May 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1223538] [SELinux] Installing selinux-policy-targeted with recommends enabled brings in 600 packages
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223538 https://bugzilla.suse.com/show_bug.cgi?id=1223538#c3 Filippo Bonazzi <filippo.bonazzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(alex.bradatan85@y | |ahoo.it) | --- Comment #3 from Filippo Bonazzi <filippo.bonazzi(a)suse.com> --- Sorry, wrong copy-paste. The fix is on its way to Factory in https://build.opensuse.org/request/show/1171339 In the meantime, if you want you can test by installing setools from the devel project https://build.opensuse.org/package/show/security:SELinux/setools -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223538] [SELinux] Installing selinux-policy-targeted with recommends enabled brings in 600 packages
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223538 https://bugzilla.suse.com/show_bug.cgi?id=1223538#c2 Filippo Bonazzi <filippo.bonazzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |IN_PROGRESS Flags| |needinfo?(alex.bradatan85@y | |ahoo.it) --- Comment #2 from Filippo Bonazzi <filippo.bonazzi(a)suse.com> --- Fixed in https://build.opensuse.org/request/show/1171337 Can you test with the policy in security:SELinux? https://build.opensuse.org/package/show/security:SELinux/selinux-policy We have a couple of changes in the devel project which have not made their way to Factory yet ATM, we are still testing some large changes and Cathy is away for a couple of weeks. We hope to submit to Factory soon. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1189970] cleanup: remove or document patches.suse/scsi-retry-alua-transition-in-progress
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1189970 https://bugzilla.suse.com/show_bug.cgi?id=1189970#c5 Hannes Reinecke <hare(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hare(a)suse.com Assignee|hare(a)suse.com |martin.wilck(a)suse.com --- Comment #5 from Hannes Reinecke <hare(a)suse.com> --- Martin, can you have a look here? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223109] Booting issue after upgrade to kernel-default-6.8.6-1.1
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223109 https://bugzilla.suse.com/show_bug.cgi?id=1223109#c6 Jiri Slaby <jslaby(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jweberhofer(a)weberhofer.at --- Comment #6 from Jiri Slaby <jslaby(a)suse.com> --- *** Bug 1223691 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223691] New: Kernel Panic after plugging in a network cable
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223691 Bug ID: 1223691 Summary: Kernel Panic after plugging in a network cable Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Kernel Assignee: kernel-bugs(a)opensuse.org Reporter: jweberhofer(a)weberhofer.at QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Created attachment 874620 --> https://bugzilla.suse.com/attachment.cgi?id=874620&action=edit screenshot of bug Since some weeks my system is getting very unstable after plugging in a network cable. BOOT_IMAGE=/boot/vmlinuz-6.8.8-1-default The driver used is a Driver: "e1000e" Please tell me, what infos you need to analyze the problem. I have attached two screenshots. -- You are receiving this mail because: You are on the CC list for the bug.

1 2

[Bug 1222982] New: autoyast ask password no repeat
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1222982 Bug ID: 1222982 Summary: autoyast ask password no repeat Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.5 Hardware: x86-64 OS: openSUSE Leap 15.5 Status: NEW Severity: Enhancement Priority: P5 - None Component: AutoYaST Assignee: yast2-maintainers(a)suse.de Reporter: lars.bohl(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Hello, we could not figure out a good way to "ask" for a password. In this case, the user needs to input an existing password, not create a new one. Background information: If our pre-script detects a luks partition, we need to open it, to see if any logical subvolumes exist. On system upgrade, we want to preserve a logical subvolume with a certain label. The other subvolumes of the luks partition will be used for root and swap, so they will be erased. Current workaround (not ideal): Either use a "<password>" or use a basic text "ask". Both are not ideal. With a "<password>" field, the user has to type the password twice, which is unnecessary and confusing for a password input. The "basic text" approach is also not ideal, because the user will see their password on the screen as they type it. Note: We've been using this documentation: https://doc.opensuse.org/projects/autoyast/ We could not find a link to the source repository of the autoyast tool there. Thank you for any suggestions. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1223444] New virt-v2v dependency on btrfsprogs causes error with zypper dup on systems without btrfs installed
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223444 https://bugzilla.suse.com/show_bug.cgi?id=1223444#c7 --- Comment #7 from Rodney Baker <rodney.baker(a)iinet.net.au> --- (In reply to Claudio Fontana from comment #6) > (In reply to Rodney Baker from comment #5) > > Surely this can be dealt with through documentation and/or a warning: "You > > must have the relevant filesystem tools installed for the filesystems used > > by the guest VM you are about to convert", or words to that effect. > > No, It would be almost impossible for users to track down the nest of > runtime requirements. > > If you don't want virt-v2v, do not install it. > > If you want a functional virt-v2v, you need all required runtime > dependencies, or the conversions _will_ fail. Then be consistent and add "requires" for e2fsprogs, ntfsprogs and xfsprogs as well. After all, as you said, "If you want a functional virt-v2v, you need all required runtime dependencies, or the conversions _will_ fail." -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1211374] AUDIT-WHITELIST: deepin-app-services: new dbus services of deepin-app-services
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1211374 https://bugzilla.suse.com/show_bug.cgi?id=1211374#c15 --- Comment #15 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- Sorry to warm this up again, but looking into the D-Bus API once more, I see that it _still_ allows to open arbitrary JSON files. This still works through the `appid` argument: gdbus call -y -d org.desktopspec.ConfigManager -o / \ -m org.desktopspec.ConfigManager.acquireManager \ /../../../../../../../var/lib/nobody myfile myfile This results in the following strace calls in the daemon: [pid 3856] access("/usr/share/dsg/configs//../../../../../../../var/lib/nobody/myfile.json", F_OK) = 0 [pid 3856] openat(AT_FDCWD, "/usr/share/dsg/configs//../../../../../../../var/lib/nobody/myfile.json", O_RDONLY|O_CLOEXEC) = 8 Apart from this I wonder why the daemon user's home directory is world-readable: $ ls -lhd /var/lib/dde-dconfig-daemon drwxr-xr-x 6 dde-dconfig-daemon dde-dconfig-daemon 4.0K May 2 11:45 /var/lib/dde-dconfig-daemon Also the home directory contains the skeleton entries: $ find /var/lib/dde-dconfig-daemon dde-dconfig-daemon/ dde-dconfig-daemon/.bashrc dde-dconfig-daemon/.local dde-dconfig-daemon/.local/share dde-dconfig-daemon/.local/share/fonts dde-dconfig-daemon/.local/bin dde-dconfig-daemon/.local/state dde-dconfig-daemon/bin dde-dconfig-daemon/.emacs dde-dconfig-daemon/.bash_history dde-dconfig-daemon/.config dde-dconfig-daemon/.profile dde-dconfig-daemon/.inputrc dde-dconfig-daemon/.i18n dde-dconfig-daemon/.xim.template dde-dconfig-daemon/.cache dde-dconfig-daemon/.cache/deepin dde-dconfig-daemon/.cache/deepin/dde-dconfig-daemon dde-dconfig-daemon/.cache/deepin/dde-dconfig-daemon/dde-dconfig-daemon.log I'm not sure how that happens, but it is unclean. This is a service user that should not have these skeleton files or any other regular home directory data. The ".cache" directory has mode 0700 at least, so the log file found in there won't be world-readable at least. Please address the remaining D-Bus issue, also have a look into acquireManagerV2 if it contains any such problems. Also have a look into the home directory curiosity, if it can be improved. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1175678] complete packages --unneeded featureset (mostly "apt-mark auto")
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1175678 https://bugzilla.suse.com/show_bug.cgi?id=1175678#c13 --- Comment #13 from Michael Andres <ma(a)suse.com> --- (In reply to Moritz Duge from comment #12) > Unfortunately zypper is still missing an "apt-mark auto" equivalent > (workaround below). Yes, this together with a 'remove unneeded' got interrupted (again) by more urgent tasks. I hope we can finish it after the vacations. Also new and hopefully useful to cleanup orphaned/dropped packages: zypper dup --remove-orphaned > BY THE WAY: > I didn't know that one yet :-) > zypper install-new-recommends IMO best as `zypper inr --no-recommends`, so it's restricted to new hardware, filesystem and language supporting packages. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223673] kubernetes update
by bugzilla_noreply＠suse.com 02 May '24

02 May '24

https://bugzilla.suse.com/show_bug.cgi?id=1223673 Dan Čermák <dcermak(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |containers-bugowner(a)suse.de Assignee|containers-bugowner(a)suse.de |priyanka.saggu(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0