June 2010 - openSUSE Features - openSUSE Mailing Lists

[New: openFATE 309089] Canon CanoScan 8600F
by fate_noreply＠suse.de 08 Dec '10

08 Dec '10

Feature added by: Karl-Eberhard Wagner (mechthild) Feature #309089, revision 1 Title: Canon CanoScan 8600F openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Karl-Eberhard Wagner (mechthild) Description: I wish to get a driver for this scanner in OpenSUSE 11.3 . Thanks Karl-Eberhard -- openSUSE Feature: https://features.opensuse.org/309089

1 2

[New: openFATE 309589] Support for WebM media
by fate_noreply＠suse.de 07 Dec '10

07 Dec '10

Feature added by: James Mason (bear454) Feature #309589, revision 1 Title: Support for WebM media openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: James Mason (bear454) Description: Google open-sourced the high-performance VP8 video engine and announced a new open media format based on VP8 video and Vorbis audio in a Matroska container. We should have *some* support available for it. Project: * http://webmproject.blogspot.com/ * http://www.webmproject.org Browsers: * Chrome Nightly: http://build.chromium.org/buildbot/snapshots * Firefox Nightly: http://nightly.mozilla.org/webm/ * Opera labs: http://labs.opera.com/news/2010/05/19/ Desktop: * FFMPEG patch: http://www.webmproject.org/tools/#ffmpeg_patches * Gstreamer plugins in development -- openSUSE Feature: https://features.opensuse.org/309589

1 6

[openFATE 307523] Make hard disk encryption configurable
by fate_noreply＠suse.de 02 Dec '10

02 Dec '10

Feature added by: Stephan Kleine (bitshuffler) Feature #307523, revision 1 Title: Make hard disk encryption configurable openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Stephan Kleine (bitshuffler) Description: E.g. currently aes-cbc-essiv instead of aes-xts-plain is used because it is the upstream default although it has a number of disadvantages. That is perfectly fine as long as one could change the default. In short the following features are needed: 1) Possibility to override used options during installation (also should be setable via autoyast / kiwi so one doesn't have to change the setting on every new install). 2) Possibility to override used options during partition creation. 3) Possibility to set the used default options in some /etc file. IMHO a simple text field in the partitioner to override the used options would perfectly suffice. Then safe & restore that field via autoyast & kiwi and be done. The systemwide default should be stored in some /etc/sysconfig file. Related bug report: https://bugzilla.novell.com/show_bug.cgi?id=534644 -- openSUSE Feature: https://features.opensuse.org/307523

1 4

[openFATE 307485] Xinerama in Yast
by fate_noreply＠suse.de 02 Dec '10

02 Dec '10

Feature added by: Roberto Gibertini (rgibertini) Feature #307485, revision 1 Title: Xinerama in Yast openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Roberto Gibertini (rgibertini) Description: YaST urgently needs an update to its monitor configuration utility. It has issues allowing resolutions set in X to be chosen for display, and it would be really, really, really nice if it had multi-monitor support. Expecially when working with proprietary drivers, the use of sax2 to configure multimonitor and xinerama is really difficult, this can be a great problem for starting users. -- openSUSE Feature: https://features.opensuse.org/307485

1 2

[New: openFATE 309048] Add keyboard configuration module in yast
by fate_noreply＠suse.de 02 Dec '10

02 Dec '10

Feature added by: Alvise C (alvise_cav) Feature #309048, revision 1 Title: Add keyboard configuration module in yast openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Alvise C (alvise_cav) Partner organization: openSUSE.org Description: Keyboard can be configured either during installation, either with SaX2, but not from Yast UI A module Yast -> Hardware -> Keyboard should be added to bring this functionality Business case (Partner benefit): openSUSE.org: SaX2 has been removed from Yast2 UI, so there is no way left to configure a keyboard from Yast. -- openSUSE Feature: https://features.opensuse.org/309048

1 1

[openFATE 306579] make rpm licenses publically available
by fate_noreply＠suse.de 01 Dec '10

01 Dec '10

Feature added by: Juergen Weigert (jnweiger) Feature #306579, revision 1 Title: make rpm licenses publically available Buildservice: Unconfirmed Priority Requester: Important Requested by: Juergen Weigert (jnweiger) Description: I'd like to offer a decoder for the rpm license strings for public. I suggest to use the website license.opernsuse.org to offer a) a searchable list of licenses showing * short name (as used in rpm packages) * Long descriptive Name * License Fulltext (by reference and or local copy) b) A decoder engine explaining in plain english what a given rpm license string means.Including dual, mix, aggregate qualification. c) a validator for rpm license strings. Use Case: customer could decipher syntax customer can access license fulltext. -- openSUSE Feature: https://features.opensuse.org/306579

1 9

[New: openFATE 309931] Server name/certificate subject validation in EAPOL authentications (NetworkMana
by fate_noreply＠suse.de 29 Nov '10

29 Nov '10

Feature added by: Tamás Németh (nymeadmins) Feature #309931, revision 1 Title: Server name/certificate subject validation in EAPOL authentications (NetworkMana openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Tamás Németh (nymeadmins) Description: We, at the hungarian eduroam community, realized, that the lack of this capability in NetworkManager is a VERY SERIOUS threat. In the Eduroam infrastructure it's quite possible that you home radius server's certificate is signed by the same CA as one or some of the numerous radius servers proxying your request, so any of these servers can easily (even accidentally!) open your SSL encrypted TTLS or PEAP tunnel, for example. The problem gets even worse if you don't specify exactly the CA, which signed you certificate, but you trust every CA cert in /etc/ssl/certs (a very common scenario). However, since your home radius server's certificate is transmitted as cleartext in the beginning of the PEAP/TTLS communication, it can be easily sniffed wireshark, and a relatively desperate attacker can purchase his own certificate from you CA. If this attacker deploys his own AP/router/radius server, he can easily read your passwords (in case of TTLS/PAP authentication), or your NTLM password hashes (in case of TTLS/MSCHAPv2 or PEAP/MSCHAPv2). And the sad thing is that this MSCHAPv2 can cracked VERY EASILY by john ( http://www.openwall.com/john/ ). According my experiences it can be cracked five times faster than old Unix crypt password hashes :((( I managed to crack three out of four real-life passords in an hour without advanced dicionaries of specific options. One password (consisting of eight digits) was cracked by simple brute force within an hour! ( http://forums.remote-exploit.org/tutorials-guides/13728-tutorial-cracking-l… ) Upstream here: https://bugzilla.gnome.org/show_bug.cgi?id=341323 -- openSUSE Feature: https://features.opensuse.org/309931

1 3

[New: openFATE 309179] Completely Remove the in WindowsⓇ Installer
by fate_noreply＠suse.de 24 Nov '10

24 Nov '10

Feature added by: Carl Fletcher (caf4926) Feature #309179, revision 1 Title: Completely Remove the in WindowsⓇ Installer openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: Carl Fletcher (caf4926) Description: Please for heavens sake remove the installer that can be run from inside the WindowsⓇ OS. That, or make it idiot proof and 100% dork proof. I lost count way back in 11.0 of folk who have hosed their sysytem with this installer! It needs to work, without fail or you are just giving a really bad image to openSUSE. -- openSUSE Feature: https://features.opensuse.org/309179

1 4

[New: openFATE 309868] ip6 firewall
by fate_noreply＠suse.de 22 Nov '10

22 Nov '10

Feature added by: uli fuerst (fuerstu) Feature #309868, revision 1 Title: ip6 firewall openSUSE-11.3: Unconfirmed Priority Requester: Important Requested by: uli fuerst (fuerstu) Description: I would like to see at least a basic firewall (or packet filter if you prefer) for IPv6 as part of the installation since IPv6 is by default enabled. As soon as your router has IPv6 enabled you are vulnerable without. -- openSUSE Feature: https://features.opensuse.org/309868

1 8

[New: openFATE 309618] Enable CGROUP feature in kernel
by fate_noreply＠suse.de 22 Nov '10

22 Nov '10

Feature added by: Jörg Mayer (joergmayer) Feature #309618, revision 1 Title: Enable CGROUP feature in kernel openSUSE-11.3: Unconfirmed Priority Requester: Desirable Requested by: Jörg Mayer (joergmayer) Description: Please enable CONFIG_CGROUP in the 11.3 kernels to make it significantly easier for interested parties to play with systemd (Link to systemd description not pasted as copy/paste doesn't seem to work with current konqueror from kde-repo). -- openSUSE Feature: https://features.opensuse.org/309618

1 3