February 2019 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Re: [PLEASE SPEAK UP] Disabling legacy file systems by default?
by Jim Henderson 13 Feb '19

13 Feb '19

On Wed, 13 Feb 2019 23:48:30 +1030, Rodney Baker wrote: > In my experience, most people have no idea about security and want their > computer to "just work". As long as their favourite games/word > processor/ spreadsheet/<insert generic app class here> work without > crashing, and their USB/portable hdd/<other removable storage devices> > and other hardware simply "plug'n'play", and they can click on > virus-and-malware-laden internet links to their hearts content (and they > can ask their friendly neighbourhood "IT guy" to fix it when they > inevitably break it), they're happy. > > Adding security features only gets in the way of most "users". That's > why >90% > of the worlds desktop/laptop computers are running Window$ (well, that > and the fact that most of them come pre-installed and most people don't > know any better). > > Your statement is likely correct of most Linux/MacOSX/<other Unix-based > OS> users, and most corporate IT staff, but certainly not "most people" > (IMHO). People are becoming much more aware of security issues these days. With the big breaches at Experian, Target, and others, average users are taking notice. When a coworker of mine is asked by friends (and parents of those friends) what they do, he says he works for a company that makes software that manages logins on the Internet. The most common response he gets was "oh, you make the Internet more secure?" These aren't IT people or tech professionals - they're end users who use computers as tools. The world is changing. People are becoming more security conscious, thanks to the big breaches, Wannacry, and other widespread security problems that have been on the increase over the past few years. Jim -- Jim Henderson Please keep on-topic replies on the list so everyone benefits -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] executables in home directory
by Istvan Gabor 13 Feb '19

13 Feb '19

Hello: The previous thread ([PLEASE SPEAK UP] Disabling legacy file systems) reminded me a question I wanted to ask for a while. Ext3/4 file system can be mounted with noexec option which prevents running executables from the filesystem. Mounting a users home directory as noexec could be a good measure against running downloaded malicious programs. Still one might want to be able to run executables from his home directory. Is it possible to prevent running executables in one directory and enable it in another on the same filesystem? Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] java application style properties
by Istvan Gabor 13 Feb '19

13 Feb '19

Hello: Is there any way to change a java application (jar) runtime style properties as a user, not as the application's developer? I think of something like qtconfig for qt applications or gtkrc file for gtk applications. I especially would like to change java application font size and window background color, if possible. Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] dynamic ip - checking for new address and emailing it
by gumb 13 Feb '19

13 Feb '19

I've mentioned this in threads once or twice before and I believe it was Per Jessen who proposed a wget one-liner, but after digging through the list archives and searching for an example, I'm not finding the exact thing I need. I need ssh access to a remote machine whose IP address is dynamic. Knowing nothing about scripting, I'd like to install a simple, minimal script on the remote machine that does the following: 1. checks on a regular basis, let's say every hour, for the current IP address 2. if the address has changed, and ONLY if it has changed, email me the new address I assume the address will need to be written to a file somewhere to be compared with on each check. Any suggestions? Cheers, gumb -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

9 35

[opensuse] expanding btrfs
by jdd＠dodin.org 13 Feb '19

13 Feb '19

Hello, After some error of mine I get a 42.3 btrfs root really full and so unable to run anything (not even booting). but... I have an other install (the one I use to write - Leap 15) and a available partition. my goal is to add this partition to the root to get room for subsequent operation. the simpler page I found is this one: https://www.thegeekdiary.com/how-to-resize-expand-a-btrfs-volume-filesystem/ (end of the page Add a new disk to btrfs volume) but I have a question. I have to make this action from my leap 15. Will this then allows me to boot my 42.3? What I mean: mount /dev/sdb1 /mnt # the actual 42.3 root btrfs device add /dev/sdb5 /mnt btrfs btrfs filesystem balance /mnt other reference: https://btrfs.wiki.kernel.org/index.php/Using_Btrfs_with_Multiple_Devices#A… (I don't need raid, just add to disk size) jdd -- http://dodin.org -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 4

[opensuse] catastrofic update
by jdd＠dodin.org 13 Feb '19

13 Feb '19

Hello, Just right now I tried update (zypper up) a 42.3 install and after some problems (part of them because the root part is too small and btrfs don't like it), I ended with... Tumbelweed... don't ask me why As I have an other partition with Leap 15, I went for it. There also the update went wrong because packman had a newer lib than kde didn't want, and in fine, kde was uninstalled this one I could reinstall kde... just to warn people... jdd -- http://dodin.org -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2

Re: [opensuse] https help
by Stevens 13 Feb '19

13 Feb '19

One article said to try the about:config and change the max TLS version to 3 instead of 4 (not really the version number but 4 is the newest). Anyway, it didn't work. So, once again: when I use a f-f connector and patch around the router and go direct from the ethernet radio to my ethernet in on my puter, I get these kinds of messages: "Error code: SSL_ERROR_RX_RECORD_TOO_LONG" or "Secure Connection Failed The connection to the server was reset while the page was loading. The page you are trying to view cannot be shown because the authenticity of the received data could not be verified." Interesting to note that when I was testing a few mins ago between tv shows, the Microsoft site https worked fine as did some other site but not many others. Had to put it back together so the Roku would work, will test more later. Again, no problem with router in the circuit. Whatever is the problem, it is with this computer, not the browsers. They do, after all, work fine as do all other network related programs until the router is bypassed. Firefox and Opera, I don't use Chrome. One thing I have not done is patch the ethernet radio out to the Win7 puter to see how it reacts. It may be tomorrow before I can do that during a time when the tv is back on the antenna. (not streaming) Mustn't work on the system whilst the customer is using it. ;-) Especially if it is THAT customer. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] yast2 configure display manager
by Richmond 13 Feb '19

13 Feb '19

yast2 configure display manager used to allow you to change the display manager, but it no longer works, although the option is still there. Google tells me I must use: sudo update-alternatives --config default-displaymanager Why is the option still in Yast2 if it doesn't work? Why this change? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

7 32

[opensuse] two identical machines, ntp sync is different?
by Per Jessen 12 Feb '19

12 Feb '19

Well, I'm 99% certain they are identical - one is in a cupboard 100 meters away, the other is right here on my desk. They are tiny ARM boards, Nanopi Neo Air. The ntp config: # egrep -v '^#|^$' /etc/ntp.conf restrict -4 default notrap nomodify nopeer noquery restrict -6 default notrap nomodify nopeer noquery restrict 127.0.0.1 restrict ::1 driftfile /var/lib/ntp/drift/ntp.drift # path for drift file logfile /var/log/ntp # alternate log file keys /etc/ntp.keys # path for keys file trustedkey 1 # define trusted keys requestkey 1 # key (7) for accessing server variables controlkey 1 # key (6) for accessing server variables multicastclient ff05::101 The ntp.keys files are identical. They are connected to the same wifi, although not to the same access point. On "nano1": (shortened) # ntpq -pn remote refid st t ====================================== *192.168.2.254 .DCFa. 1 u +fe80::202:a5ff: 192.168.2.137 2 b On "nano2": (shortened) # ntpq -pn remote refid st t ===================================== x192.168.2.254 .DCFa. 1 u xfe80::202:a5ff: 192.168.2.137 2 b Apparently the 'x' means: "source false ticker" I don't recall ever seeing this before. It's not critical, I'm just curious. I'm surely missing something, anyone want to point out what it is? -- Per Jessen, Zürich (2.5°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 9

[opensuse] USB startup stick
by A. den Oudsten 12 Feb '19

12 Feb '19

After 2019-02-01 update Thunderbird and Firefox could not make connection with Internet anymore. I want to make now a startup USB stick, but the snapshot file 2019-02-05 is too big to copy to the USB stick. In earlier snapshots was a program in the applications - the name I forgot - that made it possible to make a startup stick. How can I solve this problem? T.i.a. André den Oudsten -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

7 13