May 2017 - openSUSE Features - openSUSE Mailing Lists

[New: openFATE 320834] Create a /var/cache subvolume
by fate_noreply＠suse.de 17 May '17

17 May '17

Feature added by: Thorsten Kukuk (kukuk) Feature #320834, revision 1 Title: Create a /var/cache subvolume Requested by: Thorsten Kukuk (kukuk) Partner organization: openSUSE.org Description: On the openSUSE Factory list, somebody found a valid bug in our current setup for snapshots: /var/cache is part of the snapshot. This means: all RPMs used for an update are part of the snapshot and will be deleted only afterwards. This is a big problem if you regular update online, it will eat up your diskspace very fast. We need to add /var/cache to the list of directories, for which we create a subvolume with btrfs. And (that's why I created a FATE and no bug) we need to add something to the release notes, so that customers are aware of this and can create the subvolume at their own for existing installations. Business case (Partner benefit): openSUSE.org: Save disk space by excluding irrelvant/outdated cached data from snapshots. -- openSUSE Feature: https://features.opensuse.org/320834

1 28

[New: openFATE 320819] DHCPv6-PD - wicked
by fate_noreply＠suse.de 11 May '17

11 May '17

Feature added by: James Knott (james_knott) Feature #320819, revision 1 Title: DHCPv6-PD - wicked openSUSE Distribution: Unconfirmed Priority Requester: Important Requested by: James Knott (james_knott) Partner organization: openSUSE.org Description: With more & more ISPs providing IPv6 via DHCPv6, DHCPv6-PD support is essential. This is how a router determines the assigned prefix via DHCP. Later versions of dhcpc support DHCPv6-PD, but wicked apparently doesn't. https://tools.ietf.org/html/rfc3633 -- openSUSE Feature: https://features.opensuse.org/320819

1 3

[New: openFATE 319119] drop not functional yast2-ca-management
by fate_noreply＠suse.de 08 May '17

08 May '17

Feature added by: Michael Calmer (mcalmer) Feature #319119, revision 1 Title: drop not functional yast2-ca-management Requested by: Michael Calmer (mcalmer) Partner organization: openSUSE.org Description: yast2 ca-management cannot be maintained anymore. No resources. So let's drop it. -- openSUSE Feature: https://features.opensuse.org/319119

1 12

[New: openFATE 323349] common data source for yast2-country
by fate_noreply＠suse.de 05 May '17

05 May '17

Feature added by: Ludwig Nussel (lnussel) Feature #323349, revision 1 Title: common data source for yast2-country Requested by: Ludwig Nussel (lnussel) Partner organization: openSUSE.org Description: yast2-country has built in tables for console fonts, keyboard maps, default time zones etc. Live images for openSUSE have to duplicate that information. We should refactor the data into a common package that can be used by both the live images and yast. Example of such a data file from the live image: $ cat /etc/langset/es_ES RC_LANG: es_ES.UTF-8 CONSOLE_FONT: lat9w-16.psfu CONSOLE_SCREENMAP: trivial CONSOLE_UNICODEMAP: CONSOLE_MAGIC: (K KEYTABLE: es.map.gz YAST_KEYBOARD: spanish,pc104 COMPOSETABLE: clear latin1.add TIMEZONE: Europe/Madrid CONSOLE_ENCODING: UTF-8 Apply: -layout es -model microsoftpro -option terminate:ctrl_alt_bksp XkbLayout: es XkbModel: microsoftpro XkbOptions: terminate:ctrl_alt_bksp -- openSUSE Feature: https://features.opensuse.org/323349

1 3

[New: openFATE 323378] Sandboxing & desktop files
by fate_noreply＠suse.de 02 May '17

02 May '17

Feature added by: Sławomir Lach (Lachu) Feature #323378, revision 1 Title: Sandboxing & desktop files openSUSE Distribution: Unconfirmed Priority Requester: Important Requested by: Sławomir Lach (lachu) Partner organization: openSUSE.org Description: Currently, Plasma5/KDE ask to permission to run desktop file without executable flag. The idea is to add new button: ârun in sandbox modeâ if desktop file contains field: need_access_to_directories. Once app is first ran in sandbox mode, system checks existence of each directory in need_access_to_directories. If directory not exist, system creates it. If directory exist, system will ask user to give permission to access to this directory. If user accept that application should have access to each existing directory in list, but before creating it, the application will launch. If system doesn't create any directory, app will start. But, before application starts, apparmor profile is dedicated to application. And there's a gap. There's probably no user-side apparmor configuration script, because they could be insecure. It's thing to be changed. I don't know Desktop files allowing to insert script instead a path to script/elf file, but system should warn user if in Desktop file are inserted shell script. Additional point if we could assembly need_access_to_directories into elf files. Use Case: Martin downloads Firefox in tar archive, unpack and ran by clicking twice on icon, but system before launch Firefox, will create ~/.cache/mozilla/firefox, ~/.local/share/mozilla/firefox and ~/.config/mozilla/firefox. Firefox will have only access to these directories. If application needs access to /home/martin, system will ask for permission before first launch, because this directory already exist. Business case (Partner benefit): openSUSE.org: We need this to allow software vendors deliver rules to make user profile more secure and also system to protect user home from malware. -- openSUSE Feature: https://features.opensuse.org/323378

1 0