September 2007 Archives

I wasn't planning on blogging much while I'm on the trip, but I had an experience in Oruro, Bolivia I had to mention. I realize this post is long, but I'm trying to do paint the picture of what was an amazing day.First of all I'll start out by explaining that I had thought multiple times that perhaps it was a mistake to come all the way to Bolivia just to see Karen, a girl I've sponsored with Save The Children for a few years. She lives in Oruro, Bolivia and it was pretty out of the way and cost a fair bit of money to get there. Our agenda for the visit basically said we'd be visiting the STC office in La Paz, and then the STC offices in Oruro, see the school the child attends, and visit with her family. It sounded nice, but nothing incredible. It was incredible.So after breakfast at the hotel in La Paz, we went to the STC offices in Oruro (that from the outside don't even look like offices). There we met Augusto, the director of STC for the Oruro area. He spoke English and Spanish and was a pretty nice guy. He gave us a tour of the offices, including the different programs offered and then had us speak with the office of Patrocinios - the office that handles the sponsors for the children. In Oruro, they have some 20 schools involved in sponsorships and some 5700 sponsored children, in addition to another 1200 or so that are awaiting sponsors. They showed us the files they have for every child, including all the correspondance between Karen and me - letting me know I need to write more :(. Then we went to Ferroviaria - the primary school Karen attends, which consists of grades preschool - 8th grade.That's where the day turned incredible. First of all, we met with the principal of the school, who told us about the school, it's history and what they're trying to do. I also met Karen for the first time. She was understandably a little shy, but a cute 10-yr-old girl who seemed happy to be there. I talked to her a little as we began to tour the school, and she seemed eager to answer my questions. We saw the library, consisting of some tables and shelves of books, all possible thanks to STC. There were some 7th graders in there studying language. We then went and saw a preschool classroom and a computer lab where a bunch of 7th graders were working with Excel. I tried to say loudly that it's a very useful and important program to learn. :) Again, these facilities were due to STC. As we came out of one of the buildings, I could hear some kids voices singing but didn't think much of it until a lady came up to me with a piece of paper folded in 4 parts that was a printed program for the "Visita del Patrocinador Cameron Harr" (Visit of the sponsor Cameron Harr). Inside was a little program agenda for me. I thought it was nice, but to be honest, I didn't know what it was about and didn't think much of it. And then they took me into the auditorium. That's when my eyes stared to get real big. The place was packed with all the kids from grades preschool to grade 5 - probably around 600-700 kids. There were a couple teachers up front directing the kids and on the side there were bleachers with kids in yellow tops who were the chorus. They were all there to celebrate me and my visit. I was stunned. On a side note, apparently they thought I was going to be a woman, but I assured Agusto I was a man. :) Anyway, first, a boy got up and gave a memorized introduction and personalized welcome to me from on stage. Then an adult with a guitar and a boy got up and the boy belted out some songs. During one of the songs, one of the teachers came up to me and pulled me up front to dance. I wish I could say the dancing came naturally to me, but I can't - I don't dance. I can say though that I danced in my hiking boots without shame and had some fun, twirling and moving around. Music and dance is something very integral to the Bolivian people. At any rate, next a couple of the teachers played a drum and traditional flute set while the chorus sang a couple songs, one in Quechua. To emphasize the previous point, a darling little girl (maybe 4 or 5) came up to me and wanted me to dance so I danced with her in front of everyone. After the chorus, Karen got up and presented me with half a dozen roses. I stepped up on stage (which is a 3-4 foot step) and with my head about to hit the ceiling, I got some good gasps of delight from the children. After accepting the roses, they gave me the opportunity to say something, which I readily took, and sincerely thanked everyone as best I could (multilple times and in different ways). I think it went over well. I didn't break down or anything, but was overcome with gratefulness. Karen then enthusiastically and artfully recited from memory a poem. Next, another child got up and sang some other enthusiastic songs. This time, an impossibly cute little girl (again, maybe 4-5) pulled me up to dance, which I did, trying to crouch down a little at the same time. I was also starting to get winded by now, given the altitude of some 13K or so feet! At some point some cute little girl came out and did quite the dance to an energetic song and then finally, there was another song and it was over. But the experience wasn't. One of the teachers suggested I get a picture with the chorus, so I went over and was completely mobbed by the kids. It was incredible. They were all over me and all wanted to be in the photo and to be touching me. We took a bunch of other pics and then went outside where I was greeted by more kids who wanted my autograph, and then even more. Me, and then Josh, became mobbed by kids wanting our autographs. The teachers kept trying to break them up, but they were persistant. I was blown away to say the least. You'd think I was a rock star! Anyway, from there, we went and met the teachers - all women - and had a small snack (empanada with Coke) and talked a little. They, like most of the women, wanted to know if I/we were single and became pretty excited when I said we were both single. Then they started a bunch of "woman talk" about wanting to come with us and other stuff that I didn't all understand. It was pretty funny though. The teachers seemed to be in as much awe almost as the kids were. But from there, we went and visited Karen's 5th grade class where a bunch of the kids greeted me (very nicely!). I also told them to welcome Josh and encourage him to be a sponsor too - which they readily did :). We asked them if they wanted to take a picture, and they exploded in affirmation. So we went outside and took some pics and then they mobbed Josh and I again with requests for autographs but also for our email and web site (since Agusto had mentioned we were going to put up a website). Smart kids. After I gave out my email however, I was informed that direct communication is not permitted (but also that they've never seen the kids ask for it before). So I went back to just signing autographs. Again, it was crazy, but fun.After that, we left the school and went to lunch at a good but "expensive" lamb restaurant. My enormous meal cost about $6-7 bucks (but expensive for them). Again; Incredible. From there, we went back to the STC offices and met Karen and her mother there and presented them with the gifts we had gotten them (story books, stickers, coloring books, candy and a digital jump rope). They were delighted. The mother was great and was pretty excited to be there and wanted to know all about me and where I lived. She also wanted direct communication, but we had to tell her that wasn't permitted and why (to protect the children). From there, we took a little field trip with the director of the STC Adolescent program "Making Choices" to the health center. There, several young adults told us about what they do and how they are creating a new organization to educate all about health care and such. It was neat to see their enthusiasm and the benefit they are to the community.And that was my incredible day. I can't do it justice, but you can read a bit more about the STC side of things over here at Josh's blog. There are also pictures you really should see to get a better feel for it.

So remember the little trip I'm going on with my brother? The one around the world? It started yesterday. I'm sitting in the Quito airport waiting to go to the Galapagos. For more detail on Quito and our entire trip, with pics, go here.

For those that don't know, SElinux is supposed to make servers more secure. I think the main reason is because it makes everything not work! For a while, I've been living with tons of SElinux audit errors/warnings on my mail server but as things still worked, I decided not to bother with it. Until now.This is what I was seeing (on several services):

Sep 7 16:49:42 mail kernel: audit(1189205382.693:2459): avc: denied { unlink } for pid=22150 comm="imapd" name="cyrus.index" dev=sda2 ino=4732920 scontext=system_u:system_r:cyrus_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
Sep 7 16:49:42 mail kernel: audit(1189205382.983:2460): avc: denied { read } for pid=22150 comm="imapd" name="cyrus.squat" dev=sda2 ino=4732957 scontext=system_u:system_r:cyrus_t:s0 tcontext=user_u:object_r:var_t:s0 tclass=file
Sep 7 16:49:43 mail kernel: audit(1189205382.984:2461): avc: denied { getattr } for pid=22150 comm="imapd" name="cyrus.squat" dev=sda2 ino=4732957 scontext=system_u:system_r:cyrus_t:s0 tcontext=user_u:obj
Google actually didn't help much here, at least with the first pages of results, so I went hunting and discovered a command in Fedora 7: audit2allow. Basically, you give it the log with the errors and it will tell you the rules you need to add or even build a module you can easily load into SElinux. I chose the latter, creating a single module called mailserver for several services pertaining to running a mail server. This is what I did:

audit2allow -i /var/log/messages -M mailserver

which creates the module, and then

semodule -i mailserver.pp

to load that module. And it worked. That easy!

I've upgraded Fedora Core 6 (FC6) to Fedora 7 (FC7) with yum three times now I think and my last attempt was riddled with problems, so I thought I'd try to document my problems a little.My first attempt went well, except that afterwards I scanned my rpm database for FC6 packages so I could remove them (rpm -qa | grep fc6). I had done the same with FC5 packages when I upgraded to FC6. Well, it turned out that FC7 actually included packages labeled with the fc6 tag that they decided weren't worth renaming. So, I basically screwed up my box my removing all those and ended up just reinstalling from a CD.My second attempt was on a mail server and it actually went pretty well except that it changed a db version for my users IIRC and it took some help from a friend to get it going.This time, the upgrade took about 2 days and a lot of fighting as I tried to make it work. I started by following this page, and upgrading the fedora version RPMs. I then did the yum -y update and it failed over and over on dependencies, saying mostly that it didn't have python(abi) = 2.4. That should be included in the python 2.4 package, but it appears it is missing in my python pkg. Short solution (after a day) was to upgrade python itself with yum -y update python. It failed too on the python version, but I just uninstalled a few packages that depended on it (like livna-config-display) and kept note of those. Once python was updated, everything else updated fine. I also got a bunch of strange HDD errors during the upgrade, which killed it several times, but I moved my yum cache (/var/cache/yum) to a different directory and sector on the HDD (by tarring it up and untarring it elsewhere) and that seemed to fix the problem.So I was good to go, except that the system now wouldn't boot. It would give me errors like these:Unable to access resume device (/dev/hda3)
Creating root device
Mounting root filesystem
mount: could not find filesystem '/dev/root/'
Setting up other filesystems
Setting up new root fs
setuproot: moving /dev failed: No such file or directory
no fstab.sys, mounting internal defaults
setuproot: error mounting /proc: No such file or directory
setuproot: error mounting /sys: No such file or directory
Switching to new root and running init.
unmounting old /dev
unmounting old /proc
unmounting old /sys
switchroot: mount failed: No such file or directory
Kernel panic - not syncing: Attempted to kill init!I had to remove the "quiet" keyword from the grub boot line to see the real problem - and that's where I saw that it had converted my drives from IDE to SCSI notation (hda ->sda). Once I saw that, I could go in and edit my grub config file and the /etc/fstab file and was good to go. Now I need to find out why starting Google Earth restarts my X server!Hopefully, someone wlse will find this useful too.