luv-beginners

luv-beginners@luv.asn.au

66 discussions

by Peter Wolf

Hello, I am trying to delete a "doc" folder on my computer but have been unable to do so.How do I delete it? Some output below should give an indication of what I have tried. peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ ls -l ls: cannot access 'doc': Permission denied total 236 drw------- 2 root root 4096 Jan 17 23:32 dconf d????????? ? ? ? ? ? doc drw-r--r-- 3 peter peter 4096 Dec 31 18:53 flatpak drw-r--r-- 2 peter peter 12288 Jan 2 10:53 fontconfig drw-rw-r-- 2 peter peter 4096 Jan 8 21:23 gstreamer-1.0 drw------- 3 peter peter 4096 Dec 31 18:53 mate drw-rw-r-- 3 peter peter 4096 Jan 1 21:25 matplotlib drw-r--r-- 7 peter peter 4096 Jan 17 16:59 mesa_shader_cache drw-rw-r-- 3 peter peter 4096 Dec 31 20:02 mintinstall drw------- 2 peter peter 4096 Dec 31 18:53 obexd drw------- 4 peter peter 4096 Jan 1 00:33 pip -rw-rw-r-- 1 peter peter 165196 Jan 3 08:52 qt_compose_cache_little_endian_fede3597f8724a62b7726a319d60a6bc drw-r--r-- 2 peter peter 4096 Jan 2 22:08 qtshadercache drw------- 3 peter peter 4096 Dec 31 18:54 thumbnails drwx------ 3 peter peter 4096 Dec 31 20:08 thunderbird drwxrwxr-x 2 peter peter 4096 Dec 31 20:12 wine drwx------ 3 peter peter 4096 Jan 2 00:40 xreader drwx------ 3 peter peter 4096 Jan 7 22:09 yelp peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo ls -l total 236 drw------- 2 root root 4096 Jan 17 23:32 dconf dr-x------ 2 root root 0 Jan 1 1970 doc drw-r--r-- 3 peter peter 4096 Dec 31 18:53 flatpak drw-r--r-- 2 peter peter 12288 Jan 2 10:53 fontconfig drw-rw-r-- 2 peter peter 4096 Jan 8 21:23 gstreamer-1.0 drw------- 3 peter peter 4096 Dec 31 18:53 mate drw-rw-r-- 3 peter peter 4096 Jan 1 21:25 matplotlib drw-r--r-- 7 peter peter 4096 Jan 17 16:59 mesa_shader_cache drw-rw-r-- 3 peter peter 4096 Dec 31 20:02 mintinstall drw------- 2 peter peter 4096 Dec 31 18:53 obexd drw------- 4 peter peter 4096 Jan 1 00:33 pip -rw-rw-r-- 1 peter peter 165196 Jan 3 08:52 qt_compose_cache_little_endian_fede3597f8724a62b7726a319d60a6bc drw-r--r-- 2 peter peter 4096 Jan 2 22:08 qtshadercache drw------- 3 peter peter 4096 Dec 31 18:54 thumbnails drwx------ 3 peter peter 4096 Dec 31 20:08 thunderbird drwxrwxr-x 2 peter peter 4096 Dec 31 20:12 wine drwx------ 3 peter peter 4096 Jan 2 00:40 xreader drwx------ 3 peter peter 4096 Jan 7 22:09 yelp peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo ls -l doc total 0 dr-x------ 2 root root 0 Jan 1 1970 by-app peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo ls -l doc/by-app total 0 peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo rm doc rm: cannot remove 'doc': Is a directory peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo rm -r doc rm: cannot remove 'doc/by-app': Function not implemented peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo rmdir doc rmdir: failed to remove 'doc': Device or resource busy peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ lsof -N lsof: WARNING: can't stat() fuse file system /home/peter/.cache/doc Output information may be incomplete. peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo rmdir -p doc [sudo] password for peter: rmdir: failed to remove 'doc': Device or resource busy peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ man rmdir peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$ sudo rmdir -p doc/by-app rmdir: failed to remove 'doc/by-app': Function not implemented peter@FLYQB8M9RETO9JA05LY0A3QPQB6OXGXZ0QOC0QN9:~/.cache$

2 years, 2 months

Re: [luv-beginners] malware or not

by Peter Wolf

Thanks for your very helpful answer Trent.Yes, finalrd is a shell script as you suggested which is why objdump didn't disassemble it.I thought that hexdump or objdump would have directly shown that finalrd is a shell script.

2 years, 2 months

Re: [luv-beginners] malware or not

by Peter Wolf

Thank you Andrew and Trent for your helpful answers.I have a couple more questions if that is ok. The following is output from an Antix Linux installation I have. $ ls -l /usr/bin/lockfile* -rwxr-xr-x 4 root root 9944 Dec 2 2012 /usr/bin/lockfile-check -rwxr-xr-x 4 root root 9944 Dec 2 2012 /usr/bin/lockfile-create -rwxr-xr-x 4 root root 9944 Dec 2 2012 /usr/bin/lockfile-remove -rwxr-xr-x 4 root root 9944 Dec 2 2012 /usr/bin/lockfile-touch Danny@PM5EZ4AZN6TPOJXZ8KSLVQL5QCXXO5SX5L5KIL38:~ $ md5sum /usr/bin/lockfile* 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/lockfile-check 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/lockfile-create 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/lockfile-remove 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/lockfile-touch Danny@PM5EZ4AZN6TPOJXZ8KSLVQL5QCXXO5SX5L5KIL38:~ $ ls -l /usr/bin/mail* -rwxr-sr-x 3 root mail 9944 Dec 2 2012 /usr/bin/mail-lock -rwxr-sr-x 3 root mail 9944 Dec 2 2012 /usr/bin/mail-touchlock -rwxr-sr-x 3 root mail 9944 Dec 2 2012 /usr/bin/mail-unlock Danny@PM5EZ4AZN6TPOJXZ8KSLVQL5QCXXO5SX5L5KIL38:~ $ md5sum /usr/bin/mail* 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/mail-lock 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/mail-touchlock 7e6e10a1272f5cfe594cf297d0ca9151 /usr/bin/mail-unlock Question #1. What is the reason for the existence of 7 identical files under different names? Regarding question #2.The following is output from a Linux Mint 19.2 installation I have.The command finalrd has been moved from /usr/bin where it was found to $HOME. peter@G9QYX4ZARNADBCM7D12NJQ1TT12B8A5XGBL73KAY:~$ objdump -d finalrd objdump: finalrd: File format not recognised peter@G9QYX4ZARNADBCM7D12NJQ1TT12B8A5XGBL73KAY:~$ hexdump finalrd -n 500 0000000 2123 622f 6e69 732f 0a68 2023 5053 5844 0000010 4c2d 6369 6e65 6573 492d 6564 746e 6669 0000020 6569 3a72 4720 4c50 332d 302e 6f2d 6c6e 0000030 0a79 730a 7465 2d20 0a65 230a 6620 726f 0000040 6920 696e 7274 6d61 7366 742d 6f6f 736c 0000050 6820 6f6f 2d6b 7566 636e 6974 6e6f 0a73 0000060 7865 6f70 7472 4420 5345 4454 5249 2f3d 0000070 7572 2f6e 6e69 7469 6172 666d 0a73 2023 0000080 6f66 2072 752f 7273 6c2f 6269 642f 6172 0000090 7563 2f74 7264 6361 7475 692d 736e 6174 00000a0 6c6c 650a 7078 726f 2074 4544 5453 4f52 00000b0 544f 4944 3d52 4424 5345 4454 5249 230a 00000c0 6920 696e 7274 6d61 7366 742d 6f6f 736c 00000d0 6e20 776f 7220 7165 6975 6572 2073 6874 00000e0 7369 7420 206f 6562 7320 7465 650a 7078 00000f0 726f 2074 6576 6272 736f 3d65 0a6e 230a 0000100 7320 6d6f 7465 6968 676e 6120 726c 6165 0000110 7964 6320 6572 7461 6465 7320 7568 6474 0000120 776f 206e 6e69 7469 6172 666d 0a73 2023 0000130 6173 656d 6320 6568 6b63 6920 2073 6f64 0000140 656e 6220 2079 2e65 2e67 6420 6172 7563 0000150 2d74 6873 7475 6f64 6e77 230a 6920 2074 0000160 7369 6520 7078 6365 6574 2064 6874 7461 0000170 6120 796e 7320 7568 6474 776f 206e 6e69 0000180 7469 6172 666d 2073 7369 6720 6f6f 2064 0000190 6e65 756f 6867 5b0a 2120 2d20 2078 4424 00001a0 5345 4454 5249 622f 6e69 732f 2068 205d 00001b0 7c7c 6520 6978 2074 0a30 230a 2f20 7572 00001c0 206e 616d 2079 6562 6d20 756f 746e 6465 00001d0 6e20 656f 6578 2c63 6f6e 7573 6469 3d20 00001e0 203e 6966 2078 7469 230a 6920 2074 6873 00001f0 756f 646c 00001f4 Question #2 Why can't finalrd be disassembled by objdump ?

2 years, 2 months

malware or not

by Peter Wolf

Hello, I have found numerous files being added to my /usr/bin folder.I want to know if one of them,a perl script is malware.I strongly suspect that it is malware.Unfortunately, I don't know enough about perl to be able to tell for sure.The script doesn't seem to work properly and seems to hang the perl interperetor.Be very careful running it.I will embed it at the bottom of this email.If it is malware and something new,please forward it to the relevant people.Thanks.The filename on my hard drive is function_grep.pl -------------------------------------------------------------------------------------------------------------------------------------- #! /usr/bin/perl -w # # Copyright 2000 Patrik Stridvall # # This library is free software; you can redistribute it and/or # modify it under the terms of the GNU Lesser General Public # License as published by the Free Software Foundation; either # version 2.1 of the License, or (at your option) any later version. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU # Lesser General Public License for more details. # # You should have received a copy of the GNU Lesser General Public # License along with this library; if not, write to the Free Software # Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA # use strict; my $name0=$0; $name0 =~ s%^.*/%%; my $invert = 0; my $pattern; my @files = (); my $usage; while(defined($_ = shift)) { if (/^-v$/) { $invert = 1; } elsif (/^--?(\?|h|help)$/) { $usage=0; } elsif (/^-/) { print STDERR "$name0:error: unknown option '$_'\n"; $usage=2; last; } elsif(!defined($pattern)) { $pattern = $_; } else { push @files, $_; } } if (defined $usage) { print "Usage: $name0 [--help] [-v] pattern files...\n"; print "where:\n"; print "--help Prints this help message\n"; print "-v Return functions that do not match pattern\n"; print "pattern A regular expression for the function name\n"; print "files... A list of files to search the function in\n"; exit $usage; } foreach my $file (@files) { open(IN, "< $file") || die "Error: Can't open $file: $!\n"; my $level = 0; my $extern_c = 0; my $again = 0; my $lookahead = 0; while($again || defined(my $line = <IN>)) { if(!$again) { chomp $line; if($lookahead) { $lookahead = 0; $_ .= "\n" . $line; } else { $_ = $line; } } else { $again = 0; } # remove C comments if(s/^(|.*?[^\/])(\/\*.*?\*\/)(.*)$/$1 $3/s) { $again = 1; next; } elsif(/^(.*?)\/\*/s) { $lookahead = 1; next; } # remove C++ comments while(s/^(.*?)\/\/.*?$/$1\n/s) { $again = 1; } if($again) { next; } # remove empty rows if(/^\s*$/) { next; } # remove preprocessor directives if(s/^\s*\#/\#/m) { if(/^\#[.\n\r]*?\\$/m) { $lookahead = 1; next; } elsif(s/^\#\s*(.*?)(\s+(.*?))?\s*$//m) { next; } } # Remove extern "C" if(s/^\s*extern[\s\n]+"C"[\s\n]+\{//m) { $extern_c = 1; $again = 1; next; } elsif(m/^\s*extern[\s\n]+"C"/m) { $lookahead = 1; next; } if($level > 0) { my $line = ""; while(/^[^\{\}]/) { s/^([^\{\}\'\"]*)//s; $line .= $1; if(s/^\'//) { $line .= "\'"; while(/^./ && !s/^\'//) { s/^([^\'\\]*)//s; $line .= $1; if(s/^\\//) { $line .= "\\"; if(s/^(.)//s) { $line .= $1; if($1 eq "0") { s/^(\d{0,3})//s; $line .= $1; } } } } $line .= "\'"; } elsif(s/^\"//) { $line .= "\""; while(/^./ && !s/^\"//) { s/^([^\"\\]*)//s; $line .= $1; if(s/^\\//) { $line .= "\\"; if(s/^(.)//s) { $line .= $1; if($1 eq "0") { s/^(\d{0,3})//s; $line .= $1; } } } } $line .= "\""; } } if(s/^\{//) { $_ = $'; $again = 1; $line .= "{"; $level++; } elsif(s/^\}//) { $_ = $'; $again = 1; $line .= "}" if $level > 1; $level--; if($level == -1 && $extern_c) { $extern_c = 0; $level = 0; } } next; } elsif(/^class[^\}]*{/) { $_ = $'; $again = 1; $level++; next; } elsif(/^class[^\}]*$/) { $lookahead = 1; next; } elsif(/^typedef[^\}]*;/) { next; } elsif(/(extern\s+|static\s+)? (?:__inline__\s+|__inline\s+|inline\s+)? ((struct\s+|union\s+|enum\s+)?(?:\w+(?:\:\:(?:\s*operator\s*[^\)\s]+)?)?)+((\s*(?:\*|\&))+\s*|\s+)) ((__cdecl|__stdcall|CDECL|VFWAPIV|VFWAPI|WINAPIV|WINAPI|CALLBACK)\s+)? ((?:\w+(?:\:\:)?)+($\w+$)?)\s*$([^$]*)\)\s* (?:\w+(?:\s*$[^$]*\))?\s*)*\s* (\{|\;)/sx) { $_ = $'; $again = 1; if($11 eq "{") { $level++; } my $linkage = $1; my $return_type = $2; my $calling_convention = $7; my $name = $8; my $arguments = $10; if(!defined($linkage)) { $linkage = ""; } if(!defined($calling_convention)) { $calling_convention = ""; } $linkage =~ s/\s*$//; $return_type =~ s/\s*$//; $return_type =~ s/\s*\*\s*/*/g; $return_type =~ s/(\*+)/ $1/g; $arguments =~ y/\t\n/ /; $arguments =~ s/^\s*(.*?)\s*$/$1/; if($arguments eq "") { $arguments = "void" } my @argument_types; my @argument_names; my @arguments = split(/,/, $arguments); foreach my $n (0..$#arguments) { my $argument_type = ""; my $argument_name = ""; my $argument = $arguments[$n]; $argument =~ s/^\s*(.*?)\s*$/$1/; # print " " . ($n + 1) . ": '$argument'\n"; $argument =~ s/^(IN OUT(?=\s)|IN(?=\s)|OUT(?=\s)|\s*)\s*//; $argument =~ s/^(const(?=\s)|CONST(?=\s)|__const(?=\s)|__restrict(?=\s)|\s*)\s*//; if($argument =~ /^\.\.\.$/) { $argument_type = "..."; $argument_name = "..."; } elsif($argument =~ /^ ((?:struct\s+|union\s+|enum\s+|(?:signed\s+|unsigned\s+) (?:short\s+(?=int)|long\s+(?=int))?)?(?:\w+(?:\:\:)?)+)\s* ((?:const(?=\s)|CONST(?=\s)|__const(?=\s)|__restrict(?=\s))?\s*(?:\*\s*?)*)\s* (?:const(?=\s)|CONST(?=\s)|__const(?=\s)|__restrict(?=\s))?\s* (\w*)\s* (?:\[\]|\s+OPTIONAL)?/x) { $argument_type = "$1"; if($2 ne "") { $argument_type .= " $2"; } $argument_name = $3; $argument_type =~ s/\s*const\s*/ /; $argument_type =~ s/^\s*(.*?)\s*$/$1/; $argument_name =~ s/^\s*(.*?)\s*$/$1/; } else { die "$file: $.: syntax error: '$argument'\n"; } $argument_types[$n] = $argument_type; $argument_names[$n] = $argument_name; # print " " . ($n + 1) . ": '$argument_type': '$argument_name'\n"; } if($#argument_types == 0 && $argument_types[0] =~ /^void$/i) { $#argument_types = -1; $#argument_names = -1; } @arguments = (); foreach my $n (0..$#argument_types) { if($argument_names[$n] && $argument_names[$n] ne "...") { if($argument_types[$n] !~ /\*$/) { $arguments[$n] = $argument_types[$n] . " " . $argument_names[$n]; } else { $arguments[$n] = $argument_types[$n] . $argument_names[$n]; } } else { $arguments[$n] = $argument_types[$n]; } } $arguments = join(", ", @arguments); if(!$arguments) { $arguments = "void"; } if((!$invert && $name =~ /$pattern/) || ($invert && $name !~ /$pattern/)) { if($calling_convention) { print "$return_type $calling_convention $name($arguments)\n"; } else { if($return_type =~ /\*$/) { print "$return_type$name($arguments)\n"; } else { print "$return_type $name($arguments)\n"; } } } } elsif(/\'(?:[^\\\']*|\\.)*\'/s) { $_ = $'; $again = 1; } elsif(/\"(?:[^\\\"]*|\\.)*\"/s) { $_ = $'; $again = 1; } elsif(/;/s) { $_ = $'; $again = 1; } elsif(/extern\s+"C"\s+{/s) { $_ = $'; $again = 1; } elsif(/\{/s) { $_ = $'; $again = 1; $level++; } else { $lookahead = 1; } } close(IN); }

2 years, 3 months

Re: [luv-beginners] Duplex not working on Samsung CLX 6260FW MF laser printer

by Trent W. Buck

[Re-CC'ing the list because I don't think this is secret or private.] Bruce Campbell wrote: > On 24/2/20 11:25 am, Trent W. Buck wrote: >> "Before you try any traditional vendor shit, see if the modern "driverless" approach works" etc. > Thanks for input Trent, have gone through "driverless" approach with help from user on Mint Forum. > > From your post tried changing > <-o sides=two-sided-long-edge> to > <-o duplex=duplexnotumble> > [but it] still prints out 2 single sided sheets. I found the support page here: https://support.hp.com/us-en/product/samsung-clx-6260-color-laser-multifunc… It looks like most or all 6260 models do at least *have* duplex print hardware. i.e. it's NOT simply that you're trying to print two-sided on a single-sided printer. I am too lazy to read the full manual. I would try poking around in the menus in case e.g. duplex module is turned off for some stupid reason. Good luck!

3 years, 1 month

Duplex not working on Samsung CLX 6260FW MF laser printer

by Bruce Campbell

Cannot print double- sided in LM 19.3- Cinnamon using Master PDF Editor nor scan both sides of document with the same app or using gscan2pdf. Able to do both in Windows 10. Have tried doing same through USB connection as per a post I found online but this made no difference. I am mainly wanting to print double sided & after searching online scanning double sided would see more problematic. A experienced user on the Mint Forum has tried many ways to solve problem but to no avail. The Samsung “Universal Linux Driver “(ULD) is installed. This is frustrating as I have virtually moved from Win 10 to LM & this seems to be the last stumbling block to doing so. Any input on this would be greatly appreciated- Bruce -- *Bruce Campbell* PO Box 45 LOCH SPORT VIC 3851 (03) 90130156 _Mob: 0427 347 012_

3 years, 1 month

Re: [luv-beginners] Computer security questions

by Peter Wolf

n 19/12/19 10:48 am, Piers Rowan via luv-beginners wrote: > > On 19/12/19 9:43 am, Piers Rowan wrote: >> >>> Very likely they are and have been.I have strong evidence of this >>> such as the following - >>> >>> - computer slow during startup,shutdown and general operation >>> compared to just after a fresh install >>> >>> ,I can tell because the fastest computer I normally use is a dual >>> core and have found these run quicker than hacked >>> >>> quad and 6 core computers for many /most applications when dual core >>> not hacked. >> >> >> How old it the computer? If you have dust in CPU fan then it will >> overheat and throttle the CPU so it doesn't overheat. (I just >> re-lifed a PC yesterdau for this reason). >> My computers are 10-20 years old and not overheating except for maybe 1 or 2 out of 20-30 computers. >> >>> >>> - After visiting dodgy websites that create dozens of connections to >>> residential computers with Firefox, >> >> >> Multiple connections are standard fare for advert laden sites. >> >>> >>> software updates no longer work and a change of password stops linux >>> Mint from starting up at all. >> >> >> That is strange. >> >> >>> >>> A check shows almost every file has had its permissions changed. >>> >>> - When apparently hacked ,some of my data (such as old important >>> looking photos) has mysteriously gone missing. >>> >>> - Firefox stops working with many websites when apparently hacked >>> and slows down dramatically. >>> >>> - excessive hard drive activity after I visit some websites,like a >>> search is going on. >>> >>> >>> - Once I found the "find" command running on one of my computers >>> using the command htop.It was taking a large chunk of CPU usage.I >>> never started the "find" command and it was running constantly. >>> >>> >> OK I'm guessing the HDD could be the issue - bad sectors would cause >> this behavior. >> >> Is it an old disk or a new SSD? >> >> I'm getting mostly the same thing on multiple computers (more than >> 10),they do have old hard (disk) drives.(5-15 years old) The above >> trouble has 90% gone after using my custom software to "stop the >> hacking".It's an interesting suggestion and although I very much >> doubt it is the cause, I can't definitively say that it's not.So I'll >> make a point of checking my hard drives. Thanks. > Thanks > _______________________________________________ luv-beginners mailing list luv-beginners(a)luv.asn.au https://lists.luv.asn.au/cgi-bin/mailman/listinfo/luv-beginners

3 years, 2 months

Re: [luv-beginners] Computer security questions

by Piers Rowan

On 19/12/19 9:43 am, Piers Rowan wrote: > >> Very likely they are and have been.I have strong evidence of this >> such as the following - >> >> - computer slow during startup,shutdown and general operation >> compared to just after a fresh install >> >> ,I can tell because the fastest computer I normally use is a dual >> core and have found these run quicker than hacked >> >> quad and 6 core computers for many /most applications when dual core >> not hacked. > > > How old it the computer? If you have dust in CPU fan then it will > overheat and throttle the CPU so it doesn't overheat. (I just re-lifed > a PC yesterdau for this reason). > > >> >> - After visiting dodgy websites that create dozens of connections to >> residential computers with Firefox, > > > Multiple connections are standard fare for advert laden sites. > >> >> software updates no longer work and a change of password stops linux >> Mint from starting up at all. > > > That is strange. > > >> >> A check shows almost every file has had its permissions changed. >> >> - When apparently hacked ,some of my data (such as old important >> looking photos) has mysteriously gone missing. >> >> - Firefox stops working with many websites when apparently hacked and >> slows down dramatically. >> >> - excessive hard drive activity after I visit some websites,like a >> search is going on. >> >> >> - Once I found the "find" command running on one of my computers >> using the command htop.It was taking a large chunk of CPU usage.I >> never started the "find" command and it was running constantly. >> >> > OK I'm guessing the HDD could be the issue - bad sectors would cause > this behavior. > > Is it an old disk or a new SSD? > > > Thanks >

3 years, 3 months

Computer security questions

by Peter Wolf

Hello, I'm still having major problems with computer security of Linux Mint 19 MATE.I believe that with default settings ,this version of linux is unusable as it gets hacked in a few minutes by bots,mainly via firefox. I have not found any security measures to prevent this and have had to write custom software to stop the hacking or mostly stop it. I've found that the previously mentioned "firehol" firewall program doesn't stop the hacking,it maybe delayed it by a few days at first.The same goes for ufw,but maybe I'm not using it correctly.The default apparmor profile for firefox simply does nothing or close to nothing to protect the computer.I've written my own firefox apparmor profile which has worked reasonably well for weeks/months but is still not complete .I've also written my own active firewall program that blocks connections from all residential computers (which are probably mostly hacked and used as bots to hack other computers) and rented servers.This combination of programs as well as a few others not written by me ,like snort and fail2ban have mostly stopped the hacking but not completely.I haven't had to reinstall linux for a month or so on any of my machines.Unfortunately,recently, I've discovered that snort and fail2ban have been disabled on many of my machines and that the logviewer seems to not be working properly.So my questions are - what is the command to run the linux mint logviewer? (I normally run it from the menu) - is it normal for the linux mint logviewer to automatically switch viewing logs after a few seconds? (I strongly suspect not) regards Peter

3 years, 3 months

computer security questions

by Peter Wolf

Hello, This is a follow up email in the hope that someone as confused as me might find it useful. I have solved my computer security issues for now using the following script. ----------------------------------------------------------------------------------------------- #!/bin/sh sudo apt install -y apparmor sudo apt install -y apparmor-profiles sudo apt install -y apparmor-profiles-extra sudo apt install -y apparmor-utils sudo aa-enforce /etc/apparmor.d/* fireholpath="/usr/sbin/firehol" sudo apt remove -y ufw sudo apt install -y firehol sudo crontab -u root -l > temp.txt if grep 'firehol' temp.txt; then echo "no need to update crontab" else echo "updating crontab" echo "@reboot $fireholpath start" >> temp.txt sudo crontab -u root temp.txt fi sudo firehol start --------------------------------------------------------------------------------------------- I don't know how smart the above script is , but it works for me.I found that the default firewall with linux mint (ufw) was not working effectively.At least with the default settings it comes with.My computers were getting hacked through using firefox with attackers gaining root access in about 20 minutes no matter how strong the password was.In such times, changing the hostname and password helped things temporarily. Enjoy your linux. regards Peter

3 years, 5 months

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

luv-beginners