Subject: Linux-Admin Digest #51
From: Digestifier <[email-masked]>
To: [email-masked]
Date: Sun, 11 Sep 94 17:13:34 EDT

Linux-Admin Digest #51, Volume #2                Sun, 11 Sep 94 17:13:34 EDT

Contents:
  Re: Everyone's MOUNT - WARNING! (Jeff Kesselman)
  Re: Doom HAS no pixel doubling (Reagan Blundell)
  Re: Is there any Accounting in Linux?? (Pete Deuel)
  Re: Q: Logging outgoing INET services (Frank Dwyer)
  Kermit's Bug (Lee-Yiaw Ting)
  Need DL/Time Limiting ideas - Linux BBS (Greg Corteville)
  Re: Everyone's MOUNT - WARNING! (Thomas Koenig)
  Re: Doom HAS no pixel doubling (Stephen Harris)
  Re: Whats the best _CHEAP_ ISA video card for Linux/Xfree? (Steven J. Esbrandt)
  Re: What would be faster Dx-50 or DX2-66? (C.P.Townsend)
  IP Addresses without SLIP (Portal)
  Re: Need DL/Time Limiting ideas - Linux BBS (Hein Roehrig)
  gopherd for liunx (Jacek A. Ponarski)
  Re: Drives with too many heads (Kenneth H. Gantz)
  Re: Try again: Long user names (Today's problem) (Dan Swartzendruber)

----------------------------------------------------------------------------

From: [email-masked] (Jeff Kesselman)
Subject: Re: Everyone's MOUNT - WARNING!
Date: Sun, 11 Sep 1994 17:00:45 GMT

In article <[email-masked]> [email-masked] (C. Engelmann) writes:
>Hallo all,
>
>How can I let everyone mount the diskette
>type he wants.
...
>It's a permission question and I 'm generous but
>not everyone should have the root-passwd.
>

Just so you are aware, by giving users the ability to mount file systems, 
you ARE giving anyone with a reasonable knowledge of UNIX root 
permissions to your machine. All they need is roto permissions on another 
Linux machine (all to easy, since Linux is preading fast).  They create a 
shell with setuid to root, owned by root, then mount it on your system 
and run the shell.

This is why mount permissions are usually reserved for root alone on UNIX 
systems.  We are talking a MAJOR security hole otherwise.  (Remember that 
UNXI was designed for mini-computers, where new volumes were almost never 
mounted except for software installation or tape back-ups.)A

------------------------------

From: [email-masked] (Reagan Blundell)
Subject: Re: Doom HAS no pixel doubling
Date: 11 Sep 1994 14:27:40 +1000

Bill C. Riemers ([email-masked]) wrote:
> >>>>> "Christopher" == Christopher Wiles <[email-masked]> writes:

>     Christopher> [email-masked] (Byron Faber) writes: : I
>     Christopher> was told by a friend (rumors rumors) that the pixel
>     Christopher> doubling, etc : was NOT included because XFree can
>     Christopher> change resolutions on the fly.

>     Christopher> Bullshit, sir.  Check the README.

> Hmmm, last I checked he is right.  CTRL+ALT+BS ==> change resolution.

Not quite.. ctrl-alt-bs will kill the Xserver.. ctl-alt-plus or ctl-alt-minus
changes your resolution.

-- 
Reagan Blundell                 The bats have left the bell tower
[email-masked]       The victims have been bled
                                Red velvet lines the black box
                                Bela Lugosi's dead         -- Bauhaus

------------------------------

From: [email-masked] (Pete Deuel)
Subject: Re: Is there any Accounting in Linux??
Date: Sun, 11 Sep 1994 17:22:09 GMT

In article <[email-masked]> [email-masked] (Tony Schwartz) writes:
>From: [email-masked] (Tony Schwartz)
>Subject: Is there any Accounting in Linux??
>Date: Fri, 9 Sep 1994 14:37:57

>Does anyone know of any built in or add-on accounting functions that will 
>allow the Linux system to record who is on, when, how long, etc??  I need this 
>as a new Access provider and dont really want to create it myself.

Well, I don't know a lot about this, but aren't there ways to get syslogd to 
do this kind of thing?

Or, if you're looking for something simpler, the command "last -3 user" will 
give you the last 3 logins of user, telling you where they logged in from and 
for how long...  It uses a file called "wtmp" and if someone knows of a way to 
grep through it (it's in some weird format), you could extract the info you 
need...  Careful, though...  I think that this file is wiped and retouched on 
boot up (you'd have to update your accounting after booting everyone off but 
before the system restarts in your "shutdown" routine)

Hope this gets the discussion going...

Pete
===================================================
     "Actually, I'm a lab mouse on stilts..."

     E-mail:  [email-masked]
===================================================

------------------------------

From: [email-masked] (Frank Dwyer)
Subject: Re: Q: Logging outgoing INET services
Date: 11 Sep 1994 17:59:25 GMT

Phil Homewood ([email-masked]) wrote:
:>Frank Dwyer ([email-masked]) wrote:

:>: Users can't run ftp/telnet/whatever unless they run the front-end program
:>: that runs sgid whoever.  The logfiles would be owned by the same group.

:>Or unless they compile their own copies of the binaries.

Yes.. a problem with ftp, but probably not with rlogin/telnet (at least on a
commercial system).  As far as Linux is concerned, you could probably modify
the kernel tcp/udp code to log outgoing connections.

-f

--
Frank Dwyer ([email-masked])              Office: 443 SCL (904) 644-6008
http://www.scri.fsu.edu/~dwyer                FAX   :         (904) 644-0098
Unix System Manager / Systems Development     Pager :         (904) 422-4333

Supercomputer Computations Research Institute
Florida State University
Tallahassee, FL 32306

=============================================================================
 "Unix _IS_ user friendly... It's just selective about who its friends are."
=============================================================================

------------------------------

From: [email-masked] (Lee-Yiaw Ting)
Subject: Kermit's Bug
Date: 6 Sep 1994 10:45:49 GMT

Hi,

I tried to use a script to perform auto ASCII pattern transmission. 
However, the OUTPUT command does not seem to work for sending HEX 00. Any 
idea? Is this a bug?

Command I used : output \4\0\1\2\3\5\6\7
                 output \4\8\9\10

Result : only \4 were transmitted!

Kermit software : C-Kermit 5A(188), 23 Nov 92, POSIX Numeric 501188.
OS : Linux 1.0 #2

Thank for any info!
Regards,
Ting

------------------------------

From: [email-masked] (Greg Corteville)
Crossposted-To: alt.bbs,alt.bbs.unixbbs
Subject: Need DL/Time Limiting ideas - Linux BBS
Date: 11 Sep 1994 12:27:14 -0600

I'm currently in the process of setting up a BBS under Linux.  All of the 
BBS software I've seen for Linux already is cryptic, difficult to use for 
callers used to MS-DOS boards, and not very configurable.  For this 
reason I've decided to write a BBS using a conglomeration of shell 
scripts and the menu system program used at Nyx (A public access UNIX 
site at nyx.cs.du.edu).  This is getting to be very tedious.  I'm using 
programs already written to accomplish message bases and E-mail, however 
I have to FTP the source (over my provider's 2400bps dial-up :( ) and 
modify it to eliminate shell escapes and other security hazards.  This is 
also very time consuming.  I'm willing to stick with this however because 
of the configurability.  However, my biggest problem is finding a way to 
limit login times and establish an upload/download ratio system.  If you 
have ideas on how I could accomplish this with shell scripts or simple C 
programs let me know.

I'm concerned with the security of using shell scripts like this.  It 
seems secure so far, but you never know.  That's why I'd also be 
interested in hearing about pre-written BBS software for Linux that will 
offer what I'm looking for.  The system I am planning will be largely 
information based (offering topics of all kinds, kind of like Internet).  
I'll use the gopher system (which is already set-up and merely needs to 
be called from the BBS) as a means to access this information.  I need 
the BBS software that will provide message and file areas as well as 
E-mail.  It would also be nice to have FIDO (internal or external, 
doesn't matter) support and Usenet support.  The system should be easy to 
use because a majority of my users will be used to MS-DOS type boards 
like Renegade and Tag.  Since my service provider only has a 2400bps 
dial-up I don't want to download all the Linux packages.  Recommendations 
will be most welcome.

Also, if I can figure out how and get somebody to provide an inexpensive 
link, I'd like to allow Internet E-mail and news on the system.  Who 
should I contact about this?  I've heard of UUCP.  Is there an integrated 
network of epople that do this already that can provide some pointers?  
Can it be done cheap?  This will probably be a non-profit system.  Is 
there another BBS in the Detroit area that I can poll if I decide to take 
that route.

I have a lot of questions and if you've read up to the end of this 
message I appreciate it already.  Anybody with replies or pointers for 
any of the problems I've had so far, please E-mail me.  (I normally do 
not read alt.bbs and alt.bbs.unixbbs, however I do read comp.os.linux.admin.)

Thanks.

-- 
Greg Corteville              | "We are the knights who say Nee!"
[email-masked]     |              - Monty Python's QFTHG
[email-masked] | 
---[PGP Key available via finger]------------------------------------

------------------------------

From: [email-masked] (Thomas Koenig)
Subject: Re: Everyone's MOUNT - WARNING!
Date: 11 Sep 1994 18:24:48 GMT
Reply-To: [email-masked]

Jeff Kesselman ([email-masked]) wrote in article <[email-masked]>:

>Just so you are aware, by giving users the ability to mount file systems, 
>you ARE giving anyone with a reasonable knowledge of UNIX root 
>permissions to your machine.

The appropriate options make it quite safe; here's an entry from my system's
/etc/fstab:

/dev/fd0        /dos-a      msdos       user,noauto

This means that any user can type 'mount /dos-a' and get the floppy all
for herself, without nasty suid root problems.

See 'man 8 mount'.
--
Thomas Koenig, [email-masked], [email-masked].
The joy of engineering is to find a straight line on a double
logarithmic diagram.

------------------------------

Crossposted-To: alt.games.doom
From: [email-masked] (Stephen Harris)
Subject: Re: Doom HAS no pixel doubling
Date: Sun, 11 Sep 1994 15:37:43 GMT

Corey Brenner ([email-masked]) wrote:

:  anyone else getting 'lumpname not found' error with the soundserver?

Well, it looks like a 'fixed' version of the linxdoom.tgz file has appeared
on Sunsite.  it fixes the -2 -3 -4 problem (but the display is quite a bit
slower) and seems to have removed the lumpname messages as well.

The only question I have: Why does it ask me if I want to return to DOS ???
:-)

Off to roll a 320 based X mode :-)
-- 

rgds
Stephen

------------------------------

From: [email-masked] (Steven J. Esbrandt)
Crossposted-To: comp.os.linux.misc
Subject: Re: Whats the best _CHEAP_ ISA video card for Linux/Xfree?
Date: 11 Sep 1994 18:45:40 GMT

: : Very well that the ATI Mach32/Ultra/Ultra Pro are advocated for, but could
: : someone give me hints for the best    performance/price    ratios ?

  I am planning to buy a new video card to replace my Trident crud very soon. I
was planning to buy an EISA Mach32 (w/2M vram), but this discussion has sparked
my interest in the newer S3 cards and others. I am not looking for cheap cards-
I'm willing to pay a bit for performance. I simply want something that is fast
and pretty well supported. What I'd like to know is this: how does the ATI
Mach 32 compare to the other cards?  How many xstones do these cards get?
Also, where does the mach 64 fit in, in terms of perrformance and support?

==================
Steven J. Esbrandt
[email-masked]

------------------------------

From: [email-masked] (C.P.Townsend)
Subject: Re: What would be faster Dx-50 or DX2-66?
Date: 11 Sep 1994 15:08:53 -0400

this is a FAQ (quod vide) in comp.sys.ibm.pc.hardware.*

-- 
Johnny Appleseed wore a coffee sack

------------------------------

From: [email-masked] (Portal)
Subject: IP Addresses without SLIP
Date: 11 Sep 1994 19:16:51 GMT

I can get a serial connecion to my school's computer system - but they do
not offer SLIP.  Using Linux can I still run my own IP address?  I need
some wa2y for a few friends of mine to be able to access my stuff using
the net...

Please respond via mail to     [email-masked]   

I greatly appreciate the help...

------------------------------

From: [email-masked] (Hein Roehrig)
Crossposted-To: alt.bbs,alt.bbs.unixbbs
Subject: Re: Need DL/Time Limiting ideas - Linux BBS
Date: 11 Sep 1994 19:22:50 GMT

In <[email-masked]> [email-masked] (Greg Corteville) writes:

>of the configurability.  However, my biggest problem is finding a way to 
>limit login times and establish an upload/download ratio system.  If you 
>have ideas on how I could accomplish this with shell scripts or simple C 
>programs let me know.

there is support for limiting login times and for logging out users
in the shadow passwd package. There is no support for limiting the
time a user is logged in though.

Hein

------------------------------

From: [email-masked] (Jacek A. Ponarski)
Subject: gopherd for liunx
Date: 11 Sep 1994 20:19:20 GMT

Hi,
Is there a gopherd for linux?

--Jacek

--

=====================================================
=====================================================
                   Jacek A. Ponarski
                University of Connecticut

tel. (203)429-8651   email: [email-masked]          
     (203)877-8655   [email-masked]  
fax  (203)429-8651   

http://micro5.trincoll.edu/

*****************************************************
  To be or not to be, what was the question again?
=====================================================
=====================================================

------------------------------

From: [email-masked] (Kenneth H. Gantz)
Subject: Re: Drives with too many heads
Date: Sun, 11 Sep 1994 06:02:25 GMT

[email-masked] (Mark A. Horton KA4YBR) writes:

>Stephen Vance ([email-masked]) wrote:
>: I hate to post this subject again, and heartily apologize in advance; I did
>: not think that it would apply to me.  I am trying to install Linux on a new
>: laptop (Slackware 1.2).  Using the 'bare' boot disk, I get the message

>: hd.c:  ST-506 interface disk with more than 16 heads detected
>:   probably due to non-standard sector translation. Giving up.
>:   (disk 1: cyl=524; sect=63; head=32)

>: I looked at the source and there is no explanation.  This leaves me unable
>: to fdisk.  Could someone *please* be kind enough to post or e-mail what I
>: need to do to get around this???

>: Thanks in advance,
>: Steve

>Hello Steve,

>       This is becoming quite common with the larger IDE drives.  You
>have two options, (well, more than that really, but it gets messier!).
>First you can make Linux believe the DOSish CMOS description of the
>drive (a little complicated) or lose 12 MB of your disk and only use
>the first (REAL) 1024 cylinders (SIMPLE).  The simple option first:

>SIMPLE:        Boot the machine and interrupt the boot to go to CMOS
>               configuration.  On the (usually) base configuration
>               screen you will have the disk types (hard drives) 
>               listed... yours may be called "user" or 47 for the
>               type.  This is where you will find the cylinders, heads,
>               and sectors of the device listed.  Only the number of
>               sectors is sacred and MUST reflect reality!  The drive
>               you have is, in reality, a 1048 cylinder, 16 head, 63
>               sector device.  The cylinders and heads have been 
>               remapped to satisfy the boot and DOS views of reality 
>               which cannot handle more than 1024 cylinders on a device.
>               (10 bits for addressing... 2^10 = 1024)  The simple
>               fix is to set the cylinders to 1024 and the heads to 16,
>               leaving sectors as 63.  This will cost you 24 cylinders
>               [or 24*(540/1048) MB], but will insure that everyone
>               is looking at the same geometry.  From then on, the 
>               install is simple and straightforward.

>NOT_SO_SIMPLE: Leave your CMOS set at cyl=524; sect=63; head=32.
>               Boot the Linux boot kernel you've made.  At the FIRST
>               prompt, enter the REAL disk geometry (NOT what CMOS
>               has set!).  In this case, you would type:
>                       ramdisk hd=1048,16,63
>               Continue the boot process.  When told to, replace the
>               boot diskette with the root diskette you've chosen.
>               After Linux comes up, login as root and  invoke
>               fdisk.  Assuming this is the first IDE drive you are
>               using, type in:
>                       fdisk /dev/hda
>               When fdisk starts, press "p" to see the existing
>               partitions.  Delete any you DON'T need (hopefully in
>               this case all of them!)  Next go to expert mode (enter
>               an "x")  From the expert menu, change the cylinders
>               (type in a "c") to the CMOS setting.  Likewise for
>               the number of heads (type in an "h").  Then return
>               to the main menu and define your partitions as you
>               would normally... with the parameters you"ve set 
>               fdisk to use as far as number of heads and cylinders.
>               When done, save the new table via the "w" option.
>               After the partition table has been updated, continue
>               the install using "setup" and all should be fine.  Note
>               that when you wish to use fdisk again, you'll have to
>               go through this drill all over to force it to buy what
>               it sees.  But now Linux, DOS, and CMOS are all seeing
>               the same (distorted) view of reality!  :) 
> 
>       
>       Please note that the above techniques work with ANY drive with
>       more than 1024 cylinders, just adjust the numbers for cylinders
>       and heads as appropriate... i.e. Reduce the number of cylinders
>       via a factor to get it below 1024 and then multiply the number
>       of heads by this same factor.  DO NOT MESS WITH SECTORS!  This is
>       the one piece that actually has to be real!

This is a very good explanation of the procedure for large IDE drives.
The only thing I would add, is what to do if it's your second physical
drive that's the big one. That's the situation I had and it drove me
half nuts because no one ever gave an example the the hd= incantation
for the second drive. It turns out to be really simple. I my case, my
firs drive is 424 megs and under the 1023 limit while my second drive
is 730 megs and over the 1023 cylider limit. When you get to  the boot
prompt in a situation like this, you include a hd= statement for BOTH 
drives even though the first one (in my case) was no problem. So, in
my example it looked like this boot: ramdisk hd=989,15,56 hd=1416,16,63.
To get lilo to work, you'll have to put these two lines at the top of
your lilo.conf file: append="hd=989,15,56 hd=1416,16,63" and on the next
line: linear.  Those numbers are for my drives, you'll have to substitute
the numbers for your drives. And you do need the quotes like in my example.
I've had lilo booting contentedly off of my large hard drive for quite some
time. Now if I could only figure out how to install lilo on a floppy. Why
doesn't this work? lilo -C /etc/lilo.conf -v -r /flop (where /flop is the
place I have /dev/fd0 mounted.
>-- Mark

>--
>"Linux!     Guerrilla UNIX Development     Venimus, Vidimus, Dolavimus."
>------------------------------------------------------------
>Mark A. Horton       ka4ybr             [email-masked]
>P.O. Box 747 Decatur GA US 30031-0747         [email-masked]
>+1.404.371.0291                     33 45 31 N / 084 16 59 W
-- 
Ken Gantz
[email-masked]
Work - 502.329.3724         IT IS NOT A PROBLEM OF WHETHER MACHINES THINK,
FAX - 502.329.6199          BUT WHETHER MEN DO. - B.F. Skinner

------------------------------

From: [email-masked] (Dan Swartzendruber)
Crossposted-To: comp.os.linux.help
Subject: Re: Try again: Long user names (Today's problem)
Date: 11 Sep 1994 20:46:37 GMT

In article <[email-masked]> [email-masked] (Pete Deuel) writes:
>In article <[email-masked]> [email-masked] (Pete Deuel) writes:
>>From: [email-masked] (Pete Deuel)
>>Subject: Long user names (Today's problem)
>>Date: Sun, 11 Sep 1994 03:07:42 GMT

[deleted]

I've had the same problem.  When people log-in to my machine, the
login name is their nodename with a type-of-service character
prepended, so that foobar UUCP access would be Ufoobar, SLIP would
be Sfoobar, etc.   Unfortunately, I had problems when node names
were 8 characters or longer, so I had to issue shorter, fake ones.

-- 

#include <std_disclaimer.h>

Dan S.

------------------------------

** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [email-masked]

You can send mail to the entire list (and comp.os.linux.admin) via:

    Internet: [email-masked]

Linux may be obtained via one of these FTP sites:
    nic.funet.fi				pub/OS/Linux
    tsx-11.mit.edu				pub/linux
    sunsite.unc.edu				pub/Linux

End of Linux-Admin Digest
******************************