Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #168017 > unrolled thread

What can AppArmor do?

Back to article view | Back to linux.debian.user

Contents

  What can AppArmor do? Richard Owlett <rowlett@cloud85.net> - 2016-05-18 16:30 +0200
    Re: What can AppArmor do? Darac Marjal <mailinglist@darac.org.uk> - 2016-05-18 17:30 +0200
      Re: What can AppArmor do? Richard Owlett <rowlett@cloud85.net> - 2016-05-20 17:00 +0200
        Re: What can AppArmor do? Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-20 17:10 +0200
          Re: What can AppArmor do? Richard Owlett <rowlett@cloud85.net> - 2016-05-20 17:50 +0200
            Re: What can AppArmor do? Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-20 18:10 +0200
            Re: What can AppArmor do? cbannister@slingshot.co.nz - 2016-05-21 18:10 +0200
          Re: What can AppArmor do? cbannister@slingshot.co.nz - 2016-05-21 18:00 +0200
            Re: What can AppArmor do? Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-21 23:20 +0200
              Re: What can AppArmor do? cbannister@slingshot.co.nz - 2016-05-22 08:50 +0200
                Re: What can AppArmor do? Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-22 12:20 +0200
                  Re: What can AppArmor do? cbannister@slingshot.co.nz - 2016-05-23 15:20 +0200
                    Re: What can AppArmor do? Lisi Reisz <lisi.reisz@gmail.com> - 2016-05-23 16:40 +0200
                      Re: What can AppArmor do? Gene Heskett <gheskett@shentel.net> - 2016-05-23 16:50 +0200
                        Files browser won'r run if several programs open D&P Dimov <lddimov@yahoo.com> - 2016-05-23 18:40 +0200
                    Re: What can AppArmor do? David Wright <deblis@lionunicorn.co.uk> - 2016-05-23 22:30 +0200
                      console fonts and systemd (was ... Re: What can AppArmor do?) cbannister@slingshot.co.nz - 2016-05-24 22:30 +0200
                        Re: console fonts and systemd (was ... Re: What can AppArmor do?) David Wright <deblis@lionunicorn.co.uk> - 2016-05-25 17:40 +0200
                        Re: console fonts and systemd (was ... Re: What can AppArmor do?) David Wright <deblis@lionunicorn.co.uk> - 2016-06-05 16:40 +0200
                          Re: console fonts and systemd (was ... Re: What can AppArmor do?) cbannister@slingshot.co.nz - 2016-06-06 07:10 +0200
                            Re: console fonts and systemd (was ... Re: What can AppArmor do?) David Wright <deblis@lionunicorn.co.uk> - 2016-06-09 05:50 +0200
            Wee squares [was: What can AppArmor do?] <tomas@tuxteam.de> - 2016-05-22 08:40 +0200
              Re: Wee squares [was: What can AppArmor do?] Curt <curty@free.fr> - 2016-05-22 18:10 +0200
    Re: What can AppArmor do? Richard Owlett <rowlett@cloud85.net> - 2016-06-02 14:50 +0200

Page 1 of 2  [1] 2  Next page →

#168017 — What can AppArmor do?

https://packages.debian.org/jessie/apparmor is uninformative.

It says:
"This provides the system initialization scripts needed to use 
the AppArmor Mandatory Access Control system, including the 
AppArmor Parser which is required to convert AppArmor text 
profiles into machine-readable policies that are loaded into the 
kernel for use with the AppArmor Linux Security Module."

There is a link to http://wiki.apparmor.net/index.php/Main_Page 
which gives no hints!

My application question.
1. If BrowserA and BrowserB are installed, can AppArmor prevent 
BrowserB from
    connecting to the internet independent of user permissions?
2. Can AppArmor default to preventing *ALL* but specific 
applications from
    connecting to the internet independent of user permissions?

[toc] | [next] | [standalone]

#168023

[Multipart message — attachments visible in raw view] — view raw

On Wed, May 18, 2016 at 09:23:34AM -0500, Richard Owlett wrote:
>https://packages.debian.org/jessie/apparmor is uninformative.
>
>It says:
>"This provides the system initialization scripts needed to use the 
>AppArmor Mandatory Access Control system, including the AppArmor 
>Parser which is required to convert AppArmor text profiles into 
>machine-readable policies that are loaded into the kernel for use with 
>the AppArmor Linux Security Module."
>
>There is a link to http://wiki.apparmor.net/index.php/Main_Page which 
>gives no hints!
>
>My application question.
>1. If BrowserA and BrowserB are installed, can AppArmor prevent 
>BrowserB from
>   connecting to the internet independent of user permissions?
>2. Can AppArmor default to preventing *ALL* but specific applications 
>from
>   connecting to the internet independent of user permissions?

From that wiki page: "AppArmor security policies completely define what 
system resources individual applications can access, and with what 
privileges."

"Network access" is, although not explicitly stated on that page, a 
system resource. So yes, you can prevent, say, an application called 
"firefox" from accessing the network entirely. Looking deeper, I see 
http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Network_rules 
which defines the network rules of AppArmor. It appears that you should 
be able to constrain said application to only connect to certain 
addresses.

Just a warning that you need to think carefully about the rules you 
implement. Can a user get around your rules by renaming "firefox" to 
"iceweasel"? If, instead, you put blanket rules in place check that you 
aren't blocking other networking functions (like X talking over the 
local network, for example). AppArmor does, however, have a "complain" 
mode where, rather than enforcing rules it will log violations to 
syslog. You can use this to guide your profile creation.



>
>

-- 
For more information, please reread.

[toc] | [prev] | [next] | [standalone]

#168093

On 5/18/2016 10:27 AM, Darac Marjal wrote:
> On Wed, May 18, 2016 at 09:23:34AM -0500, Richard Owlett wrote:
>> https://packages.debian.org/jessie/apparmor is uninformative.
>>
>> It says:
>> "This provides the system initialization scripts needed to use
>> the AppArmor Mandatory Access Control system, including the
>> AppArmor Parser which is required to convert AppArmor text
>> profiles into machine-readable policies that are loaded into
>> the kernel for use with the AppArmor Linux Security Module."
>>
>> There is a link to http://wiki.apparmor.net/index.php/Main_Page
>> which gives no hints!
>>
>> My application question.
>> 1. If BrowserA and BrowserB are installed, can AppArmor prevent
>> BrowserB from
>>   connecting to the internet independent of user permissions?
>> 2. Can AppArmor default to preventing *ALL* but specific
>> applications from
>>   connecting to the internet independent of user permissions?
>
>  From that wiki page: "AppArmor security policies completely
> define what system resources individual applications can access,
> and with what privileges."

That statement reminds me of one of George Orwell's characters 
saying "It means whatever I want it to mean."


>
> "Network access" is, although not explicitly stated on that page,
> a system resource. So yes, you can prevent, say, an application
> called "firefox" from accessing the network entirely. Looking
> deeper, I see
> http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Network_rules
> which defines the network rules of AppArmor. It appears that you
> should be able to constrain said application to only connect to
> certain addresses.

The very first line of the page said "Don't trust me." 
[paraphrased ;]
I was looking for descriptive information aimed at a general 
audience. I was looking for guidance on "suitability for intended 
use". A "No" to my narrowly stated question would have eliminated 
AppArmor. To actually want to use it is a wider question. I was 
hoping for a response from an actual user.

>
> Just a warning that you need to think carefully about the rules
> you implement. Can a user get around your rules by renaming
> "firefox" to "iceweasel"? If, instead, you put blanket rules in
> place check that you aren't blocking other networking functions
> (like X talking over the local network, for example). AppArmor
> does, however, have a "complain" mode where, rather than
> enforcing rules it will log violations to syslog. You can use
> this to guide your profile creation.

After initially reading your post I found something that hinted 
that "blacklist all except explicit exceptions" would be 
possible. More reading required.

Thank you for your time.

[toc] | [prev] | [next] | [standalone]

#168094

On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> That statement reminds me of one of George Orwell's characters
> saying "It means whatever I want it to mean."

No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.

“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means 
just what I choose it to mean—neither more nor less.” “The question is,” said 
Alice, “whether you can make words mean so many different things.” “The 
question is,” said Humpty Dumpty, “which is to be master—that’s all.”

Lisi

[toc] | [prev] | [next] | [standalone]

#168095

On 5/20/2016 10:08 AM, Lisi Reisz wrote:
> On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
>> That statement reminds me of one of George Orwell's characters
>> saying "It means whatever I want it to mean."
>
> No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
>
> “When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means
> just what I choose it to mean—neither more nor less.” “The question is,” said
> Alice, “whether you can make words mean so many different things.” “The
> question is,” said Humpty Dumpty, “which is to be master—that’s all.”
>
> Lisi
>

*ROFL* Thank you.
"Alice Through The Looking Glass" is a more suitable metaphor for 
'nix documentation ;/

[toc] | [prev] | [next] | [standalone]

#168097

On Friday 20 May 2016 16:45:03 Richard Owlett wrote:
> On 5/20/2016 10:08 AM, Lisi Reisz wrote:
> > On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> >> That statement reminds me of one of George Orwell's characters
> >> saying "It means whatever I want it to mean."
> >
> > No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> >
> > “When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it
> > means just what I choose it to mean—neither more nor less.” “The question
> > is,” said Alice, “whether you can make words mean so many different
> > things.” “The question is,” said Humpty Dumpty, “which is to be
> > master—that’s all.”
> >
> > Lisi
>
> *ROFL* Thank you.
> "Alice Through The Looking Glass" is a more suitable metaphor for
> 'nix documentation ;/

:-)

Lisi

[toc] | [prev] | [next] | [standalone]

#168130

On Fri, May 20, 2016 at 10:45:03AM -0500, Richard Owlett wrote:
> On 5/20/2016 10:08 AM, Lisi Reisz wrote:
> >On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> >>That statement reminds me of one of George Orwell's characters
> >>saying "It means whatever I want it to mean."
> >
> >No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> >
> >“When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means
> >just what I choose it to mean—neither more nor less.” “The question is,” said
> >Alice, “whether you can make words mean so many different things.” “The
> >question is,” said Humpty Dumpty, “which is to be master—that’s all.”
> >
> >Lisi
> >
> 
> *ROFL* Thank you.
> "Alice Through The Looking Glass" is a more suitable metaphor for 'nix
> documentation ;/

Remember:
1) Unix is user friendly, it's just picky on who its friends are.
and 
2) Would you expect a tractor manual to give instructions on how
to grow carrots?

-- 
The media's the most powerful entity on earth. 
They have the power to make the innocent guilty 
and to make the guilty innocent, and that's power.
 -- Malcolm X

[toc] | [prev] | [next] | [standalone]

#168128

On Fri, May 20, 2016 at 04:08:05PM +0100, Lisi Reisz wrote:
> On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> > That statement reminds me of one of George Orwell's characters
> > saying "It means whatever I want it to mean."
> 
> No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> 
> “When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it means 
> just what I choose it to mean—neither more nor less.” “The question is,” said 
> Alice, “whether you can make words mean so many different things.” “The 
> question is,” said Humpty Dumpty, “which is to be master—that’s all.”

What key are you pressing to get the wee squares?

-- 
The media's the most powerful entity on earth. 
They have the power to make the innocent guilty 
and to make the guilty innocent, and that's power.
 -- Malcolm X

[toc] | [prev] | [next] | [standalone]

#168139

On Saturday 21 May 2016 16:56:31 cbannister@slingshot.co.nz wrote:
> On Fri, May 20, 2016 at 04:08:05PM +0100, Lisi Reisz wrote:
> > On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> > > That statement reminds me of one of George Orwell's characters
> > > saying "It means whatever I want it to mean."
> >
> > No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> >
> > “When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it
> > means just what I choose it to mean—neither more nor less.” “The question
> > is,” said Alice, “whether you can make words mean so many different
> > things.” “The question is,” said Humpty Dumpty, “which is to be
> > master—that’s all.”
>
> What key are you pressing to get the wee squares?

What wee squares??

Lisi

[toc] | [prev] | [next] | [standalone]

#168145

On Sat, May 21, 2016 at 10:17:22PM +0100, Lisi Reisz wrote:
> On Saturday 21 May 2016 16:56:31 cbannister@slingshot.co.nz wrote:
> > On Fri, May 20, 2016 at 04:08:05PM +0100, Lisi Reisz wrote:
> > > On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> > > > That statement reminds me of one of George Orwell's characters
> > > > saying "It means whatever I want it to mean."
> > >
> > > No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> > >
> > > “When I use a word,” Humpty Dumpty said, in rather a scornful tone, “it
> > > means just what I choose it to mean—neither more nor less.” “The question
> > > is,” said Alice, “whether you can make words mean so many different
> > > things.” “The question is,” said Humpty Dumpty, “which is to be
> > > master—that’s all.”
> >
> > What key are you pressing to get the wee squares?
> 
> What wee squares??

It must be a font problem my end. I'm using mutt in a tty.
I guess you copy'n'pasted the text from a web page. For
some reason the (I guess they're quotation marks) display
as a small square.

-- 
The media's the most powerful entity on earth. 
They have the power to make the innocent guilty 
and to make the guilty innocent, and that's power.
 -- Malcolm X

[toc] | [prev] | [next] | [standalone]

#168149

On Sunday 22 May 2016 07:43:43 cbannister@slingshot.co.nz wrote:
> On Sat, May 21, 2016 at 10:17:22PM +0100, Lisi Reisz wrote:
> > On Saturday 21 May 2016 16:56:31 cbannister@slingshot.co.nz wrote:
> > > On Fri, May 20, 2016 at 04:08:05PM +0100, Lisi Reisz wrote:
> > > > On Friday 20 May 2016 15:57:27 Richard Owlett wrote:
> > > > > That statement reminds me of one of George Orwell's characters
> > > > > saying "It means whatever I want it to mean."
> > > >
> > > > No, Lewis Carol, Humpty Dumpty in Alice Through The Looking Glass.
> > > >
> > > > “When I use a word,” Humpty Dumpty said, in rather a scornful tone,
> > > > “it means just what I choose it to mean—neither more nor less.” “The
> > > > question is,” said Alice, “whether you can make words mean so many
> > > > different things.” “The question is,” said Humpty Dumpty, “which is
> > > > to be master—that’s all.”
> > >
> > > What key are you pressing to get the wee squares?
> >
> > What wee squares??
>
> It must be a font problem my end.

Probably.

> I'm using mutt in a tty. 
> I guess you copy'n'pasted the text from a web page.

Yes.

> For 
> some reason the (I guess they're quotation marks) display
> as a small square.

After I posted, I worked out that it was probably the quotation marks that 
were the problem.  As you say, I had copy and pasted and that was the only 
thing that looked anything but bog-standard.  

But I am only using <quote from the configuration> us-ascii, iso-8859-1, utf-8 
(locale)  and utf-8</quote>, with a locale of en_GB.UTF-8, so not very 
abstruse in view of the fact that I have correspondents in, and therefore 
correspondence from, Japan, Greece and Israel in addition to the Anglo-Saxon 
countries.

Lisi

[toc] | [prev] | [next] | [standalone]

#168183

On Sun, May 22, 2016 at 11:11:27AM +0100, Lisi Reisz wrote:
> 
> But I am only using <quote from the configuration> us-ascii, iso-8859-1, utf-8 
> (locale)  and utf-8</quote>, with a locale of en_GB.UTF-8, so not very 
> abstruse in view of the fact that I have correspondents in, and therefore 
> correspondence from, Japan, Greece and Israel in addition to the Anglo-Saxon 
> countries.

I'm running utf8 also, but if your font can't display the chars/glyphs then
it won't help.

-- 
The media's the most powerful entity on earth. 
They have the power to make the innocent guilty 
and to make the guilty innocent, and that's power.
 -- Malcolm X

[toc] | [prev] | [next] | [standalone]

#168184

On Monday 23 May 2016 14:13:34 cbannister@slingshot.co.nz wrote:
> On Sun, May 22, 2016 at 11:11:27AM +0100, Lisi Reisz wrote:
> > But I am only using <quote from the configuration> us-ascii, iso-8859-1,
> > utf-8 (locale)  and utf-8</quote>, with a locale of en_GB.UTF-8, so not
> > very abstruse in view of the fact that I have correspondents in, and
> > therefore correspondence from, Japan, Greece and Israel in addition to
> > the Anglo-Saxon countries.
>
> I'm running utf8 also, but if your font can't display the chars/glyphs then
> it won't help.

O.K.  I'm running Bitstream Vera Sans.  Now that is slightly unorthodox.

Lisi

[toc] | [prev] | [next] | [standalone]

#168186

On Monday 23 May 2016 10:29:46 Lisi Reisz wrote:

> On Monday 23 May 2016 14:13:34 cbannister@slingshot.co.nz wrote:
> > On Sun, May 22, 2016 at 11:11:27AM +0100, Lisi Reisz wrote:
> > > But I am only using <quote from the configuration> us-ascii,
> > > iso-8859-1, utf-8 (locale)  and utf-8</quote>, with a locale of
> > > en_GB.UTF-8, so not very abstruse in view of the fact that I have
> > > correspondents in, and therefore correspondence from, Japan,
> > > Greece and Israel in addition to the Anglo-Saxon countries.
> >
> > I'm running utf8 also, but if your font can't display the
> > chars/glyphs then it won't help.
>
> O.K.  I'm running Bitstream Vera Sans.  Now that is slightly
> unorthodox.
>
> Lisi

And I'm now running a font I'm happy with, Hack, regular, 13 point.
Nothing fancy, but monotonic and quite readable.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page <http://geneslinuxbox.net:6309/gene>

[toc] | [prev] | [next] | [standalone]

#168189 — Files browser won'r run if several programs open

[Multipart message — attachments visible in raw view] — view raw

The files/folders browser doesn't open when I have several other programs already open and running. I click on the icon, the mouse turns into the turning circle for a few seconds, and then nothing happens. The machine is plenty powerful to handle it. The problem started recently, after updating the system for the first time in a while (a month or two). Even after closing all open programs, it won't open the files browser unless I restart the system. Any ideas how to fix this?Thanks,Luben

 

[toc] | [prev] | [next] | [standalone]

#168202

On Tue 24 May 2016 at 01:13:34 (+1200), cbannister@slingshot.co.nz wrote:
> On Sun, May 22, 2016 at 11:11:27AM +0100, Lisi Reisz wrote:
> > 
> > But I am only using <quote from the configuration> us-ascii, iso-8859-1, utf-8 
> > (locale)  and utf-8</quote>, with a locale of en_GB.UTF-8, so not very 
> > abstruse in view of the fact that I have correspondents in, and therefore 
> > correspondence from, Japan, Greece and Israel in addition to the Anglo-Saxon 
> > countries.
> 
> I'm running utf8 also, but if your font can't display the chars/glyphs then
> it won't help.

If I’m not mistaken, it’s *your* font that’s lacking the necessary
glyphs, like ’. What is it, BTW?

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#168228 — console fonts and systemd (was ... Re: What can AppArmor do?)

On Mon, May 23, 2016 at 03:20:32PM -0500, David Wright wrote:
> On Tue 24 May 2016 at 01:13:34 (+1200), cbannister@slingshot.co.nz wrote:
> > On Sun, May 22, 2016 at 11:11:27AM +0100, Lisi Reisz wrote:
> > > 
> > > But I am only using <quote from the configuration> us-ascii, iso-8859-1, utf-8 
> > > (locale)  and utf-8</quote>, with a locale of en_GB.UTF-8, so not very 
> > > abstruse in view of the fact that I have correspondents in, and therefore 
> > > correspondence from, Japan, Greece and Israel in addition to the Anglo-Saxon 
> > > countries.
> > 
> > I'm running utf8 also, but if your font can't display the chars/glyphs then
> > it won't help.
> 
> If I’m not mistaken, it’s *your* font that’s lacking the necessary
> glyphs, like ’. What is it, BTW?

I didn't think someone would read it that way. I was meaning "your" in a
general way, not explicitly meaning Lisi's font. 

What is the systemd command to show the font being used on the console?
(hint ... /etc/vconsole.conf doesn't exist)

After a bit of googling, It seems to be done via the console-setup package
which I don't have installed! Weird.

So I installed the console-setup package and chose (eventually):

UTF <OK>
Guess optimal character set <OK>  
TerminusBold <OK>
8x16 <OK>

and the wee squares disappeared (at least in this mail, I've deleted 
the others in this thread.)

So, actually the answer to your question is that I have no idea what font 
I was running on this system to give the "wee squares"

If I choose Terminus instead of TerminusBold, then the ’ changes to a sort
of D shape with a squiggle on top! I'm guessing the char was a right
side single curly quote, that you posted David?

Although, IIRC, the typographical single quotes and double quotes are a
rather peculiar case anyway.

-- 
The media's the most powerful entity on earth. 
They have the power to make the innocent guilty 
and to make the guilty innocent, and that's power.
 -- Malcolm X

[toc] | [prev] | [next] | [standalone]

#168249 — Re: console fonts and systemd (was ... Re: What can AppArmor do?)

On Wed 25 May 2016 at 08:04:27 (+1200), cbannister@slingshot.co.nz wrote:
> On Mon, May 23, 2016 at 03:20:32PM -0500, David Wright wrote:
> > On Tue 24 May 2016 at 01:13:34 (+1200), cbannister@slingshot.co.nz wrote:
> > > On Sun, May 22, 2016 at 11:11:27AM +0100, Lisi Reisz wrote:
> > > > 
> > > > But I am only using <quote from the configuration> us-ascii, iso-8859-1, utf-8 
> > > > (locale)  and utf-8</quote>, with a locale of en_GB.UTF-8, so not very 
> > > > abstruse in view of the fact that I have correspondents in, and therefore 
> > > > correspondence from, Japan, Greece and Israel in addition to the Anglo-Saxon 
> > > > countries.
> > > 
> > > I'm running utf8 also, but if your font can't display the chars/glyphs then
> > > it won't help.
> > 
> > If I’m not mistaken, it’s *your* font that’s lacking the necessary
> > glyphs, like ’. What is it, BTW?
> 
> I didn't think someone would read it that way. I was meaning "your" in a
> general way, not explicitly meaning Lisi's font. 
> 
> What is the systemd command to show the font being used on the console?
> (hint ... /etc/vconsole.conf doesn't exist)
> 
> After a bit of googling, It seems to be done via the console-setup package
> which I don't have installed! Weird.

Its priority is optional, so there's no pressing need to have it.

AFAICT there are a number of fonts used in the early stages of
booting. The first is obviously nothing to do with linux as it
comes with the BIOS and is "normal" size, perhaps 80 chars across
the screen.

The next font is grub's and I think it must be unifont as it has
almost everything I can think of. On my laptop, it's quite small,
perhaps 120 chars wide.

After grub with 'Loading Linux 3.16.0-4-686-pae ...'
'Loading initial ramdisk ...'
I get "Loading, please wait..." from initrd's init. It's written in a
normal size, but then the screen is reset, leaving it much smaller.
I assume that's the kernel's own compiled-in font.

After a load of messages have scrolled past, the console-setup
font is selected, and the screen changes to that font (losing
everything above that point in the scrollback buffer).

So I would assume that your tty was running with the kernel font.
I can only guess that that comes from the fonts in
drivers/video/console if you're running wheezy. I'm not sure
where they are in jessie. However, the ones in whezzy are small,
with a smattering of European diacriticals, greek, box-drawing
glyphs, blobs, and the all-important playing card glyphs.

> So I installed the console-setup package and chose (eventually):
> 
> UTF <OK>
> Guess optimal character set <OK>  
> TerminusBold <OK>
> 8x16 <OK>
> 
> and the wee squares disappeared (at least in this mail, I've deleted 
> the others in this thread.)
> 
> So, actually the answer to your question is that I have no idea what font 
> I was running on this system to give the "wee squares"
> 
> If I choose Terminus instead of TerminusBold, then the ’ changes to a sort
> of D shape with a squiggle on top! I'm guessing the char was a right
> side single curly quote, that you posted David?

Yes (and I don't normally type them into emails).

> Although, IIRC, the typographical single quotes and double quotes are a
> rather peculiar case anyway.

Well, they ought not to be as they're some of the commonest
punctuation characters in any literature (though not text emails).

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#168579 — Re: console fonts and systemd (was ... Re: What can AppArmor do?)

Nowadays I use console-setup (specifically /etc/default/console-setup)
to set up my default console font (with alternatives commented out in
that file so I don't have to look them up).

However, to change fonts on the fly, I use setfont which has the
advantage that you can have different fonts on different VCs.
To make it easier to type the font names precisely (a necessity),
I use a function:
function my-font-usr-share-consolefonts {
    local FILENAME=$(basename "$1")
    setfont ${FILENAME%%.*}
}
which reminds me to start the argument with /usr/share/consolefonts/,
and then strips what's not necessary before handing it to setfont.
(I'm using bash-completion throughout, obviously).

On Wed 25 May 2016 at 08:04:27 (+1200), cbannister@slingshot.co.nz wrote:
> So, actually the answer to your question is that I have no idea what font 
> I was running on this system to give the "wee squares"
> 
> If I choose Terminus instead of TerminusBold, then the ’ changes to a sort
> of D shape with a squiggle on top! I'm guessing the char was a right
> side single curly quote, that you posted David?

And here's my observation. When you type real quotation marks (ie ‘’“”),
the correct glyphs appear on the screen. After changing font, those
glyphs turn into different glyphs, but freshly typed quotation marks
appear with the correct glyphs.

I have no idea why this happens, but it does mean that your statement
above needs qualification. The glyphs that change to a sort of D shape
with a squiggle on top, are these glyphs that were already on the
screen before you changed choice, or are they fresh glyphs written afterwards?

Cheers,
David.

[toc] | [prev] | [next] | [standalone]

#168608 — Re: console fonts and systemd (was ... Re: What can AppArmor do?)

On Sun, Jun 05, 2016 at 09:16:23AM -0500, David Wright wrote:
> And here's my observation. When you type real quotation marks (ie ‘’“”),
> the correct glyphs appear on the screen. After changing font, those
> glyphs turn into different glyphs, but freshly typed quotation marks
> appear with the correct glyphs.
> 
> I have no idea why this happens, but it does mean that your statement
> above needs qualification. The glyphs that change to a sort of D shape
> with a squiggle on top, are these glyphs that were already on the
> screen before you changed choice, or are they fresh glyphs written afterwards?

They were fresh glyphs written afterwards. The glyps I got were dependant on the
setting I chose in the second screen (after choosing UTF from the first.) while
doing 'dpkg-reconfigure console-setup'.

I've now got it set to 'Guess optimal character set' which does do the quotes.
It was when choosing the other options i noticed the D shape with a squiggle on
top.

There is also setupcon (man setupcon) which may be of some interest.

Once I got the dlyphs showing correctly I didn't bother with the technicalities
any further --- although what the option 'Guess optimal character set' is actually
doing behind the scenes *may* be an option for further perusal. 

-- 
The media's the most powerful entity on earth. 
They have the power to make the innocent guilty 
and to make the guilty innocent, and that's power.
 -- Malcolm X

[toc] | [prev] | [next] | [standalone]

Page 1 of 2  [1] 2  Next page →

Back to top | Article view | linux.debian.user

csiph-web