In case this is a thread in the wrong section please move it to the right one. Following situation applies.I am using openSUSE 11.1 with modified kernel. Code:# uname -aLinux linux-2c5j 3.0.4-41-desktop #1 SMP PREEMPT Sun Sep 4 18:51:01 CEST 2011 i686 i686 i386 GNU/Linux The compilation did run flawlessly with the SAKC script.However the module apparmor does not load. Infact:Code:# modprobe apparmorFATAL: Module apparmor not found. I understand that I have to recompile the module, right? There I have the first question: wasn't the apparmor module accepted into the kernel (and therefore should be already compiled and available with the normal kernel compile)? Or is this wrong. How can I recompile the apparmor module for my new kernel.
I have just reinstalled OS 11.2 but this time the 64bit system variant. I installed the real-time kernel and saw that the apparmor module reported an error and wasn't loaded. I have never looked into apparmor and only knows it has something to do with security, and thus I wonder if it is important to do something with this issue? I plan to use the kernel-rt and have more or less always used a variant of this kernel flavour, often self built. Though I can not recall having seen that error before and I have not used a 64bit system before
recently I am interesting at apparmor, and I have read some docs of it, but I have a question that how to protect apparmor itself? I mean only if gained root privilege then stop apparmor service, all the protection will no longer effect, if I hiding or remove root user then how to remodify profiles if needed that because have not enough privilege.
Is there apparmor maillist? maybe you can email me: <email removed for obvious reasons>
Here's my problem: Clean OpenSUSE 11.3 64 bit installation using default options into a Virtualbox virtual machine for pre-production testing. I want to check whether AppArmor is enabled, so I enter YaST -> AppArmor Control Panel.
This has a check box named 'Enable AppArmor' which is by default un-checked. I check this box, and then click 'Done'. This takes me back to YaST and I would assume AppArmor has now been enabled. However, when I return to AppArmor Control Panel the check box is deselected again.
depending on reading some apparmor docs, I know that apparmor read logs to determine what profile a program will be, that means a profile only can be built when the program have been exec at least a time, or we already how will be executed of a specific program. but if a hack inserts a bad-program such as a back door or virus what should never be executed any time, and at the same time we don't know what's the consequence will happen due to the behaviors of a bad-program. therefore, how could apparmor do to prevent these situations? Can apparmor confine every thing what under a specific directory by default? because use: aa-autodep /path/to/restrict/* is 'complain' by default and everything are allowed, can apparmor deny everything by default?
Is there a particular app listed as apparmor, or is it a series of separate programs that act as a whole? if the latter, which programs are these. i just got really lucky with my installation of 11.2, and I'm trying to confirm my success.
Does it make sense to run sshd confined/protected by apparmor? I get tons of attack/hack attempts on my ssh port daily, I created a white list on my firewall to specify the IP addresses that can ssh into my network. I was also thinking of activating the sshd profile in apparmor for some added protection?
Currently the Apparmor program has the notification logs saved to /etc/apparmor/notify.cfg, however, when I try to save the notification after putting my email address in, I get an error saying "Configuration failed for the following operations: Unable to write config changes to /etc/apparmor/notify.cfg"looking inside the folder, I do not see any file named "notify.cfg" BUT I do see so files called reports.conf, logprof.conf, and reports.crontab. I am guessing that the program is asking to save the notification changes to a file that does not exist and in fact one of those three files are the proper ones to use. Well if that is the case then how would I go about fixing this error?
I've installed openSuse 11.4 server-mode (text only) on my desktop, and I'm trying to configure IceWM so i'll eventually have it set up so it always boots into text only mode, but I could be able to quickly start icewm via the command line.using Yast, I installed the Xorg server, and icewm.when I type X, the screen goes black and it just doesn't seem to do anythingI found if I hit ctrl+alt+f1 it kinda puts me back into text only mode, but I can't put in commands anymore. The last thing it says on the screen is:
Failed to load module "fglrx" (module does not exist, 0)
I've goggled that error message and the discussions that popped up around it made no sense to me at all. I've never configured X from scratch before, can someone point me towards a tutorial or something?
OK Trying a fresh install of bnome openSuse, and I have certainly screwwed something up again and hope I don't have to reinstall again., arghhhh! Tomboy won't open, even after reinstallation, and below is the error, but first, as well I can't open my .odt file with openoffice writer!
now the error... #tomboy Gtk-Message: Failed to load module "canberra-gtk-module": libcanberra-gtk-module.so: cannot open shared object file: No such file or directory Gtk-Message: Failed to load module "gnomebreakpad": libgnomebreakpad.so: cannot open shared object file: No such file or directory ...and lots more
The rsync module "opensuse-full" which worked well so far seems currently broken. It tries to mirror a huge number of additional stuff (factory?) but fails with "permission denied". Any place where I could report this?Command:
I am trying to install a Sunix 4018T dual parallel port card on a pc with Mandriva Linux 2010.1: Dealer told me that linux has driver for this card already so I inserted it and turned on my pc. Unfortunately when I try to install my Okidata ML320, cups it's not showing any parallel ports. I try to update all the system with last patches and packages :I tested the card on a pc with windows xp, installed my printer and it works perfectly.
Can someone tell me how to correct the "Invalid module format"? I hope that correcting the "Invalid module format" error, I will not have the "Unknown symbol in module" error.
Note: I am using wlan1 for this module as I previously am online with the wlan0 network.The same error occurs if I use ./wlan0up.
I'm trying to enable the rewrite module in apache, to enabled the module I followed the last entry in the fist page this thread:[URL]...When I restart the apache all works fine, so I supose it's enabled
Now I create .htaccess in my apache folder (/home/user/apache), and I write this:
Code: RewriteEngine On RewriteRule ^link([^/]*).html$ test.php?link=$1 [L] And I try to execute this: ./.htaccess, I have this mistakes: Code: ./.htaccess: 1: RewriteEngine: not found ./.htaccess: 2: Syntax error: "(" unexpected What are I doing wrong?
nits@nits-desktop:/mnt/Storage/Tors/Incomp$ btdownloadcurses --check_hashes 1 filename.torrent /usr/lib/python2.6/dist-packages/BitTorrent/Storage.py:4: DeprecationWarning: the sha module is deprecated; use the hashlib module instead from sha import sha
These errors occurred during execution:
[09:37:48] IOError - [Errno 5] Input/output error
Got this error when I tried hash checking, was downloading the file using rtorrent when there was a sudden powercut and my system shutdown abruptly, tried restarting the torrent and kept encountering problems while restarting.
I need to install module u32 into the netfilter module for kernel 2.6.27.
I did not see the source code in the kernel version I have. where can I find the code for U32 module.
I have checked "netfilter.org" and looks like POM is discontinued. Is the u32 module committed to kernel version 2.6.27 or need to patch it. If yes, where can I find the patch?
conky require the Double Buffer Extension (DBE) to refresh correctly the screen, in older versions I can add the Load "dbe" in the Module section, but how can I do it with no xorg.conf file? VampirD Microsoft Windows is like air conditioning Stops working when you open a window.
Version: GnuPG v2.0.15 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAkxcmpgACgkQJQ+0ABWtaVkSkwCgjoDqodA3e72Y6MPkPExkhZYM 5QgAnRpSFl0DKfDnlzHeU9uAzzWCmwgx
I have been trying to run my vmachines in virtualbox with no success so I decided to install upgraded packages for upgraded kernel, this means to install them from Virtualization-kernel-HEAD repo.The error is about that known issue where the kernel module can't start.
eID-belgium and the config module are not (yet) available for openSUSE 11.4. No big deal, I can wait as I'm sure it will be compiled once these days. Though, there's one thing that I'm interested in. The packages for pre-11.4 always required hal to be installed and running. With openSUSE 11.4 hal got removed as it is deprecated. Is there any chance the eID-belgium packages are going to be delivered without hal support / requirement? I can't think of pulling hal back in just for one app.
It is bad enough that the kernel gods have basically required that the whole kernel source tree be installed and configured to compile even a simple module but they have made it so a module compiled on one kernel will not work on any other.
To make the situation worse much of the configuration needed to successfully compile a module has been left out of open suse11.3. If you want to replicate the problems may I suggest you attempt to compile the usb-skeleton.c driver example code that is included with each kernel. If it is the intent of the linux community to limit driver development to the professionals then congratulations.
I'm using Opensuse 11.2 with the fglrx-driver out of the ati-reposiotry.This fglrx-driver installs a HDA-HDMI-Audio driver using the snd-hda-intel module.My onboard via soundchip uses the same module: snd-hda-intelWith the hdmi-device set to the first device a few apps (like the flash-plugin) use the hdmi-device, which is not connected to any speaker.I can't switch the via-card to the first device in yast, because both cards use the kernel-module. I tried different things on /etc/modprobe.d/50-sound.conf with not results. And it is not possible to put the module on a blacklist, because both cards use it.Is there any way to disable the hdmi-device or to set the via-device to default?Here the output of aplay -l
Code: Karte 0: HDMI [HDA ATI HDMI], Ger�t 3: ATI HDMI [ATI HDMI] Sub-Ger�te: 1/1
I have recently installed Silicon Image S3114 Raid Controller. It has support via the sata_sil module. It shows up in the diskcontroller information, however the module will not load. The reason being, it does not exist. I checked the directory and sure enough the compiled module sata_sil is not present. Also, I am weary about updated my kernel because of the trouble I had finding a os level that would run this dinosaur. Suse 10.1 Kernel 2.6.16.21 for ppc
