July 2020 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Web attacks on the rise with php and sql injection attempts
by David C. Rankin 23 Jul '20

23 Jul '20

Just a heads up to those running web servers, May want to check logs for last day or two as there have been a number of attacks in the past few days (may be all days and they just got to me...) Look for attempts with: /index.php?s=/module/action/param1/${@die(sha1(xyzt))} /index.php/module/action/param1/${@die(sha1(xyzt))} /index.php?s=/Index/x5Cthinkx5Capp/invokefunction&function=call_user_func_array&vars[0]=sha1&vars[1][]=xyzt Which I'm still working to totally understand, but it is apparently an attempt to provide GET code to enable compromising your site. As usual RIPE is the prime candidate, with attacks coming from 54.38.81.0/24 54.196.169.0/24 Just something to keep an eye on. -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] What packages are there on opensuse dvd?
by Nikita Stepanov 22 Jul '20

22 Jul '20

-- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 7

[opensuse] Need an educated guess on installation "ex new" of Leap with encrypted /boot
by Stakanov 21 Jul '20

21 Jul '20

The system is old, thus not really running into the UEFI problem, but has a TMP, which governs also the HDD. So kind of "legacy with secure boot". Installation (as this is a laptop) should be as safe as possible, without going to far to put the boot partition onto a usb key, that would be overkill. I had so fare a /boot (unencrypted) and an LVM with / (root /home and swap) encrypted. I know that Leap has made some progress on this behalf and wanted to know: what are the available options for an encrypted install, what are advantages / disadvantages you think worth of notice and although I googled and found some, if you have some link with important information about this, feel free to share. File system: EXT4 on all partitions with exception of boot were it was up to now ext2. Space: it is a 500 GB disk with now /boot (400 mb), /swap 8GB (I have 8 GB of RAM and do often suspend to disk), /root 58 GB (this is a lot, but given all the debug libraries and that I have a lot of software installed, makes the system safe for some "upgrades"). /home (403 GB). I am looking forward on suggestions about available options. Regards. Thank you. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 12

[opensuse] I am confused about btrfs default subvolume
by Bill Merriam 20 Jul '20

20 Jul '20

I noticed this on 15.2 but I think it worked the same way on 15.1. The default subvolume always seems to be snapshot 1 even though that is not the most recent snapshot. btrfs sub get-default / ID 265 gen 6686 top level 264 path @/.snapshots/1/snapshot Indeed that is what gets mounted (apparently) on root. /dev/mapper/system-root152 on / type btrfs (rw,relatime,ssd,space_cache,subvolid=265,subvol=/(a)/.snapshots/1/snapsh ot) Every time zypper installs updates it makes new before and after snapshots and I would think the default subvolume and the currently mounted subvolume would need to be the NEW snapshot, not snapshot 1. Nevertheless (a very fancy word) the system seems to work just fine so I think I just don't understand default subvolumes. I have read the opensuse wiki about btrfs, subvolumes and snapshots and I have read the kernel wiki about that. It always makes me think the newest snapshot is the one used. Is there an explaination for this somewhere? Can someone on the list explain it? Is snapshot 1 and the newest snapshot the same thing? Thanks. Bill -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] Questions about NetworkManager in LEAP 15.2
by Moby 20 Jul '20

20 Jul '20

I just upgraded a Leap 15.1 machine to 15.2. I am using NetworkManager to manage networking on that machine. Prior to the upgrade, I was able to see DHCP lease information in /var/lib/NetworkManager/dhclient*.lease files. After the upgrade, I see /var/lib/NetworkManager/internal*lease file, but it contains just the IP address and no other information that was obtained via DHCP. I see that I can obtain all the DHCP information via nmcli device show. My question is where is this information stored? Or is all the information kept in memory now by NetworkManager and only the address is written to the internal*lease file (this seems hard to believe, I would think NetworkManager would want to store the leased IP and, at a minimum, DNS and gateway information as well). The installation of NetworkManager is pretty much out of the box, no custom dhcp client etc. is configured to be used by NetworkManager. Thank you in advance for your help, --Moby -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 4

[opensuse] TBird 68 - What font size controls preview of collapsed threaded messages in reader pane?
by David C. Rankin 19 Jul '20

19 Jul '20

All, I can't find a way to change the font size for the collapsed message preview in the reader pane on Thunderbird 68. In 52 size was normal, but after update to 68, the font is 6pt (tiny) https://paste.opensuse.org/28750045 Any ideas. I've been through all the "font" entries in the config_editor (what few are left) and I've tried all that seem remotely relevant and no change. ?? -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] Is there a way of "governing" that "Software Updates" pop-up ?
by Per Jessen 19 Jul '20

19 Jul '20

I know I can switch it off (we always do), but I get annoyed with it popping up every 30mins when I've already closed it. Is there no "leave up for X min" option? -- Per Jessen, Zürich (19.1°C) http://www.cloudsuisse.com/ - your owncloud, hosted in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 5

[opensuse] A feedback on quality of 15.2 after update on a long standing productive system (15.0 - 15.1 now 15.2)
by Stakanov 19 Jul '20

19 Jul '20

If you are using Kontact and Kmail with Akonadi: my sincere advice is to avoid absolutely to upgrade. I my personal experience this system is of low quality, I discover every day bugs that are causing data loss and the whole PIM suite is substantially unusable. As I am writing you I have to wait for the overloaded computer to respond, the last 5 crashes within the last 30 minutes have left already their traces. I hope I will finish this letter without. Indexes are indexing forever, calendar data cannot be read. If Korganizer directory is change of place: total data loss. The situation gets even worse when Firefox uses e.g. a database using rss plugin. But it crashes also without. As for me PIM function is important and these bugs also cause total overheat of the machine and emergency shutdown in some cases, I am meditating to go back to 15.1 in the hope to sit it out until a working version in 8 month or maybe to hop from 15.1 to 15.3 when it will be available. If you work little with akonadi and your data is small and insignificant, you may not experience all these problems. But if you base yourself on a safe and reliable KDE PIM and a working system, you may consider, especially if you are on an "older system" that has been updated in the past, NOT to do the upgrade. YMMV, this is just a warning to make a good backup (which I fortunately have) and to have a lot(!) of patience, as, in my opinion, the quality of this upgrade is insufficient to get your work done. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 13

[opensuse] Oh the pain of Gtk+3. Moved Tbird from 52.9 to 68
by David C. Rankin 19 Jul '20

19 Jul '20

Enough said, Never confuse activity with accomplishment. They are only related if the activity has clear purpose that results in a substantial benefit. -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] [Leap 15] SSH & Raspberry Pi
by Bob Williams 19 Jul '20

19 Jul '20

I have two Raspberry Pi Zeros in my intranet. I would like to be able to ssh into them, but every time I try from this desktop machine, I get a 'Permission denied (publickey,password)' error. I have searched most of google space, and all answers seem to come down to either settings in the server's /etc/ssh/sshd_config file or permissions on the ~/.ssh folder and ~/.ssh/authorized_keys file. I have followed every suggestion, but none have worked. OTOH, using Juice on my Android phone, I can get in straightaway with sshing to pi@raspberrypi. I am asked for user pi's password, and then I'm in. Thereafter, that connection works without the password. What's the difference between the openssh on Leap 15.2 and Android's Juice app? And how can I get ssh access working from my desktop? I can provide further details if required, eg server settings, sshd_config settings. -- Bob Williams System: Linux 5.3.18-lp152.20.7-default Desktop: KDE Frameworks: 5.71.0, Qt: 5.12.7 and Plasma: 5.18.5 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 8