=== Lcawte is now known as Lcawte|Away === hayden is now known as Devilsolution [00:50] whats the main chat chan? [00:55] #ubuntu [00:55] Devilsolution: but you can ask here too [00:55] well i wanna know [00:56] this is chat, #ubuntu for problems/questions about ubuntu [00:56] if drinking alcohol with other CNS depressants will kill me [00:56] as in, urgently [00:56] generally it's probably the wrong place to ask [00:56] nah see yeh nah [00:56] however, I suggest it's probably a bad idea to do that [00:56] but though [00:57] i got an apache server how does i change the permissions of apache so that it can run scripts outside of its root [00:57] id done chmod and chown and added the group i presume apache belongs to [00:57] straight 777's [00:58] !permissions [00:58] An explanation of what file permissions are and how they can be manipulated can be found at https://help.ubuntu.com/community/FilePermissions [00:58] no i understand permissions [00:58] * penguin42 doesn't know apache this well these days - but I think doesn't it chroot itself or otherwise really restrict itself to where it can run scripts to stop escapes [00:58] hint, 777 is pretty much always the wrong permissions [00:59] isnt that total access? [00:59] exactly [00:59] i get internal server error running anything thats required in [00:59] giving world writable permission is pretty much frowned upon [00:59] mainly ajax but JS too [01:00] does apache belong to a group i can add for the full root recursive folders/ [01:00] ?/ [01:00] Devilsolution: Are you sure it's actually a filesystem permissions problem and not an apache config issue? [01:00] apache on ubuntu runs under www-data:www-data [01:01] ahh i added www-data to the group permissions for that folder [01:01] maybe apache config, ive not delved too deap [01:01] !xy might be pertinent [01:01] diddledan: I am only a bot, please don't think I'm intelligent :) [01:01] !xy > Devilsolution [01:01] Devilsolution, please see my private message [01:02] bah, it wasn't supposed to be a private [01:02] damned bots in different channels using different semantics [01:02] taha lol [01:03] okay, got ana apache php sql server works fine....i run a simple script that calls ajax function (so get data from another file etc) but on that call i get permission denied [01:04] automatically i thought it was something to do with apache's permissions as if apache has a group or user [01:04] the whole /var/www/ is locked down tho, i have to chmod all files to edit [01:05] want an ss of my issue? [01:05] I would suggest checking the /var/log/apache2/error_log to see if it says whether it's a config error or not [01:07] alright ill get on that [01:07] bbs [01:09] diddledan, My hero [01:09] cheers boss [01:09] its all in there, ill sort it out [01:10] Another question regarding security persay [01:11] in open source like ununtu, how do we know that some random contributor for a kernel mod or embedded program isnt dodgey [01:11] like keylogger root kit style [01:11] the surest way is to read the sourcecode [01:11] what if its sooooo obscure that it makes no sense? [01:12] or its built into the compiler that builds the program [01:12] and if you're concerned that a binary package contains things outside of the original source then you'd compile the source yourself [01:13] i love taking the source, though the dependency builds take a so longggg [01:13] Devilsolution: In principal most of the big packages it takes a few people to have looked at a change before it can get into the code base [01:13] Devilsolution: In some of the smaller packages that is more of a risk [01:14] dont get me wrong, having the source code at your finger tips essentially rids the problem but it requires so much knowledge to disect a single program [01:15] which happens to be a benefit of opensource (despite your wording) because if you don't have the skills to analyse it the chances are someone somewhere else does have those skills [01:15] Devilsolution: Yeh I mean there have been experiments to find the smallest source change that can be added to introduce a security problem and they can be quite subtle, so it's not a silver bullet [01:48] even at kernal level? === Hornet- is now known as Hornet === Hornet- is now known as Hornet [06:59] morning all [07:01] g'morn [07:33] hi daftykins [07:33] whatcha doing up?:) [07:33] yeah... about that :D [07:45] meh [07:45] that was seriously unfun [07:45] Myrtti: what you done? [07:54] MooDoo: ssh had stopped responding during the night [07:54] :( [07:54] (I then sat half an hour wondering why things didn't reboot, forgot I had a truecrypted harddrive plugged in) [07:58] oh dear :( [07:59] Morning all. [08:01] morning TheOpenSourcerer [08:06] could be worse, could be like the time i took 90 mins to diagnose why my PC wouldn't POST in the first year of uni [08:06] turned out the floppy ribbon was partially seated ¬_¬ [08:06] yep i had an FDD :> [08:07] wii u on amazon black friday in 10 mins [08:07] lawltendo [08:08] resin cast piglet at 08:45! === iahmad is now known as iahmad|afk [08:09] daftykins, whilst nintendo has been a company of screwups for about 7 years, the wii u is a better buy than the ps4/xbone right now, due to actual new gameplay offerings [08:09] i would buy none, sir! [08:09] win8 pro at 10am! [08:11] hahaha [08:11] lumia 820 at 2pm! [08:13] piglet sounds tempting [08:15] 22% off Wii U [08:15] lol 99% claimed already wth [08:15] 120gb ssd at 4:30 [08:16] i wonder what this Deus Ex HR Director's Cut really adds [08:19] daftykins, you want to know? [08:21] just looked it up [08:21] daftykins, better textures, integrating the DLC into the main game rather than having it as a separate app, better boss fights, and valve-style commentary [08:27] mm-hmm, indeed [08:30] Finally that's me gone from the Fedora Project.... [08:31] bad things occurred? [08:31] daftykins: no not at all, just thought it was unfair that as i'm more into this project and have been for awhile that I carry on with my mentor duties there. [08:32] daftykins: they have an ambassador program and I was a UK mentor [08:33] ah [08:35] If you are interested in the area of software patents and Free Software this is worth a gander... http://blogs.computerworlduk.com/open-enterprise/2013/11/taming-software-patents-for-gnu-gpld-code/index.htm [08:44] My twitter stream has just been bombarded by pics from a web dev conference in Wales this morning called #Handheld. LINGsCARS has used a Dalek as the presenter! [08:45] https://twitter.com/maddesigns/status/406068266793467904/photo/1/large [08:46] OK - Conference was yesterday. But anyway. [08:56] i bought the 240gig SSD the other day, delivered yesterday, DD'd my disk onto it and playing games on it last night :D [08:59] xnox: jolla phone uses btrfs.. just sayin' ☻ [08:59] Morning all. [08:59] morning sir [08:59] morning popey [09:00] \o [09:00] morning MartijnVdS :) [09:00] time to beat simply mail solutions around the head [09:00] \o/ printer has been dispatched [09:00] going to spend the day looking out the window for the delivery dude [09:01] hehehe [09:01] webcam! [09:01] lol [09:01] motion detection + audible alarms [09:01] if you're really cunning, identify the delivery firm from the footage :> [09:02] any chef gurus in here? :) [09:02] if you're extra cunning, order from companies using DPD so you have a 1 hour delivery slot [09:02] MartijnVdS, don't undercook poultry! [09:02] directhex: Sure, but I'm talking about the other chef [09:02] bork bork bork! [09:03] * directhex rolls the dice [09:03] your CouchDB configuration is bad. [09:03] XD [09:03] * directhex rolls the dice [09:03] apache-solr needs to be reinstalled [09:03] I'm just writing my first recipes.. [09:03] and I'm confused [09:03] * directhex rolls the dice [09:03] directhex could do linux comedy standup. [09:04] arsen: he'd get boo-ed off stage [09:04] oh, of course you don't use chef's init script, you run it via cron! [09:04] * directhex rolls the dice [09:04] wrong erlang version. [09:04] i get the impression directhex has suffered chef before. [09:04] arsen, this is opscode chef standup! [09:04] * directhex rolls the dice [09:04] * arsen is playing with puppet atm. [09:04] no, those instructions only work for tarballs, not for the Debian packages [09:05] * TheOpenSourcerer is hungry - might have to wander over to the station and get a sausage roll or something... [09:05] * directhex rolls the dice [09:05] ah, your $PATH is wrong. that changed between chef versions. sorry [09:05] anyway.. I'm wondering if adding an "execute" block will *always* execute, or if it will only execute if I trigger it from something else. (I want the second one) [09:05] resource is the name I guess [09:06] instead of 'block' [09:13] morning chaps [09:15] mungbean: morning :) and don't forget Myrtti she's not a chap ;) hee hee [09:16] haven't seen her this morning though ;P [09:16] * mungbean scrolls back [09:16] bit chatty this morning aren't we? [09:16] I'm always here. [09:17] mungbean: it's the storm before the lull ;) [09:17] even when I've detached tmux, I get push notifications to my phone if someone mentions my nickname [09:17] typical, yesterday my wife had to poke me to wake up to do the early start with baby, today when its her turn i'm wide awake for 2 hrs waiting for the alarm [09:19] * popey notes company 08768324 on companieshouse.gov.uk has an interesting name [09:19] risky information to share Myrtti [09:19] "DROP TABLE CONSULTANTS; LTD" [09:19] arsen: not really, I can always set it to ignore persistant spammers [09:20] spose, annoyingly my 'friends' are the kinda poeople that drop me messages in the middle of the night :D [09:20] arsen: also my phone is on mute during night hours [09:20] * popey hugs irssinotifier [09:20] will need to do something similar for ubuntu touch [09:20] kinda implemented it with irssi proxy, but not the same [09:21] ooh, thanks for the hint, popey. [09:21] * arsen checks out irssinotifier [09:22] I ended up flashing my Galaxy Nexus with CM in the end and there's lots of stuff there I miss in the stock Android [09:24] needs to write a 3 line bio [09:25] Myrtti: did you use the new tool to flash it before it was removed from google play? [09:25] MooDoo: no, didn't bother [09:26] http://seravo.fi/2013/jolla-phone-first-impressions [09:26] interchangable backs with/without keyboard... that's a great idea [09:26] can't.. tell.. if.. sarcastic... [09:27] well, most people are very opinionated on keyboards === gordonjc1 is now known as gordonjcp [09:28] half say "i won't buy a phone without keyboard" and the other half say "keyboards are stupid, why would i ever use that" [09:28] even non-autistic people get a bit autistic on keyboards [09:28] popey: sounds like little bobby setup a business [09:29] i don't expect many people will be swapping the back on a regular basis but if it keeps costs down (and it will, because they don't need to make two fully different phones) then that's great [09:29] he's all grown up [09:29] * mungbean wonders where all his colleagues are today [09:32] popey: http://imgur.com/7OQBDnO === diplo_ is now known as diplo [09:32] popey: also, https://twitter.com/khalleth/status/398863797760184320 === AlanBell_ is now known as AlanBell [09:44] 58 root 20 0 0 0 0 R 64.9 0.0 21:31.30 kswapd0 [09:44] eek [09:44] KiB Mem: 8056528 total, 6205604 used, 1850924 free, 1232 buffers [09:44] KiB Swap: 8267772 total, 8265076 used, 2696 free, 956336 cached [09:44] * popey closes some chromium tabs [09:44] kill something! quick! [09:45] Ooops - Perhaps the US DoD should have used Free Software: http://www.bbc.co.uk/news/technology-25137089 [09:46] http://paste.ubuntu.com/6493309/ [09:46] ☹ [09:46] popey: are you one of those people who never closes a tab ;) [09:47] a "tab hoarder" ;) [09:47] alord@hrun:~$ top [09:47] top - 09:47:01 up 2:11, 2 users, load average: 0.32, 0.56, 0.46 [09:47] Tasks: 197 total, 1 running, 194 sleeping, 0 stopped, 2 zombie [09:47] %Cpu(s): 1.3 us, 0.4 sy, 0.0 ni, 98.2 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st [09:47] KiB Mem: 3842640 total, 3675536 used, 167104 free, 164936 buffers [09:47] KiB Swap: 3999740 total, 7520 used, 3992220 free, 1289992 cached [09:47] PID USER PR NI VIRT RES SHR S %CPU %MEM TIME+ COMMAND [09:47] 2559 alord 20 0 1461m 481m 51m S 1.7 12.8 16:38.52 firefox [09:47] not really [09:47] i used to [09:47] how did you manage to achieve 8GB swap used? [09:47] well indeed! [09:47] must be all those tabs [09:47] that would take several days on my system [09:47] 27 tabs [09:47] 09:47:45 up 5 days, 12:30, 4 users, load average: 2.41, 3.75, 3.11 [09:47] from the point where it started swapping [09:48] alan@deep-thought:~$ ps aux | grep -c chromium-browser [09:48] 55 [09:48] during which the computer would be entirely unusable [09:48] its usable for me [09:48] ssd may help that [09:48] 95 degrees C [09:48] any swapping at all completely freezes my computer [09:49] the USB I/O problems persist too [09:49] I am using upstream 3.12 [09:49] i was flashing a ISO to USB yesterday, the I/O load created by doing this cut off my network [09:49] doing mad amounts of context switching [09:51] http://paste.ubuntu.com/6493316/ [09:51] i wonder if cgroups can finally provide the facility of memory and swap priority on processes [09:51] I had a hangout running up until line 23 [09:51] ali1234: last time I had that was in the USB1 days, when the Linux USB stack was in its infancy [09:51] i still get it now [09:52] oh man, work has company wide mandatory 'development days' on 2nd of Jan - and Sherlock is on on 1st [09:52] Myrtti: It is? [09:53] pgrep -f -c chromium-browser! [09:53] yes, gatiss announced it on Twitter about 5 minutes ago [09:53] Myrtti: \o/ [09:53] "development days" = skiving, right? [09:53] https://twitter.com/Markgatiss/status/406357930083360768 [09:54] Good morning all; happy Friday and happy Electronic Greetings Day! :-D [09:54] Myrtti: i need to work with your company lol [09:54] a development day is a free day off? [10:03] JamesTait: 01001000 01000101 01001100 01001100 01001111 [10:11] * MartijnVdS sends a mail to popey about command line history [10:13] * TheOpenSourcerer loves CTL+R with a passion :-D [10:14] I've only recently started using that [10:14] TheOpenSourcerer: you'll love this then: http://unix.stackexchange.com/questions/1288/preserve-bash-history-in-multiple-terminal-windows [10:14] good morning everyone. [10:14] brobostigon: morning [10:15] morning MooDoo [10:16] does that actually work. [10:16] * xnox never seems to get multi-bash history work. [10:16] Good morning peeps :) [10:17] http://pragprog.com/ - books half price with code turkey2013 [10:18] Are they a good publisher? [10:18] brilliant day for the Internet to stop working properly [10:19] howdy bigcalm [10:19] o/ [10:19] MartijnVdS: I will try that - it is indeed somewhat annoying how each terminal is treated separately. [10:21] But of course I now need a common .bashrc across loads of different servers ;-) [10:21] TheOpenSourcerer: it won't work across servers, obviously (as history is stored in ~/.bash_history) [10:21] * TheOpenSourcerer dreams of a symlink over ssh [10:21] it would work if those servers shared home dirs [10:22] MartijnVdS: I didn;t mean a common bash history. I meant a common .bashrc [10:22] TheOpenSourcerer: I sync mine over U1 [10:22] yeah, have a common one in a synced folder [10:22] and call it from .bashrc [10:22] hmm - I don't use U1 or other cloud things on our customer servers [10:23] Wonder if I could put it in git??? [10:23] TheOpenSourcerer: put it in chef/puppet/... ;) [10:23] WTF is chef/puppet? [10:24] Muppets? [10:24] TheOpenSourcerer: http://www.opscode.com/chef/ http://puppetlabs.com/ [10:25] TheOpenSourcerer: basically, a central repository for all your server configs, so you can replace/rebuild them quickly (or add new ones, etc.) [10:27] TheOpenSourcerer: you usually choose one, not both at the same time ;) [10:31] TheOpenSourcerer: might be useful if you're setting up a big cluster of similar machines.. ;) [10:33] oh great, I can't even go to the talktalk website to see if they're having problems [10:33] * Myrtti sometimes forgets she has tinternets in the phone too [10:34] Myrtti: this one? http://www.talktalk.co.uk/servicestatus/ [10:35] hah [10:35] ustream app on ps4, their top live show is pr0n [10:35] quality [10:35] heh [10:35] mine just arrived [10:35] dwatkins: probably "The server at talktalk.co.uk is taking too long to respond." [10:35] Myrtti: bah, they seem to have several open issues anyway [10:36] atleast it's not Tuesday when this is happening [10:36] I have two Google Hangouts then [10:36] now I only have a AC meeting === Lcawte|Away is now known as Lcawte [10:39] looks like a lot of stuff I use daily have been blackholed somehow [10:41] * TheOpenSourcerer left talktalk a couple of months ago as they were just *so* rubbish. [10:44] TheOpenSourcerer: the idea has crossed my mind several times, but somehow there's always been some valid points why we've not done it yet [10:45] I just might have a discussion about this with dsample again tonight, I'm sure he'll agree if his annoyance on not being able to browse autotrader is bad enough [10:47] TheOpenSourcerer: My predecessor changed most of the phones & broadband to TalkTalk just before I started, its been a completely awful change, took months to get the phone lines set up properly, I wish he'd asked me before he changed [11:03] I wish I knew why our enquiries@ email address keeps getting mail asking if we have any hotel room vacancies for ../../.... dates, we're a bloody tyre fitters, what do they think we're going to do, house people in old tyres [11:04] How is variety still not in the USC? Tsk [11:05] DJones: google for that email address [11:06] To be honest, they go straight into the junk mail anyway so get ignored, just have to wonder how they decided to send the spam anyway [11:06] I keep getting phone calls asking for various scrap car parts because my phone number is the same as a scrap yard but the scrapyard has a Manchester area code [11:06] We get calls for Maplins Support ;-) [11:07] Our office number ends 76. Another web dev company has the same number, ending 79. That was annoying for a while [11:11] bigcalm: because the developer never submitted it to usc [11:11] ask him to [11:11] then davmor2 can approve it [11:11] Oh, odd [11:11] Morning all [11:11] see, not everything is our fault [11:11] Hehe :P [11:12] meh who didn't do what now [11:12] davmor2: sorry about the LUG [11:13] bigcalm: I was just getting ready to go and james turned up so we just had a chat about life and work and I gave him a tour of the phone :) [11:14] Heh [11:14] davmor2: just James, no Gretchen? [11:15] bigcalm: Gretchen wasn't feeling on top of the world. [11:15] :( [11:15] yeah I said to pass on my regards [11:16] I hope she'll be okay to come to the meal on the 11th [11:19] ooh, variety? not heard of that [11:20] dutchie: http://peterlevi.com/variety/how-to-install/ [11:20] it'd be an improvement on my current system of dubious shell scripts [11:20] yeah, just googled it [11:20] Ah, fair enough :) [11:20] I just added a comment suggesting he submit it to the USC [11:20] cool :) [11:21] now, back to work [11:22] Does anybody know how to restrict sudo so that a given user can only sudo as another given user? [11:26] can't you just remove them from the admin group, bigcalm? [11:26] dwatkins: what admin group [11:27] remove them from sudo group, and add something like "user = ALL(target_user) ALL" to /etc/sudoers [11:27] bigcalm: I think you can just remove them from sudoers [11:27] oh sorry, got confused between OS X and Ubuntu/Linux [11:27] Humm [11:27] bigcalm: man 5 sudoers [11:27] dwatkins: no there used to be an admin group it got removed [11:28] it's just called "sudo" now [11:28] ah ok, at least it's not the confusingly-named "wheel" ;) [11:28] bsd-- [11:29] (don't forget to use visudo to edit sudoers) [11:31] I added this to /etc/sudoers: hayley ALL=(iain) ALL [11:31] I logged in as hayley and tried: sudo su - iain [11:31] I got this error: Sorry, user hayley is not allowed to execute '/bin/su - iain' as root on proliant.discworld.cuth.eu. [11:32] I wanted to allow sudo with no password for specific commands, but couldn't find the part of the documentation that explained this in anything but extremely complex terms. [11:33] And yet... [11:33] hayley@proliant:~$ sudo -u iain whoami [11:33] iain [11:33] bigcalm: echo $USER [11:33] So how do I let hayley become iain? [11:33] "as root" is the key [11:34] bigcalm: sudo -u iain -i [11:34] sudo -u iain -i? [11:34] bigcalm: sudo -u iain -i [11:34] lol [11:34] HAHA! [11:34] Yay ! [11:34] $HOME will be correct now as well [11:35] dwatkins: user = ALL NOPASSWD: /bin/foo, /usr/bin/bar [11:35] er [11:35] move the = one word left [11:35] but that should work [11:36] thanks dutchie :) [11:36] is there like, reverse sudo? [11:36] where you have to type your password to run a command as yourself [11:37] o.O [11:38] ali1234: you could write a wrapper around bash -e and set it as login shell or something [11:38] i have done that, but it's kind of messy [11:38] ali1234: su nobody ? [11:39] so i have some piece of software and i want it to a) always run as a specific user, and b) require me to type my password whenever i try to run it [11:40] i implemented this by shadowing the binary with a script in ~/bin with the same name, which does sudo -u $@ [11:40] but this is kind of hacky and i thought maybe there was a better way [11:41] maybe with setuid and "reverse sudo" (which is something i just made up) [11:41] ali1234: Ah, with selinux I think you could do that by having to change context/policy/whatever it's called - not sure how to without [11:41] could do some wacky permissions like 750 or something? [11:41] only £9.99 for WoW Mists of Pandaria on Amazon Black Friday! do NOT pay attention to the £7 price on Blizzard's website! [11:41] for (a) at least [11:41] ali1234: You could just put the program on a directory that was only visible to a particular user [11:42] i could, but then i wouldn't be able to run it... [11:42] i want to avoid the need for the script [11:42] i mean that's effectively what i've done [11:42] why not just sudo -u user by hand? [11:42] the user that really runs it can't see the script, cos it's in my normal user homedir [11:43] anyway i should be doing topology [11:43] and my user can't "see" the really binary because the script shadows it [11:53] popey: davmor2: http://peterlevi.com/variety/about-variety/#comment-8430 [11:58] bigcalm: yeah he went through the old queue via the ARB. [12:10] Azelphur, is there any cryptocurrency right now worth mining on a geforce? [12:11] directhex: maybe primecoin on cpu? [12:11] ali1234, my CPU is 5 years old :/ [12:12] bigcalm: great, get submitting! [12:12] apparently there's a gpu miner for it now === interpolite_ is now known as interpolite [12:19] popey: me submit? I'm confused [12:19] he said anyone could submit [12:19] But it would also mean me maintaining the package [12:20] directhex: Buy it cake? [12:20] how does variety change the wallpaper? by what api? === Lcawte is now known as Lcawte|Away [12:21] bigcalm: yeah you wanted it in USC :P You get to look after it :D [12:21] ali1234: magic [12:21] I stated surprise only [12:22] dbus? [12:22] it claims to work on xubuntu but i find that hard to believe [12:22] I wrote a background changer a very long time agao [12:22] considering all the pain i went through the past week fixing xubuntu wallpaper rendering [12:23] unless it just opens a window over your existing desktop [12:23] This takes me back a bit: http://lazygnome.net/projects/mdebc/0.1/mdebc-pl.txt [12:24] ali1234: xsetroot ? [12:24] no, xsetroot absolutely doesn't work in xubuntu [12:24] bigcalm: 2006 :) [12:24] MooDoo: happy times ;) [12:25] ali1234: yeh I mean it's not worked for a long long time [12:25] it doesn't work with compositing WM [12:25] bigcalm: you saying you're unhappy now? [12:25] ali1234: Perhaps it just has a list of different environments and what to do in each case? [12:25] hsetroot does, if the WM supports it, which xfwm4 does, but only when you use my patches [12:26] but xfdesktop does not, so if that's running, you won't actually see the hsetroot wallpaper (xfwm4 will draw it, then xfdesktop will draw on top, hiding it) [12:27] davmor2: I'm happy that it's Friday and I get to stay with my parents this weekend. Most of my time will be spent replacing the HDD with an SSD in my father's laptop and then a reinstall of Windows 7 [12:28] bigcalm: heh, that sounds like my weekend [12:29] bigcalm: excepy my dad has Win8 to put on the SSD, and he's reasonable computer-savvy (he taught me how to code, long long ago ;) [12:29] bigcalm: take a usb caddie drop the ssd in it dd the hdd to the ssd, plug in the ssd start the laptop [12:30] davmor2: I could copy one to the other, but I don't want to. It's time for a fresh install [12:31] bigcalm: Ah fair enough [12:32] Plus, the SSD is smaller than the HDD. So it wouldn't be happy [12:32] bigcalm: you might want to grab the sp's for win7 on a cd that would speed things up a bit [12:32] bigcalm: you could clonezilla/fog it that would take care of it :) [12:32] davmor2: I have access to the MS partner thingy, I don't see the SPs as a download [12:35]