Fix ImageMagicK Policy Error

Fix ImageMagicK Policy Error

June 27,2019 by MAhmadZ

Fix ImageMagicK Policy Error

Converting documents from JPG to PDF or vice versa, compressing and scaling images is a relatively common task for me. After installing the required ImageMagick package in Ubuntu, I tried running the convert command but to my surprise, got the following error message:

$ convert source.jpg destination.pdf
convert-im6.q16: attempt to perform an operation not allowed by the security policy `PDF' @ error/constitute.c/IsCoderAuthorized/408.

After little searching I found the resolution as mention below.

Steps to Follow

Open the Terminal on type the command:

$ sudo vim /etc/ImageMagick-6/policy.xml

You will get the output based on the devices attached to you system:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE policymap [
  <!ELEMENT policymap (policy)+>
  <!ATTLIST policymap xmlns CDATA #FIXED ''>
  <!ELEMENT policy EMPTY>
  <!ATTLIST policy xmlns CDATA #FIXED '' domain NMTOKEN #REQUIRED
  Configure ImageMagick policies.

  Domains include system, delegate, coder, filter, path, or resource.

  Rights include none, read, write, execute and all.  Use | to combine them,
  for example: "read | write" to permit read from, or write to, a path.
  Rules are processed in order.  Here we want to restrict ImageMagick to only
  read or write a small subset of proven web-safe image types:

    <policy domain="delegate" rights="none" pattern="*" />
    <policy domain="filter" rights="none" pattern="*" />
    <policy domain="coder" rights="none" pattern="*" />
    <policy domain="coder" rights="read|write" pattern="{GIF,JPEG,PNG,WEBP}" />
  <!-- <policy domain="system" name="shred" value="2"/> -->
  <policy domain="coder" rights="none" pattern="PS" />
  <policy domain="coder" rights="none" pattern="EPS" />
  <policy domain="coder" rights="read | write" pattern="PDF" />
  <policy domain="coder" rights="none" pattern="XPS" />

The only change is the highlighted line in which none was replaced with read | write and the file was saved. Now running the convert command again worked as expected 👍🏼

Enable/Disable Dell XPS Touchpad with Ubuntu

Enable/Disable Dell XPS Touchpad with Ubuntu

June 23,2019 by MAhmadZ

Enable/Disable Dell XPS Touchpad with Ubuntu

The first time I purchased Dell's XPS 13 notebook was in 2015 and couldn't be more satisfied. Now I own Dell XPS 13 9380 with Ubuntu 18.04 pre-installed. After initial testing the hardware, I immediately installed a fresh 19.04 and everything was well supported.

However there is no proper was of enabling or disabling the Touchpad. In the Knowledge Base provided by Dell, there is no mention of Ubuntu even though the OS is officially supported. Dell had another link to the Linux issue which didn't look easy to follow. So I am sharing a more simpler fix.

Steps to Follow

Open the Terminal on type the command:

$ xinput list

You will get the output based on the devices attached to you system:

⎡ Virtual core pointer                          id=2    [master pointer  (3)]
⎜   ↳ Virtual core XTEST pointer                id=4    [slave  pointer  (2)]
⎜   ↳ ELAN2930:00 04F3:2930                     id=10   [slave  pointer  (2)]
⎜   ↳ Logitech MX Anywhere 2S                   id=21   [slave  pointer  (2)]
⎜   ↳ DELL08AF:00 06CB:76AF Touchpad            id=11   [slave  pointer  (2)]
⎣ Virtual core keyboard                         id=3    [master keyboard (2)]
    ↳ Virtual core XTEST keyboard               id=5    [slave  keyboard (3)]
    ↳ Video Bus                                 id=6    [slave  keyboard (3)]
    ↳ Power Button                              id=7    [slave  keyboard (3)]
    ↳ Sleep Button                              id=8    [slave  keyboard (3)]
    ↳ Integrated_Webcam_HD: Integrate           id=9    [slave  keyboard (3)]
    ↳ Intel HID events                          id=12   [slave  keyboard (3)]
    ↳ Intel HID 5 button array                  id=13   [slave  keyboard (3)]
    ↳ Dell WMI hotkeys                          id=14   [slave  keyboard (3)]
    ↳ AT Translated Set 2 keyboard              id=15   [slave  keyboard (3)]
    ↳ Logitech MX Anywhere 2S                   id=22   [slave  keyboard (3)]

For my case DELL08AF:00 06CB:76AF Touchpad id=11 [slave pointer (2)] is line of which is telling me that the Touchpad is using the ID 11, Perfect!

Now all I have to do is to disable this device using the command:

$ xinput --disable 11

Try using the Touchpad and it will not respond. To enable it again:

$ xinput --enable 11

And its done! Just in case you want to get the details of this device, run the command:

$ xinput list-props 11

What if it didn't work?

In that case look for the Knowledge Base I have shared in the start and following those instructions.

Installing Ubuntu for Devices

Installing Ubuntu for Devices

February 26,2016 by fzfatima

Installing Ubuntu for Devices

I was installing ubuntu-sdk on my device, accidently I run sudo apt-get update and it broke some links and my phone become unusable. So i reinstall ubuntu OS on it.

In order to install ubuntu or to upgrade its channel, follow this tutorial.

Commands to be Executed

Open the Terminal on Ubuntu Desktop.

Install the ubuntu-device-flash package

The ubuntu-device-flash package is main tool for installing Ubuntu for devices. Install the package:

sudo apt-get install ubuntu-device-flash

Install phablet-tools package

The phablet-tools package provides a Desktop tools useful when working with a USB-connected Ubuntu device.

sudo apt-get install phablet-tools

Installing ubuntu-device-flash also adds two important Android tools you frequently use: adb and fastboot

Supply a recovery image with adb enabled, which ubuntu-device-flash will use temporarily while doing its work

  • For BQ Aquaris E5 Ubuntu Edition (aka vegetahd), use recovery-vegetahd.img

    ubuntu-device-flash can then be supplied with the --recovery-image argument, eg:

    ubuntu-device-flash touch --channel ubuntu-touch/stable/bq-aquaris.en --bootstrap --recovery-image path/to/downloaded/recovery.img

    Note that when the command prompts you with:

    Expecting the device to be in the bootloader... waiting

    You can put a Aquaris E5 in the bootloader by holding down Power + Volume Up for a few seconds, releasing the Power button when the red LED lights as the machine reboots, and then selecting fastboot from the device's boot menu.

    And its done !!

Sync UbuntuTouch Contacts & Calendar with ownCloud

Sync UbuntuTouch Contacts & Calendar with ownCloud

November 21,2015 by mahmadz

Sync UbuntuTouch Contacts & Calendar with ownCloud

UbuntuTouch (also called UbuntuPhone) is new and under active development. One usual expectation from any user is to be able to sync data with services. As of today, it comes with the ability sync with Google only. Problem is Google is really deep and evil when it comes to surveillance. So I tried to sync with my ownCloud and here is what I had to do:

Tools Required

  1. ownCloud server running which would be accessible from the Internet with Contacts and Calendar App installed (whichever is required for sync).
  2. SyncEvolution which is now pre-installed in UbuntuTouch.
  3. Terminal App on your device.

Commands to be Executed

  1. Open the Terminal App on your UbuntuTouch device.

  2. Tell SyncEvolution about your ownCloud server and its details:

    syncevolution --configure --keyring=no --template webdav username=USERNAME password='PASSWORD' syncurl="YOURSERVER.COM/owncloud" target-config@owncloud

    If you are using a self signed certificate, you can use the SSLVerifyServer="0" option to ignore its verification (although this is a security risk):

    syncevolution --configure --keyring=no --template webdav username=USERNAME password='PASSWORD' syncurl="YOURSERVER.COM/owncloud" SSLVerifyServer="0" target-config@owncloud

    Another alternate is to download the certificate and place it in on your UbuntuTouch device. Add the SSLServerCertificates switch to specify the location of the certificate:

    syncevolution --configure --keyring=no --template webdav username=USERNAME password='PASSWORD' syncurl="YOURSERVER.COM/owncloud" SSLServerCertificates="/home/phablet/YOURCERTIFICATE.crt" target-config@owncloud
  3. Now tell SyncEvolution about your phone

    syncevolution --configure --template SyncEvolution_Client sync=none syncURL=local://@owncloud username= password= owncloud
  4. To configure synchronization for:

    a. Contacts:

    syncevolution --configure --template webdav database=https://YOURSERVER.COM/owncloud/remote.php/carddav/addressbooks/USERNAME/contacts backend=carddav target-config@owncloud contacts
    syncevolution --configure sync=two-way backend=contacts database=Personal owncloud contacts
    syncevolution --sync slow owncloud contacts

    b. Calendar:

    syncevolution --configure --template webdav database=https://YOURSERVER.COM/owncloud/remote.php/caldav/calendars/USERNAME/personal backend=caldav target-config@owncloud calendar
    syncevolution --configure sync=two-way backend=calendar database=Personal owncloud calendar
    syncevolution --sync slow owncloud calendar
  5. Once the data is synchronized for the first time, you can use the normal commands:

    syncevolution owncloud contacts
    syncevolution owncloud calendar


I prefer putting all there commands in a script file on my PC and then copy/execute it on the UbuntuTouch device. 👍

I took help from the following links:


Let me know what worked for you 😊

How to execute bash script at upstart

How to execute bash script at upstart

October 29,2015 by fzfatima

How to execute bash script at upstart

In this tutorial, we will learn how to execute a bash script at upstart.

What is Upstart?

Upstart is an event-based replacement for the /sbin/init daemon which handles starting of tasks and services during boot, stopping them during shutdown and supervising them while the system is running.


Create a Job in /etc/init.

sudo gedit /etc/init/sync_user.conf

Job configuration files are named as <name>.conf

Add the following lines to sync_user.conf

start on filesystem and net-device-up IFACE!=lo
  stop on runlevel [016]

  exec bash -c 'path_to_bash_script_file/file_name start'
end script

To ensure that you haven't misused the Upstart syntax, use the init-checkconf command:

init-checkconf sync_user.conf

Then start the job

sudo start sync_user

Understating the code

Start on condition:

start on filesystem and net-device-up IFACE=lo

Job will be started when the filesystem is mounted and net-device-up IFACE=lo event, which signifies the local network (for example, for IPv4) is available.

Stop on conditon:

stop on runlevel [016]

This ensures the job will be stopped on shutdown[0], when switching to single-user mode[1] and on reboot[6].

Runlevels for Debian and Ubuntu systems are generally as follows:

  0 : System halt.
  1 : Single-User mode.
  2 : Graphical multi-user plus networking (DEFAULT)
  3 : Same as "2", but not used.
  4 : Same as "2", but not used.
  5 : Same as "2", but not used.
  6 : System reboot.


All job files must have either an exec or script stanza. This specifies what will be run for the job.

  exec bash -c '/opt/local/our-sync-pkg-2.0/sync_users start'
end script

exec gives the path to a binary on the filesystem and optional arguments to pass to it.

Executing bash script

By default, Upstart uses "/bin/sh" to execute script sections. You can change the default shell.

But it can done in simplest way by executing this line:

exec bash -c '/opt/local/our-sync-pkg-2.0/sync_users start'

bashin exec is used because we're executing the bash script.

-c option after bash means that commands are read from string.

end script will terminate the script.

This will work! If you have any suggestions on improving this post, let me know.

Simplest way to create debian package via fpm

Simplest way to create debian package via fpm

September 17,2015 by owaishanif786

Simplest way to create debian package via fpm

Debian Packaging

In this tutorial we will look through how to package some simple hello world script. A quote from debian maintainer's guide:

One thing is certain, though: to properly create and maintain Debian packages takes many hours. Make no mistake, for our system to work the maintainers need to be both technically competent and diligent.

We have many methods to create a Debian package In this tutorial we will use FPM.


This method requires minimum effort follow this if you don't want to upload to PPA. However it requires ruby gem and package name FPM. check wiki for further details.

mkdir -p ~/via-fpm/debian/usr/bin/
cd ~/via-fpm/debian/
touch ~/via-fpm/debian/usr/bin/
gedit ~/via-fpm/debian/usr/bin/

Add following lines to script.

echo "hello debian packaging via fpm"

Save and close that file. whatever folder structure you will put in your source folder it will automatically copied into respected folders. There is no need to to copy them. For example if you want to put some sources file in /opt/local/sources then you must have same structure in you application source. Similarly usr/bin/ files will automatically copied to their respected folder in this case that will be /usr/bin.

Next we will come towards the scripts that will automatically run like preinstall , post install , pre un-install and post un-install . If you want to create user, directories, set permissions then these scrips are for you. You can use bash here. In this demo we will use "postinst" script to set permission for ~/via-fpm/debian/usr/bin/ create postint file in described location and add the following code.

mkdir -p opt/local/
touch opt/local/postinst
gedit opt/local/postinst

Set so that user can execute command from shell.

set -e
sudo chmod +x ~/via-fpm/debian/usr/bin/ 
exit 0

It't time for packaging.

cd ~/via-fpm
fpm --epoch 1 -s dir -e -C debian \
-a all -m "uncle demo <>" \
--description "our absurd debian package for demo via fpm" \
-v 1.0  -t deb  -n hello-via-fpm --after-install debian/opt/local/postinst 

Switches that we have used and their meaning

-epoch: Used for epoch value is somehow versioning number
-e: Edit the package spec before building. (default: false)
-C: Change directory to here before searching for files
-a: The architecture name. Usually matches 'uname -m'. For automatic values, you can use '-a all' or '-a: native'. These two strings will be translated into the correct value for your platform and target package type.
-m: The maintainer of this package. (default: "djhaskin987@djhaskin987-S301LA")
--description: add description
-v: specify version number
-t: output type
-n: Name to give to the package
--after-install: file to run after post install

Why FPM:

Because it will automatically create necessary files like control, rules and lot other necessary stuff for you. There are other proper ways to do that using official Debian package management through which you can upload your package to PPA. That we will discuss in next demo.


To install that package either open via Ubuntu software center or run command sudo dpkg -i hello-via-fpm_1.0_all.deb


Now try to run command from shell to see that your package is installed now and further you can create your own with customizations.

Installing LibreOffice 5 in Ubuntu

Installing LibreOffice 5 in Ubuntu

August 24,2015 by MAhmadZ

Installing LibreOffice 5 in Ubuntu

The latest version of LibreOffice is here but unfortunately its not going to be available in Ubuntu 14.04 and 12.04 by default. But the good news is that we can upgrade existing version by typing these commands:

sudo add-apt-repository ppa:libreoffice/ppa
sudo apt-get update && sudo apt-get -y dist-upgrade

That should be enough! :-)

Disable Guest Account in Ubuntu

August 24,2015 by MAhmadZ

Ubuntu has a special account, named Guest, which allows access (login) to the system without asking for any password. Although there are limitation applied to this account but maybe its not always desirable to have it. These steps will help in disabling it (tested under 12.04 and 14.04):

Open the file /etc/lightdm/lightdm.conf and add the following line to it at the end:


If the file lightdm.conf is missing, then paste the following contents in the blank file:


Once thats done, restart the relevant service:

sudo restart lightdm

This should work!

Installing Ubuntu Updates on Multiple Systems

Installing Ubuntu Updates on Multiple Systems

February 27,2013 by MAhmadZ

Installing Ubuntu Updates on Multiple Systems

Today I was installing Ubuntu in my Olives School lab. There are 20 systems in total. After installing it in the first PC, I ran the Update and there were 443 of them which amounted for 337MB approx. As it can be imagined it took some time to get the first PC updated. This was clearly not what I was going to do with the rest and I had to come up with a solution.

When Ubuntu downloads these updates, it places them in /var/cache/apt/archives/ folder. In fact even after installing updates, they are not removed from the system. So a solution was simple:

  1. Copy all the downloaded packages to a USB

  2. On the next PC, run the command:

    sudo cp [path-to-usb]/* /var/cache/apt/archives
  3. Once all the files have been pasted, run the Update Manager tool and it will tell you that updates have been downloaded but not yet installed.

  4. Click on Install :-)

Tool to Manage Ubuntu Services

Tool to Manage Ubuntu Services

July 21,2010 by MAhmadZ

Tool to Manage Ubuntu Services

In an earlier post, I mentioned about the Runlevels in Ubuntu and how its different from the rest of the Linux family. Each Runlevel can be configured to start with certain services. A tool to manage the Services in Ubuntu is sysv-rc-config

This tool can be installed using the command:

sudo apt-get install sysv-rc-conf

Once installed, it can be used as:

sudo sysv-rc-conf

This tool will display all the services and the runlevels. You can easily choose which services to load and which not to. The screenshot shows how it will appear. To exit the tool, press q key.

Install Internet Explorer (IE) on Linux

Install Internet Explorer (IE) on Linux

May 19,2010 by MAhmadZ

Install Internet Explorer (IE) on Linux

Although I am not a fan of Internet Explorer but sometimes it cannot be ignored especially when few websites have limited their access to IE browsers only or some old websites with poor markup which only renders on IE.

Internet Explorer (IE 5, 5.5, 6 and 7) can be installed and run on any Linux distribution. The package can be found and downloaded from these links:


When installing IEs4Linux, the Linux X-Window may crash, giving you the following error message:

The program ‘’ received an X Window System error.
This probably reflects a bug in the program.
The error was ‘RenderBadPicture (invalid Picture parameter)’.
(Details: serial 5546 error_code 158 request_code 148 minor_code 7)
(Note to programmers: normally, X errors are reported asynchronously;
that is, you will receive the error a while after causing it.
To debug your program, run it with the –sync command line
option to change this behavior. You can then get a meaningful
backtrace from your debugger if you break on the gdk_x_error() function.)

The workaround this is to use the non-GUI, command based installation. To install use the command:

./ies4linux --no-gui

For further help:

./ies4linux --help

I hope the day comes when all of this is not required and we have a true cross-browser web.

Join FLV files in Ubuntu

May 19,2010 by MAhmadZ

When we download video from Youtube or any other website, 90% chances are you are watching them using Flash Video Player whose format is FLV. Some of the videos uploaded in Youtube are sliced into multiple parts especially when Youtube only allowed you to upload a video of maximum 10 minute duration.

There is a simple but useful way of joining these files into a single under Ubuntu.

First you will need to install the package:

sudo apt-get install avidemux

Next, keeping the audio/video encoding unchanged, just join them (change the filenames accordingly):

mencoder -forceidx -of lavf -oac copy -ovc copy -o output.flv clip1.flv clip2.flv clip3.flv

Google Chrome error – Your preferences can not be Read

Google Chrome error – Your preferences can not be Read

May 30,2010 by MAhmadZ

Google Chrome error – Your preferences can not be Read

Sometimes Google Chrome under Linux or Ubuntu gives the following error:

Your preferences can not be read. Some features may be unavailable and changes to preferences won’t be saved.

This is because the owner of the following files have been changed for some unknown reason: Under /home/[user]/.config/google-chrome/ the file Locale State and under /home/[user]/.config/google-chrome/Default the file Preferences.

Note: This tip works for Linux, for Windows the steps have not been personally tested.

If you are using Windows XP:

C:\Documents and Settings\[Username]\Local Settings\Application Data\Google\Chrome\User Data\Default

If you are using Windows 7:

C:\Users\[Username]\AppData\Local\Google\Chrome\User Data\Default

If you are using Linux:


Where user is the supposed name of the user.

To fix the problem, run the following commands (replacing user with the actual username):

sudo chown user:user /home/user/.config/google-chrome/Locale\ State
sudo chown user:user /home/user/.config/google-chrome/Default/Preferences

To fix the permissions in Windows, visit this link: How do I change folder and file Permissions?. Simply deleting the Google folder in the paths specified will also help.

InshAllah the problem will be solved!

Install Apache, PHP and MySQL on Ubuntu

April 29,2012 by MAhmadZ

Installing these packages on Ubuntu is very simple. Just execute the following commands and you will be done with everything.

Install Apache

sudo apt-get install apache2

Install PHP

sudo apt-get install php5 libapache2-mod-php5

Install MySQL (with Apache & PHP support)

sudo apt-get install mysql-server libapache2-mod-auth-mysql php5-mysql

Restart Apache

sudo /etc/init.d/apache2 restart

Install MySQL Query Browser

sudo apt-get install mysql-query-browser

Update for MySQL

MySQL has officially declared EOL (End of Life) for Query Browser. You can check it on

MySQL Workbench is its replacement and its now available in Ubuntu 12.04 repositories:

sudo apt-get install mysql-workbench

All features are supported by Workbench. Additionally you can check my answer on