date:20160520


On 5/18/2016 10:27 AM, Darac Marjal wrote:

On Wed, May 18, 2016 at 09:23:34AM -0500, Richard Owlett wrote:

https://packages.debian.org/jessie/apparmor is uninformative.

It says:
"This provides the system initialization scripts needed to use
the AppArmor Mandatory Access Control system, including the
AppArmor Parser which is required to convert AppArmor text
profiles into machine-readable policies that are loaded into
the kernel for use with the AppArmor Linux Security Module."

There is a link to http://wiki.apparmor.net/index.php/Main_Page
which gives no hints!

My application question.
1. If BrowserA and BrowserB are installed, can AppArmor prevent
BrowserB from
  connecting to the internet independent of user permissions?
2. Can AppArmor default to preventing *ALL* but specific
applications from
  connecting to the internet independent of user permissions?


 From that wiki page: "AppArmor security policies completely
define what system resources individual applications can access,
and with what privileges."


That statement reminds me of one of George Orwell's characters 
saying "It means whatever I want it to mean."





"Network access" is, although not explicitly stated on that page,
a system resource. So yes, you can prevent, say, an application
called "firefox" from accessing the network entirely. Looking
deeper, I see
http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Network_rules
which defines the network rules of AppArmor. It appears that you
should be able to constrain said application to only connect to
certain addresses.


The very first line of the page said "Don't trust me." 
[paraphrased ;]
I was looking for descriptive information aimed at a general 
audience. I was looking for guidance on "suitability for intended 
use". A "No" to my narrowly stated question would have eliminated 
AppArmor. To actually want to use it is a wider question. I was 
hoping for a response from an actual user.




Just a warning that you need to think carefully about the rules
you implement. Can a user get around your rules by renaming
"firefox" to "iceweasel"? If, instead, you put blanket rules in
place check that you aren't blocking other networking functions
(like X talking over the local network, for example). AppArmor
does, however, have a "complain" mode where, rather than
enforcing rules it will log violations to syslog. You can use
this to guide your profile creation.


After initially reading your post I found something that hinted 
that "blacklist all except explicit exceptions" would be 
possible. More reading required.


Thank you for your time.

Re: What can AppArmor do?

On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> That statement reminds me of one of George Orwell's characters
> saying "It means whatever I want it to mean."

No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.

“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means 
just what I choose it to mean—neither more nor less.” “The question is,” said 
Alice, “whether you can make words mean so many different things.” “The 
question is,” said Humpty Dumpty, “which is to be master—that’s all.”

Lisi

Re: What can AppArmor do?


On 5/20/2016 10:08 AM, Lisi Reisz wrote:

On Friday 20 May 2016 15:57:27 Richard Owlett wrote:

That statement reminds me of one of George Orwell's characters
saying "It means whatever I want it to mean."


No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.

“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means
just what I choose it to mean—neither more nor less.” “The question is,” said
Alice, “whether you can make words mean so many different things.” “The
question is,” said Humpty Dumpty, “which is to be master—that’s all.”

Lisi



*ROFL* Thank you.
"Alice Through The Looking Glass" is a more suitable metaphor for 
'nix documentation ;/

Re: kvm amd nested

2016-05-20 Thread Paras pradhan

On the vm: The problem is: kvm module is loaded but not kvm_amd. When I
do:

modprobe kvm_amd

I get

modprobe: ERROR: could not insert 'kvm_amd': Invalid argument

On the server: Looks like something is missing even though it says nested
on "1".




On Thu, May 19, 2016 at 10:49 AM, Linux-Fan  wrote:

> [Wed, 18 May 2016 16:59:02 -0500] Paras pradhan
>  wrote:
> > On a Jessie host I can see nested kvm is set
> >
> > ---
> >
> > cat /sys/module/kvm_amd/parameters/nested
> >
> > 1
> >
> > --
> >
> > On the virtual machines  I can see 'svm' but not
> > seeing /sys/module/kvm_amd . When I try to create a VM,  I get
> > Warning : KVM is not available. KVM kernel modules are not loaded.
> > lsmod |grep kvm says its loaded.
> >
> >
> > What did I miss?
>
> [...]
>
> You need to expose the virtualization feature the VMs. For Intel
> machines, it works as described on my page at
>
> http://masysma.lima-city.de/37/how_to_transition_from_virtualbox_to_kvm.xhtml
> (Section ``Enabling Nested Virtualization...'')
>
> For AMD, I do not know how to do it, but if I understand it correctly,
> it cannot be too much of a difference.
>
> HTH
> Linux-Fan
>
> --
> http://masysma.lima-city.de/
>

Re: What can AppArmor do?

On Friday 20 May 2016 16:45:03 Richard Owlett wrote:
> On 5/20/2016 10:08 AM, Lisi Reisz wrote:
> > On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> >> That statement reminds me of one of George Orwell's characters
> >> saying "It means whatever I want it to mean."
> >
> > No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> >
> > “When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it
> > means just what I choose it to mean—neither more nor less.” “The question
> > is,” said Alice, “whether you can make words mean so many different
> > things.” “The question is,” said Humpty Dumpty, “which is to be
> > master—that’s all.”
> >
> > Lisi
>
> *ROFL* Thank you.
> "Alice Through The Looking Glass" is a more suitable metaphor for
> 'nix documentation ;/

:-)

Lisi

precompiled parallelfdtd solver for debian

2016-05-20 Thread Abdelkader Belahcene

Hi,
I want to use the parallelfdtd (parallel  Finite Difference Time Domain
(FDTD) ) solver , I got the source from github.
But the compilation is hard, and haven't succeed.

I want a precompiled for debian (ubuntu).
meep  seems is the compiled version,  but there are many packages meep-lam4
meep-openmpi.

Someone can help me. thanks a lot

best regards

Re: /etc/init.d/networking does not start everything in /etc/network/interfaces

2016-05-20 Thread Rodary Jacques

I read quite a lot of the answers to your post, and I still think there is a 
problem, not 
linked to the kernel's interface name name. I have a wifi interface named 
*everywhere* 
wlan0. It isn't found  by network-pre.target, network-target or 
networking-service, I 
don't know which one. What I know is bind9 (named in fact) can't start, because 
/etc/insserv.conf asks for $network to start $named; after boot, when network 
is 
started there is no problem starting named by hand with: 
"named -u named -t /my-chroot-dir -c /etc/named.conf"
 but bind9.service doesn' start and tells me:
 Drop-In: /run/systemd/generator/bind9.service
└─50-insserv.conf-$named.conf
I suppose it's a bug, but as it works like this!! (See bind9-named post in 
debian-user-
french list
Jacques

Re: Need Urgently solution or advice - start to give up on Debian

2016-05-20 Thread Bret Busby

On 19/05/2016, deloptes  wrote:
> Ralph Sanchez wrote:
>
>> His problem is that he gets a garbled or corrupted screen instead of any
>> kind of startup unless he boots into some kind of safe mode or opens the
>> grub command prompt, that's what I've surmised. I had that happen my
>> first
>> install, and it just happened to be bad luck and poor connection quality,
>> along with being a total novice Linux user.
>
> And he'll have the problem on each distro with this computer.
>
> He needs to know how one can install proprietary NVidea or setup Xorg to
> use
> the linux nuovo driver.
>
> I think if a newbie gives up from the second time, it's better he gives up
> forever.
>
> The younger people (I assume he's younger) are not patient and have this
> go - buy - throw away mentality. With this mentality one is better off with
> Apple.
>
> If he's patient, he would listen and find the solution - it is in fact very
> simple. He could use also the framebuffer.
>
> Just try
> apt-get install nvidia-driver
> this is NVIDIA metapackage
>
> regards
>
>

I do not understand - the original poster does not clarify - what was
the problem with Ubuntu.

I make this point because, as some of you may recall, I have an Acer
V3-772G, with an NVidia GPU, for which, as I found, the only operating
system other than MS Windows, that had a driver, was Ubuntu Linux.

If the original poster does not like the interface, that can be
changed; I did not like the default Ubuntu Linux interface, so I
installed UbuntuMATE, with the MATE interface, to provide an interface
with which I was more comfortable.

Simply stating that a person is "disappointed" with a particular
operating system, is as helpful as complaining that the person has a
problem, without stating what it is.

The original poster needs to provide clarification - is the screen the
wrong colour, or the default font, too small, or the taskbar in the
wrong place, or the name "Ubuntu", to weird for the original poster,
that the original poster has as a reason for being "disappointed" with
Ubuntu?

-- 

Bret Busby
Armadale
West Australia

..

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992

Re: /etc/init.d/networking does not start everything in /etc/network/interfaces

On Friday 20 May 2016 18:08:37 Rodary Jacques wrote:
> I read quite a lot of the answers to your post, and I still think there is
> a problem, not linked to the kernel's interface name name. I have a wifi
> interface named *everywhere* wlan0. It isn't found  by network-pre.target,
> network-target or networking-service, I don't know which one. What I know
> is bind9 (named in fact) can't start, because /etc/insserv.conf asks for
> $network to start $named; after boot, when network is started there is no
> problem starting named by hand with:
> "named -u named -t /my-chroot-dir -c /etc/named.conf"
>  but bind9.service doesn' start and tells me:
>  Drop-In: /run/systemd/generator/bind9.service
> └─50-insserv.conf-$named.conf
> I suppose it's a bug, but as it works like this!! (See bind9-named post in
> debian-user- french list


That was your problem, but it cannot be Gene's, because he is running Wheezy.

Lisi

Re: Need Urgently solution or advice - start to give up on Debian

On Sat 21 May 2016 at 01:44:02 +0800, Bret Busby wrote:

> On 19/05/2016, deloptes  wrote:
> >
> > And he'll have the problem on each distro with this computer.
> 
> I do not understand - the original poster does not clarify - what was
> the problem with Ubuntu.

His issue with Ubuntu is completely irrelevant. He did not make a big
thing about it, so neither need you.

> I make this point because, as some of you may recall, I have an Acer
> V3-772G, with an NVidia GPU, for which, as I found, the only operating
> system other than MS Windows, that had a driver, was Ubuntu Linux.

I do not recall any of this. Is it relevant to the OP's issue?

> If the original poster does not like the interface, that can be
> changed; I did not like the default Ubuntu Linux interface, so I
> installed UbuntuMATE, with the MATE interface, to provide an interface
> with which I was more comfortable.

This doesn't look relevant to anything.
 
> Simply stating that a person is "disappointed" with a particular
> operating system, is as helpful as complaining that the person has a
> problem, without stating what it is.

It's an expression of feelings; human beings tend to do things like
that.

> The original poster needs to provide clarification - is the screen the
> wrong colour, or the default font, too small, or the taskbar in the
> wrong place, or the name "Ubuntu", to weird for the original poster,
> that the original poster has as a reason for being "disappointed" with
> Ubuntu?

The OP is beginning to wish he had not mentioned Ubuntu.


> 
> 
> -- 
> 
> Bret Busby
> Armadale
> West Australia
> 
> ..
> 
> "So once you do know what the question actually is,
>  you'll know what the answer means."
> - Deep Thought,
>  Chapter 28 of Book 1 of
>  "The Hitchhiker's Guide to the Galaxy:
>  A Trilogy In Four Parts",
>  written by Douglas Adams,
>  published by Pan Books, 1992
> 
> 
>

Re: precompiled parallelfdtd solver for debian


On 5/20/2016 12:12 PM, Abdelkader Belahcene wrote:

Hi,
I want to use the parallelfdtd (parallel  Finite Difference Time
Domain (FDTD) ) solver , I got the source from github.
But the compilation is hard, and haven't succeed.

I want a precompiled for debian (ubuntu).
meep  seems is the compiled version,  but there are many packages
meep-lam4 meep-openmpi.

Someone can help me. thanks a lot

best regards


I can't answer your explicit question.
However both Scilab and Maxima are in the Debian repository.
Would one of them solve an immediate problem?
I suspect they be slower than a purpose built package.
But they do say "any port in a storm".
HTH

Re: precompiled parallelfdtd solver for debian

On Fri 20 May 2016 at 14:01:33 -0500, Richard Owlett wrote:

> On 5/20/2016 12:12 PM, Abdelkader Belahcene wrote:
> >Hi,
> >I want to use the parallelfdtd (parallel  Finite Difference Time
> >Domain (FDTD) ) solver , I got the source from github.
> >But the compilation is hard, and haven't succeed.
> >
> >I want a precompiled for debian (ubuntu).
> >meep  seems is the compiled version,  but there are many packages
> >meep-lam4 meep-openmpi.
> >
> >Someone can help me. thanks a lot
> >
> >best regards
> 
> I can't answer your explicit question.

So why respond?

> However both Scilab and Maxima are in the Debian repository.

True.

> Would one of them solve an immediate problem?

He should stick his neck out and install meep. Nothing is irreversible
and there are three or four other packages to go at if it does not do
what he wants.

> I suspect they be slower than a purpose built package.
> But they do say "any port in a storm".

Are we due for a cylone? I was looking forward to a picnic tomorrow.

Re: precompiled parallelfdtd solver for debian


On 5/20/2016 2:12 PM, Brian wrote:

On Fri 20 May 2016 at 14:01:33 -0500, Richard Owlett wrote:


On 5/20/2016 12:12 PM, Abdelkader Belahcene wrote:

Hi,
I want to use the parallelfdtd (parallel  Finite Difference Time
Domain (FDTD) ) solver , I got the source from github.
But the compilation is hard, and haven't succeed.

I want a precompiled for debian (ubuntu).
meep  seems is the compiled version,  but there are many packages
meep-lam4 meep-openmpi.

Someone can help me. thanks a lot

best regards


I can't answer your explicit question.


So why respond?



Because I not only *READ* his question but attempted to 
understand why he asked.

I then did some research and concluded that
  1. Scilab and/or Maxima may work
  2. Both are packaged in such a way as to circumvent what I 
suspect is a problem.

  3. I also avoid speaking *EX CATHEDRA*

Re: Google Authenticator

2016-05-20 Thread Jochen Spieker

Laurens Blankers:
> 
> Two days ago an article was posted on Linux.com about setting up
> 2-factor authentication using the libpam-google-authenticator package [1].
> 
> Looking at the Debian package [2] I noticed it was last updated August
> 2013, however the source at GitHub has been updated as recently as 2
> days ago. Browsing through the commit log [3] indicates lots of issues
> related to memcpy, malloc, and SIGSEGV have been fixed since 2013.
> 
> How do I determine whether whether this package is safe to use?

You already have all the information. Since the package was not updated
in Debian since 2013 even though upstream published significant changes,
you should consider it abandoned. I am not completely sure, but I think
somebody should file an RC bug so that it doesn't become part of the
next Debian stable unless a new upstream version is uploaded.

See also bug #771140 from 18 months ago.

J.
-- 
After the millenium I will shoot to kill.
[Agree]   [Disagree]
 


signature.asc
Description: Digital signature

Re: RANT: Virtual filesystems are getting out of control

2016-05-20 Thread Jochen Spieker

Albin Otterhaell:
> 
> $ lsblk
> 
> should be clean and structured.

Nice! How didn't I know about that? It helps especially with complex
device structures involving LVM and LUKS.

J.
-- 
When I am at nightclubs I enjoy looking at other people and assessing
their imagined problems.
[Agree]   [Disagree]
 


signature.asc
Description: Digital signature

Re: precompiled parallelfdtd solver for debian

On Fri 20 May 2016 at 15:08:38 -0500, Richard Owlett wrote:

> On 5/20/2016 2:12 PM, Brian wrote:
> >On Fri 20 May 2016 at 14:01:33 -0500, Richard Owlett wrote:
> >
> >>On 5/20/2016 12:12 PM, Abdelkader Belahcene wrote:
> >>>Hi,
> >>>I want to use the parallelfdtd (parallel  Finite Difference Time
> >>>Domain (FDTD) ) solver , I got the source from github.
> >>>But the compilation is hard, and haven't succeed.
> >>>
> >>>I want a precompiled for debian (ubuntu).
> >>>meep  seems is the compiled version,  but there are many packages
> >>>meep-lam4 meep-openmpi.
> >>>
> >>>Someone can help me. thanks a lot
> >>>
> >>>best regards
> >>
> >>I can't answer your explicit question.
> >
> >So why respond?
> >
> 
> Because I not only *READ* his question but attempted to understand why he
> asked.

Not very succesfully. The OP appears to know what he wants but is
undecided which one of the meep* packages he wants, My advice is to
install meep and go from there. He can always uninstall it and go for
another related package if it is not suitable.

> I then did some research and concluded that
>   1. Scilab and/or Maxima may work

Why suggest something completely different from what the OP wants? 

>   2. Both are packaged in such a way as to circumvent what I suspect is a
> problem.

Others may follow that. I don't.

>   3. I also avoid speaking *EX CATHEDRA*

We are all fallible. Its just that some are more fallible than others. :)

Re: Need Urgently solution or advice - start to give up on Debian

2016-05-20 Thread Bret Busby

On 21/05/2016, Brian  wrote:
> On Sat 21 May 2016 at 01:44:02 +0800, Bret Busby wrote:
>
>> On 19/05/2016, deloptes  wrote:
>> >
>> > And he'll have the problem on each distro with this computer.
>>
>> I do not understand - the original poster does not clarify - what was
>> the problem with Ubuntu.
>
> His issue with Ubuntu is completely irrelevant. He did not make a big
> thing about it, so neither need you.
>
>> I make this point because, as some of you may recall, I have an Acer
>> V3-772G, with an NVidia GPU, for which, as I found, the only operating
>> system other than MS Windows, that had a driver, was Ubuntu Linux.
>
> I do not recall any of this. Is it relevant to the OP's issue?
>
>> If the original poster does not like the interface, that can be
>> changed; I did not like the default Ubuntu Linux interface, so I
>> installed UbuntuMATE, with the MATE interface, to provide an interface
>> with which I was more comfortable.
>
> This doesn't look relevant to anything.
>
>> Simply stating that a person is "disappointed" with a particular
>> operating system, is as helpful as complaining that the person has a
>> problem, without stating what it is.
>
> It's an expression of feelings; human beings tend to do things like
> that.
>
>> The original poster needs to provide clarification - is the screen the
>> wrong colour, or the default font, too small, or the taskbar in the
>> wrong place, or the name "Ubuntu", to weird for the original poster,
>> that the original poster has as a reason for being "disappointed" with
>> Ubuntu?
>
> The OP is beginning to wish he had not mentioned Ubuntu.
>


So, you are the original poster, and you do not want a solution to the problem?

Okay then.

Either that, or you are simply a troll.

-- 

Bret Busby
Armadale
West Australia

..

"So once you do know what the question actually is,
 you'll know what the answer means."
- Deep Thought,
 Chapter 28 of Book 1 of
 "The Hitchhiker's Guide to the Galaxy:
 A Trilogy In Four Parts",
 written by Douglas Adams,
 published by Pan Books, 1992

Re: Need Urgently solution or advice - start to give up on Debian

On Friday 20 May 2016 23:45:30 Bret Busby wrote:
> So, you are the original poster, and you do not want a solution to the
> problem?

He wanted a solution to the problem of installing Debian.  You did not offer 
one.
>
> Okay then.
>
> Either that, or you are simply a troll.

The OP could have gone to the Ubuntu list for an Ubuntu solution.  He came 
here to the Debian list for a Debian solution because he didn't like Ubuntu.  
There are lots of reasons why someone might not like Ubuntu.

Troll - "someone who leaves an intentionally annoying message on the internet, 
in order to get attention or cause trouble".  It fits you a lot better than 
it fits Brian.

Lisi

Re: Need Urgently solution or advice - start to give up on Debian

On Sat 21 May 2016 at 06:45:30 +0800, Bret Busby wrote:

> On 21/05/2016, Brian  wrote:
> >
> > The OP is beginning to wish he had not mentioned Ubuntu.
> >
> So, you are the original poster, and you do not want a solution to the 
> problem?
> 
> Okay then.
> 
> Either that, or you are simply a troll.

None of those choices appeal to me. Are there any more on offer?

Re: Need Urgently solution or advice - start to give up on Debian

On Friday 20 May 2016 23:59:44 Brian wrote:
> On Sat 21 May 2016 at 06:45:30 +0800, Bret Busby wrote:
> > On 21/05/2016, Brian  wrote:
> > > The OP is beginning to wish he had not mentioned Ubuntu.
> >
> > So, you are the original poster, and you do not want a solution to the
> > problem?
> >
> > Okay then.
> >
> > Either that, or you are simply a troll.
>
> None of those choices appeal to me. Are there any more on offer?

:-))

Lisi

Could we discuss a potential Collaboration

2016-05-20 Thread Annie Harris

Hello

Hope you are well today.

My name's Annie and I am part of the team here at Contexxtual PR. We specialize in high impact online content, and we're looking for new websites to partner with.

I'm emailing to enquire if you would be interested in working with us; we cover content on a wide range of topics and would be looking to provide regular articles for your site.

Our aim is to create content to suit your style and tone, we want to engage your readers and will be looking to include a link to our client in the article.

Please do let me know if this is something you'd like to discuss further, I hope to hear from you soon.

Kind Regards,

Annie
www.contexxtual.com

This e-mail message (and its attachments) may contain legally privileged information and is
intended only for the individual named addressee. You should not review, disseminate, distribute or
copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail
by mistake and delete this e-mail from your system. E-mail transmissions cannot be guaranteed to be
secure or faultless as information could be intercepted, corrupted, lost, destroyed, arrive late,
incomplete or contain viruses. The sender therefore does not accept responsibility for any errors
or omissions in the contents of the message. Note: Our team has manually researched your website
and shortlisted it as Potential Advertising destination. However, in case we've misjudged your
website and you're not interested or do not offer advertising at all, kindly respond with "NOT
INTERESTED" or "UNSUBSCRIBE" and our team will NEVER contact you again.

Securing an email server.

2016-05-20 Thread Logan Erbst

I am running a private email server on a VPS using Jessie, and I was wondering if anyone here has any tips for securing it.
SSH root access is disabled.
SSL/TLS connections are enabled on all connections, incoming and outgoing. 
Plaintext auth is enables (need to disable it on unencrypted connections) 
Any other tips?

Re: precompiled parallelfdtd solver for debian