users February 2017

users@lists.fedoraproject.org

105 participants
90 discussions

Apache and umask for document root
by Alex 03 Aug '22

03 Aug '22

Hi, I've set up a virtual host for a joomla website and having some permissions problems. I've seen numerous configurations online about how to set umask for the apache user, but none have worked, including creating a systemd file (/etc/systemd/system/multi-user.target.wants/httpd.service) with the following: [Unit] Description=The Apache HTTP Server After=network.target remote-fs.target nss-lookup.target [Service] Type=notify Environment=LANG=C Umask=0006 ExecStart=/usr/sbin/httpd $OPTIONS -DFOREGROUND ExecReload=/usr/sbin/httpd $OPTIONS -k graceful # Send SIGWINCH for graceful stop KillSignal=SIGWINCH KillMode=mixed PrivateTmp=true [Install] WantedBy=multi-user.target The problem is that the files are owned by the joomla user, but also need to have access (both read and write) to be able to modify some files within the document root. Does anyone have any suggestions on how to set umask for the apache user? I'm also interested in recommended permissions settings for the joomla document root. Thanks, Alex

9 35

SATA optical drives
by David Fletcher 14 Jul '22

14 Jul '22

I'm currently running FC5, will probably upgrade to F7 in a couple of months. Unfortunately my CD/DVD rewriter appears to have died, before it's even seen a dual layer disk :'( SATA hard drives run without problems for me, but now that SATA optical drives are starting to appear in the shops, would it be OK to buy one of these and get rid of another wide ribbon cable? Is anybody already running them with Fedora? Thanks for any advice/experiences. Dave F

5 4

[FC8] ssh and CAC card???
by Todd Denniston 12 Jul '22

12 Jul '22

From what I understood, the change to openssh listed in: rpm -q --changelog openssh |less as: "* Wed Jun 20 2007 Tomas Mraz <tmraz(a)redhat.com> - 4.5p1-7 - experimental NSS keys support - correctly setup context when empty level requested (#234951) " was supposed to allow the Common Access Card (CAC) to work with the shipped Fedora 8 ssh. As per NSS usual, everything is undocumented, i.e., `ssh-add --help` does not help at all, and `man ssh-add` points to `ssh-add -s reader` # ssh-add -s 0 Enter passphrase for smartcard: SSH_AGENT_FAILURE Could not add card: 0 # ssh-add -s 1 Enter passphrase for smartcard: SSH_AGENT_FAILURE Could not add card: 1 So does anyone know how to use the possible functionality, or are we reduced to reading the source? -- Todd Denniston Crane Division, Naval Surface Warfare Center (NSWC Crane) Harnessing the Power of Technology for the Warfighter

2 5

Changing date with procmail
by Michael A. Peters 08 Jun '22

08 Jun '22

Anyone know of a procmail recipe to change the date on incoming messages? If the date is in the future by more than 24 hours - I'd like to just change it to the current date. If the date is in the past by more than two weeks - I'd like to just change it to the current date. I'd like to do it in procmail - if someone knows how. I've done some searching, still have some to do. Found some stuff on extracting the date, but not on modifying it if necessary.

5 5

Anyone running F11 on a Dell mini ? (Or another mini ?)
by linux guy 17 Jan '22

17 Jan '22

How is it working for you ? Thanks

10 21

Re: Backing up system
by gmspro 02 Feb '21

02 Feb '21

Hi, http://www.sysresccd.org/Download With the SystemRescueCd I backed up the /dev/sda6 partition in /mnt/backup/ naming "diskimage" After backing up operation the file has the automatic extension like "diskimage.000". Is this file ok to restore? If I name it "diskimage.gz" then it is automatically renamed with this extension "diskimage.gz.000" But here below http://www.sysresccd.org/Screenshots the file is name like this: "diskimage.pimg" Do I have to name with the .pimg extension during backup to restore correctly? And how can I restore it?

7 7

VPN options
by Keith Lofstrom 08 Nov '19

08 Nov '19

I am planning on running a Virtual Private Network from my Fedora firewall out to a UML virtual colo (running RH9) at another site. That site will be the place I present services to the world; httpd, ssh, sftp, smtp. This is to comply with the "no servers" and dynamic ip restrictions on my Comcast connection to the net; if my firewall always drives an outbound connection to the colocation site, I am not worried about changes of ip address, and I am not opening any inbound ports. There are a number of options for the VPN - the most attractive are cipe ( http://sites.inka.de/sites/bigred/devel/cipe.html ) and FreeSwan ( http://www.freeswan.org/ ), though I am told that one can do all this through an ssh tunnel. I would rather have simple and secure than super-duper; I have plenty of bandwidth, and will send outbound http and smtp from the firewall, so the main bandwidth user will be incoming spam/b/b/b/b mail. Anyone have some experiences to share about setting up VPN? Is there anything about either cipe or FreeSwan that is likely to break with FC1 or FC2? Keith -- Keith Lofstrom keithl(a)ieee.org Voice (503)-520-1993 KLIC --- Keith Lofstrom Integrated Circuits --- "Your Ideas in Silicon" Design Contracting in Bipolar and CMOS - Analog, Digital, and Scan ICs

8 8

how to correctly log without journald (and its blobs)?
by Franta Hanzlík 09 Apr '18

09 Apr '18

In previous Fedora distros was (IMHO) right way to log only to syslog, without journald and its (for me) unwanted annoying binary logs, by using configuration as: *) Set systemd log target to syslog: systemd.log_target=syslog (syslog-or-kmsg) ---- on kernel cmdline systemd.default_standard_output=syslog --/ and LogTarget=syslog ---- in systemd.conf DefaultStandardOutput=syslog --/ *) configuring rsyslog to listen on /dev/log unix socket: $SystemLogSocketName /dev/log ------ in rsyslog.conf $ModLoad imuxsock ----/ $OmitLocalLogging off ---/ $AddUnixListenSocket /run/systemd/journal/syslog --/(legacy directives) $AddUnixListenSocket /run/systemd/journal/socket -/ $AddUnixListenSocket /run/systemd/journal/stdout / (not sure when all last three directives needed) *) prevent to run journald: systemctl mask systemd-journald.service (and maybe mask systemd-journal-flush.service) And it works fine. But in actual Fedora 24 in systemd man page values syslog-or-kmsg and syslog are missing in LogTarget option. As systemd/journald man pages say hardly anything about exact mean of appropriate configuration for this purpose, then please when someone more knowledgeable can advise: - where to direct the systemd output? Maybe to kmsg an then read it in rsyslog via imklog? (rsyslog should have also imkmsg module, but is not in rsyslog-8.12.0-3.fc24) - what about /run/log/journal/.../system.journal ? On my test F24 system it have open rsyslogd, abrt-dump-journal-oops and abrt-dump-journal-xorg (no need for these last two) processes. Uses it also something else? - what about /run/systemd/journal/{dev-log,socket,stdout} unix sockets? Should rsyslogd listen on them? - /dev/log seems be now symlink to /run/systemd/journal/dev-log socket (as defined by systemd-journald-dev-log.socket) Should it be left (because now something sends to /run/systemd/journal/dev-log), or can be /run/systemd/journal/dev-log removed? Thanks in advance for some clarification about this. Franta Hanzlik

5 14

Error building mkvtoolnix-9.6.0-1.fc26.src.rpm
by JD 30 Sep '17

30 Sep '17

$ rpmbuild -v -bb mkvtoolnix.spec 2>&1 | tee mkvtoolnix.build.out . . . WARNING: unable to read lib/avilib-0.6.10/avilib.c: invalid byte sequence in US-ASCII WARNING: unable to read lib/avilib-0.6.10/avimisc.c: invalid byte sequence in US-ASCII WARNING: unable to read src/common/checksums/adler32.cpp: invalid byte sequence in US-ASCII WARNING: unable to read src/common/checksums/base.cpp: invalid byte sequence in US-ASCII WARNING: unable to read src/common/checksums/crc.cpp: invalid byte sequence in US-ASCII WARNING: unable to read src/common/checksums/md5.cpp: invalid byte sequence in US-ASCII WARNING: unable to read src/common/spu.cpp: invalid byte sequence in US-ASCII . . . At end of build, it belched g++ -Wall -Wno-comment -Wfatal-errors -Wlogical-op -D_FILE_OFFSET_BITS=64 -DMTX_LOCALE_DIR=\"/usr/share/locale\" -DMTX_PKG_DATA_DIR=\"/usr/share/mkvtoolnix\" -DMTX_DOC_DIR=\"/usr/share/doc/mkvtoolnix\" -fstack-protector -fPIC -std=gnu++11 -Wnon-virtual-dtor -Woverloaded-virtual -Wextra -Wno-missing-field-initializers -Wno-maybe-uninitialized -I/usr/include/qt5/QtWidgets -I/usr/include/qt5 -I/usr/include/qt5/QtGui -I/usr/include/qt5 -I/usr/include/qt5/QtNetwork -I/usr/include/qt5 -I/usr/include/qt5/QtCore -I/usr/include/qt5 -I/usr/include -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=generic -include src/common/common_pch.h -I. -Ilib -Ilib/avilib-0.6.10 -Isrc -c -MMD -MF ./rake.d/dependency.d/tmp/src_common_json_o.d -o src/common/json.o -x c++ src/common/json.cpp In file included from src/common/json.cpp:19:0: src/common/json.h:23:76: error: 'nlohmann::json<std::map, std::vector, std::basic_string<char, std::char_traits<char>, std::allocator<char> >, bool, long int, double, std::allocator>::parser_callback_t' has not been declared nlohmann::json parse(nlohmann::json::string_t const &data, nlohmann::json::parser_callback_t callback = nullptr); ^ compilation terminated due to -Wfatal-errors.

3 7

Scriptlet errors during manual installation of Fedora 23
by Andrej Podzimek 29 May '17

29 May '17

Hi, Because Anaconda doesn't support my usual partitioning scheme (root on Btrfs in LVM in LUKS in LVM in GPT, /boot on Btrfs, etc.), I created the entire layout manually and tried to install Fedora using dnf. The same layout works perfectly fine in ArchLinux. I basically followed this howto, with adjustments for s/yum/dnf/ and for EFI/GPT: http://dustymabe.com/2014/05/29/manual-linux-installs-with-funky-storage-co… The initial filesystem installation (dnf install -y --releasever=23 --installroot=/mnt/sysimage filesystem) already got a few glitches of this form: Non-fatal POSTIN scriptlet failure in rpm package filesystem This^^^ happened to roughly half of the installed packages. I tried to proceed with the rest (i.e., to install @core @standard kernel grub2 grub2-efi sihm grub2-tools), but it failed with scriptlet errors that prevented a few key packages from getting installed at all: error: %prein(selinux-policy-targeted-3.13.1-157.fc23.noarch) scriptlet failed, exit status 126 Error in PREIN scriptlet in rpm package selinux-policy-targeted Packages with those errors are reported as failed after the verify step. What I tried next: * setenforce 0 * upgrading the installation environment and/or the sysimage with dnf and rpm from rawhide * --releasever=22 instead of 23 * ...and checking for a few other common points with this bug: https://bugzilla.redhat.com/show_bug.cgi?id=1270663 * a plain sysimage directory with no predefined Btrfs subvolumes in it * unmounting, remounting, checking that everything has seclabel on, no weirdness in dmesg, etc. Well, nothing of the above helped; the error is still the same. How can I diagnose this? Where can I dig out the exact reason why the scriptlets are failing? Provided that Anaconda actually does some steps that I'm missing and can carry out the installation correctly, is there a way to *force* it to just accept whatever is mounted into /mnt/sysimage at the moment, without trying to make sense of it? I'm pretty sure dracut can handle my partition layout just fine, so the entire issue here is about getting the basic installation done somehow. Theoretically I could create a simple-and-stupid layout that Anaconda can handle, proceed with the installation and reshuffle the partitions afterwards, but that's sooo cumbersome that I thought I'd first ask whether someone knows a workaround to the scriptlet problems. Cheers, Andrej

2 4