October 2017 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Fwd: Basically every WiFi device just hacked?
by Greg Freemyer 18 Oct '17

18 Oct '17

All, Most WiFi routers have WEP, WPA, and WPA2. WPA2 was the most secure and the recommendation. No longer: https://www.theregister.co.uk/AMP/2017/10/16/wpa2_krack_attack_security_wif… But WPA2 comes in a couple variants. Does anyone know if any of them are unaffected? Thanks Greg -- -- Greg Freemyer Advances are made by answering questions. Discoveries are made by questioning answers. — Bernard Haisch -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

11 31

[opensuse] can i dual-boot plus run Win in a VM?
by David T-G 18 Oct '17

18 Oct '17

Hi, all -- I will, soon, once again finally have my own laptop, and it's been so long that I'm basically starting over :-)/2 I will dual boot because there are still times when I just have to be in Windows, but I'd also like to fire up that same copy in a VM when I just want to pop over for a moment. Is that an option? If so, is it perhaps even possible to wake and hibernate back and forth across metal and VM? Oh, and recommendations for good laptops that have trackpoint sticks in the keyboard are also welcome :-) TIA & HAND :-D -- David T-G See http://justpickone.org/davidtg/email/ See http://justpickone.org/davidtg/tofu.txt -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 8

[opensuse] /tmp mounting question
by Roger Oberholtzer 18 Oct '17

18 Oct '17

I need to replace the btrfs /tmp volume mounted on my Leap 42.3 system with a separate partition. The thing is, the new one will not be a btrfs volume. Surely it makes no difference if I comment out the existing btrfs line: UUID=dec8ab38-419f-46e3-bb03-c72b2688a142 /tmp btrfs subvol=@/tmp 0 0 and add something like this: /dev/sda3 /tmp ext4 defaults 0 0 And then reboot. Right? /dev/sda3 is formatted (obviously) but otherwise empty. I am always suspicious of what btrfs volumes are up to... -- Roger Oberholtzer -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 4

[opensuse] I need more ram, but I can't.
by Carlos E. R. 17 Oct '17

17 Oct '17

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I need more ram than my 8GiB, but my board doesn't allow it. I use swap, but Leap is very slow when swapping; I have the feeling that it is slower than other releases. So I wonder if there is some type of small hard disk that can be used for fast swap. SSD? Would it wear out? SSD is typically slow at writing. A RAM based "disk"? No need for battery backup, unless to keep the format. Does it exist? - -- Cheers Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iEYEARECAAYFAlm/yMsACgkQtTMYHG2NR9WoeQCgkKbSLo1AZhJa29JhdYjE3myF HdsAn3dHyHmeqVDqNz08xUPhj712RDVz =S0mM -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

24 141

[opensuse] No encryption on imap on some servers [WAS: Basically every WiFi device just hacked?]
by Carlos E. R. 17 Oct '17

17 Oct '17

On 2017-10-16 22:37, James Knott wrote: > On 10/16/2017 04:02 PM, Carlos E. R. wrote: >> On 2017-10-16 20:11, James Knott wrote: >>> On 10/16/2017 01:51 PM, Carlos E. R. wrote: >>>> Besides, any communication protocol that uses encryption is safe, even >>>> if they get entry to our WiFi: ssh, https... but not, I think, smb, nfs, >>>> most email... >>> Many email providers are moving to SSL/TLS for POP, IMAP and SMTP. >> Not mine. >> > > Geez... Spain is really behind the times. Can you not even configure > it with your email apps? Also, email web interfaces now use https. > Also, Google tries to favour https web sites, to encourage encryption on > the web. It is the ISP, email is secondary for them. It is no longer offered to new clients, so they don't care that much. So currently the IMAP connection has no security at all, whereas the smtp connection does. I tried to enable starttls or ssl/tls and the connection failed. I also looked at my fetchmail log of one connection, it is this: - - 6.3.26 querying imap.telefonica.net (protocol IMAP) at 2017-10-16T13:07:35 CEST: poll started - - Trying to connect to 86.109.99.71/143...connected. - - IMAP< * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=CRAM-MD5] e.movistar.es. - - IMAP> A0001 CAPABILITY - - IMAP< * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=CRAM-MD5 - - IMAP< A0001 OK Pre-login capabilities listed, post-login capabilities have more. - - IMAP> A0002 AUTHENTICATE CRAM-MD5 - - IMAP< + ***********== - - IMAP> ************== - - IMAP< * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MUMULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE QUOTA - - IMAP< A0002 OK Logged in - - IMAP> A0003 SELECT "Inbox" - - IMAP< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk) - - IMAP< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft NonJunk Junk \*)] Flags permitted. - - IMAP< * 3 EXISTS - - IMAP< * 0 RECENT - - IMAP< * OK [UNSEEN 1] First unseen. - - IMAP< * OK [UIDVALIDITY 1496821626] UIDs valid - - IMAP< * OK [UIDNEXT 33] Predicted next UID - - IMAP< A0003 OK [READ-WRITE] Select completed (0.002 secs). - - IMAP> A0004 EXPUNGE - - IMAP< A0004 OK Expunge completed. - - 3 messages for SOMEBODY at imap.telefonica.net (folder Inbox). - - IMAP> A0005 FETCH 1:3 RFC822.SIZE - - IMAP< * 1 FETCH (RFC822.SIZE 31383) - - IMAP< * 2 FETCH (RFC822.SIZE 15673) - - IMAP< * 3 FETCH (RFC822.SIZE 16227) - - IMAP< A0005 OK Fetch completed. - - IMAP> A0006 FETCH 1 RFC822.HEADER - - IMAP< * 1 FETCH (RFC822.HEADER {2994} - - reading message SOMEBODY@imap.telefonica.net:1 of 3 (2994 header octets)Trying to connect to 127.0.0.1/25...connected. - - SMTP< 220 Telcontar.valinor ESMTP - - SMTP> EHLO Telcontar.valinor - - SMTP< 250-Telcontar.valinor - - SMTP< 250-PIPELINING ... Looking at the exchange and that it used cramd5, I changed Thunderbird to also use encryption for the password and apparently it works - this is new. But I see no nothing about using TLS or SSL in the body fetch. On another provider (pop3), I see: - - POP3> CAPA - - POP3< +OK - - POP3< CAPA - - POP3< TOP - - POP3< UIDL - - POP3< RESP-CODES - - POP3< PIPELINING - - POP3< AUTH-RESP-CODE - - POP3< USER - - POP3< SASL PLAIN - - POP3< . - - pop.dominioabsoluto.net: upgrade to TLS succeeded. <========== so fetchmail tries and succeeds on another provider, but not on telefonica aka movistar. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" at Telcontar)

3 4

[opensuse] package naming question
by Istvan Gabor 17 Oct '17

17 Oct '17

Hello: In rpm package names which part of the name is that can be used as package name in rpm command? What is the rule? Here are a few examples from my installed rpms list: Mesa-libGL1-9.2.5-61.13.1.x86_64 kdemultimedia3-sound-3.5.10.1-11.1.4.x86_64 cpp48-4.8.1_20130909-3.2.1.x86_64 pulseaudio-module-zeroconf-4.0.git.270.g9490a-20.1.x86_64 For example I'd like to run rpm -e <package-name>. How do I know what is the package name? Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2

[opensuse] Info: Conflict between SSSD and the latest version from network:/samba:/STABLE in openSUSE Leap 42.2
by Johannes Weberhofer 17 Oct '17

17 Oct '17

Just for your info: In case you are using SSSD and the latest stable version from the samba development project on Leap 42.2, you will no longer be able to start SSSD because it core-dumps. Reason is, that SSSD can not cope with the latest libldb1-1.2.2 version that comes with samba 4.7. Rolling back samba makes the system working again. Took me some hours to find... -- Johannes Weberhofer Weberhofer GmbH, Austria, Vienna -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] SQL Database sizes query
by Paul Groves 16 Oct '17

16 Oct '17

Hi all, A little stuck here. I have a list of database names in an array (databases) in a bash script. I want to get the size of these databases. I know that this query will return the size of all databases on the server. SELECT table_schema AS "Database name", SUM(data_length + index_length) / 1024 AS "Size (kb)" FROM information_schema.TABLES GROUP BY table_schema How can I change this query to get the size of only the databases in the array? thanks Paul -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

1 0

[opensuse] root in extended partition (42.3)
by listreader 16 Oct '17

16 Oct '17

Leap 423 upgraded from 422. Old drive has been in use probably since 10x. Bios. Generic code is in the MBR. I have 423 / in an extended partition. Grub2 is in 423 /. All was good. I used Yast2-bootloader module to change an option (boot loader password, if it matters). I then exited normally (OK) and yast rewrote/reinstalled the bootloader. Next boot failed at a blinking cursor. I booted with Parted Magic and found that Yast had set the extended partition itself as the boot partition, rather than / which was 2 or 3 partitions deep into the extended. I fixed that and rebooted normally. I went into Yast2-bootloader and Boot Loader Location was still correctly set there as Boot from Root Partition, even though that is not what it apparently wrote to the bootloader. So, my question is, is this expected behaviour? I don't remember this happening in previous releases. Thanks. Ralph -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 4

[opensuse] ICMP Path MTU message
by Dave Howorth 15 Oct '17

15 Oct '17

I just read a blog about packet fragmentation: https://blog.cloudflare.com/ip-fragmentation-is-broken/ And then I ran the test they link to at: http://icmpcheck.popcount.org/ The first test timed out, saying: "The request timed out. Looks like the ICMP Path MTU message was not delivered to you." The second test passed, saying: "All good! IP fragments were successfully delivered to your host." To investigate the failure of the first test, I started tcpdump and reran the test. The test gave the same result (good, I suppose) and tcpdump said: acer-suse:~ # tcpdump -ni any icmp or icmp6 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes 17:14:00.320873 IP 139.162.188.91 > 192.168.1.72: ICMP 139.162.188.91 unreachable - need to frag (mtu 905), length 136 17:14:00.332740 IP 139.162.188.91 > 192.168.1.72: ICMP 139.162.188.91 unreachable - need to frag (mtu 905), length 136 17:14:00.344596 IP 139.162.188.91 > 192.168.1.72: ICMP 139.162.188.91 unreachable - need to frag (mtu 905), length 136 ^C 3 packets captured 3 packets received by filter 0 packets dropped by kernel I'm no tcpdump expert but it looks to me that it is saying that it did receive three ICMP Path MTU messages. Is that correct and is anybody able to explain what's going on? (hopefully will save me hours of RT-wrong-FM :) TIA, Dave PS I spent all this morning investigating why I'd lost network connection until I discovered an intermediate network switch that my wife had accidently turned off :( Perhaps I should have bought managed switches! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 2