[00:38] hi. How to send a specific log event by email on ubuntu server 10.04 ? [00:38] anyone here with ubuntu 10.4 and raid6 ? trying to do this - echo "clean" > /sys/block/md1/md/array_state , get a echo write error: Invalid argument [00:39] trying to recover a 10tb raid6 [00:47] anyone here ? trying to do this - echo "clean" > /sys/block/md1/md/array_state , get a echo write error: Invalid argument [00:48] hmca: here but don't know [00:49] desperatly trying to get a 10tb raid6 up again [00:50] hmca: i can try something similar here and see what it does if you can wait a few mins [00:51] jjk9___: thanks, i have seen this as a way out to my problem but ubuntu people get this error Invalid argument [00:55] hmca: so I don't know what this all is.. I have a 2tb raid1 on md1 and ls -l /sys/block/md1/md/array_state gives -rw-r--r-- 1 root root 4096 2010-08-13 10:10 /sys/block/md1/md/array_state is there a man page for this stuff? [00:57] jjk9___: following this hoping it can help, http://ubuntuforums.org/showthread.php?t=1538137 , take a look [00:57] hmca: k [00:57] mine is raid6 10 1.5TB disks [00:59] jjk9___: reading ... [01:02] hmca: that looks to deep for my tiny mind :( sorry dont think i can be of any help [01:03] jjk9___: thanks [01:04] hmca: what does cat /sys/block/md1/md/array_state return? [01:05] hmca: for me it returns clean [01:06] jjk9___: inactive [01:08] i have a failed device , faulty removed [01:08] hmca: is there anything that might be done using mdadm? [01:08] i have active devices 9 , working devices 9 and failed devices 1 [01:09] i'am assumning , faulty removed using mdadm -E /dev/sdi , means the mdadm is managing the raid, but why is it not runung , active, raid6 is dual redundancy, so i assumed i could just lost a disk [01:10] hmca: I'm not to up on raid 6 can it run with one bad drive? or do you need to put a new one in and use like mdadm to add it to the raid? [01:10] i was assuming it would still run with 1 broken disk [01:11] Disk util on gnome says State: not running, partially asssemble [01:11] hmca: like I say I not so up on raid6 would need to go read about it and that could take forever [01:11] people start working here in arround 8 hours [01:12] hmca: maybe you need to tell the raid to go on without the bad drive? [01:12] hmca: u can do a lot in 8 hrs [01:14] hmca: ok I just read wiki on raid6 and they say you can lose 2 drives and still run [01:14] right [01:15] i only have one faulty, so do i need to manualy tell mdadm to remove it from md0? [01:15] lets see how to do [01:16] hmca: i'm searching for docs on that [01:24] http://www.linuxquestions.org/questions/linux-server-73/mdadm-raid-5-single-drive-failure-644325/ , maybe what i am failing 2 understand is that failling a disk as to be replaced, i thouth it could be ok to workl [01:25] hmca: im reading this basic one http://www.review-ninja.com/2009/05/software-raid-raid-arrays-mdadm-on.html [01:26] hmca: I agree it seems like it should keep working however I don't know the behavior when you reboot with a failed rive in the array... [01:30] hmca: what does cat /proc/mdstat tell [01:30] inactive [01:33] hmca: so did u reboot into this or did the drive fail while the raid was working. I guess I'm asking if this is from reboot or while working. It looks from the link you gave as if you need to use mdadm to logically remove the failed drive from the array. I need to try out fail modes on my raid1 for when it happens for real so I know how to handle it [01:35] the system totaly crash while rebilding , i have a 45 drive bays system , only with 10 now , i had to power down the machive , mdadm says the drive as been removed from array , mybe i need to actualy remove it from the system ? is that it ? [01:36] hmca: maybe you need to tell mdadm what the new array is . like when you make the array from scratch... [01:37] hmca: I don't think that physical removal makes a diff if ma=dadm already thinks the failed on is gone [01:37] --create / assemble , they have all refused to activate the array , yes but i still removed it , waiting for the machine to come up [01:38] my backplanes are all hotswapable , but i told the os to reboot [01:38] hmca: good luck! [01:39] hmca: there might be someone over on #ubuntu who knows about raid6 etc [01:40] jjk9___: i still not beliving but it worked, let me check [01:41] hmca: woohoo! [01:41] it is sayin on proc , reshape + 80,2 % [01:41] hmca: when I replace with raid1 it takes for ever to resync [01:42] now i just need to see if iscsitarget piks the md0 , a see if my hfsplus+ part from mac os x is there [01:42] hmca: so what did the trick? [01:42] i know how to improve speed , give me a sec [01:42] fisicaly removing the disk [01:43] hmca: that really surpriss me but maybe due to startup scripts [01:43] hmca: md startup might have been looking for all and bawking on the bad or something [01:43] i will discuss more on this i u give me a sec/few minuts, need to goo to the mac station to see if the big disk shows up in iscsi [01:44] k [01:51] jjk9___: back back, feel happy..., md0 running iscsitarget runing, mac station mounting iscsitarge , violume seems ok/not corrupted [01:51] now for speeding up the rebuilds [01:52] i have the info somewhere, w8 [01:52] hmca: glad 2 hear u r out of trouble [01:53] it took a week for a guy in the office to upload almost 8TB into this , very slow process, i didnt wanna him or me to do it again , time is money [01:53] hi guys [01:53] cheers [01:53] ive just installed apache - what is the best way to make the www directory writeable by my user? [01:53] echosystm: hi [01:53] should i symlink it to a folder in home? [01:54] should i modify the permissions on /var/www? [01:54] or should i just change the config to point to a folder in home? [01:56] echosystm: on my web server (disclaimer: im no expert) I have the folder owned by the user and apache is a member of the group that can write to that [01:58] echosystm: that way user and apache can write to user folder but user can't write to other folders [01:59] echosystem, rather than change apache [01:59] ive made the user a member of the www-data group [02:00] is that all you needed to do fluvvell ? [02:00] dir /var/www/ is owned by root:root [02:00] echosystm, as long as the folders where the www files are going to be have group read/write permissions [02:00] yes, but html under that ? [02:01] root:root [02:01] lol [02:01] fluvvell: doesn't that mean that the users can access each others folders if they all belong to www-data? [02:01] i might just change the apache config to point to somewhere in home, all good [02:01] jjk9___, yes but he implied one user [02:02] fluvvell: then np [02:02] echosystm, where we had implemented the changes to apache, it came to greif much later when we did upgrades and updates to apache [02:03] much better off to keep it closer to the installed standard. [02:03] clearly there are configs you *will* change [02:05] echosystm, how did you install apache ? [02:05] apt-get install apache2 [02:06] and whats your output of ps aux |grep apache [02:07] are the apache processes running as root as well ? [02:07] one is [02:07] 4 arent [02:07] *3 arent [02:07] so what user are the other ones running as ? [02:07] 3 are www-data [02:08] yep, I have 1 as root, 5 as www-data [02:09] once you set up your virtual hosts, I think the files you create will need to be www-data owned. I'd not consider myself an expert, but thats been my experience over about 5 or six apache servers we run. [02:09] the actual www-data folder will be owned by root though [02:09] so even if i am in www-data myself, i cannot write to that folder [02:10] im just going to change the document root, its easiest [02:10] easy to change back if i need to [02:10] no but add yourself to the www-data group. [02:10] of course the good thing about ubuntu/linux is experimenting :-) [02:11] the conventions that are adopted are just there to make things easier and more consistent. [02:11] and I guess secure. [02:12] alrighty, thanks for your help [02:12] ciao [03:56] any raid guru's about [04:02] !anyone [04:02] A large amount of the first questions asked in this channel start with "Does anyone/anybody..." Why not ask your next question (the real one) and find out? [04:04] MTecknology: ask again i just swung by [04:05] jjk9: that was for yaboo asking if anyone is around [04:05] k [04:10] ok got a raid 5 unit with three disks, rebooted the array, and getting mount: you must specify the filesystem type when I try to mount it [04:26] ok, seems no-one knows anything about mdadm and howto recover the disks [04:28] yaboo: wot does cat /proc/mdstat say [04:28] jjk9, nothing, looks normal till I try to mount the device, and errors with no filesystem [04:29] yaboo: if cat /proc/mdstat returns nothing that's not normal [04:30] yaboo: how r u mounting the device? [04:30] jjk9 cat proc shows there's md0, three disks there etc, nothing out of the ordinary [04:30] jjk9, mount /dev/md0 /home/storage [04:32] ok get a lot of superblock errors [04:34] yaboo: when do u get the superblk errors? [04:34] trying fsck -b 8193 /dev/md0 [04:35] yaboo: what fs do u expect on there? [04:35] formated it ext3 [04:36] yaboo: have u tried -t ext3 when mounting? [04:39] jjk9, just tried and states wrong fs type, bad option, bad superblock on /dev/md0 [04:41] yaboo: try fsck.ext3 /dev/md0 [04:43] yaboo: http://www.linuxquestions.org/questions/linux-software-2/debian-raid-5-rebuild-457098/ [04:44] fsck.ext3: Superblock invalid, trying backup blocks... [04:44] fsck.ext3: Bad magic number in super-block while trying to open /dev/md0 [04:44] jjk9 [04:47] yaboo: u have plumbed the depth of my meager knowledge. I'm all out 4 now. :( [04:48] jjk9, THANKS [04:51] yaboo: yw I didn't help much. btw lots of hits on search "Bad magic number in super-block while trying to open" [04:57] jjk9, something to do with superblock invalid [04:57] yaboo: best of luck [04:58] jjk9, thanks [05:00] I have a lucid router. I'm trying to add a USB wifi dongle to it, to turn it into a wifi AP./ [05:00] On Debian, it says I need firmware-ralink (http://wiki.debian.org/WiFi/rt73), but this isn't in Ubuntu (per rmadison). [05:01] twb: ralink drivers are generally awful, but you may find that linux-firmware has what you need [05:01] Which package is the binary blob in? [05:01] OK, looking [05:02] I already have linux-firmware installed (presumably its in main, not restricted), so I'll install hostapd and wpa_supplicant and see if it Just Works [05:02] which usb dongle do you have? [05:03] ajmitch: 148f:2573 [05:03] quite different from the linksys one that I have then [05:04] which is 1737:0078, hopefully you have better luck with it than I've seen [05:06] I actually asked the boss to just go buy half a dozen different manufacturers' devices, hoping to get at least one with a "good" chipset [05:06] But what happened was he took his old one from home :-/ [05:20] if I format over partition can I recover the data beforehand [05:21] yaboo: well, yeah, just back it up before you format it [05:21] twb seems I have superblock errors and no matter how much I fsck etc, it seems not able to fix the disk [05:22] Try sticking in the freezer for an hour (wrapped in cloth) [05:26] Of course, it WILL be a complete farce unless Kanno does the soundtrack [05:26] Oops, wrong channel. [06:11] New bug: #239906 in groovy (main) "Dependency on libbsf-java is invalid" [Undecided,Fix released] https://launchpad.net/bugs/239906 [06:11] New bug: #631200 in bacula (main) "package bacula-director-mysql (not installed) failed to install/upgrade: subprocess installed post-installation script returned error exit status 1 (dup-of: 563039)" [Undecided,New] https://launchpad.net/bugs/631200 [06:14] Has anyone else had trouble installing Drupal 6 from the package? It does not create any of the directories/files in /var/www/ ... [06:18] It's a packaging violation to place files in /var/www. [06:20] Sorry, make that "discouraged" rather than "disallowed" (§11.5.4) [06:20] aegis: have you read the "official" community documentation? https://help.ubuntu.com/community/Drupal [06:21] aegis: it worked fine the last time I have tried it :D [06:21] aegis: of course, if it does not work anymore, you could try to comment in a bug report [06:21] New bug: #631307 in openldap (main) "package slapd 2.4.21-0ubuntu5.3 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/631307 [06:22] aegis: there is also one at the drupal site: http://drupal.org/node/626404 [06:23] aegis: the files might not live where you would expect them to be, but it should work [06:24] aegis: and it should get symliked to the /var/www anyway [06:25] aegis: does it help? [07:42] New bug: #631324 in ntp (main) "package ntp 1:4.2.4p8+dfsg-1ubuntu2 failed to install/upgrade: subprocess installed post-installation script returned error exit status 1" [Undecided,New] https://launchpad.net/bugs/631324 [07:54] formated a disk, if I have not written new data on the disk, can I recover the old data on the disk? === Thorn_ is now known as Thorn [09:48] morning [10:38] Where is lucid's equivalent of /lib/udev/net.agent? [10:38] You know, the thing that makes allow-hotplug entries in /etc/network/interfaces *actually work* [10:39] Unfortunately there's not debian-to-ubuntu diff on http://packages.qa.debian.org/u/udev.html, because lucid's udev is built from a git snapshot [10:40] <\sh> twb, regarding some release notes and working with ifenslave-2.6. which had debian wise the "allow-hotplug" format, someone said, we don't have allow-hotplug that's why we are using "auto" [10:40] Well, auto is not the same thing [10:41] <\sh> i know :) [10:41] See, there is this bug [10:41] When I unplug the SERIAL cable, it removes and readds the USB wifi device [10:41] Which results in me not having an AP anymore [10:42] (The wifi device is configured as an AP with hostapd.) [10:43] <\sh> you mean "serial cable" as in "serial cable" and not as in "usb2serial" ... because why should something remove the usb device when unplugging a serial cable [10:43] So you would THINK that simply changing "auto wifi0" to "allow-hotplug wifi0" would DTRT, but no, it causes wifi0 to never ever ever be raised, probably because the udev maintainer assumed everyone was using laptops running NM. ARGH ARGH ARGH. [10:43] \sh: yes, it has a real serial port. [10:44] Admittedly, I'm then plugging a USB-to-serial bridge into its 9-pin serial port, and the plugging the USB end into my laptop [10:45] I'd be amazed if linux can see that it's a USB-to-serial bridge from the serial side === twister004__ is now known as twister004 [10:49] (Sorry about losing my temper; I was expect it to Just Work, like Debian.) [10:49] I'll stop working on that now so I don't have to call a glazier === ogra_ is now known as ogra [11:51] New bug: #631451 in eucalyptus (main) "[UIFe] UEC Web Portal has old logo, and css needs tweaking." [Undecided,Confirmed] https://launchpad.net/bugs/631451 === _Techie_ is now known as _TechAway_ [11:59] I don't know if this is the right place, but againt my script i get "Please enable following functions in your php.ini: filter_var" even though phpinfo() in same directory reveals no disabled functions. [12:53] anyone available to answer a question [12:56] hi [12:56] i installed ispconfig3 on my ubuntu server and created the website, uploaded my website but its not working. [12:56] hi [12:56] i get Cannot join to channel #ubuntu-virt (You must be invited) [12:56] DigitalDeviant: that package is not part of Ubuntu [12:57] DigitalDeviant: you will have to talk to whoever supplied it. [12:57] kaushal: try #virt (or #libvirt?) [12:57] !ops #ubuntu-virt is invite-only [12:57] Error: I am only a bot, please don't think I'm intelligent :) [12:57] Hmph. [13:01] twb: ok [13:01] twb: can someone allow me in there :) [13:05] kaushal: It's been discontinued. [13:06] kaushal: People attempting to connect to it are redirected here. [13:06] kaushal: Since you're already here, you get odd results. [13:06] soren: thanks [13:07] Might be worth poking #freenode about it in case there's a way to avoid the "odd results" [13:11] kim0: Can you take care this? ^^ (I'm assuming you're the one who made the changes based on your comment on the mailing list: https://lists.ubuntu.com/archives/ubuntu-server/2010-August/004512.html ) [13:13] My understanding the problem is, when you join #ubuntu-virt while already joined to #ubunt-server, you simply get "invite only channel" [13:13] if so, I already talked to the irc council folks [13:13] and they said, this is a weird Freenode thing that they can't do anything about [13:14] Probably they don't want to patch their funky ircd [13:14] *patch it any more [13:14] :) [14:01] hi. ive been running ubuntu server 10.04 for a bit over month now. i use it as fileserver on my lan, its also running openssh-server. everything seems to work fine... but i think the server load averages are bit too high, for system only running samba & openssh-server. load avarages are anything between 1.00 - 1.20. most of the times its 1.00. got 4gb ram and pentium 2.8ghz installed.. any ideas what might cause that load? [14:13] hey guys, i'd like to install 'lightning' for all my users.. i can install it to my 'user' folder.. and i don't want to do single installs for all my users.. is there an easy way to accomplish this? === ivoks_away is now known as ivoks === bigjools is now known as bigjools-lunch [14:18] Do anyone know if ksplice is stable enough for critical production enviroments? [14:18] AndyGraybeal: What's lightning? [14:26] yoosef: no. Ask top(1). [14:27] AndyGraybeal: apt-get install sunbird? [14:27] AndyGraybeal: or does it have to be the plugin version? [14:28] It may be called "iceowl" instead of "sunbird"; the latter is trademark-encumbered. [14:29] AndyGraybeal: other than that, you can always just drop it into the appropriate magical folder somewhere in /usr -- the one thunderbird looks in for plugins. I don't know much about that. [14:29] interesting [14:29] thank you twb [14:29] twb: ive used top -command, but nothing seems to use any significant amount of cpu or mem.. [14:29] soren, lightning is the new sunbird [14:29] soren: it's basically sunbird (read: mozilla calendar) as a thunderbird package. [14:29] AndyGraybeal: then this is the wrong channel :) [14:29] AndyGraybeal: really? I thought sunbird was newer [14:51] twb, i don't know but mozilla recommends moving to lightning from sunbird. i'm not sure why. [14:52] Because they're goats and rabid space-donkeys [14:53] exactly [14:54] I mean, they're up there with schily and tuomov === bigjools-lunch is now known as bigjools [16:04] hi === ivoks is now known as ivoks_away [16:12] hi [16:12] any help document to setup KVM on Ubuntu Server 10.04 ? [16:13] also when i install Ubuntu 10.04 Server what does one means by Ubuntu Enterprise Cloud ? [16:14] while installation [16:16] kaushal: there are docs on the Ubuntu site e.g. [16:16] https://help.ubuntu.com/10.04/index.html [16:17] + https://help.ubuntu.com/community/UEC [16:47] Hi, I'm trying to enable cron logging. I'm folling a tutorial: Edit /etc/syslog.conf and uncomment the line starting with cron.* However, there is no /etc/syslog.conf [16:48] also reading that restarting sysklogd would create such a file. But I don't see "/etc/init.d/sysklogd" although I know that there used to be such a file in my previous desktop install [16:49] Ok, looks like it logs within syslog? [16:49] Does it do the same verbose of logging? [16:56] hey experts... so we upgraded a server from 8.04 -> 10.04 and now the lvm volumes cant be found e.g the system wont reboot [16:56] I've tried booting from live-cd and chrooting into the root running dpkg-reconfigure linux-image-kernel [16:56] without any luck [16:59] is VM means Virtual Machine ? [16:59] https://help.ubuntu.com/community/KVM/FAQ [16:59] dennis: does your fstab show correct uuid for drives? [17:02] stlsaint, yes but we just changed it to use logical named instead of UID [17:02] dennis: well you may want to review your fstab, more than likely that is where your problem is [17:03] ok thanks.. I'll have one more close look [17:04] I fail to understand how an upgrade could change the uuid if my disks tho [17:16] can i seek help regarding kvm setup on Ubuntu 10.04 Server ? [17:16] I am actually reading it [17:16] also what is the difference between UEC and KVM ? [17:46] New bug: #631737 in samba (main) "gvfsd-smb uses all cpu when trying to connect to samba share" [Undecided,New] https://launchpad.net/bugs/631737 [18:12] hello anyone have experience with ubuntu and solaris ldoms ? [18:35] hello, well I think I have some information on why my cronjob isn't working. in syslog I get: postfix/sendmail[19238]: fatal: open /etc/postfix/main.cf: No such file or directory [18:36] can someone help me with this error? === JanC_ is now known as JanC [18:39] Datz: I came in late... wots yr cronjob trying to do? [18:40] */5 * * * cat /var/log/fail2ban.log > /var/www/site/fail2ban.log [18:41] the command works fine, but in cron, nothing happens. I noticed that message in syslog every five min [18:41] Datz: that is cron trying to send you an email [18:42] no, just create a new file [18:42] Datz: sounds like you don't have postfix configured correctly [18:42] I see [18:42] Datz: when you run a cron with any output it tries to send email to te cron user [18:43] output as in cat in this case? [18:43] Datz: any output from the cronjob [18:44] Ok, just trying to understand.. I have other cron jobs.. and this message only appears in the system log at the interval my failed cron job is running [18:45] Datz: if cronjob has no output then no mail from it. If this one fails cron trying to tell cron user that is case [18:45] I see [18:45] thanks [18:46] so if I were to set up postfix/sendmail. I would get a message indicating what went wrong? [18:47] should I run /etc/postfix/post-install? [18:48] Datz: if something went wrong wit the cronjob yes. If you just want to see the error you might try piping errors to a file by putting something like 2>myerrorlogfile [18:48] at end of failing cronjob? [18:49] Datz: at the end of the line on cron that you think is failing [18:49] */5 * * * cat /var/log/fail2ban.log > /var/www/site/fail2ban.log 2| ~/error.log ? [18:49] Datz: 2 > ... [18:50] sorry, thanks. I'll try it [18:52] * Datz waits for it to appear [18:52] Datz: do **** on cron line for testing... [18:54] I actually did, with spaces [18:55] * * * * * cat /var/log/fail2ban.log > /var/www/site/fail2ban.log 2> ~/error.log [18:55] er.. space before 2? [18:55] Datz: I just skipped spaces :( sorry , yes 2 is stdout and 3 is stderr so [18:56] ok, spaced :) [18:56] * Datz is waiting.. :p [18:58] not seeing anything. THis is exact entry * * * * * cat /var/log/fail2ban.log > /var/www/site/fail2ban.log 2 > ~/error.log [18:59] Datz: ok let me try here wait one [18:59] thanks [18:59] Datz: no space after 2 [19:00] ok [19:00] :) [19:00] Datz: also, make sure /var/log/fail2ban.log is readable for the user running the cron job [19:00] the command works outside of cron [19:00] for that user? [19:00] yes [19:01] nothing in ~ yet [19:01] ok, I think I've seen something like that earlier - try to create a script doing cat ... > log etc and run that script [19:01] from cron [19:01] humm, ok good idea [19:04] New bug: #631383 in samba (main) "Samba: Slow file open & Incomplete multibyte sequence error" [Undecided,New] https://launchpad.net/bugs/631383 [19:04] New bug: #631489 in samba (main) "Browsing through Folders via samba is very slow" [Undecided,New] https://launchpad.net/bugs/631489 [19:05] Datz: or even better - setup fail2ban to log to a named pipe (or fifo) and read from that, copying the info to separate files [19:06] ok, well I created the script, and ran it. It works [19:06] made a cronjob for it "* * * * * ~/test" <- is that correct [19:07] RoyK: that last option sounds too complex for me currently [19:07] Datz: maybe pipe stdout (&2) and stderr(&3) to the log 3>&2 2>~/error.log [19:07] ok === cwillu_at_work is now known as cwlu [19:08] jjk9: stdout is file 1 and stderr is file 2 === cwlu is now known as cwillu_at_work [19:08] stdin is 0 [19:09] RoyK: err 1 is stdin [19:09] * * * * * cat /var/log/fail2ban.log > /var/www/site/fail2ban.log 3>&2 2>~/error.log <- ? [19:09] Datz: change the crontab to use the log, and beleive me, 0 is stdin, 1 is stdout, 2 is stderr [19:10] Datz: so when I try * * * * * echoo "boo" > /root/tt 3>&2 2>tterr3 i I get errors echoo not found in tterr3 [19:10] echooo asdf > output 2> errors [19:10] ok [19:11] Datz: but run the script, not the script's contents from cron [19:11] RoyK: my bad u are right [19:11] something > output == something 1> output [19:12] * Datz is slightly confused [19:12] * Datz re-reads [19:12] Datz, I see one problem, your original cron is missing a parameter, "*/5 * * *" is only four [19:13] * Datz checks on this [19:13] Datz: http://pastebin.com/TMwW380D [19:14] get it? [19:14] also, you don't specify a user [19:14] one job in my /etc/cron.d/, for example [19:14] qman__: no need to do that with a normal cron job - only the ones in /etc/cron* needs that [19:14] RoyK: got it [19:15] if adding it with crontab -e, it's run under the current user [19:15] 13 * * * * root [script] [19:15] if in /etc/cron.d, you need a user [19:15] yeah [19:15] ! it's working [19:15] :) [19:16] ha.. I triggered ubottu [19:17] it's almost like it started magically working.. [19:19] I checked on what qman__ said about 4 time entries, there were 5 at that moment in time, I uncommitted entry and it works.. [19:19] heh [19:19] well, thanks guys :) [19:19] Datz: also if it fails now and u don't have mail setup then you won't know til next tome u login [19:40] how could a shell initialization file in a home directory that is group writable be a security risk? [19:50] alekto: some member of the group can add the line 'rm -rf $HOME' at the end - that won't be much fun [19:54] ah, I see.. letting other users be able to delete home dir is not a good idea ;) [19:56] so what about executable files in /usr/sbin that is world writable? could this really harm the system? [19:57] don't do that [19:58] executables in system path should _NEVER_ be world-writable [20:00] oh, okay.. what could this result in? everybody shutting down the system? [20:04] that's just asking for an infection [20:05] drop some malicious code into something root uses, wait until root uses it, game over [20:06] New bug: #631837 in puppet (main) "Sync puppet 2.6.1~rc3-1 (main) from Debian experimental (main)" [Wishlist,Confirmed] https://launchpad.net/bugs/631837 [20:07] hehe, oh shit! [20:12] i installed apparmor with apt-get on a fresh lucid minimal. apparmor_status said command not found. /etc/init.d/apparmor start gives me just a new prompt. what do i have to do to make it even start ? [20:13] silentwater77: apparmor is installed by default iirc [20:14] i have a fresh 10.04 minimal...apt-get install apparmor just installed it. [20:15] that should be enough [20:15] apparmor_status says command not found [20:15] lsmod is empty [20:16] http://pastebin.com/8k1natKe [20:16] silentwater77: apparmor-utils perhaps [20:17] how to flush user mail i let my cron logs get to big [20:17] they should be flushed automatically, in realtime [20:17] thanks royk...my desktop gives me the same messages [20:17] what mta are you using? [20:18] on my vps i get: root@dice:/var/log# aa-status [20:18] apparmor module is not loaded. [20:18] ebox and webmin show 20,000 msgs from the cron, ebox jobs [20:18] wtf [20:18] should i better go for selinux ? [20:18] nope [20:19] I really don't know - I haven't used the minimal setup for some time - regular works well [20:19] dominicdinada: which mta are you using? [20:19] mta? [20:19] ubottu: explain mta [20:20] hm [20:20] !mta [20:20] A Mail Transfer Agent (MTA) is the server software that sends and queues mail. The default MTA (and !MDA) on Ubuntu is !postfix ("exim" is also officially supported). See also !MailServer and !MUA [20:20] oh just the system mail [20:20] postfix? exim? sendmail? [20:20] sendmail i believe is where the logs are [20:20] yeah, ubuntu doesn't have a local mta installed by default, you have to pick one [20:21] dominicdinada: try postfix [20:21] ok ? [20:21] best mta there is imho [20:21] I won't disagree [20:22] it is in the postfix mail [20:22] how to flush such high msgs crashes browser tab lol [20:22] if so, 'postfix flush' will flush the queue [20:22] ? [20:22] # postfix flush [20:22] ok [20:23] but with 20k emails in the queue, something is probably quite bad [20:24] RoyK: No it is just how ebox set things to notify... running the flush did nothinh [20:24] nothing* even [20:24] can you pastebin parts of mailq output? [20:24] # mailq [20:24]