March 2014 - openSUSE Users - openSUSE Mailing Lists

[opensuse] public_html security
by lynn 27 Mar '14

27 Mar '14

13.1 Hi We've a php script which writes to the users public_html folders, so wwwrun needs w. I used setfacl to grant the write. The alternative is to stick it in the db. I'd prefer the former. Any problems with that? Thanks -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 16

[opensuse] nginx uid:gid
by lynn 27 Mar '14

27 Mar '14

13.1 Hi We have a nginx test going. Yast created a uid:gid, nginx:nginx Is that if you are running apache at the same time? If we go live, is there any reason nginx shouldn't run as: wwwrun:www ? Thanks -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 4

[opensuse] problem with ROOT from openSUSE repositories
by John Young 26 Mar '14

26 Mar '14

Hello, We have some folks here at NASA Langley that want to start using ROOT, so I have installed it on some of our Linux machines from the openSUSE Science repositories. We have version 5.34.17 installed. The installation seems to have completed successfully, but we are having problems running some of the examples in the documentation, as below: % root ******************************************* * * * W E L C O M E to R O O T * * * * Version 5.34/17 24 February 2014 * * * * You are welcome to visit our Web site * * http://root.cern.ch * * * ******************************************* ROOT 5.34/17 (heads/v5-34-00-patches@v5-34-15-60-gba875ed, Mar 07 2014, 11:10:00 on linuxx8664gcc) CINT/ROOT C/C++ Interpreter version 5.18.00, July 2, 2010 Type ? for help. Commands must be C++ statements. Enclose multiple statements between { }. root [0] fa1 = new TF1("fa1","sin(x)/x",0,10); Error: Symbol TF1 is not defined in current scope (tmpfile):1: Error: type TF1 not defined FILE:(tmpfile) LINE:1 Warning: Automatic variable fa1 is allocated (tmpfile):1: Error: Undeclared variable fa1 (tmpfile):1: *** Interpreter error recovered *** root [1] exit() (const int)0 % I have tried searching the web for the solution to this problem, but I have not come up with anything useful so far. Since I installed this software from RPMs, I did not configure it myself, so I am not sure what environmental variables need to be set. I have tried setting ROOTSYS to /usr/bin, which is where the RPM puts the 'root' executable, and I am guessing that LD_LIBRARY_PATH should include /usr/lib64/root/5.34/ which seems to be where the RPM put the libraries, but so far, I have not gotten past the above error. Is anyone else out there using the openSUSE Science repository version of root? Any suggestions? JY -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] Warning: Gnome downloads automatically the updates even when you say "no".
by Carlos E. R. 26 Mar '14

26 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, We found this out in a thread in the forum. The situation is this: Install a fresh 13.1 system with Gnome, log in. After a while, you get the notifier to install some updates. Say "not-now". Nevertheless, the updates are downloaded and stored in "/var/cache/zypp/packages/repo-update/". They are not installed, but they are downloaded, and delta rpms are converted to the full rpm, all in background. The activity is logged in "/var/log/pk_backend_zypp". So you say, but surely this is configurable. So you start "gpk-prefs", but no, there is no setting for this. You can configure the periodicity, to check or not for updates when using mobile broadband or on battery power. But you can not disable downloading updates in advance! Well, you can, if you use the "regedit style configuration editor", and you know what to look for. First, install "dconf-editor". Start it, and search for "org/gnome/settings-daemon/plugins/updates". The setting is there: "auto-download-updates", and is set to "true" by default. For a description and photo, see <http://worldofgnome.org/fedora-20-gnome-software-tips-and-tricks/>, search for the paragraph tittled "Hack gSofwtare Options through GSettings", you will see the details in there (of course, don't use "yum" to install it). I find this default setting, and that it is hidden, disgusting bad behaviour: it can use a lot of resources without asking. Disk space to store the updates, and network bandwidth to download them. It is something to check for updates, but something very different to download them even before you accept them! And the user has no choice in the matter. Not even the admin - except by removing the update applet, of course, which many of us do. One more reason to do it. - -- Cheers / Saludos, Carlos E. R. (from 12.3 x86_64 "Dartmouth" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlMyxvMACgkQtTMYHG2NR9XD6QCeK+cJTAmNIgIYVopt1AtQ+vqc +a4AoIunORxB38TuK3V+AlI2ZuT+VjDl =37rh -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] zypper dup and free space
by Dsant 25 Mar '14

25 Mar '14

Hello the list, I tried to update my machine using "zypper dup", and it failed because of not enough free space on / :( How could I have checked this before ? -- (o_ //\ Dsant, from Lyon, France V_/_ forum(a)votreservice.com -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

5 5

Re: [opensuse] iptables: is PREROUTING nat before or after PREROUTING filter?
by Timothy Butterworth 25 Mar '14

25 Mar '14

On Monday, March 24, 2014 03:13:10 AM Timothy Butterworth wrote: > If you are simply going to drop all packets silently (recommend) then use > the iptables hash function as it uses less memory and processes faster as > well. Their are a lot of examples available on the internet. If you are > allowing established connections and have not implemented deny by default > permit by exception in and out then place this above your established > statements inbound. Also use supernet to block their entire country range > to reduce the number of entries. You can also make statements to block > outbound as well Mascarade is not an issue with this make sure you are > blocking as source inbound and destination outbound. > > I am on my cell I'll take a look at your attachment when I get a chance. > > On Mar 24, 2014 2:07 AM, "Per Jessen" <per(a)computer.org> wrote: > > Stefan Gofferje wrote: > > > Hi, > > > > > > I have fairly enough of certain probes and am planning to completely > > > block all known networks from China as well as from Gaza/.ps. > > > Respective CSV files are available. > > > > > > The more interesting question is, where do I put the rules as > > > intelligently as possible? I want to block the IPs for INPUT (to the > > > fw host itself) as well as for FORWARD, but simply pushing the rules > > > twice, once into each chain, appears a huge waste of mem to me (those > > > are quite a couple of rules...). > > > > Do you need the memory for anything else ? :-) > > > > > > > > -- > > Per Jessen, Zürich (3.9°C) > > http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. > > > > -- > > To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org > > To contact the owner, e-mail: opensuse+owner(a)opensuse.org Here is an article that describes an easy way to implement a full country block. http://www.itworld.com/security/397733/how-block-traffic-other-countries-li… -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] 13.1 on ThinkPad X60s
by Thorolf Godawa 24 Mar '14

24 Mar '14

Hi everybody, I'm trying to install openSUSE 13.1 on a ThinkPad X60s (CoreDuo, Intel 950 graphics, Intel 3945ABG wifi, SanDisk 128GB SSD). The installation goes through mostly fine, all hardware is detected correctly but I'm not able to establish a wifi-connection (shows SSIDs fo available APs, but does not get an IP), so I went for cable to finish the installation including all updates. On next reboot, it takes quite long (>60s) to go over the Grub showing the boot menu and the system is not booting into runlevel 5 at all, last message seen is "Started SuSEfirewall2 phase 2". I can change to an other console, after connecting a cable I have working network and I can start XFCE4 manually from there. I can get over the "Started SuSEfirewall2 phase 2" if I switch the network from NetworkManager to ipup, but then I'm not able to get a Wifi connection anymore (only SSIDs viewable, but no IP-connection). Finally the system shutdown takes too long it shows "Started Show Plymouth Power Off Screen" (after pressing ESC) for about 90s and then shuts down very fast. Any ideas for this? I'm using 13.1, because it should be a "evergreen" version, while I was a SuSE user for long time, I stopped using it some time ago, because I was not willing to do frequent distribution upgrades, so "evergreen" seems to be a good option for me. -- kind regards, Thorolf -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 3

[opensuse] Remote control
by Andrew English 24 Mar '14

24 Mar '14

Sorry to be asking this here, I know it's not a support question, but what does everyone recommend for a remote control app/server for openSUSE that I can download freely? Will be remoting from an Windows machine either locally or over the internet. So there has to be a Windows client/viewer available. I currently use my openSUSE for bitcoin farming and normally have to wait until I get home to access it through my VCenter console. Take care, Andrew "You have become what you think about most of the time..." -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

12 42

[opensuse] opensuse12.3 - cannot make ext drive available to all users
by John King 24 Mar '14

24 Mar '14

We recently upgraded our office desktop to opensuse 12.3, and have run into a problem with external drives. Our office desktop is used by several people during the day; each user has her/his own account, and users switch between them with the usual ctrl+alt+Fn combination. Most of our data is stored on an external drive. The first user plugs it in, and the last user of the day ejects it and stores it away securely. At least, that's what used to happen with opensuse 12.2. Since moving to 12.3, we find we can't do that. The first user has sole use of the drive in /var/run/media/<username1>, and other users have no access, which means they cannot access or update our data. Is there any (fairly straightforward) way we can restore the previous behaviour, and allow multiple users to access the external drive? John -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] iptables: is PREROUTING nat before or after PREROUTING filter?
by Stefan Gofferje 24 Mar '14

24 Mar '14

Hi, I have fairly enough of certain probes and am planning to completely block all known networks from China as well as from Gaza/.ps. Respective CSV files are available. The more interesting question is, where do I put the rules as intelligently as possible? I want to block the IPs for INPUT (to the fw host itself) as well as for FORWARD, but simply pushing the rules twice, once into each chain, appears a huge waste of mem to me (those are quite a couple of rules...). I was thinking of pushing the rules into PREROUTING but the question is if PREROUTING filter comes before or after PREROUTING nat, because in PREROUTING nat I already have the forwarding rules for the port NAT. -S -- (o_ Stefan Gofferje | SCLT, MCP, CCSA //\ Reg'd Linux User #247167 | VCP #2263 V_/_ Heckler & Koch - the original point and click interface

4 5