April 2007 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] cryptsetup, some old, big and fat disks with encryption=twofish256, ...
by Jochen Hayek 03 May '07

03 May '07

I have a few disks with fstab entries like this one: noauto,nocheck,acl,user_xattr,loop=/dev/loop0,encryption=twofish256,phash=sha512,itercountk=100 I would like to mount them under 10.3Alpha3 resp. SUSE Factory. cryptsetup's manual page says COMPATABILITY WITH OLD SUSE TWOFISH PARTITIONS To read images created with SuSE Linux 9.2's loop_fish2 use --cipher twofish-cbc-null -s 256 -h sha512, for images created with even older SuSE Linux use --cipher twofish-cbc-null -s 192 -h ripemd160:20 but if twofish-cbc-null is not listed in /proc/crypto , there is no way getting this working, right? And even after $ modprobe loop_fish2 Something like this didn't work any more $ losetup -e twofish256 -H sha512 -C 100 /dev/loop1 /dev/sdb1 but it does on 10.1 . Shall I just forget twofish256 and migrate all my encrypted disks? Cheers, Jochen P.S. Actually I really like the LUKS extensions to cryptsetup. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 3

[opensuse-factory] Permissions and security levels
by Volker Kuhlmann 03 May '07

03 May '07

SuSEconfig supports 3 different security levels for file permissions - easy, secure, paranoid. Default is easy. Is this still appropriate? The higher the security level, the more things stop working. I have considered "secure" a good choice for many years, and haven't seen any loss of functionality personally. However, suseupdater fails at "secure", displaying a yellow triangle with a bubble help of subprogram failed and mentioning suid. Is this advanced voodoo for experienced Susers only, does this want some adjustment, or a better explanation for less experienced users? Volker -- Volker Kuhlmann is list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 4

[opensuse-factory] Java packages changes for 10.3
by Daniel Bornkessel 03 May '07

03 May '07

Hi. In 10.3, regarding Java, we want to do the following changes: - tomcat5 will be replaced by tomcat55 - we have jboss and geronimo already ... our jonas package is outdated anyways ... thus, dropping: jonas jonas-client jonas-docs jonas-examples - the avalon framework does not exist anymore ... dropping: avalon-framework avalon-framework-javadoc avalon-framework-manual In order to clean openSUSE from non-oss packages, we want to do the following changes: - jai has strict licensing ... if there are no strong objections we would like to drop this package. - java-1.4.2-sun will be dropped, versions 1.5.0, 1.6.0 (DLJ licensed) and gcj-compat 1.4.2 will be included. The DLJ-license is a special lincense that was introduced by Sun in 2006 for re-distributors of Sun Java (see http://download.java.net/dlj/DLJ-FAQ.html) It's less strict and more precise on what is allowed and what is not regarding the re-distribution. Apart from that, nothing visible will change for the users -- Sun Java will still be in the openSUSE non-oss section. - the following packages will be replaced by gnu-javamail which has an open source license: javamail javamail-demo javamail-javadoc javamail-manual javamail-monolithic - the following packages will be replaced by gnu-jaf which has an open source license:: jaf jaf-demo jaf-javadoc jaf-manual - the following packages will be replaced by classpath-jta which has an open source license: jta jta-javadoc - the following packages will be replaced by mx4j which has an open source license: jmx jmx-javadoc The packages that get dropped due to their licenses are usually licensed with the Sun Binary license which is not really the type of license we want to include in openSUSE if free oss counterparts are available. Any thoughts and comments on this are very welcome :) Regards, Daniel --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

7 11

[opensuse-factory] More bugs?
by Volker Kuhlmann 02 May '07

02 May '07

Finally managed to install 10.3a3. 1) System failed to boot. The problem of using /dev/sdxxx instead of hdX in /boot/grub/menu.lst I believe is already fixed for a4. 2) A /etc/grub.conf of setup --stage2=/boot/grub/stage2 (hd0,6) (hd0,6) isn't going to work as it doesn't install an MBR loader, so it's always a boot failure. What's needed is setup --stage2=/boot/grub/stage2 (hd0) (hd0,6) At least the latter line makes is boot, the former hangs after "booting from local disk". Raid1 (/dev/mdX) for rootfs. Or is this a result of a failure caused by 1)? 3) The "list of installed drivers" (printer pppd files) is built after the printer can be configured during installation in the hardware config step. Does this constellation make sense? 4) During installation, I changed some monitor values (number of pixels, screen diagonal, Vrefresh) and tested afterwards. Worked fine. When the system goes to runlevel 5 after installation, the xorg.conf is way off the monitor and obviously running with who knows what. The configuring during installation was obviously pointless. Has someone seen this too? 5) Module ata_piix isn't good. It takes a huge amount of time during boot, showing timeouts and lowering DMA/PIO with each step. Not really useful. Setting that module as broken in the rescue system causes piix to be loaded instead; but then no /dev/sda* are created so it's useless. Volker -- Volker Kuhlmann is list0570 with the domain in header http://volker.dnsalias.net/ Please do not CC list postings to me. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

4 5

[opensuse-factory] Backup button on external (USB-) harddisks
by Marcel Hilzinger 02 May '07

02 May '07

Hi all, is there anybody working on a driver? I had already several disks with such a button here, but no idea, where to start... They do not send keycodes (tried showkey and xev). -- Mit freundlichen Grüßen, Marcel Hilzinger --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 2

[opensuse-factory] recompiled stock kernel modules take many X more disk space than modules from installed rpm
by Felix Miata 01 May '07

01 May '07

What I did: 1-installed factory via ftp 2-zcat /proc/config.gz > .config 3-make menuconfig (add smbfs support and change kernel suffix) 4-make 5-make modules_install 6-INSTALL_PATH=/boot make install 7-fixed broken /boot/grub/menu.lst 8-rebooted new kernel /lib/modules/2.6.21-rc7-3-default# du -s . 57410 . /lib/modules/2.6.21-rc7-3-b7513-16# du -s . 529982 . /lib/modules/2.6.21-rc7-3-b7513-16/kernel/fs/reiserfs# ll -rw-rw-rw- 1 root root 2783209 apr 30 01:16 (objdump -h shows 26 segments, 9 more than stock) /lib/modules/2.6.21-rc7-3-b7513-16/kernel/fs/smbfs# ll -rw-rw-rw- 1 root root 1081958 apr 30 01:16 smbfs.ko (stat claims 2126 blocks of 1024 each, double that required for 1081958 filesize; objdump -h shows 24 segments, 9 more than stock) On my 10.2 smbfs.ko is only size 75753. Why do my modules consume 9.2 times as much overall disk space as the stock modules? What did I do wrong? -- "Therefore, if anyone is in Christ, he is a new creation; the old has gone, the new has come!" 2 Corinthians 5:17 NIV Team OS/2 ** Reg. Linux User #211409 Felix Miata *** http://mrmazda.no-ip.com/ --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

3 2

[opensuse-factory] opensuse-updater
by Silviu Marin-Caea 30 Apr '07

30 Apr '07

I see that opensuse-updater observes only update packages. Newer versions of packages that are in regular repositories (that is non-update repositories) are not noted. Is this the planned behavior? I ask because I used ZEN updater to keep in sync with Factory. If ZEN updater is going to be removed from the distribution, the only remaining way to update to Factory would be to periodically run yast2 sw_single. Is this so? Not saying that is a bad or good thing, just want to know. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 1

[opensuse-factory] video disappeared with yast system update
by Felix Miata 30 Apr '07

30 Apr '07

Until a few minutes ago I had last upgraded about a month ago. I used YaST System Update. I noticed during the process of installing over 800 packages that many I had used YaST to remove previously in order to free up disk space were reinstalled, e.g. OpenOffice.org and apparmor. When done, reboot to runlevel 3 seemed pretty normal for an alpha. However when I started runlevel 5, all video output vanished. Doing 'sax2 -r' produces same result, but before it does, sysp commands 99% cpu in top. Ctrl-Alt-F[1-6] produces no apparent response. NUM does toggle the keyboard LED. CAD produces immediate beep and init 6. xorg.conf was not changed. Chipset is i440BX, video mga agp. System includes LSI SCSI and no SATA. Nothing jumps out at me in Xorg.0.log. No bug filed in last 6 weeks with video or screen as subject search terms produces anything that looks to me like this. What clues do I look for to making video work during runlevel 5? -- "Therefore, if anyone is in Christ, he is a new creation; the old has gone, the new has come!" 2 Corinthians 5:17 NIV Team OS/2 ** Reg. Linux User #211409 Felix Miata *** http://mrmazda.no-ip.com/ --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

3 3

[opensuse-factory] Public development of AppArmored FireFox
by Alexey Eremenko 29 Apr '07

29 Apr '07

hi all ! Since I'm newbie in AppArmor, I need community help in building a good AppArmored FireFox profile. The reason: openSUSE Community needs response to the Vistas "IE7-protected mode" as written here: https://bugzilla.novell.com/show_bug.cgi?id=255541 The best answer is AppArmored FireFox, which I try to build. Current Status: 1. Basically the idea is to have 2 versions of FireFox installed by default: One is normal FireFox and other is highly-secure FireFox. 2. We have a potential icon for the thing (but need approvement from Mozilla) 3. Today I have succeded in building Alpha-version of profile. The profile: currently it works, *but*: a. Only in normal user mode (not root mode) b. Can only save in /home/*/downloads and other log files. c. supports some extensions and plugins (KPDF) d. Can read only the necessary files to load itself. The problems: 1. My current profile (Alpha1) contains a LOT of bugs 2. I would like to see support for more plugins and extensions (those needs to be added to the profile) 3. Standard firefox starts from shell script, but as I understand AppArmor does not supports shellscripts, only executables. I need more info on that topic. To play with my profile you need: 1. download my Alpha1 profile and put to /etc/apparmor.d/ link: https://bugzilla.novell.com/attachment.cgi?id=136242 2. open konsole with 2 tabs: 1 oin root mode and other with normal user. The tab with root account should play with apparmor service: rcapparmor start rcapparmor stop rcapparmor restart and the tab with normal user account should launch firefox via command line: "/usr/lib/firefox/firefox-bin" 3. When you run firefox AND have apparmor service running, you should NOT be able view or save in your home directory. To save in Home directory, do "rcapparmor stop" and continue browsing in normal mode. I call for community help. I need help improving the profile *and* contacting Mozilla to allow us to use the nice AppArmored-FireFox icon here: https://bugzilla.novell.com/attachment.cgi?id=125341 -- -Alexey Eremenko "Technologov" --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

1 3

Re: [opensuse-factory] Updating and memory..
by Klaus Kaempf 29 Apr '07

29 Apr '07

* M9. <monkey9(a)iae.nl> [Apr 26. 2007 11:20]: > Klaus Kaempf schreef: > > > > What kind of upgrade ? Can you be more specific ? > > Well, i mean the updates, sorry, like the ones from yesterday and today.. > (talking about 102 retail!) So you're running openSuSE 10.2 and opensuse-updater (resp. yast-online-update) ?! Do you have any large (i.e. factory) repositories subscribed ? Klaus --- SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nürnberg) --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

14 32