Enable Right Click with Two Fingers at X240

slackware-logoOS: Slackware64 14.2
Device: Thinkpad x240
After testing many tutorials, found at Archlinux Wiki

# synclient TapButton2=3

Source:
[0] https://wiki.archlinux.org/index.php/Lenovo_ThinkPad_X240
[1] https://wiki.archlinux.org/index.php/Touchpad_Synaptics

Estu~

Advertisements

CVE-2014-6271 Bash Vulnerability dan Bagaimana Menanganinya ?

Weevil on a computer printout

Pagi ini dijapri Senior System Administrator buat nutup celah CVE-2013-6271 pada bash (bourneshell). Mari baca-baca dulu.

Stephane Chazelas discovered a vulnerability in bash, related to how
environment variables are processed: trailing code in function
definitions was executed, independent of the variable name.

In many common configurations, this vulnerability is exploitable over
the network.

Chet Ramey, the GNU bash upstream maintainer, will soon release
official upstream patches. (sumber)

Bug ini memungkinkan kode penyerang akan dieksekusi segera setelah shell dipanggil, membiarkan pintu terbuka untuk berbagai macam serangan. Bug ini rentan terhadap beberapa servis diantaranya HTTPD (apache), dhcpclient, cups (sumber).

Bagaimana membuktikan bahwa system memiliki celah ini?

Buka terminal dan ketikkan perintah berikut:

env x='() { :;}; echo vulnerable' bash -c 'echo hello'

Jika sistem tidak rentan(= aman), maka baris berikut ini akan ditampilkan:

bash: warning: x: ignoring function definition attempt
bash: error importing function definition for `x'
hello

Jika sistem rentan(= tidak aman), maka akan menampilkan:

vulnerable
hell

Solusi = Update bash!!

Debian Based

Lakukan update repo dan update bash. Pastikan sumber repo benar:

# vim /etc/apt/sources.list
deb http://kartolo.sby.datautama.net.id/debian wheezy main contrib non-free
deb http://kartolo.sby.datautama.net.id/debian wheezy-updates main contrib non-free
deb http://kartolo.sby.datautama.net.id/debian-security wheezy/updates main contrib non-free

# apt-get update && apt-get install bash

Slackware14.1

Ketika saya cek tadi pagi, versi terbaru dari bash shell tidak terdapat pada repo 14.1.
Kemudian saya mengganti mirror menuju Slackware14.1 Current,

# vim /etc/slackpkg/mirror | ambil mirror.slackware.com
# slackpkg update && slackpkg upgrade bash

Kelar. Biar tambah yakin, uji coba perintah di awal tadi untuk membuktikan sistem sudah aman atau belum. Semoga membantu.

Sumber bacaan:
[0] http://seclists.org/oss-sec/2014/q3/650
[1] http://askubuntu.com/questions/528101/what-is-the-cve-2014-6271-bash-vulnerability-and-how-do-i-fix-it
[2] http://apple.stackexchange.com/questions/146849/how-do-i-recompile-bash-to-avoid-the-remote-exploit-cve-2014-6271/146851
[3] http://www.theverge.com/2014/9/24/6840697/worse-than-heartbleed-todays-bash-bug-could-be-breaking-security-for

Regard
Tuan Pembual

20 years of slackware ( as of 18/07/2013 ;) )

Slacker Boy

Yeah I know it is a bit late, it was 20th birthday of Slackware on this 18th. Got to know about this while reading through linxquestions.org.

Slackware was the first Linux distribution that I installed in my old desktop and since then I am in deeply love with it. I learned a lot by using it, which was always thrilling.

This was Patrick Volkerding’s post about first release of Slackware :

Path: gmd.de!xlink.net!howland.reston.ans.net!usenet.ins.cwru.edu!
cleveland.Freenet.Edu!bf703
From: bf703@cleveland.Freenet.Edu (Patrick J. Volkerding)
Newsgroups: comp.os.linux
Subject: Want an SLS like .99pl11A system?
Date: 11 Jul 1993 17:53:15 GMT
Organization: Case Western Reserve University, Cleveland, OH (USA)
Lines: 41
Message-ID: <21pk2b$h45@usenet.INS.CWRU.Edu>
Reply-To: bf703@cleveland.Freenet.Edu (Patrick J. Volkerding)
NNTP-Posting-Host: hela.ins.cwru.edu

Well, that's good, because I put one together. It does not yet have
XFree-86 1.3, but give me about 2 days and it will. This is not like the MCC release…

View original post 258 more words

Repair Lilo Slackware Current

#sedikit mencatat, sebelum lupa,
Repair Lilo ternyata lebih sederhana dari pada repair grub di Ubuntu :-/

1. Boot dari CD Slackware, hingga masuk ke menu konsole sebagai root
2. Cek lokasi partisi slackware, kasus saya lokasi di /dev/sda6
# fdisk -l
3. Mount partisi
# mount /dev/sda6 /mnt
4. Lakukan konfigurasi Lilo
# lilo -r /mnt
5. Selesai dan reboot 😀

Regard
Tuan Pembual

ALSACTL Error After Upgrade Slackware14 Current

CB Tahun Baruan
Gambar tidak ada hubungannya dengan isi oprekan
*TS e anak cebe

Oprekan baru siang ini masih dibutuhkan. Oprekan pertama ditahun 2013.
Setelah kemaren sukses upgrade ke slackware64 current, kemudian kelar ngoprek driver ati.

Kali ini bermasalah pada alsa. Jadinya amarok ga mau jalan, andacious masih jalan. MPlayer ga bisa muter film, doh. Saya coba reboot kemudian pas booting ada notifikasi error seperti ini :

/usr/sbin/alsactl: set_control:1328: failed to obtain info for control #17 (No such file or directory)
/usr/sbin/alsactl: set_control:1328: failed to obtain info for control #18 (No such file or directory)
/usr/sbin/alsactl: set_control:1328: failed to obtain info for control #22 (No such file or directory)

:0 *opo kui.

Hasil nyari-nyari menemukan pencerahan. Caranya cukup jalankan peritah ini :

# rm /var/lib/alsa/asound.state
# reboot

sumber bacaan :
[0] http://www.linuxquestions.org/questions/slackware-14/error-after-upgrade-current-868335/

Regard
Tuan Pembual

Erroring Install Driver ATI Catalyst in Slackware64 14 Current

— I am tried write in english, so any suggestion are welcome.

I ‘m get trouble when i want install ati driver. My hardware ATI Radeon HD 5770.
My steps.

1. Install slackware64
2. Upgarde to current
3. Download latest ati driver.
4. Install driver

First, i get error. Version.h not found. I get clue from
https://groups.google.com/forum/?fromgroups=#!topic/id-slackware/hDuotShbp0k

Just make symlink, here code :
# ln -s /lib/modules/3.7.1/build/include/generated/uapi/linux/version.h /lib/modules/3.7.1/build/include/linux/version.h

Second,  when i try insall driver ati again, i get another error.

Patch ATI Driver

Then i push this promblem to id-slackware in google group.

The answer :

1. Download this path (fglrx-3.7.patch), then copy file to/lib/modules/fglrx/build_mod/

2. Change directory
# cd /lib/modules/fglrx/build_mod/

3. Do Patching the fglrx source:
# patch -p0 < fglrx-3.7.patch

4. Do compile the fglrx modules:
# ./make.sh
# cd ..
# ./make_install.sh

5. Reboot.

Thanks all

Source :
[0] https://groups.google.com/forum/?fromgroups=#!topic/id-slackware/njis8rUfLWo
[1] http://henryhermawan.blogspot.com/2012/12/amd-catalyst-patch-for-kernel-37x.html

Regard
Tuan Pembual

#Slackware Gimp 2.8 Enable Single-Window Mode

Kelar build gimp 2.8 beserta dependesinya.
*karena di mesin terpasang gimp 2.6

saya memakai slackbuild dari SlackHacks di
http://slackblogs.blogspot.com/2012/05/unofficial-gimp-280-package-for.html

Namun di mesin saya, saat build gtk+2 ada kendala, dan saya tidak bisa menyelesaikannya. (ra donk)

okelah, nyari gtk+2 yang siap pasang aja,
Nemu dari http://www.bebez.org/mslackfiles/gimp-2.8/

Cuma unduh gtk+2 nya saja, kemudian lanjut build Gimp nya.
Dan pasang,

Kendala nya disini,
Ketika dijalankan koq g satu jendela yah,
Ternyata menunya belum dicentang,
caranya dari menu,

Windows -> Single-Window Mode

Kelar, Alhamdulillah

Regard
Tuan Pembual