[00:26] Last time I re-instsalled Ubuntu, grub said it was setting up hd0. But I have SCSI RAID, so my boot device is sda and its partition is sda1. Is this the boot problem I'm having? [00:46] Has anyone gotten dovecot-antispam working on 9.10, and if so, how? [01:08] Hi, how can you remove all current iptables rules === dendro-afk is now known as dendrobates [01:21] roy_: there's a flush option [01:22] iptables -F i think [01:23] I did this, its because my website says connection refused, what would cause this if its not related to iptables [01:24] it usually means it doesn't listen to that port [01:25] iptables/ufw will normally just drop the packet, not send icmp reply [01:25] I finished formatting my 18.2GB SCSI drives. They were used so I guess it isn't a great surprise that 5 out of 6 work. I think the store I got them from has a couple more. [01:26] How can i fix this === dendrobates is now known as dendro-afk [01:51] Why do you guys suggest using qemu with kvm instead of say xen? [01:54] oh - obvious answer found === dendro-afk is now known as dendrobates [02:05] ubuntu-vm-builder is deprecated and vmbuilder is taking it's place - what provides vmbuilder? [02:06] oh... found it :) [02:06] I look and look, ask, then find the answer :P [02:12] MTecknology, using Xen 4rc8 with pvops 2.6.32.10 kernel on karmic 9.10 [02:13] also without any libvirt [02:15] ChmEarl: isn't libvirt just designed to be an easy to use wrapper around virt tools like xen and kvm? === AntORG_ is now known as AntORG === dendrobates is now known as dendro-afk [02:58] Tallken, ScottK : thanks for your tip i'll try that.. [02:59] !libvirt [02:59] !kvm [02:59] kvm is the preferred virtualization approach in Ubuntu. For more information see https://help.ubuntu.com/community/KVM [03:02] I used vmbuilder to build VM's on my system. Then I realized I need to install libvirt-bin. I installed that and then ran virsh -c qemu:///system and in there ran list --all but none of the vm's I made show up. How can I make them show up in this list? [03:03] MTecknology, (in virsh shell)#define /path/toVM.xml [03:05] ChmEarl: any idea where the xml files sit? [03:06] MTecknology, you only ran the VM once when you installed it? Are any still running? [03:06] ChmEarl: I didn't run them yet, I've always started vm's from virsh [03:07] to find the xml files, do #updatedb.. then locate [03:07] hrm.. there was a run.sh file made that has exec kvm -m 768 -smp 2 -drive file=tmpOoaNco.qcow2 "$@" [03:08] there's no xml found when I do that [03:09] maybe a log file? [03:09] I used --dest /virt/images/repono [03:09] there I have run.sh and tmpxYbvEy.qcow2 [03:10] I'll try running the run.sh and see if I can find the cml [03:10] k, then start then VM via the script - while its running get the virsh shell and do #dumpxml [03:11] domain not found [03:12] ChmEarl: since I didn't do anything useful yet; would it be out of the question to delete the vm's; recreate them; but now with libvirt installed? [03:13] that is OK, but don't the scripts enter a vmname now in virsh list? [03:13] once the vm is running? [03:14] nope [03:14] ok, something is broken [03:15] Does this look ok for creating a vm? vmbuilder kvm ubuntu --dest /virt/images/incipio --mem 768 --cpus 2 --swapsize 512 --domain incipio --ip dhcp --bridge br0 [03:15] never used that builder. [03:15] it looks like ubuntu-vm-builder is being deprecated [03:16] the man page says to use that instead [03:16] I made a VM directly by qemu-kvm comdline [03:16] oh [03:17] I'll see what happens when I make this - maybe I'll have to jsut do it that way too [03:18] there are 4 or more ways to make a VM for kvm [03:18] once you have a cmdline you can convert it to domxml used by Libvirt and import/define it [03:19] ya.. I could do it with virt-install too, but I liked ubuntu-vm-builder; but that's going away so I figured now's the time to learn what's replacing it :P [03:19] I'm guessing qmail should install just fine on a default ubuntu 9.10 server? [03:20] virsh domxml-from-native xxyy [03:20] I'm getting an: qmail: Depends: ucspi-tcp but it is not installable [03:21] I didn't think qmail was available in ubuntu repos [03:21] hi guys... i installed recently the ubuntu server with cloud [03:22] ChmEarl: hurray, they're still not being found [03:22] it is normal have the system just running without any instance running in eucalyptus [03:22] with more than the 50% of ram used? === dendro-afk is now known as dendrobates [03:22] and when i use "top" to see who is sharing that ram, there's no process with huge use [03:23] ChmEarl: hrm... maybe it's because I specified kvm as the hypervisor instead of qemu.. [03:24] nope.. [03:24] VMBuilder.exception.VMBuilderUserError: No such hypervisor. Available hypervisors: vmserver esxi xen kvm vbox vmw6 [03:25] anyone with experience with cloud ? [03:25] --libvirt= - THERE [03:27] MTecknology, you have a hook into libvirt? that should do it [03:29] ChmEarl: I guess I didn't read the man page close enough [03:31] MTecknology, keep your VM's simple until you see the scheme of things... puppy linux (liveOS) is a good one [03:34] ChmEarl: hurray - virsh -c qemu:///system list --all | but it's named ubuntu :S - i guess back to man [03:35] MTecknology, export the domxml while its running [03:52] so I came up with an idea [03:52] ChmEarl: fyi - this was REALLY nice to find - vmbuilder kvm ubuntu --help [03:53] ChmEarl: thanks for the help :) [03:53] lukehasnoname: I did too, and I'm rolling it out right now [03:53] and I don't know if it's been thought of before.. so I'll throw it out there and see if it's been 'invented' already [03:53] MTecknology, feel free to chare [03:54] lukehasnoname: get a decent desktop system for all of my dev systems and isntead of gentoo use the system for work instead of constantly building the system - put ubuntu vm's on and don't break things [03:56] New bug: #556176 in openldap (main) "slapd homedir (and some enhancements...)" [Undecided,New] https://launchpad.net/bugs/556176 [03:56] what's your idea? [03:57] There are many well known, standard configuration files on a server. dhcpd, named, db.*, upstart confs, etc. Each one of these tend to have their own syntax check mechanism of sorts, even if it is when you start the service... so there should be a standard header syntax (or filename convention) that allows vi(m) to know what file you're editing, and check syntax on the fly. Kinda like what visudo does, but instead of be [03:57] ing its own program, it would be a plugin system for vi, like a profile. [03:58] This may already exist, but if it doesn't, it's pure genius. I spent hours in the past two days tracking down DNS/DHCP issues that ended up being simple config file errors. Should have been the first place I checked, but having a parser in vi would be awesome. [03:58] you can do that [03:59] check out gentoo, they do it a lot - ubuntu does it but to the extent they do it [04:01] am I crazy, or has ubuntu really customized the postfix install? [04:01] I'm trying to follow information from several different guides and it is proving difficult [04:02] it's not really a header thing when it comes to vim but I think vim just applies specific syntax hilighting to specific files - adding a header to the files would be a bad idea - especially when it comes to other editors [04:02] crazygir: It's not radically different. [04:02] I'm also not understanding what's up with master.cf, nor why main.cf is missing from /etc/postfix [04:02] amd I missing something? [04:02] It should be there. [04:02] *am I [04:02] hrm [04:02] crazygir: crazy likely comes into play as well - I know it does for me [04:02] crazygir: sudo dpkg-reconfigure postfix is a good start. [04:03] herp-aderp: I knew vim had syntax highlighting... hm. Do you know where the info or syntax profiles are stored? [04:03] lukehasnoname: no, but you could ask in #vim - they're pretty helpful [04:03] MTecknology, nvmd [04:04] w00t! thanks ScottK !! [04:04] I occasionally ask questions before I look for the answers myself... man vim [04:04] crazygir: https://help.ubuntu.com/9.10/serverguide/C/postfix.html is a maintained set of documentation on postfix setup that's specific to Ubuntu. [04:05] lukehasnoname: sometimes it's just too easy to ask hundreds of people a question at once instead ot trying to learn it yourself by looking ;) [04:05] (assuming you're on 9.10, use the version for your release) [04:05] ScottK: what's your opinion of setting up productions systems with 10.04 at this point? [04:05] Depends on what you mean by production. [04:06] I have a 'test server' that runs all the time, but I'm the only user. [04:06] I'll upgrade that soon. [04:06] development server that shouldn't go down [04:06] If by production you mean "I have customers who rely on my service", then I wouldn't. [04:08] crazygir: The biggest configuration customization for Postfix in Debian/Ubuntu is that it's chrooted by default. [04:08] Our docs cover this, but most tutorials you find on the web don't, so it is better to stick with Ubuntu specific docs. [04:08] I was just banging my head regarding the missing files and needing to run dpkg-reconfigure [04:08] ScottK: does a chroot help security much? [04:09] MTecknology: why not? [04:09] depends on how complex maintenance is though [04:09] when officially supported like this, it is usually pretty straightforward [04:09] MTecknology: It's not a subsitute for apparmor or selinux, but it does help. [04:09] The trickiest part is getting services into the chroot and I think we have those bugs all licked. [04:11] Also, unlike rpm based systems additional run time capabilities that most people won't need are split into separate binaries (like postfix-mysql) so you don't need more installed/running than you actually need. [04:14] what is the difference between mydestinations and virtual domains? [04:22] I hate it when ssh keys don't magically work perfect [04:23] hah [04:23] always some lining up to do [04:25] crazygir: I installed a new server; mkdir .ssh; vim .ssh/authorized_keys2; (put in contents of .pub); chmod 750 .ssh; chmod 644 .ssh/*; exit; ssh 192.168.1.111 [04:25] crazygir: should work perfect just like magic, right? [04:31] I also jsut tried with ssh-copy-id [04:31] it will copy the key - but still no ssh login.... [04:34] oh... problem with ecryptfs [04:35] ScottK: how do I stop using ecryptfs for a home directory? [04:35] I do it differently, so I can't comment [04:36] check your system's manpages for ssh too, not sure about the auth_keys2 [04:36] also.. use -vvv for debugging [04:38] definteily an issue with ecryptfs [04:41] i give - time to reinstall the server and do so without ecryptfs [04:41] I don't think it's meant for servers anymore [04:44] do I need to specify configuration options such as: virtual_mailbox_base, if all I'm doing is then forwarding the emails to another domain? [04:52] virt-viewer is connected to the vnc server but all I get is a blinking cursor.. GAH! [04:54] closer anyway - sleep time [05:48] anyone knows why sound only works for root after installing alsa on lucid? [05:48] (I'm using an onboard Intel HDA card) === swift__ is now known as swift [08:15] I don't suppose anybody still cares, but Hardy's m-a borks, at least on netfilter-extensions-source, because of an implicit dependency on dpatch. [08:21] http://paste.ubuntu.com/409897/ [08:25] twb: Probably not. That version isn't supported anymore, iirc. [08:26] April 2008 plus five years makes it supported until April 2013. [08:26] twb: we do care and yes it's still supported. [08:26] (Except for all the packages in LTS that aren't considered "server" packages, sigh.) [08:26] what's m-a ? [08:26] ttx: module-assistant. [08:26] ttx: the thing before DKMS [08:26] ack [08:28] twb: how is the error in your log related to dpatch ? [08:30] ttx: that was a different error :-) [08:31] ah :) [09:11] New bug: #556285 in samba (main) "cannot change password of AD user when using pam_winbind" [Undecided,New] https://launchpad.net/bugs/556285 [09:13] <_ruben> anyone have any clue as to what could the cause of messages like this: sudo: pam_unix(sudo:auth): authentication failure; logname= uid=0 euid=0 tty= ruser= rhost= user=root [09:14] failed sudo commands [09:14] <_ruben> but it doesnt mention which user supposedly caused it [09:15] have a root through your logfiles :) [09:16] auth.log, I think [09:16] Hmmm [09:17] _ruben: It seems the user trying to sudo is root [09:18] <_ruben> why would root fail to sudo as root? [09:18] i've not the foggiest. [09:19] <_ruben> and i'd expect logname=root in that case [09:20] <_ruben> hrm .. the very first entry does show logname=root and its on a tty, now i know who to ask/slap [10:11] New bug: #556312 in libvirt (main) "libvirt packages should not Recommend hypervisor packages" [Undecided,New] https://launchpad.net/bugs/556312 [10:16] New bug: #556315 in libvirt (main) "problem with operations on qemu/kvm guest" [Undecided,New] https://launchpad.net/bugs/556315 [10:46] New bug: #556332 in bind9 (main) "leftover /etc/init.d/bind9.dpkg-dist on 9.10 -> 10.04" [Undecided,New] https://launchpad.net/bugs/556332 [10:56] New bug: #556342 in samba (main) "winbind pam profile doesn't get installed or removed when package is installed/removed" [Medium,In progress] https://launchpad.net/bugs/556342 [10:56] New bug: #556343 in bind9 (main) "upgrade error on 8.04 -> 10.04 " [High,New] https://launchpad.net/bugs/556343 === swift_ is now known as swift [12:00] newbie question, how on earth do you get into the grub menu now, it goes past so fast and there is no hit esc to get the menu [12:03] try searching on how to edit grub config to add a 30 second pause [12:04] its a bit late for that, [12:04] how so [12:04] i think the file wouls be in /boot [12:05] i goofed my bonding and well, the system is grindly slow has it times out trying to get the DNS entry for ldap servers [12:05] oh thank god i set a root password [12:06] why are you so thankeful about that [12:06] because i can get into the system [12:06] whats the diffrence [12:06] u cant get into the system with other usernames? [12:07] set up ldap auth, break the network config [12:07] then try logging in using a local user === swift__ is now known as swift === dendrobates is now known as dendro-afk [12:54] ttx: ping i backported mod-reqtimeout for lucid, its suppose to help against slowloris, do I need a FFE for it? [12:54] zul: is is a new source package ? [12:54] ttx: nope its a patch [12:55] slowloris as in Solaris? [12:55] twb: no slowloris as in apache dos hack [12:55] Oh. [12:55] zul: does it add new config directives ? [12:55] i got all these rootkits i dont think im ever going to use beta software again [12:56] ttx: yeah i backported it from 2.2.16 and enabled it [12:56] is it disabled by default ? [12:56] im considering going back too ubuntu 8.0.4 [12:56] nope enabled by default [12:56] I don't run fancy-pants httpds, because dynamic content is new-fangled rubbish :-) [12:56] zul: definitely FFe-worthy, I wonder if it should not be disblaed by default to ease the acceptation of it [12:56] incorrect: hold shift while booting to enter the grub2 menu [12:57] ttx: ack [12:57] zul: having someone from security comment on its desirability would definitely help [12:57] jasonmchristos: if you're really concerned about security, you might want to look at OpenBSD. [12:57] ttx: sure [12:58] jasonmchristos: rootkits? what rootkits? [12:58] thats what they said about linux when i was on microsoft then another room told me solaris is unhackable [12:58] rootkits are basically backdoors [12:58] * ttx chuckles [12:58] back orafices [12:59] I think mdeslaur's point is that you don't get a rootkit unless you're already compromised some other way. [12:59] jasonmchristos: we know what rootkits are. What rootkits doid you get "running beta software" ? [12:59] jasonmchristos: I know what a rootkit is. Please tell me what rootkit you have. [12:59] one scanner says SUCKIT the othr says Zxibit [13:00] jasonmchristos: see also #ubuntu-hardened [13:00] thanks [13:00] this was on the lucid beta [13:00] im still going to scan my server [13:00] jasonmchristos: those are probably false alerts in the scanning software you used. Could you tell me which scanners you used so I can fix the false alerts? [13:01] rkhunter and chkrootkit [13:01] by default lucid had some open port [13:01] i guess thats where the rootkit got in [13:01] <\sh> jasonmchristos, lucid beta has no rootkits by default...if you have at least one, you got it before...or the scanner is wrong [13:01] in the 6xxxx range [13:01] jasonmchristos: what open port? [13:02] jasonmchristos: did you use the rkhunter and chkrootkit packages, or did you download them? [13:02] packages [13:02] from repo [13:03] well as soon as i installed lucid it had a listening port [13:03] i installed it on a blank drive [13:03] jasonmchristos: did you install using the *server* install CD? [13:04] i dont mean to bother you guys but im actually talking about a dsktop my server is karmic going to scan and make sre it didnt creap its way over there [13:04] jasonmchristos: that's an important datum you should've mentioned up-front. [13:04] <\sh> jasonmchristos, when you tell us something about a rootkit, an open port, and "it got through this open port" we are very interested...because this would be a serious security issue...which needs to be addressed... [13:04] jasonmchristos: did nmap or netstat/ss report what process was listening on that port? [13:05] i know but i figured server is the same except with the desktop package installedd [13:05] thats what i did not know how to check [13:05] i also have a packet sniffer installed on wlan0 [13:07] jasonmchristos: is the port open right now? [13:07] let me try an check [13:07] why u want to login? [13:07] lol [13:07] * \sh just remembered the story "The Boy Who Cried Wolf" [13:08] jasonmchristos: no, so that we can (dis)prove your assertions [13:08] no im serious im not cring wolf [13:08] what u think rkhunter and chkrootkit r lying? [13:09] jasonmchristos: rkhunter detecting Xzibit is a false alert, I can reproduce it and will fix it [13:09] jasonmchristos: I think it's likely you're analysis is faulty. [13:09] <\sh> jasonmchristos, yes... [13:09] dont matter im going to do a fresh install karmic never produced these [13:09] someone go ahead and rn backtrack at my ip [13:10] jasonmchristos: we can't fix an issue if we can't reproduce it. [13:10] jasonmchristos: do as you wish [13:10] well what do you want me to do [13:10] u want my rkhunter and chkrootkit logs? [13:10] jasonmchristos: I just told you rkhunter is broken, it's detecting a rootkit in lucid for everyone. I'll get it fixed. [13:11] jasonmchristos: what I want you to do is answer my questions. [13:11] im looking at my netstat and there are so many ports open now i cant remember which was open after a fresh install [13:11] trying to answer you [13:12] what about the packet sniffer on wla0? [13:12] jasonmchristos: what about it? [13:12] that also a flse alarm? [13:12] !smart questions [13:12] Stupid bot [13:13] go go gadget bot [13:13] lol [13:13] !gq [13:13] Are you sure your question allows us to help you? Please read http://www.sabi.co.uk/Notes/linuxHelpAsk.html to understand how to ask a 'better' question. [13:13] jasonmchristos: please post your rkhunter and chkrootkit logs [13:13] jasonmchristos: or, alternatively, you can send them to security@ubuntu.com and I'll look at them [13:14] ok hold on just for you guys ill let u tinker for a bit but after this if you can help explain or direct me too a tut on how to inject the crypto disk key for my home directory to a fresh install those were my plans [13:14] jasonmchristos: while you're at it, the output of "sudo ss -nap" [13:15] ok im on it [13:17] where is the chkrootkit logs? [13:17] i already attached the rkhunter [13:17] ill just run it again and cut n paste [13:18] smoser, hggdh; ping me when around [13:19] funn all of this sudden it isnt detecting the SuckIT rootkit [13:20] jasonmchristos: btw, you might want to filter 8080 on the internet side unless you actually want people banging against it. [13:20] it poen? [13:20] open? [13:21] jasonmchristos: it's open at the TCP level, meaning that squid has to 401 instead of ICMP rejecting it cheaply in the kernel. [13:21] Normally I'd tell internal services to only bind to internal interfaces, but I don't know offhand how to tell squid that. [13:22] (That and a default-deny netfilter.) [13:23] twb: thats my remote manegment on my router [13:23] i figured thats better to leave open than an SSH port [13:23] but then i can always use 8080 to open my ssh port when i need it [13:25] whatever port that was it was upnp capable but its not up anymore because i dont see any upnp ports open but right after a fresh install it was in the 6xxxx range [13:25] suckit must have self destructed but rkhunter still detects zxibit [13:25] have the email ready [13:25] Isn't upnp one of those gaping-hole "features"/ [13:26] lol [13:26] i think im going to disable it [13:26] jasonmchristos: rkhunter is broken [13:26] http://en.wikipedia.org/wiki/Upnp#Lack_of_Default_Authentication [13:26] ok who wants this email with all the outputs [13:26] !pastebin [13:27] For posting multi-line texts into the channel, please use http://paste.ubuntu.com | To post !screenshots use http://tinyurl.com/imagebin | !pastebinit to paste directly from command line | Make sure you give us the URL for your paste - see also the channel topic. [13:27] its had to get voip like ekiga to work without upnp because it uses rando mports [13:28] My job is to make the network safe, not useful [13:30] http://paste.ubuntu.com/410006/ [13:30] lol good point twb [13:30] do you work for ubuntu or another company? [13:31] ubuntu isn't a company :) [13:31] canonical is, though [13:31] <\sh> twb, this would make a nice quote ;) "twbs job is to make the network safe, not useful" ;) [13:31] I work for cybersource.com.au [13:32] FSVO work = drink their coffee and use their link. [13:32] jasonmchristos: the only thing listening on a high port there is skype, which is not part of Ubuntu. [13:33] yeah it sems to have dissapeard [13:33] jasonmchristos: well, get back to us when you can reproduce the issue [13:33] the xzibit thing is there [13:34] We've already covered that [13:34] if u think its a false alarm u want to fix [13:34] thought u guys ant to fix it [13:34] jasonmchristos: I've opened bug 556455 for the false alarm, and I'll fix it today [13:34] Launchpad bug 556455 in rkhunter "rkhunter incorrectly detects Xzibit Rootkit in Lucid" [Undecided,New] https://launchpad.net/bugs/556455 [13:34] jasonmchristos: bugs that can't be reproduced can't be isolated, and thus can't be fixed. [13:35] hey folks, can anyone help with a permissions issue please? I've need to give a group rw access to a mounted network share. I've tried everything that seems relevant on https://help.ubuntu.com/community/MountWindowsSharesPermanently, but can only manage to write with the root user. The other user in the group cannot write. [13:36] psyferre: is the network share CIFS, NFSv3, NFSv4, or something else? [13:36] looks like samba [13:36] twb: I tried cifs and smbfs [13:36] Sorry, I didn't read [13:36] The machine on the other end is a netapp storevault [13:36] psyferre: smbfs is obsolete; you should only need to try cifs. [13:38] yeah but i think you need to edit the fstab [13:38] twb: okay, thanks. My current fstab has: //nas01/shares/ /network/nas01/shares cifs rw,_netdev,username=DOMAIN/user,password=password,dir_mode=775,gid=1001 0 0... does that seem right? [13:38] -ogid is how I'd do it with NTFS; and that wiki article seems to indicate the process is the same for CIFS. [13:39] psyferre: do you really have a user on the NAS called "DOMAIN\user"? [13:39] twb, well, no... I edited out the real domain and user name for security purposes [13:39] If I can do something useful by knowing your domain and username, you have BIG problems. [13:40] twb: heh, true enough. :) I'd prefer to be on the safe side though :) [13:40] Does "getent group 1001" return the correct group? [13:40] yes [13:40] i think you need to add the ,user optiojn [13:40] Is it a primary or secondary group? [13:41] secondary [13:41] Has the test user logged out and back in since you added them to that secondary group? [13:41] jasonmchristos: just tried adding ,user and there's no change [13:42] psyferre: i wrote a howto for nfs http://blog.jasonmchristos.info/search?q=nfs but i had to make it readable by something other than root so try this [13:42] just change it to cifs or whatever [13:42] twb: hmm... i've been logged in as root and then used su to switch to my other user [13:42] psyferre: do you have the other user's password? If so, best to test by switching to a getty and doing a full login. [13:42] psyferre: otherwise, at least try with "su - fred" instead of "su fred" [13:43] Is indentation important in /etc/network/interfaces ? [13:43] whatever i did in the howto made my nfs mountable bu users without sudo [13:43] MTecknology: no. [13:43] thanks, jasonmchristos, I'll check that out [13:44] twb: thanks- I musta screwed up somewhere else - I hate not being able to fix my own server because I screwed up :( [13:44] MTecknology: pastebin it [13:44] twb: hmm... thanks. I didn't know there was a difference between the two [13:44] twb: i just opened a new putty session and logged in with the second user directly, same deal [13:44] psyferre: did the mount operation give an error? [13:44] twb: no [13:44] psyferre: does dmesg contain anything suspicious? [13:45] twb: to the best of my memory - I can't touch the system until somebody fixes it for me - http://dpaste.com/179992/ [13:45] And to confirm: root can still read and write files in the share? [13:46] psyferre: after adding the user u have to reboot i think [13:46] because the fstab needs to be reloaded [13:46] mdeslaur: hey would you have some time to review a apache backport patch for me later today? [13:47] twb: Nothing seems suspicious in dmesg, root can still read and write [13:47] jasonmchristos: mount -a doesn't do that? [13:47] psyferre: pastebin the output of "ls -la" on the mountpoint. [13:47] zul: sure [13:47] mdeslaur: nifty thanks [13:48] twb: http://pastebin.com/wwgQbDhJ [13:50] psyferre: i think you just need to add the use option to fstab and reboot so it reloads fstab [13:50] That's the mountpoint's parent [13:50] *user [13:50] but tom:root looks pretty suspicious. [13:50] I'd expect it to be tom:my_cifs_group or whatever [13:50] then users other than root will be able to mount the share [13:50] twb: yeah, i agree. [13:51] psyferre: did you unmount and re-mount after editing fstab? [13:51] jasonmchristos: unfortunately, a reboot isn't a good option at the moment... one of these machines is a production database [13:51] mount -a won't notice changes to mount options in fstab [13:51] twb: AH. That's it then. [13:51] ok well i think fstab just hasnt reloaded with the , user option [13:51] * psyferre puts his head in his hands and cries softly [13:52] ttx, here [13:52] i dont know exactly how to reload fstab without a reboot [13:52] jasonmchristos: edit it, then remount the drive [13:52] twb, mount -a is made to re-read fstab [13:52] Ah [13:53] twb, mount -a causes all file systems mentioned in fstab (of the proper type and/or having or not having the proper options) to be mounted as indicated, except for those whose line contains the noauto keyword [13:53] twb: one moment, gotta remember how to unmount..... [13:53] bogeyd6: so unmounting is not necessary in this case? [13:53] umount [13:54] that's what I thought... just umount and then the share name? [13:54] i came in halfway [13:54] ill let the other finish [13:54] bogeyd6: erm, even if they're ALREADY mounted? You're suggesting mount -a will result in a mount -oremount on my root filesystem? [13:55] smoser: looking at http://iso.qa.ubuntu.com/qatracker/test/3880, we only have the "instance run" test. I asked hggdh to add a cloud-config test, ISTR you have something for that... is there a testcase written somewhere in the testcases wiki ? [13:55] jasonmchristos: I've just uploaded a fixed rkhunter to the archive that doesn't falsely detect the rootkit anymore [13:55] jasonmchristos: in a couple of hours it should be available [13:56] cool, mdeslaur how were you sure that it was false? [13:56] smoser: could you sync with hggdh so that a test covering that is available for cloud images in general (UEC+EC2) ? [13:56] twb, im saying if you edit fstab and then mount -a it will mount the filesystem with the new options [13:56] psyferre: is it working now? [13:56] mdeslaur: will this update be available to replaice the main rkhunter package? [13:57] smoser: Also there isn't any EC2 candidate right now, so I can't see if the "single instance" test was removed (we should have "multiple instances" and "cloud-config") [13:57] jasonmchristos: because I looked at the check it was performing, and it wasn't right for lucid [13:57] jasonmchristos: yes, it will replace the one that is there [13:57] bogeyd6: you're wrong, at least on Sid. [13:57] do i get karma points for this ? [13:57] ttx, http://bazaar.launchpad.net/%7Esmoser/%2Bjunk/ec2-test/files/head%3A/user-data/ is what i have for cloud config. I put together 3 different cloud config files that excercise a fair amount of the function. (ud-* there) [13:58] ttx, well, lets make an ec2 candidate then [13:58] jasonmchristos: you get a warm fuzzy feeling of having saved some other schmuck from shaving the same yak [13:58] lol [13:58] twb, bogeyd6: I get unmount error 16 = Device or resource busy when trying to umount... do i need to stop cifs or something? [13:58] i'll start writing a test case for the user data [13:59] psyferre: ask lsof what is using that filesystem [13:59] psyferre: if you're an incurable cd-er, it's probably your shell [13:59]