Posted by: in Debian-User on May 22nd, 2015
Very odd bug this. Caja opens fine without qmmp installed. But when qmmp is installed and you want to browse with caja, the qmmp player launches instead.
Where do I post this?
there are already some help web sites around, e.g.:
Logjam: How Diffie-Hellman Fails in Practice https://weakdh.org/
(browser check; for iceweasel one can de-activate security.ssl3.dhe_dss_aes_128_sha, security.ssl3.dhe_rsa_aes_128_sha, security.ssl3.dhe_rsa_aes_256_sha via about:config)
Logjam: PFS Deployment Guide https://weakdh.org/sysadmin.html
(tips for server apache, nginx, dovecot, …)
Secure Secure Shell https://stribika.github.io/2015/01/04/secure-secure-shell.html
What about DHE hardening for exim4 SMTP server?
hi everybody, This morning, I found that my sound cards disapeared from my Jessie desktop. lspci | grep -i audio gives:
00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio Controller (rev 02)
01:00.1 Audio device: NVIDIA Corporation Device 0fbc (rev a1)
05:00.0 Multimedia audio controller: Creative Labs SB Live! EMU10k1 (rev 07)
but aplay -l:
aplay: device_list:268: no soundcards found… I also noticed that /proc/asounnd also disapeared. the “snd-cs46xt” command restored it but
cat /proc/asound/cards still gives:
— no soundcards -
Is there anyone by chance configured systemimager boot through pxe on debian jessie ?
I have already configured the TFTPd-hpa server which now provide debian installer images through pxe but no success yet with systemimager. No available docs are old. Any help is very much appreciated.
I’m getting (and have been for a while) log entries from my slave nameservers like:
dumping master file: /var/cache/bind/tmp-0EIP3LrP0G: open: permission denied
I also see problems with updating modification times of incoming files from masters.
Debian Wheezy, Bind9
There are hundreds of discussions of this problem on the ‘Net, and as one of them says, “I’ve tried them all.” Most had to do with fixing named.conf* and permissions on directories:
root@srv:~# egrep directory /etc/bind/named.conf.options directory “/var/cache/bind”;
root@srv:~# ls -ld /var drwxr-xr-x 12 root root 4096 Jul 15 2014 /var root@srv:~# ls -ld /var/cache/
drwxr-xr-x 16 root root 4096 Oct 11 2014 /var/cache/
root@srv:~# ls -ld /var/cache/bind/
drwxrwxr-x 2 bind bind 4096 May 21 10:09 /var/cache/bind/
Permissions and directories look OK to me.
I gave user bind a password and a live shell, logged in, and:
root@srv:~# su – bind bind@srv:~$ pwd
/var/cache/bind bind@srv:~$ touch /var/cache/bind/tmp-0EIP3LrP0G
bind@srv:~$ ls -lh /var/cache/bind/tmp-0EIP3LrP0G
-rw-r–r– 1 bind bind 0 May 21 12:54 /var/cache/bind/tmp-0EIP3LrP0G
It seems to be able to create files.
I added ‘bind’ to my groups and:
ghe@srv:~$ touch /var/cache/bind/test ghe@srv:~$ ls -lh /var/cache/bind/test
-rw-r–r– 1 ghe ghe 0 May 21 13:25 /var/cache/bind/test
One interesting fix I saw involved SELinux; it said that — I’ve been at this for a while, so details are fuzzy — SELinux changes Bind functionality so it can’t write some things. But the solution involved sesetbool (approximately; a program to set boolean vars in SELinux) and according to bash and man, the executable doesn’t exist on my servers. I can see traces of SELinux here, but nothing I can figure out how to look at.
None of my other server software has this problem, just Bind.
It seems that libmp3lame0 (3.99.5+repack1-7) does not play nice. I’ve tried this using two different i386-based (AMD Athlon) systems and both act the same way. Reverting to libmp3lame0 (3.99.5+repack1-3)
fixes the problem.
Hi all and sorry for the OT
On same network 192.168.1.0/24 I can put 2 AP with each one own dhcp server? (obviously with different range but on same network).
router IP 192.168.1.1
AP1 IP 192.168.1.2 (dhcp 192.168.100-149)
AP2 IP 192.168.1.3 (dhcp 192.168.150-199)
Thanks for help!
2 problems. Wheezy or wheezy derived installs on all 3 boxes on my local network, which I am the only user of, and all behind a dd-wrt install on the router, so I am not in the least worried about security related stuff.
Trying to apt-get purge the repos ancient amanda-common and amanda-client packages from one of my boxes so I can install the correct debs from that zmanda site.
I have been a week trying to make those ancient versions work with the recommended stable version 3.3.7p1 installs on the other 2 boxes.
I am looking at the packages sitting in /var/cache/apt/archives, that were installed by synaptic a week ago.
gene@shop:/var/cache/apt/archives$ ls|grep amanda amanda-client_1%3a3.3.1-4_i386.deb amanda-common_1%3a3.3.1-4_i386.deb
But a sudo apt-get purge amanda-common_* amanda-client_*
Reading package lists… Done Building dependency tree
Reading state information… Done E: Unable to locate package amanda-common_1%3a3.3.1-4_i386.deb E: Couldn’t find any package by regex ‘amanda-common_1%3a3.3.1-4_i386.deb’
E: Unable to locate package amanda-client_1%3a3.3.1-4_i386.deb E: Couldn’t find any package by regex ‘amanda-client_1%3a3.3.1-4_i386.deb’
Please tell me apt-get isn’t losing its mind…
I am currently “ssh -Y” into that box, and one of the display managers or X is refusing to forward the graphics for an application that must run as root, and the usual fixes are NOT working.
So, how do I fix this:
gene@shop:/var/cache/apt/archives$ sudo synaptic X11 connection rejected because of wrong authentication.
(synaptic:14317): Gtk-WARNING **: cannot open display: localhost:11.0
graphical applications that do not run as root, work fine.
Thanks for any help on this latter problem.
Cheers, Gene Heskett