February 2023 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1208121] New: xrdp broken when updating TW to build 20230131 because of config location changes
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208121 Bug ID: 1208121 Summary: xrdp broken when updating TW to build 20230131 because of config location changes Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications Assignee: screening-team-bugs(a)suse.de Reporter: jmscdba(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- After updating from TW 20230104 to 20230131 I found that xrdp is no longer working Attempts to connect get connecting to sesman on 127.0.0.1:3350 sesman connect ok sending login info to session manager. Please wait... login failed for user joe The problem is related to the recent pam config location change from /etc/pam.d to /usr/lib/pam.d for the xrdp-sesman configuration file. It appears that something was missed which refers to the old location because if I copy the file back to /etc/pam.d then xrdp works fine. I was not sure which component to assign this to as I don't see xrdp or pam as component options for bug reports. TW 20230131 is using xrdp version 0.9.20-5.1. I just checked and TW 20230208 has version 0.9.20-5.2 but tried updating to that build and the issue still exists and the fix of copying the file back to /etc/pam.d also resolves the issue. Please update the package to reference the file from the new location. Thanks! -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1208362] New: nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208362 Bug ID: 1208362 Summary: nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: screening-team-bugs(a)suse.de Reporter: mmeisters(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Just wanted to report issue I encountered - messages look like: nvme nvme0: controller is down; will reset: CSTS=0xffffffff, PCI_STATUS=0x10 nvme0n1: detected capacity change from 7814037168 to 0 btrfs goes then to read only. If you have started early-shell (systemd.debug-shell=1) you can check dmesg what happened switching to ctrl+alt+F9. I added "nvme_core.default_ps_max_latency_us=0" and runs now for 3 weeks without any issues. Found here: https://lore.kernel.org/lkml/YnNeTsSzFJqEK%2Fs+@kbusch-mbp.dhcp.thefacebook… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1197556] New: gnome42 completely unusable on Lenovo P15
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1197556 Bug ID: 1197556 Summary: gnome42 completely unusable on Lenovo P15 Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs(a)suse.de Reporter: donald.vosburg(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Logging into GNOME on Lenovo P15 with DockStation results in hung system unable to launch applications. Keyboard and mouse become unresponsive, networking on dock gets disabled, and the only alternative is hard power-off. Using plasma on the same OS on the same hardware works perfectly. -- You are receiving this mail because: You are on the CC list for the bug.

1 20

[Bug 1208606] New: [SELinux] greetd/sway session runs too many applications in xdm_t context
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208606 Bug ID: 1208606 Summary: [SELinux] greetd/sway session runs too many applications in xdm_t context Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: filippo.bonazzi(a)suse.com Reporter: mcepl(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Created attachment 865083 --> https://bugzilla.suse.com/attachment.cgi?id=865083&action=edit Output of ausearch -m AVC -ts today With greetd-0.9.0-38.4.x86_64, gtkgreet-0.7-2.1.x86_64, sway-1.8.1-1.1.x86_64, selinux-policy-targeted-20221019-8.1.noarch I get stitny~$ ps auxZ|grep xdm_t system_u:system_r:xdm_t:s0-s0:c0.c1023 root 2464 0.0 0.0 3908 3668 ? SLs 18:14 0:00 greetd system_u:system_r:xdm_t:s0-s0:c0.c1023 root 2734 0.1 0.0 7512 7472 tty2 SLs+ 18:14 0:00 /usr/bin/greetd --session-worker 12 system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2755 0.0 0.0 7012 3172 tty2 S+ 18:14 0:00 /bin/sh /usr/bin/sway-run.sh system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2800 5.9 0.7 3089064 118052 tty2 Rl+ 18:14 0:00 sway system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2823 0.3 0.0 17124 9724 tty2 S+ 18:14 0:00 swaybg -o * -i /usr/share/wallpapers/default-1920x1080.jpg -m fill system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2834 3.3 0.3 1938976 61960 tty2 Sl+ 18:14 0:00 waybar -b bar-0 system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2836 0.0 0.0 6256 1540 ? S 18:14 0:00 swayidle -w timeout 300 swaylock -f -c 000000 timeout 600 swaymsg "output * dpms off" resume swaymsg "output * dpms on" before-sleep swaylock -f -c 000000 system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2856 0.0 0.0 7012 3216 ? S 18:14 0:00 sh -c tail -f $SWAYSOCK.wob | wob --config /etc/sway/wob/wob.ini system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2860 1.5 0.1 339372 27536 ? Sl 18:14 0:00 swaync --style /etc/sway/swaync/style.css --config /etc/sway/swaync/config.json system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2861 0.0 0.0 5568 1044 ? S 18:14 0:00 tail -f /run/user/1000/sway-ipc.1000.2800.sock.wob system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2862 0.0 0.0 2916 1100 ? S 18:14 0:00 wob --config /etc/sway/wob/wob.ini system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2890 0.0 0.0 7012 3152 ? S 18:14 0:00 sh -c tail -f $SWAYSOCK.wob | wob system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2896 1.2 0.1 337620 23484 ? Sl 18:14 0:00 /usr/libexec/polkit-gnome-authentication-agent-1 system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2897 0.0 0.0 5568 1000 ? S 18:14 0:00 tail -f /run/user/1000/sway-ipc.1000.2800.sock.wob system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2898 0.0 0.0 2944 1148 ? S 18:14 0:00 wob system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2900 0.0 0.0 2708 1056 ? S 18:14 0:00 wl-paste -t text --watch clipman store --histpath=~/.cache/clipman.json system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2989 0.0 0.0 7012 3156 tty2 S 18:14 0:00 sh -c swaymsg -mrt subscribe '["input"]' | jq -r --unbuffered "select(.change == \"xkb_layout\") | .input | select(.type == \"keyboard\") | .xkb_active_layout_name | .[0:2]" system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2994 0.0 0.0 2672 964 tty2 S 18:14 0:00 swaymsg -mrt subscribe ["input"] system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 2995 0.2 0.0 5084 3284 tty2 S 18:14 0:00 jq -r --unbuffered select(.change == "xkb_layout") | .input | select(.type == "keyboard") | .xkb_active_layout_name | .[0:2] system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3009 0.0 0.0 7012 3136 tty2 S 18:14 0:00 sh -c swaymsg -mrt subscribe '["input"]' | jq -r --unbuffered "select(.change == \"xkb_layout\") | .input | select(.type == \"keyboard\") | .xkb_active_layout_name | .[0:2]" system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3014 0.0 0.0 2672 964 tty2 S 18:14 0:00 swaymsg -mrt subscribe ["input"] system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3015 0.2 0.0 5084 3180 tty2 S 18:14 0:00 jq -r --unbuffered select(.change == "xkb_layout") | .input | select(.type == "keyboard") | .xkb_active_layout_name | .[0:2] system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3031 5.4 0.1 1135464 27864 ? Sl 18:14 0:00 foot system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3032 0.5 0.0 160620 8488 pts/0 Ss+ 18:14 0:00 /usr/bin/fish system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3044 0.0 0.0 81508 1092 ? Ss 18:14 0:00 gpg-agent --homedir /home/matej/.gnupg --use-standard-socket --daemon system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3051 0.0 0.0 7344 760 ? Ss 18:14 0:00 ssh-agent -c system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3069 7.1 0.1 1135476 24144 ? Sl 18:14 0:00 foot system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3070 1.3 0.0 164568 12428 pts/1 Ssl 18:14 0:00 /usr/bin/fish system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3099 7.2 0.1 1135332 24736 ? Sl 18:14 0:00 foot system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3100 0.8 0.0 160620 8512 pts/2 Ss+ 18:14 0:00 /usr/bin/fish system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3142 0.0 0.0 10980 4080 pts/1 R+ 18:14 0:00 ps auxZ system_u:system_r:xdm_t:s0-s0:c0.c1023 matej 3143 0.0 0.0 6584 2180 pts/1 R+ 18:14 0:00 grep --color=auto xdm_t stitny~$ I have SELinux in the Permissive mode. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1198547] New: power-profiles-daemon package is missing in Leap 15.4
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1198547 Bug ID: 1198547 Summary: power-profiles-daemon package is missing in Leap 15.4 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.4 Hardware: x86-64 OS: openSUSE Leap 15.4 Status: NEW Severity: Normal Priority: P5 - None Component: KDE Workspace (Plasma) Assignee: opensuse-kde-bugs(a)opensuse.org Reporter: opendreas(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- One of the main features of the new LTS Plasma was power profiles, but this package is missing in Leap 15.4. Is it possible to add it? -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1176566] New: Installing ignition leads to unbootable system
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1176566 Bug ID: 1176566 Summary: Installing ignition leads to unbootable system Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Critical Priority: P5 - None Component: MicroOS Assignee: kubic-bugs(a)opensuse.org Reporter: rombert(a)apache.org QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- I've installed ignition locally on Tumbleweed, to be able to validate ignition files locally. After a reboot I was presented with an emergency shell, leading down a wild goose chase for disabling ignition permanently. It all went away after setting up a chroot and removing all traces of ignition, but it would be much much better if installing it would not lead to a broken system by default. I saw some errors related to the ignition generator, and the systemd unit file was broken, but could not save any logs unfortunately. But it should be easy enough to reproduce if anyone cares: # zypper in ignition # reboot (Might be related to #1172592) -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1208141] New: CBLAS removed when going from Leap 15.2 to SLE based
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208141 Bug ID: 1208141 Summary: CBLAS removed when going from Leap 15.2 to SLE based Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: stefan.bruens(a)rwth-aachen.de QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- Leap up to 15.2 had a dedicated cblas package. With 15.3, this was silently dropped. Tumbleweed provides cblas from the (netlib-)lapack source package, which since Lapack 3.6.0 bundles cblas, and is the authoritative source. Unfortunately, SLE 15 (up to and including SP5) only provides Lapack 3.5.0. For some packages, CBLAS is a hard dependency, while for others (e.g. python-numpy) there are fallbacks which cause a slowdown of several orders of magnitude. -- You are receiving this mail because: You are on the CC list for the bug.

1 5

[Bug 1208684] New: Reconsider pam_kwallet security audit - and if already passed - add as a default.
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

http://bugzilla.opensuse.org/show_bug.cgi?id=1208684 Bug ID: 1208684 Summary: Reconsider pam_kwallet security audit - and if already passed - add as a default. Classification: openSUSE Product: openSUSE Distribution Version: Leap 16.0 Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: jlopez777+opensuse(a)gmail.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- It appears as though that due to security audits in the past, pam_kwallet wasn't able to make it default. Please consider a new audit. If a recent audit passed please let me know and I will figure out where to go next to figure out how to request this gets shipped default w/ plasma versions of TW. SOURCE of REQUEST: I found about this issue, and learned that this package would make life so much easier for so many users. LINK: https://bugzilla.opensuse.org/show_bug.cgi?id=1193348 "This will lead to the expected behavior of the kwallet automatically being unlocked on (manual) login. This package is included by default on the KDE versions of many other distributions (ex. Debian, Kubuntu) and is very convenient for users utilizing functionality that requires opening the wallet at login. For example, the user is prompted to set/enter their kwallet password immediately after login when connecting to a wireless network that does not have its keys saved globally. It seems like this would be a quality of life improvement for many users. For example, on the r/opensuse subreddit there are many posts complaining about KDE wallet asking for a password on every login (with the solution almost universally being to either install pam_kwallet or to set a blank/unencrypted KDE wallet password)" -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1208197] New: sbsign does not handle disk space issues
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1208197 Bug ID: 1208197 Summary: sbsign does not handle disk space issues Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: antonio.feijoo(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- `sbsign` does not issue any error if there is not enough disk space to create the signed file using its `--output` option. Example with enough disk space: # ls -l /var/tmp/dracut.hDT7WY/uefi/linux.efi -rwx------ 1 root root 88712928 Feb 13 12:01 /var/tmp/dracut.hDT7WY/uefi/linux.efi # mktemp -d /tmp/tmp.YC4iYlF8UF # mount -t tmpfs -o defaults,size=100M tmpfs /tmp/tmp.YC4iYlF8UF # sbsign --key /home/dev/sbsign/uefi-private.key --cert /home/dev/sbsign/uefi-public.pem --output /tmp/tmp.YC4iYlF8UF/test.img /var/tmp/dracut.hDT7WY/uefi/linux.efi warning: data remaining[88700416 vs 88712928]: gaps between PE/COFF sections? Signing Unsigned original image # sbverify --cert /home/dev/sbsign/uefi-public.pem /tmp/tmp.YC4iYlF8UF/test.img warning: data remaining[88702192 vs 88714704]: gaps between PE/COFF sections? Signature verification OK Example without enough disk space: # ls -l /var/tmp/dracut.9SDv5P/uefi/linux.efi -rwx------ 1 root root 88715488 Feb 13 10:23 /var/tmp/dracut.9SDv5P/uefi/linux.efi # umount /tmp/tmp.YC4iYlF8UF # mount -t tmpfs -o defaults,size=1M tmpfs /tmp/tmp.YC4iYlF8UF # sbsign --key /home/dev/sbsign/uefi-private.key --cert /home/dev/sbsign/uefi-public.pem --output /tmp/tmp.YC4iYlF8UF/test.img /var/tmp/dracut.9SDv5P/uefi/linux.efi warning: data remaining[88702464 vs 88714976]: gaps between PE/COFF sections? Signing Unsigned original image # echo $? 0 # sbverify --cert /home/dev/sbsign/uefi-public.pem /tmp/tmp.YC4iYlF8UF/test.img Segmentation fault (core dumped) -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1206570] New: [SELinux] rebootmgr: new features needs bash execution
by bugzilla_noreply＠suse.com 13 Mar '23

13 Mar '23

https://bugzilla.suse.com/show_bug.cgi?id=1206570 Bug ID: 1206570 Summary: [SELinux] rebootmgr: new features needs bash execution Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: MicroOS Assignee: kubic-bugs(a)opensuse.org Reporter: kukuk(a)suse.com QA Contact: qa-bugs(a)suse.de Found By: --- Blocker: --- rebootmgr get's a new feature: make the reboot command configureable, so that we could use kexec, too (https://github.com/SUSE/rebootmgr/issues/13) This requires that the policy for rebootmgr allows to execute a shell: type=AVC msg=audit(1671572322.755:93): avc: denied { execute } for pid=1445 comm="rebootmgrd" name="bash" dev="vda2" ino=43372 scontext=system_u:system_r:rebootmgr_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=0 -- You are receiving this mail because: You are on the CC list for the bug.

1 4