Root Access

Bob

6:01 AM

@nhinkle I quite literally can't flag them fast enough :P

They disappear by the time the page is fully loaded.

Hm... maybe I should raise that on meta, actually.

nhinkle

No need, I'm already talking to SE Devs about it.

They're disappearing fast thanks to everybody's quick action on flagging them, and me hitting refresh a lot.

6 spam flags = autodelete

Bob

For the last some months, there's always some resource or other at the end of a page load that takes 10+ seconds to load. And no JS-links work until it loads.

@nhinkle I was referring to raising the page load issue on meta.

nhinkle

Oh, nvm

Bob

You already mentioned the blacklist above :P

nhinkle

Unfortunately they seem to be working around the blacklist now. So keep on flagging while we work on a better solution.

Hopefully they eventually realize their spam won't last more than a minute and they give up...

do_os

6:04 AM

I'm trying to install ubuntu on a flash drive and be able to boot from it. Using 2 usb flash drives(1 with ubuntu install image, 1 empty) I did finish the installation. Even getting the laptop to boot the install flash drive was a lot of trouble because it needed BOOTIA32.exe which was not included in ubuntu install image by default. I just found one from the internet and manually copy/pasted it into the install flash drive which made it bootable.
Anyway, with the 2nd flash drive installed I expected it to work but it wouldn't. Even going to UEFI settings and giving top boot priority didn't…

Psycogeek

once again make me type in the captcha, let the robots have their fun :-)

Bob

@do_os Ah, flash drives and other removable storage are a special case.

do_os

From what I've learned from you, the step between the firmware and bootloader is failing.

Bob

If they're formatted with an ESP, then that will be used.

But there's actually a different boot mode for removable media.

Since removable media typically doesn't have a partition structure (no MBR, no GPT), you basically treat the entire block device as a giant ESP.

> UEFI firmware supports booting from removable storage devices such as USB flash drives. For that purpose, a removable device needs to be formatted with a FAT12, FAT16 or FAT32 file system, while a boot loader needs to be stored according to the standard ESP file hierarchy, or by providing a complete path of a boot loader to the system's boot manager.

The other option is to create a partition table (GPT preferred) and create a proper ESP. Then you treat it like an internal drive.

do_os

@Bob but ubuntu should be installed in ext4?! Then I should go with creating GPT option?

Bob

6:10 AM

@do_os Also, you need to make sure the bit-ness matches.

If your motherboard has a 32-bit EFI implementation, then you need a 32-bit bootloader.

Same with 64-bit.

@do_os Your options are either installing Ubuntu on fat32, or creating a GPT table. Well, AFAIK.

do_os

@Bob about bit-ness, whether the EFI and bootloader is 32bit, can I still use 64bit OS?

Bob

@do_os Ah... that gets iffy.

You can with Linux.

Windows (as of 8.1) doesn't support it yet.

do_os

@Bob on second thought.. maybe this is why windows 8.1 32bit version was installed by default even though the system setting said 64bit processor

Bob

@do_os Yep.

I've actually answered this before.

@do_os More accurately, they probably picked 32-bit because of RAM constraints (I'm guessing 2 GB system?). Then they picked firmware to match. But that means you can't easily install 64-bit.

The weakness of UEFI is that the Windows bootloader doesn't support switching yet. But that's more an issue on Windows' side, not some inherent problem with UEFI.

BIOS required switching from real mode in all cases of modern OSes, so they couldn't skimp on that functionality.

1

Q: Can't boot a 64bit Windows USB from a tablet originally installed with 32-bit OS

I have an Acer Iconia W4-820 Tablet which has an Intel Atom Z3740 64-bit CPU, but the Windows version installed on it is 32-bit. I'm trying to install 64 bit Windows on it by making a bootable USB from a 64 bit Windows ISO image through tools such as Rufus and Windows USB download tool. But i...

do_os

@Bob yep it only has 2GB RAM. Then perhaps I should just try 32bit ubuntu for my nexxt try.

Bob

6:16 AM

You can see Damian's answer that proposes a workaround to perform the switch.

@do_os Oh, recent Linux kernels do support switching.

kernelnewbies.org/…

> Most modern x86 CPUs are 64-bit, but many modern systems ship with a 32-bit EFI implementation. This didn't allow to boot a Linux 64-bit EFI kernel from these 32-bit EFI systems. This limitation has been removed, a 64-bit kernel can be booted on 32-bit firmware that runs on 64-bit CPUs (note that it is not possible to boot a mixed-mode enabled kernel via the EFI boot stub - a bootloader that supports the EFI handover protocol must be used)

You might need to configure something in GRUB.

do_os

@Bob thanks. I'll first look into making GPT in my flash drive

Canadian Luke

6:56 AM

Evening all

Oliver Salzburg

7:24 AM

Morning guys :D

Journeyman Geek

I just found out today I have credits on antman ;p

Oliver Salzburg

What's antman?

For a moment I though it was similar to updog

Journeyman Geek

7:45 AM

Ant-Man (film)

Ant-Man is a 2015 American superhero film based on the Marvel Comics characters of the same name: Scott Lang and Hank Pym. Produced by Marvel Studios and distributed by Walt Disney Studios Motion Pictures, it is the twelfth installment of the Marvel Cinematic Universe (MCU). The film was directed by Peyton Reed, with a screenplay by Edgar Wright & Joe Cornish and Adam McKay & Paul Rudd, and stars Rudd, Evangeline Lilly, Corey Stoll, Bobby Cannavale, Michael Peña, Tip "T.I." Harris, Anthony Mackie, Wood Harris, Judy Greer, David Dastmalchian, and Michael Douglas. In Ant-Man, Lang must help defend...

Bob

@JourneymanGeek *loads up full credits list*

Unless I spelled your name wrong, you don't seem to be on here...

Journeyman Geek

@Bob: wierd. Maybe its not full enough

bertieb

Morning all! No problems with memtest86+, just going to start the extended SMART test on the wonky drive

Also, if the RasPi can include it and still be cheap as chips, why are USB CEC adapters so expensive?

Journeyman Geek

8:04 AM

cause licencing? ;p

bertieb

@JourneymanGeek :-/ Pulse Eight's USB (reference?) CEC adapter costs as much / more as a RasPi (depending on where you buy the latter from)

They license the library (libcec) GPLv2, but I guess the hardware is not licensed as freely

Ah well

Oliver Salzburg

@JourneymanGeek Ah, nice. Congrats :)

Journeyman Geek

I need to find time to watch it. I spent an impressive chunk of my birthday helping my parents grocery shop ><

(and bingewatching mythbusters for a lot of the rest of it)

Oliver Salzburg

oh, right!

Happy birthday! :D

Journeyman Geek

;p

Bob

8:45 AM

OH F

...forgot to pick up my new hdd

Journeyman Geek

9:06 AM

@bertieb pretty certain the raspi foundation gets a sweetheart pricing on their chips

Bob

9:55 AM

... superuser.com/questions/945792/…

I would suggest that this guy simply has no business managing a server if he can't even deal with this.

@JourneymanGeek You got a more complete list somewhere? :P

Journeyman Geek

lol

@Bob: I saw a screengrab my boss showed me off the FB page of someone he knows.

Bob

O_O

Journeyman Geek

Course, not sure if I can whip out a camera during end credits ;p

Bob

Annnnnd of course they had to do a fancy credits scene so all google results are utterly worthless.

Journeyman Geek

;p

Bob

10:03 AM

@JourneymanGeek you should edit yourself in here :P

sigh

"full cast & crew" lists maybe 30 people

yea, sure

O_O

@JourneymanGeek imdb.com/title/tt2737934/fullcredits?ref_=tt_cl_sm#cast

I give up

Journeyman Geek

10:59 AM

rofl

That's NOT me

Journeyman Geek

11:24 AM

Holy shit

ncdownpat

0

Q: StealRAT on unbuntu server, IP blocked by CBL. Can't work out how to remove

I am new to stack overflow so sorry if I do not get this quite right. I noticed my mail.log was 4gb in size so I opened it up and it has 12 million lines similar or the same as this: Jul 19 06:53:04 dglcreative postfix/smtp[17863]: 8DAE81267C7: to=,relay=mx0.123-reg.co.uk[94.136.40.150]:25...

ubuntu email dns virus ubuntu-14.04

0

Q: CBL is blocking my IP and I have no IDEA how to fix. Urgent please help :(

I am new to stack overflow so sorry if I do not get this quite right. I noticed my mail.log was 4gb in size so I opened it up and it has 12 million lines similar or the same as this: Jul 19 06:53:04 dglcreative postfix/smtp[17863]: 8DAE81267C7: to=,relay=mx0.123-reg.co.uk[94.xxx.xxx.150]:25, de...

linux ubuntu email webserver smtp

"newbie" and "running a server" is a dangerous combination

Journeyman Geek

facebook.com/Google/photos/a.404124792837.181416.104958162837/…

@ncdownpat: heh. Lesson 1. NUKE IT FROM ORBIT> ITS THE ONLY WAY TO BE SURE.

I actually did this when my server was compromised :/

ncdownpat

did you have backups?

Bob

@JourneymanGeek ?

2 hours ago, by Bob

... http://superuser.com/questions/945792/cbl-is-blocking-my-ip-and-i-have-no-idea-h‌ow-to-fix-urgent-please-help

2 hours ago, by Bob

I would suggest that this guy simply has no business managing a server if he can't even deal with this.

:P

XKCD

The other half has some cool shipwrecks, rocks, and snakes, but if you move those out of the way, it also has more sky.

Boris_yo

11:35 AM

@Psycogeek These guys claim to integrate removal-proof hidden code within your photo files and monitor when your IP is used across the internet. How is it that photos can still bear this code if thet can be reconverted and their META modified? digimarc.com/products/guardian/images

Journeyman Geek

12:06 PM

@Bob: That shophouse mentioned in the FB/google link I dropped is probably on our walkies route

Bob

1:34 PM

@JourneymanGeek thewhatnow

Oh, I was supposed to click that? :P

Journeyman Geek

facebook.com/Google/photos/a.404124792837.181416.104958162837/…

If you must.

Bob

> Sorry, this content isn't available right now
The link you followed may have expired, or the page may only be visible to an audience you're not in.

@JourneymanGeek I tend to avoid FB links

Journeyman Geek

wierd

works for me

"Hi Singapore - so we've rented out a shophouse, decked it out with lots of fun demos and displays and we're inviting all of you to come by and check it out!

You'll be able to give Google Cardboard a try, check out a real live Street View Trekker and Trolley, get an early glimpse of fun new Street View imagery from across the island...and lots more.
"

Bob

:\

allquixotic

2:11 PM

:|

Pandya

Can you help me for this:

2

A: Where can I ask questions about web-service like this?

I wouldn't call it a web-service but a web-proxy because that is what can sit between your browser and a website and can be provided by third-parties, for example ISP's. As your question will be a recommendation question you'll have a hard-time to find a site that accepts that because the Q/A fo...

I am here because according to answer, I may get help here.

allquixotic

@Pandya Hmm. Maybe. It's an interesting question.

First, the most important thing to keep in mind is that ad blockers are the best way to avoid downloading unnecessary junk on the web.

The second thing to keep in mind is, many websites (most?) already enable decent compression with gzip style compression.

So, you will only get a small benefit by using a proxy, compared to running a good adblocker.

Journeyman Geek

@Pandya: 2 might be a question for here. There's already a question about 3 on SU

allquixotic

However, you can run privoxy on a remote server (say, a VPS) and turn on compression to potentially get better compression.

Journeyman Geek

8

Q: Speeding up/optimising Internet access for a slow connection

I'm currently stuck in a somewhat backwoods part of the world, with my only source of Internet being a CDMA type dongle. Webcomics are a slight pain in the rear, but work sloooowly, when they work at all. Some other stuff such as SU chat dosen't work at all. The dongle comes with some software ...

networking mobile-broadband

allquixotic

2:26 PM

@JourneymanGeek asked by you :D

Journeyman Geek

lol

Yup

Bob

@allquixotic If you're really hurting for bandwidth, use a proxy that performs lossy compression on images.

...I'm late to the party, aren't I?

allquixotic

@Bob you know what would be amazing? a proxy that does LZMA2 on text data (JS, HTML, CSS, etc.) and BPG (assuming a browser supports it) recompression of everything else.

Pandya

@JourneymanGeek thanks for stuff but I fear to switch web-browser (to opera) which I don't want to!

Journeyman Geek

@allquixotic would be worth a client side plugin

Bob

2:29 PM

@allquixotic I'm guessing you're more likely to see webp, even though only Chrome supports it.

OK

I'm going to take another shot at the server migration tonight :D

Journeyman Geek

@Pandya: You can ask how to use google compression proxy on FF tho

Bob

*procrastinates some more*

allquixotic

@Bob tonight local time? as in now?

@Bob one time I procrastinated for 6 months migrating a Hetzner box to a newer one... that was expensive

Bob

@allquixotic Yea, as in now.

@allquixotic -_

I have until the 17th.

Pandya

@JourneymanGeek on SU?

Journeyman Geek

2:33 PM

yup

allquixotic

@JourneymanGeek actually, using Emscripten (I believe), there's a JavaScript based BPG decoder O_O which can probably be used on FF/Chrome by injecting the JS code into the HTML head and then using it for all the BPG images

Journeyman Geek

lol

@Bob: heh. I'm still debating on whether to keep my 128 mb vps

cancelled all my other buyvm sstuff

Bob

@JourneymanGeek I still have some small VPSes from ages ago.

I don't even know if they're still running.

Journeyman Geek

oh and I have the freebie vps

Until the new management realises it exists ;p

Bob

Oh god. This... I don't... what??

@JourneymanGeek Isn't that the basically useless one that cuts out every few ~~mins~~ days? :P

Journeyman Geek

2:37 PM

lol

Yeag

Bob

Hm.

I think this guy's self-promoting without disclosure: superuser.com/users/438790/ally-msangi

At the very least most of them are link-only answers.

Journeyman Geek

yeah

Bob

Hm. Memory usage went up a bit. 38%.

9.15 GB.

Journeyman Geek

hm.

@Bob: I agree.

Bob

@JourneymanGeek To be fair, I just checked and some of them do provide a bit of info.

Still mostly "go to my site for the full answer" though

Journeyman Geek

2:45 PM

@Bob: that's really the big thing

Bob

@JourneymanGeek Mhm, just wondering if it might be worth warning/advising first rather than outright nuking.

Journeyman Geek

;p

Bob

Some of that content could be useful if done in a more SE-friendly way.

Journeyman Geek

Didn't nuke the user

I'd rather folk write proper answers tho. AND he/she seems to have posted answers based on keywords, which seems slightly.... lazy

and there's at least one question which was clearly not read

Pandya

@JourneymanGeek done:

1

Q: How do I use Google data compression proxy on Firefox?

I am using GNU Icecat (GNU version of Mozilla Firefox) on Trisquel GNU/Linux. In order to minimize/optimize data usage while web surfing, I want to use google data compression proxy. So, How do I use Google Data Compression Proxy on Firefox? Note/History: I was wandering to get solution of my p...

firefox proxy google compression open-source

Journeyman Geek

2:52 PM

I saw that ;p

Pandya

:D

Hennes

Graaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaah!

It was MS all along which kept deleting things off my desktop.

support.microsoft.com/en-us/kb/978980

Bob

@Hennes Oh, did you read TDWTF? :P

allquixotic

So who's super excited about upgrading to Windows 10 on your primary desktop with no backups on release day and having everything go smoothly with no errors?!?!?!?!?!?!?!?!?! :D :D :D :D :D :D :D :D :D :D :D

Hennes

Teh daily what the freck? I read it on Friday.

Bob

2:56 PM

!!no

@Hennes thedailywtf.com/articles/we-re-all-admins-here

allquixotic

@Bob Not feeling very confident? :(

Fiiiine. To make everyone feel better I will uninstall VMware before I upgrade :D

Bob

@allquixotic Not touching it with a ten ~~foot~~ metre pole.

I'll let you be my tester :P

Hennes

oh, I am no admin. I only use a ntauthority shell.

Bob

@Hennes Read the second half

@allquixotic As I said, I'll probably end up upgrading the laptop first... but only when I have a bit more time when I'm sure I won't need it for a while.

Also, I need to go pick up that HDD -_-

allquixotic

@Bob Really? So are you implying that a "new Microsoft" focused on rapid releases, cheap labor, outsourcing and layoffs would possibly produce a Windows with a quality level less than expected?

Bob

2:58 PM

@allquixotic I avoid upgrading OSes at all if I can help it (prefer clean install).

Much less on release day.

Hennes

@Bob could they pretty please post that a few months ago. :)

Bob

3:21 PM

@allquixotic superuser.com/questions/945622/…

could you check if my comments are wrong? :P

(you know far more than me about aptx)

allquixotic

3:43 PM

@Bob I did one better and wrote an answer.

Journeyman Geek

@allquixotic I. Other than the whole no backup thing ;p

Bob

@allquixotic :)

allquixotic

@JourneymanGeek "I me"?

Journeyman Geek

;p

(my backups are tested and replicated ._.)

Bob

@allquixotic I wonder if we'll ever see Opus over A2DP.

why am I procrastinating

I should be kvming

Journeyman Geek

3:55 PM

lol

don't use a wireless keyboard with virt-manager ;p

(I wasted 2 days trying to figure that out)

Bob

@JourneymanGeek ? o.O

Won't be using virt-manager anyway

allquixotic

@Bob I don't know. Since everything required to do that is open standard, non-proprietary stuff, it would just be a task of integrating several disparate open source components, and then getting it included and adopted into things like Bluedroid (for Android) and the BlueZ stack for Linux desktop and etc., then getting client devices from Meelec and the like to support it.

Opus is a very good codec. No reason they can't use it in that scenario.

If AAC can be that easily adapted and included in many hundreds of devices, it should be possible to do Opus, too.

Thing is, I'm pretty sure apt-X is set as the preferred codec in any device that supports it, so we rarely get to see AAC in actual use. The devices that are sophisticated enough to support AAC, also tend to support apt-X (not always, but usually). So the AAC support gets shoved into a lower priority and never used.

Or you have a crappy old device without any kind of "extra" codec support, in which case you get SBC.

Bob

@allquixotic Apparently AAC on phones is mostly iOS. Nexus devices just do SBC. Some other Android devices do aptX. No idea what WP does.

Though, that's a dodgy source at best (reddit comments) :P

10

Q: How do I determine which A2DP codecs my phone supports/is currently using?

Bluetooth's Audio Profile A2DP supports multiple codecs. All devices have to support SBC (subband codec), then they can support additional "optional codecs" like MP3 and AAC, or "non-A2DP" codecs like apt-X. Of course these codecs can't actually be used if the receiver doesn't also support them...

bluetooth audio a2dp bluetooth-audio

allquixotic

@Bob Sammy does AAC too.

so our phones do all of the above

Bob

4:11 PM

Anyone here with a Nexus device willing to test?

I can only find questionable sources saying it doesn't, and nothing saying it does.

@allquixotic Funnily enough, all Lumia WP8.1 devices support aptX.

microsoft.com/en-au/mobile/support/faq/…

Including the lowest-end 520 and 53x.

The 53x phones usually go for ~$40 :P

allquixotic

@Bob Ugh. The most upvoted answer doesn't even provide an answer to the question.

Also, that's outdated. Android doesn't use BlueZ anymore.

They wrote their own Bluetooth stack that's MUCH worse than BlueZ.

Because, you know, NIH.

Bob

4:32 PM

It's crap like this that makes me want to switch to Windows Phone.

That Brazilian Guy

@Bob You say that because you don't own one, I assume.

Bob

@ThatBrazilianGuy ...I own a Lumia 520.

I rather like it, actually.

And it actually gets prompt updates straight from MS.

That Brazilian Guy

My wife has one, 520 too IIRC.

It has a really great photo lens and.... that's pretty much it

Nearly no apps

Bob

Great battery life, the OS actually gets updated, pretty stable...

@ThatBrazilianGuy For the most part, I don't give a crap about apps.

The biggest blocker is the lack of FF.

If FF happened (and it might in a few years with Win10), I seriously might switch.

Even Firefox OS is promptly updated.

That Brazilian Guy

> Unfortunately, due to the generally slow pace of Android updates, over 95 percent of Android devices are still affected, Drake estimates.

Bob

4:36 PM

Seriously, Android update delays are atrocious.

That Brazilian Guy

I have more 2 months of warranty left, and then I'm rooting my Moto G. The 1st thing I'll do is apply Cyanogenmod on it.

Bob

It took them something like 8 months to get 4.4 to Au after the rest of the world.

(In all honesty, I actually haven't installed it yet. Maybe I should, for all the crap it breaks. At least MS cares about backwards-compat, as much as that can be bad at times.)

That Brazilian Guy

About win10... In order to get it free I have to "order" (click on the sidebar thing) before July 29?

Bob

@ThatBrazilianGuy ... ... ... ... ...

Oh, it's only been spelt out in plain text about 50 billion times.

You have one year to perform the upgrade for free.

That Brazilian Guy

@Bob Starting from...?

Bob

4:39 PM

Presumably whatever the GA date ends up as.

That Brazilian Guy

"ga"?

Bob

General Availability.

windows.microsoft.com/en-au/windows/lifecycle

Canadian Luke

Anyone in the USA like ordering wine online? I just got a gift card for $100 off orders $160 or more, but the free shipping doesn't apply to Canada

Bob

*checks country* nope, still in Australia

That Brazilian Guy

I'm neither in the US nor a wine enthusiast (but thanks anyway)

allquixotic

4:46 PM

I'm in the US, but I'm not a wine enthusiast.

I don't drink much alcohol at all.

HackToHell

HALP, did something very stupid

moved everything in / to /home

I'm fucked

How do I revert ?

Bob

Time to pull out the backups!

You do have backups, right? right?

4

(have you tried mounting a live env and moving them back?)

allquixotic

@HackToHell one feasible way would be to hope the hell that your shell has a builtin mv command (bash should), and mv /home/* / and then mv your particular users' home directories back from /whatever to /home/whatever

or if you're worried about system stability, boot up a live CD and do it offline

or run a statically linked busybox binary

HackToHell

@allquixotic The shell doesn't

Cant access the mv at /home/usr/local/bin

fuck this shell isn't sudo

allquixotic

@HackToHell why not?

/home/bin/mv or /home/usr/bin/mv doesn't work?

or /home/usr/bin/busybox or /home/bin/busybox?

Canadian Luke

4:57 PM

@HackToHell How can the shell not be root, and you moved the entire / structure to another folder?

allquixotic

@CanadianLuke Maybe he was testing a new privilege escalation exploit he found

Canadian Luke

Shellshock, anyone? :P

HackToHell

Works but I am not fucking sudo

@CanadianLuke i ran sudo :(

Canadian Luke

5:14 PM

So, did we learn about sudo and when to double- and triple-check your commands? Great. Now, do you have an /etc folder? If not, can you create one?

HackToHell

I think I can

This ain't even my server, it's my company's server :|

5

............

hack pls

k

@HackToHell Yea, SUID tends to not work so well when you start moving files around.

allquixotic

5:25 PM

*hacks HTH's company's servers and makes it look like HTH deliberately tried to sell the info to Russia*

Bob

@HackToHell Uhmmmmmmmmmm

HackToHell

I have busybox

Bob

Without SUID, and without root, you aren't doing shit.

Break out the backups. Or, failing that, a live environment.

HackToHell

@bob not other go ?

Bob

0. You need root to move things back.
1. You are not root.
2. You need `sudo` to get root.
3. `sudo` does not work without SUID.
4. You broke the SUID bit when you moved everything.
5. You cannot get root.

2

Canadian Luke

5:28 PM

6. ???
7. PROFIT(s are gone now)

3

Bob

Actually, I'm not 100% sure SUID would've been broken. Gimme a sec, I'll get right back to you on that.

As soon as I can get a VM booted.

sigh I've made zero progress on the kvm setup

allquixotic

How about su?

Bob

On second inspection: sudo should still work

maybe

HackToHell

sudo doesn;t work

netiher does su

Bob

Oh, that's right... you're missing the configs.

And the user/group lists.

So, SUID is fine but sudo is missing all its support files :P

HackToHell

5:34 PM

sudo: effective uid is not 0, is /xxx/usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?

Bob

@allquixotic That assumes the root account is enabled and has a password set

@HackToHell Ok, SUID is broken

(I tested on a local single-partition setup)

HackToHell

/junglee/usr/bin/su: error while loading shared libraries: /junglee/usr/bin/su: cannot open shared object file: No such file or directory

Anonymous

rebooting into single-user mode won't work because there's no /, right?

Bob

@HackToHell Seriously, stop waffling around.

You won't be able to fix it like this.

Go pull the backups out. Now.

HackToHell

Waiting for serial console access now

Backups aren't complete

Bob

5:36 PM

There is quite literally no way for you to fix it from within the OS.

Anonymous

if the servers were mine I'd waffle around but if it's a company-- time's money so backups

HackToHell

serialconsole should give me /busybox no ?

Bob

@PatoSáinz If the servers were yours you should have backups anyway.

@HackToHell Busybox is useless if you aren't running as root

Anonymous

@Bob ain't nobody got time fo' that (yes of course you must have backups)

Bob

Busybox avoids errors with shared libs.

If you have no way to gain root privileges, you cannot move anything back.

Anonymous

5:37 PM

@Bob if he were on site he would be able to use a rescue media to mount the / and /home partitions and fix everything

Bob

You simply do not have write permissions to /

@PatoSáinz I suggested that about half an hour ago...

Heck, almost an hour now.

Anonymous

@Bob damn

Anonymous

@Bob well if @HackToHell gets serial console access... he'll get a tty but I hardly doubt there'll be any shell right? not even busybox

Bob

Unless you want to hunt for an unpatched kernel privilege escalation exploit, you just aren't gonna recover it like this.

@PatoSáinz Even if he gets a shell, he can't login as root!

Pretty sure /etc/shadow is nuked.

Anonymous

12

Q: Revert moving root directory recursivelly

I have an Ubuntu Desktop used as a Server. This morning I accidentally moved all my root to ../ root@server:/tmp/UPS/up/upsilon# mv /* ../ mv: impossibile spostare "/dev" in "../dev": Dispositivo o risorsa occupata mv: impossibile spostare "/proc" in "../proc": Dispositivo o risorsa occupata ...

data-recovery mv

Anonymous

5:40 PM

of course nothing there applies here

Anonymous

but it seems to be a commonplace mistake

Bob

@PatoSáinz Accepted answer assumes a root prompt is available.

Other answer just says to use an external OS.

Which has been suggested numerous times in here.

Anonymous

yea

Anonymous

@Bob at least, for my own calm, I usually sudo -i and then do my work... so if anything happens I still have a shell heh

Anonymous

@Bob can you brief me a little on what's the current state? he cannot get root through sudo because there's no configuration anymore and why he can't get through su because su needs to dynamically load some libraries that aren't there anymore

Anonymous

5:44 PM

am I getting this right?

Anonymous

what if he chroots into his home directory? would that be fruitless?

Bob

@PatoSáinz He moved everything to a directory with nosuid

sudo and su cannot work without suid

doesn't matter what kind of trickery you try

Anonymous

(since apparently backups isn't a possibility) maybe he could change his LD_LIBRARY_PATH to where all libs are located and then su could execute

Anonymous

@Bob hmm so even if su executes... there's no way for su to get root

Bob

apart from possibly moving them to a dir where suid is allowed, but I doubt the bit would be preserved and even if it is he'd have to have such a dir available (unlikely) or be able to mount one (requires root again)

Anonymous

5:48 PM

well what about PoliciyKit?

Anonymous

pkexec

Anonymous

would that need setuid too?

Bob

@PatoSáinz yes, that's also an suid program

or at least it is on my debian system

that would imply that it requires suid

(you don't set suid unless you really need it)

Anonymous

@Bob oh I thought it'd be rather a trickery by interfacing with a daemon that already has root

Bob

@PatoSáinz was a decent idea, but no, that doesn't work here

Anonymous

5:52 PM

well-- we'll have to wait and see what Hack HTH manages to do

Bob

bob@vm:~$ pkexec bash
pkexec must be setuid root

Anonymous

hmm

Anonymous

is there any other daemon that accepts commands and doesn't need setuid because it's already root?

Anonymous

maybe some dbus trickery?

Anonymous

maybe not

Bob

5:56 PM

sigh just use a live env already

or retrieve past backups

Anonymous

well who knows what he's doing now

Bob

@PatoSáinz Don't you think that would be a rather large security hole?

Anonymous

@Bob indeed

Bob

17 mins ago, by Bob

Unless you want to hunt for an unpatched kernel privilege escalation exploit, you just aren't gonna recover it like this.

And even it it required a password, the /etc/shadow file is gone

Not to mention any configs listing allowed users

HackToHell

okkkay ftpput works from busybox

I need to write a script that will backup all the things

Transcript for