July 2009 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Strange error with disc space
by Chuck Payne 31 Jul '09

31 Jul '09

Guys, I have a question. Have you ever seen disc space just disappear and you were unable to find what is using? One of our DB came to me the other day pointed out that one of his rac boxes has filled up 2.0G 1.7G 214M 89% / 2.0G 88M 1.8G 5% /tmp 1023M 298M 673M 31% /opt 2.0G 203M 1.7G 11% /home 2.0G 297M 1.6G 16% /archive 2.0G 456M 1.4G 25% /var 4.9G 2.7G 2.0G 59% /usr 2.0G 68M 1.8G 4% /usr/local 40G 12G 26G 32% /u00 122M 32M 84M 28% /boot 7.9G 0 7.9G 0% /dev/shm 4.0G 118M 3.9G 3% /crs_db so I started looking into, but I can't find any file or dir on the root partition that eat space. I have looked at dmesg and don't see anything. Oh, we have rebooted the box and the space didn't clear up. Just an fyi, here are things I did look, please feel free to let me know what other things I need to check. alias ducks='du -chs * | sort -rn | head -11' find / -type f -size +20000k -exec ls -lh {} \; 2> /dev/null | awk '{ print $NF ": " $5 }' | sort -nrk 2,2 lsof -a +L1 -- ---------------------------------------- Old utilities do not die they just slowly fade away! ----------------------------------------- OpenSUSE -- http://en.opensuse.org/User:Terrorpup OpenSuSE Ambassador OpenSuSE Member Skype -- terrorpup twitter -- terrorpup -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

6 10

RE: [opensuse] limit 'su' to a specific username
by James D. Parra 31 Jul '09

31 Jul '09

-----Original Message----- From: 'Patrick Shanahan' [mailto:paka@opensuse.org] Sent: Thursday, July 30, 2009 12:22 PM To: James D. Parra Subject: Re: [opensuse] limit 'su' to a specific username > The problem I see is that the user can 'sudo' commands as another > user, however I am trying to get the user to actually be that other > user. I don't see that functionality with sudo. Is there a way to have sudo 'su' > to a specific user? > > Thanks again, Why are we off-list? what about: DESCRIPTION The sudoers file is composed of two types of entries: aliases (basically variables) and user specifications (which specify who may run what). When multiple entries match for a user, they are applied in order. Where there are multiple matches, the last match is used (which is not necessarily the most specific match). The sudoers grammar will be described below in Extended Backus-Naur Form (EBNF). Don't despair if you don't know what EBNF is; it is fairly simple, and the definitions below are annotated. do you not understand Sudo give elevated priviledges to specific commands and specific locations to a *named* user. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~` The off-list reply was accidental. Perhaps I am not properly describing what I am trying to accomplish. What I want is to have is userA, userB, & userC, su to userZ, but not be able to su to anything else. All three users need to become userZ, have userZ's name at the prompt, and do all work as that user. Once they exit, they'll back at there original login names. In other words, I don't want the users issuing 'sudo' for every command they need to do as userZ. I hope this is a little clearer. Regards, James -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] VLC not holding the right dev
by Duaine & Laura Hechler 31 Jul '09

31 Jul '09

SUSE 11.1 and VLC 0.9.9a Every time I start VLC, the dev is garbage and I have to keep reseting it to "/dev/sr0" Why won't it stay ? Duaine -- Duaine Hechler Piano, Player Piano, Pump Organ Tuning, Servicing & Rebuilding Reed Organ Society Member Florissant, MO 63034 (314) 838-5587 dahechler(a)att.net www.hechlerpianoandorgan.com -- Home & Business user of Linux - 10 years -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 2

[opensuse] nvidia repo/driver question
by Bob S 31 Jul '09

31 Jul '09

Hello SuSE people, Running 11.0 and KDE3. My video card died and I went out and bought a new GeForce 8400 GS and installed it. Now I need a new driver and I don't have the nvidia repo installed. Went out and found the repo in the "other" Suse repo list and tried to install it in Yast and it wouldn't accept it. Anybody kind enough to give me the correct URL? So, I then went amd found the "one click" and installed what I thought was the right driver. Evidently not. After restarting X i emded up on the Konsole command line and i had to xorg.conf and change "nvidia" to "nv" to get my screen back again. Anybody know what the correct driver is for that card? Thanks Bob S -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 4

[opensuse] Idea for an opensource project (SIDE) LONGISH -- feedback sought
by Dan Goodman 30 Jul '09

30 Jul '09

I have been thinking about whether or not, or how, to get involved more in opensource, and in particular, opensource development. SIDE is my acronym for Scripting Integrated Development Environment. Here is the idea... After finishing a recent shellscripting project for use in an enterprise environment, a lightbulb went off in my head about something that could be done to make shellscript development into something that would be more maintainable in that environment. Specifically, I started with trying to structure my script to clearly identify error messages, of which there were several, and give them all symbolic names and then collect them all in one area for easier maintenance. Then I thought about doing the same with return codes for error exits. Then I abandoned that idea for the relatively small script I was working on, as being somewhat of a distraction from the development schedule, although I thought they might have some maintenance benefit, especially in more complex scripts, or in systems processes that involve multiple inter-related scripts. Then I started getting more brainstorms, like wouldn't it be nice to be able to take a more or less straightforward script with NO error checking, and have some "zooty" software generate ALL standard error checks (perhaps triggered by some sort of include style logic), as well as all error messages for problems encountered. Also to use something like a tidyperl on steroids to put the script into a "canonical" format. And then you could have another, optional, process in the development and deployment pipeline, one that would split things like the error messages and the return codes into separate files, and have them sourced into the main script module, so that the main source module would not be cluttered with all the lines defining symbolic error messages and return codes, just their hopefully descriptive names, but with the messages and codes files existing in correspondingly named files with unique extensions. And then I decided it was more than an hour or two of code, but not a Mt. Everest type of project. And there are some decided advantages, for example in regulated environments, to be able to set separate access controls on error messages, for example, vs. script logic. So I could see where I might have used something like this multiple times in past projects, had a tool like this been available. This is only a sketchy outline of an idea for some sort of scripting IDE, SIDE, for lack of a better name, or Advanced Scripting Integration eXecutive, ASIX, a/k/a A-6, for another name idea. This is not so much a question for individual system script developers, although I would welcome any constructive ideas by anyone who considers what the target audience is. Also, I envision that the concept could be extended to other subdomains, such as file locations, "chroot"-like prefixing for file locations, to support "poor boy's containers" or testing and acceptance environments, etc. (Which I also did, as part of my "noodling" around for ways to do scripting better in the so-called "real" world.) I am not thin-skinned, so if you think the whole idea is much ado about nothing, a tempest in a teapot, feel free to say so before I get psyched up and start tilting at a windmill. But if other people could relate to this, and would consider using something like this if it were available, I might build it (and see who comes, since I seem to be on a literary reference kick...) I've seen similar things done in heavy large-scale c development environments, but it seems that the world is evolving into more and more usage of glue languages as integration tools. I also think that this idea could encompass perl, as well as at least traditional, least-common denominator, bourne shell programs (emphasizing cross-platform portability), kornshell (ditto, but note to myself, beware of being burned by pdksh's that break scripts because read is not a built-in), and bash... It seems like the kind of thing I could pull off by myself, to get an initial design and build, and that could benefit from having other people help extend it. Do I have a glimpse of something that grow, in your opinion, or am I just putting rococo decorations on a baroque concept? As a closing note for now, I would also want it to be able to take existing "spaghetti" scripts, and reverse-engineer them, document their logic, and retro-fit this structure onto them in a guaranteed functionally equivalent way. If any tools already exist that could do any part of this, or any other idea I have expressed, it would be helpful to know what else might be out there that I am unaware of. There are a lot of places I could have floated this idea (yeah, I know, one of them is porcelain and contains several gallons of water and has a handle, but that's not what I mean), but I respect the diversity of ideas and experience on this forum, and would almost certainly develop it as part of the openSuSE distro (as its native location), should I decide to proceed. Dan Goodman Notice: This communication, including attachments, may contain confidential or proprietary information to be conveyed solely for the intended recipient(s). If you are not the intended recipient, or if you otherwise received this message in error, please notify the sender immediately by return e-mail and promptly delete this e-mail, including attachments, without reading or saving them in any manner. The unauthorized use, dissemination, distribution, or reproduction of this e-mail, including attachments, is strictly prohibited and may be unlawful. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 2

[opensuse] SUSE Studio
by Larry Stotler 30 Jul '09

30 Jul '09

The Register is reporting that SUSE studio is out of Beta here: http://www.theregister.co.uk/2009/07/28/novell_suse_appliances/ But when I went to the site, I can't create an account. What gives? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

4 5

[opensuse] limit 'su' to a specific username
by James D. Parra 30 Jul '09

30 Jul '09

Hello, I have locked down /usr/bin/su by putting certain admin users in the wheel group and only allowing them to execute su. However, I need to set up a way to have other non-admin users su to a bogus user, a special username, that will be used to execute commands. What I want is to have users ssh into the server, then any of them can su to the special user to execute commands as that special user. The special user will not have ssh access (I want to see who is logged into the server). I want to continue denying non-admin users the ability to su to any other user. Any ideas how I can accomplish this? Many thanks in advance. James -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

3 4

[opensuse] Issue with Bind
by Chuck Payne 30 Jul '09

30 Jul '09

Guys, Do you guys recommend adding this to the firewall set for the issue with bind (DNS)? iptables -A INPUT -p udp --dport 53 -j DROP -m u32 --u32 '30>>27&0xF=5' How can I add this to the firewall rule set. The issue is list below. BIND 9 is an implementation of the Domain Name System (DNS) protocols. named daemon is an Internet Domain Name Server for UNIX like operating systems. Dynamic update messages may be used to update records in a master zone on a nameserver. When named receives a specially crafted dynamic update message an internal assertion check is triggered which causes named to exit. An attacker which can send DNS requests to a nameserver can cause it to exit, thus creating a Denial of Service situation. configuring named to ignore dynamic updates is NOT sufficient to protect it from this vulnerability. This exploit is public. Please upgrade immediately. Our hosting provider seems to come under DoS attack too at the same time and their DNS server went down for couple of hours. So you may see some part of our site may not working, especially our css, js and image files comes from our service providers servers which are affected by BIND server problem. -- ---------------------------------------- Old utilities do not die they just slowly fade away! ----------------------------------------- OpenSUSE -- http://en.opensuse.org/User:Terrorpup OpenSuSE Ambassador OpenSuSE Member Skype -- terrorpup twitter -- terrorpup -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

2 1

[opensuse] Brasero hangs when trying to locate iso on hard drive...
by Dan Goodman 30 Jul '09

30 Jul '09

I have downloaded an iso image onto my harddrive from a known good internal source, and confirmed the md5sum matches. But when I fired up Brasero and chose "Burn an Existing Image", and attempted to change dirs from my homedir to /root/isoz where I have my (SLES 10 SP2) iso stored, and I get the "whirling globe" endlessly, starting as soon as I try to navigate to /root. What am I doing wrong, or is there a known bug I don't know about. Any help would be appreciated, as I have to get this done before I can get out of here and go on a much needed vacation. TIA. Dan Notice: This communication, including attachments, may contain confidential or proprietary information to be conveyed solely for the intended recipient(s). If you are not the intended recipient, or if you otherwise received this message in error, please notify the sender immediately by return e-mail and promptly delete this e-mail, including attachments, without reading or saving them in any manner. The unauthorized use, dissemination, distribution, or reproduction of this e-mail, including attachments, is strictly prohibited and may be unlawful. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 1

[opensuse] y2controlcenter: cannot connect to X server :0.0 ??
by Clayton 30 Jul '09

30 Jul '09

Hmmm I broke something on my latest update. The YaST GUI will no longer start... it just coughs out this error: linux-tliy:/usr/lib64 # yast2 No protocol specified y2controlcenter: cannot connect to X server :0.0 I can run the ncurses yast... Other symptoms of the update that I haven't traced down yet... Running a python application spits out errors like this: File "/usr/lib64/python2.6/site-packages/gtk-2.0/gtk/__init__.py", line 48, in <module> from gtk import _gtk ImportError: /usr/lib64/libgtk-x11-2.0.so.0: undefined symbol: g_array_unref Any tips on what to look at to fix this? C. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse+help(a)opensuse.org

1 1