00:06.15 | *** join/#fredlug nomb_ (n=nomb@c-71-62-232-167.hsd1.va.comcast.net) |
00:06.35 | nomb_ | stickster: I figured out what you ment about selinux |
00:06.49 | nomb_ | stickster: allow_execmod 1 to fix the error |
00:07.07 | nomb_ | but how can u do this automatically so you don't have to do it each time is it in the policy? |
00:07.10 | stickster | nomb_: Yeah, the booleans almost always have 90% of cases covered |
00:07.28 | stickster | The policy should stay in effect even if you update the selinux RPMs. |
00:07.58 | stickster | If you need to do this at a command line for some reason, you can use the setsebool command. |
00:08.08 | nomb_ | no what im asking is everytime i log in i have to go into a terminal and run setsebool allow_execmod 1 |
00:08.18 | nomb_ | how can i set that for all the time? |
00:08.32 | stickster | Hm, that's not right. If you run system-config-securitylevel as root, setting the booleans should set the policy. |
00:08.42 | stickster | You're running FC6, right? |
00:08.48 | stickster | (Although I think this did the same thing in FC5.) |
00:09.18 | nomb_ | ya |
00:09.33 | stickster | right, so s-c-securitylevel should take care of that. |
00:10.06 | stickster | Or, if you use setsebool, you need the '-P' switch to write any pending changes to the policy. |
00:10.16 | stickster | It's much like sysctl in that way. |
00:18.36 | nomb_ | I just can't find that specific one in the gui |
00:19.10 | nomb_ | ok |
00:19.12 | nomb_ | gotcha |
00:19.18 | jsmith | nomb_: Are you on FC6? |
00:19.33 | jsmith | There's the setroubleshoot(er?) application that will help you debug SELinux problems |
00:19.58 | nomb_ | i figured out what needed to be on just not how to keep it always on |
00:20.16 | nomb_ | oh and i tried virtualbox for virtualization and it is awsome |
00:23.15 | nomb_ | are any of you guys running fc7? |
00:27.27 | stickster | setroubleshoot *rocks*! |
00:27.41 | nomb_ | i haven't tried it |
00:28.12 | nomb_ | i know you can go into permissive mode, run the program, get the errors, then run those errors through a program to create a rule |
00:28.29 | jsmith | stickster brought me an FC7 Live CD -- but I haven't had a chance to try it yet |
00:28.30 | stickster | Yes, audit2allow |
00:29.32 | nomb_ | maybe ill download fc7 and play with that for a little while |
00:29.52 | stickster | But setroubleshoot is even cooler... a daemon runs and generates a DBus message if audit throws a warning/error. The user can run the "sealert" program in the background, and a tray icon comes up with the errors and suggestions for mitigation |
00:30.41 | nomb_ | awsome |
00:31.47 | stickster | It's very helpful for finding policy bugs. |
00:32.08 | stickster | I've found a few that haven't seemed to make it to production yet, particularly the ones caused by hald on suspend/resume. |
00:32.49 | nomb_ | is there anyway to edit the kernels that come with fedora? even having the devel when i do make menuconfig it says there is no menuconfig |
00:33.06 | jsmith | You need kernel-source, not just kernel-devel |
00:33.08 | stickster | nomb_: Read the release notes. |
00:33.18 | jsmith | Yeah, the release notes cover it as well |
00:33.27 | stickster | /usr/share/doc/HTML/RELEASE-NOTES-en_US.html |
00:33.27 | jsmith | Thanks to stickster and the other doc gurus |
00:34.03 | stickster | heh |
00:34.07 | stickster | Get to work, lazybones! |
00:34.17 | stickster | jsmith++ |
00:34.20 | stickster | ~karma jsmith |
00:34.20 | infobot | jsmith has karma of 4 |
00:34.37 | stickster | ~karma stickster |
00:34.37 | infobot | stickster has neutral karma |
00:34.45 | stickster | as usual |
00:34.55 | jsmith | Whatever... |
00:34.58 | jsmith | stickster++ |
00:35.02 | nomb_ | ~karma nomb_ |
00:35.02 | infobot | nomb_ has neutral karma |
00:35.09 | jsmith | nomb_++ |
00:35.17 | jsmith | infobot: nomb_++ |
00:35.21 | stickster | jsmith is always willing to level the playing field |
00:35.28 | stickster | ha |
00:35.28 | jsmith | infobot: stickster++ |
00:35.31 | nomb_ | i dont even know what all this is |
00:35.50 | jsmith | ~cookie |
00:36.29 | stickster | nomb_: When you want to say, "attaboy" or "right on!" to a user, the convention is "<username>++" |
00:36.47 | stickster | The "++" from the C language, meaning "increment" |
00:36.52 | stickster | So in this case, incrementing karma |
00:37.05 | nomb_ | nomb_++ |
00:37.23 | stickster | You may not be able to increase your own karma, which would sort of defeat the scheme :-D |
00:37.28 | stickster | infobot: nomb_++ |
00:37.32 | stickster | ~karma nomb_ |
00:37.32 | infobot | nomb_ has karma of 2 |
00:37.32 | jsmith | ~karma stickster |
00:37.32 | infobot | stickster has karma of 1 |
00:37.39 | jsmith | ~stickster++ |
00:37.47 | nomb_ | infobot: dict karma |
00:37.48 | stickster | Karma Wars |
00:37.49 | nomb_ | :D |
00:37.59 | nomb_ | ive been looking how to use the infobot |
00:38.01 | stickster | infobot: You talk too much. |
00:38.16 | stickster | Ha! No snappy retort. |
00:38.22 | jsmith | Nope... |
00:38.30 | nomb_ | infobot: echo woot |
00:38.44 | jsmith | ~literal echo |
00:38.46 | infobot | "echo" is "an issue which can be best fixed using this link: http://www.asteriskdocs.org/modules/tinycontent/content/docbook/current/docs-html/x1695.html#AEN1718, or fixed with fxotune: http://www.voip-info.org/wiki/view/Asterisk+fxotune, or best fixed by troubleshooting your pci bus: http://www.voip-info.org/wiki/view/Asterisk+PCI+bus+Troubleshooting, or of ... |
00:39.05 | nomb_ | infobot: stickster++, jsmith++ |
00:39.17 | jsmith | ~stab stupid bugs |
00:39.18 | infobot | ACTION runs at stupid bugs with an origami Swiss Army knife, and inflicts a nasty paper cut. |
00:39.36 | nomb_ | lol |
00:39.48 | jsmith | w00t! |
00:39.51 | jsmith | Happy Birthday to her! |
00:40.12 | stickster | She'll probably celebrate by reading two volumes of Encyclopedia Britannica or something |
00:40.50 | nomb_ | my son is gonna be born in the 25th which is also my birthday |
00:40.59 | stickster | w00t w00t! |
00:41.03 | nomb_ | but i have to take on a 3rd job since my wife can't work |
00:41.10 | stickster | Not so w00t. |
00:41.14 | nomb_ | so i can't do anything until after 9pm :'( |
00:41.24 | nomb_ | I do |
00:41.32 | jsmith | stickster: "The Collected Works of Wikipedia" |
00:41.37 | stickster | heh |
00:41.39 | jsmith | stickster: "2007 Edition" |
00:41.52 | stickster | jsmith: "2007-03-20 Edition" |
00:41.56 | nomb_ | Geico: 8 - 4:15pm Office Depot: 5 - 9pm Construction: on the weekends |
00:42.06 | jsmith | 25x the volume to data as the Encyclopedia Britannica |
00:42.09 | stickster | jsmith: "2007-03-20 14:24:38UTC Edition" |
00:42.19 | stickster | Some of it even correct! |
00:42.27 | stickster | New with 18% more correctness! |
00:42.27 | jsmith | What does that make... like 1250 books? |
00:42.54 | jsmith | In math they tought me this rule called "Lowest Common Denominator" |
00:42.58 | jsmith | 'nuff said |
00:43.05 | stickster | What happens to a nation that no longer creates but aggregates? |
00:43.23 | nomb_ | what is the command for an action? |
00:43.27 | jsmith | We buy cheap crap from countries who create |
00:43.28 | stickster | Too many analogies to Rome... must... stop... thinking... |
00:43.35 | stickster | "/me" |
00:43.36 | jsmith | Use the tilde (~) |
00:43.40 | jsmith | ~whaleslap nomb_ |
00:43.42 | infobot | ACTION beats nomb_ upside and over the head with a freakishly huge killer whale named Hugh |
00:43.50 | stickster | Oh, sorry, I misunderstood |
00:43.51 | nomb_ | lol |
00:43.59 | nomb_ | '/action' |
00:44.08 | jsmith | OH... |
00:44.14 | stickster | ~action does a tap dance |
00:44.15 | infobot | ACTION does a tap dance |
00:44.32 | stickster | "/me types this" |
00:45.01 | nomb_ | whats a fun distro to try? |
00:45.02 | stickster | You'll be an IRC wizard in no time |
00:45.10 | stickster | You're on it!!! FC6 BABY!!! |
00:45.41 | stickster | I think there's a cool distro I saw the other day that is called "Damn Weak Linux" or something... it's intentionally filled with bug-riddled, security-addled software |
00:45.54 | stickster | It's designed for malware testing I think |
00:46.05 | nomb_ | i like STD Linux |
00:46.06 | jsmith | nomb_: You should try out the new FC7 security spin |
00:46.12 | stickster | So you can observe the effects on a badly configured box |
00:46.31 | nomb_ | is that different the the testing fc7? |
00:46.32 | stickster | jsmith: I just sent some email to Luke M about that... I would love to get sleuthkit and autopsy onto it. |
00:46.39 | stickster | The LiveCD, right? |
00:46.54 | jsmith | stickster: Yeah, that's my understanding... ask him to put conspy on there as well |
00:47.09 | jsmith | stickster: (while you're at it) |
00:47.11 | nomb_ | i like doing vms |
00:47.27 | jsmith | nomb_: I work with a guy who has 15+ years in VMS |
00:47.33 | stickster | I think he's looking for packagers... if I want 'em on there I have to package them! :-D |
00:47.52 | jsmith | So, get crackin'! |
00:47.56 | stickster | I was on VMS once, the 12-step thing *totally* worked for me |
00:48.11 | jsmith | Put your mighty SPECFILE skills to work! |
00:48.29 | nomb_ | thats awsome j |
00:48.35 | jsmith | I was on VMS once... until my roommate accidentally connected to the ticket printer and printed a bunch of tickets to some concert... |
00:49.27 | stickster | bbiab |
00:49.33 | jsmith | I sent my first animated email on a VMS server... sending ANSI sequences through email rocks! |
00:49.41 | nomb_ | i got suse 10.2, puppy linux, ubuntu, xp pro as vms |
00:57.20 | nomb_ | ~whaleslap nombyte |
00:57.22 | infobot | ACTION beats nombyte upside and over the head with a freakishly huge killer whale named Hugh |
00:59.31 | nomb_ | i followed this linux installation guide which tells you to use sudo |
00:59.37 | nomb_ | whats the point when you can just sudo su - |
01:01.35 | nomb_ | anyone can answer that |
01:03.14 | nomb_ | -_- |
01:03.16 | stickster_afk | nomb_: sudo has some upsides, including the fact that usage gets logged |
01:03.36 | nomb_ | ur fine im just kidding |
01:03.47 | nomb_ | but u can sudo su - and get root |
01:04.45 | stickster | sudo isn't automatically a global key to everything, although lesser distributions set it up that way ;-) |
01:04.57 | stickster | You can set it to only allow sudo-ing of certain commands for certain users or groups |
01:05.14 | nomb_ | i tried that but it kept saying what i typed was wrong |
01:05.15 | stickster | So, for instance, the sysadmin can set sudo to _disallow_ use of "su" |
01:05.26 | stickster | nomb_: You have to be in the /etc/sudoers file./ |
01:05.34 | nomb_ | oh i didn't know u can dissallow things too |
01:05.36 | nomb_ | i know |
01:05.38 | nomb_ | using visudo |
01:05.40 | stickster | AndRight |
01:05.45 | stickster | *Right |
01:06.18 | stickster | 'man sudoers' is chock full o' info on this |
01:06.32 | stickster | It can be fairly complex and interesting, or very simple |
01:07.49 | nomb_ | ya thats what I looked at but i still was wrong |
01:07.52 | nomb_ | i can play with that later |
01:07.56 | stickster | What does your line say in /etc/sudoers ? |
01:08.03 | nomb_ | now it is |
01:08.20 | nomb_ | nomb ALL=(ALL) NOPASSWD:ALL |
01:09.24 | stickster | Hmm, I'm not sure but I thought a space was needed after "NOPASSWD:" |
01:09.59 | nombyte | im just typing off the top of my head it very well could |
01:10.08 | stickster | Nah, apparently not... just tried it |
01:10.12 | stickster | sorry, bum steer |
01:21.25 | nomb_ | oh i didn't know you were here jsmith |
01:21.46 | jsmith | Yeah... I was lurking |
01:21.54 | jsmith | Trying to work on my book |
01:22.10 | nomb_ | how the hell do u get a graphical display in debian? |
01:45.28 | jsmith | [ERROR] Error in column-width property value '1%': org.apache.fop.fo.expr.PropertyException: No conversion defined |
01:45.33 | jsmith | ~zap FOP |
01:45.37 | infobot | ACTION takes out a cattle prod and gives FOP a good jolt. |
01:45.38 | jsmith | ~lart FOP |
01:45.49 | jsmith | ~kill FOP |
01:45.50 | infobot | ACTION shoots a ionized neutron gun at FOP |
01:45.55 | jsmith | ~strangle FOP |
01:45.57 | infobot | ACTION strangles FOP with a keyboard cord. |
01:45.59 | jsmith | ~sizzle FOP |
01:47.20 | jsmith | There's karma for you... I complain about FOP, and now it gets itself in an endless loop saying: |
01:47.23 | jsmith | [INFO] area contents overflows area in line |
01:57.36 | jsmith | Nope... |
01:57.52 | jsmith | I'm just cursing at FOP and Java and the Apache Foundation |
01:58.12 | plarsen | hehe - been there, done that. |
01:58.36 | jsmith | I just want a PDF of my DocBook... nothing fancy |
01:59.03 | plarsen | I've used a german tool to design the transformation (xo) |
01:59.09 | plarsen | xslfast |
01:59.16 | plarsen | pretty cool. All in java |
01:59.47 | plarsen | Until I got that one, I didn't like it either. |
02:00.00 | plarsen | Isn't docBook pure XML? |
02:03.04 | jsmith | YUP |
02:03.21 | jsmith | Gotta love it. |
02:03.24 | plarsen | Do you have the fop file already made? |
02:03.28 | jsmith | Yes. |
02:03.33 | plarsen | So you know the mappings to styles etc. |
02:03.38 | jsmith | I just need an FO-to-PDF renderer |
02:03.42 | plarsen | hmmm - so where's the issue? |
02:03.45 | plarsen | execute? |
02:03.46 | jsmith | Yes... I've got a stylesheet |
02:04.01 | jsmith | It's that FOP keeps getting into infinite loops on simple pages. |
02:04.27 | plarsen | hmmm - are you sure the stylesheet/transformation sheet isn't at fault? |
02:04.35 | jsmith | Yup... |
02:04.49 | jsmith | The .fo file is good. |
02:04.50 | plarsen | in other words, you've used it before ?? |
02:04.54 | jsmith | Oh yeah... |
02:04.57 | jsmith | Some chapters work just great |
02:05.06 | jsmith | Others cause it to have problems |
02:05.13 | plarsen | want me to give it a try? |
02:05.14 | jsmith | Oh, and it doesn't like graphics either. |
02:05.16 | jsmith | Sure... |
02:05.29 | plarsen | email to plarsen@famlarsen.homelinux.com |
02:06.54 | jsmith | I'm posting it on my webserver |
02:07.05 | jsmith | In just a second, it'll be at http://www.jaredsmith.net/atfot2/ |
02:07.19 | jsmith | Anybody who can read FO is welcome to look at it ;-) |
02:08.49 | plarsen | I see figs/ only ? |
02:09.36 | jsmith | It's still uploading |
02:09.42 | jsmith | (slow internet connection, big file) |
02:09.49 | plarsen | ahhh, ok |
02:10.36 | plarsen | I tried to figure out docbook. Didn't manage to grasp it in 1 hour, so I left it alone ;) |
02:10.37 | plarsen | lol |
02:11.01 | jsmith | Oh, it's easy! |
02:11.06 | jsmith | <book> |
02:11.16 | jsmith | <PROTECTED> |
02:11.29 | jsmith | <PROTECTED> |
02:11.40 | jsmith | <PROTECTED> |
02:11.45 | jsmith | <PROTECTED> |
02:11.48 | jsmith | </book> |
02:11.57 | jsmith | There you go -- your first book in DocBook |
02:12.11 | plarsen | well, my needs were a little more "telling" than that ;) |
02:12.23 | plarsen | Images, section numbering, references etc. |
02:12.46 | jsmith | Section numbering happens automagically |
02:12.53 | jsmith | Images are quite simple |
02:12.58 | jsmith | references are even easier |
02:13.07 | jsmith | Here's an image: |
02:13.35 | jsmith | <PROTECTED> |
02:13.36 | jsmith | <PROTECTED> |
02:13.36 | jsmith | <PROTECTED> |
02:13.37 | jsmith | <PROTECTED> |
02:13.39 | jsmith | <PROTECTED> |
02:13.41 | jsmith | <PROTECTED> |
02:13.41 | plarsen | I got the fo file. Do yo uhave some data to play with? |
02:13.43 | jsmith | <PROTECTED> |
02:13.45 | jsmith | <PROTECTED> |
02:13.58 | jsmith | What type of data? |
02:14.05 | jsmith | It should all be in the .fo file |
02:14.16 | jsmith | Except for the figures, which are in the figs directory |
02:14.49 | plarsen | ahhh ... ok, that's what my system outputs ;) |
02:14.51 | plarsen | hang on ... |
02:15.05 | jsmith | Oh, I thought your system took an fo file and made a PDF |
02:15.15 | jsmith | I can make the fo file just fine using xsltproc |
02:15.38 | plarsen | well, it takes xml - gives me a gui - I design the layouts, map the xml to it, it generates the fo and presto, I type run and got a pdf |
02:15.50 | plarsen | It just automates the process |
02:16.22 | plarsen | I take the xslt and fo file, and plug them onto our server. The XML is generated directly from the DB, and the result is a served up PDF |
02:17.32 | plarsen | hmmm - gui won't open it ;) hang on. |
02:19.27 | plarsen | so much for that idea. No reverse in there ... back to the good old command line :) |
02:51.10 | plarsen | grrr - I really hate jar files .... |
02:51.19 | plarsen | or at least manifest stuff |
02:51.37 | plarsen | it refuses to find the fop libs ... regardless of what I put in CLASSPATH, command line etc. |
02:57.14 | jsmith | Ok, I may have fixed my problem |
02:57.21 | jsmith | using a newer version of FOP |
02:57.39 | jsmith | java -jar /path/to/fop.jar -fo book.fo -pdf book.pdf |
03:02.19 | plarsen | cool ... |
03:02.43 | plarsen | I'm still trying to convince fop.jar to execute in the first place :( it will not find the libs right under it's nose. |
03:05.24 | plarsen | turns out "smarty" here upgraded/patched xslfast 4-5 months ago, and I haven't looked at it since :( |
03:05.34 | plarsen | got the fop libs from it. |
03:06.26 | jsmith | Ah... it's no big deal... I'm getting FOP to work for me again |
03:06.56 | plarsen | :) well, that's what counts |
03:06.56 | jsmith | (although it would be nice if the nice friendly jpackage folks would package it up) |
03:29.12 | plarsen | well, time to try to get some sleep.... |
03:34.07 | *** join/#fredlug jsmith (n=jsmith@70.5.224.60) |
04:59.51 | *** join/#fredlug jsmith-away (n=jsmith@216.194.124.228) |
06:32.21 | *** join/#fredlug quigleymd (n=Matt@192.sub-70-209-200.myvzw.com) |
06:32.37 | quigleymd | stickster: goodevening! |
11:37.03 | *** join/#fredlug IrishW0lf_afk (n=william@70-41-145-17.cust.wildblue.net) |
12:36.13 | *** join/#fredlug jsmith (n=jsmith@h460523f0.area3.spcsdns.net) |
13:54.48 | *** join/#fredlug stickster (n=stickste@fedora/stickster) |
22:58.26 | *** join/#fredlug IrishW0lf_afk (n=william@70-41-145-17.cust.wildblue.net) |