July 2015 - openSUSE Users - openSUSE Mailing Lists

[opensuse] RIP SSLv3
by Basil Chupin 10 Jul '15

10 Jul '15

The Internet community officially banishes the notoriously unsafe Secure Sockets Layer protocol. The venerable “secure” network protocol Secure Sockets Layer (SSL) v3 has met its end. SSL has co-existed on the Internet alongside its presumed successor TLS for many years, even though experts have long warned of its shortcomings. A recent rash of high-profile incidents, however, including the famous POODLE exploit, have finally caused the Internet Engineering Task Force (IETF) to take action. Request for Comment (RFC) 7568 “Deprecating Secure Sockets Layer Version 3.0” officially states the requirement that SSLv3 should not be supported. The RFC is unusually blunt, with its all-cap stipulation that “SSLv3 MUST NOT be used.” Although most systems today support the safer TLS, many provide fallback support for SSLv3 if an SSL connection is requested. Attackers have perfected the technique of requesting an SSL connection then use one of the many exploits associated with SSL. RFC 7568 states that “Any party receiving a Hello message with the version set to {3,00} MUST respond with a ‘protocol_version’ alert message and close the connection.” Many OS and application vendors have already turned off support for SSLv3 through patches and security updates. http://www.linux-magazine.com/Online/News/RIP-SSLv3 BC -- Using openSUSE 13.2, KDE 4.14.6 & kernel 4.1.1-0 on a system with- AMD FX 8-core 3.6/4.2GHz processor 16GB PC14900/1866MHz Quad Channel RAM Gigabyte AMD3+ m/board; Gigabyte nVidia GTX660 GPU -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

5 4

[opensuse] 13.1, awstats doesn't display icons
by Patrick Shanahan 09 Jul '15

09 Jul '15

13.1 server, photo albums and mail and a few files awstats-7.3-1.2.noarch from network utilities installed, setup/configured works, shows stats but icons are not displayed /etc/awstats/awstats.wahoo.no-ip.org.conf # Relative or absolute web URL of your awstats icon directory. # If you build static reports ("... -output > outputpath/output.html"), # enter # path of icon directory relative to the output directory 'outputpath'. # Example: "/awstatsicons" # Example: "../icon" # Default: "/icon" (means you must copy icon directories in # "/mywwwroot/icon") # DirIcons="/awstats/icon" /wwwroot/ = /srv/www So I have /srv/www/awstats/icon But icons are not displayed on the web page, http://my.host/cgi-bin/awstats.pl Many conflicting suggestions on google solve nothing for me. Dense :) Changing "DirIcons="/icon" and moving /srv/www/awstats/icon to /srv/ww/icon restarting apache2 still no icons displayed. What to do? tks, -- (paka)Patrick Shanahan Plainfield, Indiana, USA @ptilopteri http://en.opensuse.org openSUSE Community Member facebook/ptilopteri http://wahoo.no-ip.org Photo Album: http://wahoo.no-ip.org/gallery2 Registered Linux User #207535 @ http://linuxcounter.net -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 12

[opensuse] BTFS issues
by Moby 09 Jul '15

09 Jul '15

Stick OSS 13.2 machine running kernel 3.16.7-21-default. Machine has four SATA drives of 500 GB each. All drives are partitioned identically with 3 partitions each. First partition is 1G of type BIOS Boot. Second partition is 2 G of type linux raid. Third partition is of 463G of type linux raid. Second partitions of all drives are setup as a RAID5 md device md0 and used as swap. Third partitions of all drives are setup as a RAID5 md device md1 and mount as / (the root filesystem). Machine has been running fine for some time, doing much of nothing other than daily zypper updates etc. A few days ago, I copied massive amounts of data to /data/save1 (unsure of total amount, copied close to 1.1 TB, then deleted about 500 MB, then copied about 600 or so MG again). The copies were done with rsync and completed with no errors whatsoever. Once the copies completed, I decided to a btrfs balance (btrfs balance start /)- and that is where the fun began. btrfs kept failing with messages like below in the log (below is a grep 'btrfs' from journalctl -b so the messages are not necessarily contiguous): [44950.935025] BTRFS info (device md1): relocating block group 3706217037824 flags 1 [44954.665729] BTRFS info (device md1): relocating block group 3705143296000 flags 1 [44966.689827] BTRFS info (device md1): found 156 extents [44985.223754] BTRFS: bdev /dev/md1 errs: wr 9911, rd 0, flush 0, corrupt 0, gen 0 [44985.224033] BTRFS: bdev /dev/md1 errs: wr 9912, rd 0, flush 0, corrupt 0, gen 0 [44985.224285] BTRFS: bdev /dev/md1 errs: wr 9913, rd 0, flush 0, corrupt 0, gen 0 Running a btrfs scrub / showed no errors or issues at all. Then I started doing btrfs balance start -dusage=X and noticed that it would succeed up to X = 73 and fail after that. Then I started deleting subsets of data. I did btrfs balance start -dusage=X after each delete and noticed that as more and more data was deleted, X kept increasing before the balance would error out. Now, 4th day of the saga (slow system!) I have btrfs balance running successfully with -dusage=95 but still failing with error similar to above with -dusage=100. Do I need to keep on deleting data and doing the balance until balance succeeds with -dusage=100 ? Above, while more or less a test (the data exists in the source still so I am not too worried about losing from this btrfs file system), has scared me a bit about using btrfs for truly production data. Does anyone know what the btrfs errors in the log mean? I am assuming it has something to do with the requirement of doing a btrfs balance every so often. I know that btrfs has issues when at high usage capacity, and one has to balance etc. However, this is the first time I am seeing it, and knowing it happened without the data copy failing with a disk full error or anything of that nature has left me with the impression that btrfs is not suitable for production use. I would much rather have had my data copy fail with some disk full type error or what have you than run into this apparent time bomb. Other than the balance errors, everything else is fine on the filesystem, I can create files, delete files, system reboots fine (even though this is /). Thanks and I eagerly await comments from others who have seen this. -- --Moby They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. -- Benjamin Franklin -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 25

[opensuse] lots of kernel modules "Failed to install" during kernel upgrade. Why?
by robert.devanna＠nospammail.net 07 Jul '15

07 Jul '15

I just upgraded my kernel on Opensuse 13.2. I use the Kernel-stable repo. I noticed during the 'zypper up' process that there's a log of "Failed ..." and "could not be included" lines in the output Creating initrd: /boot/initrd-4.1.1-1.ga46abf6-desktop Executing: /usr/bin/dracut --logfile /var/log/YaST2/mkinitrd.log --force --force-drivers "raid10 xfs vfataes sha1 sha256 sha512 cryptd" /boot/initrd-4.1.1-1.ga46abf6-desktop 4.1.1-1.ga46abf6-desktop dracut module 'plymouth' will not be installed, because it's in the list to be omitted! *** Including module: bash *** *** Including module: warpclock *** *** Including module: i18n *** *** Including module: ifcfg *** *** Including module: dm *** Skipping udev rule: 64-device-mapper.rules Skipping udev rule: 60-persistent-storage-dm.rules Skipping udev rule: 55-dm.rules *** Including module: kernel-modules *** Failed to install module sd_mod Failed to install module hid_generic Failed to install module unix Failed to install module ehci-hcd Failed to install module ehci-pci Failed to install module ohci-hcd Failed to install module uhci-hcd Failed to install module atkbd Failed to install module i8042 Failed to install module usbhid Failed to install module hid-apple Failed to install module hid-cherry Failed to install module hid-logitech Failed to install module hid-microsoft Omitting driver i2o_scsi Failed to install module ext4 Failed to install module swap Failed to install module LVM2_member Failed to install module ext4 *** Including module: lvm *** Skipping udev rule: 64-device-mapper.rules Skipping udev rule: 56-lvm.rules Skipping udev rule: 60-persistent-storage-lvm.rules *** Including module: resume *** *** Including module: rootfs-block *** *** Including module: terminfo *** *** Including module: udev-rules *** Skipping udev rule: 91-permissions.rules Skipping udev rule: 80-drivers-modprobe.rules *** Including module: biosdevname *** *** Including module: systemd *** Failed to install module autofs4 Failed to install module ipv6 *** Including module: usrmount *** *** Including module: base *** *** Including module: fs-lib *** *** Including module: shutdown *** *** Including module: suse *** *** Including modules done *** *** Installing kernel module dependencies and firmware *** *** Installing kernel module dependencies and firmware done *** *** Resolving executable dependencies *** *** Resolving executable dependencies done*** *** Hardlinking files *** *** Hardlinking files done *** *** Stripping files *** *** Stripping files done *** *** Generating early-microcode cpio image *** *** Store current command line parameters *** Stored kernel commandline: rd.driver.pre=raid10 rd.driver.pre=xfs rd.driver.pre=vfat rd.driver.pre=aes rd.driver.pre=sha256 rd.driver.pre=sha512 rd.driver.pre=cryptd rd.lvm.lv=VG0/ROOT rd.lvm.lv=VG0/SWAP resume=/dev/mapper/VG0_SWAP root=/dev/mapper/VG0_ROOT rootflags=rw,noatime,journal_checksum,data=ordered rootfstype=ext4 *** Creating image file *** *** Creating image file done *** Some kernel modules could not be included: sd_mod hid_generic unix ehci-hcd ehci-pci ohci-hcd uhci-hcd atkbd i8042 usbhid hid-apple hid-cherry hid-logitech hid-microsoft ext4 swap LVM2_member ext4 autofs4 ipv6 Update bootloader... committingCommitResult (total 174, done 174, error 0, skipped 0, updateMessages 0) Checking for running processes using deleted libraries... There are some running programs that might use files deleted by recent upgrade. You may wish to check and restart some of them. Run 'zypper ps' to list these programs. Why am I getting the "failed" and "unable" lines? Half of those are for stuff I don't even recognize or need. E.g., there's nothing here that's "microsoft" or "apple". I don't know if something's telling the upgrade to try those, and it shouldn't be trying, or if those SHOULD be working and there's a problem. Where do I start to look? Rob -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 3

[opensuse] Problem with Dropbox API on OpenSUSE
by André Verwijs 06 Jul '15

06 Jul '15

Linux 3.16.7-21-desktop openSUSE 13.2 (Harlequin) (x86_64) KDE 4.14.9 Dopbox Package: 1.6.2-4.1 I have a problem with Dropbox API on OpenSUSE Linux. Not sure who is maintaining the Dropbox code for linux... if you see image, the system-tray menu does not show correctly. other packages with system-tray menu work fine.... Image: https://dl.dropboxusercontent.com/u/37745116/OpenSUSE/Dropbox_API_problem.p… -- ______________________________________________________________________________________ My Twitter Page: http://twitter.com/OpenSimFan My Facebook page (be my friend, please ) http://www.facebook.com/andre.verwijs My Google+ page (follow me please ) André Verwijs - Google+ https://plus.google.com/111310545842863442992 -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] re-install because system crashed
by ellanios82 06 Jul '15

06 Jul '15

Hello List , Can one Save the output of|rpm -qa|of the present running system as the input for|zypper ............ - then , in the event of a system crash , needing a complete re-install : what please is the Syntax for instruction to Zypper to install the saved reserve output of rpm -qa & How to Save the output of rpm -qa : as a Text-file ?? thanks regards ellan | -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

9 72

[opensuse] 13.1 FF38 - sites complain Flash Player is Vulnerable
by David C. Rankin 05 Jul '15

05 Jul '15

All, I have had several sites pop-up warnings that flash-player is vulnerable and request confirmation before viewing. noaa.weather.gov being the latest. I have the following installed: flash-player-11.2.202.457-174.1.x86_64 Is this not the latest? I've checked and there are no newer versions. Am I missing a patch or something? If so, where to get? -- David C. Rankin, J.D.,P.E. -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 8

[opensuse] Mono 3.8.0-1.4 on OpenSUSE 13.2 (Harlequin) (x86_64) still crashing ....
by André Verwijs 05 Jul '15

05 Jul '15

Mono 3.8.0-1.4 on OpenSUSE 13.2 (Harlequin) (x86_64) still crashing.... not sure why.... added stack-trace ass attachment. (Mono-stacktrace.txt) or read online: https://copy.com/bq8M8CByUdC3cBx0 -- ______________________________________________________________________________________ My Twitter Page: http://twitter.com/OpenSimFan My Facebook page (be my friend, please ) http://www.facebook.com/andre.verwijs My Google+ page (follow me please ) André Verwijs - Google+ https://plus.google.com/111310545842863442992

1 0

[opensuse] Latest Thunderbird Borked?
by Lew Wolfgang 04 Jul '15

04 Jul '15

Hi Folks, Is it just me or is the latest Thunderbird 38.0.1 from obs://build.opensuse.org/mozilla having problems? There's a new annoying button placement and it's unable to send mail. The send window opens and everything works up to the point I hit the "send" button. Then nothing happens. It doesn't freeze, but the message is never sent. I went back to 31.7.0 to send this note. This is on 13.2 x86-64. The only "odd" aspect is I configure outgoing SMTP to use port 2025 to bypass my ISP's firewall. Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 4

[opensuse] Network Gurus - Why is RedHat Contacting my Webserver?
by David C. Rankin 04 Jul '15

04 Jul '15

All, (network guys/girls), During a routine dump of network traffic I stumbled upon a short (14 packet) bit of communication between my web server and (209.132.178.69) (RedHat). (packet summary attached) It wasn't so much alarming as it was a "WTF is that for?" I'm curious if anyone knows whether or what it looks like the communication was for? Net topology survey? Linux verses other server count? Let me know if anybody has an idea regarding what it is. -- David C. Rankin, J.D.,P.E.

2 2