.51 | *** join/#debian zophy (~sy@host-98-218-220-24.midco.net) |
| 02:29.09 | noisland | shellox: https://access.redhat.com/articles/1200223 |
| 02:29.45 | *** join/#debian avtar (~avtar@24-212-206-219.cable.teksavvy.com) |
| 02:31.58 | *** join/#debian nomasteryoda (~nomastery@ip72-210-77-104.mc.at.cox.net) |
| 02:32.14 | *** join/#debian rryoumaa (~user@ip68-226-110-213.ph.ph.cox.net) |
| 02:32.34 | shellox | <PROTECTED> |
| 02:32.39 | *** join/#debian Sri_Designer (~Sir_Desig@wikipedia/mareklug) |
| 02:32.48 | shellox | but the second one listed on shellshocker.net still seems to apply for me |
| 02:32.48 | shellox | env X='() { (a)=>\' sh -c "echo date"; cat echo |
| 02:33.20 | *** join/#debian lennox_ (lennox@2001:470:5:81e::fade) |
| 02:34.16 | rryoumaa | sh not bash? |
| 02:34.36 | *** join/#debian addaitech_ (lennox@addaitech.com) |
| 02:34.40 | rryoumaa | i suppose it's just something to execute? |
| 02:35.01 | *** join/#debian paranoids (~markus@amd.paranoids.at) |
| 02:35.21 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 02:37.00 | mig5 | shellox: if you are on debian squeeze, it seems the latest (second) fix for squeeze-lts is not yet in the repositories despite the announcement of the second release |
| 02:37.13 | mig5 | that could be a reason |
| 02:37.54 | heurist | mig5: where are you seeing that announcement? |
| 02:37.55 | Cpuroast | it will get it soon |
| 02:38.19 | Cpuroast | heurist: https://security-tracker.debian.org/tracker/CVE-2014-7169 |
| 02:39.03 | heurist | Cpuroast: that disagrees with what mig5 said. no fix for squeeze-lts |
| 02:39.04 | mig5 | heurist: debian-lts-announce@lists.debian.org |
| 02:39.11 | mig5 | heurist: https://lists.debian.org/20140925223521.E5E675A279@kinkhorst.com |
| 02:39.16 | mig5 | from about 4 hours ago |
| 02:39.24 | shellox | so this one is real too ? https://twitter.com/taviso/statuses/514887394294652929 |
| 02:39.30 | *** join/#debian noahfx_ (~noahfx@190.149.186.55) |
| 02:39.49 | Cpuroast | heurist: the fix is coming for lts and sid/testing |
| 02:39.50 | centrx | shellox, yes, it's been patched in Debian stable |
| 02:40.26 | Cpuroast | the reason stable got a fix faster is cuz it was released out of security.debian.org |
| 02:40.29 | Cpuroast | and not the regular repos |
| 02:40.39 | *** join/#debian btcquant (~textual@092.150.198.203.static.netvigator.com) |
| 02:40.43 | Cpuroast | cuz well, stable :) |
| 02:41.05 | shellox | you're right, patched on debian wheezy and ubuntu 14.04 lts now |
| 02:41.07 | shellox | thanks |
| 02:41.08 | *** join/#debian Hunterkll (~Hunterkll@2001:470:8b06:2000:c1a6:182e:583a:aa73) |
| 02:41.12 | *** join/#debian LanDi (~LanDi@186.232.216.90) |
| 02:41.16 | shellox | still need to deal with this centos and OS X crap :/ |
| 02:41.31 | centrx | I hear the OS X update will cause your iPhone to bend |
| 02:41.52 | shellox | centrx: that's iOS, not OS X ;) |
| 02:41.57 | shellox | mobile vs desktop |
| 02:43.37 | *** join/#debian dumbell (~dumbell@67-5-248-46.ptld.qwest.net) |
| 02:45.13 | ruukasu | where can I download debian gnu/kfreebsd? can't find any installation files other than gnu/linux |
| 02:45.22 | avtar | shellox: i'm in the same boat |
| 02:45.25 | avtar | except no os x |
| 02:46.07 | *** join/#debian Abhijit (~Abhijit@unaffiliated/abhijit) |
| 02:46.32 | centrx | ruukasu, it seems to be listed for Network Install and CD ISO images |
| 02:46.43 | centrx | ruukasu, kfreebsd-i386 and kfreebsd-amd64 |
| 02:47.03 | r-x-w- | heh finally I made it work. I had dislodged my private RSA key from my PKCS#12 file. To fix it took like 6 hours. |
| 02:47.09 | r-x-w- | openssl pkcs12 -export -inkey private.key -in mycert.pem -certfile root.pem -out cert.p12 -name "My Certificate" |
| 02:48.09 | shellox | avtar: centos fixe dthe first one for me |
| 02:48.14 | ruukasu | centrx: ooh, I went to the netinst page, but I skimmed over kfreebsd because I assumed it would have its own heading, because its in a list of architectures |
| 02:48.16 | ruukasu | thanks |
| 02:48.20 | shellox | but still vulnerable to the date test |
| 02:48.52 | shellox | does anyone know in which bash version both bugs were fixed upstream? |
| 02:49.02 | avtar | shellox: no upstream update as of yet so it's probably going to take a while |
| 02:49.03 | Cpuroast | u3 |
| 02:49.08 | Cpuroast | oh |
| 02:49.10 | avtar | https://access.redhat.com/security/cve/CVE-2014-7169 |
| 02:49.11 | Cpuroast | upstream |
| 02:49.13 | Cpuroast | my bad |
| 02:49.18 | *** join/#debian |oop (~loop@174.sub-174-236-133.myvzw.com) |
| 02:49.33 | *** join/#debian |knack| (~loop@174.sub-174-236-133.myvzw.com) |
| 02:50.12 | avtar | not feeling great right now :/ |
| 02:50.31 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 02:50.36 | shellox | avtar: do you have a rhel server too? |
| 02:50.47 | *** join/#debian Seto_Kaiba (~Hunterkll@2001:470:8b06:2000:3d64:4ec:aec0:1b60) |
| 02:50.50 | avtar | shellox: several centos 6.5 ones |
| 02:51.10 | shellox | avtar: centos just copies rhel stuff no? so did red hat fix both bugs? |
| 02:51.57 | avtar | i believe red hat has only addressed CVE-2014-6271 so far |
| 02:52.23 | shellox | debian, ubuntu were fast in patching it tho |
| 02:52.32 | avtar | yup |
| 02:52.53 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 02:52.55 | r-x-w- | who runs Debian anyway. |
| 02:53.03 | civillian | squints |
| 02:53.05 | centrx | A girl named Deb and a guy named Ian |
| 02:53.20 | avtar | solid guy, that ian |
| 02:53.25 | avtar | deb's alright too |
| 02:54.04 | shellox | wonder if this fortigate crap is affected too |
| 02:54.10 | shellox | doesn't have a real shell, so i guess not |
| 02:55.03 | narcarsiss | Is there a way to start the Text installer from a live CD shell? as X wont start? Or even a boot perameter? |
| 02:55.08 | *** join/#debian superstraw (~user.name@unaffiliated/superstraw) |
| 02:55.08 | *** part/#debian Weapon (Weapon@trekweb/user/Weapon) |
| 02:56.00 | *** join/#debian linux_dream (~linux_dre@23-207-245-190.fibertel.com.ar) |
| 02:56.03 | shellox | avtar: many people seem to build their own bash now for centos, i don't believe that's a good idea tho |
| 02:56.23 | *** join/#debian Sri_Designer (~Sir_Desig@wikipedia/mareklug) |
| 02:56.43 | *** join/#debian DynamicFail (~DynamicFa@173-14-159-105-NewEngland.hfc.comcastbusiness.net) |
| 02:57.45 | avtar | shellox: https://rhn.redhat.com/errata/RHSA-2014-1306.html looks like it might start trickling down to centos soon |
| 02:57.55 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 02:58.03 | avtar | once that and squeeze-lts are done then i can go to bed :D |
| 02:58.28 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 02:58.40 | shellox | avtar: centos just runs wget against redhats server anyway lol |
| 02:59.00 | Cpuroast | lol |
| 02:59.02 | *** join/#debian Lolocafera (~afera@ANantes-256-1-165-60.w90-25.abo.wanadoo.fr) |
| 02:59.15 | *** join/#debian igi (~igi@218.107.55.254) |
| 02:59.48 | *** join/#debian whiterice (~poeticrpm@rrcs-71-42-179-100.sw.biz.rr.com) |
| 03:01.51 | *** join/#debian jhulst (jhulst@unaffiliated/jhulst) |
| 03:02.42 | igi | hi, anyone known about bash bug related to how environment variables are processed? I found debian release bash 4.2-dfsg-0.1+deb7u1 to fix it again in Debian wheezy. But how about Debian Squeeze, I can't get new bash deb release even from squeeze-lts |
| 03:03.35 | igi | new test command: env -i X='() { (a)=>\' bash -c 'echo date'; cat echo |
| 03:04.09 | *** join/#debian wade_yiqd (~Thunderbi@123.235.16.198) |
| 03:04.16 | civillian | igi: https://security-tracker.debian.org/tracker/CVE-2014-6271 and https://security-tracker.debian.org/tracker/CVE-2014-7169 |
| 03:04.36 | *** join/#debian |knack| (~loop@7.sub-174-236-160.myvzw.com) |
| 03:04.54 | *** join/#debian acrocity (~acrocity@p9230-ipngn602marunouchi.tokyo.ocn.ne.jp) |
| 03:05.12 | heurist | igi: deb7u1 only fixed the first bug, which is also fixed in squeeze-lts. only stable has a fix for the second bug (deb7u3) |
| 03:05.58 | *** join/#debian c0ded (~c0ded@unaffiliated/c0ded) |
| 03:06.13 | *** join/#debian |knack| (~loop@7.sub-174-236-160.myvzw.com) |
| 03:06.26 | *** join/#debian avshalom (~brown@c-24-12-215-229.hsd1.il.comcast.net) |
| 03:07.20 | *** join/#debian akar (~root@119.82.230.178) |
| 03:08.10 | igi | So debian's guys will fix the second bug in squeeze soon? |
| 03:08.38 | igi | heurist: i known that. i care about the second bug when to be fix |
| 03:09.21 | heurist | igi: when it is fixed. |
| 03:09.27 | *** join/#debian tonydiablo (~shane@pool-108-12-108-101.hstntx.dsl-w.verizon.net) |
| 03:10.30 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 03:11.14 | *** join/#debian whiterice (~poeticrpm@rrcs-71-42-179-100.sw.biz.rr.com) |
| 03:11.30 | *** join/#debian Coke (~Coke@60-242-153-150.static.tpgi.com.au) |
| 03:11.42 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 03:11.56 | *** join/#debian mixomathoze (~mixomatho@10.92-243-81.adsl-dyn.isp.belgacom.be) |
| 03:12.07 | k-man | where can i read about dealing with shellshock in debian stable? |
| 03:12.29 | tonydiablo | Hey, is anyone here using Sid with LXDE? I'm not seeing a panel after I enter the environment, but there is apparently one running. If I kill it, remove the directory .config/lxpanel, and then start another instance of lxpanel, it shows up. But if I exit LXDE then start it again, same thing over again |
| 03:12.48 | centrx | k-man, Basically the only thing is make sure your security updates are up to date, and restart your services (or entire machine if that's an easy reliable solution) |
| 03:13.08 | shellox | k-man: wheezy has it already |
| 03:13.19 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 03:13.39 | centrx | k-man, The two security announcements about it are at https://www.debian.org/security/2014/dsa-3032 and https://www.debian.org/security/2014/dsa-3035 |
| 03:13.48 | heurist | k-man: apt-get update && apt-get dist-upgrade && reboot and you have read all you need wrt stable |
| 03:13.53 | k-man | thanks centrix |
| 03:14.06 | *** join/#debian omgponies (~ponies@118.149.138.159) |
| 03:14.50 | centrx | !security |
| 03:14.50 | dpkg | Put "deb http://security.debian.org/ wheezy/updates main contrib non-free" in your /etc/apt/sources.list file to keep up-to-date on security updates in <stable>. Run "aptitude update" and "aptitude upgrade" (or "aptitude full-upgrade" if the updates are kept back). Also ask me about <dsa>, <security backports>, <oldstable security>, <testing security>, <unstable security>, <browser security>. |
| 03:15.03 | igi | heurist: :) my leader require to fix it quickly even we don't use bash in any application service. |
| 03:15.42 | shellox | igi: I'd say the OS updates are the only ones which are reliable |
| 03:15.46 | *** join/#debian CyberSix (dcvcd@p2-0.ca01.iad03.atlas.cogentco.ca) |
| 03:15.47 | *** join/#debian Sri_Designer (~Sir_Desig@wikipedia/mareklug) |
| 03:15.58 | shellox | dealing by yourself might cause other issues if you don't know what you're doing :P |
| 03:16.08 | *** join/#debian BotoMlat (~BotoMlat@93-141-22-90.adsl.net.t-com.hr) |
| 03:16.11 | *** join/#debian seekr (~seekr@209-6-229-84.c3-0.smr-ubr2.sbo-smr.ma.cable.rcn.com) |
| 03:16.39 | Cpuroast | apt-get install bash/unstable, still .1 :( |
| 03:16.46 | heurist | igi: https://lists.debian.org/debian-lts-announce/2014/09/msg00020.html implies there is a fixed version for lts, but that all we know. it has not appeared yet so far as I know. |
| 03:16.54 | igi | shellox: yep, i agree that. |
| 03:17.03 | Cpuroast | it's fixed on lts and sid |
| 03:17.08 | Cpuroast | just hasn't reached the repos |
| 03:17.08 | Cpuroast | yet |
| 03:17.19 | Cpuroast | https://security-tracker.debian.org/tracker/CVE-2014-7169 |
| 03:18.00 | *** join/#debian rryoumaa (~user@ip68-226-110-213.ph.ph.cox.net) |
| 03:18.01 | *** join/#debian Lolocafera (~afera@ANantes-256-1-165-60.w90-25.abo.wanadoo.fr) |
| 03:19.27 | shellox | Cpuroast: things could always be worse ;) before i joined this computer they had running fedora8 which was 5 years out of updates for a prod machine haha |
| 03:19.34 | shellox | this company* |
| 03:19.55 | Cpuroast | shellox: bahahaha |
| 03:20.20 | *** join/#debian ct0 (~ct0@pool-173-70-194-120.nwrknj.fios.verizon.net) |
| 03:20.44 | lnovy | it has been about 9 hours now since the lts package was build... I understand that there is a QA and errata work to do after the build, but come on... It's getting fishy... |
| 03:20.56 | *** join/#debian TyrfingMjolnir (~Tyrfing@cm191.iota111.maxonline.com.sg) |
| 03:21.34 | *** join/#debian linguini (~user@c-71-236-253-223.hsd1.or.comcast.net) |
| 03:21.37 | *** part/#debian linguini (~user@c-71-236-253-223.hsd1.or.comcast.net) |
| 03:21.42 | avtar | shellox: looks like the package for centos is getting out to mirrors |
| 03:22.05 | Cpuroast | just landed |
| 03:22.10 | Cpuroast | on my 1 centos vm |
| 03:22.26 | Cpuroast | updated |
| 03:22.28 | Cpuroast | :) |
| 03:22.44 | *** join/#debian mactimes_ (~mactimes@unaffiliated/mactimes) |
| 03:22.58 | *** join/#debian day (~day@unaffiliated/day) |
| 03:22.59 | shellox | avtar: luckily we just have 2 machines using centos :P |
| 03:23.08 | Cpuroast | now my 1 lts vm left |
| 03:23.21 | Cpuroast | and my 1 testing vm |
| 03:23.26 | *** join/#debian avshalom (~brown@c-24-12-215-229.hsd1.il.comcast.net) |
| 03:23.28 | shellox | is this bug severe for desktop clients? |
| 03:23.36 | Cpuroast | it's there |
| 03:23.38 | Cpuroast | but less so |
| 03:23.39 | *** join/#debian arubi (~ese168@gateway/tor-sasl/ese168) |
| 03:23.44 | shellox | else i need to update 20 macs |
| 03:23.47 | Cpuroast | exposure wouldn't be as much |
| 03:23.48 | shellox | which kis kinda painful |
| 03:23.52 | centrx | not really |
| 03:23.54 | Cpuroast | shellox: Apple will issue a security fix |
| 03:23.59 | centrx | browser is always the worst vulnerability on desktop |
| 03:24.03 | shellox | Cpuroast: haha, takes probably weeks |
| 03:24.16 | Cpuroast | shellox: maybe, maybe not, depends on how fast they react to it |
| 03:24.32 | shellox | Cpuroast: hope the update is better than for their shitty phones |
| 03:24.32 | shellox | :P |
| 03:24.34 | centrx | I heard, if you put your iPhone in the microwave, it breaks. |
| 03:24.42 | Cpuroast | lol |
| 03:24.48 | narcarsiss | lol |
| 03:24.52 | shellox | iBoom |
| 03:24.53 | igi | lol |
| 03:24.58 | avtar | centrx: you're probably using it wrong |
| 03:25.19 | centrx | Siri tells me to do it |
| 03:25.24 | shellox | i had an iphone before using android, not sure what's worse. |
| 03:25.43 | avtar | blackberry |
| 03:25.47 | avtar | that's worse |
| 03:25.53 | k-man | hehe |
| 03:25.57 | shellox | do they still exists? |
| 03:26.04 | narcarsiss | That custom HP os on PHablets was worse |
| 03:26.14 | centrx | WebOS could have been good |
| 03:26.21 | shellox | i liked webos too |
| 03:26.34 | k-man | shellox, i currently have an iPhone and i'm thinking of changing to android. what don't you like about android? |
| 03:27.11 | avtar | k-man: i switched a few months ago and it's fine |
| 03:27.14 | narcarsiss | k-man: Get an android emulator and play around with it. |
| 03:27.29 | shellox | k-man: ugly and often buggy software, inconsistency, many apps want all permissions etc. |
| 03:27.36 | shellox | the samsung rom is worse than the rest tho |
| 03:27.45 | shellox | try cyanogenmod or so |
| 03:27.45 | k-man | yeah i've tried it out a bit on an older phone. i quite liked it. i put cyanogenmod on it |
| 03:27.53 | narcarsiss | +1 cyanomod |
| 03:28.16 | k-man | i actually used it for a week or so - it was quite good i thought |
| 03:28.20 | shellox | it's still google tho. would like a real open source phone without signing up for app stores :P |
| 03:28.31 | avtar | firefox os :) |
| 03:28.32 | k-man | shellox, yeah, that would be nice |
| 03:28.51 | shellox | how about tizen? |
| 03:29.24 | *** join/#debian Lolocafera (~afera@ANantes-256-1-165-60.w90-25.abo.wanadoo.fr) |
| 03:29.55 | shellox | avtar: where can you see the status of updates for centos? |
| 03:30.07 | shellox | just found the redhat websites |
| 03:30.20 | *** join/#debian tonydiablo (~shane@pool-108-12-108-101.hstntx.dsl-w.verizon.net) |
| 03:30.23 | *** join/#debian rryoumaa (~user@ip68-226-110-213.ph.ph.cox.net) |
| 03:30.44 | heurist | shellox: http://lists.centos.org/pipermail/centos-announce/2014-September/020593.html |
| 03:32.12 | avtar | that url ;) |
| 03:32.35 | shellox | avtar: what's wrong with the URL :P? |
| 03:33.14 | avtar | that's the one i checked as well |
| 03:34.02 | avtar | i'm still seeing the old package on my end though :/ |
| 03:34.12 | shellox | me too, where are you based in? |
| 03:34.16 | avtar | toronto |
| 03:34.25 | *** join/#debian enaqx (~enaqx@user-206.98.infomir.com.ua) |
| 03:34.30 | shellox | oh i see |
| 03:34.36 | shellox | probably takes longer to be in asia :P |
| 03:34.57 | avtar | where in asia? |
| 03:35.02 | shellox | avtar: taiwan |
| 03:35.28 | avtar | ah nice |
| 03:35.32 | shellox | hmm according to the mirror list there are at least 10 mirrors here |
| 03:35.37 | shellox | hope at least 1 get it soon |
| 03:35.38 | shellox | haha |
| 03:37.05 | *** join/#debian Xiti (~Xiti-@unaffiliated/xiti) |
| 03:37.19 | *** join/#debian kermit (unknown@pdpc/supporter/bronze/kermit) |
| 03:38.03 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 03:38.28 | Lolocafera | Okay, apparently everybody's asleep on the #bumblebee channel |
| 03:38.47 | *** join/#debian Blueer (Blueer@p5B358826.dip0.t-ipconnect.de) |
| 03:38.49 | centrx | bees are more active during the day |
| 03:38.55 | Lolocafera | heh |
| 03:39.24 | sebastian2 | shellox: try f-droid |
| 03:39.26 | shellox | Lolocafera: try #bumblebat |
| 03:39.55 | lnovy | so... anybody knows why that heredoc fixes aren't mentioned in the CVE text? |
| 03:39.57 | Lolocafera | this is tantalizing, I keep finding solutions to my problem, but none actually works |
| 03:40.20 | shellox | sebastian2: tried it before. |
| 03:40.28 | *** join/#debian d0pe (~swagger@2607:5300:60:350:fed:0:a6e8:79f) |
| 03:40.47 | Lolocafera | anyone knows a good source of information on Bumblebee? |
| 03:41.20 | lnovy | what do you need to know? I had some at my place before. |
| 03:41.21 | centrx | hah bumblebat fooled me |
| 03:41.30 | avtar | shellox: i just tried it again on centos but with using the baseurl instead of mirrorlist and got the update |
| 03:41.53 | Lolocafera | I need to know how to make my GPU work |
| 03:42.13 | avtar | gonna go ahead and do that temporarily for all the hosts that i need to patch and then stare at the squeeze-lts page :P |
| 03:42.17 | *** join/#debian anonnumberanon (~anonnumbe@unaffiliated/anonnumberanon) |
| 03:42.22 | *** join/#debian jonasof (~jonasof@189.120.54.218) |
| 03:42.26 | lnovy | ouch... I was actually thinking about those buzzing insects :) |
| 03:42.37 | centrx | !squeeze->wheezy |
| 03:42.52 | centrx | !bot |
| 03:42.52 | dpkg | I ain't no stinkin' bot. I am a finely tuned and hand crafted tool. Oh wait... I guess I am a bot (that you should not abuse). |
| 03:43.05 | centrx | !squeeze->wheezy |
| 03:43.09 | centrx | lousy bot |
| 03:43.09 | shellox | avtar: how do you specify baseurl exclusively when doing yum update? |
| 03:43.17 | lnovy | !dsa3035 |
| 03:43.50 | lnovy | bot... they are all alike... |
| 03:44.04 | Lolocafera | there's an entry on the wiki about Bumblebee https://wiki.debian.org/Bumblebee |
| 03:44.09 | avtar | shellox: baseurl=http://mirror.centos.org/centos/$releasever/updates/$basearch/ |
| 03:44.24 | shellox | avtar: it's using fastestmirror plugin in my case ;) |
| 03:44.56 | avtar | same here |
| 03:44.56 | Lolocafera | in the "Common issues" section, it even mentions that there's something I could do for my current problem |
| 03:45.11 | *** join/#debian awc737 (~textual@c-50-188-169-184.hsd1.or.comcast.net) |
| 03:45.24 | Lolocafera | "You may have to set the BusID manually, in /etc/bumblebee/xorg.conf.nvidia. To get the BusID, run lspci | egrep 'VGA|3D' in a terminal. Refer to the comments in that file for further instructions. " |
| 03:45.41 | avtar | but it kept returning the same mirror which didn't have the update |
| 03:46.02 | *** join/#debian sandman13 (~sandman@202.51.84.21) |
| 03:46.44 | shellox | avtar: can you just specify in the yum command to use baseurl |
| 03:46.52 | shellox | or do i need to edit the config first |
| 03:47.10 | Lolocafera | I have a straightforward question: what is the syntax of the BusID entry in a xorg.conf type file? |
| 03:47.13 | shingouz | wonders what centos and yum has to do with debian |
| 03:47.16 | *** join/#debian Rusty1 (~Rusty1@cpe-74-70-74-115.nycap.res.rr.com) |
| 03:47.42 | shellox | shingouz: sorry, came up when discussing updates for bash for debian, ubuntu and centos :D |
| 03:51.17 | *** join/#debian Mokuba_K (~Hunterkll@2001:470:8b06:3000:35f5:efa9:f5d:d208) |
| 03:52.22 | lnovy | hit your mirrors |
| 03:53.16 | avtar | ooh https://security-tracker.debian.org/tracker/DLA-63-1 |
| 03:55.15 | avtar | doneskys |
| 03:55.33 | Lolocafera | yet another restart |
| 03:57.27 | *** join/#debian Lolocafera (~afera@ANantes-256-1-165-60.w90-25.abo.wanadoo.fr) |
| 03:58.04 | Lolocafera | I don't want to have to return my laptop! |
| 03:58.12 | *** join/#debian MintUser (~MintUser@181.209.246.226) |
| 04:00.58 | *** part/#debian MintUser (~MintUser@181.209.246.226) |
| 04:02.48 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 04:03.21 | *** join/#debian phuh (~phuh@cp66-203-194-42.cp.telus.net) |
| 04:03.33 | *** join/#debian Abhijit (~Abhijit@unaffiliated/abhijit) |
| 04:03.44 | *** join/#debian pksadiq (~user@106.208.1.3) |
| 04:06.23 | *** join/#debian Seto_Kaiba (~Hunterkll@2001:470:8b06:2000:5e6:5377:de17:1bff) |
| 04:06.27 | *** join/#debian TheLive1 (~Sajjad@81.17.16.170) |
| 04:07.42 | *** join/#debian Asylum (~Asylum@h44.62.172.72.dynamic.ip.windstream.net) |
| 04:08.24 | *** join/#debian Coke (~Coke@60-242-153-150.static.tpgi.com.au) |
| 04:08.44 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 04:09.50 | *** join/#debian systmkor1 (~systmkor@unaffiliated/systmkor) |
| 04:09.56 | *** join/#debian pce (~pce@unaffiliated/pce) |
| 04:10.21 | igi | squeeze (lts)4.1-3+deb6u2fixed |
| 04:11.15 | *** join/#debian cyborg_ (~cyborg@23.99.20.142) |
| 04:11.36 | igi | new fixed package of squeeze release! |
| 04:13.02 | *** join/#debian Kevin` (~kevin@router.kwzs.be) |
| 04:13.45 | *** join/#debian Miesco (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 04:13.56 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-129-107.nexicom.net) |
| 04:14.39 | *** join/#debian rryoumaa (~user@ip68-226-110-213.ph.ph.cox.net) |
| 04:15.08 | *** join/#debian mburns (~mburns@rialto.mirwin.net) |
| 04:15.28 | *** join/#debian nollidj (~stu@ma.sdf.org) |
| 04:17.05 | *** join/#debian Almtesh (~Almtesh@unaffiliated/almtesh) |
| 04:18.23 | *** join/#debian madrik (~user@122.168.162.239) |
| 04:20.16 | *** join/#debian Gsa700_ (~Gsa700@unaffiliated/gsa700) |
| 04:21.56 | *** join/#debian MrFrood (~MrFrood@ma.sdf.org) |
| 04:23.58 | *** join/#debian sandman13 (~sandman@202.51.84.21) |
| 04:25.52 | *** join/#debian jareth_ (~jareth_@2001:980:e1c0:1:219:66ff:fea0:a502) |
| 04:27.02 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 04:27.14 | Lolocafera | anyone here is knowledgeable about Bumblebee and how to make it work? |
| 04:28.13 | *** join/#debian altin (~altin@flossk/altin) |
| 04:28.39 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 04:29.04 | relaxed | Lolocafera: #bumblebee |
| 04:29.13 | *** join/#debian Coke (~Coke@60-242-153-150.static.tpgi.com.au) |
| 04:30.33 | Lolocafera | relaxed, yeah, I asked the question there too. I plan on asking it again every hour until someone answers. |
| 04:31.24 | *** join/#debian vivid (~vivid@c-76-104-215-159.hsd1.wa.comcast.net) |
| 04:31.29 | relaxed | Lolocafera: someone in #nvidia might know |
| 04:31.34 | *** join/#debian winterss (~wint@c-71-228-128-169.hsd1.ga.comcast.net) |
| 04:32.23 | relaxed | Lolocafera: did you see https://wiki.debian.org/Bumblebee#Installation |
| 04:33.36 | Lolocafera | relaxed, yes, yes I did see it. That's the problem: it just doesn't work. But good idea about #nvidia |
| 04:34.03 | *** join/#debian Scar3cr0w (~Scar3cr0w@173-13-173-53-sfba.hfc.comcastbusiness.net) |
| 04:34.34 | *** join/#debian TyrfingMjolnir (~Tyrfing@118.189.1.18) |
| 04:35.37 | kingsley | Why would a device be automatically (re-)mounted twice immediately after manually mounting it with ... $ mount /dev/sdxn /mnt/dir, to end up being mounted three times? |
| 04:37.05 | *** join/#debian chris062689 (~chris@65.33.85.92) |
| 04:39.41 | *** join/#debian hugg (~hugg@unaffiliated/hugg) |
| 04:40.49 | *** part/#debian mig5 (~mig5@pdpc/supporter/professional/mig5) |
| 04:41.06 | *** join/#debian waynr (~waynr@ma.sdf.org) |
| 04:44.32 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 04:48.39 | *** part/#debian winterss (~wint@c-71-228-128-169.hsd1.ga.comcast.net) |
| 04:49.06 | *** join/#debian timahvo1 (~rogue@mail.cickenya.com) |
| 04:51.06 | *** join/#debian Dalgas (~pdj@dce.dongenergy.dk) |
| 04:56.00 | *** mode/#debian [+l 1414] by debhelper |
| 04:57.39 | *** join/#debian oish (~charlie@217.169.22.159) |
| 04:57.48 | *** join/#debian sandman13 (~sandman@202.51.84.21) |
| 04:59.29 | TyrfingMjolnir | When did the bash flaw occur? |
| 04:59.40 | TyrfingMjolnir | How can I compile bash for debian 2.2 PPC? |
| 04:59.52 | *** join/#debian DanMAbraham (~br0kenarr@host86-157-20-123.range86-157.btcentralplus.com) |
| 05:00.00 | *** join/#debian dthrvr (~dthrvr@187-072-195-153.static.ctbctelecom.com.br) |
| 05:01.47 | *** join/#debian zoso (~arvind@unaffiliated/arvind-khadri/x-2237230) |
| 05:03.45 | Artemis3 | TyrfingMjolnir, went public sep 24 i think |
| 05:04.10 | TyrfingMjolnir | And affects bash since version 1? |
| 05:04.48 | Artemis3 | TyrfingMjolnir, you can try running that code published in arstechnica to find out. Remember you could also just change your default shell :) |
| 05:05.06 | TyrfingMjolnir | Will not work for changing default shell? |
| 05:05.13 | TyrfingMjolnir | It will not affect cron |
| 05:05.17 | TyrfingMjolnir | dhcp |
| 05:05.25 | TyrfingMjolnir | and alot of other daemons |
| 05:05.55 | Artemis3 | debian 2.2 brings memories |
| 05:06.06 | *** join/#debian mennea (~textual@5.102.253.64) |
| 05:06.15 | TyrfingMjolnir | At least I did not have to beg to avoid installing GUI at that time |
| 05:06.41 | *** join/#debian KaaK (~Kevin@wsip-98-188-52-104.ks.ks.cox.net) |
| 05:06.42 | TyrfingMjolnir | How can I see the dependencies for bash? |
| 05:06.43 | Artemis3 | TyrfingMjolnir, umm.. expert install nowdays you can just skip installing desktops |
| 05:06.51 | TyrfingMjolnir | I do |
| 05:06.55 | TyrfingMjolnir | base install |
| 05:06.56 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 05:06.58 | TyrfingMjolnir | and apt-get from there |
| 05:07.00 | *** join/#debian Lildirt (~Lildirt@lildirt.com) |
| 05:07.06 | Artemis3 | that works |
| 05:07.10 | *** join/#debian freedomrun (~quassel@unaffiliated/freedomrun) |
| 05:07.14 | zoso | Is there a fix available in the repo yet? |
| 05:07.25 | TyrfingMjolnir | Where is the source? |
| 05:07.32 | TyrfingMjolnir | and what are the dependencies? |
| 05:07.42 | Artemis3 | from what i know they pushed the fix yesterday |
| 05:08.00 | TyrfingMjolnir | I would like to compile for MacOS X 10.6, 10.7, 10.8, debian 2.2 PPC, debian 3.x PPC, Ubuntu 10.04 LTS |
| 05:08.17 | Artemis3 | ubuntu had their own patch pushed as well |
| 05:08.20 | TyrfingMjolnir | Artemis3: Did not show bash in any of my updates |
| 05:08.26 | TyrfingMjolnir | ubuntu pushed for 14.04 |
| 05:08.29 | *** join/#debian Paradisee (~quassel@93-45-163-99.ip103.fastwebnet.it) |
| 05:08.31 | TyrfingMjolnir | but not 12.04 and 10.04 |
| 05:08.38 | Artemis3 | i can confirm 12.04 |
| 05:08.43 | TyrfingMjolnir | Hmmm |
| 05:08.50 | TyrfingMjolnir | Did not happen on my update |
| 05:09.00 | Artemis3 | well check again, change mirror, etc. |
| 05:09.11 | TyrfingMjolnir | security.ubuntu |
| 05:09.23 | *** join/#debian unglid (~unglid@83.240.200.90) |
| 05:09.25 | Artemis3 | ask in #ubuntu :3 |
| 05:09.32 | TyrfingMjolnir | Tired og asking |
| 05:09.38 | TyrfingMjolnir | Would like to compile on my own |
| 05:10.27 | *** join/#debian geoextra (~geoextra@ec2-54-74-128-115.eu-west-1.compute.amazonaws.com) |
| 05:11.56 | TyrfingMjolnir | How do I find its dependencies? |
| 05:11.56 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 05:13.15 | blackjack | hello guys
by the way, i want you to be alerted with this. is debian susceptible with this kind of vulnerability? (i hope some advance tech guys are here to see) --> https://www.invisiblethreat.ca/2014/09/cve-2014-6271/ |
| 05:13.21 | *** join/#debian vilmibm (~vilmibm@75-144-232-233-Atlanta.hfc.comcastbusiness.net) |
| 05:13.46 | lnovy | blackjack: *bitchslap* |
| 05:14.18 | blackjack | lol |
| 05:15.27 | *** join/#debian koderok (~koderok@14.141.153.182) |
| 05:15.28 | TyrfingMjolnir | # dpkg -l | grep bash |
| 05:15.28 | TyrfingMjolnir | ii bash 4.1-3 The GNU Bourne Again SHell |
| 05:16.13 | Artemis3 | blackjack, https://www.debian.org/security/2014/dsa-3035 TyrfingMjolnir http://www.ubuntu.com/usn/usn-2362-1/ |
| 05:16.43 | *** join/#debian sharky (~sharky@unaffiliated/sharky) |
| 05:17.17 | *** join/#debian kevinbenko (~kevinbenk@24-116-209-115.cpe.cableone.net) |
| 05:17.40 | Artemis3 | apt-get update && apt-get install --only-upgrade bash should suffice |
| 05:17.45 | Cpuroast | it's fixed on all 3 |
| 05:17.48 | Cpuroast | https://security-tracker.debian.org/tracker/CVE-2014-7169 |
| 05:17.55 | *** join/#debian kevinbenko (~kevinbenk@24-116-209-115.cpe.cableone.net) |
| 05:18.03 | blackjack | cool. just wanted to know :) thanks |
| 05:18.46 | Cpuroast | and for jessie, apt-get install bash/unstable did the trick |
| 05:18.46 | Cpuroast | :) |
| 05:20.22 | *** join/#debian mumixam (~m@unaffiliated/mumixam) |
| 05:22.02 | *** join/#debian PcJamesy (~James@c-98-235-35-37.hsd1.pa.comcast.net) |
| 05:22.02 | *** join/#debian PcJamesy (~James@unaffiliated/pcjamesy) |
| 05:23.20 | *** join/#debian asakura (~asakura@gateway/tor-sasl/asakura) |
| 05:23.51 | blackjack | Artemis3: how do i exclude iceweasel not to update upgrade, and want everthing to update/upgrade? can you show me the correct command? |
| 05:24.45 | blackjack | coz i have two packages that are installed on a different than normal, one is a sid install and one is from backports |
| 05:25.46 | dondelelcaro | !tell blackjack -about hold |
| 05:25.59 | blackjack | tnx |
| 05:32.20 | *** join/#debian axisys (~axisys@ip68-98-187-142.dc.dc.cox.net) |
| 05:32.41 | *** part/#debian Jaood (Jaood@2600:3c02::f03c:91ff:fe6e:7e43) |
| 05:33.09 | *** join/#debian astrofog (~astrofog@178-221-31-75.dynamic.isp.telekom.rs) |
| 05:33.17 | *** join/#debian soulz (~soulz@c-1ff770d5.01-275-67626721.cust.bredbandsbolaget.se) |
| 05:34.56 | *** join/#debian veek (~veek@unaffiliated/veek) |
| 05:35.12 | *** join/#debian vital (~lymmz@178.238.214.34) |
| 05:35.24 | veek | is wheezy bash 4.2.37(1) vulnerable to the bug |
| 05:35.42 | *** join/#debian mishal (~Miranda@228.34.broadband9.iol.cz) |
| 05:37.23 | CarlGel | I'm attempting to make a key combination execute a command. I'm running xfce. I go through the keyboard settings, set the key combination, and nothing happens. |
| 05:37.29 | CarlGel | even the default ones appear to do nothing |
| 05:37.48 | *** join/#debian zymurgy (~zymurgy@li607-220.members.linode.com) |
| 05:38.06 | *** join/#debian Sauvin (~Sauvin@about/linux/staff/sauvin) |
| 05:38.17 | *** join/#debian neersighted (bjorn@hydrogen.neersighted.com) |
| 05:38.32 | *** join/#debian llucenic (~Thunderbi@83-168-146-158.rev.swan.sk) |
| 05:39.23 | *** join/#debian Dorfmeister (~Vlad@213.123.113.180) |
| 05:39.25 | *** join/#debian mennea (~textual@31.210.186.90) |
| 05:40.32 | *** join/#debian bkjr (~bk@180.149.99.88) |
| 05:41.41 | *** join/#debian jmigpin (~jorge@bl7-169-12.dsl.telepac.pt) |
| 05:43.09 | *** join/#debian Incantation (~pestilenc@24-217-92-207.dhcp.stls.mo.charter.com) |
| 05:43.55 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 05:50.55 | *** join/#debian bariumbitmap (~nbeaver@162-202-48-157.lightspeed.cicril.sbcglobal.net) |
| 05:51.58 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 05:55.03 | *** join/#debian Scall (~chat@unaffiliated/scall) |
| 05:56.51 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 05:58.20 | *** join/#debian catpigger (~catpig@p54BD68DF.dip0.t-ipconnect.de) |
| 05:59.00 | *** join/#debian richac (~richac@pool-71-167-34-81.nycmny.fios.verizon.net) |
| 05:59.05 | richac | was there a 3rd bash update? |
| 05:59.16 | richac | howdy all |
| 06:00.58 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 06:01.40 | *** join/#debian Ratboy (~ratboy@essn-5d83857f.pool.mediaWays.net) |
| 06:02.22 | *** join/#debian ongolaBoy (~ongolaBoy@unaffiliated/ongolaboy) |
| 06:04.04 | *** join/#debian vook (46d1c5df@gateway/web/freenode/ip.70.209.197.223) |
| 06:05.11 | veek | richac, just updated.. heh it was on the BBC which was how i found out |
| 06:05.28 | richac | lol |
| 06:05.34 | richac | ya i checked ints 1 1.1 and 1.2 now |
| 06:05.51 | *** join/#debian argoneus (~argoneus@unaffiliated/argoneus) |
| 06:06.02 | argoneus | hello |
| 06:06.15 | veek | scary since i enabled inet-banking recently and though because i run linux i was safe |
| 06:06.39 | veek | of course i don't run apache and inbound ssh+suid scripts.. |
| 06:06.47 | vook | I seem to have blundered with a VPS - created and installed a bash package from source which removed /usr/bin/bash (placed the new instance in /usr/local/bin/bash). Now, of course, I cannot log in, no shell. Also root access is disabled, so no scp. Is there a way to get around this - specify a different shell using ssh or in a .profile or the like? |
| 06:06.49 | argoneus | I have my own vps, with user accounts "argoneus", "website" and "gameserver", which I use for various things, and then there are other people having their own accounts, what is the best way for these three accounts to be able to reach eachother's directories (like read etc), but don't let the other vps users read my folders? |
| 06:07.15 | *** join/#debian d4ryus__ (~d4ryus@p5498BFFC.dip0.t-ipconnect.de) |
| 06:07.18 | vook | interesting, never seen veek around here before... |
| 06:07.41 | veek | hey vook, yeah i don't do #linux #debian much |
| 06:07.49 | veek | heh cool nic :p |
| 06:08.47 | *** join/#debian BotaniCar (~BotaniCar@93-138-64-216.adsl.net.t-com.hr) |
| 06:09.30 | veek | Stephan Chazelas.. that guy digs up a "lot of" bugs bash/lynx(mime-type vulns) |
| 06:10.07 | vook | argoneus: just create a group and add those three users to the group, then change the group owner for the directory to match the new group, and add g+rx permissions to the directory. |
| 06:10.08 | *** join/#debian Bwithmore14 (~Bwithmore@222.127.85.183) |
| 06:10.55 | argoneus | vook: alright, cheers! |
| 06:11.03 | *** part/#debian argoneus (~argoneus@unaffiliated/argoneus) |
| 06:11.20 | *** join/#debian Atlas (atlas@unaffiliated/atlas-) |
| 06:13.37 | *** join/#debian bal (~Thunderbi@86.125.63.66) |
| 06:13.57 | *** join/#debian ernini (~reni@145-24-145-247.dyn.hro.nl) |
| 06:14.03 | richac | i heard he caught a teenage hacker exploiting it? |
| 06:14.05 | *** join/#debian rustyraptor_ (~rustyrapt@128.204.252.114) |
| 06:14.11 | ernini | hihi |
| 06:14.12 | ernini | ii bash 4.3-9.2 GNU Bourne Again SHell |
| 06:14.20 | ernini | should this one be safe? |
| 06:14.53 | ernini | unstable branch that is |
| 06:14.54 | *** join/#debian anoy (~Thunderbi@60.223.228.88) |
| 06:15.33 | *** join/#debian krispis78 (~kvirc@84.120.67.129.dyn.user.ono.com) |
| 06:16.00 | *** join/#debian tormen (~me@lib59-5-82-243-109-205.fbx.proxad.net) |
| 06:16.00 | *** mode/#debian [+l 1420] by debhelper |
| 06:16.12 | krispis78 | hola alguien sabe por que no me va el plugin de flash en chrome |
| 06:17.16 | veek | ernini, env COLOR='() { :;}; echo vulnerable' bash -c "echo foo" |
| 06:17.45 | ernini | veek: yeh i tested something simular and its echoing foo |
| 06:17.48 | ernini | so thats still vulnerable hm |
| 06:18.31 | *** join/#debian abll (~abll@ip1.c213.obr204.cust.comxnet.dk) |
| 06:18.46 | ernini | Preparing to replace bash 4.3-9.1 (using .../archives/bash_4.3-9.2_i386.deb) ... |
| 06:18.51 | ernini | expected that to be the fixed one |
| 06:19.32 | ernini | ah wait |
| 06:19.35 | *** part/#debian krispis78 (~kvirc@84.120.67.129.dyn.user.ono.com) |
| 06:19.37 | ernini | i still had the file echo in my homedir |
| 06:19.42 | ernini | :/ d0h |
| 06:19.48 | *** join/#debian lionroars (~lionroars@anon-32-151.vpn.ipredator.se) |
| 06:19.55 | lionroars | did debian fix bash issue ? |
| 06:20.16 | *** join/#debian Ad1_RnR (~Adrian_Rn@emv34.internetdsl.tpnet.pl) |
| 06:20.35 | richac | i dunno, but i'm using mint, and with an ubuntu repo, i got 3 bash updates |
| 06:20.43 | richac | or 2 not sure lol |
| 06:20.52 | *** join/#debian mennea (~textual@31.210.186.90) |
| 06:21.02 | *** join/#debian jgeek (~janith@fsf/member/jgeek) |
| 06:21.32 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 06:22.00 | richac | 4.3-7-ubuntu1 1.1 and 1.2 |
| 06:22.11 | veek | yeah, apt-get install --only-upgrade bash |
| 06:22.19 | jgeek | hello all, I just want to know how to fix bash shellshock in debian wheezy, I tried by downloading the latest bash source, but didn't work |
| 06:22.34 | veek | fortunately it won't affect home users |
| 06:23.04 | richac | could affect my printer and router possibly |
| 06:23.05 | veek | imagine having to bkup and do a reinstall guh! |
| 06:23.07 | richac | and dhclient |
| 06:23.17 | *** join/#debian chris062689 (~chris@65.33.85.92) |
| 06:23.43 | jgeek | veek: I have a debian server |
| 06:24.45 | *** join/#debian debconf_ (~deb@gateway/tor-sasl/debconf) |
| 06:26.00 | *** mode/#debian [+l 1414] by debhelper |
| 06:26.50 | *** join/#debian troete (~troete@osbk-4db16582.pool.mediaWays.net) |
| 06:27.47 | *** join/#debian rgr (~user@host-2-97-250-186.as13285.net) |
| 06:28.13 | veek | yeah modems but i just set my passwd for that |
| 06:28.46 | veek | i'm not going to mess with OpenWRT assuming i could patch that |
| 06:29.16 | richac | apparently if this works ABCD='() { echo this is abcd; }' bash -c 'ABCD' your still vulnerable? |
| 06:29.16 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 06:29.22 | richac | which i am i guess :( |
| 06:29.30 | *** join/#debian Selfarian (~Selfarian@zulu1473.server4you.de) |
| 06:29.35 | *** join/#debian LanDi (~LanDi@186.232.216.90) |
| 06:29.40 | *** join/#debian rysiekpl (~quassel@188.165.233.29) |
| 06:29.42 | *** join/#debian enaqx (~enaqx@user-206.98.infomir.com.ua) |
| 06:29.49 | *** join/#debian weissschloss (~viskestel@li607-220.members.linode.com) |
| 06:31.08 | *** join/#debian kain88 (~smuxi@kel30.kel.studentenwerk-goettingen.de) |
| 06:31.10 | *** join/#debian ponyofdeath (~vladi@cpe-66-27-98-26.san.res.rr.com) |
| 06:31.20 | *** join/#debian xvqq17 (~maxiu@c-50-139-98-10.hsd1.or.comcast.net) |
| 06:31.21 | *** join/#debian dondelelcaro (~don@hemlock.ucr.edu) |
| 06:31.24 | *** join/#debian JonathanS (~JonathanD@freenode/staff/jonathand) |
| 06:31.36 | *** part/#debian akar (~root@119.82.230.178) |
| 06:31.58 | *** join/#debian xiqy (~xiqsjvfy@fsf/member/xiqsjvfy) |
| 06:32.01 | *** join/#debian brlancer (~brlancer@99-98-209-99.lightspeed.tukrga.sbcglobal.net) |
| 06:33.06 | *** join/#debian acemi (~acemi@unaffiliated/acemi) |
| 06:33.18 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 06:33.50 | *** join/#debian CynicGalahad (~hugo.corr@2001:9b0:14a:10:2ad2:44ff:fe5b:10d0) |
| 06:34.26 | *** join/#debian gokul (~gokul@218.248.24.19) |
| 06:34.35 | *** join/#debian Lolocafera (~afera@ANantes-256-1-165-60.w90-25.abo.wanadoo.fr) |
| 06:35.17 | *** join/#debian Mmike (~mario@static.158.44.47.78.clients.your-server.de) |
| 06:35.21 | *** join/#debian WizardGed (~WizardGed@mumble.wizardged.sx) |
| 06:35.42 | *** join/#debian Xanthor (~Xanthor@81-67-88-130.rev.numericable.fr) |
| 06:36.00 | *** mode/#debian [+l 1408] by debhelper |
| 06:36.09 | *** join/#debian DanDare (~Rodrigo@pdpc/supporter/active/arduguy) |
| 06:36.18 | *** join/#debian DrRodneyMckay (~drrodneym@202.161.67.166) |
| 06:36.29 | *** join/#debian uber (~uber@ma.sdf.org) |
| 06:36.59 | *** join/#debian uber (~uber@ma.sdf.org) |
| 06:36.59 | DanDare | Hello. So, about http://arstechnica.com/security/2014/09/bug-in-bash-shell-creates-big-security-hole-on-anything-with-nix-in-it/ apt-get upgrade and reboot will be enough to fix this ? |
| 06:38.27 | *** join/#debian KTL (~KTL2@213.219.168.18.adsl.dyn.edpnet.net) |
| 06:39.07 | *** join/#debian Arsenik (~Cyanure@eduroam-65-117.loria.fr) |
| 06:39.50 | Sleepy63 | i had to add squeeze-lts into my /etc/apt/sources.list |
| 06:40.15 | Sleepy63 | old server has been missing updates for a while it seems :( |
| 06:40.43 | anonnumberanon | is lighttpd the right Apache to get from the repos on Wheezy? |
| 06:41.01 | anonnumberanon | they also have mini and micro-httpd |
| 06:41.12 | anonnumberanon | for not a huge website |
| 06:41.23 | anonnumberanon | on 512MB of ram |
| 06:41.28 | anonnumberanon | ssd |
| 06:41.54 | rgr | anonnumberanon: right for what? |
| 06:41.58 | *** join/#debian jeekl (~crz@unaffiliated/jeekl) |
| 06:42.03 | Sleepy63 | lighttpd is a completely different program from Apache |
| 06:42.08 | *** join/#debian jehan (~jehan@195.244.237.197) |
| 06:42.11 | anonnumberanon | rgr a decent website |
| 06:42.22 | anonnumberanon | oh man Apache I though was httpd |
| 06:42.23 | rgr | I dont see the link between lightppd and apache other than they are web servers |
| 06:42.27 | anonnumberanon | rigth |
| 06:42.31 | DanDare | anonnumberanon, the right Apache to get on wheezy is getting Apache :) |
| 06:42.36 | anonnumberanon | heh |
| 06:42.46 | rgr | its called apaache2. |
| 06:42.52 | Sleepy63 | nginx ftw |
| 06:43.11 | *** join/#debian Phyks (~Phyks@phyks.me) |
| 06:43.12 | *** join/#debian blazed (~blazed@gateway/tor-sasl/bninja) |
| 06:43.14 | anonnumberanon | rgr, not in this repo |
| 06:43.29 | rgr | there's no apache in wheezy? |
| 06:43.39 | DanDare | anonnumberanon, I guess your considering his typo? apache2 |
| 06:43.40 | anonnumberanon | not under that name |
| 06:43.43 | rgr | then I stand corrected. I used to use it in it. Maybe its removed. |
| 06:43.52 | *** join/#debian Arrowmaster (~Arrowmast@WoWUIDev/WoWAce/ResponsibleForEverythingAndNothing/Arrowmaster) |
| 06:44.02 | anonnumberanon | oh heh, those names are a little weird so I thought he meant it that way. |
| 06:44.10 | anonnumberanon | kinda tired here |
| 06:44.13 | anonnumberanon | heh |
| 06:44.22 | rgr | https://www.linode.com/docs/websites/apache/apache-2-web-server-on-debian-7-wheezy/ |
| 06:44.29 | rgr | strange. |
| 06:44.44 | anonnumberanon | Yeah found it. |
| 06:44.45 | rgr | apache2 seems to be there |
| 06:45.16 | rgr | try google and synaptic search. And "for a good website" suggests more background reading ;) |
| 06:46.16 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 06:46.38 | *** join/#debian jholden (~jholden@kattfest.se) |
| 06:47.29 | *** join/#debian chatsiri_ (~chatsiri_@171.5.130.155) |
| 06:47.48 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 06:49.22 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 06:49.34 | *** join/#debian Slydder (~chuck@ip1f13dea6.dynamic.kabel-deutschland.de) |
| 06:49.39 | *** join/#debian Ratboy (~ratboy@essn-d9bb67c0.pool.mediaWays.net) |
| 06:50.15 | *** join/#debian satta_satta (~thomas@pd95c7d39.dip0.t-ipconnect.de) |
| 06:50.55 | *** join/#debian mennea (~textual@31.210.186.90) |
| 06:50.55 | rwp | DanDare, No need to reboot. Just install the fixed bash. If you don't have Apache CGI then you probably can't be exploited anyway. |
| 06:51.07 | rwp | Wheezy definitely has apache2 in it. |
| 06:51.30 | DanDare | rwp, yeah got that about the CGI participation. thanks |
| 06:52.19 | rwp | A lot of people are in a panic because their shell has this bug. But when they are on a single user laptop it is hard for me to think it is too scary there. |
| 06:52.35 | DanDare | rwp, true |
| 06:53.26 | DanDare | I should be scared though |
| 06:53.35 | rwp | The scare factor goes up with the size of the site. If you were Google and had vulnerable CGI that is where there would be a scary problem. |
| 06:53.48 | *** join/#debian CrypticSquared (~CrypticS_@unaffiliated/crypticsquared) |
| 06:54.09 | rwp | DanDare, Do you operate a network facing CGI page? |
| 06:54.18 | DanDare | you mean, thats plain scary and horrifying |
| 06:54.21 | anonnumberanon | rgr right now the website is only for a workspace for my team of robot makers and also as a portfolio for potential employers |
| 06:54.40 | *** join/#debian anoy (~Thunderbi@60.223.228.88) |
| 06:54.41 | DanDare | rwp, i do operate a webserver and mailserver |
| 06:54.51 | rwp | Sure. CGI? |
| 06:54.54 | DanDare | yeah |
| 06:55.04 | rwp | CGI using bash scripts? |
| 06:55.08 | *** join/#debian bakaneko (~d@kuzh.polytechnique.fr) |
| 06:55.19 | rwp | If so then you should be concerned. Anyone could run a command as www-data. |
| 06:55.20 | DanDare | rwp, not essential stuff but yeah have some |
| 06:55.27 | rwp | Fortunately www-data is a non-priviledged user. |
| 06:55.43 | DanDare | true |
| 06:55.43 | rwp | So can't do much. Unless there is a second as yet unknown exploit available. |
| 06:55.49 | DanDare | anyway ... |
| 06:56.00 | *** mode/#debian [+l 1415] by debhelper |
| 06:56.01 | anonnumberanon | man I forgot how on a fresh Wheezy you need to add users to the sudoers file |
| 06:56.20 | *** join/#debian suspicious_eel (~laite@193.184.6.118) |
| 06:56.23 | DanDare | "fixing it" is the only viable option. I mean, as user, doing the update |
| 06:56.35 | anonnumberanon | gnight |
| 06:56.41 | rwp | The one that surprised me was gitweb.cgi. It is not a bash script. But it must call bash somewhere along the way. Because gitweb.cgi was reported as triggering the exploit. |
| 06:56.44 | *** join/#debian troete (~troete@osbk-4d087a3c.pool.mediaWays.net) |
| 06:57.02 | DanDare | rwp, yeah, been reading about that |
| 06:57.55 | rwp | But on Debian /bin/sh is dash not bash so any sh -c "" or #!/bin/sh should be okay. So gitweb.cgi must call bash explicitly somewhere in the code path. Strange. |
| 06:57.58 | *** join/#debian roestzwiee (~kvirc@dslb-088-067-165-215.088.067.pools.vodafone-ip.de) |
| 06:58.34 | *** join/#debian rauls (~rsalinas@212.118.209.82) |
| 07:00.18 | *** join/#debian abchirk (~abchirk@p57A0BF93.dip0.t-ipconnect.de) |
| 07:01.35 | *** join/#debian jeredepp (d417e1a2@gateway/web/freenode/ip.212.23.225.162) |
| 07:01.52 | *** join/#debian Brist01 (~brist@unaffiliated/brist01) |
| 07:02.37 | DanDare | rwp, got this https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/ ? |
| 07:03.00 | *** join/#debian WifiBrain (~brain@cpc22-mfld14-2-0-cust129.13-1.cable.virginm.net) |
| 07:03.40 | rwp | /sbin/dhclient-script is a bash script and is run on the local mobile machine (laptop) using environment variables that may have come from a malicious DHCP server. |
| 07:04.00 | *** join/#debian Ad1_RnR (~Adrian_Rn@emv34.internetdsl.tpnet.pl) |
| 07:04.09 | rwp | But... That isn't an attack against a *server*. |
| 07:04.13 | *** join/#debian avvs (~avvs@gateway/tor-sasl/avvs) |
| 07:04.20 | jeredepp | Anybody can explain me the buzz about the Shellshock vulnerability? I mean aren't we all responsible to sanitize strings before passing it on to shell? All the specs i read, i can't see an actual problem there |
| 07:04.28 | DanDare | anyway, now people will just be imaginative to start doing all kind of nasty stuff |
| 07:04.32 | rwp | It is an attack against a GNU/Linux laptop by someone who has set up a malicious dhcp server. |
| 07:05.17 | rwp | How many coffee shops and airports are going to do that? Just doesn't feel like an issue of great problem to me. |
| 07:05.37 | rwp | jeredepp, Here is a good reference: http://seclists.org/oss-sec/2014/q3/649 |
| 07:05.44 | DanDare | jeredepp, im not the right person to advocate on this but seems that security is made of so many layers |
| 07:05.52 | rwp | jeredepp, And https://securityblog.redhat.com/2014/09/24/bash-specially-crafted-environment-variables-code-injection-attack/ |
| 07:06.00 | *** mode/#debian [+l 1421] by debhelper |
| 07:06.10 | DanDare | so, a nasty bug will be a dangerous thing regardless |
| 07:07.13 | jeredepp | Allright i see, but this needs a man on the inside, our projectmanagers going apeshit about that bug -.- |
| 07:07.16 | *** join/#debian lesta (~user@unaffiliated/jimlesta) |
| 07:07.45 | jeredepp | TDIL: give a bug a fancy name and watch the monkeys scream |
| 07:07.59 | rwp | Makes for good news on an otherwise slow news day! |
| 07:08.07 | rwp | And it isn't without danger. |
| 07:08.13 | jeredepp | no it's not |
| 07:08.35 | rwp | The biggest risk as I see it is that an attacker could peek at a config.inc.php file that couldn't otherwise be seen. |
| 07:08.50 | *** join/#debian pchero (~pchero@109.70.54.56) |
| 07:08.51 | rwp | Could get access to database passwords. Could then get access to a database. |
| 07:08.58 | *** join/#debian ekuric (elvir@nat/redhat/x-qinxxgrgsrbolmvn) |
| 07:08.59 | DanDare | world is not perfect, ignorance or lack of knowledge is everywhere so ... |
| 07:09.01 | jeredepp | but if you're the only one with access to your network, you'll normally don't have to worry that much. If someone is in my network i'm lost anyways |
| 07:09.01 | rwp | That type of an attack seems very dangerous. |
| 07:09.04 | *** join/#debian farn (frantk@fran.tk) |
| 07:09.22 | DanDare | jeredepp, thats true |
| 07:09.28 | *** join/#debian Xiti` (~Xiti-@unaffiliated/xiti) |
| 07:09.29 | rwp | Yes. The classic horror story. The call is coming from within your own house. |
| 07:09.42 | jeredepp | rwp: bamm bammm baaaaaammmmmm |
| 07:09.55 | *** join/#debian pchero (~pchero@109.70.54.56) |
| 07:10.10 | *** join/#debian richac (~richac@pool-71-167-34-81.nycmny.fios.verizon.net) |
| 07:10.28 | DanDare | fortunately im the only one who touch the thing. If anything goes bad I know exactly who to blame |
| 07:10.46 | *** join/#debian pchero (~pchero@109.70.54.56) |
| 07:10.51 | *** join/#debian anoy (~Thunderbi@60.223.228.88) |
| 07:11.00 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 07:11.29 | *** join/#debian pchero (~pchero@109.70.54.56) |
| 07:12.00 | rwp | I think this hole will got closed generally pretty quickly. But it will still be a danger to old forgotten and unmaintained machines. |
| 07:12.16 | richac | so I changed my login shell to dash, I don't like it |
| 07:12.16 | DanDare | as usual? :p |
| 07:12.31 | rwp | It is all of those unmaintained older machines that were set up on a contract years ago and not updated now. Those are going to be a problem. |
| 07:12.34 | *** join/#debian aswen (~aswen@smtp2.nedap.com) |
| 07:13.10 | *** join/#debian fosser_josh (~prathames@46.33.140.207) |
| 07:13.11 | rwp | Older Debian machines had /bin/sh symlinked to bash to so on the older machines #!/bin/sh and sh -c "" are vulnerable too. |
| 07:13.34 | rwp | richac, /bin/dash isn't really meant to be a user shell. It is designed to be a lean fast #!/bin/sh shell. |
| 07:13.52 | jeredepp | rwp: windows user gonna be like "i told you to use windows" |
| 07:13.55 | rwp | richac, I wouldn't use it as a user shell. Your choice though. Probably bash or zsh would be better. |
| 07:14.02 | richac | ya i see that now |
| 07:14.05 | richac | oh zsh hmm |
| 07:14.41 | rwp | jeredepp, Not like Windows hasn't been a security nightmare for many years. |
| 07:15.03 | oskie_ | does anyone have experience with anacron? I start it and it runs cron.daily etc, but then it just exits and won't run anything again until I start it the next day. That seems to defeat its whole purpose?! |
| 07:15.38 | rwp | oskie_, It is only supposed to run cron.daily once a day. So starting it and letting it run is what it is supposed to do. |
| 07:15.42 | jeredepp | No windows is like apple - totally invincible against any type of attacks /sarcasm |
| 07:15.54 | DanDare | heh |
| 07:16.04 | oskie_ | rwp: I know, but it doesn't even do that! |
| 07:16.33 | jeredepp | well thanks for the infos, i'll STFU now and go back to my cellar where my pizza is getting cold and my coke stale |
| 07:16.34 | rwp | Okay. Please say what you observe to conclude this. |
| 07:16.49 | rwp | jeredepp, Enjoy your dinner! |
| 07:16.52 | oskie_ | rwp: It seems anacron assumes that you either 1) start/stop (boot) the computer every day OR 2) keep it running over night. There's a third scenario which is much more common: 3) the computer is put to sleep every day |
| 07:16.59 | *** join/#debian ahodzic (~havoc@2a00:1630:13:1d3:e588:2e00:a6a4:bfdb) |
| 07:17.25 | rwp | Actually anacron is designed for laptops which are asleep or off and booted irregularly. |
| 07:17.44 | *** join/#debian weissschloss (~viskestel@li607-220.members.linode.com) |
| 07:17.54 | oskie_ | rwp: It seems anacron does not detect that suspend/unsuspend thing when run inside a VM |
| 07:18.02 | oskie_ | suspend/resume |
| 07:18.20 | rwp | Hmm... Is your clock getting updated okay? It all depends upon the system time. |
| 07:18.57 | rwp | I assume you have "grep anacron /var/log/syslog" to look to see how often it runs and what it runs. |
| 07:18.59 | *** part/#debian veek (~veek@unaffiliated/veek) |
| 07:19.16 | *** join/#debian signius (~signius@cpc27-heme10-2-0-cust132.9-1.cable.virginm.net) |
| 07:19.18 | oskie_ | rwp: clock is correct... but I don't think the powermanagement stuff is correct inside VirtualBox |
| 07:19.25 | rwp | If it were me I would put a script in /etc/cron.daily/mailme that sent me an email when it ran. |
| 07:19.54 | lnovy | I don't think PM matters for anacron at all |
| 07:19.55 | rwp | I haven't been using anacron in VMs so maybe I am missing something interesting there. But I am using it on laptops. |
| 07:19.56 | signius | Is there any ETA on Bash updates for Debian Squeeze ? |
| 07:20.01 | oskie_ | rwp: yeah, it only runs when I manually start it (/etc/init.d/anacron start) for the last 2 weeks |
| 07:20.12 | rwp | signius, Yes. Done. Out last night. |
| 07:20.17 | *** join/#debian enZer0 (~0ilm@tjure-mac.netzquadrat.de) |
| 07:20.24 | rwp | signius, Have you put squeeze-lts in your sources.list ? |
| 07:20.44 | rwp | signius, https://wiki.debian.org/LTS/Using |
| 07:20.46 | oskie_ | rwp: I found a debian bug on this so I'll look into this. thanks for the help! |
| 07:20.48 | signius | rwp, Hmmm thats odd i checked for updates last night & just now |
| 07:21.06 | *** join/#debian dragon__ (~dragon@S0106002129af1abb.vc.shawcable.net) |
| 07:21.07 | *** join/#debian mennea (~textual@31.210.186.90) |
| 07:21.09 | signius | rwp, ah no i have not, i will do that now....thanks for the heads up |
| 07:21.19 | rwp | oskie_, Bug number? (I am curious) |
| 07:22.12 | *** join/#debian GGflags (~lolilol@LMontsouris-656-01-130-32.w193-253.abo.wanadoo.fr) |
| 07:23.14 | rwp | oskie_, Hmm... /etc/init.d/anacron start should only run the boot time tasks. However if it has been more than a day that should also trigger running the daily jobs. |
| 07:23.17 | oskie_ | rwp: #744753. my workaround will be to update /etc/cron.d/anacron to run it hourly |
| 07:23.24 | *** join/#debian avvs (~avvs@gateway/tor-sasl/avvs) |
| 07:23.27 | rwp | oskie_, And then after that it shouldn't run another daily run until 24 hours have elapsed. |
| 07:23.52 | *** join/#debian Tiffon (~name@unaffiliated/tiff0n) |
| 07:23.58 | rwp | oskie_, BTW you should use "service anacron start" rather than "/etc/init.d/anacron start" since service cleans the environment first. |
| 07:24.11 | rwp | And we are all about having clean environments today, what with the shell bug and all. |
| 07:24.55 | oskie_ | rwp: ah, ok, interesting. (that's why restarting certain services [icinga] after boot fixes issues with PATH.) |
| 07:25.46 | *** join/#debian aPices (~aPices@73.166.58.36) |
| 07:26.01 | *** mode/#debian [+l 1428] by debhelper |
| 07:26.12 | rwp | Well... If you need a different PATH and it isn't configured at boot but you have it in your shell then yes the leakage would "fix" it. But it is still broken by config and needs to be fixed so that it will work on a reboot. |
| 07:26.13 | *** join/#debian jargon (~jargon@unaffiliated/jargon-) |
| 07:26.51 | oskie_ | rwp: right. the thing is, if icinga is started on boot its PATH will not include /usr/local/bin |
| 07:26.59 | *** join/#debian harobed (~harobed@equ57-1-78-235-121-109.fbx.proxad.net) |
| 07:27.22 | rwp | oskie_, Thanks for the Bug#744753 reference. Interesting. That is a systemd related bug. I will add it to my list. |
| 07:27.28 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 07:27.41 | *** join/#debian Phil-Work (~phil@2a02:b90:7004:4000::b5bd) |
| 07:27.45 | oskie_ | I see many scripts in /etc/init.d/ where PATH is set to include /usr/local. I never understood the root cause of the issue though |
| 07:27.54 | rwp | oskie_, By default none of the /etc/init.d scripts will have /usr/local/bin in the path. For various reasons. If you want that then you will need to modify the config to make that happen as a local modification. |
| 07:28.33 | rwp | The design is a compartmentalization and somewhat arbitrary. Debatable. But the thoughts go like this... |
| 07:29.10 | oskie_ | rwp: oh, I see |
| 07:29.10 | rwp | The system owns /usr/bin and friends at that level. The only things installed there are dpkg installed things. So if PATH only points to them then a dpkg installed package has a known environment. |
| 07:29.41 | rwp | The /usr/local tree is for the local admin. Or for a person in the staff group. (staff group is very useful and convenient.) |
| 07:30.25 | rwp | A staff person might install a local newer version of a program in /usr/local/bin. That _might_ (not will but has the capability) to break a system installed something that doesn't know about that newer version thing. |
| 07:30.45 | rwp | So by default most maintainers don't include /usr/local/bin in the /etc/init.d daemon's PATH. |
| 07:30.50 | rwp | Although there are some that do. |
| 07:30.59 | oskie_ | rwp: ah, true. that's a very useful "feature" in *nix |
| 07:31.19 | TomyWork | apt-get update says it cant resolve a host that nslookup can resolve. in order to analyze the situation i wanted to strace it, but it's just to spammy |
| 07:31.26 | *** join/#debian zerick (~zerick@190.118.28.252) |
| 07:31.29 | rwp | Personally I believe that if the local admin installed something in /usr/local/bin then it should be used and I would set PATH to include it. |
| 07:31.32 | TomyWork | how do i tell apt-get update to only download one repo? |
| 07:31.37 | rwp | But I understand why others might not want to do that. |
| 07:32.33 | *** part/#debian lionroars (~lionroars@anon-32-151.vpn.ipredator.se) |
| 07:32.45 | rwp | TomyWork, Easiest would be to comment all out except one. |
| 07:32.51 | *** join/#debian horse_man (~robert@business-088-079-130-082.static.arcor-ip.net) |
| 07:32.59 | *** join/#debian jaccob (~jaac@d24-36-3-196.home1.cgocable.net) |
| 07:33.04 | *** join/#debian swatti (~mail@business-89-132-60-56.business.broadband.hu) |
| 07:33.11 | *** join/#debian paranoids (~markus@amd.paranoids.at) |
| 07:33.14 | TomyWork | rwp there has to be a better way |
| 07:33.22 | TomyWork | i mean zypper can do it |
| 07:33.23 | jaccob | hi, there is a bug in Bash that a fix has just recently been released about an hour ago? |
| 07:33.32 | jaccob | https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762760#56 |
| 07:33.35 | rwp | TomyWork, There may be a way. I don't know it. |
| 07:33.45 | horse_man | hey guys: I cannot start iceweasel after an apt-get upgrade: $ iceweasel |
| 07:33.45 | horse_man | Error: Platform version '17.0.10' is not compatible with |
| 07:33.46 | horse_man | minVersion >= 17.0.9 |
| 07:33.46 | horse_man | maxVersion <= 17.0.9 |
| 07:33.46 | *** kick/#debian [horse_man!~debhelper@unaffiliated/debhelper] by debhelper (flood. Please use http://paste.debian.net instead.) |
| 07:34.47 | *** join/#debian ogny (~orkun@78.189.143.72) |
| 07:34.47 | *** join/#debian ogny (~orkun@unaffiliated/ogny) |
| 07:35.00 | rwp | horse_man, current iceweasel should be something like 24. In any case your answer can probably be found at: http://mozilla.debian.net/ |
| 07:35.12 | *** join/#debian horse_man (~robert@business-088-079-130-082.static.arcor-ip.net) |
| 07:35.43 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 07:35.44 | rwp | TomyWork, I find it hard to believe that nslookup could find something that "the system" could not. What is in your /etc/nsswitch.conf file for hosts? Perhaps mdns is breaking you? |
| 07:35.53 | horse_man | Hey guys. Sorry about the spam. I cannot start iceweasel after an apt-get upgrade: http://paste.debian.net/123189/ |
| 07:36.33 | rwp | horse_man, What does "apt-cache policy iceweasel" say? |
| 07:36.59 | *** join/#debian richac (~richac@pool-71-167-34-81.nycmny.fios.verizon.net) |
| 07:37.03 | rgr|android | which iceweasel |
| 07:37.39 | *** join/#debian Abhijit (~Abhijit@unaffiliated/abhijit) |
| 07:38.24 | horse_man | rwp: http://paste.debian.net/123190/ |
| 07:38.28 | *** join/#debian pupil (~cevin@unaffiliated/pupil) |
| 07:39.01 | *** join/#debian acemi (~acemi@unaffiliated/acemi) |
| 07:39.02 | *** join/#debian ghostlin_ (~ghostline@095-097-139-090.static.chello.nl) |
| 07:39.03 | rwp | horse_man, That shows that you have the very old version 17 installed. It shows that a newer version 24 is avaliable. |
| 07:39.19 | *** join/#debian _Paul (~Paul@p5B0F5C32.dip0.t-ipconnect.de) |
| 07:39.25 | rwp | horse_man, Is there a reason you have not upgraded to the newer version 24? |
| 07:39.42 | rgr|android | did you do an apt-get update? |
| 07:39.57 | *** join/#debian crecca (~user@gateway/tor-sasl/crecca) |
| 07:40.02 | rwp | Since apt-cache knows about it then I assume that he has. |
| 07:40.04 | dupondje | Hmz, trying to adjust the bash package for lenny, but dpatch doesn't seem to work on it? "make: *** No rule to make target `unpatch'. Stop. |
| 07:40.04 | horse_man | rwp: http://paste.debian.net/123192/ |
| 07:40.07 | dupondje | any clue's? |
| 07:40.09 | rgr|android | true. |
| 07:40.15 | *** join/#debian vicky (a464c261@gateway/web/freenode/ip.164.100.194.97) |
| 07:40.32 | rgr|android | does policy report on pinning? |
| 07:40.33 | *** join/#debian Sean-Der (~Sean-Der@siobud.com) |
| 07:40.38 | horse_man | rwp: I have not to, to my knowledge, done anything manually to stay at an old version |
| 07:40.51 | rwp | horse_man, "apt-get upgrade iceweasel" is not a valid command. Try "apt-get upgrade" first and then "apt-get dist-upgrade" second. |
| 07:41.08 | rwp | horse_man, What release are you running? Squeeze or Wheezy or ?? |
| 07:41.15 | *** join/#debian beejee (~beejee@office.kangaroot.net) |
| 07:41.46 | *** join/#debian e1z0 (u571@netlinux/founder/e1z0) |
| 07:41.47 | *** join/#debian flyingkiwi (~kiwi@2a02:2028:1016::2) |
| 07:41.48 | horse_man | rwp: wheezy |
| 07:41.52 | rwp | horse_man, If you *only* want to upgrade iceweasel then it would be "apt-get install iceweasel". But definitely NOT "apt-get upgrade iceweasel". A common typo. |
| 07:42.34 | rwp | Regarding "The following packages have been kept back:" it probaby needs to install an additoinal package. And you had used "upgrade" which does not allow that. |
| 07:42.47 | Guest61264 | hi, i have a machine running Debian Testing/Unstable, one of the partitions (/usr) on it which gives a fsck failure with error code 8 and drops to maintenance shell, i am able to ignore the error and continue booting and work normally. To fix this i have booted off a live CD when i run fsck.ext4 -f /dev/sda3 from the live CD no errors are found. However, if i were to reboot the machine from HDD the same error would reappear. he |
| 07:42.47 | horse_man | rwp: I see, I still am not a linux guru I see. |
| 07:42.52 | rwp | To have it upgrade and also install additional packages use "dist-upgrade". |
| 07:43.06 | *** join/#debian mlnppy (~rick@adsl-ull-92-193.50-151.net24.it) |
| 07:43.06 | rwp | We all start somewhere. See one. Do one. Teach one. |
| 07:43.15 | Phyliares | horse_man: no need to upgrade all packages ^^ just apt-get update && apt-get install iceweasel, i guess xulrunner version doesn't match |
| 07:43.20 | horse_man | rwp: So you need to run both 'apt-get upgrade' and 'apt-get dist-upgrade' to get the latest packages? |
| 07:43.21 | *** join/#debian m8 (~m8@unaffiliated/m8) |
| 07:43.32 | rwp | Yes. Exactly. In that order is best. |
| 07:43.47 | *** join/#debian Scuttle (~no@c-83-233-200-62.cust.bredband2.com) |
| 07:43.53 | rwp | I should create/update a wki page with a good procedure. There is a lot of docs but it is spread out. |
| 07:44.25 | rwp | Normally I start with apt-get update. Then apt-get upgrade. Then apt-get dist-upgrade. then apt-get autoremove --purge. Then apt-get clean. |
| 07:44.40 | *** join/#debian GusBricker (~GusBricke@cre1513898.lnk.telstra.net) |
| 07:44.48 | horse_man | rwp: I see. Then I learnt something new today as well |
| 07:44.56 | rwp | Normally on a Wheezy Stable system each security upgrade should bring in only the same packages as was already there. |
| 07:45.01 | TomyWork | rwp there's the culprit: [pid 3847] connect(3, {sa_family=AF_FILE, path="/var/run/avahi-daemon/socket"}, 110) = 0 |
| 07:45.03 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 07:45.06 | rwp | So for Stable "apt-get upgrade" is usually the right thing to do. |
| 07:45.33 | TomyWork | we have a strange network that replies to mdns with wrong replies |
| 07:45.56 | rwp | But for BIND in particular and some others the security upgrades will bring in a new library version. (Those buggers don't really have a stable release.) And to install a new named package not previously installed requires dist-upgrade. |
| 07:46.00 | *** mode/#debian [+l 1440] by debhelper |
| 07:46.04 | horse_man | rwp: so using 'apt-get dist-upgrade' gets you to using 'unstable'? |
| 07:46.17 | rwp | Also dist-upgrade allows removal of packages. So be careful about using it and look for REMOVED packages on a stable system. |
| 07:46.22 | *** join/#debian fosser_josh (~prathames@80.229.134.77) |
| 07:46.29 | rwp | horse_man, No. Not at all. |
| 07:46.48 | rwp | You only get to Unstable Sid if you change your sources.list to point to sid. |
| 07:46.50 | *** join/#debian chthon (~forcefsck@193.120.208.221) |
| 07:47.08 | *** join/#debian sicretor (~sicretor@host202-204-dynamic.43-79-r.retail.telecomitalia.it) |
| 07:47.11 | rwp | Basically if it were only Stable then it would only be security upgrades and point releases. |
| 07:47.21 | signius | horse_man, Just a word of caution, if you are running Debian in an OpenVZ VPS doing a dist-upgrade is a NO NO |
| 07:47.27 | rwp | But even in stable there are periodic point releases. 6.0.1, 6.0.2. and so forth. |
| 07:47.45 | horse_man | rwp: I see |
| 07:47.53 | rwp | In the point releases there will be some upgrades that will require additional libraries. |
| 07:48.07 | rwp | signius, What about OpenVZ is special? |
| 07:48.08 | rgr | horse_man: my "upd" script : https://gist.github.com/54dc5047c6f9ad848524 |
| 07:48.48 | rwp | TomyWork, mdsn. It has screwed me over many a time too. apt-get purge libnss-mdns |
| 07:48.49 | *** join/#debian dune (~dune@dune.angrybytes.pl) |
| 07:48.50 | *** join/#debian Weapon (Weapon@trekweb/user/Weapon) |
| 07:49.01 | *** join/#debian Eleganza (~Eleganza@gateway/tor-sasl/eleganza) |
| 07:49.03 | TomyWork | rwp thinking about it :) |
| 07:49.05 | rwp | TomyWork, Or edit the mess out of /etc/nsswitch.conf |
| 07:49.13 | horse_man | Thanks alot guys. Now it's working again |
| 07:49.25 | *** join/#debian anonymous5022279 (~anonymous@email.webteam.at) |
| 07:49.29 | *** join/#debian Eleganza (~Eleganza@gateway/tor-sasl/eleganza) |
| 07:49.30 | signius | rwp, because its a shared kernel on ovz nodes & all sorts of stuff breaks if you try and do a dist-upgrade |
| 07:50.01 | *** join/#debian tonythomas (uid25971@gateway/web/irccloud.com/x-zcnrkroxocouaobi) |
| 07:50.03 | *** part/#debian anonymous5022279 (~anonymous@email.webteam.at) |
| 07:50.43 | rwp | signius, It would be nice to know specifics. Because OpenVZ is already a very small user base. I wouldn't recommend people avoid apt-get dist-upgrade for some very small corner case. That probably is an OpenVZ problem. |
| 07:51.03 | *** join/#debian mennea (~textual@31.210.186.90) |
| 07:51.36 | *** join/#debian zerick (~zerick@190.118.28.252) |
| 07:52.11 | *** join/#debian towo` (~towo@ipb2191d47.dynamic.kabel-deutschland.de) |
| 07:52.17 | rwp | rgr, BTW you don't need --yes with apt-get update. :-) |
| 07:52.29 | signius | rwp, Well it is specific to OpenVZ which was why i said word of caution if running Debian in an OVZ VPS, i wasnt for one minute suggesting people avoid dist-upgrade for any other reason or platforms |
| 07:52.35 | dupondje | there aren't any patches for lenny I guess? |
| 07:52.56 | rwp | rgr, You might want to do a "dpkg -l | grep ^rc" and look for removed packages with config files left behind. Basically those are lint. |
| 07:53.11 | *** join/#debian tcpman (~yeah@157-157-36-213.dsl.dynamic.simnet.is) |
| 07:53.36 | rwp | rgr, I would purge them to keep the system clean and tidy. But remember that purge removes their associated /etc files. Which is the point. And why the lint builds up after a while and can cause bugs itself. |
| 07:53.54 | *** join/#debian Terminator (~skynet@49.136.105.87) |
| 07:54.08 | rwp | dupondje, What are you asking about? |
| 07:54.18 | *** join/#debian zerick (~zerick@190.118.28.252) |
| 07:54.25 | *** join/#debian bart_b (~bart_b@unaffiliated/bart-b/x-7974760) |
| 07:54.36 | rwp | dupondje, Lenny is available as the last point release in the archive. But nothing new is happening with it. |
| 07:54.44 | rwp | dupondje, Are you asking about bash? |
| 07:54.59 | *** join/#debian zerick (~zerick@190.118.28.252) |
| 07:55.30 | *** part/#debian fosser_josh (~prathames@80.229.134.77) |
| 07:55.48 | rwp | signius, If it is only the kernel then I would "apt-mark hold linux-image-$arch" so as to prevent only the kernel from upgrading. |
| 07:55.50 | dupondje | rwp: yea indeed. if there are patches somewhere for the lenny packages of bash |
| 07:55.52 | Terminator | Where can i download debianbsd livecd iso? |
| 07:55.54 | dupondje | else I gotto backport it myself |
| 07:56.10 | *** join/#debian clu5ter (~staff@unaffiliated/clu5ter) |
| 07:56.12 | rwp | dupondje, Not that I know of. Sorry. Long out of support. |
| 07:56.58 | *** join/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 07:57.01 | *** part/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 07:57.09 | signius | rwp, I will look into that & do some testing |
| 07:57.13 | dupondje | rwp: yea I know. But some "can't" upgrade, you know the crap :) |
| 07:57.15 | rwp | dupondje, Although it would not surprise me if they don't exist somewhere unofficially by people outside of Debian official. |
| 07:57.41 | dupondje | well build package of bash for lenny yesterday myself, as there was a patch in bash itself :) |
| 07:57.47 | *** join/#debian NiLon (nilon@62-113-169-38.bb.dnainternet.fi) |
| 07:57.53 | dupondje | but the second patches are not made for bash it seems |
| 07:57.57 | rwp | dupondje, If it makes you feel better I have two of those machines that I help admin in a location that I can't upgrade either for various reasons. |
| 07:58.03 | Terminator | I dont want the cd version? |
| 07:58.13 | Terminator | *dvd |
| 07:58.32 | dupondje | http://ftp.gnu.org/gnu/bash/bash-3.2-patches/ only contains the first patch |
| 07:58.35 | rwp | dupondje, But I ensured that they could not be triggered with an Apache CGI call so as to mitigate the problem. |
| 07:58.37 | dupondje | second not added |
| 07:58.56 | rwp | Terminator, What are you asking? |
| 07:58.58 | *** join/#debian troete (~troete@osbk-4db171d3.pool.mediaWays.net) |
| 07:59.08 | *** join/#debian ph4nt0mas (~quassel@athedsl-188617.home.otenet.gr) |
| 07:59.52 | rwp | dupondje, Later patches are still under discussion and have not become officially released by the maintainer yet. |
| 07:59.57 | *** join/#debian cienti (~cienti@unaffiliated/cienti) |
| 08:00.02 | *** join/#debian acebarry (~weechat@gateway/tor-sasl/acebarry) |
| 08:00.04 | *** part/#debian horse_man (~robert@business-088-079-130-082.static.arcor-ip.net) |
| 08:00.09 | rwp | *upstream GNU maintainer. (Not the debian maintainer.) |
| 08:00.20 | dupondje | they will be released or? |
| 08:00.25 | dupondje | discussed on mailing list? |
| 08:00.25 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 08:01.01 | *** join/#debian machin_why (~machin_wh@mv477-2-88-121-254-156.fbx.proxad.net) |
| 08:01.05 | Terminator | rwp: Debianbsd liveIsocd |
| 08:01.17 | dragon__ | what about bash patches for squeeze? |
| 08:01.28 | rwp | Terminator, Is there a question? |
| 08:01.30 | *** join/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 08:01.32 | *** part/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 08:01.48 | Terminator | Where can i download it? |
| 08:01.49 | rwp | dragon__, https://wiki.debian.org/LTS/Using |
| 08:01.50 | dupondje | dragon__: new version is released |
| 08:02.10 | *** join/#debian oberling (~oberling@nopea.deroberling.de) |
| 08:02.30 | rwp | Terminator, See this reference on getting Debian: https://www.debian.org/distrib/ |
| 08:04.12 | rwp | Well it is late for me. Good night all! |
| 08:04.17 | rwp | heads off to sleep |
| 08:04.54 | *** join/#debian llorephie (~Thunderbi@broadband-46-188-19-171.2com.net) |
| 08:05.29 | *** join/#debian Nyoom (Nyoom@unaffiliated/nyoom) |
| 08:06.16 | Terminator | <PROTECTED> |
| 08:06.25 | *** part/#debian lesta (~user@unaffiliated/jimlesta) |
| 08:06.44 | babilen | dpkg: tell Terminator -about firmware image |
| 08:07.04 | *** join/#debian ki0 (~ki0@212.230.172.17) |
| 08:07.06 | *** part/#debian malinus (~malinus@unaffiliated/malinus) |
| 08:07.07 | babilen | Terminator: You might want to consider using the netinst image with firmware if your hardware requires that |
| 08:07.29 | babilen | Oh, you are looking for a live CD, aren't you? |
| 08:07.38 | Terminator | Yes |
| 08:07.43 | babilen | (not the one you would use to install Debian that is) |
| 08:08.01 | *** join/#debian machin_why (~machin_wh@mv477-2-88-121-254-156.fbx.proxad.net) |
| 08:08.14 | Terminator | Boot from live cd |
| 08:08.16 | *** join/#debian GusBricker (~GusBricke@c122-107-239-5.mckinn3.vic.optusnet.com.au) |
| 08:08.28 | babilen | http://live.debian.net/ â "Download releases" â "stable[+nonfree]" â PROFIT |
| 08:09.55 | *** join/#debian Twinkletoes (~chatzilla@213.218.195.112) |
| 08:10.09 | *** join/#debian AciD`` (~gni@jau72-5-78-223-56-21.fbx.proxad.net) |
| 08:11.15 | *** join/#debian karimb (~kboumedhe@mail1.bbva.com) |
| 08:12.02 | *** join/#debian NiLon (nilon@unaffiliated/nilon) |
| 08:13.18 | *** join/#debian nighty^ (~nighty@hokuriku.rural-networks.com) |
| 08:14.02 | *** join/#debian Mikrop (~mikrop@office.bearstech.com) |
| 08:14.18 | *** join/#debian mrph (c066a94a@gateway/web/freenode/ip.192.102.169.74) |
| 08:14.32 | *** join/#debian johelish (6de15078@gateway/web/freenode/ip.109.225.80.120) |
| 08:14.40 | *** join/#debian bitcheker (~bitchecke@dynamic-adsl-84-221-31-105.clienti.tiscali.it) |
| 08:15.18 | *** join/#debian e-anima (~eanima@p54A84518.dip0.t-ipconnect.de) |
| 08:15.33 | *** join/#debian deadalnix (~deadalnix@mobile-166-171-249-115.mycingular.net) |
| 08:15.40 | *** join/#debian Mmike (~mario@unaffiliated/mmike) |
| 08:16.00 | *** mode/#debian [+l 1449] by debhelper |
| 08:16.53 | johelish | Hey! I love my debian server. I have a bit of problems now and I'm scared someone might have breached my system. I can't access my site. I've restarted Nginx and Supervisor but It didn't work as it usually does.. It doesn't start. So I tried to ping the ip and I get this answer; From 80.248.225.1: icmp_seq=3 Redirect Host(New nexthop: ser147.wizardgoonies.com (127.0.0.1)) |
| 08:16.59 | johelish | Have you seen this Newhop before? |
| 08:17.08 | johelish | Looks like icmp redirect or something .. I haven't seen this before |
| 08:17.16 | *** join/#debian bal (~Thunderbi@86.125.63.66) |
| 08:18.01 | *** join/#debian oneand0 (~erle@101.117.10.175) |
| 08:18.04 | mrph | I need help with setting up a can network interface at startup for my Beaglebone Black running debian arm. After startup `ifconfig -a` shows that the interface is there, but since `ifconfig` (without the -a argument) does not list it, it is not activated although I call `ifconfig can0 up` in /etc/network/interfaces: http://pastebin.com/bZMYUuGh |
| 08:18.56 | *** join/#debian altin (~altin@46.99.50.15) |
| 08:18.56 | *** join/#debian altin (~altin@flossk/altin) |
| 08:19.17 | *** join/#debian jonno11 (~jonno11@host86-138-93-163.range86-138.btcentralplus.com) |
| 08:19.22 | *** join/#debian ecthiender (~ecthiende@unaffiliated/ecthiender) |
| 08:19.59 | *** join/#debian [robin] (~steelbox@89.201.9.229) |
| 08:20.04 | [robin] | Hello, where may I find .xinitrc? |
| 08:20.14 | Abhijit | in your home folder? |
| 08:20.44 | [robin] | It isn't there. |
| 08:20.45 | *** join/#debian Corrupt (~Asylum@h123.152.91.75.dynamic.ip.windstream.net) |
| 08:21.00 | Abhijit | create new. |
| 08:21.04 | *** join/#debian lnxslck (~lnxslck@194.65.138.120) |
| 08:21.24 | [robin] | Are you sure it will be picked up? |
| 08:21.25 | *** join/#debian mennea (~textual@31.210.186.90) |
| 08:21.36 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 08:21.43 | *** join/#debian Sbroker (~DebianSta@254.red-158-255-239.telecablesantapola.es) |
| 08:21.46 | *** join/#debian Sbroker (~DebianSta@unaffiliated/sbroker) |
| 08:21.52 | *** join/#debian JohnnyricoMC (~Johnnyric@unaffiliated/johnnyricomc) |
| 08:21.58 | Twinkletoes | johelish: next hop 127.0.0.1, that your loopback interface |
| 08:22.37 | Sbroker | greetings http://www.csoonline.com/article/2687265/application-security/remote-exploit-in-bash-cve-2014-6271.html |
| 08:22.47 | *** join/#debian r3n1c0n (~r3n1c0n@195.169.155.126) |
| 08:23.25 | johelish | Twinkletoes: What does that mean? Where I've put the 127.0.0.1 it's where the correct ip appear.. so everything looks good? What's up with the wizardgoonies? I have nothing to do with them |
| 08:23.27 | Twinkletoes | johelish: Sounds like your networking is a bit screwed... as for your services, what about netstat -lntp? |
| 08:23.33 | *** join/#debian moha_hunt (~moha@95.91.210.217) |
| 08:23.44 | Twinkletoes | johelish: Check /etc/hosts ? |
| 08:24.24 | Twinkletoes | johelish: Also as standard... grep -irl wizardgoonies /etc |
| 08:25.34 | johelish | Twinkletoes: Nothing strange in /etc/hosts.. checking grep now |
| 08:25.49 | johelish | grep: /etc/fonts/conf.d/30-defoma.conf: No such file or directory Twinkletoes ^ |
| 08:26.01 | *** mode/#debian [+l 1456] by debhelper |
| 08:26.05 | johelish | I'm going to paste my netstat -lntp in a pastebin Twinkletoes |
| 08:26.07 | *** join/#debian Sevet (~Sevet@05453846.skybroadband.com) |
| 08:26.56 | Twinkletoes | johelish: OK - also pastebin your routing table |
| 08:27.28 | *** join/#debian Ametrine (~Butt3rfly@unaffiliated/butt3rfly) |
| 08:28.04 | *** join/#debian no_gravity (~user@unaffiliated/no-gravity/x-0632109) |
| 08:28.06 | Twinkletoes | johelish: From the server itself, can you ping 127.0.0.1 and can you ping every IP address the server has... from the server itself? |
| 08:28.06 | *** join/#debian Big-Blue (~seriousgu@unaffiliated/big-blue) |
| 08:28.08 | *** join/#debian Bluewolf (~bluewolf@196.44.185.145) |
| 08:28.26 | no_gravity | hmm.. i just got requests for this url from 40 different ips in one minute: /admin/templates/fckeditor/editor/dialog/fck_about.html |
| 08:28.50 | *** join/#debian vranivran (~vranivran@95.168.68.242) |
| 08:28.51 | no_gravity | what strange attack is that? |
| 08:29.01 | Twinkletoes | johelish: ANd the contents of /etc/resolv.conf |
| 08:29.03 | johelish | Twinkletoes: Yeah, I can ping all adresses but one .. And that adress I can ping from within the server with the error posted before "NewHop" |
| 08:29.29 | no_gravity | oh, now i see that the first part of the url varies with every request. |
| 08:29.43 | cuqa_ | no_gravity, maybe just a vulnerability scan |
| 08:30.02 | no_gravity | cuqa_: yes, but from 40 different ips? |
| 08:30.22 | cuqa_ | maybe not so easy to distribute work in botnet? |
| 08:30.43 | no_gravity | ah |
| 08:30.47 | no_gravity | yes, might be |
| 08:30.56 | no_gravity | ah no |
| 08:31.01 | no_gravity | the urls are slightly different |
| 08:31.12 | no_gravity | so the bad guys have their shit together |
| 08:31.20 | no_gravity | testing different urls via a botnet |
| 08:31.27 | Twinkletoes | johelish: Any poastebin ? |
| 08:32.02 | johelish | Twinkletoes: http://pastebin.com/bHsKBfw8 |
| 08:32.07 | Twinkletoes | johelish: I can ping that IP address externally, just fine |
| 08:32.30 | johelish | All of those should work |
| 08:32.50 | *** join/#debian mike (~mike@212.42.163.49) |
| 08:32.56 | *** join/#debian Butt3rfly (~Butt3rfly@unaffiliated/butt3rfly) |
| 08:34.09 | *** join/#debian terxx (~Mathias@blue.homedata.be) |
| 08:34.45 | *** join/#debian r420r (isaacbsd@unaffiliated/r420r) |
| 08:35.04 | *** join/#debian dumbell (~dumbell@67-5-248-46.ptld.qwest.net) |
| 08:36.15 | *** join/#debian Eleganza (~Eleganza@gateway/tor-sasl/eleganza) |
| 08:36.24 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 08:36.46 | *** join/#debian ph4nt0mas (~quassel@athedsl-188617.home.otenet.gr) |
| 08:37.59 | no_gravity | sometimes i get "connection reset" when connecting to my server via http. maybe one in 5000 requests. how can i hunt down that issue? |
| 08:40.56 | Walex | no_gravity: HTTP server logs first |
| 08:41.22 | *** join/#debian CeBe (~CeBe@brsg-4dbbba88.pool.mediaWays.net) |
| 08:41.48 | no_gravity | Walex: hmm.. how would it log that? which status code? |
| 08:43.10 | no_gravity | my daily logs are like 300mb .. no way to find something by poking around. |
| 08:43.14 | Walex | no_gravity: that of course depends :-), that's why you have to look at the logs. |
| 08:44.03 | Walex | no_gravity: note that Apache2 produces both an access log and an error log. Hopefully in your case the error log is smaller. |
| 08:45.19 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 08:45.44 | *** join/#debian bmr (bmr@nat/redhat/x-kaanrbxurahanlav) |
| 08:45.57 | Twinkletoes | no_gravity: Nobody pokes around through logs... they only really grep them for the info they're looking for |
| 08:46.06 | Twinkletoes | s/Nobody/geeks/ |
| 08:46.07 | *** join/#debian ma_di (~mahdi@194.183.244.5) |
| 08:46.26 | *** join/#debian wakd (~wakd@202-159-168-166.dyn.iinet.net.au) |
| 08:46.33 | no_gravity | Walex: the error log does not contain my ip. but i got the resetted connection. so the error seems not to go there. |
| 08:46.59 | *** join/#debian avvs (~avvs@gateway/tor-sasl/avvs) |
| 08:47.38 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 08:47.45 | *** join/#debian maxy (~maxy@84-74-65-9.dclient.hispeed.ch) |
| 08:47.51 | *** join/#debian holmgren (~magnus@h-79-68.a163.priv.bahnhof.se) |
| 08:47.57 | no_gravity | Twinkletoes: thats why i asked which status code that error could be logged with. |
| 08:48.10 | *** join/#debian wakd (~wakd@202-159-168-166.dyn.iinet.net.au) |
| 08:48.20 | ma_di | Hi all .... |
| 08:48.33 | Walex | Twinkletoes: you mean *you* don't read logs for pure entertainment :-) |
| 08:49.12 | *** part/#debian vranivran (~vranivran@95.168.68.242) |
| 08:49.15 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 08:49.17 | *** join/#debian spacebison (~bison@76.84.205.218) |
| 08:51.18 | *** join/#debian mennea (~textual@31.210.186.90) |
| 08:52.06 | *** join/#debian adellam (~adellam@pdpc/supporter/active/adellam) |
| 08:52.13 | no_gravity | maybe some limit gets reached. maybe maxclients in apach conf or god knows what. i do not see anything in the apache error log though. any other logs? dmesd seems to not have anything either. |
| 08:52.23 | *** part/#debian DanMAbraham (~br0kenarr@host86-157-20-123.range86-157.btcentralplus.com) |
| 08:52.52 | *** join/#debian ecthiender (~ecthiende@unaffiliated/ecthiender) |
| 08:53.00 | *** join/#debian Corrupt (~Asylum@75.91.152.123) |
| 08:54.33 | *** join/#debian Arsenik (~Cyanure@eduroam-65-117.loria.fr) |
| 08:55.14 | asher1 | hello this my first time i used with debian and i want to know how i run wizard in debian please from Terminal |
| 08:56.16 | nkuttler | asher1: which wizard? |
| 08:56.26 | *** join/#debian kooldavi (~kooldavi@sign-4db6aa00.pool.mediaWays.net) |
| 08:56.27 | aswen | Hello everyone, I just apt-get upgraded my testing machine and got: update-initramfs: Generating /boot/initrd.img-3.16-2-amd64 |
| 08:56.27 | aswen | Warning: error while trying to store keymap file - ignoring request to install /etc/boottime.kmap.gz. How bad is that? |
| 08:56.36 | *** join/#debian booby_tables_24 (~booby_tab@117.201.167.151) |
| 08:57.06 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 08:57.20 | maxy | I upgraded linux-image-3.14-1-amd64 to 3.17-rc5, and now NAT doesn't work: iptables v1.4.21: can't initialize iptables table `nat': Table does not exist (do you need to insmod?) |
| 08:57.31 | no_gravity | is there a way to look at dmesg with human readable times? |
| 08:57.37 | asher1 | ? |
| 08:57.39 | maxy | I think I have all the NAT related modules loaded, any idea what else to try? |
| 08:57.51 | asher1 | hello this my first time i used with debian and i want to know how i run wizard in debian please from Terminal |
| 08:58.34 | no_gravity | asher1: please do not ask twice within a few minutes. i do not know what wizard is. |
| 08:58.49 | asher1 | for run supybot |
| 08:59.00 | asher1 | i can write this command |
| 08:59.23 | asher1 | supybot-wizard |
| 08:59.23 | asher1 | bash: supybot-wizard: command not found |
| 09:00.00 | maxy | no_gravity: maybe less /var/log/kern.log |
| 09:01.26 | asher1 | ? |
| 09:01.33 | asher1 | someone to know please? |
| 09:01.53 | no_gravity | maxy: no such file |
| 09:02.11 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 09:03.29 | *** join/#debian wtkp (~wtkp@unaffiliated/wtkp) |
| 09:04.41 | maxy | no_gravity: dmesg -h also shows various options (-T , or even -td for time delta, I might have use for this one) |
| 09:05.32 | *** join/#debian towo` (~towo@ipb2191d47.dynamic.kabel-deutschland.de) |
| 09:05.52 | *** join/#debian Miesco__ (~mugsy@dyn-192-249-130-12.nexicom.net) |
| 09:06.02 | *** join/#debian Miesco___ (~mugsy@dyn-192-249-130-12.nexicom.net) |
| 09:07.07 | *** join/#debian sophomore (~Sophomore@195-241-169-88.ip.telfort.nl) |
| 09:07.42 | *** join/#debian Tuls (~Tuls@APoitiers-257-1-18-150.w90-38.abo.wanadoo.fr) |
| 09:07.49 | sophomore | Does Debian need bash to function properly? I have no need for it as I use another shell, and I want to remove it due to the exploit. Is this safe? |
| 09:08.41 | *** join/#debian meaneye (~meaneye@5.144.49.70) |
| 09:11.13 | Twinkletoes | sophomore: It's already been patched I think |
| 09:11.20 | *** join/#debian wzssyqa (~syq@ubuntu/member/wzssyqa) |
| 09:11.50 | no_gravity | maxy: neither -T nor -td ar known |
| 09:11.54 | *** part/#debian wzssyqa (~syq@ubuntu/member/wzssyqa) |
| 09:12.00 | no_gravity | maxy: Usage: dmesg [-c] [-n level] [-r] [-s bufsize] |
| 09:12.14 | terxx | sophomore: I updated my box juist 2 min ago |
| 09:13.31 | Twinkletoes | sophomore: https://www.debian.org/security/2014/dsa-3035 |
| 09:13.36 | *** join/#debian err404 (~err404@62-210-205-221.rev.poneytelecom.eu) |
| 09:14.01 | *** join/#debian rustyraptor (~rustyrapt@128.204.252.114) |
| 09:14.21 | *** join/#debian Gforce (~ev@5.118.2.52) |
| 09:15.09 | Gforce | Hey guys.is there any way to pach shellshock without upgrading the whole debian? |
| 09:15.43 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 09:15.58 | nkuttler | Gforce: why would you have to upgrade the "whole debian"? |
| 09:16.00 | *** mode/#debian [+l 1462] by debhelper |
| 09:16.37 | Gforce | shouldn't I use apt-get update && apt-get upgrade? |
| 09:16.42 | nkuttler | asher1: did you install the supybot package? |
| 09:16.47 | nkuttler | Gforce: yes |
| 09:17.04 | *** join/#debian istram (~istram@194.228.11.42) |
| 09:17.06 | cuqa_ | Gforce |
| 09:17.10 | cuqa_ | apt-get update |
| 09:17.12 | *** join/#debian RoXX (~roxx@unaffiliated/roxx) |
| 09:17.13 | cuqa_ | apt-get install bash |
| 09:17.13 | arcke | Gforce: you can also apt-get update && apt-get install bash |
| 09:17.16 | cuqa_ | this only updates bash |
| 09:17.26 | Gforce | nkuttler:I don't want to use that.:) |
| 09:17.34 | nkuttler | Gforce: why |
| 09:17.37 | *** join/#debian Slashman (~Slash@ver78-3-82-243-38-236.fbx.proxad.net) |
| 09:17.48 | *** join/#debian rorgoroth (~ray@host86-133-119-118.range86-133.btcentralplus.com) |
| 09:17.49 | asher1 | no |
| 09:17.51 | Gforce | arcke: thanks.I'll try that. |
| 09:17.56 | asher1 | i try install from folder |
| 09:17.57 | nkuttler | Gforce: pastebin command + output. paste.debian.net |
| 09:18.02 | Gforce | nkuttler: I got some network problem. |
| 09:18.22 | Gforce | what? |
| 09:18.25 | nkuttler | Gforce: still doesn't make sense. security updates shouldn't be much |
| 09:19.00 | *** join/#debian shelxtr (~dra@95.77.98.11) |
| 09:19.04 | Gforce | nkuttler:I know.and I just want security updates.not updating every thing. |
| 09:19.09 | nkuttler | Gforce: pastebin command + output. paste.debian.net |
| 09:19.09 | Gforce | nkuttler:what command? |
| 09:19.15 | nkuttler | Gforce: the apt-get upgrade |
| 09:19.22 | shelxtr | hello guys. I want a problem with mail configuration on my server. i can't send mail to gmail addresses |
| 09:19.26 | arcke | Gforce: stable is only security updates |
| 09:19.30 | *** join/#debian ThKo (~ThKo@ip-95-222-146-171.hsi15.unitymediagroup.de) |
| 09:19.32 | shelxtr | can you help me please? |
| 09:19.40 | shelxtr | I have* |
| 09:19.58 | arcke | Gforce: which are you running? stable, testing or sid? |
| 09:20.03 | Gforce | arcke: I'm using it as desktop. |
| 09:20.05 | nkuttler | shelxtr: well, did you check your spam folder? |
| 09:20.10 | Gforce | arcke:stable. |
| 09:20.23 | arcke | then just do an upgrade, its only security updates |
| 09:20.26 | Gforce | nkuttler:didn't set the repos yet. |
| 09:20.31 | nkuttler | Gforce: if you've been using stable for a while you might have a mix of squeeze/wheezy.. |
| 09:20.34 | nkuttler | ow |
| 09:21.07 | shelxtr | nkuttler after send mail, I receive for an email from mailer-daemon with: host aspmx.l.google.com[2a00:1450:400c:c09::1a] |
| 09:21.07 | shelxtr | <PROTECTED> |
| 09:21.07 | shelxtr | <PROTECTED> |
| 09:21.07 | shelxtr | <PROTECTED> |
| 09:21.07 | shelxtr | <PROTECTED> |
| 09:21.07 | asher1 | how i close this? |
| 09:21.07 | *** kick/#debian [shelxtr!~debhelper@unaffiliated/debhelper] by debhelper (flood. Please use http://paste.debian.net instead.) |
| 09:21.20 | *** join/#debian mennea (~textual@31.210.186.90) |
| 09:21.24 | *** join/#debian shelxtr (~dra@95.77.98.11) |
| 09:21.26 | nkuttler | !tell shelxtr about paste |
| 09:21.28 | Gforce | thank you guys. |
| 09:21.39 | asher1 | http://paste.debian.net/123201/ |
| 09:21.45 | asher1 | how i fix this |
| 09:21.50 | shelxtr | pff sorry guys .. |
| 09:21.55 | *** part/#debian Gforce (~ev@5.118.2.52) |
| 09:22.13 | nkuttler | asher1: you wait until the other apt-get process has finished.. |
| 09:22.23 | shelxtr | do you see nkuttler? |
| 09:22.38 | nkuttler | shelxtr: see what? |
| 09:22.39 | shelxtr | problem is only with google addresses |
| 09:22.52 | nkuttler | shelxtr: please paste the entire messgae |
| 09:22.57 | asher1 | but i no see |
| 09:23.02 | shelxtr | ok. one second to make a pastebin with mail from daemon |
| 09:23.08 | asher1 | nkuttler |
| 09:23.21 | asher1 | i no see open something only terminal |
| 09:23.24 | arcke | there are many things which could trigger the spam filter |
| 09:23.32 | *** join/#debian tremon (~aschuring@d594e6a3.dsl.concepts.nl) |
| 09:24.23 | nkuttler | asher1: well, what do i know. either another process is running, or it got killed and left a lockfile |
| 09:24.26 | shelxtr | nkuttler http://pastebin.com/yhrCkXsX |
| 09:24.43 | nkuttler | shelxtr: paste.debian.net please |
| 09:25.51 | nkuttler | shelxtr: have you checked the website the message points to? |
| 09:25.56 | shelxtr | http://paste.debian.net/123204/ |
| 09:26.20 | *** join/#debian bizarro_1 (~bizarro_1@80.Red-83-53-194.dynamicIP.rima-tde.net) |
| 09:26.36 | *** join/#debian KBme (~r00t@gar13-9-83-156-138-125.fbx.proxad.net) |
| 09:26.37 | shelxtr | yes ... all seems ok |
| 09:26.59 | asher1 | help please |
| 09:27.06 | asher1 | what is mean what i need to do |
| 09:27.08 | asher1 | Media change: please insert the disc labeled |
| 09:27.08 | asher1 | <PROTECTED> |
| 09:27.08 | asher1 | in the drive '/media/cdrom/' and press enter |
| 09:27.08 | nkuttler | shelxtr: hm? https://support.google.com/mail/answer/188131?hl=en which links to https://support.google.com/mail/answer/81126?hl=en which gives you good suggestions, dkim, spf etc |
| 09:27.20 | nkuttler | asher1: paste your /etc/apt/sources.list |
| 09:27.31 | *** join/#debian FreezingCold (~Freezing@CPE602ad06bea2a-CM602ad06bea27.cpe.net.cable.rogers.com) |
| 09:27.46 | shelxtr | nkuttler this is all from received email. ... |
| 09:28.03 | nkuttler | shelxtr: excuse me? |
| 09:28.27 | nkuttler | shelxtr: running mail servers is hard. real the docs google gives you |
| 09:28.29 | *** join/#debian CeBe (~CeBe@brsg-4dbbba88.pool.mediaWays.net) |
| 09:28.41 | nkuttler | well, getting mail delivered is hard.. |
| 09:28.48 | pclover | it can be hard |
| 09:28.53 | pclover | i dislike doing it |
| 09:28.56 | nkuttler | indeed |
| 09:29.17 | pclover | you have to do DKIM + SPF |
| 09:29.18 | deni | how come the bash updates are only in sid an haven't been pushed to security updates for wheezy? I'm not aware of the process how this works so if anyone can point to a document explaining it |
| 09:29.24 | shelxtr | i think ... probably i have a problem with configs ... |
| 09:29.26 | *** join/#debian avshalom (~brown@c-50-158-169-145.hsd1.il.comcast.net) |
| 09:29.28 | nkuttler | managing mail users is far worse than the technical stuff though |
| 09:29.50 | nkuttler | shelxtr: yes. you haven't configured things like dkim, spf, etc |
| 09:30.01 | pclover | spf is easy to do |
| 09:30.05 | pclover | DKIM is a bit more work |
| 09:30.13 | Twinkletoes | shelxtr: Run your mail server's IP through an RBL checker, like here: http://mxtoolbox.com/blacklists.aspx |
| 09:30.16 | *** join/#debian HellTiger_NB (~HellTiger@125-38.196-178.cust.bluewin.ch) |
| 09:30.18 | shelxtr | what is spf and dkim ? :D |
| 09:30.20 | HellTiger_NB | hello, ca some one suggest a cloud drive with apt updates, like dropbox or google drive? |
| 09:30.26 | pclover | sender policy framework |
| 09:30.33 | pclover | and domain keys identified mail |
| 09:30.34 | Twinkletoes | shelxtr: Also make you sure your mail server's IP resolves to your mail server's origin/hostname |
| 09:30.46 | pclover | The server will sign the email with DKIM |
| 09:31.01 | shelxtr | pfff ... hard |
| 09:31.10 | *** join/#debian gandaliter (~toby@zone2.jesus.cam.ac.uk) |
| 09:31.25 | nkuttler | shelxtr: thank the spammers |
| 09:31.27 | shelxtr | but how work in yahoo? and in google not? |
| 09:31.30 | *** join/#debian Rwhar (~RDev@195.88.100.118) |
| 09:31.36 | Twinkletoes | shelxtr: YOu shouldn't NEED SPF and DKIM, but they're recommended. |
| 09:31.48 | pclover | you do need them |
| 09:32.00 | asher1 | i have |
| 09:32.02 | pclover | i've seen email servers reject mail due to missing SPF |
| 09:32.08 | asher1 | very much error when i write this |
| 09:32.09 | Twinkletoes | shelxtr: Normalyl Yahoo and AOL are too eager to block IP people from sending mail to them... I got blocked because someone else with an IP address similar to mine got blocked |
| 09:32.10 | asher1 | http://paste.debian.net/123207/ |
| 09:32.20 | *** join/#debian mr_foobar_baz (~user@gateway/tor-sasl/mrfoobar/x-67184220) |
| 09:32.25 | asher1 | nkuttler |
| 09:32.35 | nkuttler | asher1: yes, remove the cd line from your sources.list. then add one for lts |
| 09:32.39 | nkuttler | !tell asher1 about debian-lts |
| 09:33.01 | asher1 | what is mean? |
| 09:33.03 | asher1 | where cd? |
| 09:33.07 | sophomore | !tell sophomore about debian-lts |
| 09:33.14 | asher1 | i write only what you say |
| 09:33.16 | Twinkletoes | shelxtr: Can you PM me your mail server's hostname? |
| 09:33.23 | asher1 | . /etc/apt/sources.list |
| 09:33.30 | *** join/#debian deadalnix (~deadalnix@166.170.36.25) |
| 09:34.08 | *** join/#debian Zzeiss (~wsy@dsl092-078-219.bos1.dsl.speakeasy.net) |
| 09:34.16 | asher1 | i understand |
| 09:34.28 | asher1 | this mean i need update new version? |
| 09:34.36 | *** join/#debian Terminator (~skynet@101.221.131.143) |
| 09:35.14 | nkuttler | asher1: if you want the bad bug fixed, this is what you have to do |
| 09:35.29 | asher1 | what i need to do? |
| 09:35.34 | asher1 | this my first time i used |
| 09:35.37 | *** join/#debian Brigo (~Brigo@241.Red-81-37-104.dynamicIP.rima-tde.net) |
| 09:35.56 | asher1 | then slow slow i learn about this how i can fix this error when i paste to you? |
| 09:35.58 | nkuttler | asher1: i think i already told you. which part do you not understand |
| 09:36.00 | *** mode/#debian [+l 1468] by debhelper |
| 09:36.25 | *** join/#debian dragon__ (~dragon@S0106002129af1abb.vc.shawcable.net) |
| 09:36.31 | *** join/#debian debi (~ev@5.118.2.52) |
| 09:36.34 | *** join/#debian gandaliter (~toby@zone2.jesus.cam.ac.uk) |
| 09:36.43 | asher1 | when i try install gcc |
| 09:36.49 | asher1 | this message i get |
| 09:36.54 | *** join/#debian FnorZ (~cthulhu@unaffiliated/fnorz) |
| 09:36.55 | *** join/#debian p0n2 (~fabien@193.247.203.3) |
| 09:36.57 | nkuttler | asher1: of course. update your sources.list. add the lts |
| 09:36.58 | *** join/#debian dbast (~dbast@lobmenschen.de) |
| 09:37.03 | debi | will apt-get update && apt-get install bash patch shellshock? |
| 09:37.05 | nkuttler | remove the cd line |
| 09:37.12 | nkuttler | debi: it may |
| 09:37.18 | p0n2 | Hello, anyone can tell me where can I get and DVD iso for Debian -testing ? |
| 09:37.26 | p0n2 | s/and/an |
| 09:37.52 | debi | nkuttler:You are not sure? |
| 09:38.01 | pclover | i don't think there is a testing iso |
| 09:38.19 | nkuttler | debi: it depends on your configuration |
| 09:38.29 | nkuttler | p0n2: https://www.debian.org/devel/debian-installer/ |
| 09:38.44 | debi | nkuttler: What configuration? |
| 09:38.44 | nkuttler | p0n2: notice that #debian does not recommend this method. install stable. upgrade to testing |
| 09:38.47 | *** join/#debian ki0 (~ki0@212.230.172.17) |
| 09:38.56 | nkuttler | debi: your repository sources mostly |
| 09:39.09 | cuqa_ | is shellshock even remotely as vulnerable as heartbleed? |
| 09:39.17 | debi | nkuttler: What should I do to make sure? |
| 09:39.19 | nkuttler | cuqa_: you could argue it's worse |
| 09:39.29 | *** join/#debian TJ- (~TJ@jeeves.iam.tj) |
| 09:39.34 | p0n2 | nkuttler: Okay thanks |
| 09:39.37 | nkuttler | debi: how about running an apt-get upgrade? |
| 09:39.40 | cuqa_ | so how does the vulnerability work? |
| 09:39.51 | nkuttler | debi: and the paste.debian.net the output of apt-cache policy bash |
| 09:40.02 | *** join/#debian EntropyArchive (~Thunderbi@198.86.76.200) |
| 09:40.06 | *** part/#debian debi (~ev@5.118.2.52) |
| 09:40.10 | nkuttler | cuqa_: remote command execution is possible |
| 09:40.15 | cuqa_ | I mean if you only run some bash scripts locally on your server, .. I dont see a method how this could be exploited unless someone has ssh access |
| 09:40.17 | chrisc | cuqa_: https://security.stackexchange.com/questions/68122/what-is-a-specific-example-of-how-the-shellshock-bash-bug-could-be-exploited |
| 09:40.25 | p0n2 | nkuttler: I really need the 3 DVD ? |
| 09:40.26 | *** join/#debian debi (~ev@5.118.2.52) |
| 09:40.27 | cuqa_ | thank you |
| 09:40.32 | nkuttler | cuqa_: or https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/ |
| 09:40.42 | nkuttler | p0n2: no. netinst will work fine |
| 09:40.45 | nkuttler | !tell p0n2 about netinst |
| 09:40.51 | *** part/#debian debi (~ev@5.118.2.52) |
| 09:41.18 | p0n2 | I can't from netinstall, I'm at school with weirds wpa configuration. I'm not sure it will work |
| 09:41.36 | nkuttler | p0n2: well, then you probably want to get cd 1 |
| 09:41.42 | nkuttler | or dvd1, or whatever |
| 09:41.45 | asher1 | nkuttler tell to me if this right what i understand from your explain is i need take the command like this /etc/apt/build-essential right? |
| 09:42.03 | p0n2 | nkuttler: The other are not necessary ? |
| 09:42.11 | nkuttler | asher1: no. you need something like $EDITOR /etc/apt/sources.lis |
| 09:42.22 | *** join/#debian r3n1c0n (~r3n1c0n@195.169.155.126) |
| 09:42.30 | nkuttler | p0n2: no. you can install everything else you want later |
| 09:42.35 | p0n2 | Okay thanks |
| 09:43.03 | *** join/#debian TheLive1 (~Sajjad@94.97.145.29) |
| 09:43.08 | *** join/#debian goldkatze (~nobody@unaffiliated/goldkatze) |
| 09:44.10 | p0n2 | Bye |
| 09:44.15 | asher1 | what is mean EDITOR? like this build-essential/etc/apt/sources.lis |
| 09:44.25 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 09:44.48 | nkuttler | asher1: maybe you should talk to your sysadmin |
| 09:45.01 | *** join/#debian Artabros (~Artabros@li270-254.members.linode.com) |
| 09:45.10 | *** join/#debian BenNZ (~Ben__@121-72-172-75.dsl.telstraclear.net) |
| 09:45.22 | asher1 | maybe i happy if you can explain to me |
| 09:45.53 | *** join/#debian ulli (~ulrike@cable-78-35-97-7.netcologne.de) |
| 09:45.57 | nkuttler | asher1: i'm not sure how to explain it better |
| 09:46.12 | nkuttler | asher1: i mean, you seem to lack basic skills like editing files |
| 09:46.26 | Guest16462 | hi, does anybody know if "bash" is gonna fixed in squeeze? |
| 09:46.33 | nkuttler | !tell Guest16462 about squeeze-lts |
| 09:46.47 | *** join/#debian rgr (~user@host-2-97-250-186.as13285.net) |
| 09:47.26 | shay_shay_ | hmmm thinking about making a nas. guys whats the most reliable way to mirror a boot partition? i want it to boot if one drive fails |
| 09:48.07 | *** join/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 09:48.10 | *** part/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 09:48.18 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 09:48.20 | cuqa_ | !tell cuqa_ about squeeze-lts |
| 09:49.48 | TJ- | asher1: "$EDITOR" is a shell variable, set by the system to the path to the preferred text editor. If, for example, EDITOR="/usr/bin/vim" then when you type "$EDITOR /etc/apt/sources.list" the variable $EDITOR is replaced with its value, so the command executed is "/usr/bin/vim /etc/apt/sources.list" |
| 09:50.24 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 09:50.30 | *** join/#debian AlexWH88 (~alexwh@179.176.117.95.dynamic.adsl.gvt.net.br) |
| 09:51.21 | koell | because you always type "$EDITOR foo.txt" :D |
| 09:51.25 | *** join/#debian mennea (~textual@31.210.186.90) |
| 09:52.51 | asher1 | ok TJ |
| 09:52.53 | asher1 | thanks |
| 09:53.00 | TJ- | koell: When helping people, giving instructions for editing text using $EDITOR ... ensures their preferred text editor is always used |
| 09:53.10 | asher1 | i no very much know about debian |
| 09:53.13 | *** join/#debian Alina-malina (~Alina-mal@unaffiliated/alina-malina) |
| 09:53.19 | *** join/#debian Artabros (~Artabros@li270-254.members.linode.com) |
| 09:53.30 | Phyliares | shay_shay_: RAID1, mdadm package, installer is also able to do that |
| 09:53.59 | Phyliares | shay_shay_: just ensure to install boot loader into you 2 disks |
| 09:54.23 | *** join/#debian t_dmitry (~t_dmitry@194.213.110.76) |
| 09:54.33 | *** part/#debian buu (~buu@75.108.214.110) |
| 09:55.04 | *** join/#debian Zzeiss (~wsy@68-245-80-175.pools.spcsdns.net) |
| 09:55.27 | shay_shay_ | Phyliares: i wonder if ESP partitions will work on mdadm mirror |
| 09:55.31 | *** join/#debian pclover (~pclover@unaffiliated/pclov3r) |
| 09:55.43 | *** join/#debian fusmu (~fusmu@195.24.50.132) |
| 09:56.12 | TJ- | shay_shay_: Yes, but the EFI firmware will usually only pick one of the underlying devices to work from |
| 09:56.16 | *** join/#debian ki0 (~ki0@212.230.172.17) |
| 09:58.09 | r3n1c0n | any one got a reposity for me for masscan? |
| 09:58.47 | Walex | TJ-: you means 'sensible-editor' of course this being #Debian :-) |
| 09:59.34 | TJ- | Walex: I was explaining what nkuttler was meaning |
| 09:59.35 | shay_shay_ | TJ-: only thing which might make it not work is FD00 vs EF00 partition types.. afaik mdadm requires FD and uefi requires EF, but how often in practice does it really matter? |
| 09:59.35 | Walex | shay_shay_: do you have a BIOS that handles a list of disks to boot from? |
| 09:59.59 | *** join/#debian bertrik (~quassel@rockbox/developer/bertrik) |
| 10:00.00 | *** join/#debian dddddd (~dddddd@62.42.11.214.dyn.user.ono.com) |
| 10:00.07 | RichiH | what's the bit to set so that all files copied into a directory get chmod/chown'ed to what i want? |
| 10:00.12 | TJ- | shay_shay_: I usually make the entire disk a mirror, not individual partitions |
| 10:00.17 | Walex | shay_shay_: what makes you think that "mdadm requires FD |
| 10:00.48 | RichiH | the magic keyword to search for escapes me and i only find basic howtos for chown |
| 10:00.57 | *** part/#debian zhaodx (~Thunderbi@218.76.52.64) |
| 10:01.19 | shay_shay_ | Walex: i dont know, thats why i am asking. i read it somewhere |
| 10:01.22 | Walex | shay_shay_: also note that you are confusing the boot sector or its EFI equivalent and the '/boot' partition |
| 10:01.47 | shay_shay_ | i'm not confusing them, i'm talking about two seperate things |
| 10:01.50 | TJ- | shay_shay_: "FD00" doesn't exist - that is purely a 'gdisk' short-code for the Linux RAID GUID in GPT |
| 10:01.57 | nkuttler | RichiH: is that even possible? sounds like an acl thing |
| 10:02.01 | Walex | shay_shay_: "fd" used to be the type for autoassembled *by the kernel* RAID sets, but it is obsolete... |
| 10:02.42 | Walex | shay_shay_: again also note the difference between mirroring the BIOS boot data and the Linux boot data. |
| 10:02.50 | shay_shay_ | so i'll use use EF00 on the two partitions and use mdadm to mirror them |
| 10:02.50 | shay_shay_ | got it |
| 10:02.54 | *** join/#debian harobed (~harobed@equ57-1-78-235-121-109.fbx.proxad.net) |
| 10:03.11 | Walex | shay_shay_: I am not sure that is "got it" yet |
| 10:03.22 | shay_shay_ | i got it :) |
| 10:03.52 | *** join/#debian n3p` (~n3p@189.225.92.129) |
| 10:03.53 | *** join/#debian ee2455 (~ee2455@unaffiliated/ee2455) |
| 10:04.35 | shay_shay_ | TJ-: i'm making the rest partitions for btrfs raid10 |
| 10:04.54 | *** join/#debian huayra (~ruben@ubuntu/member/hubuntu) |
| 10:04.57 | TJ- | shay_shay_: You might also want to ensure you use a meta-data version less than 1.1, so it doesn't confuse the firmware |
| 10:05.14 | Walex | shay_shay_: and which metadata type will you use for the EFI partition RADI1? :-) |
| 10:07.06 | RichiH | nkuttler: when i still used svn with berkeley db, i did something to make this work |
| 10:07.15 | RichiH | nkuttler: but it's been 10+ years |
| 10:07.18 | RichiH | so... |
| 10:08.11 | *** join/#debian nikio_ (~K@50728114.static.ziggozakelijk.nl) |
| 10:08.26 | asher1 | TJ i take what you write to me and i write like this /usr/bin/vim /etc/apt/sources.list this ok? |
| 10:08.49 | nkuttler | RichiH: well, SGID is kinda supposed to do that |
| 10:09.16 | shay_shay_ | Walex: i dont know, what would you recommend? |
| 10:09.41 | TJ- | asher1: Before you do that, do you know how to use "vim" ? If not, don't use that command because you'll get lost trying to understand it. If you're using a graphical user interface *GUI), use the GUI text editor it provides |
| 10:09.47 | Walex | nkuttler: "lack basic skills like editing files" is such a funny statement :-) |
| 10:09.51 | *** join/#debian booby_tables_24 (~booby_tab@117.197.232.61) |
| 10:10.20 | Walex | shay_shay_: I am trying to suggest that you did not "get it" if you haven't considered that point |
| 10:10.27 | asher1 | no TJ |
| 10:10.29 | *** join/#debian secrgb (~j@62.0.168.213.sta.estpak.ee) |
| 10:10.32 | TJ- | shay_shay_: You might also want to ensure you use a meta-data version less than 1.1, so it doesn't confuse the firmware |
| 10:10.36 | asher1 | this my first time i used with debian |
| 10:11.10 | Walex | asher1: that's fine but you are trying to do system administration, and that is not a totally trivial activity. |
| 10:11.13 | *** join/#debian Artabros (~Artabros@li270-254.members.linode.com) |
| 10:11.40 | asher1 | Media change: please insert the disc labeled |
| 10:11.40 | asher1 | <PROTECTED> |
| 10:11.40 | asher1 | in the drive '/media/cdrom/' and press enter |
| 10:11.42 | Walex | asher1: and under Debian and most GNU/Linux distros system administration requires editing a number of text files. |
| 10:11.44 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 10:11.47 | *** join/#debian dselect (~dselect@unaffiliated/themill/bot/dselect) |
| 10:11.48 | pclover | first time i've run into dep issues with debian |
| 10:11.56 | asher1 | this what i see from terminal |
| 10:12.01 | asher1 | and really i try :\ |
| 10:12.18 | *** join/#debian jrgill (~jrgill@unaffiliated/jrgill) |
| 10:12.18 | Walex | asher1: that's good, it is asking for you to insert the installation disk. |
| 10:12.41 | Walex | asher1: note that if you have booted from it, it should be already there. |
| 10:12.53 | pclover | http://pastie.org/private/uwdpe9hyfk6ea36msntaeg |
| 10:12.54 | *** join/#debian hellangel7 (~hellangel@117.221.122.20) |
| 10:13.02 | shay_shay_ | Walex: >_> |
| 10:13.11 | Walex | asher1: usually you will have only one CD/DVD drive, so there is no question as to which one. |
| 10:13.14 | nkuttler | pclover: entire command + output please. paste.debian.net |
| 10:13.42 | nkuttler | ,v libvolk0.0.0 |
| 10:13.43 | judd | Package: libvolk0.0.0 on i386 -- wheezy: 3.5.3.2-1; wheezy-backports: 3.7.3-9~bpo70+1; sid: 3.7.5-3; jessie: 3.7.5-3 |
| 10:13.52 | pclover | http://paste.debian.net/123215/ |
| 10:14.00 | Walex | asher1: BTW that is a bit old for an installation disk. |
| 10:14.10 | asher1 | how? |
| 10:14.16 | pclover | these are backports |
| 10:14.22 | pclover | not sure if that is supported or not here |
| 10:14.36 | Walex | asher1: how what? Insert the disk in a CD/DVD drive? |
| 10:14.37 | nkuttler | pclover: well, backports tend to mess up things |
| 10:14.57 | pclover | not in stable so |
| 10:15.06 | asher1 | i install this from disk |
| 10:15.08 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 10:15.17 | pclover | nkuttler, suggestions? |
| 10:15.22 | nkuttler | pclover: sure, it happens |
| 10:15.26 | *** join/#debian StathisA (~StathisA@athedsl-375052.home.otenet.gr) |
| 10:15.36 | Walex | asher1: is your Debian system already installed then? |
| 10:16.03 | Walex | asher1: I am sorry, but I haven't followed your previous discussion. |
| 10:16.14 | shay_shay_ | ty TJ- i am reading about it now |
| 10:16.34 | nkuttler | Walex: he wants that shellshock security update.. |
| 10:16.56 | Walex | nkuttler: ahhhhhhhhhhhhhhhhhhh |
| 10:16.58 | nkuttler | not that it would hurt to fix hearbleed either, or any other security fix released in a few years.. |
| 10:17.08 | Walex | asher1: what could be happening is that when you install Debian from a CD/DVD, the name of that CD/DVD is added to the list of places from which software can be downloaded. |
| 10:17.31 | asher1 | i download debian from somewhere link |
| 10:17.41 | asher1 | and i copy this to disk |
| 10:17.47 | Walex | asher1: so every time you want to update some sw in Debian, that CD/DVD will be prompted for. |
| 10:17.53 | pclover | nkuttler, or what would you suggest here |
| 10:18.01 | *** join/#debian Ratboy (~ratboy@essn-d9bb67c0.pool.mediaWays.net) |
| 10:18.13 | pclover | my knowledge with deb is not as good as rpms |
| 10:18.14 | Walex | asher1: however you can just press ENTER and the attempt to access it will fail, and things should continue fine. |
| 10:18.20 | *** join/#debian futex_ (~Senseo@i15-les02-th2-5-48-48-212.sfr.lns.abo.bbox.fr) |
| 10:18.24 | asher1 | ok |
| 10:18.25 | nkuttler | pclover: well, one thing to try is to remove all other backports, and install only the one you really want. mixing several backports can lead to breakage |
| 10:18.39 | pclover | okay |
| 10:19.09 | *** join/#debian Otyugh (~otyugh__@ARennes-251-1-223-215.w2-11.abo.wanadoo.fr) |
| 10:19.21 | Walex | asher1: but really as someone was suggesting before you should update the list of places from which your Debian system downloads updates. |
| 10:19.24 | *** join/#debian r420r (isaacbsd@unaffiliated/r420r) |
| 10:20.00 | Walex | asher1: you can do this in two ways: by editing by hand the relevant configuration file, or by *replacing* that file with a "standard" one. |
| 10:20.17 | Walex | feels very patient today |
| 10:20.30 | asher1 | ok i try to do this thanks Walex |
| 10:20.32 | nkuttler | Walex: don't forget about the lts sources |
| 10:20.50 | Walex | has just done a web search for "squeeze sources.list lts" |
| 10:21.00 | nkuttler | !tell Walex about squeeze-lts |
| 10:21.29 | *** join/#debian mennea (~textual@31.210.186.90) |
| 10:21.43 | *** join/#debian brian-mac (~textual@5.149.168.66) |
| 10:22.28 | pclover | nkuttler, think i did that and no luck |
| 10:22.38 | Walex | trying to find a cut-and-paste 'sources.list' dfor "ahser1" |
| 10:22.50 | nkuttler | Walex: you can also /msg dpkg sources.list |
| 10:23.57 | Walex | nkuttler: that is not directly relevant... |
| 10:24.10 | nkuttler | Walex: alright then... |
| 10:24.22 | *** join/#debian robinsz (~robin@88.97.63.122) |
| 10:25.13 | Walex | in an ideal world "asher1" would get a URL to a totally "cut-and-paste" 6/Squeeze LTS 'sources.list' not instructions on how to put it together as that may involve "complications" :-) |
| 10:26.00 | nkuttler | Walex: that's why i'm using you as a proxy.. |
| 10:26.37 | TJ- | Walex: source-code of the installer? :) |
| 10:26.44 | Walex | nkuttler: I saw you were rather patient earlier but then got a bit frustrated :-) |
| 10:27.26 | *** join/#debian grobda24 (~grobda24-@silentflame/member/grobda24) |
| 10:27.29 | Walex | asher1: this page has a reasonably looking content that you can copy to '/etc/apt/source.list': http://gnutwoall.wordpress.com/2014/07/02/how-to-debian-squeeze-lts/ |
| 10:27.47 | Walex | asher1: do you need a suggestion of the specific commands to do that? |
| 10:28.04 | *** join/#debian SebSebastian (~SebSebast@62-210-142-205.rev.poneytelecom.eu) |
| 10:30.19 | *** join/#debian lennycz (~lennycz@ip-89-177-132-112.net.upcbroadband.cz) |
| 10:30.38 | *** join/#debian ShiroNeko (~MrHeisenb@ip-88-153-40-59.hsi04.unitymediagroup.de) |
| 10:31.35 | *** join/#debian gerforce (~zoujunc@120.210.166.152) |
| 10:31.50 | ShiroNeko | hello, i have problem with cpufrequtils. my cpu (core2quad q8300) stays always at 2Ghz. cpufreq-info seay hw-limit 2.0Ghz - 2.17Ghz and cpufreq-set is not working |
| 10:31.53 | ShiroNeko | Debian Wheezy |
| 10:32.29 | *** join/#debian lredd (~lreddredd@pa49-180-130-65.pa.nsw.optusnet.com.au) |
| 10:32.40 | *** join/#debian diniwed (~gavron@pool-74-108-225-30.nycmny.fios.verizon.net) |
| 10:32.58 | *** join/#debian Xiti (~Xiti-@unaffiliated/xiti) |
| 10:33.12 | Walex | ShiroNeko: that's not a 'cpufreq-utils' problem, it is either a configuration problem (you chose the wrong governor) or a system problem (the CPU frequency control driver is not available). |
| 10:33.55 | ShiroNeko | govenour is ondemand |
| 10:33.57 | Walex | ShiroNeko: alternatively, you do have a background process that runs often enough. Many web sites that use JavaScript essentially busy-loop. |
| 10:34.25 | Walex | ShiroNeko: try to use 'powertop' to check what is going on... |
| 10:34.31 | ShiroNeko | Walex: and CPU is idle most time, it stays at 2Ghz constantly. |
| 10:34.34 | *** join/#debian bdog7 (~bdog7@77.41.96.58.static.exetel.com.au) |
| 10:35.13 | ShiroNeko | but what i'm wandering is, /proc/sys/cpuinfo says 2.5Ghz maximum, cpufreq-info 2.17Ghz max hw-limit |
| 10:35.19 | Walex | ShiroNeko: DSouble check with 'powertop', tabs "Idle stats" and "frequency stats" |
| 10:35.55 | Walex | ShiroNeko: perhaps you have one of those CPUs with "turbo" mode when they run a subset of the cores. |
| 10:36.29 | *** join/#debian booby_tables_24 (~booby_tab@117.197.232.61) |
| 10:37.32 | *** join/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 10:37.33 | ShiroNeko | the q8300 is quite old and has no turbo |
| 10:37.35 | ShiroNeko | http://pastebin.com/YSP7vsPD |
| 10:38.09 | *** join/#debian linuxuz3r (~linuxuz3r@2602:306:bd2a:a160:3967:2238:7606:5057) |
| 10:38.11 | ShiroNeko | normally the CPU should be between 1.6Ghz and 2.5 Ghz not 2.0 to 2.17 |
| 10:38.30 | Walex | ShiroNeko: note that some of the reported numbers don't make sense.,.. |
| 10:39.24 | ShiroNeko | why? |
| 10:39.32 | sadsagfjg | hi, i upgrading bash but computer shutdown and now my computer cant boot and not usally run command and eror Read-only file system |
| 10:39.54 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 10:40.13 | Walex | ShiroNeko: "1885,1%" ? |
| 10:40.20 | nkuttler | sadsagfjg: so what happens when you boot? you get prompted for the root password? |
| 10:41.30 | *** join/#debian carandraug (~carandrau@octave/developer/carandraug) |
| 10:41.47 | TJ- | sadsagfjg: Sounds like it may have dropped to a shell in the initrd |
| 10:41.59 | sadsagfjg | nkuttler: In Root gives me this error . |
| 10:41.59 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 10:41.59 | ShiroNeko | Walex: module acpi_cpufreq is loaded, should not be any problem. maybe just wrong values? |
| 10:42.46 | Walex | ShiroNeko: the point I am trying to make is perhaps that the CPU frequency control driver is not fully debugged for the Q8300, which is an old CPU that probably no kernel developer still uses... |
| 10:43.06 | nkuttler | sadsagfjg: mount -o remount,rw /, then reinstall bash |
| 10:44.09 | *** join/#debian Jemt (59efc040@gateway/web/freenode/ip.89.239.192.64) |
| 10:44.14 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 10:44.30 | Jemt | Hi. I'm running Debian 6 - how do I protect myself from Shell Shock ? |
| 10:44.37 | Jemt | (it's a web server) |
| 10:44.39 | nkuttler | !tell Jemt about squeeze-lts |
| 10:44.45 | *** join/#debian Abd_Allatif (~abd@unaffiliated/abd-allatif/x-6736565) |
| 10:45.07 | sadsagfjg | nkuttler: eror: cannot remount block device /dev/sda1 read-write. is write-protected |
| 10:45.13 | jelly | Jemt: either upgrade to debian 7, or enable squeeze-lts repos and patch up |
| 10:45.14 | Jemt | Thanks |
| 10:45.17 | nkuttler | sadsagfjg: sounds like a hardware problem then |
| 10:45.26 | Walex | ShiroNeko: seems to be a common problem BTW, try 'cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_available_frequencies' |
| 10:46.15 | pclover | best solution probably is to just patch it |
| 10:46.32 | pclover | imo distro upgrades should not be take lightly |
| 10:46.39 | sadsagfjg | nkuttler: Ultimate is a hard problem ? |
| 10:47.10 | jelly | Jemt: if you're running web servers for a commercial entity, consider paying for squeeze-lts work -- people doing it do not have enough funds for all the work yet. http://www.freexian.com/en/services/debian-lts.html |
| 10:47.17 | nkuttler | sadsagfjg: HARDWARE |
| 10:47.21 | ShiroNeko | Walex: 2166000 2000000 |
| 10:47.32 | nkuttler | sadsagfjg: as in your disk is broken. or you flipped a read-only switch it has |
| 10:47.37 | Walex | ShiroNeko: everything is working as it ought to :-) |
| 10:47.49 | Jemt | jelly: Where can I donate ? |
| 10:48.04 | *** join/#debian grandie (~siducer75@p57ACF662.dip0.t-ipconnect.de) |
| 10:48.06 | Jemt | Oh, never mind |
| 10:48.16 | Jemt | Your link got wrapped to next line so I missed it |
| 10:48.36 | Walex | ShiroNeko: http://ubuntuforums.org/archive/index.php/t-822401.html |
| 10:48.58 | *** join/#debian Miesco (~mugsy@dyn-192-249-128-130.nexicom.net) |
| 10:49.09 | *** join/#debian Miesco_ (~mugsy@dyn-192-249-128-130.nexicom.net) |
| 10:49.30 | sadsagfjg | nkuttler: and eror:EXT4-fs eror (device sda1): ext4_remount :4558 :abort forced by user mount: |
| 10:50.05 | nkuttler | sadsagfjg: that looks incomplete. please use paste.debian.net. also add the output of dmesg |
| 10:50.41 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 10:50.43 | *** join/#debian g_r_eek (~g_r_eek@78-109-50.adsl.cyta.gr) |
| 10:51.06 | *** join/#debian Crippy (518a02bd@gateway/web/freenode/ip.81.138.2.189) |
| 10:51.21 | *** join/#debian Enissay (~Enissay@unaffiliated/enissay) |
| 10:51.24 | sadsagfjg | nkuttler: This complete EROR:EXT4-fs eror (device sda1): ext4_remount :4558 :abort forced by user mount:cannot remount block device /dev/sda1 read-write. is write-protected |
| 10:51.37 | *** join/#debian mennea (~textual@31.210.186.90) |
| 10:52.09 | *** join/#debian Lady_Aleena (~L_Aleena@unaffiliated/lady-aleena) |
| 10:52.22 | *** join/#debian mennea (~textual@31.210.186.90) |
| 10:52.22 | *** part/#debian Bluewolf (~bluewolf@196.44.185.145) |
| 10:52.29 | *** join/#debian joegiampaoli (~joegiampa@189.217.26.104) |
| 10:52.37 | pclover | sadsagfjg, what does dmesg | grep EXT4-fs say just that one error? |
| 10:53.09 | twisted` | hey, I have the problem that OpenJDK7 for some reason prefers IPv6. I can prevent this by doing: export _JAVA_OPTIONS="-Djava.net.preferIPv4Stack=true" however if I set this in /etc/environment or /etc/profile.d/ipv4.sh it doesn't get picked up during boot for init script. Any ideas? |
| 10:54.08 | Walex | twisted`: yes. |
| 10:55.12 | shay_shay_ | Walex: the arch wiki had all the info i needed including the metadata type to use, partition types to use and most of the "who what and why" |
| 10:55.29 | *** join/#debian osf (~osf@189.58.110.185) |
| 10:55.38 | sadsagfjg | nkuttler: Is hard disk broken?Is broken? |
| 10:55.39 | shay_shay_ | https://wiki.archlinux.org/index.php/UEFI#ESP_on_RAID |
| 10:55.48 | Walex | shay_shay_: so perhaps it was not as simple as "get it" :-) |
| 10:56.06 | shay_shay_ | Walex: i get a lot more than you think >:| |
| 10:56.23 | shay_shay_ | :) |
| 10:56.34 | sadsagfjg | pclover: I cant type this eror for my pc is not worked and me work on other computer |
| 10:57.04 | *** join/#debian joegiampaoli (~joegiampa@189.217.26.104) |
| 10:57.10 | pclover | sadsagfjg, We need the full output. Can you take a picture of or something |
| 10:57.10 | *** join/#debian joegiampaoli74 (~joegiampa@189.217.26.104) |
| 10:57.32 | *** join/#debian Lady_Aleena (~L_Aleena@unaffiliated/lady-aleena) |
| 10:57.51 | *** join/#debian joegiampaoli (~joegiampa@189.217.26.104) |
| 10:57.55 | *** join/#debian GusBricker (~GusBricke@c122-107-239-5.mckinn3.vic.optusnet.com.au) |
| 10:58.57 | Scuttle | hm, is jessie always testing, or will jessie become stable at some point? |
| 10:59.20 | twisted` | Walex: would you care to share the idea? |
| 10:59.40 | nkuttler | Scuttle: the latter |
| 10:59.48 | Walex | shay_shay_: I guess you noticed then "It is possible to make the ESP part of a RAID1 array, but doing so brings the risk of data corruption" |
| 10:59.50 | bdog7 | Scuttle, jessie will become stable |
| 11:00.10 | afx237 | when i run the following command on debian to test for shellshock, it says "Test" rather than giving the ignoring function error, anyone know why? prior to updating to said "Exploitable Test".... env x='() { :;}; echo -n Exploitable\ ' bash -c 'echo Test' |
| 11:00.16 | Walex | Scuttle: there is no "jessie" yet. |
| 11:00.25 | *** join/#debian teran (~teran@91.218.144.129) |
| 11:00.31 | Walex | Scuttle: there is an archive called "testing". |
| 11:00.34 | Scuttle | alright |
| 11:00.38 | sadsagfjg | pclover: PLease wait friend |
| 11:01.00 | bdog7 | Walex, jessie is used for the reops though |
| 11:01.02 | Walex | Scuttle: there is a difference that even many withing the Debian project don't perceive between a release and an archive. |
| 11:01.07 | bdog7 | repo's |
| 11:01.32 | pclover | sadsagfjg, another thing you could do is install smarttools and run smartctl --all /dev/sdX X is your hard drive |
| 11:01.32 | Scuttle | I installed from a jessie-iso and it says jessie in source.list. I would like to keep the machine at testing-level. Can I just replace jessie with testing? |
| 11:01.35 | pclover | and looks for issues |
| 11:01.35 | *** join/#debian kernalogs (~jacko@188.29.164.92.threembb.co.uk) |
| 11:01.40 | shay_shay_ | Walex: yes i'm not going to do it anymore. instead i'm going to keep /boot within my raid10, and /boot/efi will be on a single seperate partition which i will copy the efi stub kernels to. that way if the single partition fails it will be trivial to simply make a new one and copy the current kernel to it. i wrote a script for this: https://gist.github.com/shawnbon206/52e7bdf717a487710940 |
| 11:01.43 | pclover | such as relocated sectors pending sectors etc |
| 11:01.51 | nkuttler | Scuttle: yes |
| 11:01.55 | ShiroNeko | just another thing, hdparm seems to be not working correctly. hdparm -Y /dev/sdx works great. Drives stay idle until they're used. but they dont switch into standby automaticlly |
| 11:01.55 | Scuttle | cool, cool |
| 11:03.05 | *** part/#debian Crippy (518a02bd@gateway/web/freenode/ip.81.138.2.189) |
| 11:03.19 | Walex | Scuttle: a release is a collection of package versions "approved" by the FTP masters. An archive is a download repository of packages, which may or may not eventually become a release. |
| 11:03.51 | Scuttle | so right now jessie is an archive, and will eventually become a release? |
| 11:04.13 | ShiroNeko | /etc/hdparm.conf does exist and i don't get any errors after service hdparm restart |
| 11:04.19 | Walex | ShiroNeko: "hdparm -Y" is not what I would use, but if you like to live dangerously... |
| 11:04.47 | ShiroNeko | Walex: i've just used it for testing |
| 11:05.34 | *** join/#debian dpkg (~dpkg@unaffiliated/dpkg) |
| 11:05.43 | Walex | Scuttle: yes, the "testing" archive will always contain packages that are candidates for whichever release will be "next" |
| 11:05.51 | Scuttle | right |
| 11:05.52 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 11:05.57 | *** join/#debian Paradisee (~quassel@2.239.28.120) |
| 11:06.45 | Scuttle | and the next testing will be mr potatohead or something... |
| 11:06.58 | Walex | Scuttle: that was quite a few years back... |
| 11:07.03 | Scuttle | oh :) |
| 11:07.37 | bdog7 | I'm a fan of sid who breaks the toys |
| 11:08.00 | Scuttle | heh... think the first one I seriously began using was woody... |
| 11:08.00 | nkuttler | Scuttle: potato was already a release |
| 11:08.20 | Walex | Scuttle: if your goal is to participate to the package-testing effort for whichever next release, then the "testing" archive is the right one. |
| 11:08.43 | *** join/#debian phuh (~phuh@cp66-203-194-42.cp.telus.net) |
| 11:08.51 | nkuttler | personally, i really dislike testing. you get neither stability nor fast bug fixes |
| 11:09.03 | Walex | Scuttle: but if your goal is to have in effect a "try out the latest and greatest rolling release", then the "unstable" archive is better. |
| 11:09.06 | nkuttler | and when testing breaks it can take weeks for fixes to transition into it |
| 11:09.25 | Walex | Scuttle: but if your goal is to have in effect a "try out the latest and greatest rolling *not*-release", then the "unstable" archive is better. |
| 11:09.39 | bdog7 | Today i like unstable......... let the excitement build to break my system and do a fresh install if I can't fix it |
| 11:09.56 | nkuttler | bdog7: reinstall is never necessary |
| 11:10.06 | nkuttler | bdog7: you'll learn more by fixing the problems anyway |
| 11:10.29 | Walex | ShiroNeko: I would rather use 'hdparm -y', as "sleep" mode for drives is a bit weird and dangerous. |
| 11:10.33 | bdog7 | nkuttler, well yes but.............. i haven't had a problem yet :( |
| 11:11.41 | *** join/#debian akajcn (~akajcn@201.22.227.179) |
| 11:11.47 | *** join/#debian akajcn (~akajcn@unaffiliated/akajcn) |
| 11:11.53 | *** join/#debian fusmu (~fusmu@195.24.50.132) |
| 11:13.09 | Walex | ShiroNeko: another suitable option is to set the spin-down timeout to a relatively short time, like 'hdparm -S 60' for 5 minutes. |
| 11:14.22 | sadsagfjg | pclover: This link: http://imgur.com/HM8ZEJL |
| 11:15.54 | pclover | that does not look like |
| 11:15.56 | pclover | i mean |
| 11:15.58 | pclover | that does not look good |
| 11:16.16 | pclover | sadsagfjg, how about smartctl --all /dev/sda |
| 11:16.45 | *** join/#debian olegfusion (~olegfusio@46.191.226.49) |
| 11:18.04 | *** join/#debian tonythomas (uid25971@gateway/web/irccloud.com/x-gqtvttsbgdsszjwo) |
| 11:18.40 | sadsagfjg | pclover: bash: smartctl:command not found |
| 11:19.53 | pclover | sadsagfjg, hum was to try and check for smart erros guess you don't have it intalled |
| 11:21.41 | *** join/#debian ct0 (~ct0@pool-173-70-194-120.nwrknj.fios.verizon.net) |
| 11:22.14 | Walex | twisted`: have you had a look at '/etc/java-6-openjdk/net.properties'... |
| 11:22.19 | linuxthefish | what is named listning on port 53? |
| 11:22.26 | *** join/#debian teraflops (~teraflop@77.225.225.204) |
| 11:22.29 | sadsagfjg | pclover: I can t install this. |
| 11:22.32 | linuxthefish | and how do i stop it, "killall -9 named" works but i don't know the service or package name |
| 11:22.37 | Walex | linuxthefish: the DNS name server or resolver... |
| 11:22.46 | Walex | linuxthefish: 'bind9' |
| 11:22.52 | linuxthefish | oh cheers |
| 11:23.08 | sadsagfjg | pclover: my pc dont work and can t download this. |
| 11:23.16 | Walex | linuxthefish: 'dpkg -S /usr/bin/<whatever>' tells you the package name |
| 11:24.20 | *** join/#debian Mikrop_ (~mikrop@office.bearstech.com) |
| 11:24.38 | *** join/#debian krasimir (~krasimir@215.Red-88-13-169.dynamicIP.rima-tde.net) |
| 11:24.43 | *** join/#debian swatti (~mail@business-89-132-60-56.business.broadband.hu) |
| 11:24.55 | pclover | sadsagfjg, do you have a boot disk |
| 11:25.19 | sadsagfjg | pclover: I have cd live. |
| 11:25.29 | pclover | you could try to run fsck on it |
| 11:25.32 | pclover | on the filesystem |
| 11:25.42 | krasimir | hi all , do you know if you can unlock encrypted HDD by some hardware ID , so that the HDD can be accessed only while attached as bootable to that particular machine. |
| 11:25.51 | *** join/#debian cromag (~cromag@irssi/user/cromag) |
| 11:25.56 | *** join/#debian afhkga (~rick@adsl-ull-234-254.45-151.net24.it) |
| 11:26.30 | Walex | krasimir: you can do a lot of stuff if you are willing to invest the money. |
| 11:26.55 | cromag | when /msg dpkg dsa3032 <- it tells me it's fixed, is that true? or just old info.. |
| 11:26.57 | *** join/#debian eristisk (~eristisk@gateway/tor-sasl/eristisk) |
| 11:27.06 | *** join/#debian Atlas (atlas@unaffiliated/atlas-) |
| 11:27.33 | Walex | krasimir: and by "a lot of stuff" I mean even weird ideas like that. |
| 11:27.44 | krasimir | Walex : so nothing ready to use ? I don;t mind paying for it. |
| 11:27.44 | *** join/#debian beejee (~beejee@office.kangaroot.net) |
| 11:27.47 | tremon | krasimir: you can, debian cryptsetup allows you to write your own unlock scripts |
| 11:28.08 | tremon | (provided you're on stable, since systemd doesn't support it) |
| 11:28.10 | Walex | krasimir: you may perhaps be interested in TPM and the 'trousers' package. |
| 11:28.16 | *** join/#debian AsumFace (~asumface@95.91.229.188) |
| 11:28.27 | *** join/#debian Behi_ (~Behi@101.160.30.238) |
| 11:28.50 | *** join/#debian rgr|android (~Android@host-78-149-42-69.as13285.net) |
| 11:29.05 | cuqa_ | !tell cuqa_ about squeeze-lts |
| 11:29.15 | krasimir | I have heard of TPM , but never used it. Let me read more about it. |
| 11:29.20 | Walex | krasimir: but note that your idea is rather questionable. |
| 11:29.27 | *** join/#debian autochthon (~autochtho@0170300545.1.fullrate.dk) |
| 11:29.32 | sadsagfjg | pclover: on cd live? |
| 11:29.53 | ShiroNeko | Walex: okay, hdparm -S 60 does work. so something is accessing the disks in the set 60mins, so the disks won't spin donw |
| 11:30.08 | *** join/#debian _Paul (~Paul@p5B0F5C32.dip0.t-ipconnect.de) |
| 11:30.21 | Walex | ShiroNeko: something is accessing the disks... |
| 11:30.52 | Walex | ShiroNeko: and how soon do the disks spin up after 'hdparm 'y'? |
| 11:30.56 | Walex | ShiroNeko: and how soon do the disks spin up after 'hdparm -y'? |
| 11:31.09 | Walex | ShiroNeko: monitor accesses with 'iostat -dkxz 1' |
| 11:31.14 | *** join/#debian Svetlana (quasselcor@freenode/staff/gry) |
| 11:31.20 | pclover | yeah with the system unmonuted |
| 11:31.25 | pclover | filesystem |
| 11:31.26 | krasimir | Walex : maybe I am approiching this wrong. I have devellopped some php app which has a lot of password on it. It will be installed on a server in clients premises so at one point if the pachine is stolen I don't anyone has access to the php files and the db fomr that server. |
| 11:31.55 | krasimir | and on top of this I want to be fully automated when the machine is booted. no passwords prompts , etc. |
| 11:32.10 | Walex | krasimir: thatg's a much better statement of the problem... |
| 11:32.25 | Walex | krasimir: the difficulty is "when the machine is booted. no passwords prompts". |
| 11:32.45 | *** join/#debian grandie (~siducer75@p57ACF662.dip0.t-ipconnect.de) |
| 11:32.49 | Walex | krasimir: never mind "some php app which has a lot of password on it |
| 11:32.56 | krasimir | yes I know , but no other way as this machine might not have internet access so it will be impossible for me to unlock remotely. |
| 11:32.56 | *** join/#debian Sevet (~Sevet@05453846.skybroadband.com) |
| 11:33.04 | Walex | krasimir: never mind "some php app which has a lot of password on it" sounds like going looking for trouble. |
| 11:33.09 | *** join/#debian mennea (~textual@31.210.186.90) |
| 11:33.39 | *** join/#debian tty0x80 (~tty0x80@unaffiliated/tty0x80) |
| 11:33.51 | ShiroNeko | Malmis: thans, was looking for a tool like iostat for a long time |
| 11:33.57 | krasimir | can't be avoided as the php makes some API requests to other backends on it. |
| 11:33.57 | Walex | krasimir: the difficulty is that you need an encryption key and the key has to be stored somewhere on the same machine. |
| 11:34.04 | TJ- | krasimir: You could fix the unlock algorithms to some unique attribute of the system the code is intended to run on |
| 11:34.17 | krasimir | TJ- yes this is my idea |
| 11:34.24 | krasimir | sound exactly what I need. |
| 11:34.33 | Walex | krasimir: the PHP thing is that it is hard to secure a PHP app... |
| 11:34.37 | *** join/#debian bitcheker (~bitchecke@dynamic-adsl-84-221-31-105.clienti.tiscali.it) |
| 11:34.46 | krasimir | so the script will read some macine hardware ID and unlock it by this. |
| 11:34.54 | tremon | krasimir: you can't have both "fully automated" and "[not unencrypt] if the machine is stolen", unless you perform the unlock from a separate machine |
| 11:34.57 | tty0x80 | ShiroNeko, http://www.brendangregg.com/Perf/linux_observability_tools.png |
| 11:35.13 | Walex | krasimir: TJ-: making "some unique attribute of the system" part of the encription key just shifts the problem. |
| 11:35.18 | TJ- | krasimir: In the past I did that by generating an SHA sum of the machine's CMOS memory, excluding the RTC and boot-state bits/bytes |
| 11:35.45 | krasimir | TJ- : exactly what I need. is there some online tutorial to get me started ? |
| 11:36.38 | Walex | krasimir: you can protect against having the machine and the disk being hijacked/stolen *separately*, but usually that does not apply. |
| 11:36.39 | sadsagfjg | pclover: now my computer run cd live |
| 11:36.53 | TJ- | krasimir: No, that kind of workaround is best hand-crafted so you don't use a template, and you should ensure you embed the *expected* value as bytes in random locations in the code, which are never re-assembled into one contiguous region |
| 11:37.00 | pclover | you run the dvd and boot from the dvd or cd sadsagfjg ? |
| 11:37.13 | krasimir | I don;t even need it so secured. I just need to be autounlocked only when the system is booted from it. This means that if it is attached as slave it will not be unlocked. |
| 11:37.20 | *** join/#debian Almtesh (~Almtesh@unaffiliated/almtesh) |
| 11:37.38 | sadsagfjg | pclover: dvd |
| 11:37.55 | pclover | so run the dvd and boot from it |
| 11:38.12 | Walex | krasimir: put the encryption key in a USB stick, and boot from the USB stick... |
| 11:39.02 | TJ- | krasimir: I think you're approaching the issue in the wrong way. In the past external dongles were used, now we use USB devices with key-files on them. |
| 11:39.16 | krasimir | Walex : but that means that the usb key will not be encrypted so if osmeone takes the usb key they will also have the key to unlock the drive. |
| 11:39.29 | TJ- | krasimir: Store the 'passwords' on the external device, not in your code |
| 11:39.35 | *** join/#debian Slyder (~Slyder@pool-96-230-70-184.bstnma.fios.verizon.net) |
| 11:39.40 | Walex | krasimir: the encryption key must be unencrypted or else you have a boot prompts. |
| 11:39.51 | Walex | krasimir: there is no way around it. |
| 11:39.59 | *** join/#debian sicretor (~sicretor@host202-204-dynamic.43-79-r.retail.telecomitalia.it) |
| 11:40.47 | *** join/#debian rauls (~rsalinas@212.118.209.82) |
| 11:41.00 | krasimir | TJ- : but in this case again if someone takes the external device (ie usb drive) , they will have the key to decrypt the HDD |
| 11:41.20 | TJ- | krasimir: 1) Sys Admin inserts USB device 2) Sys Admin starts server 3) Server boots 4) Sensitive code executes, reads sensitive data from USB device 5) Code prompts Sys Admin to remove USB device 6) Sys Admin removes USB device |
| 11:41.34 | Walex | krasimir: of course. The unprotected encryption key must be stored *somewhere* on the system. |
| 11:41.38 | *** join/#debian ph4nt0mas (~quassel@athedsl-188617.home.otenet.gr) |
| 11:41.53 | tremon | 7) sys admin places usb device in vault/protected location ;) |
| 11:42.36 | *** join/#debian Enissay (~Enissay@unaffiliated/enissay) |
| 11:42.59 | *** join/#debian Pikudoz (~opera@190.222.96.35) |
| 11:43.04 | TJ- | tremo: AKA back-pocket :) |
| 11:43.13 | krasimir | system needs reboot -> call sysadmin -> sysadmin needs to get his ass from the beach , drive 100km to get to the server |
| 11:43.31 | TJ- | krasimir: Precisely - how much more secure could it be? |
| 11:44.03 | sadsagfjg | pclover: I now in dvd live debian |
| 11:44.11 | tremon | krasimir: security and convenience rarely ever coincide |
| 11:44.12 | Walex | krasimir: or you could ask the NSA to type in your secret key for you, they have a 24/7 operations room for sure :-) |
| 11:44.12 | krasimir | TJ- : sysadmin gets many compains for having the system down for 2h |
| 11:44.19 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 11:44.23 | TJ- | krasimir: If the server was networked, it could phone-home using SSH from within the initrd to get the decryption key |
| 11:44.57 | TJ- | krasimir: Servers don't go down much if they're properly administered |
| 11:44.57 | *** join/#debian err404 (~err404@62-210-205-221.rev.poneytelecom.eu) |
| 11:45.01 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 11:45.08 | krasimir | TJ- : I think this is the best approach I have found so far , but I don;t think hese machine will be online 24/7 |
| 11:45.34 | *** join/#debian ByT3b0N3 (~ByT3b0N3@141.28.132.6) |
| 11:45.38 | *** part/#debian tty0x80 (~tty0x80@unaffiliated/tty0x80) |
| 11:45.53 | pclover | sadsagfjg, is your current filesystem mounted verify with df -h |
| 11:45.54 | krasimir | TJ- : this approach you mentioned with the hardware ID , did it work well ? |
| 11:46.32 | TJ- | krasimir: Sometimes there's a separate VLAN connected to sensitive systems, and that only connects them to a key-server whilst they boot |
| 11:46.53 | *** join/#debian collizion (~collizion@unaffiliated/collizion) |
| 11:47.06 | *** join/#debian lopho (~admin@patxi.bragasusadas.com) |
| 11:47.13 | lopho | Hello! I'm considering to install the nginx backport into debian stable... is the performance of the new version noticeable? |
| 11:47.48 | sadsagfjg | pclover: I run this command |
| 11:48.03 | TJ- | krasimir: personally, I'd never have the sensitive passwords/passphrases stored on a system's fixed storage, I'd have it fetched from an external source and kept, protected, in RAM only |
| 11:48.04 | *** join/#debian Slyder (~Slyder@pool-96-230-70-184.bstnma.fios.verizon.net) |
| 11:48.26 | *** join/#debian dusted (~dusted@190.162.191.90.dyn.estpak.ee) |
| 11:48.27 | *** join/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 11:48.30 | *** part/#debian KyokoDebian (4d4da301@gateway/web/freenode/ip.77.77.163.1) |
| 11:48.48 | *** join/#debian ByT3b0N3 (~ByT3b0N3@141.28.132.6) |
| 11:49.02 | dusted | Will squeeze recieve a batch patched against shellshock ? |
| 11:49.32 | krasimir | how would you avoid having having API pass and usernames in php ? the PHP sometimes need to make API calls to other services to get some data. |
| 11:49.52 | acemi | dusted: i updated from squeeze-lts repo |
| 11:49.53 | krasimir | I am reading how TPM works , this might also be the answer |
| 11:50.31 | dusted | acemi, thanks! :) |
| 11:50.34 | *** join/#debian stack (~urb@gateway/tor-sasl/stack) |
| 11:50.35 | Walex | krasimir: but someone has to unlock the TPM too. But at least it has a unique id embedded. |
| 11:50.39 | sadsagfjg | pclover: /dev/sda1 mouted on /mnt |
| 11:50.40 | acemi | np |
| 11:50.41 | *** join/#debian zir0faive (~zir0faive@cty37-1-78-214-92-19.fbx.proxad.net) |
| 11:50.53 | *** join/#debian Sbroker (~DebianSta@unaffiliated/sbroker) |
| 11:51.13 | *** join/#debian AlexWH88 (~alexwh@179.176.117.95.dynamic.adsl.gvt.net.br) |
| 11:51.14 | pclover | sadsagfjg, run umount /dev/sda1 |
| 11:51.52 | t3ngu | just notriced zsh also has the same issue with bash :) |
| 11:52.06 | t3ngu | i guess not many people are using zsh though |
| 11:53.23 | sadsagfjg | pclover: i run this command |
| 11:53.59 | t3ngu | but i guess zsh is using bash |
| 11:54.38 | pclover | you should try running fsck /dev/sda1 |
| 11:56.17 | sadsagfjg | pclover: fsck want to clear |
| 11:56.35 | pclover | want to clear? |
| 11:56.56 | sadsagfjg | yes |
| 11:57.19 | pclover | what do you mean clear |
| 11:57.30 | pclover | did it return back to a command prompt? |
| 11:57.50 | sadsagfjg | pclover: clean |
| 11:57.58 | pclover | hum |
| 11:58.22 | sadsagfjg | pclover: now i run this command |
| 11:59.39 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 11:59.40 | abrotman | krasimir: there's a channel for that, ##php |
| 12:00.22 | *** join/#debian fstd (~fstd@unaffiliated/fisted) |
| 12:01.26 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 12:03.01 | sadsagfjg | pclover: now i run this command |
| 12:03.25 | *** join/#debian Dr4k3 (~Dr4k3@fastreboot.de) |
| 12:04.34 | *** join/#debian wald0 (~wald0@30.Red-88-0-190.dynamicIP.rima-tde.net) |
| 12:04.56 | wald0 | is debian stable affected by this bug ? http://www.design-engineering.com/general/cyber-experts-warn-bash-bug-poses-serious-threat-unix-based-systems-132354 |
| 12:04.57 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 12:06.11 | NiLon | was |
| 12:06.50 | *** join/#debian tty0x80 (~tty0x80@unaffiliated/tty0x80) |
| 12:07.04 | sadsagfjg | pclover: Very ... Very Thanks :D |
| 12:07.16 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 12:07.35 | *** part/#debian tty0x80 (~tty0x80@unaffiliated/tty0x80) |
| 12:09.35 | pclover | sadsagfjg, did you get it working? |
| 12:10.25 | AlexWH88 | Debian stable wheezy just freezed. Had to reboot =/ Got problem with ati card and installed the drivers. Maybe is that... |
| 12:10.26 | *** join/#debian machin_why (~machin_wh@mv477-2-88-121-254-156.fbx.proxad.net) |
| 12:10.28 | krasimir | TJ- : do you have any idea how they approach this problem with the ready made appliances . Their code is still on some SD or HDD storage but they bootup without any prompts. |
| 12:10.34 | *** join/#debian Duststorm_ (~Duststorm@ip-83-101-50-144.customer.schedom-europe.net) |
| 12:10.35 | sadsagfjg | pclover: YUP :D |
| 12:10.47 | pclover | sadsagfjg, you should install smarttools and check your hard drive |
| 12:11.37 | *** join/#debian EmleyMoor (phil@topdeck.tinsleyviaduct.com) |
| 12:11.56 | sadsagfjg | pclover: What was the problem ? |
| 12:12.12 | *** join/#debian wildc4rd (~nick@91.85.45.146) |
| 12:12.18 | *** join/#debian al111p (~ali@94.0.74.238) |
| 12:12.19 | sadsagfjg | pclover: How to install smarttoolls? |
| 12:12.41 | sadsagfjg | pclover: aptitude install smarttools ? |
| 12:12.44 | krasimir | TJ- : or maybe their code is compiled with all the http , php apps in one executable and the OS is just setup to start these files. so all passwords are compiled inside |
| 12:12.53 | pclover | sadsagfjg, use apt-get |
| 12:13.29 | sadsagfjg | pclover: What was the problem ? |
| 12:13.37 | *** join/#debian ololorin (~Andrey@46.138.190.47) |
| 12:13.39 | pclover | i'm not sure |
| 12:13.44 | *** join/#debian tensorpudding (~tensorpud@99.148.194.40) |
| 12:13.47 | pclover | apt-get install smarttools sadsagfjg |
| 12:13.55 | Phyliares | smartmontools |
| 12:13.57 | pclover | than do smartctl --all /dev/sda |
| 12:14.11 | pclover | what Phyliares said |
| 12:14.21 | pclover | apt-get install smartmontools |
| 12:14.43 | bezaban | krasimir: a typical secure way of doing crypto without exposing keys is to use a network HSM that handles decrypting, but it is costly and of course you're on the mercy of the HSM staying up (but they're built for that) |
| 12:14.49 | sadsagfjg | pclover: so Please wait |
| 12:14.49 | dusted | I've been running with the squeeze repositories for a long time, never known about the -lts branch, I'm a bit confuzed what the reason behind having those two different versions could be ? |
| 12:15.08 | dusted | I mean the non -lts branch is useless ? |
| 12:15.26 | bezaban | but basically if you can't trust your physical environment you have problems anyway |
| 12:15.34 | *** join/#debian ShishKabab (~vincent@host21-110-static.243-95-b.business.telecomitalia.it) |
| 12:16.00 | *** mode/#debian [+l 1475] by debhelper |
| 12:16.06 | *** join/#debian altin (~altin@46.99.54.171) |
| 12:16.08 | *** join/#debian altin (~altin@flossk/altin) |
| 12:16.34 | Phyliares | dusted: not useless but obsolete |
| 12:16.46 | Phyliares | it is old stable |
| 12:16.59 | *** join/#debian jetho (~jens@186.193.201.27) |
| 12:16.59 | *** join/#debian slichtenstern (~slichtens@HSI-KBW-078-043-004-079.hsi4.kabel-badenwuerttemberg.de) |
| 12:18.29 | dusted | Phyliares, but when, or why, would someone choose squeeze over squeeze-lts (assuming they're not simply ignorant like myself) ? |
| 12:18.36 | *** join/#debian krasimir (~krasimir@215.Red-88-13-169.dynamicIP.rima-tde.net) |
| 12:19.17 | Phyliares | https://wiki.debian.org/LTS security support has ended on 31 May |
| 12:19.20 | ShishKabab | I've been asked to build a fault-tolerant web application. I know about redundancy at the DB and application server level, but how can I make nginx servers redundant. If I place a load-balancer in front of them, I create another single point of failure. |
| 12:19.35 | *** join/#debian Frosh (uid4206@gateway/web/irccloud.com/x-qqonnzsufzujiwdu) |
| 12:19.36 | *** join/#debian pupil (~cevin@unaffiliated/pupil) |
| 12:19.49 | Phyliares | Some people should prefere LTS over upgrade |
| 12:20.04 | TJ- | ShishKabab: *two* load balancers, connected in a X config |
| 12:20.18 | dusted | Phyliares, ahh, so it's i a way politics, that it's no longer "officially" supported |
| 12:20.28 | dusted | a seperate project |
| 12:20.43 | *** join/#debian pupil1 (~cevin@222.124.144.178) |
| 12:20.47 | *** join/#debian troete (~troete@osbk-4db142cf.pool.mediaWays.net) |
| 12:20.54 | dusted | oh, 2016 is so close, guess I need to prepare |
| 12:21.05 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 12:21.18 | *** join/#debian LV-426 (~LV-426@85.65.152.185.dynamic.barak-online.net) |
| 12:21.19 | *** join/#debian GusBricker (~GusBricke@c122-107-239-5.mckinn3.vic.optusnet.com.au) |
| 12:21.43 | ShishKabab | TJ-: An X config? |
| 12:22.09 | sadsagfjg | pclover: smartmontools or smarttools? |
| 12:22.16 | pclover | smartmontools |
| 12:22.28 | pclover | than do smartctl --all /dev/sda |
| 12:23.02 | sadsagfjg | pclover: i installed it now |
| 12:23.04 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 12:23.54 | sadsagfjg | pclover: and i run this command now |
| 12:24.01 | pclover | can you show us the output |
| 12:24.04 | TJ- | ShishKabab: cross-over L1 > S1 + S2, L2 -> S1 + S2, L1 <-> L2 using HA |
| 12:26.07 | *** join/#debian pupil (~cevin@unaffiliated/pupil) |
| 12:26.29 | *** part/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 12:26.35 | *** join/#debian TDog (~chatzilla@65.129.210.40) |
| 12:26.42 | *** join/#debian sadsagfjg_ (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 12:26.53 | *** join/#debian Windy (~windy@unaffiliated/windy) |
| 12:27.04 | sadsagfjg_ | pclover: This link :http://paste.debian.net/123227/ |
| 12:27.25 | *** join/#debian j5s7 (~juergen@dsl-217-164-190.pool.bitel.net) |
| 12:28.04 | *** join/#debian troete (~troete@osbk-4db14e09.pool.mediaWays.net) |
| 12:28.27 | *** join/#debian kein31 (~root@79.105.177.227) |
| 12:28.29 | *** join/#debian rustyraptor (~rustyrapt@128.204.245.217) |
| 12:29.13 | *** join/#debian wonderworld (~ww@ip-62-143-157-238.hsi01.unitymediagroup.de) |
| 12:29.24 | *** join/#debian grobda24 (~grobda24-@silentflame/member/grobda24) |
| 12:29.34 | *** join/#debian fcharton (~fca@2001:470:1f12:a29::2) |
| 12:29.46 | *** join/#debian wtkp (~wtkp@unaffiliated/wtkp) |
| 12:30.16 | *** join/#debian Zzeiss (~wsy@mumble144162.merl.com) |
| 12:30.39 | cardiel | i have an intel nuc and atm dont have a mini-hdmi cable so i would like to install debian onto it without haveing to type anything, and then just connect via ssh to configure it later.. is that possible? |
| 12:30.45 | pclover | hum |
| 12:30.59 | *** join/#debian kevinbenko (~kevinbenk@24-116-186-120.cpe.cableone.net) |
| 12:31.30 | *** join/#debian NightTrain (~coffee@unaffiliated/ridout) |
| 12:31.36 | *** join/#debian ahodzic (~havoc@2a00:1630:13:1d3:6123:1b1b:f061:3305) |
| 12:32.20 | *** join/#debian ct0 (~ct0@130.68.228.141) |
| 12:32.22 | cardiel | ive looked at preeseding but then i still have to type auto url = http://... |
| 12:32.39 | sadsagfjg_ | pclover: What was the problem? |
| 12:32.41 | *** join/#debian fooctrl (~havoc@2a00:1630:13:1d3:6123:1b1b:f061:3305) |
| 12:32.48 | pclover | i don't see anything wrong there hum |
| 12:33.08 | nkuttler | cardiel: look here https://wiki.debian.org/DebianInstaller/Remote |
| 12:33.50 | *** join/#debian systmkor2 (~systmkor@unaffiliated/systmkor) |
| 12:33.54 | *** join/#debian santiagoR (~santiagoR@181.30.15.83) |
| 12:34.43 | *** join/#debian booby_tables_24 (~booby_tab@117.197.244.230) |
| 12:35.09 | *** join/#debian troete (~troete@osbk-4d08b07f.pool.mediaWays.net) |
| 12:35.12 | cardiel | nkuttler: it seems like there no info on howto setup the partitioning, id like to use lvm.. maybe the best is to go and buy a mini hdmi afterall :p |
| 12:35.15 | sadsagfjg_ | pclover: Problem or not? |
| 12:35.24 | nkuttler | cardiel: probably ;) |
| 12:35.26 | Windy | ftp.debian.org seems to be suffering :0 |
| 12:35.34 | pclover | i don't see anything |
| 12:35.38 | pclover | unless others want to take a look |
| 12:35.42 | *** join/#debian kein31 (~root@79.105.177.227) |
| 12:36.06 | fragtastic | looks fine to me |
| 12:36.36 | Windy | i think there's a lot of people updating apt this morning against it |
| 12:36.50 | sadsagfjg_ | So right(OK) ? |
| 12:36.53 | *** join/#debian mechanicalduck (~mechanica@37-1-162-187.ip.skylogicnet.com) |
| 12:37.05 | *** join/#debian thingfish (~thingfish@unaffiliated/thingfish) |
| 12:37.36 | Phyliares | sadsagfjg_: smartctl --test=short /dev/sd? |
| 12:37.45 | *** join/#debian G66k (~G66K@unaffiliated/g66k) |
| 12:37.48 | Phyliares | then smartctl --test=long /dev/sd? |
| 12:37.54 | G66k | Hello everyone |
| 12:38.11 | G66k | i was wondering how to enable scroll up/down in screen ? |
| 12:38.35 | Phyliares | Ctrl+A, Esc |
| 12:39.23 | G66k | coy mode |
| 12:39.25 | thingfish | looks like we have another bash update today |
| 12:39.29 | G66k | copy mode ? |
| 12:39.42 | *** join/#debian sadgfas (~Uriziel@did209.neoplus.adsl.tpnet.pl) |
| 12:39.42 | Windy | thingfish: the initial patch was incomplete |
| 12:39.55 | sadgfas | hi, I've got pressing problem, I need to downgrade my package |
| 12:39.59 | sadgfas | but I don't have it any more |
| 12:40.05 | sadgfas | how can I do that: |
| 12:40.06 | spidernik | hi all. Has anyone ever experienced this: apt-get in the debian installer leaves the lists related to "Release.gpg" in the /var/lib/apt/lists/partial directory. When I do an apt-get update I therefore receive a GPG BAD SIG error. Clearing the entire lists dir and triggering an apt-get update again solves the issue |
| 12:40.08 | nkuttler | !tell sadgfas about snapshot |
| 12:40.12 | sadsagfjg_ | pclover: http://paste.debian.net/123233/ |
| 12:40.14 | *** join/#debian Risk (~RDev@195.88.100.118) |
| 12:40.49 | Phyliares | sadsagfjg_: more info in 176 minutes ;) |
| 12:40.59 | pclover | not a bad idea to do that |
| 12:41.07 | *** join/#debian kein31 (~root@62.33.40.158) |
| 12:41.32 | *** join/#debian harobed (~harobed@equ57-1-78-235-121-109.fbx.proxad.net) |
| 12:42.11 | sadsagfjg_ | Phyliares: It was a very specialized topics. :D |
| 12:42.24 | *** join/#debian maddogie (~jim@ip1886e03e.dynamic.kabel-deutschland.de) |
| 12:42.36 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 12:42.46 | *** join/#debian T0rch (~T0rch@191.185.37.93) |
| 12:42.52 | *** join/#debian fusmu (~fusmu@195.24.50.132) |
| 12:43.02 | *** join/#debian heraclitus (~phobos@108.59.2.208) |
| 12:43.20 | sadsagfjg_ | pclover: So what was the problem? |
| 12:43.26 | pclover | not sure |
| 12:43.43 | pclover | there was probably corruption of the fs |
| 12:44.10 | *** join/#debian Arsenik (~Cyanure@eduroam-65-117.loria.fr) |
| 12:44.31 | *** part/#debian shelxtr (~dra@95.77.98.11) |
| 12:44.45 | *** join/#debian shelxtr (~dra@95.77.98.11) |
| 12:44.50 | sadsagfjg_ | pclover: How can I fix it? |
| 12:45.38 | *** join/#debian takeyourhatoff (~tyho@home.ub.vc) |
| 12:45.58 | pclover | you just did |
| 12:46.00 | pclover | with fsck |
| 12:46.02 | *** mode/#debian [+l 1481] by debhelper |
| 12:46.31 | *** join/#debian Droolio (~drool@host86-143-180-191.range86-143.btcentralplus.com) |
| 12:46.50 | *** join/#debian netsnail_ (~netsnail@111.161.77.201) |
| 12:46.52 | sadsagfjg_ | pclover: with help you |
| 12:48.41 | *** join/#debian compare (50b5c30e@gateway/web/freenode/ip.80.181.195.14) |
| 12:48.54 | sadsagfjg_ | pclover: now? |
| 12:48.55 | talin | hello. is it possible to update a single package with debian? like "yum update bash" on centos? |
| 12:49.27 | pclover | sadgfas, what do you need help with? |
| 12:49.44 | themill | talin: wanting only some security updates and not others isn't a great plan. |
| 12:50.09 | talin | themill: i'll get the others when no one is working on the box |
| 12:50.19 | nkuttler | talin: apt-get install foo |
| 12:50.21 | sadsagfjg_ | pclover: I'd change hard drive? or no? |
| 12:50.23 | sadgfas | pclover, currently trying installing packages from snapshot |
| 12:50.50 | pclover | sorry to similar username |
| 12:51.01 | talin | nkuttler: thank you |
| 12:51.08 | pclover | sadsagfjg_, not sure i don't see an issue with it |
| 12:51.28 | *** join/#debian Wharncliffe (~gm@unaffiliated/ridout) |
| 12:51.33 | *** join/#debian teraflops (~teraflop@77.225.225.204) |
| 12:52.04 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 12:52.42 | sadsagfjg_ | pclover: so ,Thanks for answers.Very very ... thank you |
| 12:53.52 | *** join/#debian DynamicFail (~DynamicFa@147.177.234.121) |
| 12:55.11 | *** join/#debian teran (~teran@91.218.144.129) |
| 12:55.11 | *** join/#debian pupil1 (~cevin@114.79.13.253) |
| 12:55.34 | *** join/#debian Weapon (Weapon@trekweb/user/Weapon) |
| 12:55.46 | *** join/#debian i7c (~cmw@unaffiliated/i7c) |
| 12:55.49 | *** join/#debian osf (~osf@189.58.110.185) |
| 12:55.53 | *** join/#debian teran_ (~teran@91.218.144.129) |
| 12:55.59 | *** join/#debian Wharncliffe (~gm@unaffiliated/ridout) |
| 12:56.02 | *** join/#debian rax0 (~nx@b0tnet.me) |
| 12:56.19 | *** join/#debian leftist (~leftist@cpe-76-190-180-175.neo.res.rr.com) |
| 12:57.55 | sadsagfjg_ | pclover: For show answer test I do? |
| 12:58.02 | *** join/#debian l4sh (~l4sh@unaffiliated/l4sh) |
| 12:58.07 | *** join/#debian i8c (cmw@unaffiliated/i7c) |
| 12:58.33 | *** join/#debian istram (~istram@ip-37-188-234-31.eurotel.cz) |
| 12:59.17 | *** join/#debian rrehbein (~rrehbein@71-13-171-2.static.fdul.wi.charter.com) |
| 12:59.27 | *** join/#debian phuh (~phuh@184.175.0.80) |
| 13:00.08 | sadsagfjg_ | pclover: how to show answer test? |
| 13:00.19 | *** join/#debian paul_grozav (~paul@mail.computervoice.ro) |
| 13:00.46 | *** join/#debian Darryl (uid29682@gateway/web/irccloud.com/x-eglbcsibvchprdvc) |
| 13:01.09 | *** join/#debian Sebtoast (~Toaster@96.127.230.9) |
| 13:03.50 | sadgfas | Hey, so my problem is as follows: My php5 got updated to php5.6 |
| 13:03.56 | sadgfas | and I need it reverted to 5.5 |
| 13:04.15 | sadgfas | Can't get this working :/ |
| 13:04.48 | nkuttler | sadgfas: output of apt-cache policy php5 |
| 13:05.21 | *** join/#debian Nishta23 (~Nishta21@5.254.97.99) |
| 13:05.23 | Nishta23 | <PROTECTED> |
| 13:05.32 | sadgfas | http://pastebin.com/44StS5r7 |
| 13:05.42 | nkuttler | sadgfas: paste.debian.net please |
| 13:05.59 | sadgfas | http://paste.debian.net/123235/ |
| 13:06.08 | *** join/#debian nikio (K@wlan-145-94-174-040.wlan.tudelft.nl) |
| 13:06.21 | nkuttler | !tell sadgfas about snapshot |
| 13:06.23 | nkuttler | sadgfas: again |
| 13:06.42 | nkuttler | sadgfas: also, downgrade isn't supported, so good luck |
| 13:06.43 | nkuttler | ,v php5 |
| 13:06.45 | judd | Package: php5 on i386 -- squeeze-security: 5.3.3-7+squeeze17; squeeze: 5.3.3-7+squeeze17; squeeze-security: 5.3.3-7+squeeze19; squeeze: 5.3.3-7+squeeze19; squeeze-security-lts: 5.3.3-7+squeeze21; wheezy: 5.4.4-14+deb7u11; wheezy-proposed-updates: 5.4.4-14+deb7u14; wheezy-security: 5.4.4-14+deb7u14; jessie: 5.6.0+dfsg-1; sid: 5.6.0+dfsg-1 |
| 13:07.11 | *** join/#debian rustyraptor (~rustyrapt@128.204.245.217) |
| 13:07.19 | nkuttler | sadgfas: and 5.5 was never released with debian. better not to run buggy php apps that depend on a .1 release anyway.. |
| 13:07.33 | *** join/#debian slopjong (~slopjong@lindb.rhrk.uni-kl.de) |
| 13:07.46 | *** join/#debian AngelDeath (~AngelDeat@201.210.1.210) |
| 13:07.51 | sadgfas | nkuttler, the issue is that 5.6 adds BC with my website |
| 13:08.15 | nkuttler | sadgfas: you probably want to install wheezy then. testing on a public server is insane |
| 13:08.34 | sadgfas | Might be, still, I need to revert it asap. |
| 13:08.42 | slopjong | i'm on squeeze and i can't update bash |
| 13:08.49 | nkuttler | !tell slopjong about squeeze-lts |
| 13:08.51 | slopjong | here's my sources list: http://pastie.org/private/cpwsccqewiv3puu8lbsza |
| 13:09.01 | slopjong | nkuttler, i'm on squeeze-lts, no? |
| 13:09.09 | nkuttler | slopjong: apt-cache policy bash? |
| 13:09.30 | *** join/#debian xuigenerix (~xuigeneri@187.202.181.88) |
| 13:09.34 | sadsagfjg_ | nkuttler: i want sources.list debian 7.6 |
| 13:09.40 | sadsagfjg_ | nkuttler: i want sources.list debian 7.6 64 bit |
| 13:09.59 | nkuttler | sadsagfjg_: and? |
| 13:10.00 | *** part/#debian ambutts (ambutts@185.61.148.240) |
| 13:10.15 | slopjong | nkuttler, http://pastie.org/9596960 |
| 13:10.30 | nkuttler | ,v bash |
| 13:10.31 | judd | Package: bash on i386 -- squeeze: 4.1-3; squeeze-security-lts: 4.1-3+deb6u1; wheezy: 4.2+dfsg-0.1; wheezy-proposed-updates: 4.2+dfsg-0.1+deb7u1; wheezy-security: 4.2+dfsg-0.1+deb7u3; jessie: 4.3-9.1; sid: 4.3-9.2 |
| 13:10.39 | *** join/#debian elkmoose (~jesus@78.142.138.4) |
| 13:10.46 | nkuttler | slopjong: you're not running squeeze for sure |
| 13:10.49 | *** join/#debian DelphiWorld (~TheVoicer@openvpn/user/DelphiWorld) |
| 13:11.02 | *** join/#debian b0bbi10 (~me@unaffiliated/caztiel) |
| 13:11.09 | DelphiWorld | hey guys |
| 13:11.15 | DelphiWorld | mongodb-org-server is not fully installed |
| 13:11.21 | DelphiWorld | apt-get -f install dont fix the issue |
| 13:11.26 | DelphiWorld | purging it is also not working |
| 13:11.27 | slopjong | nkuttler, debian_version says 6.0.10 |
| 13:11.27 | nkuttler | slopjong: you probably want to complete the upgrade to wheezy that was started |
| 13:11.28 | DelphiWorld | what to do? |
| 13:11.41 | nkuttler | slopjong: well, your bash is > squeeze |
| 13:11.48 | nkuttler | !tell DelphiWorld about errors |
| 13:11.51 | b0bbi10 | hello, is the "correct" way of handling with root by allowing the user to use "sudo command" or by getting root via "su"? |
| 13:12.06 | *** join/#debian novaflash (~novaflash@openvpn/corp/support/novaflash) |
| 13:12.09 | *** join/#debian sandman13 (~sandman@202.51.84.21) |
| 13:12.23 | nkuttler | b0bbi10: that's probably a matter of preference. i prefer sudo |
| 13:12.28 | *** join/#debian IMM0rtalis (~IMM0rtali@91.64.138.67) |
| 13:12.41 | *** join/#debian istram (~istram@ip-37-188-234-31.eurotel.cz) |
| 13:12.43 | novaflash | can anyone help me with a failure while trying to dist-upgrade debian 6 to debian 7? i'm seeing an error about dpkg mysql-server-5-1: dependence problems. package is to be removed but it fails |
| 13:12.54 | nkuttler | !tell novaflash about errors |
| 13:13.07 | novaflash | yeah okay i'll dump it |
| 13:13.10 | b0bbi10 | nkuttler, I am asking because by default I can't use sudo in my debian-vm and thought it might be a security issue or so |
| 13:13.17 | DelphiWorld | nkuttler: dpkg -P mongodb-org-server |
| 13:13.20 | nkuttler | b0bbi10: how so? |
| 13:13.28 | nkuttler | DelphiWorld: paste.debian.net please |
| 13:13.30 | DelphiWorld | nkuttler: subprocess installed post-installation script returned error exit status 100 |
| 13:13.40 | novaflash | this is the problem i'm seeing, http://paste.kde.org/p85pktowy/rdkehi |
| 13:13.43 | nkuttler | DelphiWorld: well, fix the postinst script |
| 13:13.47 | DelphiWorld | nkuttler: how to redirect all the errors from dpkg to a log file so i can past |
| 13:13.58 | nkuttler | DelphiWorld: /var/lib/dpkg/info/foo.postinst |
| 13:14.16 | nkuttler | DelphiWorld: see man bash, redirection |
| 13:14.31 | DelphiWorld | nkuttler: tts... man boom;) |
| 13:14.41 | *** join/#debian bariumbitmap (~nbeaver@162-202-48-157.lightspeed.cicril.sbcglobal.net) |
| 13:14.47 | nkuttler | novaflash: that's not a dist-upgrade.. |
| 13:14.54 | novaflash | yes it is |
| 13:14.57 | novaflash | i just did the steps: |
| 13:15.00 | novaflash | apt-get update |
| 13:15.02 | novaflash | apt-get upgrade |
| 13:15.06 | nkuttler | novaflash: yeah, it's not |
| 13:15.09 | novaflash | then change the /etc/apt/sources.list file to read wheezy |
| 13:15.11 | novaflash | then i did |
| 13:15.14 | novaflash | apt-get dist-upgrade |
| 13:15.16 | *** join/#debian impulse150 (~impulse15@130.185.134.250) |
| 13:15.18 | novaflash | and THAT'S when this came up |
| 13:15.18 | DelphiWorld | nkuttler: what to do in the postinst? |
| 13:15.24 | *** join/#debian d3lphi (~d3lphi@unaffiliated/d3lphi) |
| 13:15.30 | *** join/#debian Bwithmore14 (~Bwithmore@222.127.85.222) |
| 13:15.30 | nkuttler | novaflash: then paste the relevant command, not this |
| 13:15.30 | novaflash | okay |
| 13:15.37 | nkuttler | DelphiWorld: you can start to debug it, but set -x at line 2 |
| 13:15.40 | nkuttler | DelphiWorld: put |
| 13:16.00 | *** mode/#debian [+l 1494] by debhelper |
| 13:16.07 | novaflash | this is what i get on dist-upgrade: http://paste.kde.org/p9twti7s4/ka7ejk |
| 13:16.29 | d3lphi | hey all. I'd like to use my NIC to be inside VLAN50. But when I create the eth0.50 interface as described in Debian's Networking HowTo, I need eth0 to be online, too. Correct? But I don't want to assing a static or DHCP lease to eth0, because I don't need "eth0" itself. I only want to have a static IP in eth0.15 |
| 13:16.32 | nkuttler | novaflash: output of apt-get -f install |
| 13:16.34 | d3lphi | how do I do that? |
| 13:16.56 | d3lphi | because eth0.15 depends on eth0 |
| 13:17.11 | d3lphi | sorry, I mistyped... I did mean VLAN15 and eth0.15 |
| 13:17.15 | *** join/#debian pccomf (~pccomf@107.170.168.86) |
| 13:17.31 | novaflash | output of apt-get -f install : http://paste.kde.org/psqpru0xc/rkjqwp |
| 13:18.24 | *** join/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 13:18.27 | nkuttler | novaflash: can you run it once more? |
| 13:18.56 | sadsagfjg | nkuttler: hi,I want sources.list debian 7.6 64 bit |
| 13:19.13 | nkuttler | !tell sadsagfjg about sources.list |
| 13:19.14 | *** join/#debian istram (~istram@ip-37-188-234-31.eurotel.cz) |
| 13:19.26 | novaflash | second time running apt-get -f install: http://paste.kde.org/pctn6criu/n5lbs9 |
| 13:19.37 | DelphiWorld | nkuttler: SO I replace set -e with set -x? |
| 13:20.10 | nkuttler | DelphiWorld: no, you add set -x |
| 13:20.25 | sadgfas | nkuttler, THANKS, worked out with snapshot, somehow |
| 13:20.29 | nkuttler | novaflash: well that's a silly error. can you /etc/init.d/mysql start ? |
| 13:20.39 | *** join/#debian troete (~troete@osbk-4d08b69b.pool.mediaWays.net) |
| 13:20.49 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 13:21.06 | novaflash | before the dist-upgrade command it was running. now when i do /etc/init.d/mysql start i see: [FAIL] Starting MySQL database server: mysqld . . . . . . . . . . . . . . failed! |
| 13:21.30 | DelphiWorld | same error |
| 13:21.43 | novaflash | when i run mysqld directly it seems a process is already running and has the innodb files in use. strange. i'll try to kill processes related to mysql |
| 13:21.53 | DelphiWorld | subprocess installed post-installation script returned error exit status 1 |
| 13:22.02 | nkuttler | novaflash: sigh. you can put exit 0 on line 0 of the /var/lib/dpkg/info/mysql.postinst |
| 13:22.06 | nkuttler | novaflash: err, line 1 |
| 13:22.19 | novaflash | okay let's try to bypass whatever dpkg is doing |
| 13:22.21 | nkuttler | DelphiWorld: of course. you read the output |
| 13:22.39 | DelphiWorld | output of what nkuttler ? |
| 13:22.46 | nkuttler | DelphiWorld: of the command you just ran |
| 13:23.25 | novaflash | it looks like that postinst exit 0 thing made it go past the problematic mysqld problem |
| 13:23.31 | novaflash | apt-get -f install is now doing its job |
| 13:24.07 | *** join/#debian Abd_Allatif (~abd@unaffiliated/abd-allatif/x-6736565) |
| 13:24.09 | nkuttler | novaflash: sure, it just bypasses the entire script. you might want to clean up the mysql databases manually if you don't need them any more |
| 13:24.20 | *** join/#debian lnxslck (~lnxslck@194.65.138.120) |
| 13:24.31 | novaflash | i do sort of need them but if there is a problem with them i do still have backups, so i could find a way to import them again |
| 13:24.32 | *** join/#debian mennea (~textual@31.210.187.78) |
| 13:24.41 | *** join/#debian DrSect0r (~DrSect0r@77-175-125-42.FTTH.ispfabriek.nl) |
| 13:24.45 | nkuttler | novaflash: nah, just keep them then |
| 13:25.13 | *** join/#debian ecthiender (~ecthiende@unaffiliated/ecthiender) |
| 13:25.22 | novaflash | kind of odd, first time a dist-upgrade from squeeze to wheezy failed for me. weird. thanks for the invaluable help. |
| 13:25.38 | d3lphi | anyone? |
| 13:26.32 | novaflash | sorry i never worked with vlan before d3lphi |
| 13:26.37 | *** join/#debian r3n1c0n (~r3n1c0n@195.169.155.126) |
| 13:26.38 | *** join/#debian Z1T1TTT (~none@188.84.10.241) |
| 13:26.50 | novaflash | i suspect you do not need eth0 though if you configure eth0.50 |
| 13:27.03 | r3n1c0n | can some one help me. My flash player stopt working. i cannot find any solution |
| 13:27.10 | nkuttler | r3n1c0n: wheezy? |
| 13:27.26 | Z1T1TTT | how can I run an app (Galculator) by pressing a keyboard key.? |
| 13:27.40 | r3n1c0n | yes |
| 13:27.40 | nkuttler | r3n1c0n: and only in chromium? |
| 13:27.56 | nkuttler | !pepperflash fix |
| 13:27.56 | dpkg | from memory, pepperflash fix is 1. Locate a cached chrome release in /var/cache/pepperflashplugin-nonfree/ (v35 works for me) 2. ar x <google-chrome-deb> 3. tar --lzma --extract --file data.tar.lzma 4. cp opt/google/chrome/PepperFlash/libpepflashplayer.so /usr/lib/pepperflashplugin-nonfree/libpepflashplayer.so (as root). Keep in mind that this installs an obsolete flash release which might have security implications. |
| 13:27.57 | *** join/#debian sllide (~yeap@107.170.37.181) |
| 13:28.03 | r3n1c0n | no where. I always use iceweasel but it stopt. Installed chromium but that also dint work |
| 13:28.05 | d3lphi | novaflash: I do need eth0, but I don't want to have an IP assigned at eth0. Is it enough to do something like address 0.0.0.0 in my /etc/network/itnerfaces or won't that work? or maybe something like "iface eth0 inet manual" ?? will that work? |
| 13:28.07 | *** join/#debian bnw (~bnw@183.17.180.114) |
| 13:28.33 | nkuttler | r3n1c0n: iceweasel should work fine. chrome's pepperflash is broken |
| 13:28.53 | novaflash | you could assign it an address like 127.254.0.1 or something - that only works locally. anything in 127.0.0.0/8 is only local afaik |
| 13:29.06 | r3n1c0n | its not working -_- it says its installed. I removed it and reinstalled but that dint work 2 |
| 13:29.47 | *** join/#debian collizion (~collizion@164.58.172.158) |
| 13:30.24 | *** join/#debian dtcrshr (~datacrush@unaffiliated/datacrusher) |
| 13:30.25 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 13:30.28 | *** join/#debian collizion_ (~collizion@164.58.172.158) |
| 13:30.38 | nkuttler | r3n1c0n: output of update-flashplugin-nonfree --status ? |
| 13:30.45 | *** join/#debian Tom01 (~tom@p5DDFF734.dip0.t-ipconnect.de) |
| 13:30.51 | nkuttler | r3n1c0n: use paste.debian.net |
| 13:30.58 | *** join/#debian collizion_ (~collizion@unaffiliated/collizion) |
| 13:31.11 | *** join/#debian troete (~troete@osbk-4db171ac.pool.mediaWays.net) |
| 13:31.42 | *** join/#debian T0rch (~T0rch@191.185.37.93) |
| 13:32.01 | *** join/#debian boudiccas (~boudiccas@unaffiliated/boudiccas) |
| 13:32.13 | r3n1c0n | nkuttler, http://pastebin.com/6JQXC5vC |
| 13:32.19 | DelphiWorld | nkuttler: solved, thank |
| 13:32.21 | *** join/#debian secrgb (~j@62.0.168.213.sta.estpak.ee) |
| 13:32.25 | nkuttler | r3n1c0n: use paste.debian.net please |
| 13:32.28 | nkuttler | DelphiWorld: great |
| 13:32.53 | novaflash | there's a paste.debian.net, cool |
| 13:33.00 | novaflash | now i can spam that place |
| 13:33.05 | DelphiWorld | novaflash: apt-get install pastebinit |
| 13:33.10 | Z1T1TTT | I am trying to create a shortcut script. I have a key with the "Windows" logo that I'd like to use. How is this key called in linux? |
| 13:33.26 | r3n1c0n | nkuttler, http://paste.debian.net/123236/ |
| 13:33.27 | novaflash | DelphiWorld: that defaults to paste.debian.net? |
| 13:33.41 | DelphiWorld | yup novaflash |
| 13:33.44 | novaflash | neat |
| 13:33.50 | *** join/#debian adkins (~Malte@p4FEBAAEE.dip0.t-ipconnect.de) |
| 13:33.55 | nkuttler | r3n1c0n: yeah, that flash works just fine in my iceweasel |
| 13:34.00 | novaflash | i'll just spam my passwd files there |
| 13:34.38 | *** join/#debian Xiti (~Xiti-@unaffiliated/xiti) |
| 13:35.10 | r3n1c0n | https://learning.aries.net/secure/content/1000001364/OperatingSystemv8.01Dutch/labs/Simulation/Unit2_Lab_01.htm |
| 13:35.14 | r3n1c0n | there its not for me |
| 13:35.26 | r3n1c0n | its school assesment |
| 13:35.54 | nkuttler | r3n1c0n: well. does youtube.com work? |
| 13:36.00 | r3n1c0n | yes |
| 13:36.05 | nkuttler | r3n1c0n: there you go.. |
| 13:36.06 | adkins | heyy guys, i`m trying to format a usb stick to ext4.....creating+writing partition/table with fdisk, then formatting with mkfs.ext4 /dev/sdb1 BUT if i do fdisk -L afterwards it still says: W95 FAT32 (LBA). why is that? |
| 13:36.25 | *** join/#debian g00gz (~Adium@199.244.84.14) |
| 13:36.57 | r3n1c0n | its shockwave |
| 13:37.00 | *** join/#debian iveevue (~na@unaffiliated/iveevue) |
| 13:37.01 | Z1T1TTT | hows the `Win` key called in linux? (I am creating a scrit for a shortcut) |
| 13:37.16 | nkuttler | adkins: is -L the partition types? |
| 13:37.24 | r3n1c0n | nkuttler, its shockwave i think thats the problem right |
| 13:37.30 | nkuttler | Z1T1TTT: meta usually, i think |
| 13:37.38 | *** join/#debian elmargol (~elmargol@host244-111-dynamic.249-95-r.retail.telecomitalia.it) |
| 13:37.46 | nkuttler | r3n1c0n: i wouldn't know |
| 13:37.49 | Z1T1TTT | nkuttler: thx! |
| 13:37.52 | jelly | Z1T1TTT: or Super |
| 13:37.54 | elmargol | Hi is there an easy way to find out what php worker my server uses? |
| 13:37.55 | *** join/#debian troete (~troete@osbk-4db149e3.pool.mediaWays.net) |
| 13:38.02 | nkuttler | r3n1c0n: if flash works on youtube, that page is broken |
| 13:38.14 | elmargol | I have an old installation and now I'm reinstalling it to a new vm and I can't figure it out |
| 13:38.15 | *** join/#debian r420r (isaacbsd@unaffiliated/r420r) |
| 13:38.16 | novaflash | fdisk -L actually doesn't work, it has to be fdisk -l - may be he typed it like that before l in some fonts looks like I or 1 |
| 13:38.19 | Z1T1TTT | jelly: Yes, this is called the Super or Meta key in Linux. |
| 13:38.23 | Z1T1TTT | thx guys. |
| 13:38.33 | adkins | nkuttler: fdisk -l tells me for that disk in the column to the right (system) : W95 FAT32 (LBA) |
| 13:38.45 | jelly | Z1T1TTT: mind you, Super and Meta are two different modifiers (akin to Control and Alt) |
| 13:38.55 | *** join/#debian s-hell (~quassel@camazotz.pcspinnt.de) |
| 13:38.59 | nkuttler | adkins: linux uses dos/windows-style partitions |
| 13:39.00 | jelly | (and Shift, really) |
| 13:39.07 | Z1T1TTT | I see |
| 13:39.07 | *** join/#debian phuh (~phuh@184.175.0.80) |
| 13:39.07 | *** join/#debian dimitrios__ (~textual@host86-149-222-212.range86-149.btcentralplus.com) |
| 13:39.17 | *** join/#debian Abd_Allatif (~abd@unaffiliated/abd-allatif/x-6736565) |
| 13:39.20 | *** join/#debian hele (~hele@212-149-195-104.bb.dnainternet.fi) |
| 13:39.27 | Z1T1TTT | jelly: well I want to use it alone. no combination. so its META right? |
| 13:39.32 | *** join/#debian brainwash (~brainwash@unaffiliated/brainwash) |
| 13:40.14 | jelly | Z1T1TTT: start "xev", move the mouse into that window, and press it |
| 13:40.14 | *** join/#debian Guest32011 (uid39513@gateway/web/irccloud.com/x-gquiqvxtwglsspyv) |
| 13:40.15 | adkins | nkuttler: so its normal? i have another stick on the same system, which the OS runs on. there it says: Linux (as System). its because linux is running on? |
| 13:40.52 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 13:41.10 | adkins | and another disk drive which i formated the same way: it says "Linux" . is it because it is a sata drive and no usb stick? |
| 13:41.22 | nkuttler | adkins: maybe you haven't set the parition type properly |
| 13:41.24 | jelly | Z1T1TTT: the observe which keysym it generates |
| 13:41.24 | DelphiWorld | THANK Debianists |
| 13:41.34 | *** part/#debian DelphiWorld (~TheVoicer@openvpn/user/DelphiWorld) |
| 13:41.35 | elmargol | problem solved. did find some hints in the logfiles :) |
| 13:41.47 | Z1T1TTT | jelly: Super_L ???? |
| 13:41.59 | nkuttler | Z1T1TTT: that sounds about right |
| 13:42.58 | adkins | nkuttler: fdisk /dev/sdb -> "n" -> "w" and then: "mkfs.ext4 /dev/sdb -L backup" |
| 13:43.16 | jelly | Z1T1TTT: so it's Super, left one |
| 13:43.30 | Z1T1TTT | so in my script i'll use `SUper_L` or `Super` ? |
| 13:43.33 | adkins | nkuttler: anything missing? |
| 13:43.43 | jelly | Z1T1TTT: you will use Super. |
| 13:43.54 | *** join/#debian RiskE (~RDev@195.88.100.118) |
| 13:43.57 | Z1T1TTT | jelly: okay thanks. |
| 13:44.18 | nkuttler | adkins: you can change the id with the t command |
| 13:44.54 | adkins | nkuttler: id=Linux OR WIN95..... ? |
| 13:45.07 | nkuttler | adkins: hm? |
| 13:45.14 | novaflash | off i go. have a good weekend guys. |
| 13:45.17 | adkins | nkuttler: what do u mean by id? |
| 13:45.23 | adkins | nkuttler: the label? |
| 13:45.27 | *** part/#debian novaflash (~novaflash@openvpn/corp/support/novaflash) |
| 13:45.30 | *** join/#debian booby_tables_24 (~booby_tab@117.201.146.254) |
| 13:46.01 | *** mode/#debian [+l 1501] by debhelper |
| 13:46.16 | nkuttler | adkins: in fdisk, m for help, see t, and see l |
| 13:46.23 | adkins | nkuttler: oh u mean mkfs -t ext4 /dev/sdb right? |
| 13:47.23 | *** join/#debian mike_af (~mike_af@50-77-49-46-static.hfc.comcastbusiness.net) |
| 13:47.23 | *** join/#debian mike_af (~mike_af@unaffiliated/mike-af/x-5454762) |
| 13:47.53 | *** join/#debian AlexWH88 (~alexwh@187.59.140.75) |
| 13:48.29 | s-hell | hello everyone |
| 13:48.41 | winb | hi |
| 13:48.51 | s-hell | how can i create a list with all critical updates only? |
| 13:51.17 | adkins | nkuttler: got it. thx a lot! |
| 13:51.37 | *** join/#debian Nyoom (Nyoom@unaffiliated/nyoom) |
| 13:51.44 | *** join/#debian j5s7 (~juergen@dsl-217-164-190.pool.bitel.net) |
| 13:51.58 | *** join/#debian |oop (~loop@49.sub-174-236-161.myvzw.com) |
| 13:52.05 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 13:52.33 | *** join/#debian mtn (~mtn@dpc6744162247.direcpc.com) |
| 13:53.06 | *** join/#debian pchero1 (~pchero@109.70.54.56) |
| 13:53.21 | *** join/#debian dzragon (~dzragon@h-53-131.a260.priv.bahnhof.se) |
| 13:53.41 | *** join/#debian dtcrshr (~datacrush@unaffiliated/datacrusher) |
| 13:53.42 | *** join/#debian mennea (~textual@31.210.187.78) |
| 13:54.16 | *** join/#debian llucenic (~Thunderbi@rev-188-121-175-172.radiolan.sk) |
| 13:55.05 | *** join/#debian james41382 (~james@unaffiliated/james41382) |
| 13:55.41 | *** join/#debian johtso (uid563@gateway/web/irccloud.com/x-vxsnrmgkdsiejsez) |
| 13:56.17 | *** join/#debian AlexPortable (uid7568@gateway/web/irccloud.com/x-evavqlrfetdpcbgw) |
| 13:57.09 | *** join/#debian Alula (~filly@gateway/tor-sasl/suhosin) |
| 13:57.58 | *** join/#debian zir0faive (~zir0faive@cty37-1-78-214-92-19.fbx.proxad.net) |
| 13:58.21 | babilen | s-hell: What differentiates a critical update from a non-critical one? |
| 14:00.24 | *** join/#debian _mel_ (~melvin@ham.e-7.com) |
| 14:00.41 | *** part/#debian G66k (~G66K@unaffiliated/g66k) |
| 14:01.04 | *** join/#debian format_c (~format_c@2001:4dd0:ff00:8421:224:2bff:fe69:c29b) |
| 14:01.10 | *** join/#debian sllide (~yeap@107.170.37.181) |
| 14:01.35 | *** join/#debian kpease (~kpease@72.22.182.162) |
| 14:02.43 | *** join/#debian ki0_ (~ki0@212.230.172.17) |
| 14:04.39 | *** join/#debian relaxed (~relaxed@unaffiliated/relaxed) |
| 14:04.53 | *** join/#debian paw (~afong@198-48-224-134.cpe.pppoe.ca) |
| 14:07.15 | *** join/#debian stbatduke (~stb24@152.16.52.121) |
| 14:07.19 | *** join/#debian thunderrd (~thunderrd@116.58.237.60) |
| 14:07.31 | *** join/#debian mtn (~mtn@dpc6744162247.direcpc.com) |
| 14:07.58 | *** join/#debian SPF|Cloud (uid11755@gateway/web/irccloud.com/x-ofxapcqmryofnket) |
| 14:08.39 | dark-jedi | babilen: Critical updates are ones that send your computer to #$%^. Non-critical ones just paralyze briefly? lol |
| 14:08.50 | *** join/#debian rgr (~user@host-78-149-42-69.as13285.net) |
| 14:09.22 | *** join/#debian Denise_B (~denise@63.66.189.80.dyn.plus.net) |
| 14:10.41 | *** join/#debian mennea (~textual@31.210.187.78) |
| 14:10.48 | *** join/#debian mdel (uid25573@gateway/web/irccloud.com/x-jlnssdvsdwdauhrp) |
| 14:10.50 | Weapon | uit |
| 14:11.55 | *** join/#debian ambutts (ambutts@185.61.148.240) |
| 14:12.06 | *** join/#debian milford (milford@95.215.44.172) |
| 14:12.46 | *** join/#debian milford (milford@95.215.44.172) |
| 14:13.06 | stbatduke | Hello #debian ! I am looking for a bash patch for debian SQUEEZE that fixes shellshocked. Any way to install bash=4.2+dfsg-0.1+deb7u3 in SQUEEZE? I get "bash : PreDepends: libtinfo5 but it is not installable" when I try to upgrade bash only. http://paste.debian.net/hidden/577cff0b/ |
| 14:13.07 | *** join/#debian T0rch (~T0rch@191.185.37.93) |
| 14:13.15 | *** join/#debian hele (~hele@212-149-195-104.bb.dnainternet.fi) |
| 14:13.17 | *** join/#debian ashemta (~root@128.204.214.91) |
| 14:13.49 | stbatduke | according to debian packages and debian snapshots, there is no such thing as libtinfo5 o_O |
| 14:14.10 | *** join/#debian SPF|Cloud (uid11755@wikipedia/Southparkfan) |
| 14:14.13 | *** join/#debian Zzeiss (~wsy@68.244.139.8) |
| 14:14.29 | *** join/#debian fasheng (~fasheng@59.173.241.82) |
| 14:14.52 | *** join/#debian Zzeiss (~wsy@68-244-139-8.pools.spcsdns.net) |
| 14:15.21 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 14:16.00 | *** mode/#debian [+l 1508] by debhelper |
| 14:16.20 | *** join/#debian DelphiWorld (~TheVoicer@openvpn/user/DelphiWorld) |
| 14:16.39 | *** join/#debian osmo_SMS (osmo_SMS@92.81.13.183) |
| 14:17.13 | jelly | stbatduke: no, there is no way to do that. Instead, enable squeeze-lts or upgrade to wheezy. |
| 14:17.22 | jelly | !tell stbatduke about squeeze-lts |
| 14:17.35 | stbatduke | I always get "it's not possible" as the only answer :P |
| 14:17.38 | stbatduke | I know there is a way to do it |
| 14:17.45 | stbatduke | it just may take some work |
| 14:17.45 | *** part/#debian Weapon (Weapon@trekweb/user/Weapon) |
| 14:18.36 | jelly | stbatduke: your goal isn't to install 4.2+dfsg-0.1+deb7u3, but fix the hole, and that's what the package in squeeze-lts does |
| 14:18.45 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 14:19.01 | stbatduke | can I use the squeeze-lts source and just install the patch there ? |
| 14:19.24 | *** join/#debian crecca (~user@gateway/tor-sasl/crecca) |
| 14:19.33 | jelly | you should probably install ALL the patches from there, not just bash |
| 14:19.41 | *** join/#debian aatwood (~quassel@adsl-99-104-4-59.dsl.rcsntx.sbcglobal.net) |
| 14:19.46 | *** join/#debian boudiccas (~boudiccas@unaffiliated/boudiccas) |
| 14:19.58 | stbatduke | yeah I know |
| 14:20.22 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 14:21.10 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 14:21.27 | *** join/#debian frostbittenking (~frost@91-119-99-97.dynamic.xdsl-line.inode.at) |
| 14:22.08 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 14:22.28 | *** join/#debian FlowRiser (~FlowRiser@5-14-175-240.residential.rdsnet.ro) |
| 14:22.29 | *** join/#debian mtn (~mtn@dpc6744162247.direcpc.com) |
| 14:23.13 | *** join/#debian Bwithmore15 (~Bwithmore@222.127.37.38) |
| 14:23.33 | *** join/#debian mennea (~textual@31.210.187.78) |
| 14:24.55 | *** join/#debian zhaodx (~Thunderbi@113.240.10.219) |
| 14:25.40 | *** join/#debian ph4nt0mas (~quassel@athedsl-188617.home.otenet.gr) |
| 14:25.46 | *** join/#debian bakaneko (~d@kuzh.polytechnique.fr) |
| 14:26.01 | *** join/#debian chatsiri_ (~chatsiri_@cm-58-10-138-131.revip7.asianet.co.th) |
| 14:26.42 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 14:28.05 | *** join/#debian _sknz_ (~sknz@177.92.60.240) |
| 14:28.39 | *** join/#debian ByT3b0N3 (~ByT3b0N3@p5B264452.dip0.t-ipconnect.de) |
| 14:28.58 | _sknz_ | Hi, bash version 4.2 is not fully secure ? (with all patches) |
| 14:29.13 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 14:29.58 | *** join/#debian adev_ (~adev@2a02:2770:3:0:216:3eff:febe:3d4) |
| 14:30.28 | *** part/#debian DelphiWorld (~TheVoicer@openvpn/user/DelphiWorld) |
| 14:30.44 | *** join/#debian anoy (~Thunderbi@60.223.228.88) |
| 14:31.02 | *** join/#debian O00O (~O00O@unaffiliated/zz0) |
| 14:31.26 | *** join/#debian codygman (~cody@COMMEMORATI.ear1.Dallas1.Level3.net) |
| 14:31.34 | *** join/#debian karimb (~kboumedhe@mail1.bbva.com) |
| 14:32.18 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 14:32.21 | karlpinc | _sknz_: security.debian.org has a bash that's patched for wheezy. |
| 14:32.59 | *** join/#debian hele (~hele@212-149-195-104.bb.dnainternet.fi) |
| 14:33.27 | *** join/#debian g00gz (~Adium@199.244.84.14) |
| 14:33.48 | *** join/#debian rojem (~rojem@199.4.160.73) |
| 14:34.04 | *** part/#debian b0bbi10 (~me@unaffiliated/caztiel) |
| 14:34.07 | *** join/#debian _0bitcount (~big-byte@81.61.209.223.dyn.user.ono.com) |
| 14:34.32 | *** join/#debian Alula (~filly@gateway/tor-sasl/suhosin) |
| 14:35.45 | *** join/#debian Finkelmann (~monkey@p54876960.dip0.t-ipconnect.de) |
| 14:36.01 | *** mode/#debian [+l 1517] by debhelper |
| 14:38.39 | *** join/#debian kelpo (~k3lp0@12.39.7.218) |
| 14:39.15 | *** join/#debian bullgard (~detlef@dslb-094-223-007-112.094.223.pools.vodafone-ip.de) |
| 14:39.15 | stbatduke | Hey All!! Also @ jelly: I have a paste page with instructions for patching debian squeeze older than lts! http://paste.debian.net/123244/ Or at least it worked for my debian 6.0.9! It did not require any funny dependencies in my case, but I can't promise it in all cases. |
| 14:39.44 | *** join/#debian TyrfingMjolnir (~Tyrfing@cm191.iota111.maxonline.com.sg) |
| 14:39.50 | stbatduke | I'll probably put a question up on stackexchange or superuser at some point, as well as my own blog, which I will have to create since I don't have one yet. |
| 14:40.29 | *** join/#debian mitc0185 (~erikm@50.244.202.237) |
| 14:40.30 | jelly | stbatduke: that's fine, your paste shows how to enable squeeze-lts repo |
| 14:40.30 | stbatduke | If you want me to provide a link to the blog when I get it up, please send me a PM with your email and I'll email you when I have it up. |
| 14:40.42 | stbatduke | :) |
| 14:40.44 | mitc0185 | is there a website that is sort of the go to place for computer security information? |
| 14:40.51 | *** join/#debian anoy (~Thunderbi@60.223.228.88) |
| 14:41.07 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 14:41.15 | stbatduke | @ mitc0185 I use http://seclists.org |
| 14:41.23 | stbatduke | for one anyway |
| 14:41.26 | stbatduke | I use a bunch really |
| 14:41.34 | stbatduke | http://seclists.org/oss-sec/2014/q3/650 is the page for this vulnerability |
| 14:41.35 | *** part/#debian g00gz (~Adium@199.244.84.14) |
| 14:41.38 | stbatduke | brb |
| 14:41.58 | *** join/#debian troete (~troete@osbk-4db17181.pool.mediaWays.net) |
| 14:42.59 | *** join/#debian gerforce (~zoujunc@120.210.166.152) |
| 14:43.03 | *** join/#debian txp (~txp@unaffiliated/txp) |
| 14:43.45 | *** join/#debian teraflops (~teraflop@77.225.225.204) |
| 14:43.47 | *** join/#debian kimbo (~kimbo@217.22.45.73) |
| 14:43.49 | *** join/#debian KTL (~KTL2@213.219.168.18.adsl.dyn.edpnet.net) |
| 14:43.53 | jelly | stbatduke: your paste however does not check for https://bugs.debian.org/762760 |
| 14:44.57 | mitc0185 | do I need to restart apache after upgrading bash on a given system? |
| 14:45.31 | rgr | no |
| 14:48.09 | asher1 | from where i download new version debian? |
| 14:49.09 | karlpinc | asher1: You want to install a new debian or upgrade your existing system? |
| 14:49.50 | asher1 | no i want download for copy in disk |
| 14:49.55 | *** join/#debian ndrei (~avo@adsl1-gw-par-213-152-13-254.ipeva.net) |
| 14:50.00 | *** join/#debian sphenxes (~sphenxes@91-119-220-120.dynamic.xdsl-line.inode.at) |
| 14:50.18 | *** join/#debian srruby (~john@ip-64-134-238-89.public.wayport.net) |
| 14:50.35 | *** join/#debian davi (davi@wilbur.25thandclement.com) |
| 14:50.36 | *** join/#debian davi (davi@gnu/davi) |
| 14:51.30 | *** join/#debian sandman13 (~sandman@202.51.84.21) |
| 14:51.47 | karlpinc | You want a copy of the installation cd? Or you want a copy of all the cds? Or? |
| 14:52.03 | *** join/#debian detha (~detha@unaffiliated/detha) |
| 14:52.04 | *** join/#debian nielsle (~nielsle@3239078-cl69.boa.fiberby.dk) |
| 14:52.05 | *** join/#debian sphenxes (~sphenxes@91-119-220-120.dynamic.xdsl-line.inode.at) |
| 14:52.26 | *** join/#debian jappi (~jappi@dslb-092-078-239-025.092.078.pools.vodafone-ip.de) |
| 14:52.28 | stbatduke | good call jelly I hadn't seen that page yet |
| 14:52.30 | karlpinc | asher1: You don't seem to be an English speaker. What language do you speak? We can recommend another channel in your language. |
| 14:53.31 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 14:53.33 | *** join/#debian mennea (~textual@31.210.187.78) |
| 14:53.51 | *** join/#debian epicfai1 (6dec1699@gateway/web/freenode/ip.109.236.22.153) |
| 14:54.11 | *** join/#debian epicfai1-- (~epicfail@109.236.22.153) |
| 14:54.24 | karlpinc | has a hard time beliving that a lot of people run bash cgi scripts, but appearently it's so. |
| 14:55.14 | stbatduke | Hey karlpinc I agree with you! I am 90% sure that my company doesn't, but who knows? |
| 14:55.35 | asher1 | copy in cd |
| 14:56.14 | stbatduke | asher1: are you looking for the ISO copies to put on CD or DVD? Try here: https://www.debian.org/CD/ |
| 14:56.24 | *** join/#debian Sevet (~Sevet@05453846.skybroadband.com) |
| 14:56.48 | karlpinc | asher1: Here are the cd images that are recommended for installing debian. https://www.debian.org/distrib/netinst |
| 14:56.50 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 14:57.02 | *** join/#debian seekr (~seekr@unaffiliated/seekr) |
| 14:57.36 | *** join/#debian bizarrosandwich (~bizarrosa@ip68-107-139-232.tc.ph.cox.net) |
| 14:57.49 | *** join/#debian kpease (~kpease@72.22.182.162) |
| 14:58.23 | *** join/#debian xingu_ (~xingu@cl-1734.lon-02.gb.sixxs.net) |
| 14:58.42 | *** join/#debian Corerris (~Corerris@c83-253-187-218.bredband.comhem.se) |
| 14:59.16 | *** join/#debian perrier (~perrier@107.170.175.57) |
| 15:00.18 | *** join/#debian bullgard4 (~chatzilla@unaffiliated/bullgard4) |
| 15:00.30 | *** join/#debian K4k (~K4k@unaffiliated/k4k) |
| 15:01.29 | *** join/#debian rmuefi (~DT@host155-44-static.34-79-b.business.telecomitalia.it) |
| 15:01.39 | *** join/#debian ecthiender (~ecthiende@122.166.171.190) |
| 15:01.47 | *** join/#debian ecthiender (~ecthiende@unaffiliated/ecthiender) |
| 15:01.53 | rmuefi | hi all :) |
| 15:02.06 | *** join/#debian tonythomas (uid25971@gateway/web/irccloud.com/x-kyxlkuhbzspqozec) |
| 15:02.15 | *** join/#debian kpease (~kpease@72.22.182.162) |
| 15:02.30 | *** join/#debian rauls (~rsalinas@212.118.209.82) |
| 15:03.56 | *** join/#debian Soupr (56043418@gateway/web/freenode/ip.86.4.52.24) |
| 15:04.31 | Soupr | Hi, I am having difficulty installing a display driver due to lack of space |
| 15:04.43 | *** join/#debian ghostlin_ (~ghostline@095-097-139-090.static.chello.nl) |
| 15:04.56 | Soupr | i know I have space for it, but for whatever reason the driver doesn't seem to think so, and doesn't have any option to change directory |
| 15:05.19 | Sevet | sure it's on the partition you expect? |
| 15:05.25 | Sevet | eg is it out of space on /tmp? |
| 15:06.22 | karlpinc | Soupr: You could try cleaning out your apt cache, with something like "apttidue clean". This gets more space on /var. |
| 15:06.45 | Soupr | I have made a post on reddit with some relevent information |
| 15:06.52 | Soupr | would i be okay to paste that link here? |
| 15:07.10 | *** join/#debian IIT (~IIT@unaffiliated/xtriz) |
| 15:07.11 | *** part/#debian bullgard4 (~chatzilla@unaffiliated/bullgard4) |
| 15:07.50 | *** join/#debian IIT (~IIT@unaffiliated/xtriz) |
| 15:08.31 | *** join/#debian Tulsene (~Tuls@APoitiers-257-1-18-150.w90-38.abo.wanadoo.fr) |
| 15:09.24 | *** join/#debian teraflops (~teraflop@77.225.225.204) |
| 15:10.29 | *** join/#debian xSmurf (~MrSmurf@gateway/tor-sasl/mrsmurf) |
| 15:12.21 | *** join/#debian TDog (~chatzilla@174-30-175-219.tcso.qwest.net) |
| 15:13.12 | *** join/#debian Jdbye|Tabtop (~jdbye@41.178.164.82.customer.cdi.no) |
| 15:13.26 | *** join/#debian UploadDownload (~Upload@uploaddownload.pw) |
| 15:13.53 | sadsagfjg | how to compile binary code in debian?> |
| 15:14.25 | *** join/#debian calisto (~calisto@unaffiliated/calisto) |
| 15:14.57 | sadsagfjg | nkuttler: how to compile binary code in debian?> |
| 15:15.13 | UploadDownload | sadsagfjg: Explain? |
| 15:15.14 | karlpinc | sadsagfjg: That's a very broad question. Perhaps you should tell us what you're trying to accomplish. |
| 15:15.39 | *** join/#debian fold (~JimmyRcom@66-169-184-128.dhcp.ftwo.tx.charter.com) |
| 15:16.48 | *** join/#debian hubutm20 (~hubutm20@79.114.49.74) |
| 15:17.35 | *** join/#debian troete (~troete@osbk-4db142cf.pool.mediaWays.net) |
| 15:17.48 | sadsagfjg | karlpinc: UploadDownload :for example 010101010100101 |
| 15:18.00 | s7r | how can i check what desktop environment I am using ? |
| 15:18.05 | UploadDownload | sadsagfjg: What do you want it to run in? |
| 15:18.11 | *** part/#debian rmuefi (~DT@host155-44-static.34-79-b.business.telecomitalia.it) |
| 15:18.16 | UploadDownload | s7r: Wanna post a screenshot of it using a image sharing tool such as imgur |
| 15:19.07 | sadsagfjg | UploadDownload: in debian |
| 15:19.13 | s7r | UploadDownload: too complicated it is on a box not connected to the internet |
| 15:19.24 | sadsagfjg | UploadDownload: how to compile? |
| 15:19.26 | UploadDownload | sadsagfjg: Yeah but is the binary code? |
| 15:19.32 | UploadDownload | sadsagfjg: As in python or C? |
| 15:19.57 | *** join/#debian Wharncliffe (~gm@unaffiliated/ridout) |
| 15:20.39 | sadsagfjg | UploadDownload: I don know I want to compile |
| 15:20.58 | UploadDownload | sadsagfjg: DM me the binary if its not big |
| 15:22.50 | karlpinc | sadsagfjg: What do you want to complile and why? (Otherwise, "echo 0101010101" produces "compiled" output. There, done! :) |
| 15:23.40 | *** join/#debian mennea_ (~textual@31.210.187.78) |
| 15:24.42 | sadsagfjg | karlpinc: 0100101101100001011100100110000101101010010011000111010101100111 |
| 15:25.33 | sadsagfjg | karlpinc: How to compile this????? |
| 15:26.00 | *** mode/#debian [+l 1505] by debhelper |
| 15:26.13 | sadsagfjg | karlpinc: ??? |
| 15:26.32 | karlpinc | sadsagfjg: Saying "I want to compile" is like saying "I want to make something". Do you want to make a chair? A painting? Tell us more or we'll assume you're trolling. |
| 15:26.59 | *** join/#debian |oop (~loop@41.sub-174-236-129.myvzw.com) |
| 15:27.26 | *** join/#debian perrier (~perrier@107.170.175.57) |
| 15:27.40 | sadsagfjg | karlpinc: no this binary code sent for me |
| 15:27.55 | *** join/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 15:27.55 | *** join/#debian magyar (~magyar@unaffiliated/magyar) |
| 15:27.56 | *** join/#debian bariumbitmap (~nbeaver@dh187.ls.iit.edu) |
| 15:28.10 | sadsagfjg | karlpinc: and i want run it how please help me? |
| 15:28.25 | Penix | sadsagfjg: we can't help you |
| 15:29.05 | karlpinc | sadsagfjg: chmod a+x yourfile Then you can type "./yourfile" to run it. (Running random binaries is dangerous!) |
| 15:29.49 | sadsagfjg | karlpinc: Penix The code I posted I did not know what was in it. |
| 15:29.52 | jelly | sadsagfjg: where do you get said binary code from? |
| 15:30.10 | *** join/#debian format_c (~format_c@2001:4dd0:ff00:8421:6e62:6dff:fe4a:e47d) |
| 15:30.55 | *** join/#debian Hohlraum (~Hohlraum@96-35-158-130.static.stls.mo.charter.com) |
| 15:31.11 | Penix | sadsagfjg: your question is neither appropriate for this channel, nor sensical |
| 15:31.12 | *** join/#debian Kdh0 (5dcfb505@gateway/web/freenode/ip.93.207.181.5) |
| 15:31.14 | karlpinc | sadsagfjg: Of course it will only run if it's suitable for your hardware and software environment. |
| 15:31.47 | *** join/#debian kermit (unknown@pdpc/supporter/bronze/kermit) |
| 15:31.57 | *** part/#debian Kdh0 (5dcfb505@gateway/web/freenode/ip.93.207.181.5) |
| 15:32.46 | sadsagfjg | karlpinc: please comand for i speak english vey bad |
| 15:34.14 | *** join/#debian cference (~vezril@64.187.189.2) |
| 15:34.15 | Penix | sadsagfjg: your question is not debian related. you need to find help somewhere else |
| 15:34.17 | crush26 | I upgraded a Deb 6 machine yesterday to Deb 7, which all went well; however I am seeing kernel headers version does not match installed kernel when trying to reinstall drivers for a BlackMagic card. Anyone come across this before? |
| 15:34.22 | karlpinc | sadsagfjg: What langauge do you speak? We can direct you to a channel in your language. |
| 15:34.35 | sadsagfjg | karlpinc: persian |
| 15:34.41 | karlpinc | Penix: Well, if he's running Debian, we help. |
| 15:35.05 | Penix | if the question makes sense, yes. regardless of language, this query doesn't make much sense |
| 15:35.07 | karlpinc | !persian |
| 15:35.07 | dpkg | For help in Persian join #debian-ir |
| 15:35.18 | *** join/#debian nikio (K@wlan-145-94-174-040.wlan.tudelft.nl) |
| 15:35.22 | *** part/#debian Cope (~nelsost1@37.188.125.80) |
| 15:35.40 | sadsagfjg | Penix: sory |
| 15:35.45 | Penix | crush26: which version of eache do you have installed? |
| 15:35.52 | Penix | each even |
| 15:36.23 | *** join/#debian DynamicFail (~DynamicFa@147.177.234.121) |
| 15:36.26 | karlpinc | wants to author some software named earache |
| 15:36.34 | *** join/#debian blahRus (~blahRus@wsip-68-14-231-140.ph.ph.cox.net) |
| 15:36.41 | *** join/#debian anoy (~Thunderbi@60.223.228.88) |
| 15:36.45 | *** join/#debian Sbroker (~DebianSta@254.red-158-255-239.telecablesantapola.es) |
| 15:36.47 | *** join/#debian Sbroker (~DebianSta@unaffiliated/sbroker) |
| 15:37.01 | crush26 | Penix: not sure I understand what you are asking |
| 15:37.32 | crush26 | Penix: oh which version of each Deb i have installed? |
| 15:37.34 | Penix | crush26: which kernel package version do you have installed? which version kernel headers version do you have installed? |
| 15:37.53 | Penix | pardon my keyboard mishaps |
| 15:38.02 | crush26 | Penix: kernel version 3.2.0-4-amd64 |
| 15:38.34 | crush26 | Penix: how do i determine the header version? |
| 15:39.07 | Penix | crush26: you should have the kernel headers package installed. something like dpkg --get-selections |grep headers |
| 15:39.32 | *** part/#debian satta_satta (~thomas@pd95c7d39.dip0.t-ipconnect.de) |
| 15:39.56 | jelly | crush26: make sure both linux-image-3.2.0-4-amd64 and linux-headers-3.2.0-4-amd64 packages are up-to-date and matching versions |
| 15:40.04 | mirda | hi, what apt cacher is better, apt-cacher or apt-cacher-ng? or what differencies are between them? |
| 15:40.41 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 15:40.52 | *** join/#debian karimb (~kboumedhe@mail1.bbva.com) |
| 15:40.54 | *** join/#debian teraflops (~teraflop@77.225.225.204) |
| 15:41.15 | crush26 | Penix: linux-headers-3.2.0-4-common-rt, linux-headers-3.2.0-4-rt.amd64, and linux-headers-rt-amd64 |
| 15:41.40 | karlpinc | mirda: I use apt-cacher and it does not cause me problems. I heard long ago that apt-cacher-ng was an improvement but have not bothered to change. At the time apt-cacher-ng wasn't working in my version of debian. |
| 15:41.50 | Penix | crush26: and your kernel is not the same, right? you're not running the realtime version? your headers are the realtime version |
| 15:42.16 | crush26 | Penix: kernel was 3.2.0-4-amd64 |
| 15:42.44 | *** join/#debian |xk05| (~xk05@70.176-62-69.ftth.swbr.surewest.net) |
| 15:43.50 | *** join/#debian willwh (~willwh@unaffiliated/willskills) |
| 15:44.17 | *** join/#debian n-st (~n-st@ipbcc053ce.dynamic.kabel-deutschland.de) |
| 15:44.20 | mirda | karlpinc: ok, thanks for reply |
| 15:44.32 | *** join/#debian mr_daemon (~supernaut@2001:470:1d:47e::100:8868) |
| 15:44.43 | Penix | crush26: look at the versions of the linux-image and linux-headers packages you have installed |
| 15:44.46 | *** join/#debian Chaosphere64 (~Chaospher@unaffiliated/chaosphere64) |
| 15:45.00 | *** join/#debian satta_satta (~thomas@pd95c7d39.dip0.t-ipconnect.de) |
| 15:45.25 | Chaosphere64 | Hi, I want to remove an entry from my /etc/apt/sources.list |
| 15:45.36 | crush26 | Penix: they are different, so I need to remove the headers and install according to my kernel? |
| 15:45.48 | Penix | crush26: bingo |
| 15:45.51 | Chaosphere64 | Before that I want to know what packages are actually installed having used that source. Is that possible? |
| 15:45.53 | *** join/#debian ola (~user@unaffiliated/ola) |
| 15:46.17 | karlpinc | Chaosphere64: Sounds like a job for apt-cache, but I forget the details. |
| 15:46.18 | crush26 | Penix: ok easier said than done...how do I do that |
| 15:46.27 | Penix | crush26: don't necessarily need to remove the old ones. just install the appropriate ones |
| 15:46.31 | *** join/#debian Abd_Allatif (~abd@unaffiliated/abd-allatif/x-6736565) |
| 15:46.41 | Penix | crush26: the same way you'd install any other package |
| 15:46.47 | crush26 | Penix: sory I am still learning linux |
| 15:47.10 | crush26 | Penix: apt-get install? |
| 15:47.14 | Penix | yes |
| 15:47.19 | jelly | Chaosphere64: read /msg dpkg which repo, or perhaps something like /msg dpkg bdo list |
| 15:47.20 | *** join/#debian ct0 (~ct0@130.68.242.51) |
| 15:47.36 | karlpinc | Chaosphere64: I'm also pretty sure that aptitude will do that query. |
| 15:48.02 | jelly | Chaosphere64: if the repo provided a unique Origin you'd be able to do something like that bdo list thing |
| 15:48.25 | karlpinc | Chaosphere64: What jelly said. There's something on the backports.debian.org faq that has a query like that for backports. |
| 15:48.42 | Chaosphere64 | Ah, great, thx! |
| 15:49.37 | *** join/#debian ParaDebian (~Paradisee@2.239.28.120) |
| 15:49.47 | *** part/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 15:49.55 | Chaosphere64 | ok, that worked. I only got linux-libc-dev from the backports repository |
| 15:50.33 | *** join/#debian ToApolytoXaos (~ToApolyto@46.21.62.128) |
| 15:50.41 | *** join/#debian socomm (~socomm@96-40-147-98.dhcp.mtpk.ca.charter.com) |
| 15:51.28 | *** join/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 15:52.05 | sadsagfjg | karlpinc: I can t compile please give me command |
| 15:52.11 | crush26 | Penix: that fixed it, thank you |
| 15:52.50 | *** join/#debian kermit (unknown@pdpc/supporter/bronze/kermit) |
| 15:52.56 | karlpinc | sadsagfjg: Per above. You make it executable: chmod a+x yourfile Then you run it: ./yourfile The binary must be in a file named "yourfile". |
| 15:53.40 | *** join/#debian mennea (~textual@31.210.187.78) |
| 15:54.09 | sadsagfjg | karlpinc: What is the file extension ? |
| 15:54.22 | *** join/#debian TDog (~chatzilla@174-30-175-219.tcso.qwest.net) |
| 15:55.01 | *** join/#debian sti_fr (~sti_fr@78.129.50.225) |
| 15:55.30 | sadsagfjg | karlpinc: for example myfile=1 |
| 15:56.04 | jhutchins | sadsagfjg: File extensions are mostly irrelevant in *nix. |
| 15:56.18 | *** join/#debian patsn (~pat@xdsl-87-79-170-175.netcologne.de) |
| 15:57.01 | *** join/#debian err404 (~err404@62-210-205-221.rev.poneytelecom.eu) |
| 15:57.07 | *** join/#debian bradjones (~bradley@host86-134-136-27.range86-134.btcentralplus.com) |
| 15:57.08 | *** join/#debian bradjones (~bradley@unaffiliated/jab) |
| 15:57.23 | *** join/#debian ACiDC0re (~ACiD@31.7.56.246) |
| 15:58.08 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 15:58.32 | sadsagfjg | jhutchins: i make file 1 and into file for example 1010101 |
| 15:58.49 | sadsagfjg | jhutchins: and i want to compile This file How? |
| 15:59.04 | *** join/#debian rbanffy (~rbanffy@177.95.209.249) |
| 15:59.10 | sadsagfjg | jhutchins: my name file =1 |
| 15:59.25 | *** join/#debian ecthiender (~ecthiende@unaffiliated/ecthiender) |
| 16:00.00 | sadsagfjg | karlpinc: i make file 1 and into file for example 1010101 |
| 16:00.06 | sadsagfjg | jhutchins: and i want to compile This file How? |
| 16:00.16 | sadsagfjg | jhutchins: my name file =1 |
| 16:00.24 | jelly | sadsagfjg: how do you make this file? |
| 16:00.41 | sadsagfjg | jelly: nano 1 |
| 16:01.28 | *** join/#debian Jafura (~Jean-Fran@85.234.199.20) |
| 16:01.29 | *** join/#debian bbtech (~bbtech@67.139.42.222) |
| 16:01.36 | jelly | sadsagfjg: alright, and how do you know what to write in there, where do you get the contents for? |
| 16:01.42 | jelly | from* |
| 16:01.58 | *** join/#debian diniwed (~gavron@pool-74-108-225-30.nycmny.fios.verizon.net) |
| 16:01.58 | *** join/#debian winb (~pi@2001:4663:7fff:0:a00:ff:fe00:1) |
| 16:01.59 | *** join/#debian JordiGH (~jordi@octave/developer/JordiGH) |
| 16:02.14 | JordiGH | is it a bug that bash-doc ships a fucking manpage instead of the actual texinfo manual? |
| 16:02.55 | Penix | no, that's an awesome feature. |
| 16:03.14 | JordiGH | Alright, so we have pointless texinfo hatred. |
| 16:03.17 | JordiGH | I'll file the bug report. |
| 16:03.25 | jhutchins | sadsagfjg: May I suggest that you google "compiling software in linux" in your own language? I get plenty of good results in English. |
| 16:03.26 | *** join/#debian Seryth (~Matrix@unaffiliated/mang0) |
| 16:03.27 | sadsagfjg | jelly: please say me command |
| 16:03.48 | jhutchins | sadsagfjg: http://luv.asn.au/overheads/compile.html |
| 16:03.52 | sadsagfjg | jhutchins: I dont know whats languge |
| 16:04.39 | jhutchins | sadsagfjg: http://www.aboutdebian.com/compile.htm http://www.control-escape.com/linux/lx-swinstall-tar.html http://www.wikihow.com/Compile-a-Program-in-Linux |
| 16:04.43 | *** join/#debian Betal (~Beta@unaffiliated/betal) |
| 16:05.13 | *** join/#debian |oop (~loop@41.sub-174-236-129.myvzw.com) |
| 16:05.25 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 16:06.09 | jelly | JordiGH: is it pointless or is it GFDL? |
| 16:06.20 | *** join/#debian Hunterkll (~Hunterkll@2001:470:8b06:2000:5e6:5377:de17:1bff) |
| 16:06.48 | jelly | JordiGH: changelog.Debian suggests the latter |
| 16:06.53 | *** join/#debian collizion (~collizion@unaffiliated/collizion) |
| 16:06.56 | *** join/#debian DynamicFail (~DynamicFa@147.177.234.121) |
| 16:07.05 | JordiGH | jelly: It's GFDL with no invariant sections. |
| 16:07.33 | jelly | perhaps there were some way back then, nice to see them gone |
| 16:07.52 | *** join/#debian TimAsplin (0265c482@gateway/web/freenode/ip.2.101.196.130) |
| 16:07.54 | cardiel | is it possible to shrink and expand volumes with lvm even if there isnt any spare space? like shrinking lvm/home and then use the space to expande lvm/root? |
| 16:08.03 | JordiGH | Compare the actual bash manual with the gimpy version in /usr/share/doc/bash: https://www.gnu.org/software/bash/manual/bash.pdf |
| 16:08.08 | TJ- | cardiel: Yes |
| 16:08.16 | cardiel | TJ-: ok thanks |
| 16:08.57 | JordiGH | Same problem wtih gcc... |
| 16:09.06 | JordiGH | wtf, I want a texinfo manual, not a gimped out manpage. |
| 16:09.14 | *** part/#debian Hohlraum (~Hohlraum@96-35-158-130.static.stls.mo.charter.com) |
| 16:10.12 | TimAsplin | Hello, having an issue with dual boot win7 and debian. Installed like tutorials say, and at end install said it found 'windows vista' (Looked this up and seamed normal), selected yes to update boot loader. But still boots straight to win7 with no options, and checking in msconfig still only one boot option listed. |
| 16:10.29 | TimAsplin | been searching ant tried few things, but nothing working... |
| 16:11.39 | karlpinc | JordiGH: Enable non-free and install it? Dunno about bash but often that's where the info pages go. |
| 16:12.01 | jhutchins | TimAsplin: You won't see Linux from the MS system. Grub replaces the boot code in the MBR, and is able to choose either linux or windows. Windows can't do that. |
| 16:12.16 | jhutchins | !fixgrub |
| 16:12.16 | dpkg | To reinstall <GRUB> boot to your Debian install disk/live CD, switch to the other console (Alt-F2), then mount your root filesystem (mount -t ext2 /dev/whatever /target ; mount --bind /dev /target/dev ; mount -t proc none /target/proc ; mount -t sysfs none /target/sys), then chroot into it (chroot /target) and run "update-grub && grub-install /dev/whatever". See also <rescue mode>, <dual boot guide>, <supergrub>. Also works for EFI! |
| 16:12.21 | JordiGH | karlpinc: It's not about free or non-free, it's that Debian packagers decided to cripple the texinfo manuals and turn them into manpages due to texinfo hatred. |
| 16:12.32 | JordiGH | If they want manpages, why did they have to get rid of the texinfo manuals too? |
| 16:12.50 | jhutchins | TimAsplin: You want to install grub to the root device (/dev/sda), not a partition (/dev/sda1) |
| 16:13.02 | JordiGH | Did you compare the pdf bash "manual" in Debian compared to the actual manual? It's got sections, no hyperlinks, it's missing sections... |
| 16:13.04 | sadsagfjg | karlpinc: please answer with command myfile name=1 |
| 16:13.50 | jhutchins | JordiGH: That isn't Debian's doing, it's happened throughout linux. |
| 16:13.57 | karlpinc | sadsagfjg: Do you have text, one and zero characters, you wish to turn into a binary? |
| 16:14.40 | *** join/#debian tozen (~tozen@adsl-83-100-175-34.karoo.KCOM.COM) |
| 16:14.40 | jhutchins | sadsagfjg: It isn't a simple command, please read the links I sent you earlier. |
| 16:14.57 | jelly | declares sadsagfjg's question SILLY |
| 16:15.16 | sadsagfjg | karlpinc: I want to run 0 and 1. |
| 16:15.20 | TimAsplin | jhutchins Ok, can I do that using the Live cd? thanks |
| 16:15.27 | JordiGH | jhutchins: What does Linux have to do with GNU manuals? |
| 16:15.31 | jhutchins | TimAsplin: Yep. |
| 16:15.31 | karlpinc | does not understand sadsagfjg's question. |
| 16:15.44 | jelly | sadsagfjg: we can't help you, sorry. This channel is for Debian tech support. |
| 16:15.53 | JordiGH | jhutchins: Should I expect to get full manuals on GNU/kFreeBSD? |
| 16:15.56 | jhutchins | JordiGH: Nothing, nevermind. Did you have a Debian support question? |
| 16:16.01 | *** mode/#debian [+l 1497] by debhelper |
| 16:16.02 | *** join/#debian |oop (~loop@41.sub-174-236-129.myvzw.com) |
| 16:16.17 | JordiGH | jhutchins: Yes, I'll report the bugs against the bash-doc and gcc-doc packages about missing manuals. |
| 16:16.23 | *** join/#debian altin (~altin@37.35.65.55) |
| 16:16.23 | *** join/#debian altin (~altin@flossk/altin) |
| 16:16.25 | sadsagfjg | jelly: so please give link me about run 010101? |
| 16:16.36 | TimAsplin | jhutchins thanks, will give that a go |
| 16:16.42 | Penix | JordiGH: no. the BSD port is still Debian |
| 16:16.52 | tozen | Hi all!! Gals does anb able to link my to good manual about applets in fluxbox? Thx. |
| 16:16.58 | jelly | sadsagfjg: there isn't one. Now please stop asking the same thing over again. |
| 16:16.59 | tozen | *me |
| 16:17.10 | Penix | tozen: you mean dockapps? |
| 16:17.21 | tozen | Penix: perhaps... |
| 16:17.22 | karlpinc | JordiGH: Good. If there's no longer invariant sections then we'll get info pages in the stock .deb. |
| 16:17.40 | sadsagfjg | jelly: OK :) |
| 16:17.59 | Penix | tozen: google something like "windowmaker dock apps". fluxbox/blackbox/openbox/windowmaker. it's all the same |
| 16:18.11 | jhutchins | sadsagfjg: http://www.aboutdebian.com/compile.htm http://www.control-escape.com/linux/lx-swinstall-tar.html http://www.wikihow.com/Compile-a-Program-in-Linux |
| 16:18.19 | jhutchins | sadsagfjg: http://luv.asn.au/overheads/compile.html |
| 16:18.35 | *** join/#debian nbt (~nbt@unaffiliated/nbt) |
| 16:18.40 | JordiGH | karlpinc: It's not about invariant sections; it's pointless texinfo hatred. The gcc-doc package is non-free and pointlessly turns texinfo manuals into manpages (not pages, it's not "info pages", it's man pages or info manuals, info is not a cheat-sheet style single-page format) |
| 16:19.14 | tozen | Penix: thx |
| 16:19.23 | jhutchins | JordiGH: You can stop ranting now, it's been that way since the 90's. |
| 16:19.57 | sadsagfjg | jhutchins: This is not my answer my question run 0 and 1 and I dont know written by languge? |
| 16:20.36 | *** join/#debian blivande (~Chw@189.193.69.170) |
| 16:20.38 | jelly | JordiGH: it's not _just_ man pages, there's generated pdf and html in bash-doc |
| 16:21.15 | Penix | sadsagfjg: your questions make no sense. a bunch of binary bits means nothing to us. we can't help you. |
| 16:21.24 | jhutchins | sadsagfjg: I was suggesting that you look for translations in whatever language you speak. |
| 16:22.02 | sadsagfjg | jhutchins: no programing languge |
| 16:22.18 | karlpinc | sadsagfjg: Probably best to wait until somebody shows up on #debian-ir and ask there. |
| 16:22.49 | *** part/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 16:22.56 | jelly | !next |
| 16:22.56 | dpkg | Another happy customer leaves the building. |
| 16:23.05 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-149-180.084.059.pools.vodafone-ip.de) |
| 16:23.07 | *** join/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 16:23.11 | Penix | finally |
| 16:23.24 | jelly | dpkg can be SO sarcastic! |
| 16:23.25 | dpkg | jelly: no idea |
| 16:23.35 | *** join/#debian |oop (~loop@41.sub-174-236-129.myvzw.com) |
| 16:23.40 | *** join/#debian mennea (~textual@31.210.187.78) |
| 16:23.55 | *** join/#debian Mike9863 (~Mike9863@198.151.130.249) |
| 16:24.11 | karlpinc | JordiGH: I've got the full info pages for emacs on my debian box. It came from non-free. No reason why there can't be other info pages if somebody puts the work into making them happen. |
| 16:24.16 | *** join/#debian sandman13 (~sandman@202.51.84.21) |
| 16:24.35 | *** join/#debian fhalew (~jappi@dslb-088-075-168-236.088.075.pools.vodafone-ip.de) |
| 16:24.42 | *** join/#debian ct0 (~ct0@130.68.242.51) |
| 16:24.45 | karlpinc | JordiGH: I've got m4 and coreutils and lots-o-info pages. |
| 16:24.47 | socomm | I'm having problems with Exim4. Anyone here can tell me if updating update-exim4.conf.conf is enough to make changes to the exim daemon? |
| 16:24.50 | *** join/#debian lf94 (~DrAugustD@bas1-gatineau14-1242484406.dsl.bell.ca) |
| 16:25.03 | socomm | Specifically I'm trying to disable IPv6 DNS look-ups. |
| 16:25.14 | jhutchins | socomm: You do need to reload exim. |
| 16:25.21 | lf94 | Question: what's the difference between the full set DVDs, which total to about 15GB, and the mirror's size (amd64 is 97GB)? |
| 16:25.24 | *** join/#debian brian-mac (~textual@5.149.168.66) |
| 16:25.47 | socomm | jhutchins: Thanks, I've tried that, but the change didn't affect the exim daemon. |
| 16:25.52 | *** join/#debian Ricardo__ (~rick@189.63.167.101) |
| 16:25.52 | *** join/#debian Ricardo__ (~rick@unaffiliated/ricardo--/x-7903455) |
| 16:25.53 | Penix | lf94: more importantly; do you really need the full dvd set? |
| 16:26.03 | socomm | lf94: More. Software. |
| 16:26.31 | *** join/#debian FnorZ (~cthulhu@unaffiliated/fnorz) |
| 16:26.42 | lf94 | Penix: I'd like to have a local copy. |
| 16:27.04 | lf94 | socomm: but aren't they supposed to be fulldvd sets?! |
| 16:27.16 | jhutchins | lf94: Architectures, internationalization, 30,000 packages... |
| 16:27.17 | Penix | lf94: do you really think you'll need every single package in the entire distribution before the next release comes? |
| 16:27.48 | lf94 | Penix: It'd be nice to have! |
| 16:27.49 | Penix | lf94: even if you do want a local copy, the first few images would be enough |
| 16:27.54 | lf94 | Ok |
| 16:27.54 | *** join/#debian uber_ (~uber@ma.sdf.org) |
| 16:28.00 | *** join/#debian LV-426 (~LV-426@unaffiliated/lv-426) |
| 16:28.05 | lf94 | Do they include non-free firmware too? |
| 16:28.06 | jhutchins | lf94: Unfortunately nobody's ever put together a human-readable guide to what's on which disk. |
| 16:28.31 | jhutchins | lf94: It's very rare for an intel user to need anything beyond the second disk. |
| 16:28.49 | lf94 | It's mostly for usb wireless devices |
| 16:28.53 | *** join/#debian uber (~uber@ma.sdf.org) |
| 16:29.05 | *** join/#debian Abd_Allatif_ (~abd@unaffiliated/abd-allatif/x-6736565) |
| 16:29.14 | socomm | lf94: Maybe a better question would be, do you need 97GB of software? |
| 16:29.23 | *** join/#debian uber (~uber@ma.sdf.org) |
| 16:29.38 | jhutchins | socomm: You can look at the actual conf files and see that your changes got applied properly. |
| 16:29.39 | socomm | lf94: I can tell you from personal experience I just install via netinstall and provision the machine as needed. |
| 16:29.40 | lf94 | No, but it's nice having a local copy if I need something /not/ included in those additional disks |
| 16:29.49 | *** join/#debian Pucilowski (~pucilowsk@146.185.175.17) |
| 16:29.53 | *** join/#debian uber (~uber@ma.sdf.org) |
| 16:29.54 | lf94 | socomm: I'm not always connected to the internet |
| 16:29.56 | *** join/#debian Eduard_Munteanu (~Eduard_Mu@188.25.6.49) |
| 16:30.10 | lf94 | There are times when I have no internet for 3-7 days |
| 16:30.23 | *** join/#debian uber (~uber@ma.sdf.org) |
| 16:30.23 | socomm | jhutchins: How would I look at the conf file? I've modified the /etc/exim4/update-exim4.conf.conf. |
| 16:30.23 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 16:30.24 | *** join/#debian bakaneko (~d@kuzh.polytechnique.fr) |
| 16:30.24 | *** join/#debian Seto_Kaiba (~Hunterkll@2001:470:8b06:3000:9cdd:f680:9ad7:54da) |
| 16:30.26 | *** join/#debian T0rch (~T0rch@k4-245-wf2.icb.ufmg.br) |
| 16:30.28 | lf94 | I'll take your advice though and just get the full dvd set |
| 16:30.39 | Penix | are you going to need something obscure like an IBM 3270-compatible terminal emulator in those 3-7 days? |
| 16:30.42 | *** join/#debian format_c (~format_c@2001:4dd0:ff00:8421:224:2bff:fe69:c29b) |
| 16:30.43 | socomm | lf94: I see. |
| 16:30.44 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 16:31.01 | lf94 | Penix: no lol |
| 16:31.29 | socomm | Penix: I'd say no, but you never know when the itch may strike. :^) |
| 16:31.30 | *** join/#debian ccondit (~ccondit@64.202.160.88) |
| 16:31.37 | lf94 | Mostly things like "oh, I need nginx, but never thought I'd need it. Would be nice if I could just apt-get install nginx but I have no internet!" |
| 16:31.45 | karlpinc | Penix: Never know. There's times when I just get an _irrestable_ urge to use the tab key! |
| 16:31.48 | *** join/#debian `^-_-^` (uid26275@gateway/web/irccloud.com/x-znjfrxitalfuqwlx) |
| 16:31.57 | Penix | "damn, if only I'd have powered up this AS/400 while my satellite link was up!" |
| 16:32.00 | sadsagfjg | pclover: Thnks |
| 16:32.05 | pclover | sadsagfjg, generally you should not randomly PM people |
| 16:32.20 | pclover | chances are doing that will get you put on peoples ignore list |
| 16:32.25 | lf94 | Private Massage |
| 16:32.44 | *** join/#debian egxwkg (~jappi@dslb-092-078-144-116.092.078.pools.vodafone-ip.de) |
| 16:32.46 | socomm | Lol, I'm already getting 404 by skiddies trying to exploit the 'shellshock' vuln. |
| 16:32.48 | *** join/#debian epicfai1-- (~epicfail@109.236.22.153) |
| 16:32.58 | *** join/#debian user472259 (~user@AMontpellier-653-1-412-3.w90-57.abo.wanadoo.fr) |
| 16:33.06 | pclover | of course |
| 16:33.07 | Penix | lf94: the cd/dvd images are typically built by popularity/importance when it comes to which packages are on particular images |
| 16:33.22 | Penix | lf94: something like ngnix won't be on the 74th dvd image |
| 16:33.34 | sadsagfjg | pclover: oh sorry.Very sorry |
| 16:33.53 | lf94 | Penix: Ok awesome :) |
| 16:34.02 | lf94 | Penix: Think non-free firmwares are included? |
| 16:34.14 | sadsagfjg | Penix: now i gived the answers and i m sorry |
| 16:34.18 | socomm | lf94: what Penix said, just get the DVD set you should be ok. |
| 16:34.26 | sadsagfjg | sorry all |
| 16:34.39 | socomm | sadsagfjg: UNFORGIVABLE!!!! |
| 16:34.42 | lf94 | socomm: affirmative |
| 16:34.47 | lf94 | Thanks guys~ |
| 16:34.53 | *** join/#debian j5s7 (~juergen@dsl-217-164-190.pool.bitel.net) |
| 16:35.00 | pclover | sadsagfjg, you need to understand what binary is |
| 16:35.04 | Penix | lf94: wouldn't think so. might be custom images somewhere |
| 16:35.25 | lf94 | <PROTECTED> |
| 16:35.26 | pclover | binary is_not code |
| 16:35.33 | sadsagfjg | socomm: why?? |
| 16:35.43 | socomm | sadsagfjg: It was a joke. |
| 16:35.47 | pclover | code is stored as binary however |
| 16:35.48 | Penix | lf94: mirror, or physical media? |
| 16:35.54 | lf94 | physical |
| 16:35.57 | sadsagfjg | pclover: i know but other say to me |
| 16:36.03 | *** join/#debian acemi (~acemi@unaffiliated/acemi) |
| 16:36.09 | sadsagfjg | socomm: :D |
| 16:36.10 | *** join/#debian MMavipc (MMavipc@unaffiliated/mmavipc) |
| 16:36.14 | *** join/#debian spudwebb (~spuddweb@24.147.244.234) |
| 16:36.25 | lf94 | I should honestly start a "large media" distribution service here in canada. There are none for anything. |
| 16:36.36 | *** join/#debian WiXZlo (~WiXZlo@94.19.137.125) |
| 16:36.49 | *** part/#debian MMavipc (MMavipc@unaffiliated/mmavipc) |
| 16:37.09 | *** part/#debian sadsagfjg (5b85d4b0@gateway/web/freenode/ip.91.133.212.176) |
| 16:37.10 | *** join/#debian Modeuse (~Modeuse@p5797E6A6.dip0.t-ipconnect.de) |
| 16:37.51 | Penix | go for it. be sure to donate a dollar or two to the project for each sale. free sandwich after $10 |
| 16:37.54 | socomm | lf94: Physical media is dead. |
| 16:37.57 | *** part/#debian WiXZlo (~WiXZlo@94.19.137.125) |
| 16:38.08 | Penix | that's what they said about disco |
| 16:38.40 | lf94 | socomm: not when something is >20GB |
| 16:38.51 | lf94 | Penix: I'd totally do that. |
| 16:38.53 | jhutchins | lf94: https://www.osdisc.com/products/linux/debian |
| 16:38.59 | pclover | physical media still has uses |
| 16:39.16 | pclover | would you count Tapes a physical media? |
| 16:39.19 | lf94 | Wait a minute, 10 DVDs?...There are only 5 on the debian site. |
| 16:39.29 | *** join/#debian thunderrd (~thunderrd@116.58.237.60) |
| 16:40.42 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 16:41.32 | socomm | lf94: Unless you live in a place who doesn't have internet 24x7 (3rd world) physical media is pretty much dead. |
| 16:42.00 | socomm | lf94: But don't let me stop you. People used to say the world was a flat disk, too. |
| 16:42.03 | *** join/#debian tekkbuzz (~oijvlj@cpe-67-240-151-83.rochester.res.rr.com) |
| 16:43.14 | *** join/#debian ndrei (~avo@adsl1-gw-par-213-152-13-254.ipeva.net) |
| 16:43.19 | lf94 | socomm: internet is capped in a lot of places |
| 16:44.06 | socomm | lf94: Is it, the only internet I've used that was cap was on my cell, but even then its only degraded to 3G after is use #Gb. |
| 16:44.16 | *** join/#debian Roenie (~roenie@D978E338.cm-3-1d.dynamic.ziggo.nl) |
| 16:45.10 | Penix | socomm: let me guess: you're in the US? |
| 16:45.39 | socomm | Penix: Yes. |
| 16:45.52 | Penix | well, there you go. |
| 16:45.57 | *** join/#debian jager (~quassel@swt-emerson-02-246.dsl.netins.net) |
| 16:45.57 | *** join/#debian jager (~quassel@fsf/member/jager) |
| 16:46.03 | lf94 | Canada's internet still has some evolving to do |
| 16:46.26 | Penix | a lot of the world's has. not just "3rd world" countries |
| 16:46.29 | socomm | lf94: So does the American, our infrastructure is abyssmal. |
| 16:46.45 | Roenie | not to mention mankind itself |
| 16:46.54 | Penix | deep |
| 16:47.22 | lf94 | So what's up with this 10 DVD set? |
| 16:47.30 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 16:47.31 | lf94 | And how is it different from the 5 DVD set |
| 16:47.39 | lf94 | that's on the debian site |
| 16:47.45 | *** join/#debian patterson (~patterson@c-50-174-179-173.hsd1.ca.comcast.net) |
| 16:48.07 | Penix | source package images? docs and crap? wouldn't have a clue |
| 16:48.36 | lf94 | Ohh this looks nice, but freakin' pricey: https://www.osdisc.com/products/linux/debian/debian-live-76-no-desktop-kingston-dtm-30-64gb-usb-flash-drive-64bit.html |
| 16:48.46 | lf94 | (Pricey for what it is) |
| 16:49.24 | Penix | lf94: realistically, in your case, just grab maybe the first three dvd images if you really think you want something for a rainy day |
| 16:49.32 | jelly | lf94: well the stick is reasonably fast |
| 16:50.00 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 16:50.10 | karlpinc | Reminds me. There used to be places that would burn and ship you cd images for not much. Wonder if they're still in business? |
| 16:50.17 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 16:50.57 | Penix | surely some are left. there are still BSD ones |
| 16:51.12 | *** join/#debian ndrei (~avo@adsl1-gw-par-213-152-13-254.ipeva.net) |
| 16:51.37 | Eduard_Munteanu | wonders if any BSD provides verified downloads |
| 16:51.43 | jhutchins | karlpinc: There are still a bunch, I linked to one above. https://www.google.com/search?q=linux+dvds |
| 16:51.45 | Eduard_Munteanu | They all seem to suck badly at it. |
| 16:51.55 | *** join/#debian blast_hardcheese (~blast_har@unaffiliated/blast-hardcheese/x-0199635) |
| 16:52.19 | jhutchins | I used cheapbytes, but they seem to have slipped under. |
| 16:52.21 | lf94 | Penix: Yeah that seems to be the best bet. |
| 16:52.44 | *** join/#debian richac (~richac@pool-71-167-34-81.nycmny.fios.verizon.net) |
| 16:52.50 | lf94 | Penix: I'm thinking of just getting the 5 from the debian site (3 are just originals, the other 2 are upgrade DVDs) |
| 16:53.01 | *** join/#debian j5s7 (~juergen@dsl-217-164-190.pool.bitel.net) |
| 16:53.08 | *** join/#debian viccuad (~vic@unaffiliated/viccuad) |
| 16:53.21 | *** join/#debian dreamon (~dreamon@unaffiliated/dreamon) |
| 16:55.05 | `^-_-^` | is the rumor true that patch for bash is not 100%? |
| 16:55.08 | *** join/#debian batrick (batrick@2600:3c00::f03c:91ff:fe96:477b) |
| 16:55.32 | Penix | the patch eats babies and installs webmin |
| 16:55.34 | jhutchins | `^-_-^`: It is now. |
| 16:55.53 | *** join/#debian timahvo1 (~rogue@mail.cickenya.com) |
| 16:56.07 | arcke | Eduard_Munteanu: i was checking the same thing just now |
| 16:56.32 | arcke | i switched from BSD because of this |
| 16:56.36 | *** join/#debian antiwire (~antiwire@unaffiliated/antiwire) |
| 16:57.45 | *** join/#debian SethM (~SethM@ool-44c38130.dyn.optonline.net) |
| 16:57.51 | Eduard_Munteanu | I find it awkward to call yourself (e.g. OpenBSD) security-focused, but not provide verifiable downloads. |
| 16:57.54 | *** part/#debian Guest37439 (batrick@2600:3c00::f03c:91ff:fe96:477b) |
| 16:58.03 | Eduard_Munteanu | s/awkward/stupid/ |
| 16:58.32 | Penix | even though I may have instigated it, we're veering towards ot territory |
| 16:58.37 | arcke | Eduard_Munteanu: OpenBSD covers everything, except the SHA256 anoncvs mirror fingerprints are distributed through SSL |
| 16:58.59 | arcke | s/distributed/not distributred |
| 16:59.04 | *** join/#debian tuor-work (~quassel@213.55.184.166) |
| 16:59.29 | *** join/#debian FnorZ (~cthulhu@unaffiliated/fnorz) |
| 16:59.41 | tuor-work | hi, do debian have more than one (bind9) dns server and if yes, what is the easyest to configure? |
| 16:59.42 | Eduard_Munteanu | arcke, hm, so you can verify the official images? |
| 17:00.11 | Eduard_Munteanu | tuor-work, dnsmasq likely |
| 17:00.26 | tuor-work | Eduard_Munteanu, ok thx! |
| 17:00.32 | *** join/#debian pankid (~pan@173-162-51-174-michigan.hfc.comcastbusiness.net) |
| 17:00.36 | antiwire | yo. Is it just me or is the shellshock issue nonexistent on wheezy? I tested on a few systems without running updates and I can't get it go (which is good). Any one confirm? |
| 17:00.37 | *** join/#debian thunderrd (~thunderrd@116.58.237.60) |
| 17:00.58 | arcke | Eduard_Munteanu: yes, http://www.openbsd.org/faq/faq3.html#Verify |
| 17:01.04 | antiwire | I used an old Damn Vulnerable Linux install to make sure it actually worked. |
| 17:01.23 | KaaK | is there any reason why guile-2.0 is in wheezy:amd64, but not in wheezy:armhf ? |
| 17:01.47 | *** join/#debian dreamon_ (~dreamon@unaffiliated/dreamon) |
| 17:02.05 | Eduard_Munteanu | arcke, and how do you check the SHA256 sums? |
| 17:02.07 | *** part/#debian ee2455 (~ee2455@unaffiliated/ee2455) |
| 17:02.13 | *** join/#debian sicretor (~sicretor@host202-204-dynamic.43-79-r.retail.telecomitalia.it) |
| 17:02.15 | *** join/#debian justanotheruser (~Justan@unaffiliated/justanotheruser) |
| 17:02.41 | Penix | KaaK: most likely |
| 17:02.46 | Eduard_Munteanu | Or get the PGP keys verifiably. |
| 17:03.16 | sicretor | clear |
| 17:03.29 | KaaK | Penix, i've checked, and it is the case -- but is there any particular reason why? are package disparities documented anywhere? |
| 17:03.38 | *** join/#debian bariumbitmap (~nbeaver@dh187.ls.iit.edu) |
| 17:03.58 | arcke | Eduard_Munteanu: i thought the release checksums were signed themselves |
| 17:04.18 | *** join/#debian Zvmdyv (~Zvmdyv@unaffiliated/zvmdyv) |
| 17:04.43 | *** join/#debian troete (~troete@osbk-4db155dd.pool.mediaWays.net) |
| 17:04.45 | *** join/#debian tensorpudding (~tensorpud@108.87.19.152) |
| 17:04.53 | *** join/#debian meaneye (~meaneye@5.144.49.70) |
| 17:04.55 | *** join/#debian |knack| (~loop@41.sub-174-236-129.myvzw.com) |
| 17:04.59 | *** join/#debian mennea (~textual@31.210.187.78) |
| 17:05.04 | arcke | Eduard_Munteanu: but if you really want to be secure, do you trust http://openbsd.das.ufsc.br/anoncvs.html#CVSROOT the fingerprints on this page? |
| 17:05.10 | Eduard_Munteanu | arcke, hm, they are, there are .sig's. |
| 17:05.20 | Eduard_Munteanu | arcke, of course not |
| 17:05.25 | Sbroker | one question, what s the best file system to install debian in a ssd disk? |
| 17:05.27 | arcke | you will need anaoncvs for security patches |
| 17:05.48 | *** join/#debian Mac101 (~Mac@cpc11-lanc6-2-0-cust22.3-3.cable.virginm.net) |
| 17:05.48 | *** join/#debian Betal (~Beta@unaffiliated/betal) |
| 17:05.53 | Eduard_Munteanu | arcke, they should be hosted on HTTPS at least |
| 17:06.04 | lf94 | Sbroker: F2FS |
| 17:06.05 | arcke | yes, but they dont have a cert |
| 17:06.05 | lf94 | B) |
| 17:06.42 | Eduard_Munteanu | arcke, well, it's not that expensive. And they could at least spread it over a few other https sites like github |
| 17:07.24 | *** join/#debian dimitrios__ (~textual@host86-149-222-212.range86-149.btcentralplus.com) |
| 17:07.27 | Eduard_Munteanu | My main complaint with the way distros do this stuff is they just don't give a damn. It's not an issue of money or anything really. |
| 17:07.34 | *** join/#debian Okee (~Okee@50-0-108-248.dsl.dynamic.sonic.net) |
| 17:07.45 | *** join/#debian _skycrash_ (~sknz@177.92.60.240) |
| 17:08.55 | arcke | Eduard_Munteanu: i dont think that they dont give a damn, maybe they dont want to pay for way too expensive SSL |
| 17:08.58 | _skycrash_ | For old debians, not have official patch to cve-7169 at ftp.gnu.org ? |
| 17:09.16 | *** join/#debian blazed (~blazed@gateway/tor-sasl/bninja) |
| 17:09.17 | arcke | they almost ran out of funds some time ago |
| 17:09.45 | *** join/#debian dimitry7 (~dimitry7@gate.aaamerica.com.mx) |
| 17:09.52 | dimitry7 | hello guys, I use RSA keys to login to my servers, 4096 bits long, but talking about security and key renovation how long time is it recommended to renew my keys? 3 or 6 months? |
| 17:09.53 | Eduard_Munteanu | arcke, a domain cert is about $20, and an organization cert about $100. |
| 17:10.13 | *** join/#debian Seto_Kaiba (~Hunterkll@2001:470:8b06:2000:8803:94dd:70be:8f9b) |
| 17:10.31 | arcke | if so, mail it one of their lists |
| 17:10.40 | *** join/#debian trogdor_ (~mike@d72-38-22-2.commercial1.cgocable.net) |
| 17:10.42 | Eduard_Munteanu | dimitry7, 4096bit keys should be safe for way longer than that |
| 17:10.53 | *** join/#debian lopho (~admin@patxi.bragasusadas.com) |
| 17:11.32 | *** join/#debian superusr (~usr@cm56-159-73.liwest.at) |
| 17:11.32 | *** join/#debian Pryon (~Pryon@animalcules.com) |
| 17:11.32 | dimitry7 | Eduard_Munteanu, really? how much? |
| 17:11.32 | Eduard_Munteanu | dimitry7, http://www.keylength.com |
| 17:11.36 | arcke | i might consider reinstalling when I can trust anoncvs fingerpints |
| 17:11.37 | Eduard_Munteanu | ^ |
| 17:11.39 | dimitry7 | Eduard_Munteanu, okay let me see |
| 17:11.54 | *** join/#debian dreamer (~henk@fedora/dreamer) |
| 17:12.02 | *** part/#debian dreamer (~henk@fedora/dreamer) |
| 17:12.32 | *** join/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 17:12.42 | *** join/#debian bakaneko (~d@kuzh.polytechnique.fr) |
| 17:12.44 | Eduard_Munteanu | arcke, it is incompetence to some degree, I've seen a few blunders with Debian as well. |
| 17:12.47 | arcke | Eduard_Munteanu: if you do want to get the fingerpints, download them anonymously through tor or find some internet shop |
| 17:13.01 | *** part/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 17:13.15 | Eduard_Munteanu | Yes, but it's really easy for them to just do the one job right. |
| 17:13.25 | arcke | Eduard_Munteanu: agreed |
| 17:14.00 | Eduard_Munteanu | e.g. debootstrap used to merely issue a warning and continue at full speed if there was no key available |
| 17:14.01 | *** part/#debian Pryon (~Pryon@animalcules.com) |
| 17:14.02 | *** join/#debian pzn (~pzn@pdpc/supporter/active/pzn) |
| 17:14.31 | *** join/#debian Zzeiss (~wsy@mumble144162.merl.com) |
| 17:14.38 | Eduard_Munteanu | Or not publishing CD image signing keys. |
| 17:14.43 | Eduard_Munteanu | I've reported all of these, btw. |
| 17:14.48 | *** join/#debian gaccardo (~gaccardo_@186.18.119.58) |
| 17:14.53 | Eduard_Munteanu | (and fixed now) |
| 17:15.01 | arcke | Eduard_Munteanu: security patches for packages used in the process of upgrading should also carry warnings |
| 17:15.27 | arcke | for instance, you can not use apt to securely upgrade apt |
| 17:15.51 | arcke | if you really want to go there, nothing is secure |
| 17:16.10 | arcke | thats one of openbsds main reasons for not going there |
| 17:16.22 | Eduard_Munteanu | arcke, indeed, I complained about Heartbleed-ridden images, because of the client-side vulnerability. |
| 17:17.16 | dimitry7 | Eduard_Munteanu, I chose asymmetric 4096 bits |
| 17:17.19 | dimitry7 | Eduard_Munteanu, ANSSI> 20201284096 |
| 17:17.19 | dimitry7 | 2004096 |
| 17:17.20 | dimitry7 | 256256 |
| 17:17.33 | dimitry7 | it means that my key will be unbreakable until 2020? |
| 17:17.35 | pzn | about the last DSA-3032 (bash), I have many machines with debian. They have only ssh port opened. All other ports closed. Ssh configured for private-key logins, password keyboard not enabled. All machine have few users, all of them are admin with sudo. Is this safe to leave bash NOT-updated in this situation? |
| 17:18.02 | arcke | pzn: do you use dhcp? |
| 17:18.11 | pzn | arcke, fixed IP |
| 17:18.18 | Eduard_Munteanu | dimitry7, rough estimate... unless quantum crypto makes some progress, I doubt even 2048 keys would be breakable in the few next decades |
| 17:18.30 | pzn | arcke, or better... "static" |
| 17:18.44 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 17:18.54 | arcke | i dont know how to exploit SSH |
| 17:19.07 | arcke | but that might be the only attack vector |
| 17:19.09 | *** join/#debian ololorin (~Andrey@46.138.190.47) |
| 17:19.53 | tozen | quit |
| 17:19.55 | Eduard_Munteanu | arcke, that's like saying "they aren't even trying", though |
| 17:20.14 | *** join/#debian rutnop (~rutnop@host-89-31-114-117.academ.org) |
| 17:20.15 | *** join/#debian |knack| (~loop@41.sub-174-236-129.myvzw.com) |
| 17:20.45 | Eduard_Munteanu | "There are so many bugs in software, so we aren't fixing our own." |
| 17:20.45 | dimitry7 | Eduard_Munteanu, wow, great!! That's considering a good brute force attack right? |
| 17:20.45 | *** join/#debian DynamicFail (~DynamicFa@147.177.234.121) |
| 17:20.51 | arcke | Eduard_Munteanu: they are trying |
| 17:21.14 | Eduard_Munteanu | dimitry7, plus known shortcuts / vulnerabilities in RSA. |
| 17:21.22 | pzn | arcke, I'm a little bad in english. you meant ssh is the only attack vector, or you meand that dhcp is the only attack vector? |
| 17:21.33 | arcke | is relying on SSL for security what they should do? or find some other solution? |
| 17:22.02 | arcke | pzn: ssh possibly, but i dont know the specifics of possible SSH exploits |
| 17:22.30 | *** join/#debian dreamon__ (~dreamon@unaffiliated/dreamon) |
| 17:22.35 | dimitry7 | Eduard_Munteanu, great man!! I think now it will be then good practise to renovate them in one year :-) |
| 17:22.45 | dimitry7 | Eduard_Munteanu, thank you very much!! |
| 17:22.49 | arcke | many SSL certs only carry SHA1- sigs |
| 17:22.49 | pzn | arcke, you are talking of "general ssh exploits" or about "ssh exploits derivated from bash DSA-3032" ? |
| 17:22.51 | Eduard_Munteanu | arcke, SSL can be a first step, but yes, there are other solutions. I don't have a problem with people not trusting SSL, rather that they don't make an effort whatsoever. |
| 17:23.09 | arcke | those derived from the bash exploit |
| 17:23.19 | *** join/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 17:23.23 | antiwire | Anyone tested the shellshock issue yet? I haven't even updated my debian wheezy and a squeeze system but they test out not vulnerable. |
| 17:23.42 | antiwire | what is it on a debian system which is preventing the shellshock issue before even patching bash? |
| 17:23.45 | *** part/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 17:23.54 | jelly | antiwire: tested for what? It's patched on wheezy and in squeeze-lts. |
| 17:24.00 | *** join/#debian gageps (~jappi@dslb-088-075-168-009.088.075.pools.vodafone-ip.de) |
| 17:24.00 | Eduard_Munteanu | arcke, for one thing, I want to see a concentrated effort to make a Most Important PGP Keys keyring, to bootstrap the chain of trust. |
| 17:24.04 | antiwire | jelly: how long has is been fixed? |
| 17:24.12 | jelly | antiwire: a day or two |
| 17:24.26 | antiwire | jelly: I haven't updated in a month and I can't make the exploit work |
| 17:24.36 | nbt | <PROTECTED> |
| 17:24.44 | jelly | antiwire: you're doing something wrong, then. A month would be vulnerable. |
| 17:24.51 | *** join/#debian PryMar56 (~prymar@unaffiliated/prymar56) |
| 17:25.01 | antiwire | nbt: That's what I thought but the same method worked on an old dman vulnerbale linux system |
| 17:25.04 | antiwire | so I know the test is good |
| 17:25.20 | nbt | antiwire: what test are you doing? |
| 17:25.21 | *** join/#debian teran (~teran@broadband-109-173-61-206.nationalcablenetworks.ru) |
| 17:25.24 | Eduard_Munteanu | arcke, yeah, the MD5 and SHA-1 situation sucks badly. |
| 17:25.33 | antiwire | nbt: env X="() { :;} ; echo shellshock vulnerable" /bin/sh -c "echo completed" |
| 17:25.40 | antiwire | on debian, I get no vulnerbale echos |
| 17:25.43 | Eduard_Munteanu | arcke, still, no excuse for, say, Ubuntu to publish only MD5 hashes of their images securely. |
| 17:25.45 | antiwire | on DVL it works |
| 17:25.51 | nbt | antiwire: it's because the test is using sh, not bash |
| 17:25.57 | antiwire | either way |
| 17:26.00 | antiwire | I tried both |
| 17:26.04 | arcke | oh, wow, thats terrible |
| 17:26.17 | antiwire | nbt: This doesn't work either: env X="() { :;} ; echo shellshock vulnerable" `which bash` -c "echo completed" |
| 17:26.48 | antiwire | nbt: testing on: GNU bash, version 4.2.37(1)-release (arm-unknown-linux-gnueabi) |
| 17:27.13 | mirda | if I understand it correctly, apt-cacher works only with apache? |
| 17:27.31 | antiwire | nbt jelly: I mean, this is good, I'm just trying to figure out why it's not working |
| 17:27.38 | jelly | antiwire: what does dpkg --print-architecture say? |
| 17:27.48 | lf94 | antiwire: diff? |
| 17:27.49 | jhutchins | antiwire: It may be architecture related. |
| 17:28.09 | jhutchins | arm bash may not have been vulnerable for some reason. |
| 17:28.12 | antiwire | jelly: that test is running on and arm system but I tried on x86_64 too |
| 17:28.44 | *** join/#debian movrax (~movrax@89-66-195-77.dynamic.chello.pl) |
| 17:28.44 | *** join/#debian movrax (~movrax@unaffiliated/movrax) |
| 17:28.46 | Eduard_Munteanu | arcke, so far, only Fedora, Gentoo, Arch and Debian seem to provide verified downloads reasonably, among the main choices. And Fedora is arrogant enough not to warn you the net installer does not check signatures. |
| 17:29.01 | nkuttler | steam |
| 17:29.05 | antiwire | shit, I see now |
| 17:29.18 | antiwire | jhutchins: It might be arch dep. |
| 17:29.25 | antiwire | crap. sorry guys |
| 17:29.38 | arcke | Eduard_Munteanu: Arch does as long as you stick to pacman, i remember other install tools did not verify |
| 17:29.41 | Eduard_Munteanu | CentOS, Mint and pretty much all else just don't. |
| 17:29.48 | *** join/#debian marceloamorim (~marcelo@189-90-192-72.isimples.com.br) |
| 17:29.49 | Eduard_Munteanu | Interesting. |
| 17:29.50 | *** join/#debian gaccardo (uid45088@gateway/web/irccloud.com/x-tsvwcpexvyuszgpv) |
| 17:29.50 | jelly | antiwire: that doesn't really answer the question |
| 17:30.12 | Eduard_Munteanu | arcke, same with Gentoo though, you have to use emerge-webrsync, not the traditional emerge --sync |
| 17:30.26 | antiwire | jelly: I just confirmed on a different system running old squeeze this time. vulnerbale x86_64 |
| 17:30.30 | arcke | debian still offers the most complete set of security policies |
| 17:30.50 | *** part/#debian marceloamorim (~marcelo@189-90-192-72.isimples.com.br) |
| 17:30.55 | Eduard_Munteanu | But at least they mention it in the handbook. I'd personally just rip out the rsync variant completely until they figure out a way to sign Portage. |
| 17:30.59 | jelly | antiwire: you need the squeeze-lts repo for that, read /msg dpkg squeeze-lts |
| 17:31.12 | antiwire | jelly: yes, sorry about all this. I see my error now |
| 17:31.28 | JordiGH | jelly: The generated pf and html in bash-doc are from the gimped manpage. They are not the info manual. |
| 17:31.47 | jelly | JordiGH: weird |
| 17:32.04 | arcke | but without looking at the distribution of sources, openbsd is the most secure OS |
| 17:32.06 | Eduard_Munteanu | arcke, I'm hardly satisfied with Debian either... there are way too many surprises in the system tools. |
| 17:32.46 | Eduard_Munteanu | arcke, one reason I wanted to try it, I suppose, but then got turned off really badly. |
| 17:32.48 | arcke | i have a problem understanding what contrib is, could be, and generally isnt |
| 17:33.16 | *** join/#debian Jdbye|Tabtop (~jdbye@ti0010a400-0181.bb.online.no) |
| 17:33.19 | jelly | arcke: contrib is mostly helpers to make non-free software actually work |
| 17:33.29 | arcke | right now for every contrib package i install i check it for the reason as to why it is |
| 17:33.45 | arcke | then i remove again from sources |
| 17:34.08 | jelly | arcke: eg. a downloader for a binary-only piece of software, or a build script for a piece of software that's only distributable in source form |
| 17:34.12 | arcke | it says contrib packages could be compiled with non-free software |
| 17:34.34 | *** join/#debian phuh (~phuh@184.175.0.80) |
| 17:35.02 | *** join/#debian mennea (~textual@31.210.187.78) |
| 17:35.05 | antiwire | jelly jhutchins nbt: http://pastebin.com/raw.php?i=E9Y5PJHm |
| 17:35.11 | antiwire | my mistake |
| 17:35.13 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 17:35.21 | *** join/#debian ndrei (~avo@195.6.194.17) |
| 17:36.01 | *** mode/#debian [+l 1489] by debhelper |
| 17:36.17 | *** part/#debian JordiGH (~jordi@octave/developer/JordiGH) |
| 17:36.20 | *** join/#debian kermit (unknown@pdpc/supporter/bronze/kermit) |
| 17:36.20 | jelly | antiwire: bash --version is not definitive. do dpkg -l bash or dpkg -s bash to see the package version, and compare with https://security-tracker.debian.org/tracker/CVE-2014-7169 |
| 17:36.33 | *** join/#debian kermit1 (unknown@c-75-72-166-126.hsd1.mn.comcast.net) |
| 17:36.53 | antiwire | jelly: ok thank you |
| 17:37.19 | *** join/#debian Guest19428 (~phobos@108.59.2.208) |
| 17:37.35 | *** join/#debian kermit1 (unknown@pdpc/supporter/bronze/kermit) |
| 17:37.59 | *** join/#debian koderok (~koderok@110.225.16.202) |
| 17:38.45 | antiwire | jelly: that arm system: 4.2+dfsg-0.1+deb7u1 armel |
| 17:39.01 | *** join/#debian Alina-malina (~Alina-mal@37.252.90.76) |
| 17:39.01 | *** join/#debian Alina-malina (~Alina-mal@unaffiliated/alina-malina) |
| 17:39.11 | antiwire | so, it might be arch dependent? |
| 17:39.34 | jelly | antiwire: go compare that to the security tracker page. |
| 17:40.17 | antiwire | jelly: In the link you posted, it shows fixed in u3, but the arm system is u1 and not producing the vulnerable output |
| 17:40.38 | antiwire | I'll track down the arm package changes |
| 17:40.57 | jelly | antiwire: because the check for the remaining bug is different from what you tried. |
| 17:40.59 | *** join/#debian ndrei_ (~avo@195.6.194.17) |
| 17:42.08 | jelly | antiwire: click the Debian Bugs link to #762760 to see the different check that's still unpatched in u1 |
| 17:42.30 | *** join/#debian Knaldgas (~pdj@dce.dongenergy.dk) |
| 17:42.38 | *** join/#debian Diehard (~falco@peugeotclub.sk) |
| 17:42.40 | jelly | antiwire: or just patch the machine(s) again with the latest package. |
| 17:43.11 | *** join/#debian codygman- (~cody@COMMEMORATI.ear1.Dallas1.Level3.net) |
| 17:44.57 | pankid | what is wrong with this rsync syntax that is preventing exclude from working? sudo rsync -av --exclude='/home/pan/Desktop/nicktest/test1/2/*' /home/pan/Desktop/nicktest/test1/ /home/pan/Desktop/nicktest/test2/ |
| 17:45.22 | *** join/#debian wcfields (~keynull@209.36.40.50) |
| 17:45.42 | nbt | antiwire: it looks like your arm system is already patched |
| 17:45.53 | *** join/#debian nikio (K@wlan-145-94-174-040.wlan.tudelft.nl) |
| 17:46.00 | *** join/#debian kgaeux (~jappi@dslb-092-078-236-157.092.078.pools.vodafone-ip.de) |
| 17:46.11 | nbt | if i'm not mistaken, the "ignoring function definition attempt" error message shown in your output was added in the first patch |
| 17:46.38 | antiwire | nbt: it's partially fixed, yeah |
| 17:49.00 | *** join/#debian Jdbye|Tabtop (~jdbye@ti0010a400-0181.bb.online.no) |
| 17:49.07 | antiwire | nbt: about to upgrade the sheevaplug now and I'll retest for output |
| 17:49.56 | valdyn | pankid: maybe you really want ** where you have * |
| 17:49.57 | *** join/#debian tormen (~me@lib59-5-82-243-109-205.fbx.proxad.net) |
| 17:50.51 | *** join/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 17:51.09 | *** join/#debian AimHere (~bod@cpc6-sgyl33-2-0-cust77.sgyl.cable.virginm.net) |
| 17:51.21 | *** join/#debian hele (~hele@212-149-195-104.bb.dnainternet.fi) |
| 17:52.31 | *** join/#debian tekkbuzz (~oijvlj@cpe-67-240-151-83.rochester.res.rr.com) |
| 17:52.51 | *** join/#debian Otyugh (~otyugh__@ARennes-251-1-223-215.w2-11.abo.wanadoo.fr) |
| 17:52.59 | *** join/#debian hele (~hele@212-149-195-104.bb.dnainternet.fi) |
| 17:53.00 | *** join/#debian paranoids (~markus@2a01:100:1026:0:7088:7462:34a9:7fb8) |
| 17:53.47 | *** join/#debian Cassiopaya (~Discovery@109.235.55.219) |
| 17:54.48 | *** join/#debian phox (~phox@d154-20-4-203.bchsia.telus.net) |
| 17:55.48 | *** join/#debian Fomina (~Discovery@109.235.55.219) |
| 17:56.07 | *** join/#debian stunder (~stunder@wsip-98-173-13-146.oc.oc.cox.net) |
| 17:57.14 | *** join/#debian sentor (~user@extern.dotsource.de) |
| 17:57.17 | sentor | hi |
| 17:57.48 | *** join/#debian not_phunyguy (~vortex@unaffiliated/phunyguy) |
| 17:58.06 | *** join/#debian streulma (~streulma@ip-83-134-230-80.dsl.scarlet.be) |
| 17:58.06 | *** join/#debian karakedi (~eAC53C340@unaffiliated/orphan) |
| 17:58.15 | *** part/#debian crush26 (~crush26@68-184-136-88.dhcp.stbr.ga.charter.com) |
| 17:58.17 | *** join/#debian skyrter (~skyrter@117-191.198-178.cust.bluewin.ch) |
| 17:58.29 | *** join/#debian diniwed (~gavron@pool-74-108-225-30.nycmny.fios.verizon.net) |
| 17:59.08 | *** join/#debian DrPc (~DrPc@5.237.100.193) |
| 17:59.58 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 18:00.15 | *** join/#debian DrPc (~DrPc@5.237.100.193) |
| 18:01.27 | *** join/#debian DrPc (~DrPc@5.237.100.193) |
| 18:01.58 | *** join/#debian mtn (~mtn@dpc6744162247.direcpc.com) |
| 18:02.28 | *** join/#debian phunyguy (~vortex@unaffiliated/phunyguy) |
| 18:02.29 | *** join/#debian DrPc (~DrPc@5.237.100.193) |
| 18:02.30 | *** join/#debian rgr|android (~Android@host-78-149-42-69.as13285.net) |
| 18:03.34 | zerick | I'm installing bash (from security repos as I see), but when I execute this, env x='() { :;}; echo vulnerable' bash -c "echo this is a test", it doesn't show the ingnoring function message |
| 18:03.50 | *** join/#debian troete (~troete@osbk-4d087333.pool.mediaWays.net) |
| 18:03.55 | zerick | (I'm updating bash would be more suitable of what I'm doing) |
| 18:04.05 | *** join/#debian T0rch (~T0rch@k4-245-wf2.icb.ufmg.br) |
| 18:04.31 | lf94 | zerick: because debian master race |
| 18:04.43 | zerick | Is that thing normal? changelog says that includes the patch for that shellshock CVE |
| 18:04.45 | lf94 | zerick: actually debian doesn't use bash by default |
| 18:05.00 | *** join/#debian mennea (~textual@31.210.187.78) |
| 18:05.08 | zerick | lf94, ok, use dash, right? |
| 18:05.47 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 18:06.00 | *** mode/#debian [+l 1497] by debhelper |
| 18:06.27 | *** join/#debian qw8029 (~xgb880@64.166.169.130) |
| 18:06.40 | lf94 | zerick: yep |
| 18:06.43 | petemc | zerick: ive updated and tested with env X="() { :;} ; echo busted" /bin/sh -c "echo stuff" , i get "stuff" |
| 18:07.14 | lf94 | yeah that's good |
| 18:08.03 | *** join/#debian ashemta (~ashemta@128.204.214.91) |
| 18:09.14 | lf94 | After this operation, 10.4 MB disk space will be freed. <- nice |
| 18:09.33 | *** join/#debian LtL (~irssi@unaffiliated/ltl) |
| 18:09.38 | antiwire | petemc: if you don't get "busted" you're good |
| 18:09.44 | petemc | yes |
| 18:10.13 | petemc | what? |
| 18:10.14 | petemc | no |
| 18:10.22 | lf94 | ... |
| 18:10.37 | lf94 | you want to get busted? |
| 18:10.40 | petemc | stuff is good |
| 18:10.43 | antiwire | haha |
| 18:10.45 | petemc | oh, yes |
| 18:10.57 | petemc | heh, im not really paying attention |
| 18:11.00 | antiwire | if you see "busted" in your output...the exploit worked |
| 18:11.04 | antiwire | lol |
| 18:11.41 | lf94 | "I want my system to be as open as possible- fit as many exploits as you can into my OS!" |
| 18:13.07 | *** join/#debian Starduster (~quest@unaffiliated/starduster) |
| 18:13.41 | dimitry7 | how do you remotely test if a server is bash vulnerable? |
| 18:13.46 | *** join/#debian cafuego (~cafuego@drupal.org/user/218525/view) |
| 18:13.54 | dimitry7 | let's say through port 80 |
| 18:15.08 | *** join/#debian bbtech (~bbtech@67.139.42.222) |
| 18:15.10 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 18:15.19 | petemc | curl -i -X HEAD "http://site" -A '() { :;}; echo "Warning: Server Vulnerable"' |
| 18:17.42 | *** join/#debian Vanet (~Vanet@2001:41d0:52:cff::331) |
| 18:19.20 | karlpinc | Gotta wonder how audited, say, dash is compared to bash. |
| 18:19.42 | Vanet | Is a new point release for Debian 7 planned anytime soon? |
| 18:19.57 | daemonkeeper | Yes |
| 18:23.04 | *** join/#debian xyan (~xyan@p579D223B.dip0.t-ipconnect.de) |
| 18:23.05 | *** join/#debian decompiled (~decompile@static-50-125-167-6.krld.wa.frontiernet.net) |
| 18:23.06 | *** join/#debian Jinxed- (~DynamicFa@192.160.117.146) |
| 18:24.04 | xyan | hi, just a quick question: how do i disable the clean up of tty1 on boot. i've been using --noclear arg for getty in /etc/inittab but that does not seem to work anymore?! |
| 18:24.40 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 18:25.42 | richac | i connect to freenode with SSL. IMO< rather then throw your hands up in the air and say some layer of security can be easily by passed. Just stack all your layers and add them up, something is better the nothing. |
| 18:27.45 | antiwire | petemc: doesn't the remote test require a processor, like a cgi? |
| 18:27.47 | *** join/#debian Jinxed- (~DynamicFa@192.160.117.146) |
| 18:28.08 | antiwire | so a plan staitc apache server won't be vulnerable remotely |
| 18:28.19 | *** join/#debian Mike9863 (~Mike9863@192.12.88.246) |
| 18:28.21 | petemc | antiwire: i believe so |
| 18:28.33 | antiwire | dhcp is the other conduit I've seen so far |
| 18:28.39 | antiwire | passing nasty options it dhcp |
| 18:29.22 | *** join/#debian tharkun (~0@187.188.94.182) |
| 18:29.33 | *** join/#debian Jinxed- (~DynamicFa@192.160.117.146) |
| 18:29.42 | *** join/#debian regreddit (~regreddit@adsl-98-90-195-12.mob.bellsouth.net) |
| 18:29.42 | *** join/#debian regreddit (~regreddit@unaffiliated/regreddit) |
| 18:29.46 | antiwire | I wonder if making, for example, option66 = shellcode would work |
| 18:29.47 | antiwire | heh |
| 18:30.22 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 18:32.13 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 18:32.50 | *** join/#debian quagliato (~quagliato@177.40.47.121) |
| 18:34.12 | *** join/#debian elliotd123 (~chatzilla@208.73.52.10) |
| 18:34.27 | *** join/#debian |knack| (~loop@41.sub-174-236-129.myvzw.com) |
| 18:34.43 | elliotd123 | we're having this exact issue, but this thread appears to be dead: http://forums.debian.net/viewtopic.php?t=109133 |
| 18:34.48 | jhutchins | antiwire: Here's a discussion of some of the possible vectors: https://access.redhat.com/articles/1200223 |
| 18:35.07 | *** join/#debian mennea (~textual@31.210.187.78) |
| 18:35.09 | elliotd123 | any idea if this is a bug or anything? |
| 18:35.10 | *** join/#debian Jinxed- (~DynamicFa@192.160.117.146) |
| 18:35.33 | antiwire | jhutchins: nice, thank you |
| 18:35.43 | antiwire | my sheeva with on u1 patch was still vulnerable |
| 18:35.47 | antiwire | on/only |
| 18:36.24 | *** join/#debian Jinxed- (~DynamicFa@147.177.234.121) |
| 18:36.47 | jhutchins | antiwire: There was another article I don't seem to have a link to; basically it said "because configuration can vary so much, we can only point out known vulnerabilities, we can not exclude those that may exist in other configurations". |
| 18:37.14 | richac | <PROTECTED> |
| 18:37.25 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 18:37.29 | richac | or even then how do you know what variables are calling bash/ |
| 18:37.37 | antiwire | jhutchins: pretty much, any network accessible service which has access to the shell on "the other side" is suspect |
| 18:37.59 | richac | ya i'm not even worried about the pc, just all the devices |
| 18:38.52 | *** join/#debian netzfisch (~Thunderbi@e176100207.adsl.alicedsl.de) |
| 18:39.38 | richac | on debian /bin/sh is dash not bash right? |
| 18:40.08 | mtn | richac: my default install is bash |
| 18:40.26 | *** join/#debian b_52globe (~b_52globe@105.158.151.180) |
| 18:40.40 | karlpinc | richac: Right. |
| 18:40.47 | richac | ok cool |
| 18:41.06 | *** join/#debian Toaster` (~Toaster@96.127.230.9) |
| 18:41.18 | karlpinc | richac: But there's still a lot of #!/bin/bash people are writing. |
| 18:41.26 | *** join/#debian n0wje (~anthony@mail.bps.k12.nm.us) |
| 18:41.35 | richac | ya and a dash script can call for bash in it somewhere |
| 18:41.53 | abrotman | richac: that's system-dependent .. |
| 18:41.59 | richac | i thnk on redhat /bin/sh is bash right? |
| 18:41.59 | *** join/#debian ambutts (ambutts@185.61.148.240) |
| 18:42.13 | abrotman | richac: anyone can change this, check the systems you care about |
| 18:42.21 | richac | best to use a debian server imo lol |
| 18:42.28 | abrotman | lolololol |
| 18:43.14 | *** join/#debian xyan (~xyan@p579D223B.dip0.t-ipconnect.de) |
| 18:44.17 | *** join/#debian MasterXC|2 (~MasterXC@unaffiliated/masterxc) |
| 18:44.33 | *** join/#debian O00O (~O00O@unaffiliated/zz0) |
| 18:44.56 | richac | i'd like to see zsh as default log in one day |
| 18:45.29 | *** join/#debian Almtesh (~Almtesh@unaffiliated/almtesh) |
| 18:45.42 | jhutchins | richac: chsh zsh |
| 18:46.57 | *** join/#debian MasterXC (~MasterXC@rrcs-24-39-52-226.nys.biz.rr.com) |
| 18:47.05 | *** join/#debian winb (~pi@2001:4663:7fff:0:a00:ff:fe00:babe) |
| 18:47.10 | abrotman | richac: editor /etc/adduser.conf |
| 18:47.43 | richac | cool |
| 18:47.56 | *** join/#debian hellangel7 (~hellangel@117.216.149.115) |
| 18:48.28 | richac | abrotman: tks |
| 18:49.03 | *** join/#debian KTL (~KTL2@213.219.168.18.adsl.dyn.edpnet.net) |
| 18:49.24 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 18:49.35 | *** join/#debian shibboleth (~user@gateway/tor-sasl/shibboleth) |
| 18:49.51 | xyan | if /q |
| 18:50.12 | *** join/#debian netzfisch (~Thunderbi@e176100207.adsl.alicedsl.de) |
| 18:51.10 | *** join/#debian BuFF (~BuFF@94.244.83.182) |
| 18:53.20 | *** join/#debian akajcn (~akajcn@unaffiliated/akajcn) |
| 18:53.46 | antiwire | petemc: http://pastebin.com/raw.php?i=CNYWVyaS |
| 18:54.24 | *** join/#debian comradekingu (~comradeki@109.108.219.28) |
| 18:54.25 | *** join/#debian milford (milford@95.215.44.172) |
| 18:54.33 | *** join/#debian MisterBig195 (~MisterBig@2001:5c0:1400:a::66d) |
| 18:54.35 | *** join/#debian boz1 (~Boz@112.90.237.58) |
| 18:54.42 | antiwire | one sec, I ran the dpkg on the wrong system, |
| 18:55.07 | *** join/#debian xuigenerix (~xuigeneri@187.202.181.88) |
| 18:55.14 | antiwire | either way, you get it |
| 18:55.27 | *** join/#debian tux1986 (~administr@2a02:8204:d600:8080:e03c:fc5e:61a5:4007) |
| 18:55.50 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-145-008.084.059.pools.vodafone-ip.de) |
| 18:57.17 | *** join/#debian snoopybbt (~znupi@93-50-112-244.ip152.fastwebnet.it) |
| 18:58.25 | *** join/#debian akajcn (~akajcn@unaffiliated/akajcn) |
| 19:00.35 | *** join/#debian dArK_IcE (~DARKICEPT@a79-168-155-50.cpe.netcabo.pt) |
| 19:00.51 | *** join/#debian itry (~user@p57A7FB14.dip0.t-ipconnect.de) |
| 19:01.21 | *** join/#debian debsan_ (~debsan@244-79-245-190.fibertel.com.ar) |
| 19:01.55 | *** join/#debian theory_of_nothin (~user@p57A7FB14.dip0.t-ipconnect.de) |
| 19:02.23 | theory_of_nothin | one of my servers has this in apt/sources.list: http://mirror.eu.oneandone.net/debian squeeze |
| 19:02.33 | theory_of_nothin | and its not getting any shellshock updates |
| 19:02.35 | theory_of_nothin | any idea why? |
| 19:03.10 | *** join/#debian joegiampaoli (~joegiampa@189.217.26.104) |
| 19:03.55 | nkuttler | theory_of_nothin: paste.debian.net your actual sources file |
| 19:03.58 | *** join/#debian trueneu (~textual@5.18.183.243) |
| 19:03.59 | nkuttler | !tell theory_of_nothin about squeeze-lts |
| 19:04.41 | *** join/#debian joegiampaoli (~joegiampa@189.217.26.104) |
| 19:04.44 | theory_of_nothin | nkuttler: http://paste.debian.net/123277/ |
| 19:05.05 | *** join/#debian mennea (~textual@31.210.187.78) |
| 19:06.16 | nkuttler | theory_of_nothin: you need to add the lts sources. squeeze has been deprecated for a while |
| 19:06.17 | *** join/#debian joegiampaoli (~joegiampa@189.217.26.104) |
| 19:06.37 | theory_of_nothin | nkuttler: so this machine is not getting any updates at all for some time now? |
| 19:06.44 | nkuttler | theory_of_nothin: right |
| 19:06.47 | theory_of_nothin | nkuttler: woah |
| 19:07.07 | theory_of_nothin | nkuttler: so i will add the line that dpkg send me or will that be the only line? |
| 19:07.36 | theory_of_nothin | what is squeeze? debian 6? |
| 19:07.47 | nkuttler | theory_of_nothin: yes, one line for the lts. consider upgrading to current stable |
| 19:08.14 | nkuttler | theory_of_nothin: yeah, 6 |
| 19:08.17 | theory_of_nothin | nkuttler: add the line or replace the whole file with only that one line? |
| 19:08.32 | nkuttler | add |
| 19:08.57 | theory_of_nothin | and then it will update a million things and probably kill that production server while there are dozens of user using it? |
| 19:09.08 | nkuttler | theory_of_nothin: you tell me |
| 19:09.12 | theory_of_nothin | holy shit |
| 19:09.40 | richac | batman |
| 19:09.42 | theory_of_nothin | so all debian 6 servers just rot away without security updates and become zombies over time? |
| 19:09.43 | *** join/#debian g00gz1 (~Adium@199.244.84.14) |
| 19:09.47 | *** join/#debian Denise_B (~denise@63.66.189.80.dyn.plus.net) |
| 19:09.50 | theory_of_nothin | for how long has this been going on? |
| 19:09.56 | willwh | theory_of_nothin: sounds like you don't know how this works |
| 19:10.00 | nkuttler | theory_of_nothin: since squeeze support has stopped |
| 19:10.00 | willwh | it's pretty well understood |
| 19:10.23 | nkuttler | theory_of_nothin: i mean, you should keep informed about the server os you install |
| 19:10.43 | nkuttler | theory_of_nothin: squeeze support stopped a few months ago. i think before heartbleed.. |
| 19:10.46 | *** join/#debian Mokuba_K (~Hunterkll@2001:470:8b06:3000:9cdd:f680:9ad7:54da) |
| 19:10.47 | *** join/#debian aswen (~aswen@ip54548433.adsl-surfen.hetnet.nl) |
| 19:10.51 | nkuttler | pretty sure it was way before that |
| 19:10.59 | theory_of_nothin | so you guys would add that line, do "apt-get update && apt-gete upgrade" and hope for the best? |
| 19:11.16 | nkuttler | theory_of_nothin: no, i would look at the actual output of those commands |
| 19:11.37 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 19:11.39 | *** join/#debian ndrei_ (~avo@83.142.149.227) |
| 19:11.40 | *** join/#debian macondo (~macondo@190.218.29.109) |
| 19:11.48 | theory_of_nothin | nkuttler: after months of not updating the output will probably be one huge pile of crap... |
| 19:11.59 | willwh | theory_of_nothin: are you a sysadmin? |
| 19:12.00 | nkuttler | theory_of_nothin: just do it |
| 19:12.05 | richac | ya and hopefullyl it still boots up lol |
| 19:12.16 | nkuttler | theory_of_nothin: all this theorizing about possible outcomes is only tiresome |
| 19:12.21 | willwh | This is a scary question: <theory_of_nothin> and then it will update a million things and probably kill that production server while there are dozens of user using it? |
| 19:12.27 | richac | make sure vid drivers are updated |
| 19:12.31 | richac | lol |
| 19:12.39 | willwh | it sounds like you are not qualified to be doing what you're doing... |
| 19:12.43 | *** part/#debian g00gz1 (~Adium@199.244.84.14) |
| 19:13.05 | richac | willwh: i think he knows from experience that doing those things after not updating in a while can break a system |
| 19:13.20 | nkuttler | squeeze-lts is super conservative.. |
| 19:13.34 | richac | ok i'll take nkuttler's word for it |
| 19:13.39 | nkuttler | and only provides fixes for a subset of packages anyway. probably nothing desktop-related |
| 19:13.46 | richac | good deal |
| 19:13.56 | nkuttler | (but i'm just guessing there, i don't have squeeze desktops) |
| 19:13.57 | theory_of_nothin | will "apt-get upgrade" tell me what it wants to do or just start its magic right away? |
| 19:14.01 | *** join/#debian september (~september@92.53.24.225) |
| 19:14.07 | nkuttler | theory_of_nothin: man apt-get, see -u |
| 19:14.30 | karlpinc | theory_of_nothin: The whole point of debian stable is that it does not change, without serious reason like a security problem. The same is true of LTS on oldstable releases. |
| 19:14.36 | *** join/#debian tharkun (~0@unaffiliated/tharkun) |
| 19:14.44 | theory_of_nothin | karlpinc: ok, lets get this shit done... |
| 19:14.46 | richac | so I guess if the kernel is not updating nothing to worry about? |
| 19:15.06 | nkuttler | richac: there's always reason to worry |
| 19:15.11 | richac | lol |
| 19:15.13 | *** join/#debian spacebison (~bison@76.84.205.218) |
| 19:15.29 | *** join/#debian b_52globe (~b_52globe@adsl196-231-28-217-196.adsl196-9.iam.net.ma) |
| 19:15.30 | karlpinc | richac: Well, glibc updates also affect a lot of stuff. I feel more comfortable rebooting on those as well as kernel updates. |
| 19:15.40 | karlpinc | (licb6) |
| 19:15.42 | theory_of_nothin | i did the apt-get update |
| 19:15.45 | nkuttler | right, you might want to reboot if libc has an update |
| 19:15.49 | theory_of_nothin | now what? apt-get upgrade? |
| 19:15.51 | richac | ah |
| 19:15.54 | theory_of_nothin | apt-get -u upgrade? |
| 19:15.54 | nkuttler | theory_of_nothin: yes |
| 19:15.56 | richac | cross your fingers first |
| 19:16.24 | blackjack | theory_of_nothin, thats usualy the first two command you want to do if you want to upgrade your system:) |
| 19:16.31 | theory_of_nothin | blackjack: which? |
| 19:16.35 | karlpinc | richac: It's unlikely he'll have a problem that a lot of other people have not already had, and reported, and had fixed. |
| 19:16.36 | theory_of_nothin | so with the -u or without? |
| 19:16.49 | blackjack | the update then upgrade |
| 19:16.53 | richac | karlpinc: your probably right |
| 19:16.59 | theory_of_nothin | ok.. lets go... |
| 19:17.07 | theory_of_nothin | apt-get upgrade |
| 19:17.14 | *** join/#debian RA3OR (~demon@unaffiliated/ra3or) |
| 19:17.28 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 19:18.08 | theory_of_nothin | oh oh i dont think this looks good |
| 19:18.12 | *** join/#debian nesta (~nesta@ruquz.org) |
| 19:18.16 | nesta | hello all |
| 19:18.27 | nesta | back on wheezy now from testing :-) |
| 19:18.38 | *** join/#debian catpigger (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 19:18.48 | theory_of_nothin | thats what it says: http://paste.debian.net/123278/ |
| 19:18.55 | theory_of_nothin | what do you guys think? |
| 19:19.06 | nesta | just noticed it does not have MATE in the repos... is it generally considered a bad idea to use backports for dektop packages(desktop environments)? |
| 19:19.12 | nkuttler | theory_of_nothin: looks reasonable for a system that hasn't been upgraded in months |
| 19:19.20 | *** join/#debian err404 (~err404@62-210-205-221.rev.poneytelecom.eu) |
| 19:19.33 | theory_of_nothin | nkuttler: you think this will go smoothly? |
| 19:19.49 | nkuttler | theory_of_nothin: i don't have an opinion on that |
| 19:20.03 | *** join/#debian centrx (~centrx@pool-72-74-93-20.bstnma.fios.verizon.net) |
| 19:20.09 | nkuttler | theory_of_nothin: if i were in your position, i'd do the upgrade though |
| 19:20.29 | theory_of_nothin | if it brings the server down and i cannot get it up again - then what? |
| 19:20.34 | theory_of_nothin | install debian 7? |
| 19:20.55 | *** part/#debian lnovy (~lnovy@2002:4d57:f055::1) |
| 19:20.57 | antiwire | lol |
| 19:21.30 | antiwire | theory_of_nothin: what part are you worried about failing? |
| 19:21.51 | theory_of_nothin | antiwire: i have no clue. im just afraid it will kill the server. |
| 19:22.05 | arcke | if its not patched yet, and its a server we might be able to patch it for you right now |
| 19:22.07 | theory_of_nothin | this server is my only income. it has like 10000 users a day. |
| 19:22.21 | antiwire | well, there is a kernel update. outside of a reboot, I don't see a problem |
| 19:22.28 | theory_of_nothin | so when it goes down and i cannot get it up again, then what? |
| 19:22.35 | GNU\colossus | this should be a piece of cake during a walk in the park |
| 19:22.36 | antiwire | it's your server! |
| 19:22.46 | theory_of_nothin | i just want to have a plan B before i do it. |
| 19:22.51 | antiwire | theory_of_nothin: backups? |
| 19:22.53 | arcke | make backups |
| 19:22.56 | catpig | theory_of_nothin, *should* be a walk in the park but better get some redundancy if you rely on that one machine.. |
| 19:22.57 | theory_of_nothin | i have backups |
| 19:23.04 | antiwire | have you hugged them lately? |
| 19:23.06 | catpig | if feasible :/ |
| 19:23.12 | GNU\colossus | I wonder why there's no bash package being upgraded though |
| 19:23.14 | theory_of_nothin | im doing a fresh set of backups now |
| 19:23.22 | antiwire | GNU\colossus: there is |
| 19:23.27 | GNU\colossus | theory_of_nothin, does your hosting provider not have out of band management? |
| 19:23.30 | karlpinc | theory_of_nothin: In the 10+ years I've been using debian upgrading a stable release only caused problems once, and it was minor and fixed in a day. On the other hand, the problems you'll get if your box is compromised are immense. |
| 19:23.35 | antiwire | GNU\colossus: #4 in the list |
| 19:23.37 | nkuttler | theory_of_nothin: if you're worrying about restarting the server, get a second server, test it, switch over to it, and decomission the old one.. |
| 19:23.39 | theory_of_nothin | still im confused. debian 6 is eol already? didnt 7 just came out lately? what do you install on a new server these days? |
| 19:23.42 | GNU\colossus | antiwire, ah. I'm going blind, apparently. |
| 19:23.45 | antiwire | heh |
| 19:23.56 | catpig | theory_of_nothin, debian goes EOL 1 yr (Iirc) after release of the successor |
| 19:23.57 | nkuttler | theory_of_nothin: it's been > 1y |
| 19:24.08 | *** join/#debian diniwed (~gavron@pool-74-108-225-30.nycmny.fios.verizon.net) |
| 19:24.08 | catpig | however, there's an experimental LTS repo |
| 19:24.15 | karlpinc | theory_of_nothin: Debian supports old releases for a year after the new release comes out. (Except there's now long term release support.) |
| 19:24.49 | *** join/#debian Bsims (~Bsims@173-9-235-105-Illinois.hfc.comcastbusiness.net) |
| 19:24.52 | theory_of_nothin | ok, so lets say this server explodes when i do apt-get upgrade. then what? install debian 7? |
| 19:25.06 | karlpinc | theory_of_nothin: The other good news is that debian upgrades. You follow the release notes and can convert an old box to a new major release without headache, usually. |
| 19:25.12 | nkuttler | theory_of_nothin: find a new job? |
| 19:25.19 | catpig | theory_of_nothin, depends on how much time you got. i'd restore the backups |
| 19:25.20 | *** join/#debian hercumer (~kc9eye@c-98-220-155-198.hsd1.in.comcast.net) |
| 19:25.34 | catpig | but now lets see if i got the right grub1 conf for wheezy... brb |
| 19:25.35 | theory_of_nothin | catpig: ah you mean backups of the os? i dont do that. |
| 19:25.40 | karlpinc | theory_of_nothin: If it's that serious, you need a test server to try things out on before you work on the real thing. |
| 19:25.41 | catpig | theory_of_nothin, .... |
| 19:25.49 | catpig | when i said backup i meant full backup, *OBVIOUSLY* |
| 19:25.58 | nkuttler | catpig: is there another kind of backup? |
| 19:26.08 | theory_of_nothin | ok ok, lets put it differently: what do you guy put on a *new* server these days? |
| 19:26.17 | catpig | i put deb7/wheezy on them |
| 19:26.18 | nkuttler | theory_of_nothin: stable |
| 19:26.26 | theory_of_nothin | nkuttler: whats that? debian 7? |
| 19:26.31 | catpig | yep |
| 19:26.33 | karlpinc | theory_of_nothin: Yup. Stable. (is 7) |
| 19:26.33 | catpig | currently |
| 19:26.36 | theory_of_nothin | ok |
| 19:26.51 | catpig | however if youre still running 6 then you should at least add the LTS repo |
| 19:26.58 | *** join/#debian IIT (~IIT@unaffiliated/xtriz) |
| 19:27.05 | theory_of_nothin | so my plan is: a) make fresh backups b) apt-get upgrade c) if it kills the server format and install debian 7. |
| 19:27.13 | karlpinc | theory_of_nothin: You _should_ be fine with lts. |
| 19:27.24 | catpig | but for a system of this importance i'd give two pieces of advise: a) make full backups. b) get redundancy, at least cold manual failover |
| 19:27.26 | karlpinc | theory_of_nothin: Yes, Backup! Always. |
| 19:27.30 | catpig | ok and now wish me luck everyone hehe |
| 19:27.50 | *** join/#debian himikof (~quassel@2a02:578:5002:80f1:96de:80ff:fea1:8486) |
| 19:28.15 | *** join/#debian CyberGabber (~CyberGabb@246-185-ftth.onsbrabantnet.nl) |
| 19:28.23 | karlpinc | catpig: I have had really good experiences with debian at rackspace. Not a subsitute for backups, but good for not having to have another piece of hardware on hand. |
| 19:28.38 | *** join/#debian kibba (~kibba@2a01:e34:ee6e:48b0:b5ac:b91d:de62:2eab) |
| 19:29.01 | antiwire | this is why I love vmware |
| 19:29.06 | theory_of_nothin | i have been running debian servers for hmm... 12 years now. i did not have a single data loss ever. |
| 19:29.18 | antiwire | I take a snapshot before i cause mayhem...if i'm super paranoid, I just export an ova first |
| 19:29.25 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 19:29.26 | *** join/#debian nehaljwani (~nehaljwan@14.139.82.6) |
| 19:29.58 | nehaljwani | I have tried all dist-upgrade, update, install bash, everything, but I still am not able to get rid of the new bash vulnerability :'( |
| 19:30.09 | antiwire | nehaljwani: how are you testing? |
| 19:30.16 | *** join/#debian himikof (~quassel@2a02:578:5002:80f1:96de:80ff:fea1:8486) |
| 19:30.18 | theory_of_nothin | nehaljwani: paste your /etc/apt/sources.list |
| 19:30.24 | nehaljwani | <PROTECTED> |
| 19:30.25 | karlpinc | !tell nehaljwani about lts |
| 19:30.27 | theory_of_nothin | nehaljwani: im here for the same reason |
| 19:30.29 | antiwire | nehaljwani: show us what dpkg -l bash outputs |
| 19:30.54 | *** join/#debian sti_fr (~sti_fr@78.129.50.225) |
| 19:30.59 | nehaljwani | http://fpaste.org/136864/14117598/ |
| 19:31.02 | *** join/#debian guampa (~guampa@gateway/tor-sasl/guampa) |
| 19:31.14 | *** join/#debian bjuanico (~bjuanico@r186-52-179-80.dialup.adsl.anteldata.net.uy) |
| 19:31.36 | antiwire | nehaljwani: you should be good now |
| 19:31.44 | *** join/#debian Mike9863 (~Mike9863@ool-43542cd7.dyn.optonline.net) |
| 19:32.55 | *** join/#debian vsminer (~vsminer@dsl-prvbrasgw1-50dc13-29.dhcp.inet.fi) |
| 19:33.26 | antiwire | nehaljwani: I'm not so certain that test is formed correctly |
| 19:33.33 | nehaljwani | antiwire, theory_of_nothin karlpinc http://fpaste.org/136866/11759990/ |
| 19:33.45 | jhutchins | theory_of_nothin: You should probably add the lts repo and make sure you're up to date with that before you upgrade. |
| 19:34.02 | antiwire | nehaljwani: did you log out and log back inf orst? |
| 19:34.08 | antiwire | the old bash is likely still running |
| 19:34.18 | nehaljwani | antiwire, why the hell would I need to do that. |
| 19:34.24 | *** join/#debian phillw (~phillw@unaffiliated/phillw) |
| 19:34.28 | antiwire | dude, be cool |
| 19:34.31 | nehaljwani | invoking a new shell should suffice |
| 19:34.37 | nehaljwani | shouldn't it? |
| 19:34.46 | *** join/#debian HellTiger_NB (~HellTiger@125-38.196-178.cust.bluewin.ch) |
| 19:34.51 | theory_of_nothin | jhutchins: i added the lts repo and did "apt-get update". now i do backups, then i will do "apt-get upgrade". is that what you mean? |
| 19:35.02 | karlpinc | nehaljwani: Lines 2 and 3 of sources.list are not a good idea. You want to say wheezy instead of "stable". |
| 19:35.21 | *** join/#debian mennea (~textual@31.210.187.78) |
| 19:35.33 | *** join/#debian moha_hunt (~moha@95.91.210.217) |
| 19:35.34 | phillw | hi, is there any time scale to fix the bash bug with wheezy ? |
| 19:35.36 | karlpinc | nehaljwani: Otherwise your system will magiclly upgrade to the next release when it comes out, in an uncontrolled and probably incorrect fashion. |
| 19:35.52 | centrx | phillw, It was already fixed |
| 19:35.53 | karlpinc | phillw: Got fixed a day or so ago. |
| 19:36.16 | *** join/#debian lubyou (lubyou@2001:41d0:8:4c83::a) |
| 19:36.16 | *** join/#debian lubyou (lubyou@unaffiliated/lubyou) |
| 19:36.18 | nehaljwani | karlpinc, changing now and trying again.... |
| 19:36.19 | jhutchins | theory_of_nothin: WEll, yes, that will get you current on squeeze, but /msg dpkg squeeze->wheezy and read the release notes before you go further. |
| 19:36.31 | *** join/#debian Seto_Kaiba (~Hunterkll@2001:470:8b06:2000:8803:94dd:70be:8f9b) |
| 19:36.43 | karlpinc | nehaljwani: Shouldn't affect your bash problem. |
| 19:36.49 | phillw | centrx: so, why does it still report not fixed when tested.. and for a couple of days ago... the latter CVE was fixed over night. |
| 19:36.50 | theory_of_nothin | jhutchins: i have no plans to "go further". whatever that means. |
| 19:36.55 | *** join/#debian waidmann (~ben@2.217.127.209) |
| 19:37.02 | *** part/#debian waidmann (~ben@2.217.127.209) |
| 19:37.14 | *** join/#debian ParaDebian (~Paradisee@2.236.11.40) |
| 19:37.16 | karlpinc | phillw: What is "it"? |
| 19:37.28 | centrx | phillw, How are you testing it? What version of the bash package do you have installed? |
| 19:37.34 | jhutchins | theory_of_nothin: You are still on squeeze. If you want wheezy there is another step. |
| 19:37.44 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 19:37.51 | theory_of_nothin | jhutchins: ok... one day i will go that step. |
| 19:38.01 | *** join/#debian swulf--_ (~guest@183.89.184.66) |
| 19:38.08 | theory_of_nothin | what is a good line to test if bash is unpatched? |
| 19:38.12 | jhutchins | theory_of_nothin: I recommend upgrading now while wheezy is current stable. Support for upgrades falls off rapidly when you're trying to do end-of-life to oldstable. |
| 19:38.31 | *** join/#debian SquirrelCZECH (~squirrel@ip-89-103-45-114.net.upcbroadband.cz) |
| 19:38.43 | *** join/#debian cra1g321 (~craig@97e3b9c0.skybroadband.com) |
| 19:38.45 | jhutchins | theory_of_nothin: There's pretty much no chance of a successful upgrade from lenny at this point, and no support for it. |
| 19:38.48 | *** join/#debian catpigger (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 19:38.57 | phillw | karlpinc: CVE-2014-6271 and then CVE-2014-7169 you did not have a fix for 7179 two days ago, as it was only just being found |
| 19:38.58 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 19:39.01 | theory_of_nothin | jhutchins: lenny? i have no idea what that is? |
| 19:39.18 | nehaljwani | antiwire, how do you test the CVE? |
| 19:39.19 | jhutchins | theory_of_nothin: Debian 5 - two releases ago. |
| 19:39.28 | karlpinc | nehaljwani, theory_of_nothin : You can zless /usr/share/doc/bash/changelog.Debian.gz and see if the CVE is reported fixed. (Although, yes, it's always nice to test.) |
| 19:39.35 | theory_of_nothin | jhutchins: i dont have that i think. |
| 19:39.49 | theory_of_nothin | ok... |
| 19:40.04 | jhutchins | theory_of_nothin: I know, I was just giving an example. You should upgrade to wheezy while wheezy is still stable, before the next release (jessie). |
| 19:40.08 | antiwire | nehaljwani: env X="() { :;} ; echo shellshock vulnerable" `which bash` -c "echo completed" if you see "Shellshock Vulnerable" you might have a problem still. If you only see "completed", you're good |
| 19:40.22 | nehaljwani | I see completed |
| 19:40.28 | nehaljwani | but then why does my test fail |
| 19:40.30 | *** join/#debian SquirrelCZECH (~squirrel@ip-89-103-45-114.net.upcbroadband.cz) |
| 19:40.32 | theory_of_nothin | ok, fuck it.. lets apt-get upgrade... |
| 19:40.35 | antiwire | nehaljwani: because it is malformed |
| 19:40.51 | theory_of_nothin | a man has to do what a man has to do... |
| 19:41.15 | nehaljwani | antiwire, has CVE-2014-7169 been fixed too? |
| 19:41.23 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 19:41.28 | antiwire | nehaljwani: I'm pretty sure that no matter what, your example will echo vuln and still vulnerbale |
| 19:41.31 | antiwire | ;) |
| 19:41.41 | nehaljwani | antiwire, it doesn't, on ubuntu |
| 19:41.44 | karlpinc | phillw: Yes. I see 7179 fixed Thu, 25 Sep 2014 07:23:43 +0200 |
| 19:42.13 | phillw | karlpinc: so... a couple of days ago?... |
| 19:42.21 | nehaljwani | changelog http://fpaste.org/136869/60534141/ |
| 19:42.29 | centrx | phillw, Both were fixed quite quickly in Debian stable |
| 19:42.41 | theory_of_nothin | checkrestart says a billion things are outdated now. so lets reboot. |
| 19:42.48 | theory_of_nothin | guys, im shivering! |
| 19:42.50 | karlpinc | phillw: I think that's when it goes into some sort of testing. But I don't really know, it might be when it's uploaded for final security release. |
| 19:43.13 | phillw | karlpinc: so not fixed in wheezy? |
| 19:43.16 | karlpinc | theory_of_nothin: It might fsck if it's not been booted for a while. |
| 19:43.21 | karlpinc | phillw: Yes, fixed. |
| 19:43.29 | theory_of_nothin | karlpinc: how will i know its doing that? |
| 19:43.42 | karlpinc | I'm looking at the changelog.Debian.gz on my box. |
| 19:43.56 | theory_of_nothin | ITS BACK UP! |
| 19:43.56 | karlpinc | theory_of_nothin: It will take more than 10 seconds to reboot. |
| 19:43.58 | theory_of_nothin | phew :) |
| 19:44.01 | richac | does this command still mean I'm vulnerable? ABCD='() { echo this is abcd; }â bash -c âABCDâ |
| 19:44.17 | *** join/#debian chuz04arley (~chuz04arl@181.193.0.162) |
| 19:44.28 | karlpinc | !next |
| 19:44.29 | dpkg | Another happy customer leaves the building. |
| 19:44.39 | *** join/#debian chuz04arley (~chuz04arl@181.193.0.162) |
| 19:44.46 | theory_of_nothin | bash is fixed |
| 19:44.52 | theory_of_nothin | thank you so much guys! |
| 19:44.58 | karlpinc | theory_of_nothin: REally, you want to regularly install security updates. |
| 19:45.03 | richac | but what about ABCD='() { echo this is abcd; }â bash -c âABCDâ |
| 19:45.24 | theory_of_nothin | karlpinc: i DO "apt-get update && apt-get upgrade" regularely. i didnt expect them to just stop doing anything. |
| 19:45.29 | richac | oh its fixed for me too lol |
| 19:46.02 | richac | yesterday I was getting ABCD out of that, i think maybe i needed to reboot |
| 19:46.35 | karlpinc | theory_of_nothin: Ok. But they do, eventually. Sooner or later support stos. LTS is nice, so that you don't have to upgrade major releases as often. But it's still experimental, so you might seriously consider upgrading and tracking stable for at least another major release cycle. |
| 19:46.54 | karlpinc | richac: You'd need to re-login, or at least run a new bash. |
| 19:47.04 | richac | karlpinc: ya DOH! |
| 19:47.14 | theory_of_nothin | karlpinc: what means "upgrading and tracking stable"? |
| 19:47.23 | *** join/#debian eth0s (~eth0s@ip70-173-44-112.lv.lv.cox.net) |
| 19:47.32 | jhutchins | theory_of_nothin: Yeah, there's more to it than that. Probably wouldn't be too hard to generate "this release is EOL, please see page $foo" to continue updates". |
| 19:47.38 | karlpinc | theory_of_nothin: Upgrading to the next major release within a year of it's release. |
| 19:47.42 | *** join/#debian Jafura (~Jean-Fran@2a02:2788:114:11ce:d98d:3320:14e7:367) |
| 19:48.19 | theory_of_nothin | karlpinc: how would i do that? "apt-get dist-upgrade"? |
| 19:48.26 | *** join/#debian digin4 (~digin4@194.126.136.117) |
| 19:48.31 | karlpinc | theory_of_nothin: A good idea is also to subscribe to the debian announce mailing list. It's very low traffic but will tell you when there's a new release, when the old release is out of support, etc. |
| 19:48.44 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 19:49.05 | karlpinc | theory_of_nothin: You follow the release notes. They are _extensive_ and tend to cover every possiblity. Mostly you don't need to read it all, except when you do. |
| 19:49.18 | jhutchins | theory_of_nothin: As I said before, /msg dpkg squeeze->wheezy for instructions on upgrading to current stable. |
| 19:49.29 | *** join/#debian milosz96 (~milosz@89-67-166-3.dynamic.chello.pl) |
| 19:49.52 | theory_of_nothin | jhutchins: it says apt-get dist-upgrade |
| 19:49.58 | karlpinc | theory_of_nothin: Yes, the dpkg factoid tells you how to do it in a few lines. The release notes tell you how to upgrade in, I dunno, 100 pages. |
| 19:50.33 | karlpinc | theory_of_nothin: To be safe, at least skim the release notes. |
| 19:50.38 | jhutchins | theory_of_nothin: Right, when you're upgrading from one release to another aptitude can get into dependency loops because you're replacing ALL of the packages. apt-get is a little bit more sane about it. |
| 19:50.58 | jhutchins | Release notes were only about 3 pages last I looked... |
| 19:51.04 | milosz96 | hi, i've set up ftp server with vsftp, it works good, but it require login. I mean, when i type my computer ip in web browser it ask me for username and password. How can I disable this? /home/ftp has 777 permissions. My config: http://pastebin.com/YmShMsSs |
| 19:51.12 | theory_of_nothin | well, i would just do "apt-get dist-upgrade" and if it fails i would format the hd and install debian 7 fresh. |
| 19:51.21 | karlpinc | theory_of_nothin: Not exactly right. You have to first apt-get upgrade, then dist-upgrade. |
| 19:51.28 | theory_of_nothin | karlpinc: ok |
| 19:51.54 | jhutchins | milosz96: If you want to enable anonymous ftp you prompt users to enter the user name Anonymous and use their email as a password. |
| 19:51.57 | *** join/#debian bjuanico (~bjuanico@179.26.112.34) |
| 19:51.59 | *** join/#debian ThKo (~ThKo@p4FED584C.dip0.t-ipconnect.de) |
| 19:52.12 | jhutchins | milosz96: If you want to distribute files without users having to log in use a web server instead of ftp. |
| 19:52.14 | theory_of_nothin | i have a couple more servers... let me check what they are on... |
| 19:52.23 | phillw | karlpinc: and the 2nd ask of checking.. OP is happy. Thanks for the help. |
| 19:52.37 | *** join/#debian Bsims (~Bsims@173-9-235-105-Illinois.hfc.comcastbusiness.net) |
| 19:52.59 | jhutchins | !ftp |
| 19:52.59 | dpkg | File Transfer Protocol (FTP) is a method of moving files between systems using TCP/IP. There are three sane kinds of FTP: anonymous, encrypted and unprivileged (non-Unix users). Unencrypted FTP using Unix users will get your box pwn3d as fast as running windows on your firewall machine. Ask me about <ftp must die>, <scp>, <sftp>. See also <ftpd>. |
| 19:53.40 | *** join/#debian ompaul (~ompaul@unaffiliated/ompaul) |
| 19:53.46 | *** join/#debian Bsims (~Bsims@173-9-235-105-Illinois.hfc.comcastbusiness.net) |
| 19:54.05 | jhutchins | !botsnack |
| 19:54.05 | dpkg | :), jhutchins |
| 19:54.06 | theory_of_nothin | how do i find out which distro a server is running? |
| 19:54.29 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 19:54.45 | ompaul | theory_of_nothin: when you log in typically there is an motd |
| 19:54.45 | jhutchins | theory_of_nothin: lsb_release -a or cat /etc/debian_version |
| 19:55.01 | ompaul | theory_of_nothin: if debian then that which jhutchins said |
| 19:55.03 | theory_of_nothin | ok |
| 19:55.36 | jhutchins | theory_of_nothin: uname -a may also give you a clue. |
| 19:55.49 | richac | nmap -O lol |
| 19:55.50 | ompaul | clues do not add up to the same thing as knowing :) |
| 19:55.52 | *** join/#debian kookiemonster (~kookiemon@bob75-h01-31-33-63-93.dsl.sta.abo.bbox.fr) |
| 19:56.08 | *** part/#debian phillw (~phillw@unaffiliated/phillw) |
| 19:56.24 | jhutchins | theory_of_nothin: Yeah, I was thinking release not distro. /etc/apt/sources.list if a debian-derived distro should show the native servers. |
| 19:56.24 | ompaul | richac: that's not going to result in accuracy in all events - none of these is as good as asking the person who manages it |
| 19:56.33 | richac | true |
| 19:56.49 | *** join/#debian troete (~troete@osbk-4db16c92.pool.mediaWays.net) |
| 19:57.34 | milosz96 | jhutchins: i want to have something like this. Its ftp and you can download without any login: ftp://ftp.tpnet.pl/pub/linux/linuxmint/packages/ |
| 19:57.57 | *** join/#debian tekkbuzz (~oijvlj@cpe-67-240-151-83.rochester.res.rr.com) |
| 19:58.12 | ompaul | milosz96: all the debian mirrors do that also |
| 19:58.14 | karlpinc | jhutchins: Just looked at http://anonscm.debian.org/viewvc/ddp/manuals/trunk/release-notes/en/. There's at least 3,500 lines of release-related notes. |
| 19:58.33 | ompaul | they would because at some level mint is based on but not because it is different to debian |
| 19:58.40 | karlpinc | (A whole lot of it on the order of "Make a backup before you start!") |
| 19:59.03 | ompaul | karlpinc: file a bug if you feel it is necessary :) |
| 19:59.07 | *** join/#debian mosupp (~Thunderbi@62.217.45.26) |
| 19:59.23 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 19:59.33 | jhutchins | karlpinc: Maybe they updated it? <grin> |
| 19:59.52 | theory_of_nothin | when you intall debian 7 these days, how long will it get updates? |
| 19:59.57 | jhutchins | karlpinc: Or maybe I scanned it and only parsed 3 pages. |
| 20:00.11 | milosz96 | ompaul: i want to have something like this on my own ftp server, which is set up on vsftp |
| 20:00.12 | ompaul | theory_of_nothin: until the next release+1 years |
| 20:00.20 | *** part/#debian mosupp (~Thunderbi@62.217.45.26) |
| 20:00.23 | *** join/#debian iri (5492e55c@gateway/web/freenode/ip.84.146.229.92) |
| 20:00.26 | jhutchins | theory_of_nothin: 1 year after the next relese, which is not scheduled but when it's ready. |
| 20:00.29 | *** join/#debian smonchi (~smonc-h-i@gateway/tor-sasl/smonchi) |
| 20:00.31 | *** join/#debian trix`G (uid29989@gateway/web/irccloud.com/x-zarcyxrayjpuermf) |
| 20:00.38 | *** join/#debian sigterm (~sigterm@unaffiliated/sigterm) |
| 20:00.44 | ompaul | milosz96: go search for mirror debian |
| 20:00.57 | ompaul | it will show you how to do that |
| 20:00.57 | *** join/#debian Haswell (~Haswell@unaffiliated/haswell) |
| 20:01.26 | jhutchins | theory_of_nothin: I believe the current extimate is for a freeze in November and a release first quarter 2015 (but I don't keep up on that). |
| 20:01.40 | theory_of_nothin | ompaul, jhutchins: interesting. i would think a number like "5 years" or "10 years" would be better. |
| 20:01.50 | *** join/#debian ioudas (~gregc2@66.186.175.48) |
| 20:01.51 | karlpinc | milosz96: That's simple anonymous ftp. (Although you should seriously consdier abandoning ftp. It's a painful mess to firewall. These days there's little reason for it since http is so prevalent.) |
| 20:02.03 | ompaul | theory_of_nothin: you might think that |
| 20:02.07 | centrx | theory_of_nothin, in practice it is more with the NEW LTS |
| 20:02.08 | centrx | woops |
| 20:02.09 | karlpinc | theory_of_nothin: That's what LTS support is supposed to be all about. |
| 20:02.22 | jhutchins | An ftp server is a GREAT way to discover what new linux exploits are available! |
| 20:02.26 | centrx | theory_of_nothin, squeeze is getting 5 years of support i386 and AMD64 |
| 20:02.30 | *** join/#debian skumfillipin (~pi@p5496751F.dip0.t-ipconnect.de) |
| 20:02.48 | centrx | theory_of_nothin, so that may continue with future releases as well |
| 20:02.51 | karlpinc | centrx: 5 years _extra_, right? |
| 20:02.51 | milosz96 | karlpinc: yeah it's anonymous ftp, but my anonymous ftp still require username and password, which is weird. My config: http://pastebin.com/YmShMsSs |
| 20:02.59 | centrx | !squeeze-lts |
| 20:02.59 | dpkg | Volunteer-provided security support for Debian 6.0 "Squeeze" will continue until 2016-02-06 for a limited set of packages for i386 and amd64. An appropriate line for your sources.list is «deb http://http.debian.net/debian/ squeeze-lts main». See also the «check-support-status» command from the debian-security-support package and https://wiki.debian.org/LTS for more information. #debian-lts on irc.oftc.net. |
| 20:03.07 | ompaul | theory_of_nothin: you can pay for that |
| 20:03.09 | centrx | karlpinc, frome release |
| 20:03.16 | jhutchins | milosz96: That's just how ftp works. |
| 20:03.36 | centrx | theory_of_nothin, also another aspect is Debian is relatively stable and easier to upgrade than other distros |
| 20:03.38 | jhutchins | milosz96: It's an archaic system, and nobody updates it because you should use something else. |
| 20:03.49 | karlpinc | milosz96: Yup. No getting out of username/password prompting with ftp, although web brwosers do this for you automatically and you don't see it if accessing a ftp:// url. |
| 20:03.58 | *** join/#debian mns` (c910ed04@gateway/web/freenode/ip.201.16.237.4) |
| 20:04.11 | karlpinc | (from a browser) |
| 20:04.15 | theory_of_nothin | whats a good way to see how many http connections are currently open? |
| 20:04.22 | centrx | netstat -a |
| 20:04.23 | milosz96 | karlpinc: even in browser it require password :C |
| 20:04.31 | karlpinc | theory_of_nothin: netstat -t |
| 20:04.37 | jhutchins | milosz96: Besides, if you want URLs like that, just use a web server and http instead of ftp. |
| 20:04.39 | *** part/#debian hercumer (~kc9eye@c-98-220-155-198.hsd1.in.comcast.net) |
| 20:04.40 | centrx | theory_of_nothin, lsof has all files including ports |
| 20:05.06 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 20:05.08 | *** join/#debian mechanicalduck_ (~mechanica@37-1-162-187.ip.skylogicnet.com) |
| 20:05.11 | karlpinc | theory_of_nothin: But netstat is old tech, replaced by the "ip" command. I always forget the details, but if you're just learning you might want to use "ip" instead. |
| 20:05.26 | centrx | theory_of_nothin, I take that back a little, it shows apps that are connected by TCP, which would include daemons with ports open |
| 20:05.29 | jhutchins | milosz96: That server will actually prompt you for username and password if you use an ftp client. |
| 20:05.29 | *** join/#debian mennea (~textual@31.210.187.78) |
| 20:05.50 | theory_of_nothin | karlpinc: "netstat -tn | wc" ? |
| 20:06.04 | karlpinc | theory_of_nothin: No, You need to filter on port as well. |
| 20:06.14 | milosz96 | jhutchins: but it also prompt for password and username when I go ftp://ipofftpserver |
| 20:06.29 | skumfillipin | Hey guys, why doesn't the parted command print any file system information on my drive? http://pastebin.com/G06EgAWg |
| 20:06.41 | theory_of_nothin | karlpinc: i looke at the output. its all 80 except 3. |
| 20:06.49 | theory_of_nothin | 60 connects on port 80. |
| 20:06.51 | *** join/#debian bariumbitmap (~nbeaver@dh187.ls.iit.edu) |
| 20:06.59 | jhutchins | milosz96: That's right, because you're running an ftp server and ftp.tpnet.pl is running a web server. |
| 20:07.03 | theory_of_nothin | hmm.. thats close to the limit of 100 that is in httpd.conf |
| 20:07.08 | *** join/#debian g00gz (~Adium@199.244.84.14) |
| 20:07.09 | theory_of_nothin | 73 |
| 20:07.19 | *** join/#debian DrTaft (~DrTaft@2a01:1e8:e100:82ee:208:54ff:fe56:a419) |
| 20:07.27 | milosz96 | jhutchins: even if i login from lan? |
| 20:07.33 | theory_of_nothin | maybe thats the reason i sometimes see "connection lost" in my browser when i go to my website? |
| 20:07.41 | theory_of_nothin | 86 now. hmm... |
| 20:07.42 | jhutchins | milosz96: Right. |
| 20:08.01 | karlpinc | theory_of_nothin: Well, netstat would include tcp sessions in the fin-wait state. Those are closed, but waiting to be released for technical reasons. |
| 20:08.09 | theory_of_nothin | karlpinc: oh |
| 20:08.33 | richac | is it just me or does lsof -i not show as much as netstat? |
| 20:08.39 | karlpinc | theory_of_nothin: I'd pipe through a bunch of grep to get it to tell you just what you want. |
| 20:08.50 | antiwire | So, the way I understand this bash issue so far is that it does not affect a cgi server using php or perl, only bash cgi's? |
| 20:09.02 | magnulu | I am planning to do backups from my windows 8 computer via rsync running from a debian vm - are there anything I should think about, regarding permissions etc? my initial thought is to do a 'rsync -avz ....' what do you think? |
| 20:09.02 | richac | its probably just my imagination |
| 20:09.16 | karlpinc | antiwire: As far as web servers go, yes. There's other problems for other servers. |
| 20:09.16 | theory_of_nothin | karlpinc: i see a bunch of "TIME_WAIT", some "ESTABLISHED" and a fre "FIN_WAIT" |
| 20:09.24 | magnulu | oh, the backup will go to my wheezy home server.. |
| 20:09.25 | antiwire | karlpinc: yeah, like dhcpc's |
| 20:09.26 | *** join/#debian EntropyArchive (~Thunderbi@198.86.76.161) |
| 20:10.14 | jhutchins | magnulu: I'm not sure that preserves ntfs properties correctly, and W8 uses a different filesystem that's not straight ntfs. |
| 20:10.25 | antiwire | karlpinc: alos, if the webserver is configured correctly, the shell will only run a nobody, right? It can write to places like /tmp but not /, correct? |
| 20:10.32 | jhutchins | magnulu: I know there are some ntfs specific utilities you can use, but again, W8 is different. |
| 20:10.44 | magnulu | jhutchins: hmm... thanks for pointing that out |
| 20:10.52 | jhutchins | magnulu: You'll need to find someone who knows about the differences for it. |
| 20:11.02 | magnulu | jhutchins: absolutely! |
| 20:11.12 | karlpinc | theory_of_nothin: ESTABLISHED are being used. FIN_WAIT are closing (contracry to what I said before) TIME_WAIT are closed, but can't be reused yet. TIME_WAIT don't count toward your apache limit. |
| 20:11.20 | *** join/#debian hellangel7 (~hellangel@117.192.166.133) |
| 20:11.22 | dimitry7 | is it secure to browse the internet with a non-patch PC (from the shellshock bug) from a Internal network which is protected with a firewall? |
| 20:11.27 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 20:11.28 | theory_of_nothin | karlpinc: ok. nice. thanks. |
| 20:12.17 | jhutchins | dimitry7: If you try you will contribute to the state of current knowledge. |
| 20:12.20 | karlpinc | dimitry7: Generally yes, sorta. If your machine is not available for connections from the outside world then it can't be remotely expolited. |
| 20:12.30 | theory_of_nothin | karlpinc: probably i should up that apache limit. the server never seems to be under much stress, but it sometimes drops connections. it drops about 1 in 5000 requests. |
| 20:12.40 | jhutchins | dimitry7: They know what some of the known vulnerabilities are, but there are a lot of other possibilities that aren't known yet. |
| 20:12.45 | karlpinc | dimitry7: But there's no reason why you should not fix the problem. |
| 20:12.48 | arcke | dimitry7: it depends on your network configuration and the vulnerability of devices on it |
| 20:12.56 | jhutchins | dimitry7: For a client system, there shouldn't be much risk, but why not patch it? |
| 20:13.09 | karlpinc | theory_of_nothin: If you've no resource problems then hey, good plan. |
| 20:13.13 | arcke | dhcp is vulnerable |
| 20:13.21 | theory_of_nothin | karlpinc: ok |
| 20:13.38 | arcke | routing devices might carry a worm exploit |
| 20:13.41 | antiwire | well, any network service which has access to the shell could potentially have an issue. |
| 20:13.51 | *** join/#debian abchirk (~abchirk@p57A0BF93.dip0.t-ipconnect.de) |
| 20:13.52 | *** join/#debian milosz96 (~milosz@89-67-166-3.dynamic.chello.pl) |
| 20:14.04 | dimitry7 | jhutchins, okay, perfect, well, we have been trying to update this machine with ubuntu, but it refuses... |
| 20:14.16 | *** join/#debian fusmu (~fusmu@77.70.80.16) |
| 20:14.19 | dimitry7 | karlpinc, okay, thank you! I guessed so too |
| 20:14.24 | karlpinc | dimitry7: For that you'd have to talk with #ubuntu. |
| 20:14.26 | *** join/#debian Known_problems (~Known_pro@179-199-153-250.user.veloxzone.com.br) |
| 20:14.32 | dimitry7 | karlpinc, yup |
| 20:15.03 | dimitry7 | arcke, yes, it's safe for now, but yes. Updating is the best. |
| 20:15.15 | *** join/#debian posterdati300 (~KVIrc@host177-229-dynamic.7-87-r.retail.telecomitalia.it) |
| 20:15.19 | posterdati300 | hi |
| 20:15.45 | posterdati300 | please I've got problem using gatttool with a ble device on wheezy |
| 20:15.57 | dimitry7 | jhutchins, is IPtables exploitable with that bug? |
| 20:16.34 | *** join/#debian chreuben (~chreuben@173.192.170.71-static.reverse.softlayer.com) |
| 20:16.37 | posterdati300 | I've got "A valid handle is required" when I try to write to an handle |
| 20:17.26 | *** join/#debian yeticry (~yeticry@60.168.91.29) |
| 20:17.28 | posterdati300 | the handle actually works for android and iOS devices |
| 20:17.40 | arcke | dimitry7: probably not |
| 20:17.42 | posterdati300 | at least they can write into it |
| 20:17.52 | arcke | many use it to mitigate the bug |
| 20:18.29 | *** join/#debian slvmchn (~slv@209-6-93-101.c3-0.smr-ubr1.sbo-smr.ma.cable.rcn.com) |
| 20:18.40 | *** join/#debian |xk05| (~xk05@70.176-62-69.ftth.swbr.surewest.net) |
| 20:18.46 | *** join/#debian linuxlite1969 (~linuxlite@190.111.231.59) |
| 20:19.04 | karlpinc | posterdati300: I've no clue, but you could check bugs.debian.org to see if there's anything there. |
| 20:19.04 | antiwire | on a vulnerable system, this works well if the test.cgi is a bash script: |
| 20:19.06 | antiwire | curl -i -X HEAD "http://SERVERHERE/test.cgi" -A ls'() { :;}; /usr/bin/touch /tmp/TESTFILE1' |
| 20:19.17 | linuxlite1969 | linux lite 1.8 update Bash 100% |
| 20:20.29 | antiwire | So, as far as I can tell, you might be able to jack with some things but my web server is only running as nobody |
| 20:20.43 | antiwire | so I can muck in /tmp but I can't write to /usr/lib/cgi-bin/ |
| 20:22.23 | *** join/#debian pankid (~pan@173-162-51-174-michigan.hfc.comcastbusiness.net) |
| 20:23.54 | *** join/#debian vsminer (~vsminer@dsl-prvbrasgw1-50dc13-29.dhcp.inet.fi) |
| 20:25.29 | *** part/#debian bcr (alpha@unaffiliated/bashx) |
| 20:25.47 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 20:26.16 | *** join/#debian mase76 (~mase@ip-109-46-40-196.web.vodafone.de) |
| 20:26.55 | Eduard_Munteanu | I want to install packages along with their recursive dependencies to a prefix. debootstrap can't do it because it pulls in essentials too. Any better way than using wajig to get the packages then dpkg to install? |
| 20:27.21 | *** join/#debian subleq (~gavin@208.186.142.130) |
| 20:27.57 | Eduard_Munteanu | (wajig has that recurse command) |
| 20:28.41 | *** join/#debian enkrypt (~enkrypt@d51A48B68.access.telenet.be) |
| 20:29.11 | *** join/#debian deathleff (~duke@ip-84-119-104-177.unity-media.net) |
| 20:30.23 | *** join/#debian Finkelmann (~monkey@p54876032.dip0.t-ipconnect.de) |
| 20:30.36 | skumfillipin | Hey guys. I need some support mounting a efi-partition. Following http://www.pjc.me.uk/efi-gpt/ gets me the output http://pastebin.com/G06EgAWg |
| 20:30.57 | *** join/#debian Abu-Ahmad22 (~mr-seif@188.50.36.168) |
| 20:32.00 | *** join/#debian p0g0 (~pogo@unaffiliated/p0g0) |
| 20:34.16 | *** join/#debian McMAGIC--Copy (~McMAGIC--@gateway/tor-sasl/mcmagic--copy) |
| 20:35.04 | *** join/#debian rnaveiras (~rnaveiras@host86-173-215-15.range86-173.btcentralplus.com) |
| 20:35.15 | *** join/#debian mennea (~textual@31.210.187.78) |
| 20:35.24 | *** join/#debian linuxuz3r (~linuxuz3r@2602:306:bd2a:a160:c9f1:107c:ee07:af97) |
| 20:36.35 | *** join/#debian aPices (~aPices@73.166.58.36) |
| 20:36.45 | *** join/#debian dodgems (~dodgems@unaffiliated/dodgems) |
| 20:37.49 | *** join/#debian n-st (~n-st@ipbcc053ce.dynamic.kabel-deutschland.de) |
| 20:38.41 | *** join/#debian Big-Blue (~seriousgu@unaffiliated/big-blue) |
| 20:39.23 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 20:39.34 | *** join/#debian scrud (~scrud@unaffiliated/scrud) |
| 20:39.37 | *** join/#debian calisto1 (~calisto@179.26.198.99) |
| 20:39.38 | *** join/#debian D-Boy (~D-Boy@unaffiliated/cain) |
| 20:40.22 | *** join/#debian Nili (~co.lua@unaffiliated/crunchernil) |
| 20:41.03 | *** join/#debian rnaveiras (~rnaveiras@host86-173-215-15.range86-173.btcentralplus.com) |
| 20:41.29 | *** part/#debian njs (~njs@roberts.vorpus.org) |
| 20:43.09 | *** join/#debian Zzeiss (~wsy@108.121.156.247) |
| 20:43.42 | catpig | skumfillipin, where's the issue? |
| 20:44.19 | *** join/#debian Zzeiss (~wsy@108.121.156.247) |
| 20:44.51 | *** join/#debian jas4711 (~jas@2001:16d8:cca1:0:f507:501:9ca7:d0f) |
| 20:45.05 | *** join/#debian shinnya (~shinnya@13.73.236.133.dy.bbexcite.jp) |
| 20:45.23 | *** join/#debian DynamicFail (~DynamicFa@147.177.234.121) |
| 20:45.43 | *** part/#debian s-hell (~quassel@camazotz.pcspinnt.de) |
| 20:45.49 | *** join/#debian GJdan (~dan@d154-20-234-134.bchsia.telus.net) |
| 20:49.17 | *** join/#debian heraclitus (~phobos@unaffiliated/heraclitis) |
| 20:49.44 | *** join/#debian |knack| (~loop@41.sub-174-236-129.myvzw.com) |
| 20:54.32 | ivanshmakov | antiwire: Iâd say that it will work if /either/ test.cgi is a Bash script itself or if it happens to /call/ one.â(Or if it for some reason invokes Bash directly, for that matter.) |
| 20:55.07 | *** part/#debian CyberGabber (~CyberGabb@246-185-ftth.onsbrabantnet.nl) |
| 20:55.19 | *** join/#debian z0k (~thez0k@pa3-84-90-1-87.netvisao.pt) |
| 20:55.32 | ivanshmakov | antiwire: Moreover, while it wonât be able to write to /usr/lib/cgi-bin (most probably, anyway), it may depend on the exact configuration if it will be able to write to, say, /var/log/apache2. |
| 20:55.46 | *** join/#debian syko (~Az@59.103.192.20) |
| 20:55.47 | syko | How can I edit a file inside a .deb file? I tried some editors but when I am save it, it's successful but when I open the file up again, it's unedited. How can I fix this? |
| 20:56.12 | *** join/#debian Percy- (~percY@97-93-115-59.static.mtpk.ca.charter.com) |
| 20:56.45 | ompaul | syko: you mean how do you make a package |
| 20:57.02 | syko | a .deb installation package |
| 20:57.04 | syko | yes |
| 20:57.17 | ompaul | https://wiki.debian.org/HowToPackageForDebian |
| 20:57.28 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-145-008.084.059.pools.vodafone-ip.de) |
| 20:57.28 | centrx | syko, a .deb files is an archive, so you want to edit the extracted files and rebuild the package with dpkg-buildpackage (docs someone on the webs) |
| 20:58.08 | *** join/#debian systmkor3 (~systmkor@unaffiliated/systmkor) |
| 20:58.33 | *** part/#debian asher1 (~user@unaffiliated/asher1) |
| 20:59.40 | syko | If I extract the files and folder of a .deb file, and then edit the contents of some files of the extracted .deb file, how do I fix it back together |
| 20:59.48 | syko | or build the .deb package? |
| 21:00.08 | *** join/#debian Jdbye|Tabtop (~jdbye@ti0010a400-0181.bb.online.no) |
| 21:00.09 | ompaul | you must build a .deb |
| 21:00.19 | *** join/#debian jargon (~jargon@unaffiliated/jargon-) |
| 21:00.38 | ompaul | you have to create the archive :) |
| 21:01.34 | centrx | syko, it's one common command to build a deb from its source, when you don't make any changes to it |
| 21:01.44 | centrx | syko, So if your changes don't interfere with that, it should be straightforward |
| 21:02.40 | *** join/#debian Hans-Martin (~ignore@i577BC401.versanet.de) |
| 21:03.59 | *** join/#debian ruukasu (~ruukasu@unaffiliated/ruukasu) |
| 21:05.05 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 21:05.08 | *** join/#debian bakaneko (~d@kuzh.polytechnique.fr) |
| 21:05.17 | *** join/#debian mennea (~textual@31.210.187.78) |
| 21:06.01 | *** mode/#debian [+l 1490] by debhelper |
| 21:06.05 | *** join/#debian ndrei_ (~avo@83.142.149.227) |
| 21:06.05 | *** join/#debian cadeskywalker (~madoka@APuteaux-655-1-171-7.w82-124.abo.wanadoo.fr) |
| 21:06.45 | *** join/#debian tekkbuzz (~oijvlj@cpe-67-240-151-83.rochester.res.rr.com) |
| 21:07.01 | syko | Suppose I have the files DEBIAN and usr in a folder which are clearly the files of some extracted .deb file; How do I make these two files .deb again? like how do I package this up into a .deb again? |
| 21:07.26 | *** join/#debian croddy (~croddy@75-144-232-233-Atlanta.hfc.comcastbusiness.net) |
| 21:07.42 | *** join/#debian Streusel (~Anonymous@unaffiliated/streusel) |
| 21:07.50 | syko | oops, DEBIAN and usr are folders |
| 21:07.51 | syko | not files |
| 21:07.53 | ompaul | syko: did you not read the link I gave you earlier |
| 21:08.04 | ompaul | https://wiki.debian.org/HowToPackageForDebian |
| 21:08.06 | ompaul | that one ? |
| 21:08.07 | syko | ompaul; no time for links, i just need the command |
| 21:08.21 | ompaul | it's not a command it is a process have fun |
| 21:08.28 | syko | what the fuck paul |
| 21:08.33 | syko | help me out |
| 21:08.39 | *** join/#debian MrAlexanB (~MrAlexand@43.232.251.212.customer.cdi.no) |
| 21:08.48 | syko | look, paul. I have never done anything wrong to you, or ever stolen anything away from you. |
| 21:08.53 | syko | You're my dear debian brother. |
| 21:09.04 | syko | In here, we're all soulmates binded together by the word 'debian' |
| 21:09.17 | ompaul | except you want me to read the instruction book for you and ask me for my time to ask you the questions that you could answer yoursellf |
| 21:09.26 | ompaul | you'd have it done already if you had followed the instructions |
| 21:09.27 | syko | fuck off paul |
| 21:09.29 | syko | you slimy bastard |
| 21:09.38 | *** join/#debian bjelleklang (~chris@wikipedia/Bjelleklang) |
| 21:09.40 | *** join/#debian Jinxed- (~DynamicFa@192.160.117.146) |
| 21:09.44 | ompaul | !volunteers |
| 21:09.45 | dpkg | Volunteers are people who do things for you for free. All the helpers on #debian are volunteers. Please treat them with respect and don't expect them to follow your orders. Insulting them or the things that they have worked hard to create is not a good way of getting help. |
| 21:10.13 | RayzrShrp | wow did that just happen |
| 21:10.22 | shay_shay_ | does anyone know if the netinstall it's possible to drop to a terminal and manually partition? |
| 21:10.40 | ompaul | read the nick syco how you spell physco |
| 21:10.47 | centrx | shay_shay_, Alt-F2, or maybe it's Ctrl-Alt-F2 |
| 21:10.50 | ompaul | now then happy troll day and it not even sunday |
| 21:11.28 | RayzrShrp | anybody ever setup awstats under debian using the debian package |
| 21:12.58 | *** join/#debian swatti (x@5400E084.dsl.pool.telekom.hu) |
| 21:13.12 | *** join/#debian Tuls (~Tuls@APoitiers-257-1-18-150.w90-38.abo.wanadoo.fr) |
| 21:13.27 | ompaul | RayzrShrp: I don;t know how up to date this is http://www.debianhelp.co.uk/awstats.htm |
| 21:13.32 | *** join/#debian si (~si@94.197.121.147.threembb.co.uk) |
| 21:13.32 | *** join/#debian si (~si@unaffiliated/siofwolves) |
| 21:13.39 | ompaul | ,v awstats |
| 21:13.40 | judd | Package: awstats on i386 -- squeeze: 6.9.5~dfsg-5; wheezy: 7.0~dfsg-7; sid: 7.2+dfsg-1; jessie: 7.2+dfsg-1 |
| 21:13.49 | ompaul | it is a bit old |
| 21:13.52 | *** join/#debian aPices (~aPices@73.166.58.36) |
| 21:14.06 | RayzrShrp | hmmm any other suggestions for a solid apache log parser thats free? |
| 21:14.46 | ompaul | if you installed it in /usr/share/docs you might find some interesting docs |
| 21:14.55 | *** join/#debian smaug9 (~Jeff_Ward@cpe-67-249-184-11.twcny.res.rr.com) |
| 21:15.10 | *** join/#debian Tom01_ (~tom@p5DDFF4AB.dip0.t-ipconnect.de) |
| 21:15.17 | RayzrShrp | i had it installed years ago on a slackware box but i didnt know what i was doing and managed to get rooted |
| 21:15.21 | *** join/#debian kristian-aalborg (~kristian-@0170201069.0.fullrate.dk) |
| 21:15.23 | kristian-aalborg | cheers! |
| 21:15.25 | RayzrShrp | it was only a hobby box but still |
| 21:15.56 | RayzrShrp | my logwatch shows my apache logs being probed a lot so im curious what the hell is going on |
| 21:16.00 | *** mode/#debian [+l 1496] by debhelper |
| 21:16.02 | ompaul | RayzrShrp: as I said read the docs they might incite you to do something smart |
| 21:16.27 | ompaul | RayzrShrp: well everyone is trying to find various exploits for bash and other standard stuff - other than that |
| 21:16.27 | RayzrShrp | ompaul: yeah ill take a look |
| 21:16.30 | ompaul | not a lot |
| 21:16.49 | Bsims | RayzrShrp: lots of bash exploits out now |
| 21:16.49 | ompaul | RayzrShrp: better not to add lots of stuff you don't need |
| 21:16.52 | RayzrShrp | its weird it like being probed for wallpapers and stuff |
| 21:17.03 | *** join/#debian zulu909 (~root@94-137-121-39.customers.ownit.se) |
| 21:17.10 | ompaul | RayzrShrp: na windows probes and all sorts of other stuff |
| 21:17.14 | RayzrShrp | and the ip is google but not sure if thats spoofed |
| 21:17.37 | kristian-aalborg | on wheezy (7.6), uname -a gives: Linux cthulhu 3.9-0.bpo.1-486 #1 Debian 3.9.6-1~bpo70+1 i686 GNU/Linux |
| 21:17.49 | kristian-aalborg | I'm having trouble updating Dropbox |
| 21:18.00 | ompaul | ,kernels |
| 21:18.02 | judd | Available kernel versions are: experimental: 3.17-rc5-686-pae (3.17~rc5-1~exp1); sid: 3.16-2-686-pae (3.16.3-2); jessie: 3.14-2-686-pae (3.14.15-2); wheezy-backports: 3.14-0.bpo.2-686-pae (3.14.15-2~bpo70+1); wheezy: 3.2.0-4-686-pae (3.2.60-1+deb7u3); squeeze-backports: 3.2.0-0.bpo.4-686-pae (3.2.57-3+deb7u2~bpo60+1); squeeze: 2.6.32-5-686 (2.6.32-48squeeze6) |
| 21:18.26 | *** join/#debian systmkor4 (~systmkor@unaffiliated/systmkor) |
| 21:18.31 | ompaul | kristian-aalborg: is it a vps? |
| 21:20.22 | kristian-aalborg | no, it's a headless box |
| 21:21.10 | *** join/#debian Tom123 (~DynamicFa@147.177.234.121) |
| 21:21.12 | ompaul | kristian-aalborg: you might consider d-uing it first |
| 21:21.24 | ompaul | so you can work from the latest upgraded box |
| 21:21.38 | ompaul | you have a bpo kernel from the middle of last year |
| 21:21.51 | kristian-aalborg | d-uing? |
| 21:21.56 | kristian-aalborg | distro upgrading |
| 21:21.57 | ompaul | dist-upgrade |
| 21:22.01 | ompaul | not distro |
| 21:22.03 | kristian-aalborg | hmm yes |
| 21:22.13 | ompaul | and get the latest patches for everything |
| 21:22.25 | kristian-aalborg | I considered that, of course... but I have some important stuff on this machine |
| 21:22.26 | *** join/#debian FreeRaider (~realname@95.233.24.150) |
| 21:22.35 | ompaul | then check if your problem has gone away |
| 21:22.50 | ompaul | kristian-aalborg: we can't remember the state of play from a kernel a year ago |
| 21:22.58 | ompaul | even a bpo one |
| 21:23.01 | *** join/#debian RaphaelT (~RaphaelT@mx.raphaelt.fr) |
| 21:23.01 | *** join/#debian dutchfish (~wil@unaffiliated/dutchfish) |
| 21:23.01 | kristian-aalborg | that's understandable |
| 21:23.09 | kristian-aalborg | I actually thought it was much newer |
| 21:23.10 | ompaul | and your bash is not safe :) |
| 21:23.17 | ompaul | na that's 2013 |
| 21:23.28 | ompaul | at a guess if you didn't keep that going |
| 21:23.29 | kristian-aalborg | wheezy is dead? |
| 21:23.37 | ompaul | kristian-aalborg: na - go search for shellshock |
| 21:23.43 | *** join/#debian vsminer (~vsminer@dsl-prvbrasgw1-50dc13-29.dhcp.inet.fi) |
| 21:23.46 | ompaul | heartbleed |
| 21:23.48 | ompaul | and other things |
| 21:24.07 | ompaul | then when you have been conviced apt-get update && apt-get dist-upgrade |
| 21:24.26 | ompaul | and then you can try to address your drop box problem which is most likely them changing their api |
| 21:24.35 | kristian-aalborg | whoa, this just happened it seems |
| 21:24.42 | *** join/#debian ByT3b0N3 (~ByT3b0N3@p5B264452.dip0.t-ipconnect.de) |
| 21:24.43 | kristian-aalborg | heartbleed I heard of |
| 21:24.43 | *** join/#debian CrypticSquared (~CrypticS_@unaffiliated/crypticsquared) |
| 21:25.12 | FreeRaider | hello guys, I'm trying to install a package, but I get this error:" sudo: ./configure: command not found ". How do I resolve? |
| 21:25.31 | *** join/#debian Tuls (~Tuls@APoitiers-257-1-18-150.w90-38.abo.wanadoo.fr) |
| 21:26.20 | centrx | FreeRaider, "install a package"? |
| 21:26.30 | heurist | FreeRaider: just ./configure not sudo for that |
| 21:26.36 | teraflops | i think that name is more propaganda than anything else |
| 21:27.09 | *** join/#debian stbatduke (~stb24@cpe-024-211-187-104.nc.res.rr.com) |
| 21:27.28 | sexyboy | was ssh on wheezy vulnerable to shellshock? |
| 21:28.03 | kristian-aalborg | so it seems |
| 21:28.07 | *** join/#debian RobertJDohnert (~rjdohnert@2606:a000:b441:5d00:35af:f006:b983:a68c) |
| 21:28.10 | ompaul | sexyboy: go read the CVE |
| 21:28.15 | *** join/#debian SofS (~SofS@unaffiliated/sofs) |
| 21:28.17 | kristian-aalborg | from the article I just read, anyway |
| 21:28.17 | takeyourhatoff | bash versions from '95 to '14 lol |
| 21:28.31 | FreeRaider | heurist: bash: ./configure: File or directory don't found |
| 21:28.44 | kristian-aalborg | I wonder how many black hat persons knew this |
| 21:29.55 | teraflops | well stop using php and apache and cgi .... and sugar, bacon ... |
| 21:30.03 | *** join/#debian skwlkr (~local@p5DC6526D.dip0.t-ipconnect.de) |
| 21:30.12 | heurist | FreeRaider: use the package manager (apt-get or aptitude) if you don't know how to compile software you are going to mess your systems up doing what you are doing. |
| 21:30.46 | bezaban | is there an issue with wheezy repos or is it just me? |
| 21:31.11 | bezaban | no wait. only one mirror |
| 21:31.17 | bezaban | one line paste |
| 21:31.23 | bezaban | E: Release file for http://ftp.no.debian.org/debian/dists/wheezy-updates/Release is expired (invalid since 33min 55s). Updates for this repository will not be applied |
| 21:31.35 | *** join/#debian phuh_ (~phuh@184.175.0.80) |
| 21:31.54 | heurist | bezaban: so stop using that mirror. |
| 21:31.54 | centrx | bezaban, switch to http.debian.net |
| 21:32.22 | *** join/#debian BuFF (~3po@94.244.83.182) |
| 21:32.32 | bezaban | exactly. yes. Didn't notice that that warning only applied to one mirror at first |
| 21:34.02 | *** join/#debian sti_fr (~sti_fr@78.129.50.225) |
| 21:34.41 | *** part/#debian lopho (~admin@patxi.bragasusadas.com) |
| 21:34.46 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 21:35.30 | *** join/#debian mennea (~textual@31.210.187.78) |
| 21:36.01 | *** mode/#debian [+l 1482] by debhelper |
| 21:36.11 | *** join/#debian jopi (~dani@198.46.152.150) |
| 21:36.23 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 21:36.27 | *** join/#debian Jdbye|Tabtop (~jdbye@ti0010a400-0181.bb.online.no) |
| 21:37.05 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 21:39.05 | *** join/#debian nzoie (52e610b0@gateway/web/freenode/ip.82.230.16.176) |
| 21:39.08 | sexyboy | so it was, any ideas how to detect was a systemmade a part of wopbot? |
| 21:39.20 | kristian-aalborg | wait... 7.6 IS the latest Debian? |
| 21:39.33 | kristian-aalborg | stable Debian, that is |
| 21:39.44 | centrx | yes |
| 21:40.35 | nzoie | i used dist-upgrade but bash wasn't updated after the vulnerability; this is my sources.list, is something missing? http://paste.debian.net/123305/ |
| 21:40.59 | kristian-aalborg | then why did ompaul say I should do a distro upgrade? |
| 21:41.02 | valdyn | nzoie: bash was updated |
| 21:41.16 | centrx | nzoie, dpkg -l bash |
| 21:41.18 | valdyn | !versions bash |
| 21:41.26 | centrx | ,v bash |
| 21:41.27 | judd | Package: bash on i386 -- squeeze: 4.1-3; squeeze-security-lts: 4.1-3+deb6u1; wheezy: 4.2+dfsg-0.1; wheezy-proposed-updates: 4.2+dfsg-0.1+deb7u1; wheezy-security: 4.2+dfsg-0.1+deb7u3; jessie: 4.3-9.1; sid: 4.3-9.2 |
| 21:42.40 | *** join/#debian terrorizor (~snake@75-139-164-140.dhcp.knwc.wa.charter.com) |
| 21:42.55 | kristian-aalborg | I have 4.2.45(1)-release |
| 21:42.56 | terrorizor | how do I get keyboard/mouse to work with livedvd? |
| 21:43.26 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 21:43.49 | centrx | kristian-aalborg, It is called dist-upgrade and it is often used for release upgrades, but that's not all it's for |
| 21:44.29 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 21:45.49 | *** join/#debian hercumer (~kc9eye@c-98-220-155-198.hsd1.in.comcast.net) |
| 21:46.00 | *** mode/#debian [+l 1476] by debhelper |
| 21:47.06 | nzoie | is bash still vulnerable? |
| 21:47.07 | *** join/#debian skwlkr (~skwlkr@p5DC6526D.dip0.t-ipconnect.de) |
| 21:47.31 | centrx | bash has been patched in Debian stable |
| 21:47.46 | shay_shay_ | hello, i need to make a custom debian installer, the current one using grub-efi will boot to ext4? |
| 21:47.58 | kristian-aalborg | centrx, so I can do it without upgrading the distro...? |
| 21:48.07 | *** join/#debian lnxslck (~lnxslck@av2-84-90-25-147.netvisao.pt) |
| 21:48.13 | kristian-aalborg | I need this box to be solid, and I don't have time to tinker with it a whole lot |
| 21:48.21 | centrx | kristian-aalborg, upgrade kernel from wheezy-backports is the plan? |
| 21:48.23 | nzoie | ok thanks i think it's ok actually i missed it |
| 21:50.40 | kristian-aalborg | to be honest, I had no idea anything but Dropbox was out of order |
| 21:50.48 | *** join/#debian BuFF (~3po@94.244.83.182) |
| 21:50.49 | kristian-aalborg | but yes, that makes sense |
| 21:50.52 | *** join/#debian rgr (~user@host-78-149-42-69.as13285.net) |
| 21:51.20 | centrx | kristian-aalborg, Is wheezy-backports still in your sources.list ? |
| 21:51.40 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 21:52.32 | *** join/#debian BackEndCoder (~steve@mail.dontplay.co.uk) |
| 21:52.46 | *** join/#debian SethM (~SethM@ool-44c38130.dyn.optonline.net) |
| 21:53.15 | *** part/#debian antiwire (~antiwire@unaffiliated/antiwire) |
| 21:53.36 | *** join/#debian jalalsfs (~jalal@unaffiliated/jalalsfs) |
| 21:53.59 | *** join/#debian bz (6c2ee574@gateway/web/freenode/ip.108.46.229.116) |
| 21:54.03 | bz | hi |
| 21:54.18 | kristian-aalborg | erm, my BASH started acting weird... echoes of some kind |
| 21:54.22 | kristian-aalborg | I do not need this! |
| 21:54.25 | bz | what are the relevant /sys entries for bringing up a network iface? |
| 21:54.38 | bz | one of my hosts is trapped without internet |
| 21:54.52 | kristian-aalborg | tab completion was strange... rebooting now |
| 21:54.56 | *** join/#debian G66k (~G66K@unaffiliated/g66k) |
| 21:55.01 | G66k | Hello everyone |
| 21:55.12 | G66k | i was wondering what dir that include apache conf ? |
| 21:55.13 | *** join/#debian jimbohertz (~quassel@modemcable062.153-22-96.mc.videotron.ca) |
| 21:55.21 | valdyn | bz: what does sys matter if you just want to bring up networking? |
| 21:55.25 | *** join/#debian nbt (~nbt@unaffiliated/nbt) |
| 21:55.42 | bz | valdyn: i want to bring up networking |
| 21:55.46 | bz | that's how it matters |
| 21:55.54 | valdyn | bz: so not at all |
| 21:56.01 | *** mode/#debian [+l 1470] by debhelper |
| 21:56.01 | valdyn | bz: man ifconfig, man interfaces |
| 21:56.02 | bz | okay. how to bring up networking? |
| 21:56.09 | bz | ifconfig iproute2 not installed |
| 21:56.21 | bz | like i said, my host is landlocked |
| 21:56.23 | valdyn | bz: /sbin/ifconfig |
| 21:56.32 | bz | did you not read? |
| 21:56.38 | bz | [17:56] <bz> ifconfig iproute2 not installed |
| 21:56.50 | valdyn | bz: how the hell would you manage to remove ifconfig? |
| 21:56.54 | *** join/#debian tomboy64 (~tomboy@gateway/tor-sasl/tomboy64) |
| 21:57.01 | *** join/#debian xfuw89 (~leonid@stick.shade.volia.net) |
| 21:57.24 | bz | zealous purging |
| 21:57.29 | bz | (over-) |
| 21:57.30 | *** join/#debian KTL (~KTL2@213.219.168.18.adsl.dyn.edpnet.net) |
| 21:58.11 | CarlGel | Speaking of networking, my networking just broke a few minutes ago. Rebooting, I was unable to get XFCE to boot automatically (And couldn't get to term 7). sudo dhclient eth0 allowed me to get networking back, though |
| 21:58.19 | CarlGel | Any ideas why the heck that happened? |
| 21:58.27 | heurist | bz: sounds like you have purged yourself into a state of reinstalling. |
| 21:58.30 | sexyboy | GentileBen: no?/4 |
| 21:58.40 | bz | heurist: no other way? |
| 21:58.52 | valdyn | bz: you need the net-tools package. Maybe you even have it in /var/cache/apt/archives/ still |
| 21:58.55 | bz | i mean, i have an ssh serial console connected to it |
| 21:59.04 | bz | i just need a way to copy a deb into it |
| 21:59.14 | heurist | bz: who know what other imported stuff you purged. I would not trust that system to be usable. |
| 21:59.16 | valdyn | bz: you can use that serial console to copy that package |
| 21:59.19 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 21:59.21 | bz | valdyn: how? |
| 21:59.29 | bz | valdyn: scp won't work; ssh 'cat' doesn't either |
| 21:59.38 | *** join/#debian ct0 (~ct0@pool-173-70-194-120.nwrknj.fios.verizon.net) |
| 22:00.47 | bz | gah |
| 22:01.20 | heurist | bz: cat file | ssh serialconsole "cat > file" |
| 22:01.25 | valdyn | bz: of course scp cant work, but cat file.deb | ssh cat works |
| 22:01.46 | bz | heurist: i just said that doesn't work. did you read? ssh 'cat' no funciona |
| 22:01.54 | bz | it really is a serial console |
| 22:02.02 | valdyn | bz: youre using it wrong, it works |
| 22:02.10 | *** join/#debian gaccardo (~gaccardo@253-138-235-201.fibertel.com.ar) |
| 22:02.24 | heurist | bz: I also just said I would be worried about what else was missing... |
| 22:02.39 | *** join/#debian diniwed (~gavron@pool-74-108-225-30.nycmny.fios.verizon.net) |
| 22:03.21 | *** join/#debian ShapeShifter499 (~Raansu@unaffiliated/shapeshifter499) |
| 22:04.08 | *** join/#debian csotelo (~csotelo@190.41.210.210) |
| 22:04.24 | kristian-aalborg | centrx, http://pastebin.com/Ezekq65Y |
| 22:05.02 | *** join/#debian momomo (~wwwabekun@p6171-ipbfp1804kobeminato.hyogo.ocn.ne.jp) |
| 22:05.08 | *** join/#debian lnxslck (~lnxslck@av2-84-90-25-147.netvisao.pt) |
| 22:05.56 | *** join/#debian teran_ (~teran@broadband-109-173-61-206.nationalcablenetworks.ru) |
| 22:06.00 | *** mode/#debian [+l 1464] by debhelper |
| 22:06.08 | centrx | kristian-aalborg, Okay so you have a lot of stuff in here, some of it is third-party repositories that can screw things up such as using Ubuntu PPAs |
| 22:06.14 | centrx | !frankendebian |
| 22:06.15 | dpkg | When you get random packages from random repositories, mix multiple releases of Debian, or mix Debian and derived distributions, you have a mess. There's no way anyone can support this "distribution of Frankenstein" and #debian certainly doesn't want to even try. See if you can convince ##linux to help. |
| 22:06.35 | centrx | kristian-aalborg, The only line(s) you really need for wheezy are: |
| 22:06.37 | centrx | !sources.list |
| 22:06.37 | dpkg | A suitable /etc/apt/sources.list for Debian 7 "Wheezy" has three lines: "deb http://http.debian.net/debian/ wheezy main" "deb http://security.debian.org/ wheezy/updates main" "deb http://http.debian.net/debian/ wheezy-updates main". Be sure to run «aptitude update» after editing sources.list. Also see <deb-src> <contrib> <non-free> <wheezy/updates> <wheezy-updates> <mirrors> <apt-spy> and "man sources.list". |
| 22:06.47 | centrx | kristian-aalborg, To add backports: |
| 22:06.53 | centrx | !wheezy-backports |
| 22:06.54 | dpkg | Selected packages intended for the "Jessie" (8.0) release of Debian but recompiled for use with "Wheezy" (7.x) can be found in the "wheezy-backports" repository. Note that wheezy-backports are on the regular mirror network, not on backports.debian.org. A suitable line for your sources.list is «deb http://http.debian.net/debian/ wheezy-backports main». Also ask me about <bdo>. |
| 22:06.58 | *** join/#debian wakd (~wakd@202-159-168-166.dyn.iinet.net.au) |
| 22:07.01 | *** join/#debian smaug91 (~Jeff_Ward@cpe-67-249-184-11.twcny.res.rr.com) |
| 22:07.28 | *** join/#debian zz_mbainrot (~mbainrot@ppp239-177.static.internode.on.net) |
| 22:09.07 | *** join/#debian mlouis (~mlouis@APuteaux-652-1-227-197.w92-132.abo.wanadoo.fr) |
| 22:11.55 | kristian-aalborg | thanks, centrx |
| 22:12.16 | kristian-aalborg | I know it's a mess... |
| 22:13.52 | *** join/#debian socomm (~socomm@96-40-147-98.dhcp.mtpk.ca.charter.com) |
| 22:14.01 | *** join/#debian Riastradh (~riastradh@fsf/member/riastradh) |
| 22:16.07 | *** join/#debian n0wje (~anthony@mail.bps.k12.nm.us) |
| 22:16.11 | *** join/#debian cra1g321 (~craig@97e3b9c0.skybroadband.com) |
| 22:16.14 | *** join/#debian johnnyb_ (~johnnyb@ip-89-102-64-76.net.upcbroadband.cz) |
| 22:16.17 | *** part/#debian Anuska (anuska@gateway/shell/elitebnc/x-obboegichbyngull) |
| 22:16.58 | cra1g321 | is jessie still vulnerable to shellshock ? |
| 22:17.10 | cra1g321 | on this page it says it is - https://security-tracker.debian.org/tracker/CVE-2014-7169 |
| 22:17.39 | kristian-aalborg | centrx, so like this: http://pastebin.com/31MUHFKS |
| 22:17.45 | centrx | cra1g321, jessie has the first patch but not the second one |
| 22:17.54 | centrx | cra1g321, you can grab it from unstable |
| 22:18.04 | centrx | kristian-aalborg, great! |
| 22:18.10 | cra1g321 | centrx thanks for a quick reply to a question that im sure is asked a 1000 times already |
| 22:18.14 | *** join/#debian dzragon (~dzragon@h-53-131.a260.priv.bahnhof.se) |
| 22:18.27 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 22:18.32 | cra1g321 | any reason why it hasn't been patched yet ? |
| 22:19.18 | centrx | jessie migrations from unstable are automated |
| 22:19.21 | centrx | unless it is manually nudged |
| 22:19.35 | centrx | first one was nudged, second one hasn't been for some reason |
| 22:19.55 | cra1g321 | with quite a fair amount of people using jessie as a main distro, im really surprised it hasnt |
| 22:20.41 | *** join/#debian bakaneko (~d@kuzh.polytechnique.fr) |
| 22:20.58 | centrx | cra1g321, 1) it's fairly explicit that jessie does not get security updates as promptly as stable or unstable |
| 22:21.02 | nkuttler | cra1g321: testing isn't a distro. imo it's even worse than running sid, because fixes only trickle in slowly |
| 22:21.17 | centrx | cra1g321, 2) desktops are generally less vulnerable to this bug |
| 22:21.27 | cra1g321 | i've never tried out sid tbh |
| 22:21.30 | centrx | cra1g321, 3) Debian is generally less vulnerable to this bug because of use of dash as system shell |
| 22:21.34 | centrx | cra1g321, 4) first patch is available |
| 22:21.41 | nkuttler | centrx: 2) is really not true |
| 22:21.48 | centrx | nkuttler, how |
| 22:22.05 | cra1g321 | less of a target perhaps |
| 22:22.14 | nkuttler | centrx: have you seen the dhcp poc? |
| 22:22.34 | nkuttler | centrx: https://www.trustedsec.com/september-2014/shellshock-dhcp-rce-proof-concept/ |
| 22:22.49 | centrx | ok sure |
| 22:23.03 | kristian-aalborg | hurm, I still have the same kernel |
| 22:23.05 | centrx | so someone has to get into your home router first |
| 22:23.13 | centrx | still "less vulnerable", I stand by it! |
| 22:23.45 | *** part/#debian G66k (~G66K@unaffiliated/g66k) |
| 22:23.48 | nkuttler | centrx: if by "desktop" you mean stationary boxes in a trusted env, sure. how would you classify notebooks? |
| 22:23.52 | socomm | What is the second patch for? |
| 22:24.15 | cra1g321 | the first patch didnt fully fix the vulnerability |
| 22:24.21 | nkuttler | most laptops are used like desktops |
| 22:24.22 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 22:24.28 | socomm | cra1g321: and the second? |
| 22:24.36 | cra1g321 | it does |
| 22:24.39 | nkuttler | socomm: hopefully a better fix |
| 22:25.00 | centrx | nkuttler, ok "home computers" outside of hipster-land who bring their laptops to cafes ;P |
| 22:25.13 | *** join/#debian jetho (~jens@186.193.201.27) |
| 22:25.49 | nkuttler | centrx: you mean outside of average people's lives, ok |
| 22:26.04 | *** join/#debian carif (~mcarifio@cpe-72-224-79-77.nyc.res.rr.com) |
| 22:26.09 | socomm | centrx: running linux makes a person a hipster? |
| 22:26.20 | nkuttler | socomm: having a laptop |
| 22:26.31 | *** join/#debian Riastradh (~riastradh@fsf/member/riastradh) |
| 22:26.50 | centrx | Does the Debian dhcp client not use dash? |
| 22:27.00 | nkuttler | centrx: if you run testing, you never know |
| 22:27.08 | CarlGel | somethign appears to be wrong with my networking, I'm getting insane ping everywhere, and I'm unsure of how to fix it. My other machines are fine, though |
| 22:27.14 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 22:27.46 | *** join/#debian b_52globe (~b_52globe@adsl196-231-28-217-196.adsl196-9.iam.net.ma) |
| 22:28.00 | CarlGel | when I'm getting 400 ping to a server that's located about 20 miles from me, I'm confused. :/ |
| 22:28.19 | nkuttler | CarlGel: location isn't really important wrt to ping times |
| 22:28.50 | *** join/#debian garyserj (~garfil@82-69-82-248.dsl.in-addr.zen.co.uk) |
| 22:29.21 | *** join/#debian richac (~richac@pool-71-167-34-81.nycmny.fios.verizon.net) |
| 22:29.58 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 22:30.20 | *** join/#debian kermit (unknown@pdpc/supporter/bronze/kermit) |
| 22:32.23 | CarlGel | Sorry, I figured out the issue. Apparently my torrent client decided to not limit. I swear I hit limit. |
| 22:33.11 | kristian-aalborg | linux-image-3.14-0.bpo.1-686-pae <-- would this be good for my box? |
| 22:33.15 | *** join/#debian Riastradh (~riastradh@fsf/member/riastradh) |
| 22:33.29 | *** join/#debian paw (~afong@198-48-224-134.cpe.pppoe.ca) |
| 22:33.33 | centrx | kristian-aalborg, you probably want the amd64 one if you have a modern PC |
| 22:35.55 | *** part/#debian bz (6c2ee574@gateway/web/freenode/ip.108.46.229.116) |
| 22:36.00 | kristian-aalborg | I don't |
| 22:36.05 | kristian-aalborg | ancient thinkcentre |
| 22:36.18 | centrx | ok yeah that's good |
| 22:36.32 | centrx | PAE is for accessing more than like 2GB or 4GB of RAM whatever it is |
| 22:36.37 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 22:36.39 | centrx | so you only need that if you have > x RAM |
| 22:36.51 | kristian-aalborg | model name: Intel(R) Pentium(R) 4 CPU 2.80GHz |
| 22:36.59 | centrx | neato |
| 22:37.16 | kristian-aalborg | it IS a very good machine, if you use it properly |
| 22:37.16 | *** join/#debian rgr|android (~Android@host-78-149-42-69.as13285.net) |
| 22:37.59 | kristian-aalborg | Mem: 1485 |
| 22:38.46 | *** join/#debian format_c (~format_c@2001:4dd0:ff00:8421:6e62:6dff:fe4a:e47d) |
| 22:39.39 | *** join/#debian catpig (~catpig@p5B09E25F.dip0.t-ipconnect.de) |
| 22:40.53 | *** join/#debian NightKhaos (~NK@2001:41d0:a:2add::1) |
| 22:41.30 | *** join/#debian headpool182 (c00080de@gateway/web/freenode/ip.192.0.128.222) |
| 22:41.33 | headpool182 | hello |
| 22:41.50 | headpool182 | looking to do minimal install of debian, no gui, not sure how to do it |
| 22:41.52 | shay_shay_ | question: the debian installer, is there any reason i need it to be on a file system which supports symbolic links? |
| 22:42.00 | shay_shay_ | i'm trying to run it off a fat32 |
| 22:42.03 | *** join/#debian BWMerlin (~Thunderbi@142.45.233.220.static.exetel.com.au) |
| 22:42.21 | cra1g321 | start off with a basic net CD install <headpool182> |
| 22:42.49 | headpool182 | gotcha |
| 22:42.56 | headpool182 | downloading that now |
| 22:43.16 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 22:43.25 | *** join/#debian brentaarnold (~barnold@sugartown-109.camtel.net) |
| 22:43.50 | headpool182 | then just don't install gui when prompted |
| 22:43.51 | headpool182 | obv |
| 22:44.20 | centrx | shay_shay_, As I recall, Linux on FAT doesn't really work unless it's a special distribution designed for it |
| 22:44.37 | shay_shay_ | just for the installer? |
| 22:44.57 | centrx | oh |
| 22:45.08 | shay_shay_ | i'm trying to copy the contents of the iso to a fat32 with partition type EF00 on guid table |
| 22:45.12 | centrx | shay_shay_, probably easiest to use the Live CD, you can run that from any machine |
| 22:45.19 | shay_shay_ | then chroot to it and update the kernel |
| 22:45.24 | shay_shay_ | and add btrfs-tools |
| 22:45.32 | shay_shay_ | well, i think i dont need to add btrfs-tools |
| 22:45.45 | shay_shay_ | yeah i'll update it why the hack not |
| 22:45.50 | shay_shay_ | i'm already there after all |
| 22:45.55 | centrx | totally |
| 22:46.00 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 22:46.02 | *** mode/#debian [+l 1457] by debhelper |
| 22:46.24 | *** join/#debian tempus_fol (~tempus@gateway/tor-sasl/foltempus) |
| 22:46.25 | *** join/#debian carif (~mcarifio@cpe-72-224-79-77.nyc.res.rr.com) |
| 22:46.48 | *** join/#debian ovidnis (~ovid@129.89.183.205) |
| 22:46.54 | *** join/#debian GusBricker (~GusBricke@CPE-120-149-34-233.oirx2.vic.bigpond.net.au) |
| 22:50.23 | *** join/#debian dgeary2 (~portlandi@90.200.1.70) |
| 22:51.02 | shay_shay_ | how does this work, i cant find the root directory |
| 22:51.07 | *** join/#debian wonderworld (~ww@ip-62-143-157-238.hsi01.unitymediagroup.de) |
| 22:52.04 | *** join/#debian slopjong (~slopjong@lindb.rhrk.uni-kl.de) |
| 22:53.44 | *** join/#debian Zune (~Zune@93-161-219-103-dynamic.dk.customer.tdc.net) |
| 22:57.01 | *** join/#debian tomboy64 (~tomboy@gateway/tor-sasl/tomboy64) |
| 22:57.55 | *** join/#debian acebarry (~weechat@gateway/tor-sasl/acebarry) |
| 22:58.39 | shay_shay_ | i'm just going to make a persistance partition |
| 22:58.58 | *** join/#debian flokuehn (~flokuehn@dslb-084-059-145-008.084.059.pools.vodafone-ip.de) |
| 22:59.13 | *** join/#debian Core84 (~Corey84@unaffiliated/corey84) |
| 22:59.53 | *** join/#debian btiefert (~btiefert@173-8-238-129-Colorado.hfc.comcastbusiness.net) |
| 23:01.23 | jhutchins | shay_shay_: Generally one does not get a bootable device that way. |
| 23:01.29 | *** join/#debian brian-mac (~textual@79.97.2.26) |
| 23:01.54 | jhutchins | shay_shay_: When you write the image file to the device, the image creates the filesystem. |
| 23:02.21 | *** join/#debian Aequo (alpha@unaffiliated/iuris) |
| 23:02.51 | *** join/#debian Core84 (~Corey84@unaffiliated/corey84) |
| 23:03.14 | shay_shay_ | bah, parted is complaining about overlapping partitions |
| 23:03.44 | *** join/#debian dirtymara (dirtymara@2e40dfe3.skybroadband.com) |
| 23:03.54 | hercumer | clear |
| 23:04.02 | *** join/#debian bovin (~bovin@68.200.229.193) |
| 23:06.48 | *** join/#debian tomboy66 (~tomboy@gateway/tor-sasl/tomboy64) |
| 23:07.04 | *** join/#debian Core84 (~Corey84@unaffiliated/corey84) |
| 23:07.08 | shay_shay_ | i can never tell if something is MiB or MB |
| 23:07.36 | centrx | MiB is a scam! don't believe it! |
| 23:07.42 | centrx | it's not even a real word! |
| 23:07.59 | takeyourhatoff | mibi you should get over it |
| 23:08.02 | shay_shay_ | i just want to know that MB never ever means MiB |
| 23:08.11 | *** join/#debian b1g1r0n (~b1g1r0n@75-149-14-210-Pennsylvania.hfc.comcastbusiness.net) |
| 23:08.13 | shay_shay_ | and what is Mb |
| 23:08.15 | shay_shay_ | lol |
| 23:08.23 | catpig | shay_shay_, megabit |
| 23:08.29 | shay_shay_ | i know |
| 23:08.41 | shay_shay_ | i'm always wondering if they really mean what they say |
| 23:08.54 | shay_shay_ | or sometimes capitol M |
| 23:09.18 | takeyourhatoff | one of my hobbies is getting adverts pulled here in the UK by writing to advertising standards regarding broadband adverts saying 16MB internet |
| 23:09.32 | *** join/#debian Jdbye|Tabtop (~jdbye@ti0010a400-0181.bb.online.no) |
| 23:09.37 | *** join/#debian ndrei (~avo@83.142.149.227) |
| 23:09.49 | takeyourhatoff | shay_shay_: MB Mega byte Mb mega bit mB micro byte mb micro bit |
| 23:10.06 | takeyourhatoff | those last two aren't really very usefull outside of physics |
| 23:10.38 | *** join/#debian roboman2444 (~roboman24@unaffiliated/roboman2444) |
| 23:10.55 | shay_shay_ | oh ok Mbit MByte MiBibbyte (or whatever) |
| 23:10.55 | *** join/#debian Cheddam_ (~textual@125-237-190-168.jetstream.xtra.co.nz) |
| 23:11.27 | shay_shay_ | takeyourhatoff: and when its just M ? |
| 23:12.04 | *** join/#debian skwlkr_ (~skwlkr@p5DC64167.dip0.t-ipconnect.de) |
| 23:12.12 | takeyourhatoff | ask Kim |
| 23:15.34 | *** join/#debian george959 (~george959@dynamic-78-8-13-201.ssp.dialog.net.pl) |
| 23:15.47 | *** part/#debian qw8029 (~xgb880@64.166.169.130) |
| 23:16.01 | *** mode/#debian [+l 1451] by debhelper |
| 23:16.36 | *** join/#debian tekkbuzz (~oijvlj@cpe-67-240-151-83.rochester.res.rr.com) |
| 23:18.55 | *** join/#debian centurion18 (~observado@r200-40-210-131.static.adinet.com.uy) |
| 23:19.00 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 23:21.38 | *** join/#debian Sir_Designer (~Sir_Desig@wikipedia/mareklug) |
| 23:26.38 | *** join/#debian mtn (~mtn@dpc6744162247.direcpc.com) |
| 23:28.37 | shay_shay_ | debian-live-7.6.0-amd64-standard.iso.torrent does this include an installer similar to the netinstall? |
| 23:29.29 | *** join/#debian infinitum (~infinitum@df-001f-1a30-0005.10ge.i6.sungai.nl) |
| 23:30.51 | *** join/#debian robinsz (~robin@88.97.63.122) |
| 23:30.55 | *** join/#debian Nnel (~Nnel@109.144.225.156) |
| 23:31.09 | shay_shay_ | i think K stands for KiB takeyourhatoff |
| 23:31.35 | *** join/#debian nbt (~nbt@unaffiliated/nbt) |
| 23:31.46 | robinsz | quick question .. to make debian lts qork on squeeze, I need the deb entires in source.list or do I need the deb-src entries also? |
| 23:32.08 | robinsz | *work |
| 23:32.39 | shay_shay_ | i used "du -h netinst.iso" to get the size and it gave me a number in M and i made a partition of that size using MB and it wouldnt fit until i used MiB |
| 23:32.58 | *** join/#debian vol4ko (~vol4ko@unaffiliated/vol4ko) |
| 23:34.54 | *** join/#debian |knack| (~loop@41.sub-174-236-129.myvzw.com) |
| 23:35.19 | *** join/#debian AlexPortable (uid7568@gateway/web/irccloud.com/x-racghopnnjcppdja) |
| 23:36.57 | *** part/#debian bovin (~bovin@68.200.229.193) |
| 23:37.50 | *** join/#debian nikio (~K@50728114.static.ziggozakelijk.nl) |
| 23:39.04 | *** join/#debian pwnsdx (~pwnsdx@gateway/tor-sasl/pwnsdx/x-26458578) |
| 23:40.03 | *** join/#debian pccomf (~pccomf@107.170.168.86) |
| 23:40.57 | *** join/#debian NightTrain (~coffee@unaffiliated/ridout) |
| 23:41.40 | *** join/#debian ct0 (~ct0@pool-173-70-194-120.nwrknj.fios.verizon.net) |
| 23:43.31 | *** join/#debian TildaTurn (~tilda@unaffiliated/tildaturn) |
| 23:45.14 | *** join/#debian magic_ (~magic@CPEa0b3cc871705-CM602ad0938a6e.cpe.net.cable.rogers.com) |
| 23:45.28 | *** join/#debian lift (~lift@2a04:1980:3100:1aac:21b:21ff:feda:4ca7) |
| 23:48.34 | cafuego | robinsz: debian lts? |
| 23:48.36 | *** join/#debian tomboy64 (~tomboy@gateway/tor-sasl/tomboy64) |
| 23:48.43 | robinsz | lts |
| 23:49.01 | cafuego | Ah I see. |
| 23:49.29 | cafuego | You'll want to add the deb-src lines if you recompile provided packages yourself. |
| 23:49.39 | cafuego | If you don't, then there's no need for them. |
| 23:49.41 | robinsz | ok, no i dont need to do that |
| 23:49.44 | robinsz | rightm thnaks |
| 23:50.39 | *** join/#debian Wes-_ (~chatzilla@office-gw.page.ca) |
| 23:52.27 | shay_shay_ | crap |
| 23:52.48 | *** join/#debian Nectur (~marcel@524A05F6.cm-4-3a.dynamic.ziggo.nl) |
| 23:52.58 | *** join/#debian Miesco (~mugsy@dyn-192-249-128-130.nexicom.net) |
| 23:54.11 | cafuego | How much do you need? |
| 23:54.45 | *** join/#debian no2systemd (~xuser@107-214-236-28.lightspeed.sndgca.sbcglobal.net) |
| 23:55.06 | *** join/#debian tomboy65 (~tomboy@gateway/tor-sasl/tomboy64) |
| 23:55.27 | *** join/#debian Frosh (uid4206@gateway/web/irccloud.com/x-uwoswreykadhinxe) |
| 23:55.41 | *** join/#debian Corey84 (~Corey84@unaffiliated/corey84) |
| 23:56.00 | *** mode/#debian [+l 1445] by debhelper |
| 23:56.35 | *** join/#debian CoreIT84 (~Corey84@unaffiliated/corey84) |
| 23:57.40 | *** join/#debian Core84 (~Corey84@unaffiliated/corey84) |
| 23:58.00 | *** join/#debian ectospasm (~ectospasm@unaffiliated/ectospasm) |
| 23:58.19 | *** join/#debian Miesco (~mugsy@dyn-192-249-128-130.nexicom.net) |
| 23:59.08 | *** join/#debian fridmarr (~fridmarr@46.166.186.227) |
