January 2015 - openSUSE Users - openSUSE Mailing Lists

Re: [opensuse] Re: [security-announce] Upcoming update for shim requires confirmation on reboot
by jsegitz＠suse.com 19 Jan '15

19 Jan '15

On Fri, Jan 16, 2015 at 05:18:27PM +0100, jdd wrote: > just for the record, is it possible to have secure boot in a VM? It is, but it is very unlikely that you will encounter that. http://blog.hansenpartnership.com/uefi-secure-boot/ Johannes -- GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE LINUX GmbH Maxfeldstraße 5 90409 Nürnberg, Germany GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg)

1 0

[opensuse] help needed for setting up local mail server
by Istvan Gabor 18 Jan '15

18 Jan '15

Hello: I would like to set up a local email server. I have a linux server which is connected to the internet (WAN) and to a local network (LAN). I want the server to fetch messages from different mailboxes provided by my ISP, and store (and backup) those messages. LAN clients would fetch messages from this linux server and not directly from my ISP. Messages from LAN clients would be sent (and backed up) through/by the server using my ISP's SMTP server. All email traffic (all incoming and outgoing) messages should have a backup which can not be modified by the clients. Do I have to set up a mail transfer agent on the server, or use fetchmail to receive the messages, or both? Please give me a few hints how to proceed or what the options are. Links to tutorials and manuals are also welcome. Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

8 25

[opensuse] Internet inaccessible, both during and after a fresh 13.2 installation
by Carl Hartung 18 Jan '15

18 Jan '15

Hi All, I installed 13.2 today on my laptop while the same wired network was plugged in that I use every day. The network wasn't properly detected, or at least it wasn't properly configured during installation, because adding the online repositories and downloading updates failed. After booting the installed system, it still does not work properly. I can connect to the router (192.168.1.1) but not to the Internet. The same holds true for the wireless connection if I enable it. The router passphrase prompt appears but the system can't connect to the Internet after I enter it. For the record, this system has had Vista64, openSUSE 12.3 and Mint 17 installed in parallel up to today and this network connection in all three cases has always 'just worked.' This leads me to believe that the problem is unique to the 13.2 installer. I realize I could probably go 'tinkering under the hood' to make it work, but I'd prefer that the system stays 'stock' as much as possible and to make it work using either the regular installation or desktop tools if I can. Towards that end, does anyone know of a way to access the network detection and configuration routines during installation to see what's going on and influence it? All ideas and advice will be gratefully appreciated. TIA & regards, Carl -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

11 22

[opensuse] http://download.opensuse.org/repositories/LibreOffice:/Stable/openSUSE_Tumbleweed/
by ianseeks 18 Jan '15

18 Jan '15

Hi Does anyone know if this repo will reappear or has http://download.opensuse.org/repositories/LibreOffice:/4.3/ superseded it? thanks Ian -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 16

[opensuse] Too many dictionaries listed for comfort, after Thunderbird update to 31.3.0
by Carlos E. R. 17 Jan '15

17 Jan '15

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, The photo describes my problem: <http://susepaste.org/20503487> You see that I get a long list of dictionaries on Thunderbird. Previously to the last update to 31.3.0, I only had what I expected: three English variants (US, UK, CA), and one for Spanish. Now I get so many that switching dictionary language is awkward. I don't even know if all those dictionaries are installed. - -- Cheers / Saludos, Carlos E. R. (from 13.1 x86_64 "Bottle" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iEYEARECAAYFAlS61AEACgkQtTMYHG2NR9WAPACfRwIun5mI2Qp6B26OPM73TRjE xDkAnj9bI88OZdXV4PhK0vOofOmEvDSN =2Bhu -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] rounding interval to 128 microframes, ep desc says 255 microframes - any fix?
by Istvan Gabor 17 Jan '15

17 Jan '15

Hello: Does anyone know of a fix for this nasty bug which makes some USB3 devices unusable? When a USB3 device is plugged in, dmesg reports: rounding interval to 128 microframes, ep desc says 255 microframes Apparently this is a quite old USB driver bug that affects every linux systems, in my case it is openSUSE 13.2 i686 (3.16.6-2-desktop #1 SMP PREEMPT Mon Oct 20 13:47:22 UTC 2014 (feb42ea) i686 i686 i386 GNU/Linux). I couldn't find by google querying though if there is a fix for it. Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 3

[opensuse] DSL always on possible?
by Bjoern Voigt 16 Jan '15

16 Jan '15

I have a DSL connected server running with openSUSE 13.1. This server has an on-demand DSL connection which should be "always on" because I use the server from outside (using Dyndns). In /etc/sysconfig/network/providers/provider0 there is ASKPASSWORD='no' AUTODNS='yes' DEMAND='yes' DSLSUPPORTED='yes' IDLETIME='1500' ISDNSUPPORTED='no' MODEMSUPPORTED='no' MODIFYDNS='no' PASSWORD='secret' PHONE='' PROVIDER='A Provider' USERNAME='username' DEFAULTROUTE='yes' IPADDR='' MODIFYIP='yes' REMOTE_IPADDR='' AUTO_RECONNECT='yes' My problem is, that I need a nearly useless service ('ping' or 'fetchmail' for instance) which starts network requests regularly so that the DSL connection starts and stays alive. Is there a recommended way to start DSL without any network request, so that it's nearly always on? In openSUSE documentation I only found two alternatives: always-on and manually. Both are not ideal. (I know, that the provider breaks the connection every 24 hours. The router should reconnect then.) Greetings, Björn -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

7 49

[opensuse] Re: [security-announce] Upcoming update for shim requires confirmation on reboot
by jsegitz＠suse.com 16 Jan '15

16 Jan '15

On Fri, Jan 16, 2015 at 10:02:08AM -0500, Greg Freemyer wrote: > That's a big deal. No, it's not, the overwhelming majority of users are not affected. > Can you explain how to use bootctl for those of us > that aren't familiar with it.? Of course. > I have a VM in the cloud running 13.1. No idea if it is a secure > config. Using bootctl I get: It is not. When you run bootctl there are three relevant scenarios: 1, You see "Secure Boot: enabled" in the output. Then you're using a secure boot configuration and are affected. You should update shim and prepare in advance so that you can confirm the dialog. 2, You see "Secure Boot: disabled" but you also see something like Selected Firmware Entry: Title: opensuse-secureboot Partition: /dev/disk/by-partuuid/dddddddd-cccc-bbbb-aaaa-ffffffffffff File: └─/EFI/opensuse/shim.efi Then you're not using secure boot but shim is used on your system nonetheless. You can either update shim and prepare in advance so that you can confirm the dialog or you switch to booting grub directly since you're not using secure boot anyway. 3, You see "Secure Boot: disabled" and don't have "shim" in the next few lines. It should like this Selected Firmware Entry: Title: grub Partition: /dev/disk/by-partuuid/dddddddd-cccc-bbbb-aaaa-ffffffffffff File: └─/EFI/opensuse/grub.efi you're not affected. You can update shim and won't notice the difference. This will be the case for the vast majority of users. Best regards, Johannes -- GPG Key E7C81FA0 EE16 6BCE AD56 E034 BFB3 3ADD 7BF7 29D5 E7C8 1FA0 Subkey fingerprint: 250F 43F5 F7CE 6F1E 9C59 4F95 BC27 DD9D 2CC4 FD66 SUSE LINUX GmbH Maxfeldstraße 5 90409 Nürnberg, Germany GF: Felix Imendörffer, Jane Smithard, Jennifer Guild, Dilip Upmanyu, Graham Norton, HRB 21284 (AG Nürnberg)

2 1

[opensuse] Re: [security-announce] Upcoming update for shim requires confirmation on reboot
by Greg Freemyer 16 Jan '15

16 Jan '15

On Fri, Jan 16, 2015 at 8:53 AM, Johannes Segitz <jsegitz(a)suse.com> wrote: > Hello, > > we will release a security update for shim next week that fixes three > security issues, tracked in bnc#889332: > - OOB read access when parsing DHCPv6 packets (remote DoS) (CVE-2014-3675). > - Heap overflow when parsing IPv6 addresses provided by tftp:// DHCPv6 boot > option (RCE) (CVE-2014-3676). > - Memory corruption when processing user provided MOK lists (CVE-2014-3677). > > Because of those issues we update shim to version 0.7.318.81ee561d. This > version includes a patch that requires the user to confirm a dialog once > on the first boot after the update is installed. You will need to be able > to confirm this dialog, which appears before the bootloader, or your system > will not boot. This only affects users that are still on openSUSE 13.1 and > use a secure boot setup. You can check with 'bootctl' if you're using a > secure boot configuration if you're not sure. > > Best regards, > Johannes Segitz Johannes, That's a big deal. Can you explain how to use bootctl for those of us that aren't familiar with it.? I have a VM in the cloud running 13.1. No idea if it is a secure config. Using bootctl I get: ================= # bootctl System: Machine ID: 66246c6e9ad17aa97b5daf4551c883a1 Boot ID: cb221a9b79094721ac8158f0c4ebf14a No suitable data is provided by the boot manager. See: http://www.freedesktop.org/wiki/Software/systemd/BootLoaderInterface http://www.freedesktop.org/wiki/Specifications/BootLoaderSpec for details. ================== # bootctl status System: Machine ID: 66246c6e9ad17aa97b5daf4551c883a1 Boot ID: cb221a9b79094721ac8158f0c4ebf14a No suitable data is provided by the boot manager. See: http://www.freedesktop.org/wiki/Software/systemd/BootLoaderInterface http://www.freedesktop.org/wiki/Specifications/BootLoaderSpec for details. ================== FYI: My cloud provider does provide a VNC interface that give me access to the console during the grub boot phase, but it something I only see if I intentionally fire it up. I only do that once a year or so, thus I will need to pay very close attention to this security update. I assume there are lots of users like me. Greg -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] Migrating from HDD to SSD
by Rodney Baker 16 Jan '15

16 Jan '15

Hi all. A question for those with a little more experience with SSD's. I want to move oS 13.1 from conventional HDD's to a 128GB SSD, everything except /home. /var and some other general data storage partitions (so basically /boot, /, /usr, /usr/local and /opt. I have these already as separate partitions - can I use dd to copy the boot sector and relevant partitions to the SSD and then connect it up in place of the first hdd (currently /dev/sda) and expect the system to boot? Would it be better to dd the boot sector, then create the new partitions and rsync them across? Yes, I will need to adjust fstab to point to the relocated partitions, but I'd rather not do a full re-install if I don't need to. Thanks in advance, & Happy New Year. Rodney. -- ============================================================== Rodney Baker VK5ZTV rodney.baker(a)iinet.net.au ============================================================== -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

11 17