Fedora Core 3 and Mail - Forums Linux |
- Fedora Core 3 and Mail
- Cleaning House
- Postfix + SASL [repost]
- running/executing foo.jar
- Installing Red Hat 9.0 on AMD Machine.
- Fedora Core 3 Installation Hangs
- undesired modules
- Knoppix 3.8 - Install to HD
- SeLinux: syslogd cannot access /var/run? Needs nfs_t:dir search?
- my fax modem under windows
- what about kanotix?
Posted: 25 May 2005 08:49 PM PDT Michael Heiming wrote: It seems to me this would be much more useful info to a newbie if you explained what and where "dag" is, since it is not a standard part of the yum setup on Fedora-3. Eg I have ======================================= [tim@martha ~]$ cat /etc/yum.repos.d/dag.repo [dag] name=Dag RPM Repository for Fedora Core baseurl=http://apt.sw.be/fedora/$releasever/en/$basearch/dag gpgcheck=1 enabled=0 ======================================= -- Timothy Murphy e-mail (<80k only): tim /at/ birdsnest.maths.tcd.ie tel: +353-86-2336090, +353-1-2842366 s-mail: School of Mathematics, Trinity College, Dublin 2, Ireland |
Posted: 24 May 2005 09:06 AM PDT Michael Heiming wrote: Aha! Yep, I forgot "this isn't windoze" .... you know that being a Win user is like being an addict. You always want to go back to that needle. Anyway, you advice sounds great. I read about the rpm and yum remove but was nervous ... now I know why! I'll start with a few of the more obvious culprits and get back to the group. Thanks! Dave |
Posted: 24 May 2005 08:02 AM PDT In comp.os.linux.networking Dan <com>: [..] In addition, the OP might like to check the postfix FAQ and if this doesn't help try the postfix mailing list, more likely to get specific help, then here. Good luck -- Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94) mail: echo qr | perl -pe 'y/a-z/n-za-m/' #bofh excuse 372: Forced to support NT servers; sysadmins quit. |
Posted: 24 May 2005 03:06 AM PDT No_One wrote: .... thanks, Thufir |
Installing Red Hat 9.0 on AMD Machine. Posted: 24 May 2005 01:50 AM PDT On Tue, 24 May 2005 06:53:40 -0400, "Nico Kadel-Garcia" <net> wrote: I think it is "redhat-config-xfree86" to run up the x configurator. -- Benway Remove the SPAM |
Fedora Core 3 Installation Hangs Posted: 23 May 2005 10:52 PM PDT thanx for ya'll suggestions. i tried to install WinXP too and got a similiar hanging/freezing. And it's not bad RAM because I've successfully installed Fedora Core 3 on a Dell Optiplex GX110 (PIII 667MHz) with the same RAM modules. I'm told the MSI motherboard and/or the 1 GHz CPU was fried before I received it. So I'm assuming one of those are the actual culprit. Anyways, the Dell system seems to be running it okay, so I'm gonna stick with this setup for now (maybe even test the 1GHz CPU in the Dell mobo later). Thanks again people "August Karlstrom" <se> wrote in message news:twGke.25417$telia.net... |
Posted: 23 May 2005 03:54 PM PDT In comp.os.linux.setup Giovanni <net.it>: That's not much, the slowest system I keep around is a PII-350 (196MB memory), bought it used some years ago for a few bucks (ebay). It's just for playing around, but have to admit, it runs Debian (Sarge) with KDE3 like a charm.;) The key is of course enough memory, bought it with 128MB and put in a spare 64 MB stick flying around. IIRC it can't handle more. I'd look out for something in the lines used if you need a more powerful box, amazing how many of those systems are sold for more or less nothing. Not uncommon systems with perfectly working hardware but a totally broken doze on it are replaced with a new system (doze preinstalled), just because people are unable to recover/reinstall the box. -- Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94) mail: echo qr | perl -pe 'y/a-z/n-za-m/' #bofh excuse 69: knot in cables caused data stream to become twisted and kinked |
Posted: 23 May 2005 02:06 PM PDT Thanks Jimbo - it was under the Penguin Icon > Configure > Create PERSISTENT Knoppix Image It asked me which partition and it seemed to install fine. Now, my question is how do I get in? When I remove the disk and restart - I can only choose Windows XP and Windows 98. How do I get into Knoppix, and if possible - How do I add Knoppix into this list? |
SeLinux: syslogd cannot access /var/run? Needs nfs_t:dir search? Posted: 22 May 2005 04:09 PM PDT I just found the cause of this problem. Reiserfs and selinux combined do not work, but support for this combination will appear in the upcoming linux kernel 2.6.12. The problem is that selinux relies on "xattr" file attributes, and in reiserfs, xattr attributes are stored in separate files. As the selinux code tries to access the xattr attributes of a file, selinux is triggered again to allow or deny access to the xattr file. This leads to a bad deadlock. In order to work around the deadlock, the policies distributed with fedora contain a mapping that maps all files on reserfs systems to system_u:object_r:nfs_t. This is where the "nfs_t" comes from. This mapping is applied to all files without accessing any xattr attributes of the files. However, the ls -Z option does access the xattr attributes of the files as stored in the fs, and shows them. Similarly, the selinux programs to label or relabel the file systems do set xattr attributes of the files without regard to this mapping. In this way, when investigating the problem, I could not see where the "nfs_t" came from. The files appeared to have the correct attributes. While waiting for the next kernel version to appear as an official fedora rpm package, I have: 1. Installed selinux-policy-targeted-sources and checkpolicy 2. Run "dmesg | grep 'audit.*denied' | audit2allow 3. Added the output to /etc/selinux/targeted/src/policy/domains/program/syslogd.te 4. In /etc/selinux/targeted/src/policy, run "make" and "make reload" 5. Run service syslogd restart 6. Repeated steps 2-5 until syslogd starts cleanly and no new audit messages appeared. This is quite clumsy, because as soon as syslogd gets a new permission, it fails on the next operation. Many rounds are required. A couple of other daemons also need access to /var, and so more rounds are required. There is a better approach, to set selinux in permissive mode where all accesses are permitted, but also logged. This log can be fed into audit2allow to generate the list of permissions required to run in non-permissive mode. This is still not perfect if a daemon does certain accesses only in particular circumstances. But I have not yet investigated how this is done. Anyway, the permissions I have ended up with so far are: allow dhcpd_t nfs_t:dir { add_name remove_name search write }; allow named_t nfs_t:dir { add_name remove_name search write }; allow ndc_t nfs_t:dir { search }; allow ntpd_t nfs_t:dir { add_name search write }; allow portmap_t nfs_t:dir { add_name search write }; allow syslogd_t nfs_t:dir { add_name remove_name search write }; allow dhcpd_t nfs_t:file { append create getattr link lock read rename unlink write }; allow named_t nfs_t:file { append create getattr lock read unlink write }; allow ntpd_t nfs_t:file { append create getattr lock read write }; allow portmap_t nfs_t:file { append create getattr lock read }; allow syslogd_t nfs_t:file { append create getattr ioctl lock read unlink write }; When the next kernel arrives I will have to remove the mapping to nfs_t. The mapping is in the file genfs_contexts in the src/policy directory. Run make and make reload as above. When a new version of the rpm package selinux-policy-targeted appears, you should probably remove the *-sources package, or else the new policy will not be installed. (I guess it will appear as *.rpmnew.) Regards. |
Posted: 22 May 2005 04:57 AM PDT On 05/22/05 13:57, nick wrote: If you need to setup a dialup connection try pppsetup or kppp (under KDE). If it is an external modem (a real modem) and you need fax capability look for HylaFax <http://www.hylafax.org/> or mgetty+sendfax <http://home.leo.org/~doering/mgetty/> Ciao Giovanni -- A computer is like an air conditioner, it stops working when you open Windows. Registered Linux user #337974 <http://counter.li.org/> |
Posted: 21 May 2005 02:27 PM PDT Frank Sandig wrote: Highly recommended. Has a good forum too. http://forum.kanotix.net/ |
You are subscribed to email updates from TextNData Forums - Linux To stop receiving these emails, you may unsubscribe now. | Email delivery powered by Google |
Google Inc., 20 West Kinzie, Chicago IL USA 60610 |