users February 2020

users@lists.fedoraproject.org

106 participants
95 discussions

fc31: howto play music on remote headless
by sean darcy 16 Feb '20

16 Feb '20

I've got an old laptop on fc31. I'd like to ssh in and stream music that plays on the remote. I can ssh in to the remote and bring up firefox, but it tries to play music on the ssh client, not the remote. Any suggestions appreciated. sean

5 9

Fedora 31 Selinux MLS problems and errors
by Cătălin George Feștilă 16 Feb '20

16 Feb '20

I try to use the Selinux MLS with Fedora 31, After relabel the files and start the environment I get multiple errors... This is one example of the MLS issue. SELinux is preventing su from open access on the file /var/log/lastlog. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that su should be allowed open access on the lastlog file by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'su' --raw | audit2allow -M my-su # semodule -X 300 -i my-su.pp I try to fix it but I got this error [root@desk mythcat]# ausearch -c 'su' --raw | audit2allow -M my-su compilation failed: my-su.te:36:ERROR 'syntax error' at token 'mlsconstrain' on line 36: mlsconstrain file { write create setattr relabelfrom append unlink link rename mounton } ((l1 eq l2 -Fail-) or (t1 == mlsfilewritetoclr -Fail-) and (h1 dom l2 -Fail-) and (l1 domby l2) or (t2 == mlsfilewriteinrange -Fail-) and (l1 dom l2 -Fail-) an # mlsconstrain file { read getattr execute } ((l1 dom l2 -Fail-) or (t1 == mlsfilereadtoclr -Fail-) and (h1 dom l2 -Fail-) or (t1 == mlsfileread -Fail-) or (t2 == mlstrustedobject -Fail-) ); Constraint DENIED /usr/bin/checkmodule: error(s) encountered while parsing configuration [root@desk mythcat]# ausearch -c 'su' --raw | audit2allow -M my-su compilation failed: my-su.te:36:ERROR 'syntax error' at token 'mlsconstrain' on line 36: mlsconstrain file { write create setattr relabelfrom append unlink link rename mounton } ((l1 eq l2 -Fail-) or (t1 == mlsfilewritetoclr -Fail-) and (h1 dom l2 -Fail-) and (l1 domby l2) or (t2 == mlsfilewriteinrange -Fail-) and (l1 dom l2 -Fail-) an # mlsconstrain file { read getattr execute } ((l1 dom l2 -Fail-) or (t1 == mlsfilereadtoclr -Fail-) and (h1 dom l2 -Fail-) or (t1 == mlsfileread -Fail-) or (t2 == mlstrustedobject -Fail-) ); Constraint DENIED /usr/bin/checkmodule: error(s) encountered while parsing configuration

2 1

Alternatives to remina
by Patrick Dupre 15 Feb '20

15 Feb '20

Hello, In the past I used to use remina to take control of a remote machine. What is the "best" choice for a connection between to fedora machines? Thanks =========================================================================== Patrick DUPRÉ | | email: pdupre(a)gmx.com Laboratoire interdisciplinaire Carnot de Bourgogne 9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE Tel: +33 (0)380395988 ===========================================================================

3 3

OT: sudo question
by Mike Wright 15 Feb '20

15 Feb '20

Hi Masters, I would like to execute a command using sudo and not have to provide a password. After much manpage time I added this: mike ALL=(ALL) NOPASSWD: /usr/bin/lxc In theory this allows mike, from any and all hosts, to execute <lxc> without a password. Nonetheless, "mike" executing "lxc" gets passworded, so there must be an error in my rule. Any helpers? TIA, Mike Wright

8 14

I am having a problem switching users
by Christopher Marlow 14 Feb '20

14 Feb '20

Fedora 31 Workstation XFCE desktop ( installed on top of gnome ) Hi, When wanting to switch users in XFCE I put my mouse in the right hand corner of the screen. I click my name. Then I click switch user and what I do that nothing happens.. I cannot switch users without logging myself out. How do I fix this? Thank you, Chris

6 12

Allow Wireguard Clients Access to DNS Recursor on VPN Server
by Ryan Quinn 14 Feb '20

14 Feb '20

I have a Fedora 31 box acting as a Wireguard VPN server. Everything with Wireguard is working great. Traffic is flowing in both directions, and my packets are protected. DNS is getting resolved by Quad9. As an enhancement, I've installed PowerDNS Recursor on the server to respond to DNS queries. The recursor is working fine for the server, but I can't get the Wireguard clients access to the recursor. I'm assuming this is a problem with my firewalld rules, but I don't have a lot of experience building Linux based routers, which means it could be anything. Thoughts on what I'm missing here? Firewalld Default Zone: firewall-cmd --list-all FedoraServer (active) target: default icmp-block-inversion: no interfaces: ens3 ens7 sources: services: dhcpv6-client ssh wireguard ports: protocols: masquerade: yes forward-ports: source-ports: icmp-blocks: rich rules: rule family="ipv6" source ipset="sshguard6" drop rule family="ipv4" source ipset="sshguard4" drop ---------- Internal Zone with the Wireguard interface and network added to it: firewall-cmd --list-all --zone=internal internal (active) target: default icmp-block-inversion: no interfaces: wg0 sources: 192.168.13.0/24 services: dhcpv6-client dns ssh wireguard ports: protocols: masquerade: yes forward-ports: source-ports: icmp-blocks: rich rules: ------------ If it helps... Wireguard Client Config: [Interface] PrivateKey = <private key> Address = 192.168.13.10/32 DNS = 192.168.13.1, 9.9.9.9 [Peer] PublicKey = <server public key> PresharedKey = <psk> AllowedIPs = ::/0, 0.0.0.0/0 Endpoint = wgg.domain.tld:2350 PersistentKeepalive = 25 ---------- Wireguard server config: [Interface] PrivateKey = <private key> Address = 192.168.13.1/24 ListenPort = 2350 [Peer] PublicKey = <client public key> AllowedIPs = 192.168.13.10/32 PreSharedKey = <psk>

2 1

rpm has selinux trouble
by sean darcy 13 Feb '20

13 Feb '20

syslog has this every 10 seconds: audit[1039229]: AVC avc: denied { read } for pid=1039229 comm="rpm" name="Providename" dev="dm-1" ino=2622531 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0 setroubleshootd[1036631]: error: cannot open Name index using db5 - Permission denied (13) setroubleshootd[1036631]: error: cannot open Basenames index using db5 - Permission denied (13) setroubleshootd[1036631]: error: cannot open Providename index using db5 - Permission denied (13) I've run restorecon -r /var/lib/rpm , but still no joy. Any suggestions? sean

4 7

Unnecessary hard drive spin-ups
by Dave Ulrick 13 Feb '20

13 Feb '20

Suppose I have a "green" USB hard drive that frequently spins down the drive in order to save energy, then spins back up when a file system mounted on it is accessed. It is mounted at /var/backups. I'm logged in as a non-root user with my home directory as my current working directory. The file system containing my home directory is mounted at /home. I'm using a shell prompt via a graphical terminal emulator (xfce4-terminal, in my case). Now, I enter an 'ls' command at a bash prompt. The output doesn't appear until after my USB hard drive spins up. Note that neither /var/backups nor any directory under it is in my shell's PATH, nor is there any symlink to /var/backups in my current working directory. Thus, there should be no need to read /var/backups, yet evidently this exactly what happens. Question: why does a sleeping hard drive that has no connection with the file system I'm working with have to spin up? The behavior I would expect is that the hard drive would spin down after its file system(s) have not been accessed for a certain amount of time and would spin up if/when a file system on it is accessed. If I'd entered 'ls /var/backups' or 'cd /var/backups' or even a command that accesses all file systems (e.g., 'df') I'd totally expect the hard drive to spin up, but I don't get at all why it should spin up if I'm not accessing any data on it. I don't like this behavior for two reasons: (1) unnecessary I/O delays while waiting for a hard drive that I'm not explicitly accessing to spin up, plus (2) unnecessary wear and tear on the "green" hard drive. Other than keeping all of my hard drives spinning all the time--i.e., by using a non-green hard drive in my USB enclosure--is there any way to prevent this behavior? What might be causing it? Thanks, Dave

8 13

DVD Backup
by Kevin Becker 13 Feb '20

13 Feb '20

I haven't had the need to copy a DVD in over a decade and the last time I did it was probably under OS X, possibly even Windows, using some commercial tool. But recently my stepfather came to me with a DVD that had been made from a home video that he wanted several copies of. It is not copy protected in any way, just a plain DVD video disk. I have an external USB DVD drive which seems to work okay, but honestly I barely use it for anything. I tried using Brasero but it seems to read the disk quickly at first and then become progressively slower and slower until it gets to 99% and then stays there for hours and hours. I used the dvdbackup command line program and was able to make a backup and burn it with growisofs with no problem so I'm not sure why Brasero didn't work. Does anyone have any recommendation for a simple GUI DVD copying tool? I'm not worried about breaking copy protection here. I'm fine with the command line tools but I do this so infrequently that it would be nice to have a GUI app that doesn't require me to look up notes or search the internet for instructions to refresh my memory the next time I want to do this in 2036.

6 6

How do I run telnet server nowadays?
by Hiisi 13 Feb '20

13 Feb '20

Hello, list. I was trying to get telnet server up and running on my fedora 31. I have installed telnet-server package using dnf. systemctl list-unit-files outputs: telnet@.service static However, when I try to start or check status of it this is what I get: $ systemctl status telnet@.service Failed to get properties: Unit name telnet@.service is neither a valid invocation ID nor unit name. How do I start telnetd server? -- Hiisi. Registered Linux User #487982. Be counted at: https://linuxcounter.net/ -- Spandex is a privilege, not a right.

2 2

← Newer
1
2
3
4
5
6
7
8
9
10
Older →