http://bugzilla.opensuse.org/show_bug.cgi?id=1074097
Bug ID: 1074097
Summary: RN: "systemctl stop apparmor" intentionally broken
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 15.0
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Release Notes
Assignee: sknorr(a)suse.com
Reporter: suse-beta(a)cboltz.de
QA Contact: lnussel(a)suse.com
Found By: ---
Blocker: ---
Please add this information about AppArmor to the Leap 15 release notes
(copy&paste from
https://blog.cboltz.de/archives/77-AppArmor-2.12-The-Grinch-is-confined!.ht…
and assuming that Leap 15 will pick up AppArmor 2.12 or newer)
---
One important change in the [AppArmor 2.12] packages is that I intentionally
broke "systemctl stop apparmor". The reason for this is "systemctl restart
apparmor" - systemd maps this to stop, followed by start. This resulted in
unloading all AppArmor profiles by the "stop" part and, even if they get loaded
again a second later, running processes will stay unconfined unless you restart
them. The systemd developers were unwilling to implement the proposed
ExecRestart= option for unit files, therefore breaking "stop" is the best thing
I can do. (See boo#996520 and boo#853019 for more details.)
"systemctl reload apparmor" will continue to work and is still the recommended
way to reload the AppArmor profiles, but accidently typing "restart" instead of
"reload" can easily happen. Therefore I chose to break "stop" - that's
annoying, but more secure than accidently removing the AppArmor confinement
from running processes.
If you really want to unload all AppArmor profiles, you can use the new
"aa-teardown" command which does what "systemctl stop apparmor" did before -
but who would do that? ;-)
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1050519
Bug ID: 1050519
Summary: Description about kernel graphics update
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 42.3
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Release Notes
Assignee: sknorr(a)suse.com
Reporter: tiwai(a)suse.com
QA Contact: lnussel(a)suse.com
Found By: ---
Blocker: ---
Created attachment 733812
--> http://bugzilla.opensuse.org/attachment.cgi?id=733812&action=edit
Patch to release-notes.xml
Some information about Leap 42.3 kernel graphics update, as Ludwig suggested in
opensuse-factory ML.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1048692
Bug ID: 1048692
Summary: version downgrade of libgcj_bc1
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 42.3
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
Assignee: rguenther(a)suse.com
Reporter: lnussel(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
42.2 vs 42.3:
libgcj48: libgcj_bc1-4.8.5-24.14.x86_64 is older than
libgcj_bc1-6.2.1+r239768-5.5.2.x86_64
in 42.2 libgcj_bc1 came from libgcj-gcc6 which isn't in 42.3. What is correct
here?
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1048660
Bug ID: 1048660
Summary: LibreOffice 5.3.3 update: Type 1 (Postscript) fonts
are no longer supported.
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 42.2
Hardware: x86-64
OS: openSUSE 42.2
Status: NEW
Severity: Major
Priority: P5 - None
Component: Release Notes
Assignee: sknorr(a)suse.com
Reporter: bugrprt21882(a)online.de
QA Contact: lnussel(a)suse.com
Found By: ---
Blocker: ---
13th July 2017:
With the Leap 42.2 upgrade of LibreOffice from version 5.2.5 to version 5.3.3
the fact that, with version 5.3 LibreOffice has dropped support for Type 1
(Postscript) fonts was a not so pleasant surprise.
Please consider placing a note indicating that, LibreOffice as of version 5.3
no longer supports Type 1 (Postscript) fonts in the Release Notes.
Is also, possibly an issue for the Leap 42.3 Release Notes.
---------------------------------------------------------
I haven't found anything in the LibreOffice Release Notes indicating this
issue:
<https://www.libreoffice.org/download/release-notes/>
There's only this article in "Linux Magazine":
<http://www.linux-magazine.com/Online/Blogs/Off-the-Beat-Bruce-Byfield-s-Blo…>
There's information in this Document Foundation Bug Report: Bug 104701
<https://bugs.documentfoundation.org/show_bug.cgi?id=104701>
---------------------------------------------------------
There's possibly help for the folks (like me) with a suite of Type 1 fonts
here:
<https://slackbuilds.org/repository/14.2/system/afdko/>
Haven't tried to build the "Adobe Font Development Kit for OpenType" yet --
will happen later today.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1048392
Bug ID: 1048392
Summary: [doc] Extended Permission bits: Konqueror is also the
Plasma 5 version
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 42.3
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Release Notes
Assignee: sknorr(a)suse.com
Reporter: bugrprt21882(a)online.de
QA Contact: lnussel(a)suse.com
Found By: ---
Blocker: ---
3.2 Dolphin Does Not Set Extended Permission Bits
https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/42.3/#sec.gener…
Unfortunately, with Leap 42.3, Konqueror is also the Plasma 5 version and, it
also can not set the Extended Permissions bits . . .
Therefore, the Leap 42.3, CLI only to toggle the Extended Permission bits . . .
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1021059
Bug ID: 1021059
Summary: [s390x-port][Build0001] dependency issues when
installing default with kde
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: S/390-64
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Installation
Assignee: yast2-maintainers(a)suse.de
Reporter: mgriessmeier(a)suse.com
QA Contact: jsrain(a)suse.com
Found By: ---
Blocker: ---
Created attachment 710981
--> http://bugzilla.opensuse.org/attachment.cgi?id=710981&action=edit
y2logs
I'm trying to install Tumbleweed on s390x for the first time.
Default pattern and KDE as default desktop, resulting in following dependency
problems:
#### YaST2 conflicts list - generated 2017-01-20 10:15:31 ####
nothing provides libpfm.so.4()(64bit) needed by s390-tools-1.34.0-1.1.s390x
[ ] do not install grub2-2.02~beta3-16.1.s390x
[ ] break s390-tools-1.34.0-1.1.s390x by ignoring some of its dependencies
nothing provides plasma5-desktop needed by
patterns-openSUSE-kde_plasma-20151112-29.1.s390x
[ ] do not install pattern:kde-20151112-29.1.s390x
[ ] break patterns-openSUSE-kde_plasma-20151112-29.1.s390x by ignoring some
of its dependencies
nothing provides libicu57_1-bedata = 57.1 needed by libicu57_1-57.1-1.11.s390x
[ ] do not install ntp-4.2.8p9-1.2.s390x
[ ] break libicu57_1-57.1-1.11.s390x by ignoring some of its dependencies
nothing provides libicu57_1-bedata = 57.1 needed by libicu57_1-57.1-1.11.s390x
[ ] do not install xinetd-2.3.15-11.4.s390x
[ ] break libicu57_1-57.1-1.11.s390x by ignoring some of its dependencies
nothing provides libicu57_1-bedata = 57.1 needed by libicu57_1-57.1-1.11.s390x
[ ] do not install kernel-default-4.9.0-2.1.s390x
[ ] break libicu57_1-57.1-1.11.s390x by ignoring some of its dependencies
nothing provides libicu57_1-bedata = 57.1 needed by libicu57_1-57.1-1.11.s390x
[ ] do not install pattern:base-20151112-29.1.s390x
[ ] break libicu57_1-57.1-1.11.s390x by ignoring some of its dependencies
nothing provides libicu57_1-bedata = 57.1 needed by libicu57_1-57.1-1.11.s390x
[ ] do not install pattern:x11-20151112-29.1.s390x
[ ] break libicu57_1-57.1-1.11.s390x by ignoring some of its dependencies
#### YaST2 conflicts list END ###
see attached y2logs
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1045886
Bug ID: 1045886
Summary: ecryptfs problems with recent Tumbleweed
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Other
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: roger.whittaker(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
ecryptfs and the ecryptfs tools have stopped working correctly on recent
versions of Tumbleweed.
I noticed this because an existing ecryptfs Private directory could only be
seen after a local login. ecryptfs-mount-private over ssh stopped working.
On investigation, it is no longer possible to do ecryptfs-setup-private for a
new user.
$ ecryptfs-setup-private
Enter your login passphrase [roger]:
Enter your mount passphrase [leave blank to generate one]:
************************************************************************
YOU SHOULD RECORD YOUR MOUNT PASSPHRASE AND STORE IT IN A SAFE LOCATION.
ecryptfs-unwrap-passphrase ~/.ecryptfs/wrapped-passphrase
THIS WILL BE REQUIRED IF YOU NEED TO RECOVER YOUR DATA AT A LATER TIME.
************************************************************************
Done configuring.
Testing mount/write/umount/read...
Inserted auth tok with sig [83ecc1d632221288] into the user session keyring
Inserted auth tok with sig [90e42628446d371b] into the user session keyring
mount: No such file or directory
ERROR: Could not mount private ecryptfs directory
In the system logs we see:
2017-06-25T07:04:39.396038+01:00 [localhost] kernel: [140502.266628] Could not
find key with description: [90e42628446d371b]
2017-06-25T07:04:39.396052+01:00 [localhost] kernel: [140502.266630]
process_request_key_err: No key
2017-06-25T07:04:39.396054+01:00 [localhost] kernel: [140502.266631] Could not
find valid key in user session keyring for sig specified in mount option:
[90e42628446d371b]
2017-06-25T07:04:39.396056+01:00 [localhost] kernel: [140502.266631] One or
more global auth toks could not properly register; rc = [-2]
2017-06-25T07:04:39.396072+01:00 [localhost] kernel: [140502.266632] Error
parsing options; rc = [-2]
$ uname -r
4.11.6-1-default
$ grep VERSION_ID /etc/os-release
VERSION_ID="20170620"
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=941931
Bug ID: 941931
Summary: GRUB2 graphical menu is extremely slow
Classification: openSUSE
Product: openSUSE Factory
Version: 201505*
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Bootloader
Assignee: jsrain(a)suse.com
Reporter: jmatejek(a)suse.com
QA Contact: jsrain(a)suse.com
Found By: ---
Blocker: ---
Created attachment 643998
--> http://bugzilla.suse.com/attachment.cgi?id=643998&action=edit
screen showing output of vbeinfo
i'm using an AMD GPU and a 2560x1440 native display.
on this configuration, the GRUB2 UI is slow to the point of unusability; it
takes a full second to flip from one menu item to another, 3-5s just to display
the boot menu, before booting starts.
drawing the chameleon logo is visible line-by-line, too
lowering the resolution helps, at 1280x960x32 the speed is almost usable,
1280x960x16 is sluggish but OK (so i'm sticking with this resolution for now)
my GPU is reported as follows:
01:00.0 VGA compatible controller: Advanced Micro Devices, Inc. [AMD/ATI] Cape
Verde XT [Radeon HD 7770/8760 / R7 250X]
detected graphics modes are attached
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=1071230
Bug ID: 1071230
Summary: java installs symlinks that are not owned by a package
Classification: openSUSE
Product: openSUSE Distribution
Version: Leap 15.0
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Java
Assignee: bnc-team-java(a)forge.provo.novell.com
Reporter: lnussel(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
java packages install e.g /usr/bin/keytool managed by update-alternatives but
those files are not owned by any package. Since the symlink in /usr does not
actually change it should be owned by a package.
--
You are receiving this mail because:
You are on the CC list for the bug.
http://bugzilla.suse.com/show_bug.cgi?id=994084
Bug ID: 994084
Summary: Tracker bug: make packages own their symlinks in
/etc/alternatives/*
Classification: openSUSE
Product: openSUSE Tumbleweed
Version: Current
Hardware: Other
OS: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Basesystem
Assignee: bnc-team-screening(a)forge.provo.novell.com
Reporter: vcuadradojuan(a)suse.com
QA Contact: qa-bugs(a)suse.de
Found By: ---
Blocker: ---
This is a tracker bug for making all packages using update-alternatives
own their symlinks at `/etc/alternatives/*`.
Problem:
Currently there is a mix of owned and not owned files by packages
in `/etc/alternatives/*` (just look at `rpm -qf /etc/alternatives/*`).
Currently there seems to be a sizeable chunk of packages not declaring
`%ghost %_sysconfdir/alternatives/<binary>`, as specified at [1].
Also, see discussion on opensuse-factory m-l [2].
Once the mass bug filling for the issue is done, I will wait until
1 October for maintainers to action on the bugs, and afterwards
I will start fixing each package by hand.
Cheers,
[1] https://en.opensuse.org/openSUSE:Packaging_Multiple_Version_guidelines
[2] https://lists.opensuse.org/opensuse-factory/2016-08/msg00218.html
--
You are receiving this mail because:
You are on the CC list for the bug.