- luv-main - luv.asn.au

Re: bash 'Shell Shock' vulnerability
by Peter Ross 27 Sep '14

27 Sep '14

From: "Rohan McLeod" <rhn(a)jeack.com.au> > Any news regarding mobile phones and routers etc ? I have an older QNAP NAS appliance (used for backup) that is vulnerable as well. The web interface died four weeks ago so it seems to be time to retire it anyway;-) AFAIK Busybox uses ash. That should be okay for some appliances. On an Apple, I wonder what breaks if you point sh and bash to ksh (until the fix comes in) Probably not much. Regards Peter

2 3

Re: bash "Shell Shock" vulnerability
by Peter Ross 27 Sep '14

27 Sep '14

From: "Joh Lindley" <joh.lindley(a)dcwest.net.au> >> Is Apple's sh a bash? I thought they are using FreeBSD's userland (FreeBSD's sh is not affected [at least the tests are negative and there >> is no SA]) > It would appear so. > sh-3.2$ env x='() { :;}; echo vulnerable' bash -c "echo this is a test" vulnerable > this is a test You are calling the bash [not /bin/sh] here. It shows that you have a bash installed. Regards Peter

8 7

Re: bash "Shell Shock" vulnerability
by Peter Ross 26 Sep '14

26 Sep '14

On 26/09/14 5:22 AM, Douglas Ray wrote: > >> Anyone on OS-X, it affects their bash, sh, csh, tcsh, zsh, ksh; ie, all >> the distributed shells. > > only bash and sh. > csh, tcsh, zsh, ksh not vulnerable. Is Apple's sh a bash? I thought they are using FreeBSD's userland (FreeBSD's sh is not affected [at least the tests are negative and there is no SA]) Regards Peter

1 0

Updated web link for MLUG
by Sae Ra Germaine 24 Sep '14

24 Sep '14

Hi All, We'd really appreciate any info anyone might have on this; The link to MLUG - http://www.mlug.org.au - no longer appears current. Does anyone know if MLUG still exists or if per chance the domain has changed? Warm Regards, Sae Ra -- Sae Ra Germaine Ordinary Council Member Linux Australia http://linux.org.au

2 1

Re: Root filesystem unexpectedly remounted in read-only
by Peter Ross 23 Sep '14

23 Sep '14

From: "Tim Connors" <tim.w.connors(a)gmail.com> > On Fri, 19 Sep 2014, Craig Sanders wrote: >> On Thu, Sep 18, 2014 at 10:48:00AM +0200, Michele Bert wrote: >> > 1) Can bad block appear on a virtual disk too? Even if it is >> > eventually just a flat file in the host filesystem? >> > 2) Are those bad blocks related to real bad blocks on the physical >> > host file system? > vmware will tend to drop disk paths well before linux would have a problem > with them, in the name of High Availability. Whilst Linux would just log > a 120s hangcheck timer alert to the syslog if the disk didn't answer in > 120 seconds, vmware might respond to the same disk outage by I have seen the same with Oracle VirtualBox. The "disk" was an ordinary file. The write timed out so Linux (the same Ubuntu 12.04) perceived it as a disk failure and remounted read-only. There were no physical hardware errors involved. It caught me by surprise when it happened and it took a little bit until I understood what's going on. The system just behaved weird (it was only one of three virtual disks so the system worked partially) I have a nagios/Icinga script checking the expected mounts since then. It compares the mounts with a mount "snapshot" written in a file after installation. Regards Peter

2 1

Hilbert Curves In Python
by David Zuccaro 23 Sep '14

23 Sep '14

Hi, I have been learning python and I have recently written a little program that creates Hilbert curves which I submit to this list for critique and review: # Hilbert Curve # David Zuccaro # 18/09/2014 import sys import pygame import math class cursor: def __init__(self, a): # a should be a list of 2 numbers ie a point. self.a = a def line(self, a): # draw a line from he current position from the new position; update current position pygame.draw.lines(window, (255, 255, 255), True, [[self.a[0], self.a[1]], [self.a[0] + a[0], self.a[1] + a[1]]], 1) self.a[0] = self.a[0] + a[0] self.a[1] = self.a[1] + a[1] def hilbert(self, kind, order): row = ((1,0,0,2), (0,1,1,3), (3,2,2,0), (2,3,3,1)) # hilbert curve definition table 0 = A 1 = B ... dir = ((0,3,2), (3,0,1), (1,2,3), (2,1,0)) # definition of A, B, C, D orient = ((0,-1), (-1,0), (0,1), (1,0)) # definition of up, left, down, right dist = 30 # length of segment if order > 0: for j in range(4): self.hilbert(row[kind][j], order - 1) # keep on hilberting until order = 0 if j < 3: self.line([x * dist for x in orient[dir[kind][j]]]) #this was the previous code but I thought it would be cleaner if # more abstruse to do this all in one line ^ # if dir[kind][j] == 0: # self.line(0, -dist) #up # if dir[kind][j] == 1: # self.line(-dist, 0) #left # if dir[kind][j] == 2: # self.line(0,dist) #down # if dir[kind][j] == 3: # self.line(dist, 0) #right pygame.init() #create the screen window = pygame.display.set_mode((1900, 1000)) david = cursor([10,970]) # starting point increasing y moves down screen david.hilbert(0, 5) # create a fifth order hilbert curve #draw it to the screen pygame.display.flip() #input handling (somewhat boilerplate code): while True: for event in pygame.event.get(): if event.type == pygame.QUIT: sys.exit(0) #end Output is here: http://members.optuszoo.com.au/~david.zuccaro/hilbert2.png https://en.wikipedia.org/wiki/Hilbert_curve

6 6

Root filesystem unexpectedly remounted in read-only
by Michele Bert 23 Sep '14

23 Sep '14

Hello. I am working on an Ubuntu 12.04, virtualized by a VMWare server, usually through a remote desktop protocol (see xrdp) or a simple ssh connection. This machine which is rebooted very rarely (basically only when there is an updates which needs a reboot to be applied). This morning, when I've reconnected to rdp session, I found that the root was mounted readonly (visible from the /proc/mount, becouse /etc/mtab was not up to update). After a reboot, and a filesystem check all seems to work, but it was quite a curious situation! Searching on the web I found that it happens tipically when kernel finds bad blocks on the disk, but since it's a virtual disk, I have some question. 1) Can bad block appear on a virtual disk too? Even if it is eventually just a flat file in the host filesystem? 2) Are those bad blocks related to real bad blocks on the physical host file system? Thanks in advance for any answer. -- Mick

4 3

Getting the Linux console to ignore a usb remote control?
by Paul Dwerryhouse 17 Sep '14

17 Sep '14

Hi all, I'm connected an mceusb remote control to a Raspberry Pi and plan to use it to control my audio system. I'm directly reading data from /dev/input/event0, which is all well and good (can't be bothered with lirc, it's too much trouble). The one catch to this is that the mceusb remote appears to the system as a keyboard, so while I'm pressing keys, they will be also going to the system console, and I can see from syslog that these keypresses are going to /bin/login (obviously): Sep 16 07:22:47 tart login[31297]: FAILED LOGIN (1) on '/dev/tty1' FOR 'UNKNOWN', Authentication failure This is less than ideal, so can anyone think of any way to stop the usb remote from being seen as a keyboard, or to get the system to ignore it? I'm not running X on the system, it's just a console-based. Cheers, Paul -- Paul Dwerryhouse paul(a)dwerryhouse.com.au

3 4

Re: Trouble booting up Ubuntu 14.04 Live CD in Laptop with UEFI
by Douglas Ray 15 Sep '14

15 Sep '14

... On 15/09/14 6:03 AM, Wen Lin wrote: > With further googling, I came across this URL: UEFI Installing - Tips > http://ubuntuforums.org/showthread.php?t=2147295 > > It has lots of tips about all things Ubuntu install/dual-boot under > UEFI, secure boot, etc. One section, titled: *Black Screen/ Video Modes* Thanks for passing on the research! cheers, Douglas

1 0

Re: MIME weirdness? [was: Trouble booting up Ubuntu 14.04 Live CD in Laptop with UEFI]
by Erik Christiansen 15 Sep '14

15 Sep '14

On 15.09.14 10:38, Trent W. Buck wrote: > Wen Lin <vwenlin(a)gmail.com> writes: > > > This usually required with AMD or nVidia > > <200b>, suggested kernel parameters: > > <200b>in place of quiet splash > > <200b>, adding<200b> > > > > acpi_osi=Linux acpi_backlight=vendor > > > > <200b>And it worked after that! > > I read this list via gmane, and the above looks weird there: > http://article.gmane.org/gmane.org.user-groups.linux.luv.general/4108 > > It looks the same in my newsreader. > > At first I thought there were inline multipart MIME objects > (e.g. between "parameters:" and "in place of"), but what looks like an > underscore in Emacs is apparently a ZERO WIDTH SPACE (0x200B, or  > in the HTML link above). Looking at the post in mutt, a whole bunch of those "=E2=80=8B"¹ whatsits occur in both the text/plain and text/html components of the message. Curiously, they are invisible in mutts pager, but five of them appear (in a highlight colour) as "<200b>" in the quoted text above, in vim as I compose this reply. To render them at your end, I've converted each to its 6 character rendering here. There seems to be one immediately before or after every newline terminating a non-blank line - almost. One blank line seems to have caused the whatsit on the "acpi_osi=" line to occur early. My guess is that the text was generated with some sort of M$ product. (So perhaps, as in daily life now, we should be alarmed but not alert.) Erik ¹ That's "= E 2 = 8 0 = 8 B", without spaces, in case mail agents perform contortions on it. -- At the Victorian [era] version of the X Factor, the talent show format was stripped right back to its bare bones. Just six contestants and a stage, each and every man singing his heart out to impress the judges. While carrying a pig. http://www.bbc.com/news/blogs-magazine-monitor-28982145-

1 0