« first day (1327 days earlier)      last day (3610 days later) » 
00:00 - 14:0016:00 - 21:00

12:00 AM
@terdon neither
 
"user" is more mutable: it's the effective UID. so user changes with things like sudo and su. but you still own the process
 
dbus does the work then drops privileges and passes it on.
 
@Braiam But you have both in system-monitor?
 
Hummm
 
@terdon you have Owner cut off
in the popup
 
12:01 AM
@terdon I have for example: gdm-session-worker
user root, owner braiam
 
@strugee No I don't. The only options cut off are Control Group and Priority
 
And some system processes don't have owner, just user
like systemd
 
they were started by root
 
They still have an owner.
 
I mean the outermost systemd. There are other systemds which have
 
12:01 AM
@Braiam Huh, OK. I wonder why I don't. And in that case, it sounds like @strugee nailed it.
 
You just don't have permissions to know who it is.
 
I suspect that Owner is something magical that logind/systemd --user does.
@terdon you on a systemd system?
 
Yes
 
hmm
what distro?
 
Damn, let me check, I was screwing around with that a while ago.
 
12:03 AM
darn gnome manual... do not have any entry about this
 
if login is done with ConsoleKit instead of logind (which it almost certaintly is if the distro didn't ship with systemd)
 
It's not magical - just confusing. It's dbus and the rest of redhat's stuff.
 
Yeah, systemd
@strugee LMDE, Green Debian
 
@mikeserv Ahh, good to know
 
@strugee's right, though.
 
12:04 AM
@terdon ah, Debian. that means that you would have added systemd in on your own. which means that everything will be built for ConsoleKit, not logind. which means that you don't get the Owner stuff.
 
No owner in ps either...
 
But that's how dbus works - it's the central mechanism for getting things done.
 
@terdon it's a relatively new concept, I believe. it's done with cgroups.
 
> ouid OWNER displays the Unix user identifier of the owner of the session of a process.
 
do you have an option for Seat?
 
12:04 AM
@strugee Don't think so. I may just have an older version
 
@terdon Seats are a logind concept too. that's definitely it.
 
@strugee Owning the process doesn't mean much if you aren't the "effective" user, I guess, right?
 
your session isn't using logind, and none of your tools were built with logind support.
 
Precisely - and ps does touch on that.
 
$ ps -eaf|grep [s]ystemd
root      5409     1  0 May22 ?        00:00:00 /lib/systemd/systemd-logind
 
12:05 AM
Check its man page.
 
@Rojo it affects things like resource quotias.
 
@strugee Great, interesting, thx
 
@strugee - you done anything with the systemd machines?
 
@Rojo no problem. you should ask a question on Unix & Linux. people on here eat that crap up.
 
In which stack Exchange site, I should ask questions related to precision recall techniques?
 
12:06 AM
@mikeserv I use Arch as my daily distro, but nothing fancy.
 
Is there any gamers here
 
@Ramesh as in memory?
 
Yeah, I just wish I could talk to systemd., All of that boot shit is cool.
 
there probably isn't one
 
Yeah, @Rojo, turns out @strugee was right, this might be an interesting question.
 
12:07 AM
<3 systemd
 
@strugee, nopes. As in evaluation techniques. It is more related to math. But I do not see any such tag in math stack overflow.
 
I'll post it
Thanks guys
 
@Rojo np
 
@mikeserv I get no hits for logind or ouid in man ps
 
@Rojo - consider changing your nic. Rojo the Red with a longboat over the red on your icon.
 
12:09 AM
@mikeserv Hehe, I'll consider it
Fortunately unlike a viking, I can read
 
:15761656 ouch :)
 
@strugee - I think effective is what you should be looking for...
They learned to read eventually. Then they became lawyers. Just look at Scotland.
 
@mikeserv Huh? What do the Scots have to do with the Vikings?
 
> "Normally the user who launches a program owns the resulting process. However, if an executable file has its SUID bit set, the file's owner owns the resulting process, no matter who launched it.
@Rojo @strugee @terdon ^
 
@Braiam Ah. Nice. What's that from?
 
12:15 AM
@Braiam That's interesting. However
 
at least one of those processes which have different user and owner columns (the mathematica process), doesn't seem to have that flag set, and it doesn't seem to be the child of su or anything of the sort. Just systemd
Disclaimer. I've been on this for 10 days more or less, so don't trust anything I say too much
 
@Rojo mathematica doesn't start child process?
 
@Braiam know what?
 
@Braiam Yes. But, the most parentish of them is "owned" by "rojo", but "used" by root
and when I ls -l the command, it doesn't have the s
 
12:18 AM
@Rojo in what software?
 
@Gilles I didn't understand the question :S
 
@Gilles difference between the process "user" and the process "owner"
 
@Rojo “at least one of those processes which have different user and owner columns” — what program is displaying these column names?
 
@terdon - The scots are largely viking descendants.
 
apparently they are two concepts and people mix them up with the user
 
12:19 AM
@Braiam this isn't a common distinction
 
Well as largely as can be accounted today anyway.
 
@Gilles gnome system monitor
 
Less so than the English, anyway, who, as I think, hail back more to Rome and the Francs.
But, the Francs were pretty Norse, too...
 
It would be appropriate link to this chat in the question I'm posting, right?
 
@mikeserv I am not at all sure about any of that. The Scots are Celts if anything and the English are a weird mix of Celts, the Angles (Germanic tribe) and Normans. Of those, to my knowledge, only the latter are VIking-related.
 
12:22 AM
@Rojo nah, the feeder feeds us
 
@Rojo what version? I don't see “owner” in the list of possible columns on Debian wheezy
 
@Gilles You need to manually add the column
right clicking
on top
@Braiam I meant, in the question, link to the chat
 
@terdon - probably you're right then. I'm no historian.
 
@Gilles Neither do I. @Strugee is suggesting it depends on whether we're on systemd or not and on which version of systemd if I understood correctly.
 
But I thought the scots wound up with more norse than the rest, because when the francs conquered they couldn't drive north?
 
12:23 AM
@Gilles you need to be on a system that ships systemd by default
 
@mikeserv I love it when you say that :P
 
@Gilles @terdon ^
 
@Rojo right-clicking doesn't let me add columns anywhere I can find, but I went to Preferences→Processes and there is no “Owner” field listed there
 
@terdon - It happens.
 
12:24 AM
Done
 
because otherwise nothing will get built with systemd support
 
@terdon - I think you're one of the few that gets that I will.
 
in the "Information fields" @Gilles?
 
@mikeserv I know you will.
Well, you do anyways.
 
@Braiam yes, that list doesn't have “Owner”
 
12:25 AM
@Gilles I'm on gnome 3 and it's the 3.10.2 version
as returned by gnome-system-monitor --version
 
3.12.2 has it
 
I doubt that it would be related to systemd. Maybe to a kernel feature, and more likely to the gnome-system-monitor version (or some library that it uses)
3.4.1 on my machine
 
ps ouid shows you the owner id, but I haven't figured out how to show other values
 
3.8.2.1-2 on mine
 
@terdon - But about that thing - the francs driving north? They were repeatedly pushed back for centuries, right? As I understand it, that's why there is a scotland at all.
 
12:27 AM
@Gilles it's a logind thing
I think
 
@mikeserv I'm not a historian either but as far as I know, the Franks were a Viking tribe but I would guess there were Celts in Scotland before the Vikings.
@strugee But I'm using logind and I don't have it.
 
3.12.something on mine
 
> ouid OWNER displays the Unix user identifier of the owner of the session of a process.
 
@terdon but is System Monitor built with logind support?
I don't know
 
@strugee Dunno
 
12:28 AM
Ah, that's fairly new. Must be some new Linux thing.
 
@terdon - Definitely there were at that, So maybe I got it backwards. I'm gonna look it up.
 
@Gilles Where's that from? man ps?
 
> Library systemd-login offers possibility to display the Unix user identifier of the owner of the session of a process. This information will also be displayed for user processes which are shared between multiple login sessions of the same user, where sd_session will be blank.
 
maybe it's just a 3.12 thing.
 
12:28 AM
strugee was right
 
\o/
 
@Braiam Nice find. Also:
 
@strugee no, nothing to do with Gnome. It's a recent Linux feature. In Ubuntu, it appeared in 14.04.
 
> To maintain compatibility with non-systemd systems, procps must be configured with --with-systemd option to enable this option.
So presumably mine wasn't.
 
grrr!
 
12:29 AM
nailed it
 
@strugee Doffs hat
 
:P
 
Hehe, I wouldn't have guessed it was such a nice question. It could just as easily have been basic boring stuff
 
@terdon why thank you good sir!
 
:)
@Rojo I thought it wasn't. I was assuming the stupid user was doing something stupid :)
 
12:34 AM
TIY: when you don't know what a entry on the manpage means, google the entire entry in quotes, you will find the source
 
The owner is what sd_pid_get_owner_uid returns
 
@terdon - this seems to support what I said at first. Dunno how accurate it is, but scottish-history.com sounds legit enough.
 
@mikeserv Interesting, thanks. I associated them more with the North of England than with Scotland itself, but that's probably 'cause I used to live in York for a few years and they're obsessed with their Viking heritage.
 
Apparently York was originally a Norse kingdom.
 
Yeah
 
12:41 AM
From wikipedia - In AD 867 the Vikings seized the southern half of Northumbria, forming the Kingdom of York;[49
I didn't know any of that with any certainty when I said it before, it was more assumptions based on the geography.
But after you said your thing I began to doubt my assumptions also because of geography - the Scottish coastlands are anything but boat friendly.
@terdon - if you haven't read it, you'd probably like Jonathan Strange and Mr. Norrell - especially having lived in York.
The Raven King - a sort of Odin, I guess - is a mythological character that comes from there.
 
@mikeserv Ah yes, I have and I did :)
 
I really like the contrast between the dark, broodish history of magic and the boorish Elizabethan sitting rooms.
 
I should read it again. I remember I enjoyed it and the general feel of the book but not the details.
 
That book was like Tolkien and Dostoevsky had a love-child.
Just as long, too.
 
Hah, true.
 
12:54 AM
When I was a private in the army I lent a copy of the Brothers Karamazov to my then captain.
5 years later - as I was outprocessing - he caught me during my final phase.
He handed me the book. Said he never got a chance to read it.
 
1:36 AM
Sudo can be used to run something with lower privileges, right?
Humm, looks like it
 
@mikeserv, wow you are an army man?
 
I was.
@Ramesh.
 
@mikeserv, nice :)
 
It was the best thing I ever did.
 
@mikeserv, which country?
 
1:42 AM
@Rojo sudo -u user command
if you write "Sudo" it will fail
 
US. Probably why I'm a little weird. In the service if someone noticed something wrong with you they'd say - "Hey, fix your shit..." and they'd done you a favor. At least they told you before it was the sergeant major that noticed.
 
@mikeserv, if it helps I don't find you weird :) You know your stuffs actually.
 
@Braiam Great thx. I was thinking that if a program doesn't need access to my files, perhaps it makes sense to create some lame new user and run those programs as him
 
Actually, I only learned most of it in the last few months answering questions here. I learn quickly - but I've got a lot more to learn. I'm just not imaginative enough to come up with my own problems.
 
@Rojo I think you can use nobody if the process doesn't need to read any file
 
1:45 AM
I don't answer unselfishly - to the contrary.
 
@Braiam Wow, there actually is a user nobody
Great! thanks
 
@Rojo depends on your threat model
generally I'd say that's overkill
 
@mikeserv, I can see from your answers :) Each of your answer is infact detailed and descriptive :)
 
Yeah - nobody should be the owner of your network services at least.
 
@strugee "threat"?
 
1:46 AM
@strugee Well, I am actually overkilling on purpose. It's just a desktop laptop, but I'm looking for excuses to learn all this user and privileges thing
 
Isn't nobody the root user?
 
with a knife?
 
so I allow myself to be paranoid
 
@Ramesh no
 
that being said, sandboxing is something that should be in a desktop. which is why the systemd guys are working on application sandboxing
 
1:46 AM
nobody is nobody - Depending on whether or not you have some higher control going on like systemd.
 
but a whole different user is overkill, unless you're running Skype
@Braiam :)
 
Say the threat model is "I am not 100% confindent on the program I just installed"
 
For instance, if you run... dang.. what's that tiny ssh server?
dropbear.
 
@Rojo just don't install it ;)
 
It should drop privileges and assume the owner nobody after init.
 
1:47 AM
@Braiam Oh, but life is dangerous
 
or use a chrooted environment without binded partition
 
!!!^^^
 
or a lxc container
 
and I choose to live it. My threshold is 95% safe :P
 
Oh ok. So superuser is the root user with uid 0 and nobody is an user with uid highest?
 
1:48 AM
@Rojo really, the only program I can think of like that is Skype
 
Well, @strugee, what about dropbear?
 
freaking Skype. reads your ~/.mozilla on startup. among other things.
 
I just want to try, for a little while, to give the programs little extra room than what they need
 
That's the one that pops into my mind first and foremost.
 
The constant errors will make me learn about how all works
The constant extra typing will make me learn commands
 
1:49 AM
@Rojo - You can give them a lot more if you do as @Braiam suggested and give them a container.
 
Until it becomes annoying and I learn scripting
 
@mikeserv it's open source, yes? I don't really see a problem with Dropbear... it's not like it's potentially malware
and besides, no one actually runs Dropbear anywhere except an initrd. in which case it's gonna have to run as root anyways.
 
@Braiam I'll have to google that :)
 
No, it's not, but it's a hole. It should usually drop privileges and assume nobody - if it's not otherwise controlled. Right - which is why it should drop to nobody.
 
@strugee Really?
GRR
 
1:50 AM
@mikeserv who are you talking to?
@Rojo RIGHT?
which is why I run Skype as a separate user. there's some D-Bus magic that goes on to hook it up to my user's screen.
 
Who do you think you are, Skype?
 
@strugee - you. And other stuff - like nc or ... the other one.
 
@strugee How did you realise that it read that file? You actively decided to monitor it somehow?
 
@strugee - If you run a service like that and you don't otherwise control it - such as with systemd - you want to safe it. The best way is to drop all privileges and have it assume the owner nobody.
 
1:52 AM
@Rojo I didn't personally, but others have. probably using strace or somesuch.
@mikeserv yes, but in an initrd, there's no such user as nobody...
 
That depends on the initrd.
It can have whatever you want it to have.
socat was the other one I was thinking of.
The initialramdisk is just that - a ramdisk. Put whatever you want in it.
 
who the hell includes the users database in an initial ramdisk?
 
It's a single file - well, maybe two.
 
I repeat: who the hell does that?
 
And anyone that sets one up as a high-falutin' bootloader would.
Why wouldn't you? In fact - why would you ever really not? You can just mount whatever you want right into initramfs - you never have to switchroot if you don't want to.
 
1:58 AM
@mikeserv never switchrooting sounds bloody awful
1
A: Process owner vs process user (Gnome's system monitor)

slmThe "Owner" column has to do with the username that own's the session that this particular process is a member of. excerpt - The Linux kernel 10.3 Sessions Every process group is in a unique session. (When the process is created, it becomes a member of the session of its parent.) By con...

damn, @slm beat me to it
 
Dude's good.
Well, why? It makes more sense on headless systems. You could setup a serial terminal of course, or you might just include an ssh server in the bootloader.
I did somethng similar a long time ago when I put a little webserver on an old xbox - everything executable was in initramfs.
 
I'm sure GRUB has an SSH module somewhere
 
It does now.
 
GRUB has everything up to and including the kitchen sink
 
But grub's a whole different beast.
I know - I think that if the hurd guys just incorporated a lot of grub code they'd be done.
But you don't need to use grub for anything it does - you can just use the linux kernel. It makes for a perfectly good bootloader.
There's this one thing I do sometimes with btrfs and squash.
It's kinda handy.
You can set a btrfs partition to be a seed - so when you add another disk to it it will COW all changes to the second disk.
So a squashed btrfs seed works just as well as an uncompressed one - and all changes are recorded elsewhere.
 
2:07 AM
@mikeserv see: coreboot
 
It's really handy for live discs - if you're going to use btrfs on the target system - because it will perform the installation as merely a function of the filesystem.
I know - I wish.
I can't get it on either of my machines, though I spent many weeks trying.
 
@mikeserv I haven't tried yet. it's on my list
 
Good luck - it's not easy.
Someone forwarded this to the coreboot mailing list - but I sent it to the UEFI kernel mailing list.
It was research on that front that led me to clover - which is why I once recommended it to you as a possible path to discover what was up with your video card.
 
fuck Apple graphics.
 
I can empathize.
 
2:12 AM
they suck so very much.
 
And they haven't got much else going for them either, not counting NeXT.
I mean, not dollar for dollar anyway.
Well, aside from tech support, I guess. Their support system ROCKS. Right up until you want to do something on your own, that is.
So whatever happened with that anyway?
 
@mikeserv yep...
 
Yep?
 
they haven't got much else going for them
(sometimes) not one to be easily beaten, I've pitted myself against our local rep champion...
I feel like I may have misrepresented some of the subtle details, though, so let me know if I got anything wrong.
or just edit it yourself.
which reminds me: @slm wink wink nudge nudge
guilt ALL OF THE REGULARS
into writing for the blog!
 
2:29 AM
@strugee - maybe mention /proc/$pid/cgroup
 
@Braiam @derobert @casey @terdon @Patrick ^
 
Also: /proc/$pid/sessionid
 
thanks, edited
 
A link you might use:
The top has a little to say about .../cgroup
 
eh. that's exceeded my motivation levels today.
stress from finals week is really wearing me down.
feel free to edit it in, though.
 
2:42 AM
Mine too - that's why it's in here and not there.
But @slm - feel free.
 
haha
 
@strugee Great
So many things to try out. I'm overloaded
 
@Rojo so it is with GNU/Linux :)
it took me years (~5-6) to get where I am now, but I didn't go all that fast.
you can probably learn much quicker.
I admire your zeal
 
@strugee :) A community makes a huge difference in the "zeal"
 
@Rojo indeed!
about 3-4 of my time was spent on OS X, where I barely learned anything.
it's not exactly the ideal for learning. you either need a real GNU/Linux or a real BSD.
the tools that OS X gives you is a big part of it (they're less amendable to learning this kind of stuff) but the biggest part is the culture
GNU/Linux, the culture is to be interested in the tech and learn more and share. OS X, none of that.
 
2:51 AM
@strugee Right
 
:)
 
@strugee I come from Windows, and learning some Linux has been on my to-do list for long.
 
also, no matter what any of the regulars here will tell you, Emacs is far superior to vim.
 
And I tried to get started once
but
 
@Rojo ah, Windows. you only realize how dismal it is once you try something better.
 
2:52 AM
the lack of a community or a friend that used it
and
the fact that I used 349572394 different softwares back then that didn't have a version, plus the fact that I tried it in a VM
and I knew less about computers overall
etc etc
made my zeal disappear way before I felt comfortable in the new environment
But now it's totally different
in all ways
and, in a few days, my most "surprising" impression is
that I thought of Linux as something "more difficult", but it actually feels way easier
than Windows
if you care a little about having control
 
@Rojo it's because there's source. everything is transparent and, even more than that, everyone is interested in the transparency.
 
Waay easier
 
that's something that you can't replicate in a proprietary system, no matter how much money you have.
this is why a ton of people are interested and knowledgeable about the Linux kernel
but almost no one cares about the NT kernel
 
@strugee Right :)
and I like it
 
<3
 
2:57 AM
Welcome me to the club
Hope it doesn't take too long before I can answer a question here and there and give back
 
welcome to the club!
@Rojo hopefully :P
 
Star
So that everyone sees I'm welcome :D
@strugee Where are you from?
 
but don't forget that even if you only ask questions, you're still contributing to the community.
@Rojo Seattle
I'm not going to get any more specific than that because, you know. internet safety.
anyway, not to cut this conversation off, but I must away to walk my dog.
 
Go goo
See you around
 
 
1 hour later…
4:00 AM
can I ask a small question about FreeNAS here?
 
@Malachi don't ask to ask your question. that's useless for those of us who come back later.
just ask.
unless your question should go on Unix & Linux.
in which case ask there
 
@strugee I have created the outline for a blog entry, but it will take me some time to get it all put together. When it gets anywhere near ready I'll bring it up for peer review.
 
4:17 AM
@Patrick you're awesome!
keep us posted
 
@strugee I will ask it tomorrow perhaps. I need help setting up a share on FreeNAS, I can access the share from my windows machine or my Ubuntu machine
it tells me that it isn't accepting the connection from my Windows 8.1 machine
 
 
2 hours later…
6:34 AM
Can anyone help me
 
 
4 hours later…
10:53 AM
Can we please reopenhttp://unix.stackexchange.com/questions/132194/how-to-set-umask-so-that-di‌​rectories-to-be-r-x-and-files-to-be which @slm closed by mistake
 
slm
11:12 AM
@StephaneChazelas - I just reopened it
 
12:09 PM
@slm abusing your power, huh? :P
 
slm
Yeah you know me
 
12:49 PM
I think I know why I couldn't access that file share on my FreeNAS server, I think that disk might be bad in a couple of spots.
 
anyone knows about inetd/xinetd? askubuntu.com/q/330304/169736
 
slm
1:12 PM
@Braiam - showed an alternative using Xnvc + xinetd. What you showed looks OK to me. If I have time I'll try it out.
 
yeah, my motivation was the last comment in my answer about a guy that didn't work for him
 
slm
1:28 PM
@Braiam - did you try the tightvncserver as a xinetd service?
 
1:42 PM
no, I've never been in the need
 
00:00 - 14:0016:00 - 21:00

« first day (1327 days earlier)      last day (3610 days later) »