April 2014 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping
by Hans Krueger 07 Apr '14

07 Apr '14

has this been fixed in suse ? http://arstechnica.com/security/2014/03/critical-crypto-bug-leaves-linux-hu… -- Hans Krueger hanskrueger007(a)roadrunner.com registered Linux user 289023 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 3

[opensuse] Can not attach external USB hard drive to openSUSE 13.1
by Jan Papež (honyczek) 07 Apr '14

07 Apr '14

Hi, after upgrading from openSUSE 12.3 to 13.1 I can't mount my USB hard disk. If I attached it to another PC with 13.1 (clean install), it was the same. On Windows and openSUSE 12.3 it works well. There are some bad messages in journalctl: http://pastebin.com/ZayXKeQE The next message looks ugly: udisksd[1275]: Error probing device: Error sending ATA command IDENTIFY DEVICE to /dev/sdb: Unexpected sense data returned: ... I found a report at launchpad: https://bugs.launchpad.net/ubuntu/+source/libatasmart/+bug/1161985 It looks that openSUSE 13.1 is affected too. What's interesting I can't find any message with the problem about openSUSE. Did somebody noticed it? -- Jan Papež (honyczek) -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 2

[opensuse] Zypper local proxy / local repo mirror
by Robin Roth 07 Apr '14

07 Apr '14

Dear openSUSE list, what is the best practice to provide a network of O(50) machines with updated packages? Currently, we have a local mirror of all the repos we use, which takes up quite a bit of disk space and downloads a huge number of unneeded packages. In the Debian/Apt world, there is apt-proxy (and/or apt-cache) which provides a transparent proxy, such that all packages are only downloaded once. Looking for a similar solution with openSUSE I found zypp-proxy https://features.opensuse.org/306896 which seems to have never beem implemented. Is anyone using squid as a proxy with download.opensuse.org? Some forum posts suggest this clashes with the download mechanism used... Are there other totally different approaches to this basic problem? Thanks, Robin -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 9

[opensuse] Moving / and /boot partitions
by James Knott 06 Apr '14

06 Apr '14

In preperation for a new motherboard, I'm moving my system from a pair of IDE drives to a SATA drive. I have copied all the partitions by using cp -a to the new drive. However I cannot get the system to boot with / and /boot on the new system. I have tried various things including the Yast Boot Loader and grub2-mkconfig, but can't seem to get the new partitions to work. While I realize I could just reinstall to the new drive, I'd prefer to move the existing system over. BTW, with the original Grub, it was possible to have descriptive titles in the boot menu, so that you knew what you were booting. Why isn't this possible with Grub2. Even in the advanced menu, I only see 4 entries with identical titles. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 40

[opensuse] Cups and Susefirewall don't work together, why ?
by Koenraad Lelong 05 Apr '14

05 Apr '14

Hi, I upgraded my desktop computer to OS13.1. I have a problem with SuSEfirewall2. My NIC is in the "External zone". To have available the printers of my CUPS-server I want to open the IPP-port of the firewall. This seems not to work. When I disable the firewall, I see the printers. When I enable the firewall, they disappear. For my that's a problem with the firewall. This is what I did : In /etc/sysconfig/SuSEfirewall2.d/services I added ipp: ## Name: IPP (cups) ## Description: Opens ports for Internet Prining Protocol (CUPS). # # For a more detailed description of the individual variables see # the comments for FW_SERVICES_*_EXT in /etc/sysconfig/SuSEfirewall2 # # space separated list of allowed TCP ports TCP="ipp" # space separated list of allowed UDP ports UDP="ipp" # space separated list of allowed RPC services RPC="" # space separated list of allowed IP protocols IP="" # space separated list of allowed UDP broadcast ports BROADCAST="" Then in Yast/Firewall/Allowed Services I did add IPP(cups) to the allowed services for the external zone. I save that configuration. This is the result (/etc/sysconfig/SuSEfirewall2 : # grep -v \# SuSEfirewall2 FW_DEV_EXT="enp2s0" FW_DEV_INT="" FW_DEV_DMZ="" FW_ROUTE="no" FW_MASQUERADE="no" FW_MASQ_DEV="" FW_MASQ_NETS="" FW_NOMASQ_NETS="" FW_PROTECT_FROM_INT="no" FW_SERVICES_EXT_TCP="" FW_SERVICES_EXT_UDP="" FW_SERVICES_EXT_IP="" FW_SERVICES_EXT_RPC="" FW_CONFIGURATIONS_EXT="ipp sshd" FW_SERVICES_DMZ_TCP="" FW_SERVICES_DMZ_UDP="" FW_SERVICES_DMZ_IP="" FW_SERVICES_DMZ_RPC="" FW_CONFIGURATIONS_DMZ="sshd" FW_SERVICES_INT_TCP="" FW_SERVICES_INT_UDP="" FW_SERVICES_INT_IP="" FW_SERVICES_INT_RPC="" FW_CONFIGURATIONS_INT="sshd" FW_SERVICES_DROP_EXT="" FW_SERVICES_DROP_DMZ="" FW_SERVICES_DROP_INT="" FW_SERVICES_REJECT_EXT="" FW_SERVICES_REJECT_DMZ="" FW_SERVICES_REJECT_INT="" FW_SERVICES_ACCEPT_EXT="" FW_SERVICES_ACCEPT_DMZ="" FW_SERVICES_ACCEPT_INT="" FW_SERVICES_ACCEPT_RELATED_EXT="" FW_SERVICES_ACCEPT_RELATED_DMZ="" FW_SERVICES_ACCEPT_RELATED_INT="" FW_TRUSTED_NETS="" FW_FORWARD="" FW_FORWARD_REJECT="" FW_FORWARD_DROP="" FW_FORWARD_MASQ="" FW_REDIRECT="" FW_LOG_DROP_CRIT="yes" FW_LOG_DROP_ALL="yes" FW_LOG_ACCEPT_CRIT="yes" FW_LOG_ACCEPT_ALL="no" FW_LOG_LIMIT="" FW_LOG="" FW_KERNEL_SECURITY="" FW_STOP_KEEP_ROUTING_STATE="" FW_ALLOW_PING_FW="" FW_ALLOW_PING_DMZ="" FW_ALLOW_PING_EXT="" FW_ALLOW_FW_SOURCEQUENCH="" FW_ALLOW_FW_BROADCAST_EXT="no" FW_ALLOW_FW_BROADCAST_INT="no" FW_ALLOW_FW_BROADCAST_DMZ="no" FW_IGNORE_FW_BROADCAST_EXT="yes" FW_IGNORE_FW_BROADCAST_INT="no" FW_IGNORE_FW_BROADCAST_DMZ="no" FW_ALLOW_CLASS_ROUTING="" FW_CUSTOMRULES="" FW_REJECT="" FW_REJECT_INT="" FW_HTB_TUNE_DEV="" FW_IPv6="" FW_IPv6_REJECT_OUTGOING="" FW_IPSEC_TRUST="no" FW_ZONES="" FW_ZONE_DEFAULT='' FW_USE_IPTABLES_BATCH="" FW_LOAD_MODULES="nf_conntrack_netbios_ns" FW_FORWARD_ALWAYS_INOUT_DEV="" FW_FORWARD_ALLOW_BRIDGING="" FW_WRITE_STATUS="" FW_RUNTIME_OVERRIDE="" FW_LO_NOTRACK="" FW_BOOT_FULL_INIT="" # iptables -L Chain INPUT (policy DROP) target prot opt source destination ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate ESTABLISHED ACCEPT icmp -- anywhere anywhere ctstate RELATED input_ext all -- anywhere anywhere LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix "SFW2-IN-ILL-TARGET " DROP all -- anywhere anywhere Chain FORWARD (policy DROP) target prot opt source destination LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix "SFW2-FWD-ILL-ROUTING " Chain OUTPUT (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere Chain forward_ext (0 references) target prot opt source destination Chain input_ext (1 references) target prot opt source destination DROP all -- anywhere anywhere PKTTYPE = broadcast ACCEPT icmp -- anywhere anywhere icmp source-quench ACCEPT icmp -- anywhere anywhere icmp echo-request LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:ipp flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix "SFW2-INext-ACC-TCP " ACCEPT tcp -- anywhere anywhere tcp dpt:ipp LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 tcp dpt:ssh flags:FIN,SYN,RST,ACK/SYN LOG level warning tcp-options ip-options prefix "SFW2-INext-ACC-TCP " ACCEPT tcp -- anywhere anywhere tcp dpt:ssh ACCEPT udp -- anywhere anywhere udp dpt:ipp LOG all -- anywhere anywhere limit: avg 3/min burst 5 PKTTYPE = multicast LOG level warning tcp-options ip-options prefix "SFW2-INext-DROP-DEFLT " DROP all -- anywhere anywhere PKTTYPE = multicast DROP all -- anywhere anywhere PKTTYPE = broadcast LOG all -- anywhere anywhere limit: avg 3/min burst 5 LOG level warning tcp-options ip-options prefix "SFW2-INext-DROP-DEFLT " DROP all -- anywhere anywhere Chain reject_func (0 references) target prot opt source destination REJECT tcp -- anywhere anywhere reject-with tcp-reset REJECT udp -- anywhere anywhere reject-with icmp-port-unreachable REJECT all -- anywhere anywhere reject-with icmp-proto-unreachable What is wrong ? A while ago I already asked this, but then it was on OS12.3. Thanks for any pointers. Koenraad -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 7

[opensuse] SD card write protection
by Dsant 04 Apr '14

04 Apr '14

Hello, I have read somewhere that it would be possible to bypass SD cards write protection, because this "write-protect" would be software-only on some models. Is it true ? Is there a command to force "writable" when the card reader protection is software only ? Could be the same with floppy disk. -- (o_ //\ Dsant, from Lyon, France V_/_ forum(a)votreservice.com -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] Nvidia run files?
by Thomas Taylor 04 Apr '14

04 Apr '14

After upgrading my kernel from 3.11.6-4-default to 3.11.10-7-default I find the routine I have used for several years no longer works. The newer kernel doesn't have the sub-directories used to install the Nvidia modules. Specifically there seems to be no /lib/modules/3.11.10-7-default/build folder. Here is the procedure I have used: # cd /lib/modules/3.11.6-4-default/build/include # ln -s generated/uapi/linux # cd /TEMP/run-files # sh ./NVIDIA-Linux-*.run (* = version) # modprobe nvidia # rcxdm start # blacklist nouveau Can anyone supply a script that will install the Nvidia drivers in the current kernel? Thanks, Tom linxt -at- comcast.net -- The foolish man seeks happiness in the distance. The wise man grows it under his feet. - James Oppenheim ^^ --... ...-- / -.- --. --... -.-. ..-. -.-. ^^^^ Tom Taylor KG7CFC openSUSE 13.1 (64-bit), Kernel 3.11.6-4-default, KDE 4.11.2, AMD Phenom X4 955, GeForce GTX 550 Ti (Nvidia 325.15) 16GB RAM -- 3x1.5TB sata2 -- 128GB-SSD FF 27.0, claws-mail 3.9.2 registered linux user 263467 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] virus infection alerts from files in bitcoin chainstate
by ellanios82 04 Apr '14

04 Apr '14

Hello List - in case of interest : have been running clamscan, daily, on openSUSE 13.1 - today, infection alert received from .bitcoin/chainstate files : ___________ 507048.sst: Gergana.9 FOUND 506978.sst: Gen.805 FOUND 507058.sst: Chren-4016 FOUND 507057.sst: Italian.1 FOUND 507022.sst: Peace.1 FOUND 506918.sst: Boot.Gen.10past3 FOUND _____________ regards -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] reading LVM vols after reinstall
by David T-G 04 Apr '14

04 Apr '14

Hi, all -- You may recall from quite a while ago that I got a couple of 4T disks and cleaned out my collection of external drives. Yay! :-) I also have two pairs of other disks -- 500G & 300G -- in the box, but I didn't make it much farther than that. I'm also still running on my old Knoppix live install since I haven't had time to get back to SuSE Studio. I boot from a uSD card in a USB caddy; the spinning disks are solely for data. As I was going through the data transfer to consolidate, I came across some some disks which had been mirrored by LVM. Surprisingly, the LVM on my Knoppix install didn't recognize them other than by the disk label; I couldn't get to the old data. I'm not worried about the old content, since they were just scratch drives I used for playing around with LVM to get my feet wet, but ... If I create a 4T mirror using the two large disks, will I be able to see the content when I build a new SuSE Studio uSD card image and boot from it? How about the 500G+300G stripes which I will then put together to get an 800G mirror, just in case striping is different? The Knoppix image is running root@diskfarm:~# lvm version LVM version: 2.02.66(2) (2010-05-20) Library version: 1.02.48 (2010-05-20) Driver version: 4.18.0 which, while not terribly current, doesn't seem so old that I expect problems. The prior LVM was definitely old, like maybe SuSE 8 or so -- but, on the other hand, I'd also hope that any LVM would be able to use older metadevices, even if perhaps in read-only mode. TIA & HAND :-D -- David T-G See http://justpickone.org/davidtg/email/ See http://justpickone.org/davidtg/tofu.txt

1 0

[opensuse] pidgin won't connect to yahoo
by Bruce Ferrell 04 Apr '14

04 Apr '14

Debug seems to show some sort of TLS issue. Any thoughts? -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1