Re: Realtime patches for 2.6 kernel for audio work

On 5/31/05, Fabio Massimo Di Nitto <fabbione <at> ubuntu.com> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> hi Jeff,
>     moving the thread to kernel-team <at> lists.ubuntu.com where it is
> more appropriate ;)
> 
> Jeff Buchbinder wrote:
> > I had started to create kernel packages with this patch, but I was
> > wondering if any of the official kernel package maintainers would be
> > interested in creating a separate kernel version, considering that the
> > patch applies very cleanly to an Ubuntu-patched kernel.
> 
> The patch is interesting, but i am very concerned about it:
> - - it is a 600KB patch that touches really a lot of code including very delicate parts.
> - - creating a special version means introducing a lot of extra maintainers work
> 
> the simple fact that the patch apply doesn't ensure us the following prerequisite that
> i would consider essentials when modifing that part of the kernel:
> 
> - - we can't provide security and it might in future clash with security fixes coming from upstream
> - - the patch has not been pushed upstream afaik
> - - it is maintained outside, that means if upstream goes away, we will have to drop it
> 
> > I have already packaged (or rebuilt with appropriate dependencies)
> > Ubuntu packages for ardour, hydrogen, et cetera, which are available
> > via sourceforge at:
> > http://sourceforge.net/project/showfiles.php?group_id=15664&package_id=153629&release_id=331016
> >

l7-filter

Hi!

On of goals for breezy is to develop easy to use firewall manager. As we
all know, there is no easy way to filter P2P protocols. We can block
ports, but P2P programs tend to change ports and, in the end, you can't
do anything about them.

So, there is a patch that could help us create easy to use firewall. It
is patch for netfilter and iptables userland tool. It enables us to
create rule like "block everywthing, but allow P2P and ICQ/Jabber
connections to me".

Filtering is done on application layer, so it doesn't care about ports
or applications that are in use. It checks protocol!

If we have kernel/iptables that implement this, writing python program
that will do things like this wouldn't be hard. User would have option
to enable one-by-one (or all) P2P networks.

I did some testing and I run this deployment on couple of places. One
firewall is transparent proxy/filter for over 300 computers. And it
isn't some fancy hardware.

Fabio said patching of kernel is possible if userland tools would be
developed. That's why I'm crossposting this, cause I know there are few
people interested in creating easy to use firewall on ubuntu-devel.

--

-- 
Ante Karamatic|--|ivoks( <at> )grad.hr|--|PGP: D3BDA225
http://master.grad.hr/~ivoks/|--|ICQ: 64631782

Re: l7-filter

On Sun, 2005-06-05 at 11:11 +0200, Ante Karamatić wrote:

> Fabio said patching of kernel is possible if userland tools would be
> developed. That's why I'm crossposting this, cause I know there are few
> people interested in creating easy to use firewall on ubuntu-devel.

Oh, link: http://l7-filter.sf.net

--

-- 
Ante Karamatic|--|ivoks( <at> )grad.hr|--|PGP: D3BDA225
http://master.grad.hr/~ivoks/|--|ICQ: 64631782
May, 15. <herve> we're fixing the universe, it's not an easy duty!

Recompile of kernel

Hi,
I tried to recompile the kernel 2.6.11-1-686 (2.6.11-0.2) with 
iNotify-v0.22 which crash on my laptop with KDE.
I was able to do it but have a problem of name. The kernel package is:
   2.6.11-1-686 (2.6.11-0.3.jec1)
but I would like it to be:
   2.6.11-2-686 (2.6.11-0.3.jec1)
So I can install it alongside of the default one, not remplace it.

How to do it?
Thanks
-jec

ipw2200 issues in 2.6.10

Hi!

I noticed some anoying issues in 2.6.10 kernel in Hoary. Randomly, my
wifi just looses connection to any SSID. After rmmod && modprobe, it
works fully again.

I didn't notice same behaviour with 2.6.12.

--

-- 
Ante Karamatic|--|ivoks( <at> )grad.hr|--|PGP: D3BDA225
http://master.grad.hr/~ivoks/|--|ICQ: 64631782
May, 15. <herve> we're fixing the universe, it's not an easy duty!

Re: ipw2200 issues in 2.6.10

Ante Karamatić wrote:
> Hi!
> 
> I noticed some anoying issues in 2.6.10 kernel in Hoary. Randomly, my
> wifi just looses connection to any SSID. After rmmod && modprobe, it
> works fully again.
> 
> I didn't notice same behaviour with 2.6.12.
> 

There is already a bug reported in bugzilla, and generally bugs should
be reported there, not on this mailing list.

Fabio

--

-- 
no signature file found.

Re: Recompile of kernel

Jean-Eric Cuendet wrote:
> Hi,
> I tried to recompile the kernel 2.6.11-1-686 (2.6.11-0.2) with
> iNotify-v0.22 which crash on my laptop with KDE.
> I was able to do it but have a problem of name. The kernel package is:
>   2.6.11-1-686 (2.6.11-0.3.jec1)
> but I would like it to be:
>   2.6.11-2-686 (2.6.11-0.3.jec1)
> So I can install it alongside of the default one, not remplace it.
> 
> How to do it?
> Thanks
> -jec
> 

Don't use 2.6.11. It's not supported and utterly broken. If you want
inotfy use 2.6.12 from breezy/universe.

Fabio

--

-- 
no signature file found.

[ghall <at> research.dfci.harvard.edu: Re: qlogic]

Passing on an inquiry from a friend...

-- 
 - mdz

From: Giles Hall <ghall <at> research.dfci.harvard.edu>
Subject: Re: qlogic
Date: 2005-06-14 17:19:51 GMT

Matt Zimmerman wrote:

>A wiki page is the best way to make the information available to other
>users.  If the driver is something that we ought to package, contact the
>kernel team for that part.
>  
>
the problem is the driver ships with firmware, but its not like someone 
stole the image from some windows drivers, the company puts out there 
own firmware files.  let me quickly recap what i went through.  i read this:

http://ubuntuforums.org/archive/index.php/t-24022.html

raising this point, which address your thought about whether you ought 
to package the driver or not:

Realtime module and 2.6.12-1-686

Hi,
I tried to compile the realtime LSM module for 2.6.12 and got this error 
while insmod'ing it
  Realtime: is kernel configured with CONFIG_SECURITY_CAPABILITIES=m?

It seems that linux-image-2.6.12-1-686 is not configured with 
CONFIG_SECURITY_CAPABILITIES=m
Is it wanted?
Is it possible to change that?
Thanks.
-jec

Re: Realtime module and 2.6.12-1-686

Jean-Eric Cuendet wrote:
> Hi,
> I tried to compile the realtime LSM module for 2.6.12 and got this error
> while insmod'ing it
>  Realtime: is kernel configured with CONFIG_SECURITY_CAPABILITIES=m?

Yes it is configured as module and loaded on each boot.

> 
> It seems that linux-image-2.6.12-1-686 is not configured with
> CONFIG_SECURITY_CAPABILITIES=m

The other way around

Fabio

--

-- 
no signature file found.