October 2011 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] Time to rehash SuSEFirewall2
by Olipro 11 Oct '11

11 Oct '11

Hello Folks, So, just offering my opinion on what I personally feel is an "issue" for OpenSUSE with regards to its firewall. Currently, SuSEFirewall2 invokes ip(6)tables each time it needs to add a rule - this goes completely against what is advocated by the Netfilter developers as it is not atomic and is costly in terms of performance; iptables-restore on the other hand, is atomic and restores everything in one fell swoop. Additionally, whilst SuSEFirewall2 does provide for allowing you to configure your own rules, it's not particularly robust, nor supported. Thus, my suggestion is as follows: Modify SuSEFirewall2 so that rule building happens *once* and from that point, ip(6)tables-save and ip(6)tables-restore is all that gets used. SuSEFirewall2 need only do a rebuild if the rules are modified. Doing it this way carries the benefit that initialisation of Netfilter at bootup will be far more efficient. It also has the benefit that any advanced user is free to customise their iptables ruleset as they see fit, currently, the only other way I have found to do that is dragging across iptables scripts from Enterprise Linux and disabling SuSEFirewall2. Regards, Oliver -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 5

[opensuse-factory] 12.1 beta, apparmor not installed automatically
by Dieter Werner 11 Oct '11

11 Oct '11

Hi, I installed 12.1 beta x86_64 with KDE in kvm as a fresh install I basically used the default settings. I noticed the following: - no apparmor package was installed is it not longer used in 12.1? - the "kickoff" application starter misses the "go back" arrow on the left side of menus containing subentries. e.g. (I use german language setting) "Anwendungen"->"Internet"->"Webbrowser" In 11.4 when you navigate to "Internet" or "Webbrowser" you have a bar along the left edge of the menu with a triangle pointing to the left which allows to navigate back to the previous menu level. In 12.1 beta this bar is missing. To navigate back I so far found only the links on top of the menu under the search bar. BTW: in my "Internet" menu the "Nachrichtenbetrachter" (akregator) entry is duplicated. In general: 12.1 beta looks very good and feels fast even in the VM. Kind regards, Dieter -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

12 27

[opensuse-factory] Grub not installed correctly in 12.1 beta installation
by Tim Edwards 10 Oct '11

10 Oct '11

I've tried installing 12.1 beta on a USB hard drive twice now. Both times I've disabled installing grub on MBR and enabled install on the /boot partition. In previous releases, including 11.4 and 12.1 factory M5 this worked, however it does not - grub is never installed to the USB hard drive. I had to manually install it with "root (hd2,0)", "setup (hd2)" at the grub command line (note that it's hd2 not hd1 because the USB stick I used for installation is seen as hd1). Has anyone seen this before? Should I file a bug report? Tim -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 2

[opensuse-factory] pckgconfig is broken for libccrtp2
by Ilya Chernykh 10 Oct '11

10 Oct '11

Seems pkg-config --exists "libccrtp2 >= "1.6.0" returns nothing in Factory -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 2

[opensuse-factory] Intel Z68 onboard graphics adapter: monitor at DVI-D port not detected
by Johannes Studt 09 Oct '11

09 Oct '11

Hi all, I've got the following problem on my system: Asus P8Z68-V, Core i5-2500K Kernel 3.1.0.rc7, Xorg 7.6 (on both 11.4 resp. 12.1 beta installation) Dualhead (1x VGA, 1xDVI-D) at onboard graphics adapter ports Whilst booting the openSUSE 12.1 beta KDE Live CD, all works perfect out of the box. Both monitors gets detected and I can configure them with RandR. Whilst booting a 11.4 KDE system with Xorg upgraded from http://download.opensuse.org/repositories/X11:/XOrg/openSUSE_11.4 and kernel from http://download.opensuse.org/factory/repo/oss/ (in fact the same kernel as in 12.1 beta) the monitor connected to the DVI port doesn't got detected. This behaviour is same with other kernel versions too (tried with 3.0.4, 3.1.rc6 and 3.1.rc9 from Kernel:HEAD and 3.1.rc6 from Factory) The syslog gets flooded with -------------------------------------------------------------- [drm] GMBUS timed out, falling back to bit banging on pin 7 [i915 gmbus dpd] i915 GPIOF: SDA stuck high! -------------------------------------------------------------- I tried to compare all relevant log and config files between my 11.4 installation and the 12.1 beta live system and couldn't find the difference which leads to that problem. - /proc/config.gz is the same - syslog differs only at the error message, all other relevant lines looks similar - Xorg.0.log is the same, up to the section where the monitor EDID data is logged. Then on 12.1 the DVI monitors EDID is logged, while on 11.4 "not connected" is reported xrandr -q on 11.4 looks like that: -------------------------------------------------------------- hannes@gurkenkiste:~> xrandr -q Screen 0: minimum 320 x 200, current 1280 x 1024, maximum 8192 x 8192 VGA1 connected 1280x1024+0+0 (normal left inverted right x axis y axis) 338mm x 270mm 1280x1024 60.0*+ 75.0 1152x864 75.0 1024x768 75.1 75.0 70.1 60.0 832x624 74.6 75.0 800x600 72.2 75.0 60.3 56.2 640x480 72.8 75.0 66.7 60.0 59.9 720x400 70.1 HDMI1 disconnected (normal left inverted right x axis y axis) DP1 disconnected (normal left inverted right x axis y axis) HDMI2 disconnected (normal left inverted right x axis y axis) HDMI3 disconnected (normal left inverted right x axis y axis) DP2 disconnected (normal left inverted right x axis y axis) DP3 disconnected (normal left inverted right x axis y axis) -------------------------------------------------------------- On 12.1 beta the DVI monitor is reported at the HDMI3 port. Where should I look for the difference? Or, what could I modify to localize the configuration problem? The dmesg and Xorg.0.log from both systems: 12.1 dmesg http://pastebin.com/9F6GEggS 11.4 dmesg http://pastebin.com/UNpKT1K5 12.1 Xorg.0.log http://pastebin.com/s14rR677 11.4 Xorg.0.log http://pastebin.com/U3ryYQU6 Thanks for reading. -- Mit freundlichen Grüßen / Best regards Johannes Studt -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] cups: upgrade from 1.4.x to version 1.5.0
by Johannes Meixner 09 Oct '11

09 Oct '11

Hello, in the OBS project "Printing" there is now CUPS version 1.5.0 for various openSUSE and SLE versions. It may take a few hours until RPMs appear under http://download.opensuse.org/repositories/Printing/ For openSUSE:Factory there is submitrequest 86888 pending to upgrade CUPS in openSUSE:Factory to version 1.5.0. See https://bugzilla.novell.com/show_bug.cgi?id=722057 for background information. Basically: According to http://www.cups.org/roadmap.php CUPS 1.4.x is no longer maintained by upstream which is the reason to upgrade to version 1.5.0. Backward incompatible changes: * The main header cups/cups.h no longer includes the PPD header cups/ppd.h which may require code changes to applications. * CUPS no longer supports the old ~/.cupsrc or ~/.lpoptions files from CUPS 1.1.x. The ~/.cups/client.conf and ~/.cups/lpoptions files that were introduced in CUPS 1.2 must now be used. * The scheduler now requires that filters and backends have group write permissions disabled (security). This means: Compiling software which use the CUPS PPD API but do not explicitly include the <cups/ppd.h> header file would fail. This backward-incompatible change should show up during package build in OBS so that affected packages can be fixed. In old-style applications which still use ~/.cupsrc and ~/.lpoptions user default settings would no longer work. I have no idea how many such old-style applications may exits. Printer driver packages which install their own filters and backends with group write permissions would no longer work. I will check those packages in OBS. For third party printer drivers from manufacturers I cannot do anything (they may no longer work without manual adjustment). I appreciate any testing and feedback regarding CUPS 1.5.0. Kind Regards Johannes Meixner -- SUSE LINUX Products GmbH -- Maxfeldstrasse 5 -- 90409 Nuernberg -- Germany HRB 16746 (AG Nuernberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendoerffer -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

3 3

[opensuse-factory] ufw and gufw
by Johann LUCE 09 Oct '11

09 Oct '11

hi i packaged ufw and gufw (uncomplicated firewall and it gui), the compilation worked and the rpms work to i do some requests for this two package on devel:openSUSE:Factory from home:jluce2 2 day ago request #86926 and #86927 i have no answer ?? is there something wrong ?? jluce2 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

2 2

[opensuse-factory] Country detection by IP works wrong in Firefox and other software
by Ilya Chernykh 09 Oct '11

09 Oct '11

The problem seems to originate at domaintools' whois service. For example, here an IP belonging to Russia is reported as located in UK: http://whois.domaintools.com/188.32.8.195 Possible we should change to use the "Country" field to detect the location. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

4 3

[opensuse-factory] commoncpp2 pkgconfig error
by Ilya Chernykh 09 Oct '11

09 Oct '11

It seems commoncpp2's location cannot be detected properly in Factory. I have a build error due to this problem. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 0

[opensuse-factory] Time to rehash SuSEFirewall2
by Olipro 08 Oct '11

08 Oct '11

Hello Folks, So, just offering my opinion on what I personally feel is an "issue" for OpenSUSE with regards to its firewall. Currently, SuSEFirewall2 invokes ip(6)tables each time it needs to add a rule - this goes completely against what is advocated by the Netfilter developers as it is not atomic and is costly in terms of performance; iptables-restore on the other hand, is atomic and restores everything in one fell swoop. Additionally, whilst SuSEFirewall2 does provide for allowing you to configure your own rules, it's not particularly robust, nor supported. Thus, my suggestion is as follows: Modify SuSEFirewall2 so that rule building happens *once* and from that point, ip(6)tables-save and ip(6)tables-restore is all that gets used. SuSEFirewall2 need only do a rebuild if the rules are modified. Doing it this way carries the benefit that initialisation of Netfilter at bootup will be far more efficient. It also has the benefit that any advanced user is free to customise their iptables ruleset as they see fit, currently, the only other way I have found to do that is dragging across iptables scripts from Enterprise Linux and disabling SuSEFirewall2. Regards, Oliver -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse-factory+owner(a)opensuse.org

1 1