November 2015 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 530885] New: sshd fails to honour /etc/nologin presence when ssh keys used during login
by bugzilla_noreply＠novell.com 26 Dec '19

26 Dec '19

http://bugzilla.novell.com/show_bug.cgi?id=530885 Summary: sshd fails to honour /etc/nologin presence when ssh keys used during login Classification: openSUSE Product: openSUSE 11.1 Version: Final Platform: x86-64 OS/Version: openSUSE 11.1 Status: NEW Severity: Major Priority: P5 - None Component: Security AssignedTo: security-team(a)suse.de ReportedBy: liam.gretton(a)leicester.ac.uk QAContact: qa(a)suse.de Found By: --- User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-GB; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2 With the pam module pam_nologin in use, all non-root logins are supposed to be prevented if the file /etc/nologin exists. SSH fails to prevent user logins if /etc/nologin exists and the user authenticates with a key. Authentications with a password are successfully prevented, as expected. Reproducible: Always Steps to Reproduce: 1. Add pam_nologin to /etc/pam.d/login: auth requisite pam_nologin.so 2. Create /etc/nologin 3. Log in via SSH with a password. Login will be correctly prevented. 4. Log in via SSH with a key. Login is successful. Actual Results: SSH login with a key is not prevented by pam_nologin. Expected Results: SSH login with a key should be prevented by pam_nologin when /etc/nologin is present. openssh-5.1p1-40.15 pam-1.0.2-13.4 -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 12

[Bug 506831] New: /etc/init.d/sshd: incorrect usage of daemonstartproc ?
by bugzilla_noreply＠novell.com 26 Dec '19

26 Dec '19

http://bugzilla.novell.com/show_bug.cgi?id=506831 Summary: /etc/init.d/sshd: incorrect usage of daemonstartproc ? Classification: openSUSE Product: openSUSE 11.2 Version: Milestone 1 Platform: Other OS/Version: Other Status: NEW Severity: Minor Priority: P5 - None Component: Other AssignedTo: anicka(a)novell.com ReportedBy: puzel(a)novell.com QAContact: qa(a)suse.de Found By: Development # /etc/init.d/sshd restart Shutting down SSH daemon Starting SSH daemonstartproc: option -p does not work in force mode sshd daemon seems to work OK, though. reproducible: always -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 2

[Bug 880212] New: build cannot locate Net/SSL.pm in @INC
by bugzilla_noreply＠novell.com 26 Dec '19

26 Dec '19

https://bugzilla.novell.com/show_bug.cgi?id=880212 https://bugzilla.novell.com/show_bug.cgi?id=880212#c0 Summary: build cannot locate Net/SSL.pm in @INC Classification: openSUSE Product: openSUSE 13.1 Version: Final Platform: i686 OS/Version: openSUSE 13.1 Status: NEW Severity: Major Priority: P5 - None Component: Development AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: giecrilj(a)stegny.2a.pl QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:29.0) Gecko/20100101 Firefox/29.0 The package build requires the package Net::SSL, which is undeclared and nowhere to be found. Reproducible: Always Steps to Reproduce: 1. { build; } Actual Results: 1. [ 53s] Can't locate Net/SSL.pm in @INC (you may need to install the Net::SSL module) (@INC contains: /usr/lib/perl5/site_perl/5.18.1/i586-linux-thread-multi /usr/lib/perl5/site_perl/5.18.1 /usr/lib/perl5/vendor_perl/5.18.1/i586-linux-thread-multi /usr/lib/perl5/vendor_perl/5.18.1 /usr/lib/perl5/5.18.1/i586-linux-thread-multi /usr/lib/perl5/5.18.1 /usr/lib/perl5/site_perl .) at /usr/lib/build/download line 3. [ 53s] BEGIN failed--compilation aborted at /usr/lib/build/download line 3. Expected Results: 1. The build tool should be able to build. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 12

[Bug 827480] New: openSUSE:Tools: Bug
by bugzilla_noreply＠novell.com 26 Dec '19

26 Dec '19

https://bugzilla.novell.com/show_bug.cgi?id=827480 https://bugzilla.novell.com/show_bug.cgi?id=827480#c0 Summary: openSUSE:Tools: Bug Classification: openSUSE Product: openSUSE.org Version: unspecified Platform: Other OS/Version: Other Status: NEW Severity: Minor Priority: P5 - None Component: 3rd party software AssignedTo: adrian(a)suse.com ReportedBy: Rene.vanPaassen(a)gmail.com QAContact: opensuse-communityscreening(a)forge.provo.novell.com Found By: Other Blocker: No obs-service-source_validator.noarch 0:0.3-43.1 doesn't install on Fedora for lack of gpg2, which is called gnupg2 on Fedora To be solved by: %if 0%{?fedora_version} Substitute: gpg2 gnupg2 %endif in the meta file -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 2

[Bug 625552] New: openssh: inprove recommendation in "REMOTE HOST IDENTIFICATION HAS CHANGED" message
by bugzilla_noreply＠novell.com 26 Dec '19

26 Dec '19

http://bugzilla.novell.com/show_bug.cgi?id=625552 http://bugzilla.novell.com/show_bug.cgi?id=625552#c0 Summary: openssh: inprove recommendation in "REMOTE HOST IDENTIFICATION HAS CHANGED" message Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: Other OS/Version: Other Status: NEW Severity: Minor Priority: P5 - None Component: Basesystem AssignedTo: anicka(a)novell.com ReportedBy: sbrabec(a)novell.com QAContact: qa(a)suse.de Found By: --- Blocker: --- When remote host identification changes, following message appears: @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ @ WARNING: REMOTE HOST IDENTIFICATION HAS CHANGED! @ @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ IT IS POSSIBLE THAT SOMEONE IS DOING SOMETHING NASTY! Someone could be eavesdropping on you right now (man-in-the-middle attack)! It is also possible that the RSA host key has just been changed. The fingerprint for the RSA key sent by the remote host is ................ Please contact your system administrator. Add correct host key in /home/sbrabec/.ssh/known_hosts to get rid of this message. Offending key in /home/sbrabec/.ssh/known_hosts:1 RSA host key for ben has changed and you have requested strict checking. Host key verification failed. Following the message and opened known_hosts file, I found just an ASCII noise. Well, I tried to delete line 1 (guessing from the error message) and got this message: The authenticity of host 'foo (...)' can't be established. RSA key fingerprint is ............ Are you sure you want to continue connecting (yes/no)? yes Warning: Permanently added 'foo' (RSA) to the list of known hosts. Warning: the RSA host key for foo' differs from the key for the IP address '...' Offending key for IP in /home/sbrabec/.ssh/known_hosts:1 Are you sure you want to continue connecting (yes/no)? yes It would be nice to change the messsage and offer ssh-keygen -R or so. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 7

[Bug 776058] New: Go language - go get/install fails with permission denied
by bugzilla_noreply＠novell.com 26 Dec '19

26 Dec '19

https://bugzilla.novell.com/show_bug.cgi?id=776058 https://bugzilla.novell.com/show_bug.cgi?id=776058#c0 Summary: Go language - go get/install fails with permission denied Classification: openSUSE Product: openSUSE 12.1 Version: Final Platform: Other OS/Version: openSUSE 12.1 Status: NEW Severity: Major Priority: P5 - None Component: Development AssignedTo: bnc-team-screening(a)forge.provo.novell.com ReportedBy: graham(a)andtech.eu QAContact: qa-bugs(a)suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.4 (KHTML, like Gecko) Chrome/22.0.1226.0 Safari/537.4 SUSE/22.0.1226.0 With the Go 1.0.2 update, as a non priveleged user using the 'go' toolchain command to get/install a third party package from an SCM repo may fail with the message: go install runtime: open /usr/lib64/go/pkg/linux_amd64/runtime.a: permission denied The go build command somehow thinks the runtime .a archive is older than the runtime package source and so tries to rebuild the runtime package for linking. Known workarounds: 1. Pass the openSUSE specific -s flag to 'go get', 'go build' e.g. go get -s example.com/package 2. Update the file time on the runtime .a archive, as root do: find /usr/lib64/go/pkg -type f -exec touch {} + Reproducible: Always -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

1 11

[Bug 909912] New: install with encrypted partition lacks timeout parameter
by bugzilla_noreply＠novell.com 19 Dec '19

19 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=909912 Bug ID: 909912 Summary: install with encrypted partition lacks timeout parameter Classification: openSUSE Product: openSUSE Factory Version: 201412* Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: ohering(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 617054 --> http://bugzilla.suse.com/attachment.cgi?id=617054&action=edit boot-failure-1.jpg A fresh install which includes an encrypted partition does not include a timeout= parameter in crypttab (Not sure if thats the actual cause here!). The result is that one is FORCED to pay attention to the boot process to quickly enter the passphrase. Otherwise the user is presented with a black screen and geeky output. I wonder what the value is to not just sit there and wait forever for a passphrase, instead of enter failing state as its done now... If one grabs a translator to decode whats printend on the screen, ctrl D will not actually help. It asks for the password for a few seconds, then the bootsplash is started again. Nothing happens during that time. After a while the same geek screen is shown. -- You are receiving this mail because: You are on the CC list for the bug.

1 46

[Bug 947816] New: Failed to load kdump on openSUSE Leap
by bugzilla_noreply＠novell.com 16 Dec '19

16 Dec '19

http://bugzilla.opensuse.org/show_bug.cgi?id=947816 Bug ID: 947816 Summary: Failed to load kdump on openSUSE Leap Classification: openSUSE Product: openSUSE Distribution Version: 42.1 Beta 1 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Kernel Assignee: kernel-maintainers(a)forge.provo.novell.com Reporter: tiwai(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Loading kdump on openSUSE Leap beta1 failed. journal shows: kdump[7917]: Loaded kdump kernel: /sbin/kexec -p /boot/vmlinuz-4.1.6-10-desktop --append="quiet elevator=deadline sysrq=yes reset_devices acpi_no_memhotplug cgroup_disable=memory irqpoll nr_cpus=1 root=kdump disable_cpu_apicid=0 panic=1" --initrd=/boot/initrd-4.1.6-10-desktop-kdump -s, Result: kexec_file_load failed: Key was rejected by service load.sh[7861]: kexec_file_load failed: Key was rejected by service -- You are receiving this mail because: You are on the CC list for the bug.

1 34

[Bug 947747] New: npm: openssl fips failed
by bugzilla_noreply＠novell.com 11 Dec '19

11 Dec '19

http://bugzilla.suse.com/show_bug.cgi?id=947747 Bug ID: 947747 Summary: npm: openssl fips failed Classification: openSUSE Product: openSUSE Factory Version: 2015* Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Development Assignee: bnc-team-screening(a)forge.provo.novell.com Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I wanted to install something using npm and even "npm -v" fails. Fully upgraded system after "zypper in nodejs-npm": > npm -v openssl fips failed: error:2D06C06E:FIPS routines:FIPS_module_mode_set:fingerprint does not match Aborted Works fine on openSUSE 13.2. -- You are receiving this mail because: You are on the CC list for the bug.

1 17

[Bug 931168] New: dia documentation partially in wrong directory (+ broken symlinks)
by bugzilla_noreply＠novell.com 10 Dec '19

10 Dec '19

http://bugzilla.novell.com/show_bug.cgi?id=931168 Bug ID: 931168 Summary: dia documentation partially in wrong directory (+ broken symlinks) Classification: openSUSE Product: openSUSE Factory Version: 201505* Hardware: Other OS: openSUSE 13.2 Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: bnc-team-gnome(a)forge.provo.novell.com Reporter: suse-beta(a)cboltz.de QA Contact: qa-bugs(a)suse.de Found By: Beta-Customer Blocker: --- Besides the (correct) /usr/share/doc/packages/dia/ directory, there's also /usr/share/doc/dia/ (note the missing "packages" segment) which contains some $LANG/examples/*.dtd files. Also, /usr/share/doc/dia/html/ contains symlinks pointing to non-existing directories. Please move everything to /usr/share/doc/packages/dia/ and fix the html/* symlinks. -- You are receiving this mail because: You are on the CC list for the bug.

1 3