August 2013 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Help understanding new HTTPS breach?
by Greg Freemyer 12 Aug '13

12 Aug '13

All, I just saw: http://www.kb.cert.org/vuls/id/987798 It is a scary sounding attack since so much banking etc. is conducted via SSL Can someone explain the lifecycle of this attack to me? Does the vulnerability mean that an attacker could: - infect s PC (obviously linux is more difficult than windows, but Java vulnerabilities exist anywhere it is used) - use malware introduced via infection to query various banks and break SSL encryption key without the user even being logged into the protected website - watch network activity until a login to one of the banks in question occurs, then capture the login / password (Obviously, any ssl protected website could be similarly attacked. eg. gmail, salesforce, etc.) I assume that for a bad guy with the exploit in hand the hardest part of the above is monitoring the network activity at a low enough level to observe the compressed packets? Can software running with normal user privileges observe their own packets in that much detail, or does this attack require root access on the victim computer? Greg -- Greg Freemyer -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 4

Re: [opensuse] OpenSuSE 12.3 and Yast Software Repositories Error
by Mark Hounschell 12 Aug '13

12 Aug '13

On 08/10/2013 07:17 AM, Damian Ivanov wrote: > Did you delete the old repository? Try minimal config aka only one repo > enabled. Hope this helps. > On Aug 9, 2013 3:20 PM, "Mark Hounschell" <markh(a)compro.net> wrote: > Yes, I deleted it but the message still appears when I start Yasts Software Repositories. Regards Mark -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] USB serial port on HP T1000 G3 UPS ?
by Per Jessen 12 Aug '13

12 Aug '13

I'm trying to use the HP Power Manager software which appears to require/expect a USB serial port when talking to the HP T1000 G3 UPS. The UPS _is_ connected via USB. The setup utility only works with /dev/ttySx but USB serial ports usually end up as /dev/ttyUSBx or in this case /dev/usb/hiddev0 .... -- Per Jessen, Zürich (21.1°C) http://www.dns24.ch/ - free DNS hosting, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 11

[opensuse] Cannot fetch my mail
by Wolfgang Mueller 11 Aug '13

11 Aug '13

Dear friends, since last Sunday I cannot fetch my mail any more. These are the last messages appearing on /var/log/fetchmail: fetchmail: 32 messages for wolfgang at pop3.ariannuccia.de (196062 octets). fetchmail: reading message wolfgang@mc01.omc.net:1 of 32 (5707 octets) (log message incomplete) fetchmail: Connection errors for this poll: name 0: connection to localhost:smtp [127.0.0.1/25] failed: Connection refused. name 1: connection to localhost:smtp [127.0.0.1/25] failed: Connection refused. fetchmail: SMTP connect to localhost failed fetchmail: SMTP transaction error while fetching from wolfgang(a)pop3.ariannuccia.de and delivering to SMTP host localhost fetchmail: Query status=10 (SMTP) Obviously, fetchmail can read the messages at the provider's server; otherwise it would not see 32 messages waiting. But it cannot deliver them to me since localhost refuses connections. How can I make localhost accept them again? For receiving mail, I now use a different computer of my network. But this can only be a temporary solution. Thanks in advance and best regards, Wolfgang Müller ______________________ An der Silberkuhle 10 30655 Hannover Tel (+49 511) 546 3837 mailto:wm@ariannuccia.de -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 23

Re: [opensuse] OpenSuSE 12.3 and Yast Software Repositories Error
by Damian Ivanov 10 Aug '13

10 Aug '13

Did you delete the old repository? Try minimal config aka only one repo enabled. Hope this helps. On Aug 10, 2013 2:17 PM, "Damian Ivanov" <damianatorrpm(a)gmail.com> wrote: > > Did you delete the old repository? Try minimal config aka only one repo enabled. Hope this helps. > > On Aug 9, 2013 3:20 PM, "Mark Hounschell" <markh(a)compro.net> wrote: >> >> I was trying to configure a local packman repo mirror and after an unsuccessful attempt because of getting the URL wrong, I'm left with this message when clicking on "Software Repositories" in Yast. I have since successfully set it up but I can't get rid of this error??? All repos that enabled up are working including the packman mirror. >> >> >> Errors occurred while restoring the repository configuration. >> Error refreshing service Packman Repository (http://compro.packman.net/pub/linux/packman/suse/openSUSE_12.3/) Parse error: repoindex.xml[1] Opening and ending tag mismatch: meta line 1 and noscript >> >> The incorrect URL I originally entered is shown in the above error message. When I click continue all works. >> >> >> More info: >> >> harley:/home/markh # zypper refresh >> Repository 'nVidia Graphics Drivers' is up to date. >> Repository 'Packman Repository' is up to date. >> Repository 'libdvdcss repository' is up to date. >> Repository 'openSUSE-12.3-Non-Oss' is up to date. >> Repository 'openSUSE-12.3-Oss' is up to date. >> Repository 'openSUSE-12.3-Update' is up to date. >> Repository 'openSUSE-12.3-Update-Non-Oss' is up to date. >> All repositories have been refreshed. >> >> >> Any ideas? >> >> Thanks >> Mark >> -- >> To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org >> To contact the owner, e-mail: opensuse+owner(a)opensuse.org >> -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] dumb network routing question
by Marc Chamberlin 10 Aug '13

10 Aug '13

Ok i been fooling around with this, and suspect I am missing something dumb... I have the following SOHO network configuration - Internet | Router A 169.254.1.1 | |-----169.254.1.200 Router B 192.168.20.1 --------- 192.168.20.100 Machine A | 169.254.1.100 (eth0) OpenSuSE Gateway Machine with SuSEFirewall 192.168.10.1 (eth1) | | 192.168.10.20 Machine B So how do I set up the SuSEFirewall and the network routing tables on the OpenSuSE Gateway to allow Machine B to see Machine A? I did set up a route in the Routing Table in YaST2 for the network interfaces as follows - Destination 192.168.20.0 Genmask 255.255.255.0 Gateway 169.254.1.200 Device eth0 The gateway address for Machine A is set to 192.168.20.1 The gateway address for Machine B is set to 192.168.10.1 The gateway address for the OpenSuSE Gateway Machine is set to 169.254.1.1 So far I have been unable to get Machine B to even ping Machine A. Is the SuSEFirewall interfering and if so what do I have to do to make it behave? I tried a few things with it also, but so far no joy. Gotta be something dumb I am missing, appreciate and thanks in advance for a bit of help.. Marc... -- "The Truth is out there" - Spooky -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

7 25

[opensuse] Why Firefox wants to send data and it is enabled by default
by Togan Muftuoglu 09 Aug '13

09 Aug '13

Apparently there is something called datareporting.health reporting in Firefox. The question is I do not recall enabling such thing at all even though it claims I did (liar "accepted-info-bar-button-pressed") . I have disabled all the rubbish, but the real question why on the earth this was packaged with these enabled ? And no I don't realy care how good/neat the intention was. Any software wanting to send data/connect to outer net has to get OK from the boss. Here are the relevant settings in the prefs.js. Mind you I have disabled the service and submission. user_pref("datareporting.healthreport.lastDataSubmissionRequestedTime", "1372438697391"); user_pref("datareporting.healthreport.logging.consoleEnabled", false); user_pref("datareporting.healthreport.nextDataSubmissionTime", "1373197532618"); user_pref("datareporting.healthreport.pendingDeleteRemoteData", true); user_pref("datareporting.healthreport.service.enabled", false); user_pref("datareporting.healthreport.service.firstRun", true); user_pref("datareporting.healthreport.uploadEnabled", false); user_pref("datareporting.policy.dataSubmissionEnabled", false); user_pref("datareporting.policy.dataSubmissionPolicyAcceptedVersion", 1); user_pref("datareporting.policy.dataSubmissionPolicyNotifiedTime", "1365335680665"); user_pref("datareporting.policy.dataSubmissionPolicyResponseTime", "1365335918900"); user_pref("datareporting.policy.dataSubmissionPolicyResponseType", "accepted-info-bar-button-pressed"); user_pref("datareporting.policy.firstRunTime", "1365272124654"); user_pref("datareporting.sessions.current.activeTicks", 98); user_pref("datareporting.sessions.current.clean", true); user_pref("datareporting.sessions.current.firstPaint", 15951); user_pref("datareporting.sessions.current.main", 109); user_pref("datareporting.sessions.current.sessionRestored", 16044); user_pref("datareporting.sessions.current.startTime", "1373485958846"); user_pref("datareporting.sessions.current.totalTime", 568); user_pref("datareporting.sessions.currentIndex", 101); -- Life is endless possibilities -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

9 17

[opensuse] has anyone used lxc-opensuse to build an initial lcx config?
by Per Jessen 09 Aug '13

09 Aug '13

I tried using it, but I end up with this: Copying rootfs to /srv/lxc/myfirstone/rootfs ... Please change root-password ! BAD PASSWORD: it is too short BAD PASSWORD: is too simple grep: /srv/lxc/myfirstone/config: No such file or directory I'm on 13.1-latest milestone. -- Per Jessen, Zürich (17.4°C) http://www.dns24.ch/ - free DNS hosting, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 1

[opensuse] Troubles with Nvidia
by Vojtěch Zeisek 09 Aug '13

09 Aug '13

Hi, I probably do some silly mistake, but I can't manage it to work. I have NVIDIA GeForce GT630M (2 GB memory, 96 CUDA cores) and I followed http://en.opensuse.org/SDB:NVIDIA_drivers#The_repository_way to install original drivers to be able to use full power of the chip. $ lspci | grep VGA 00:02.0 VGA compatible controller: Intel Corporation 3rd Gen Core processor Graphics Controller (rev 09) 01:00.0 VGA compatible controller: NVIDIA Corporation GF108 [GeForce GT 630M] (rev a1) I installed the x11-video-nvidiaG02 package and run as root nvidia-xconfig, but after reboot X doesn't start. From boot log: nvidia: module license 'NVIDIA' taints kernel. Disabling lock debugging due to kernel taint nvidia 0000:01:00.0: enabling device (0006 -> 0007) vgaarb: device changed decodes: PCI:0000:01:00.0,olddecodes=io+mem,decodes=none:owns=none NVRM: loading NVIDIA UNIX x86_64 Kernel Module 319.32 Wed Jun 19 15:51:20 PDT 2013 2013-08-06T08:20:17.400659+02:00 veles kdm[948]: X server died during startup 2013-08-06T08:20:17.401228+02:00 veles kdm[948]: X server for display :0 cannot be started, session disabled I haven't try to use firmware downloaded from Nvidia's site, I'd rather use the repository. Now I'm using xorg-x11-driver-video-nouveau. Thank You in advance, Vojtěch -- Vojtěch Zeisek Komunita openSUSE GNU/Linuxu Community of the openSUSE GNU/Linux http://www.opensuse.org/ http://trapa.cz/

10 24

[opensuse] reorg of network:ha-clustering repo on build.opensuse.org
by Tim Serong 09 Aug '13

09 Aug '13

Hi All, This is just a quick heads-up. We're in the process of reorganising the network:ha-clustering repository on build.opensuse.org. If you don't use any of the software from this repo feel free to stop reading now :) Currently we have: - network:ha-clustering (stable builds for various distros) - network:ha-clustering:Factory (devel project for openSUSE:Factory) This is going to change to: - network:ha-clustering:Stable (stable builds for various distros) - network:ha-clustering:Unstable (unstable/dev, various distros) - network:ha-clustering:Factory (devel project for openSUSE:Factory) This means that if you're currently using packages from network:ha-clustering, you'll need to point to network:ha-clustering:Stable instead (once we've finished shuffling everything around). I'll send another email out when this is done. Regards, Tim -- Tim Serong Senior Clustering Engineer SUSE tserong(a)suse.com -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 2