<?xml version="1.0" encoding="utf-8"?><!-- generator="wordpress/2.2" -->
<rss version="2.0" 
	xmlns:content="http://purl.org/rss/1.0/modules/content/">
<channel>
	<title>Comments for darkness</title>
	<link>http://darkness.codefu.org/wordpress</link>
	<description>Technical adventures and blabbering</description>
	<pubDate>Sat, 05 Jul 2008 12:38:09 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.2</generator>

	<item>
		<title>Comment on SELinux and EPEL&#8217;s mod_fcgid on CentOS 5 by Paul Howarth</title>
		<link>http://darkness.codefu.org/wordpress/2007/09/26/288#comment-42069</link>
		<author>Paul Howarth</author>
		<pubDate>Mon, 23 Jun 2008 13:58:10 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2007/09/26/288#comment-42069</guid>
		<description>I'm the author of the mod_fcgid-selinux policy module.

The existing dontaudit rules in the apache policy are needed because httpd doesn't set close-on-exec for various file descriptors it has open before it calls out to CGI scripts etc. So those scripts inherit those file descriptors and could potentially mess with the files httpd has open.
As there is an SELinux domain transition here (e.g. httpd_t -&#62; httpd_sys_script_t) and the httpd_sys_script_t domain isn't allowed access to most of the files httpd has open, the kernel generates AVC denials at exec() time and closes the files in the child process. The dontaudit rules just prevent the logs getting cluttered with the resulting noise. It would of course be better to get httpd to set close-on-exec but upstream seems reluctant to do that.

Now as for the question of where to report the need for your allow rule, it definitely belongs in the core apache policy rather than the fastcgi module because it references only types from the httpd module. I suggesting raising this on fedora-selinux-list, explaining under what circumstances you need this, and you'll probably get a helpful answer from Dan Walsh, the selinux-policy maintainer in Fedora.</description>
		<content:encoded><![CDATA[<p>I&#8217;m the author of the mod_fcgid-selinux policy module.</p>
<p>The existing dontaudit rules in the apache policy are needed because httpd doesn&#8217;t set close-on-exec for various file descriptors it has open before it calls out to CGI scripts etc. So those scripts inherit those file descriptors and could potentially mess with the files httpd has open.<br />
As there is an SELinux domain transition here (e.g. httpd_t -&gt; httpd_sys_script_t) and the httpd_sys_script_t domain isn&#8217;t allowed access to most of the files httpd has open, the kernel generates AVC denials at exec() time and closes the files in the child process. The dontaudit rules just prevent the logs getting cluttered with the resulting noise. It would of course be better to get httpd to set close-on-exec but upstream seems reluctant to do that.</p>
<p>Now as for the question of where to report the need for your allow rule, it definitely belongs in the core apache policy rather than the fastcgi module because it references only types from the httpd module. I suggesting raising this on fedora-selinux-list, explaining under what circumstances you need this, and you&#8217;ll probably get a helpful answer from Dan Walsh, the selinux-policy maintainer in Fedora.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on PCI vs. PCI-X vs. PCI Express by darkness</title>
		<link>http://darkness.codefu.org/wordpress/2005/08/19/201#comment-41729</link>
		<author>darkness</author>
		<pubDate>Fri, 20 Jun 2008 02:44:06 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2005/08/19/201#comment-41729</guid>
		<description>As far as I know, no, you can't put PCI-X into a PCI-E slot of any type.</description>
		<content:encoded><![CDATA[<p>As far as I know, no, you can&#8217;t put PCI-X into a PCI-E slot of any type.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on PCI vs. PCI-X vs. PCI Express by Nick</title>
		<link>http://darkness.codefu.org/wordpress/2005/08/19/201#comment-41714</link>
		<author>Nick</author>
		<pubDate>Thu, 19 Jun 2008 23:37:43 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2005/08/19/201#comment-41714</guid>
		<description>This is a great article. I'd like to see another on PCI/PCI-X/PCI-E commpadibiliy. I've been researching for a year in preparation for building my own computer for about a year. I've found the perfect motherboard but it is running low on PCI slots. It was made for 3-way nVidia SLI so it has... 3x PCI-E x16 slots, 1x PCI-E x1 slot, and 2x PCI slots. So i really want 2 PCI-E x16 video cards, 1 PCI to USB PCI card, 1 PCI to wireless network card, and 1 PCI-X RAID 0/1 controller card. That means I have one spare PCI-E x16 slot left and need to put in my PCI-X RAID card. SO HEARS MY QUESTION!!! Can you put a PCI-X card into a PCI-E x16 slot? Please email me. again great article. Would like to see more.</description>
		<content:encoded><![CDATA[<p>This is a great article. I&#8217;d like to see another on PCI/PCI-X/PCI-E commpadibiliy. I&#8217;ve been researching for a year in preparation for building my own computer for about a year. I&#8217;ve found the perfect motherboard but it is running low on PCI slots. It was made for 3-way nVidia SLI so it has&#8230; 3x PCI-E x16 slots, 1x PCI-E x1 slot, and 2x PCI slots. So i really want 2 PCI-E x16 video cards, 1 PCI to USB PCI card, 1 PCI to wireless network card, and 1 PCI-X RAID 0/1 controller card. That means I have one spare PCI-E x16 slot left and need to put in my PCI-X RAID card. SO HEARS MY QUESTION!!! Can you put a PCI-X card into a PCI-E x16 slot? Please email me. again great article. Would like to see more.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Linux audio strikes back by harmless</title>
		<link>http://darkness.codefu.org/wordpress/2007/12/25/293#comment-36877</link>
		<author>harmless</author>
		<pubDate>Fri, 25 Apr 2008 01:57:03 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2007/12/25/293#comment-36877</guid>
		<description>I've run into "unable to create IPC semaphore" with the same symptom of being able to use it only as root.  On a whim I changed my ipc_key, restarted alsa and tada! everything was happy.  I suppose there was some kind of bizarre collision?  *shrug*  ... at any rate, I figure I'd put my 2 cents some place as a help to anyone who googles onto this in search of a solution.</description>
		<content:encoded><![CDATA[<p>I&#8217;ve run into &#8220;unable to create IPC semaphore&#8221; with the same symptom of being able to use it only as root.  On a whim I changed my ipc_key, restarted alsa and tada! everything was happy.  I suppose there was some kind of bizarre collision?  *shrug*  &#8230; at any rate, I figure I&#8217;d put my 2 cents some place as a help to anyone who googles onto this in search of a solution.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Popping up the GNOME &#8220;Run Application&#8221; dialog from a script by yyj</title>
		<link>http://darkness.codefu.org/wordpress/2004/07/24/152#comment-36616</link>
		<author>yyj</author>
		<pubDate>Mon, 21 Apr 2008 07:36:43 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2004/07/24/152#comment-36616</guid>
		<description>see all the comment here,still not find a way to popup the run dialog</description>
		<content:encoded><![CDATA[<p>see all the comment here,still not find a way to popup the run dialog</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Linux without a CLI?  Good luck with that by Demetri</title>
		<link>http://darkness.codefu.org/wordpress/2007/06/25/282#comment-36376</link>
		<author>Demetri</author>
		<pubDate>Wed, 16 Apr 2008 19:22:32 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2007/06/25/282#comment-36376</guid>
		<description>Removing a package with pirut worked just fine for me under F(C)8.</description>
		<content:encoded><![CDATA[<p>Removing a package with pirut worked just fine for me under F(C)8.</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Updated: chrooted SFTP account recipes by Minstrel</title>
		<link>http://darkness.codefu.org/wordpress/2004/07/25/153#comment-35905</link>
		<author>Minstrel</author>
		<pubDate>Sat, 05 Apr 2008 22:06:49 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2004/07/25/153#comment-35905</guid>
		<description>Since version 4.9 of OpenSSH, this is now a built-in feature.  I have written up the method I've used to migrate to it, in case it's of use to others:

http://www.minstrel.org.uk/papers/sftp/builtin.html

Nice not to have to custom-code each time there's an update to OpenSSH!

Hope this helps.

--
Minstrel
http://www.minstrel.org.uk/</description>
		<content:encoded><![CDATA[<p>Since version 4.9 of OpenSSH, this is now a built-in feature.  I have written up the method I&#8217;ve used to migrate to it, in case it&#8217;s of use to others:</p>
<p><a href="http://www.minstrel.org.uk/papers/sftp/builtin.html" rel="nofollow">http://www.minstrel.org.uk/papers/sftp/builtin.html</a></p>
<p>Nice not to have to custom-code each time there&#8217;s an update to OpenSSH!</p>
<p>Hope this helps.</p>
<p>&#8211;<br />
Minstrel<br />
<a href="http://www.minstrel.org.uk/" rel="nofollow">http://www.minstrel.org.uk/</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on html2markdown updated by darkness</title>
		<link>http://darkness.codefu.org/wordpress/2007/04/30/266#comment-35490</link>
		<author>darkness</author>
		<pubDate>Mon, 24 Mar 2008 22:02:48 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2007/04/30/266#comment-35490</guid>
		<description>It seems that my web log ate your HTML.  Can you either re-enter it (maybe as entities, then?) or mail me the sample to darkness@caliginous.net?  Thanks, darkness</description>
		<content:encoded><![CDATA[<p>It seems that my web log ate your HTML.  Can you either re-enter it (maybe as entities, then?) or mail me the sample to <a href="mailto:darkness@caliginous.net?">darkness@caliginous.net?</a>  Thanks, darkness</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on html2markdown updated by Ramon</title>
		<link>http://darkness.codefu.org/wordpress/2007/04/30/266#comment-35436</link>
		<author>Ramon</author>
		<pubDate>Mon, 24 Mar 2008 05:07:17 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2007/04/30/266#comment-35436</guid>
		<description>Nice library, but I can't seem to get it to work. Shouldn't this work?

from html2markdown import html2markdown

html = """My titleThis is a test"""
print "CONVERTING "+html
print html2markdown(html)</description>
		<content:encoded><![CDATA[<p>Nice library, but I can&#8217;t seem to get it to work. Shouldn&#8217;t this work?</p>
<p>from html2markdown import html2markdown</p>
<p>html = &#8220;&#8221;"My titleThis is a test&#8221;"&#8221;<br />
print &#8220;CONVERTING &#8220;+html<br />
print html2markdown(html)</p>
]]></content:encoded>
	</item>
	<item>
		<title>Comment on Popping up the GNOME &#8220;Run Application&#8221; dialog from a script by Allan Bogh</title>
		<link>http://darkness.codefu.org/wordpress/2004/07/24/152#comment-35175</link>
		<author>Allan Bogh</author>
		<pubDate>Tue, 18 Mar 2008 18:33:23 +0000</pubDate>
		<guid>http://darkness.codefu.org/wordpress/2004/07/24/152#comment-35175</guid>
		<description>This worked great, but bee was right that it needed to be set to the current time. Try this:

- Copy gnome-run.c to a folder.
- Edit gnome-run.c, line 37: 
    "event.data.l[1] = (Time)0;" 
    change to "event.data.l[1] = (Time)(time(NULL) * 1000);"
- Open terminal window
- Navigate to folder with gnome-run.c
- Type:  gcc gnome-run.c -o gnome-run -L/usr/X11R6/lib -lX11
- Type:  sudo mv gnome-run /usr/bin/

Optional to make it work like Windows' Start-Run command
- Right-click "Applications" menu in Panel.
- Click Edit Menus
- Click New Item
- In the Create Launcher window type Name: Run, Command: gnome-run, press OK
- In Main Menu window move the Run command to the top if your panel is at the top of your screen, or to whatever other location you want.
- You can repeat this process for gksu and call it "Run As"</description>
		<content:encoded><![CDATA[<p>This worked great, but bee was right that it needed to be set to the current time. Try this:</p>
<p>- Copy gnome-run.c to a folder.<br />
- Edit gnome-run.c, line 37:<br />
    &#8220;event.data.l[1] = (Time)0;&#8221;<br />
    change to &#8220;event.data.l[1] = (Time)(time(NULL) * 1000);&#8221;<br />
- Open terminal window<br />
- Navigate to folder with gnome-run.c<br />
- Type:  gcc gnome-run.c -o gnome-run -L/usr/X11R6/lib -lX11<br />
- Type:  sudo mv gnome-run /usr/bin/</p>
<p>Optional to make it work like Windows&#8217; Start-Run command<br />
- Right-click &#8220;Applications&#8221; menu in Panel.<br />
- Click Edit Menus<br />
- Click New Item<br />
- In the Create Launcher window type Name: Run, Command: gnome-run, press OK<br />
- In Main Menu window move the Run command to the top if your panel is at the top of your screen, or to whatever other location you want.<br />
- You can repeat this process for gksu and call it &#8220;Run As&#8221;</p>
]]></content:encoded>
	</item>
</channel>
</rss>
