October 2008 - openSUSE Security - openSUSE Mailing Lists

[opensuse-security] Re: [security-announce] Advance notice of discontinuation of openSUSE 10.2
by Carlos E. R. 13 Oct '08

13 Oct '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Thursday 2008-10-02 at 11:17 +0200, Marcus Meissner wrote: > Dear opensuse-security-announce subscribers and openSUSE users, > > SUSE Security announces that openSUSE 10.2 will be discontinued soon. > Having provided security-relevant fixes for more than two years, we will > stop releasing updates after November 30th 2008. > > As a consequence, the openSUSE 10.2 distribution directory on our > ftp server ftp.suse.com will be moved from /pub/suse/*/10.2/ to the > /pub/suse/discontinued/ directory tree structure to free space on our > mirror sites. The 10.2 directory in the update tree /pub/suse/update/10.2 > will follow, as soon as all updates have been published. Er... this is no longer true, there is nothing under the /pub/suse/discontinued/ structure, just a note that versions till 7.1 have been remoed to save 30 gigs of space. But there is nothing there, ¡not even 10.1! However, 10.0 isos are in "/pub/suse/i386/10.0/iso", and some packages I think are under "/pub/suse/i386/10.0/SUSE-Linux10.0-GM-Extra/suse". There is also a partial "/pub/suse/install/10.1" and an emtpy "/pub/suse/install/10.2/", with a note that it has been erased too: ] All openSUSE 10.2 packages from the media as well ] as those that did not make it due to space reasons to them, ] are available via the mirrors of ftp.opensuse.org. ] ] For details read: http://en.opensuse.org/Released_Version ] about the "Internet Installation Repository". So, where are you keeping your own SUSE history, if even 10.2 is not there, before the date of end of november you mentioned? - -- Cheers, Carlos E. R. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.9 (GNU/Linux) iEYEARECAAYFAkjliekACgkQtTMYHG2NR9UixACdFpcDwZV2StyVgDEIL+UJU+pr qRQAnjC4zKjGU0w9hOszgtmpFCC7Hp7B =sWZj -----END PGP SIGNATURE-----

3 2

[opensuse-security] ACLs, HAL and serial devices (was: HAL and serial devices)
by Jan Ritzerfeld 12 Oct '08

12 Oct '08

Hello, inspired by the thread "Want to could use /dev/ttyS0 as user" on the opensuse-factory maling list, I tried to figure out whether access to /dev/ttyS0 can be granted by HAL/resmgr (since this works fine with the alsa devices). According to /etc/hal/fdi/policy/90osvendor/80-resmgr.fdi, access to serial devices should be granted to "members" of the resmgr modem class (desktop users are not "member" of this class by default). But using 10.3, I cannot even find any serial device via HAL: jan@karl:~> hal-find-by-capability --capability serial jan@karl:~> Obviously, udev recognizes my /dev/ttyS0: jan@karl:~> udevinfo --query=all --name=/dev/ttyS0 P: /devices/platform/serial8250/tty/ttyS0 N: ttyS0 I do not need access to /dev/ttyS0, but I do want to learn more about HAL. :) Gruß Jan -- A fail-safe circuit will destroy all others. --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 4

[opensuse-security] udev rules; use of uucp group for devices
by Günter Dannoritzer 02 Oct '08

02 Oct '08

Hi, I had asked this question over at the [opensuse] mailing list on 09/14/2008 12:46 AM and got the recommendation to ask the security people about this issue. So here I am. I want to use a USB device which comes up as /dev/ttyUSB0 with the user:group = root:uucp. Now my question is how is the intended use of this device for a normal user? When I look at my user information with the id command I get: uid=1000(linux) gid=100(users) groups=16(dialout),33(video),100(users) I am hesitant to add my user to the uucp group, as I am not sure whether that is the intended use of the group. I know there are some user/groups on Linux only intended for some software and not for real user accounts. I tried to overwrite the udev rule and make the ttyUSB0 device belong to the dialout group, as my user belongs to it, but was not successful with that. Could someone please explain the intended use of the uucp group in connection with hardware devices and how users are intended to access the hardware? Thanks for your help. Cheers, Guenter -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

6 15

[opensuse-security] Re: [security-announce] SUSE Security Announcement: Linux kernel (SUSE-SA:2008:048)
by Frank Steiner 02 Oct '08

02 Oct '08

Hi Marcus, Marcus Meissner wrote > ______________________________________________________________________________ > > SUSE Security Announcement > > Package: kernel > Announcement ID: SUSE-SA:2008:048 > Date: Wed, 01 Oct 2008 15:00:00 +0000 > Affected Products: SLE SDK 10 SP2 > SUSE Linux Enterprise Desktop 10 SP2 > SUSE Linux Enterprise 10 SP2 DEBUGINFO > SUSE Linux Enterprise Server 10 SP2 I'm a bit confused. There are updates for SLED10 SP2 x86_64, release 2.6.16.60-0.30 There are no x86_64 releases for SLES10 SP2, though. But there are i586 and ppc releases for SLES10 SP2, release 2.6.16.60-0.29. Usually, SLES and SLES kernels used to have the same release number. I wonder if there is sth. from .29 to .30 that I should have in SLES, too. And why are there no x86_64 releases for SLES10 SP2? Usually one can take the SLED packages and put on the SLES system, but this time I'm really confused because of the different releases. cu, Frank -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuhl f. Bioinformatik Mail: http://www.bio.ifi.lmu.de/~steiner/m/ LMU, Amalienstr. 17 Phone: +49 89 2180-4049 80333 Muenchen, Germany Fax: +49 89 2180-99-4049 * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. * -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

2 2

[opensuse-security] Bind dnssec-validation
by Petr.Jiran＠cdt.cz 02 Oct '08

02 Oct '08

Hi, I want to start DNSSEC on my DNS server, but I use old version of Bind 9.3.5. This version doesnt support "dnssec-validation". Is some eazy way how to upgrade BIND? Thanks for help. Best regards Petr Jiran, DiS. Senior specialista datové a IP sítě Úsek elektronických komunikací ČD-Telematika a. s. Kancelář: Dělnická 12, 170 00 Praha 7 Sídlo: Pernerova 2819/2a, 130 00 Praha 3 Tel.: +420 210 021 692 Mob.: +420 724 013 723 Fax: +420 210 021 610 E-m@il: Petr.Jiran(a)cdt.cz URL: http://www.cdt.cz -- To unsubscribe, e-mail: opensuse-security+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security+help(a)opensuse.org

1 0