fc31: howto play music on remote headless
by sean darcy
I've got an old laptop on fc31. I'd like to ssh in and stream music that
plays on the remote. I can ssh in to the remote and bring up firefox,
but it tries to play music on the ssh client, not the remote.
Any suggestions appreciated.
sean
4 years, 2 months
Fedora 31 Selinux MLS problems and errors
by Cătălin George Feștilă
I try to use the Selinux MLS with Fedora 31,
After relabel the files and start the environment I get multiple errors...
This is one example of the MLS issue.
SELinux is preventing su from open access on the file /var/log/lastlog.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that su should be allowed open access on the lastlog file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'su' --raw | audit2allow -M my-su
# semodule -X 300 -i my-su.pp
I try to fix it but I got this error
[root@desk mythcat]# ausearch -c 'su' --raw | audit2allow -M my-su
compilation failed:
my-su.te:36:ERROR 'syntax error' at token 'mlsconstrain' on line 36:
mlsconstrain file { write create setattr relabelfrom append unlink link rename mounton } ((l1 eq l2 -Fail-) or (t1 == mlsfilewritetoclr -Fail-) and (h1 dom l2 -Fail-) and (l1 domby l2) or (t2 == mlsfilewriteinrange -Fail-) and (l1 dom l2 -Fail-) an
# mlsconstrain file { read getattr execute } ((l1 dom l2 -Fail-) or (t1 == mlsfilereadtoclr -Fail-) and (h1 dom l2 -Fail-) or (t1 == mlsfileread -Fail-) or (t2 == mlstrustedobject -Fail-) ); Constraint DENIED
/usr/bin/checkmodule: error(s) encountered while parsing configuration
[root@desk mythcat]# ausearch -c 'su' --raw | audit2allow -M my-su
compilation failed:
my-su.te:36:ERROR 'syntax error' at token 'mlsconstrain' on line 36:
mlsconstrain file { write create setattr relabelfrom append unlink link rename mounton } ((l1 eq l2 -Fail-) or (t1 == mlsfilewritetoclr -Fail-) and (h1 dom l2 -Fail-) and (l1 domby l2) or (t2 == mlsfilewriteinrange -Fail-) and (l1 dom l2 -Fail-) an
# mlsconstrain file { read getattr execute } ((l1 dom l2 -Fail-) or (t1 == mlsfilereadtoclr -Fail-) and (h1 dom l2 -Fail-) or (t1 == mlsfileread -Fail-) or (t2 == mlstrustedobject -Fail-) ); Constraint DENIED
/usr/bin/checkmodule: error(s) encountered while parsing configuration
4 years, 2 months
Alternatives to remina
by Patrick Dupre
Hello,
In the past I used to use remina to take control of a remote machine.
What is the "best" choice for a connection between to fedora machines?
Thanks
===========================================================================
Patrick DUPRÉ | | email: pdupre(a)gmx.com
Laboratoire interdisciplinaire Carnot de Bourgogne
9 Avenue Alain Savary, BP 47870, 21078 DIJON Cedex FRANCE
Tel: +33 (0)380395988
===========================================================================
4 years, 2 months
OT: sudo question
by Mike Wright
Hi Masters,
I would like to execute a command using sudo and not have to provide a
password. After much manpage time I added this:
mike ALL=(ALL) NOPASSWD: /usr/bin/lxc
In theory this allows mike, from any and all hosts, to execute <lxc>
without a password.
Nonetheless, "mike" executing "lxc" gets passworded, so there must be an
error in my rule.
Any helpers?
TIA,
Mike Wright
4 years, 2 months
I am having a problem switching users
by Christopher Marlow
Fedora 31 Workstation
XFCE desktop ( installed on top of gnome )
Hi,
When wanting to switch users in XFCE I put my mouse in the right hand
corner of the screen. I click my name. Then I click switch user and
what I do that nothing happens.. I cannot switch users without logging
myself out. How do I fix this?
Thank you,
Chris
4 years, 2 months
Allow Wireguard Clients Access to DNS Recursor on VPN Server
by Ryan Quinn
I have a Fedora 31 box acting as a Wireguard VPN server. Everything with Wireguard is working great. Traffic is flowing in both directions, and my packets are protected. DNS is getting resolved by Quad9.
As an enhancement, I've installed PowerDNS Recursor on the server to respond to DNS queries. The recursor is working fine for the server, but I can't get the Wireguard clients access to the recursor. I'm assuming this is a problem with my firewalld rules, but I don't have a lot of experience building Linux based routers, which means it could be anything.
Thoughts on what I'm missing here?
Firewalld Default Zone:
firewall-cmd --list-all
FedoraServer (active)
target: default
icmp-block-inversion: no
interfaces: ens3 ens7
sources:
services: dhcpv6-client ssh wireguard
ports:
protocols:
masquerade: yes
forward-ports:
source-ports:
icmp-blocks:
rich rules:
rule family="ipv6" source ipset="sshguard6" drop
rule family="ipv4" source ipset="sshguard4" drop
----------
Internal Zone with the Wireguard interface and network added to it:
firewall-cmd --list-all --zone=internal
internal (active)
target: default
icmp-block-inversion: no
interfaces: wg0
sources: 192.168.13.0/24
services: dhcpv6-client dns ssh wireguard
ports:
protocols:
masquerade: yes
forward-ports:
source-ports:
icmp-blocks:
rich rules:
------------
If it helps...
Wireguard Client Config:
[Interface]
PrivateKey = <private key>
Address = 192.168.13.10/32
DNS = 192.168.13.1, 9.9.9.9
[Peer]
PublicKey = <server public key>
PresharedKey = <psk>
AllowedIPs = ::/0, 0.0.0.0/0
Endpoint = wgg.domain.tld:2350
PersistentKeepalive = 25
----------
Wireguard server config:
[Interface]
PrivateKey = <private key>
Address = 192.168.13.1/24
ListenPort = 2350
[Peer]
PublicKey = <client public key>
AllowedIPs = 192.168.13.10/32
PreSharedKey = <psk>
4 years, 2 months
rpm has selinux trouble
by sean darcy
syslog has this every 10 seconds:
audit[1039229]: AVC avc: denied { read } for pid=1039229 comm="rpm"
name="Providename" dev="dm-1" ino=2622531
scontext=system_u:system_r:setroubleshootd_t:s0
tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
setroubleshootd[1036631]: error: cannot open Name index using db5 -
Permission denied (13)
setroubleshootd[1036631]: error: cannot open Basenames index using db5 -
Permission denied (13)
setroubleshootd[1036631]: error: cannot open Providename index using db5
- Permission denied (13)
I've run restorecon -r /var/lib/rpm , but still no joy.
Any suggestions?
sean
4 years, 2 months
Unnecessary hard drive spin-ups
by Dave Ulrick
Suppose I have a "green" USB hard drive that frequently spins down the
drive in order to save energy, then spins back up when a file system
mounted on it is accessed. It is mounted at /var/backups.
I'm logged in as a non-root user with my home directory as my current
working directory. The file system containing my home directory is
mounted at /home. I'm using a shell prompt via a graphical terminal
emulator (xfce4-terminal, in my case). Now, I enter an 'ls' command at a
bash prompt. The output doesn't appear until after my USB hard drive
spins up. Note that neither /var/backups nor any directory under it is
in my shell's PATH, nor is there any symlink to /var/backups in my
current working directory. Thus, there should be no need to read
/var/backups, yet evidently this exactly what happens.
Question: why does a sleeping hard drive that has no connection with the
file system I'm working with have to spin up? The behavior I would
expect is that the hard drive would spin down after its file system(s)
have not been accessed for a certain amount of time and would spin up
if/when a file system on it is accessed. If I'd entered 'ls
/var/backups' or 'cd /var/backups' or even a command that accesses all
file systems (e.g., 'df') I'd totally expect the hard drive to spin up,
but I don't get at all why it should spin up if I'm not accessing any
data on it.
I don't like this behavior for two reasons: (1) unnecessary I/O delays
while waiting for a hard drive that I'm not explicitly accessing to spin
up, plus (2) unnecessary wear and tear on the "green" hard drive.
Other than keeping all of my hard drives spinning all the time--i.e., by
using a non-green hard drive in my USB enclosure--is there any way to
prevent this behavior? What might be causing it?
Thanks,
Dave
4 years, 2 months
DVD Backup
by Kevin Becker
I haven't had the need to copy a DVD in over a decade and the last time
I did it was probably under OS X, possibly even Windows, using some
commercial tool. But recently my stepfather came to me with a DVD that
had been made from a home video that he wanted several copies of. It
is not copy protected in any way, just a plain DVD video disk. I have
an external USB DVD drive which seems to work okay, but honestly I
barely use it for anything. I tried using Brasero but it seems to read
the disk quickly at first and then become progressively slower and
slower until it gets to 99% and then stays there for hours and hours.
I used the dvdbackup command line program and was able to make a backup
and burn it with growisofs with no problem so I'm not sure why Brasero
didn't work. Does anyone have any recommendation for a simple GUI DVD
copying tool? I'm not worried about breaking copy protection here.
I'm fine with the command line tools but I do this so infrequently that
it would be nice to have a GUI app that doesn't require me to look up
notes or search the internet for instructions to refresh my memory the
next time I want to do this in 2036.
4 years, 2 months
How do I run telnet server nowadays?
by Hiisi
Hello, list.
I was trying to get telnet server up and running on my fedora 31. I
have installed telnet-server package using dnf.
systemctl list-unit-files outputs:
telnet@.service static
However, when I try to start or check status of it this is what I get:
$ systemctl status telnet@.service
Failed to get properties: Unit name telnet@.service is neither a valid
invocation ID nor unit name.
How do I start telnetd server?
--
Hiisi.
Registered Linux User #487982. Be counted at: https://linuxcounter.net/
--
Spandex is a privilege, not a right.
4 years, 2 months
