Linux OS - info, how-to, pitanja, novosti, savjeti, problemi...

[tomek@vz]

Nadam se da ne radis ALT-F2 pa sudo komanda...

...visudo...(/etc/sudoers nikad ali NIKADA ne editiraj rucno).





Po defaultu si vjerojatno u grupi koja ima pristup. Ak ne, brijem da su skemijali nekaj u kombinaciji sa seahorse (Passwords and Keys u GUI izdanju) da nakon logina te il ne pita il samo ponekad pita....Fedora 37 Gnome vrtim vec par dana i nisam naletio na taj problem.

P.S.- naravno mozda je i BUG u BETA verziji OS-a ...no sumnjam....

[No123]

Stisnem Ctrl+Alt+t, otvori se terminal pa onda npr. sudo dnf upgrade i ne pita lozinku.

[tomek@vz]

Autor No123

Stisnem Ctrl+Alt+t, otvori se terminal pa onda npr. sudo dnf upgrade i ne pita lozinku.

Pogledaj ovo gore kaj sam napisao (visudo) + lupi "whoami" kad ti se terminal otvori...pa lupi tu info za sve.

[No123]

Fala ti ka bratu :-)

[No123]

:~> visudo
visudo: /etc/sudoers: Permission denied

i

::~> whoami
moje ime

[tomek@vz]

Autor No123

:~> visudo
visudo: /etc/sudoers: Permission denied

i

::~> whoami
moje ime

visudo naravno izvodis kao root...dakle sudo su najprije pa onda visudo....

[No123]

visudo:

# Sudoers allows particular users to run various commands as
## the root user, without needing the root password.
##
## Examples are provided at the bottom of the file for collections
## of related commands, which can then be delegated out to particular
## users or groups.
## 
## This file must be edited with the 'visudo' command.

## Host Aliases
## Sudoers allows particular users to run various commands as
## the root user, without needing the root password.
##
## Examples are provided at the bottom of the file for collections
## of related commands, which can then be delegated out to particular
## users or groups.
## 
## This file must be edited with the 'visudo' command.

## Host Aliases
## Groups of machines. You may prefer to use hostnames (perhaps using 
## wildcards for entire domains) or IP addresses instead.
# Host_Alias     FILESERVERS = fs1, fs2
# Host_Alias     MAILSERVERS = smtp, smtp2

## User Aliases
## These aren't often necessary, as you can use regular groups
## (ie, from files, LDAP, NIS, etc) in this file - just use %groupname 
## rather than USERALIAS
# User_Alias ADMINS = jsmith, mikem
## Groups of machines. You may prefer to use hostnames (perhaps using 
## wildcards for entire domains) or IP addresses instead.
# Host_Alias     FILESERVERS = fs1, fs2
# Host_Alias     MAILSERVERS = smtp, smtp2

## User Aliases
## These aren't often necessary, as you can use regular groups
## (ie, from files, LDAP, NIS, etc) in this file - just use %groupname 
## rather than USERALIAS
# User_Alias ADMINS = jsmith, mikem
## Command Aliases
## These are groups of related commands...
## Networking
# Cmnd_Alias NETWORKING = /sbin/route, /sbin/ifconfig, /bin/ping, /sbin/dhclien>

## Installation and management of software
# Cmnd_Alias SOFTWARE = /bin/rpm, /usr/bin/up2date, /usr/bin/yum

## Services
# Cmnd_Alias SERVICES = /sbin/service, /sbin/chkconfig, /usr/bin/systemctl star>

## Updating the locate database
# Cmnd_Alias LOCATE = /usr/bin/updatedb

## Storage
# Cmnd_Alias STORAGE = /sbin/fdisk, /sbin/sfdisk, /sbin/parted, /sbin/partprobe>

## Delegating permissions
# Cmnd_Alias DELEGATING = /usr/sbin/visudo, /bin/chown, /bin/chmod, /bin/chgrp 

## Processes
# Cmnd_Alias PROCESSES = /bin/nice, /bin/kill, /usr/bin/kill, /usr/bin/killall

## Drivers
# Cmnd_Alias DRIVERS = /sbin/modprobe

# Defaults specification

#
# Refuse to run if unable to disable echo on the tty.
#
Defaults   !visiblepw

#
# Preserving HOME has security implications since many programs
# use it when searching for configuration files. Note that HOME
# is already set when the the env_reset option is enabled, so
# this option is only effective for configurations where either
# env_reset is disabled or HOME is present in the env_keep list.
#
Defaults    always_set_home

Defaults    match_group_by_gid

# Prior to version 1.8.15, groups listed in sudoers that were not
# found in the system group database were passed to the group
# plugin, if any. Starting with 1.8.15, only groups of the form
# %:group are resolved via the group plugin by default.
# We enable always_query_group_plugin to restore old behavior.
# Disable this option for new behavior.
Defaults    always_query_group_plugin

Defaults    env_reset
Defaults    env_keep =  "COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS"
Defaults    env_keep += "MAIL QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE"
Defaults    env_keep += "LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGE>
Defaults    env_keep += "LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE"
Defaults    env_keep += "LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORIT>

#
# Adding HOME to env_keep may enable a user to run unrestricted
# commands via sudo.
#
# Defaults   env_keep += "HOME"

Defaults    secure_path = /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sb>

## Next comes the main part: which users can run what software on 
## which machines (the sudoers file can be shared between multiple
## systems).
## Syntax:
##
##      user    MACHINE=COMMANDS
##
## The COMMANDS section may have other options added to it.
##
## Allow root to run any commands anywhere 
root    ALL=(ALL)       ALL

## Allows members of the 'sys' group to run networking, software, 
## service management apps and more.
# %sys ALL = NETWORKING, SOFTWARE, SERVICES, STORAGE, DELEGATING, PROCESSES, LO>

## Allows people in group wheel to run all commands

%wheel  ALL=(ALL)       ALL

## Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

## Allows members of the users group to mount and unmount the 
## cdrom as root
# %users  ALL=/sbin/mount /mnt/cdrom, /sbin/umount /mnt/cdrom

## Allows members of the users group to shutdown this system
# %users  localhost=/sbin/shutdown -h now

## Read drop-in files from /etc/sudoers.d (the # here does not mean a comment)
#includedir /etc/sudoers.d

[tomek@vz]

Ovaj dio je bitan:


## Allows people in group wheel to run all commands

%wheel ALL=(ALL) ALL <<< dopustenje da izvodis kao sudo komande - nakon upisa lozinke (uneses jednom i neko vrijeme ne pita)

## Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL <<< dopustenje izvodenja komandi kroz sudo elevaciju bez upita za lozinku (onemoguceno)

[No123]

Tako mi je nekad bilo, prvi put pita lozinku nakon sudo, a onda neko vrijeme ne pita, a sad me ne pita nikako.

[No123]

Jučer se pojavila finalna verzija Fedora 37. Upgrade s bete radi.

[Libertus]

Da li netko zna kako na Synology preko CLI pronaći razlog zašto se ne želi openvpn client spojiti na server?
U zadnje vrijeme (zadnjih mjesec/dva) na DSM 7.1 mi pukne openVPN veza (Synology je client, koji se spaja na openVPN server) i ne želi se spojiti ponovno.
Sve što probam ne radi, uključujući i ručno GUI i CLI spajanje.

root@DSNAS216:/usr/syno/etc/synovpnclient# /usr/syno/bin/synovpnc reconnect --protocol=openvpn --name=DSVPN
get arguemnt protocol: openvpn
get arguemnt name: DSVPN
Reconnect [DSVPN] ... failed
Retry(1)...failed

I to je to. Failed, ali nemam pojma zašto.
Ako napravim restart cijelog NAS-a, spoji se od prve, i tako sve dok ponovno ne zaglavi.

Zna li netko kako saznati što ga pati, gdje pukne.

[c-shadow]

Autor tomek@vz

TP-Link vecinom dobro radi, najcesce out-of-the-box. Najcesce ti vec na kutiji lupaju tuxa

Realtek strikes again...

Evo onaj prethodni vikend sam se malo podružio s tp-link T4U, hardverska revizija v3.2

Bus 002 Device 011: ID 2357:0115 TP-Link

https://www.tp-link.com/us/home-netw...er/archer-t4u/

TL;DR
Ovaj post koji sam našao na redditu lijepo opisuje situaciju:
Why has RTL88x2BU not made it into mainline?
https://www.reddit.com/r/linux/comme...into_mainline/
"Because the driver is incredibly broken and no one is interested in fixing it."

Nema u kernelu drivera za tu reviziju iako je od 2018-19 vani, testirano na jubuntu kernel v 5.15, 5.19 i 6.0. Također na live gedori zadnjoj.
Ima nekoliko github repozitorija koji drže driver koji je isporučio tp-link, kompilira se bez problema.
Radi tak-tak, moglo bi i bolje. Pljucka čudne poruke u dmesg, po defaultu brzina je manja, radi kao da je USB/480Mbps. Može se modul učitati s posebnim parametrom, onda radi na punoj brzini, ali samo ako je uštekan u USB3 port. Ako se tako ušteka na USB2, onda ne radi, nekakav loop kod učitavanja modula.Postoji navodno eksperimentalni driver "rtw88-usb" kojeg nisam uspio nabrzinu kompilirati.
Nakon druženja od par sati sam odjebao to smetje i iskoristio taj stick na jednom windows 10 računalu. Tamo radi OOB, ali opet na manjoj brzini Nakon instalacije drivera s tp-link stranice, sada radi pod windowsima uredno, brzine pristojne.
Godinama sam izbjegavao wlan usb stickove na linuxu, vidim barem na ovom slučaju da se i dalje ništa nije promijenilo, support od proizvođača većinom loš i jedan veliki PITA za složiti
Tih par sati što sam se igrao s time, jednom kad se driver učita radi pristojno, ali jebo drivere gdje moraš paziti u koji USB port uštekaš tu kontrapciju

[tomek@vz]

Autor c-shadow

Realtek strikes again...

Evo onaj prethodni vikend sam se malo podružio s tp-link T4U, hardverska revizija v3.2

Bus 002 Device 011: ID 2357:0115 TP-Link

https://www.tp-link.com/us/home-netw...er/archer-t4u/

TL;DR
Ovaj post koji sam našao na redditu lijepo opisuje situaciju:
Why has RTL88x2BU not made it into mainline?
https://www.reddit.com/r/linux/comme...into_mainline/
"Because the driver is incredibly broken and no one is interested in fixing it."

Nema u kernelu drivera za tu reviziju iako je od 2018-19 vani, testirano na jubuntu kernel v 5.15, 5.19 i 6.0. Također na live gedori zadnjoj.
Ima nekoliko github repozitorija koji drže driver koji je isporučio tp-link, kompilira se bez problema.
Radi tak-tak, moglo bi i bolje. Pljucka čudne poruke u dmesg, po defaultu brzina je manja, radi kao da je USB/480Mbps. Može se modul učitati s posebnim parametrom, onda radi na punoj brzini, ali samo ako je uštekan u USB3 port. Ako se tako ušteka na USB2, onda ne radi, nekakav loop kod učitavanja modula.Postoji navodno eksperimentalni driver "rtw88-usb" kojeg nisam uspio nabrzinu kompilirati.
Nakon druženja od par sati sam odjebao to smetje i iskoristio taj stick na jednom windows 10 računalu. Tamo radi OOB, ali opet na manjoj brzini Nakon instalacije drivera s tp-link stranice, sada radi pod windowsima uredno, brzine pristojne.
Godinama sam izbjegavao wlan usb stickove na linuxu, vidim barem na ovom slučaju da se i dalje ništa nije promijenilo, support od proizvođača većinom loš i jedan veliki PITA za složiti
Tih par sati što sam se igrao s time, jednom kad se driver učita radi pristojno, ali jebo drivere gdje moraš paziti u koji USB port uštekaš tu kontrapciju

Nemas srece Pada mi na pamet nesto sa Atheros cipovima ali s obzirom kak sam fulo motku gore sa "TP-Link just works"...jebiga googlaj , drugo nam ocito ne gine cim se "novoj tehnologiji" radi.