August 2019 - openSUSE Users - openSUSE Mailing Lists

[opensuse] Clamav process is now even more memory hungry
by Carlos E. R. 03 Sep '19

03 Sep '19

Photo using top, sort by memory, this instant: > PID USER PR NI VIRT RES SHR SWAP S %CPU %MEM TIME+ COMMAND > 21395 cer 20 0 3402620 782716 85432 166280 S 69,35 9,591 61:58.83 Web Content > 1096 cer 20 0 3688736 767644 104104 0 S 2,976 9,406 19:05.04 thunderbird-bin > 3938 vscan 20 0 999648 725460 2628 17856 S 0,000 8,889 8:09.22 clamd .................................******* 0.7 GB of RAM! I will have to uninstall it. Las time I looked, it was half a gigabyte. And it is set with swapiness of 100... -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

2 29

[opensuse] Why does OpenSUSE Tumbleweed change XFCE?
by Markus Egg 02 Sep '19

02 Sep '19

Hello, I am running SuSE Tumbleweed on a desktop and on an older laptop (for test purposes). On both machines after the last zypper ref/dup/up cycle the complete XFCE desktop was changed, many of the settings were lost and the way how one can change e.g. the desktop background was changed in a way that it is more inconvenient. I do know that XFCE per se did not change, because on another Laptop with Ubuntu 18.04 the XFCE desktop and settings were the same after the last updates. So as an example: the conventient way to set XFCE background on Ubuntu was and is like shown in ConvenientDesktopSet.jpg The new way from SuSE Tumbleweed (last zypper ref/dup/up cycle yesterday, uname says "...5.2.10-1-default #1 SMP Sun Aug 25 17:33:34 UTC 2019..." ) is seen in warumallesandersSuSETumble_1.jpg warumallesandersSuSETumble_2.jpg : now you need 2 sub-windows for e.g. setting the background colors and you cannot set colors with decimal numbers for RGB or HSV, you have to do it in hex. :-/ I was moving to XFCE since KDE changed the way of virtual workspaces in an unusable manner, and now someone is starting to mess up XFCE. <rant on> Where did the message of "never change a runnning machine" go? <rant off> :-( And if it needs a change: Why not putting the "predefined color section" into the color selection window of ConvenientDesktopSet.jpg ? BR

7 15

[opensuse] trying to get scanner to work
by Doug McGarrett 02 Sep '19

02 Sep '19

(part of thread) On 08/29/2019 01:26 AM, Basil Chupin wrote:> On 28/8/19 3:13 pm, Doug McGarrett wrote: >> >> >> On 08/28/2019 12:10 AM, Basil Chupin wrote: >>> On 28/8/19 9:05 am, Doug McGarrett wrote: >>>> >>>> >>>> On 08/27/2019 05:02 PM, Carlos E. R. wrote: >>>>> On 27/08/2019 22.56, Doug McGarrett wrote: >>>>>> Went to Epson site and looked up this scanner and Linux. It says, >>>>>> and I >>>>>> quote: >>>>>> >>>>>> >>>>>> >>>>>> "On Linux, you need to set up libusb device protections. <<<-- >>>>>> " >>>>>> >>>>>> I don't know what this means, or how to do it. Please advise! >>>>> >>>>> Me neither. >>>>> >>>>> What model? >>>>> >>>> WP4530 All-in-One printer scanner fax >>>> >>>> --doug >>>> >>> >>> Go here- >>> >>> https://askubuntu.com/questions/591888/drivers-for-my-epson-wp-4530 >>> >>> and I think your problem is solved. >>> >>> >>> (There's that 'ubuntu' word again...) >>> >>> >>> BC >>> >>> >> I have that file installed already. But thanx. --doug > > > You have that driver already installed but you still cannot print? The > driver specifically states that it works with the WP4530. > > Just out of curiosity, did you install the 32-bit or the 64-bit version > of the driver? > > Oh, and how did you install the *.RPM? > > I don't remember for sure, but I usually install an rpm by apt-get install filename.rpm (all on one line) I would certainly have installed the 64 bit version. later, from another post, which I can't locate, I was told to get this: imagescan-bundle-opensuse-15.1-3.59.2.x64.rpm.tar.gz so I did tar -xzvf imagescan-bundle-opensuse-15.1-3.59.2.x64.rpm.tar.gz and got an rpm file, as expected, but it has trouble installing: [CODE] apt-get install imagescan-3.59.2-1epson4opensuse15.1.x86_64.rpm Specified local path does not exist or is not accessible. Problem retrieving the specified RPM file: Malformed URI: Please check whether the file is accessible. Problem with the RPM file specified as 'imagescan-3.59.2-1epson4opensuse15.1.x86_64.rpm', skipping. No valid arguments specified.[/CODE] --doug -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

6 43

[opensuse] Help needed configuring firewalld
by Marc Chamberlin 01 Sep '19

01 Sep '19

I need some help/guidance with firewalld and I can't seem to get an account set up on the Fedora site where it appears that the main newsgroup for supporting firewalld is being hosted. (at least according to my Google research) I am getting requests from small businesses, homeowners, and me myself and I to find a solution for handling modern day internet of things "IOT" (devices that connect to the internet) thingies that range from security cameras to robot vacuum cleaners to fit bit wrist monitors etc... To handle all these wonderful thingy dingys I thought the best approach would be to relegate them to their own subnet and manage them at a firewall. That way I thought I could monitor and if necessary keep ET from phoning home and sending data to parties unknown (i.e security cameras with firmware made in China for example, and yeah call me paranoid if it helps). AND I can keep these thingies from bogging down my other networks of computers doing "real" work and keeping them secured from these widgets as well. Towards this goal I am setting up a second wireless/wired network to be used by these devices and connecting it to a second NIC interface on one of my computers. I then created a firewalld "zone" for that interface. And yeah I will also set up a dhcpd (and assign static IP addresses based on MAC addresses) and even a DNS server for these thingies to use, if necessary. Before I ask how to do what I want with firewalld, perhaps I should express what I think the firewalld model of an interface is, because I have found a lot of inconsistencies in articles on the internet that try to explain things. I think when talking about incoming or outgoing connections I will use the host computer that firewalld is running on as the reference point (and not the network in which the host and it's interface is part of). So incoming means packets coming in to the host, through an interface, from some external network. Outgoing means packets that are passing through an interface, from the host to some other computer on an external network. Please excuse my wordiness but I need to make an effort to be sure I am communicating clearly. What I first want to be able to do is to be able to execute a command that blocks all incoming traffic originating from devices within this second network zone, regardless of whether those messages are trying to connect to some service on firewalld's host itself or whether those messages want to be passed on by the host to some other server on some other network. I also want to block all outgoing traffic going to devices on this second network. While in this state I want to be able to monitor/log any attempts, and traffic content, by devices on this network to initiate communication, so I can determine who/what is trying to "phone home" and where it is trying to reach. I don't expect firewalld to have such a builtin command, I expect to have to write a script, but I need to know how to put firewalld in such a state for a particular interface. Next I want to be able to configure firewalld so that it allows incoming requests from hosts on this second network, and to allow connections to services running on firewalld's host as well as allowing those connection requests to be passed on to external networks. But I still want to block all outgoing traffic through this second interface, that may be returning to devices on this secondary network. And I still want to be able to log/monitor/examine this outgoing traffic before relaxing any firewall rules to allow those outgoing connections through the interface. Again I want to be able to create a script to put the firewall in that state. Next I want to be able to configure firewalld to block all incoming and outgoing traffic to/from this secondary net unless the traffic was initiated/established by a service/process running on the host that firewalld is running on. In other words. I don't want to allow any traffic from any network to be passed through the interface to this secondary network, unless that traffic originated on the localhost itself that the firewalld daemon is running on. Perhaps being able to add/allow specific hosts would also be helpful as not all services are necessarily provided on the local firewalld host that I want to monitor. Conceptually it seems like a firewall should have the capability to effectively turn an interface completely off, disallowing ALL incoming and/or outgoing traffic through an interface regardless of whether it is intended for some service on the host itself or for some other host on some other network, while at the same time logging or allowing an administrator to monitor what is happening at that interface. I can't seem to get a straight answer on how to get firewalld to do these things so I suspect it may not be possible or perhaps not intended. It is certainly possible to use firewalld to control incoming connections to services that are running on the host itself, and it is possible to control/route specific types of incoming connections to specific other hosts/nets. So it appears that firewalld is more oriented towards regulating incoming connection requests, to the host (and network(s)) firewalld is running on/has direct control over, and could care less about traffic that wants to pass through the host and become an outgoing connection via some other interface. I suspect that firewalld, by default, just passes those requests on to whatever gateway IP address or routing rules, via some interface, that is defined by it's host system network configuration tools. At least I should say I have not been able to figure out how to make firewalld care about all these other connections from the man pages for firewall-cmd. I suspect I am going to have to create some "rich rules" or "direct rules" for firewalld that augment iptables but I don't have much experience or understanding of iptables though like most software engineers I can learn (or ask for help from some kind guru). Seems like this should be easy/intuitive so perhaps I am overlooking the obvious? My goal is to be able to establish better control over some of these insecure devices and to insert my own tools to interface with these devices, for example an Apache web server that will want to make a connection to security cameras on this subnet (tex zoneminder is a good example of where I am headed here) to serve out an image stream after proper authorization. I might want to open a particular port to a particular IP address at a particular time using cron, add filters to prevent things like traceroute being executed by some IOT thingy (yep I saw that happen!) or use something like a port knocker to open ports at will if/when I want to access one of these IOT thingies from the internet... If for another example I see something like a security camera trying to send large amounts of data to some unexpected location I definitely want to put a stop to it fast! I am aware of the fact that some of this may provoke a discussion about controversial topics, and a one size solution is not going to be the answer to everything. A Fitbit should be able to contact it's cloud from home, but a business may want to ban it... yada yada yada... So please I am not looking to start such discussions. Since I am running most of my systems under OpenSuSE (most are 15.0, but some are 42.3 and even one business is running 42 .1) I thought I would throw my question out here while trying to get an account on Fedora so I can ask questions on their firewalld support group. Any SuSE firewalld gurus here or anyone who has traveled down this path? Would love to hear suggestions, insights, or comments cuz right now I seem to be stuck... Thanks in advance... Marc.. (P.S. I will say that the one thing that the man pages for firewall-cmd makes crystal clear REPEATEDLY is that if you don't specify a zone for a firewall-cmd command that "If the zone is omitted the default zone will be used."!! You got NO excuse if you should ever forget that little bit of a trinket! LOL) -- --... ...-- .----. ... -.. . .-- .- --... .--. -..- .-- -- .- .-. -.-. Computers: the final frontier. These are the voyages of the user Marc. His mission: to explore strange new hardware. To seek out new software and new applications. To boldly go where no Marc has gone before! -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

4 8

[opensuse] Unencrypted File Transfers: Howto?
by Lew Wolfgang 31 Aug '19

31 Aug '19

Hi Folks, We've been using rsh, and rsync calling rsh, to transfer large files over local network links to avoid the encrypt/decrypt overhead. I know about the security concerns, but these transfers are completely local on isolated networks. In preparation for deploying a 40GbE link I noticed that rsh isn't supported on Leap 15 and up. There's a replacement called mrsh that uses something called munge for authentication. Bummer. I'd rather not have to figure this all out when authentication isn't needed in the first place. So, what are the options for sending many large files between machines without encryption? SSH insists on encryption, but there are apparently patches that will allow it to be turned off. Maybe wrap netcat up with some scripts? Maybe rsync could be persuaded to use netcat? Byte the bullet and learn munge? Any other options? Regards, Lew -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

10 49

[opensuse] LibreOffice : Spreadsheet : red cell boundaries : shows Date cell content changed
by ellanios82 31 Aug '19

31 Aug '19

- today, am confronted by new un-wanted 'Improvement' : spreadsheet shows red cell boundaries & shows Date cell content changed .... any suggestions how to get back to without "red cell boundaries & shows Date cell content changed" ?? [ have looked at Cell-format , but unable see how to fix] thanks ..... -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

3 7

[opensuse] File Systems
by Wolfgang Mueller 31 Aug '19

31 Aug '19

I am going to install 42.3 on a computer whose hard disk I want to erase completely to change partitioning. This gives me the chance to choose the file system. So far, I used ext4 only. But recently I read more about XFS and btrfs. But I know too little about them. Are they better than ext4? Or worse? Can you tell me something about their advantages and possible defects? Are there bugs? Best regards, Wolfgang -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

14 32

[opensuse] leap 15.1 how to stop/restart network service?
by Istvan Gabor 30 Aug '19

30 Aug '19

Hello: In openSUSE Leap 15.1 I configured network service using network manager (not wicked). It seems when I stop network service, the network is not disabled. See: When the network is on: # systemctl status network ● NetworkManager.service - Network Manager Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; enabled; vendor preset: disabled) Drop-In: /usr/lib/systemd/system/NetworkManager.service.d └─NetworkManager-ovs.conf Active: active (running) since Tue 2019-08-27 01:05:10 CEST; 7min ago Docs: man:NetworkManager(8) Main PID: 2674 (NetworkManager) Tasks: 4 (limit: 4915) CGroup: /system.slice/NetworkManager.service ├─2674 /usr/sbin/NetworkManager --no-daemon └─2699 /sbin/dhclient -d -q -sf /usr/lib/nm-dhcp-helper -pf /var/run/dhclient-eth1.pid -lf /var/lib/Netwo> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.2812] policy: set 'Wired connection 2' (eth1) a> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: nisdomainname: you must be root to change the domain name Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.4240] device (eth1): Activation: successful, de> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.4246] manager: startup complete Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.8252] dhcp6 (eth1): nameserver 'fe80::1' Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.8252] dhcp6 (eth1): state changed unknown -> bo> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: nisdomainname: you must be root to change the domain name Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.9718] dhcp6 (eth1): client pid 2705 exited with> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.9718] dhcp6 (eth1): state changed bound -> done Aug 27 01:05:11 linux-14wp NetworkManager[2674]: <info> [1566860711.5176] manager: NetworkManager state is now CONN> # ping opensuse.org PING opensuse.org(opensuse.org (2620:113:80c0:8::19)) 56 data bytes 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=1 ttl=54 time=52.1 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=2 ttl=54 time=52.2 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=3 ttl=54 time=51.9 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=4 ttl=54 time=51.6 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=5 ttl=54 time=51.9 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=6 ttl=54 time=51.8 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=7 ttl=54 time=51.7 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=8 ttl=54 time=52.2 ms ^C --- opensuse.org ping statistics --- 8 packets transmitted, 8 received, 0% packet loss, time 7011ms rtt min/avg/max/mdev = 51.699/51.987/52.256/0.254 ms Then I (suppose) disable the network: # systemctl stop network # systemctl status network ● NetworkManager.service - Network Manager Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; enabled; vendor preset: disabled) Drop-In: /usr/lib/systemd/system/NetworkManager.service.d └─NetworkManager-ovs.conf Active: inactive (dead) since Tue 2019-08-27 01:15:17 CEST; 4s ago Docs: man:NetworkManager(8) Process: 2674 ExecStart=/usr/sbin/NetworkManager --no-daemon (code=exited, status=0/SUCCESS) Main PID: 2674 (code=exited, status=0/SUCCESS) Tasks: 1 (limit: 4915) CGroup: /system.slice/NetworkManager.service └─2699 /sbin/dhclient -d -q -sf /usr/lib/nm-dhcp-helper -pf /var/run/dhclient-eth1.pid -lf /var/lib/Netwo> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.8252] dhcp6 (eth1): state changed unknown -> bo> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: nisdomainname: you must be root to change the domain name Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.9718] dhcp6 (eth1): client pid 2705 exited with> Aug 27 01:05:10 linux-14wp NetworkManager[2674]: <info> [1566860710.9718] dhcp6 (eth1): state changed bound -> done Aug 27 01:05:11 linux-14wp NetworkManager[2674]: <info> [1566860711.5176] manager: NetworkManager state is now CONN> Aug 27 01:15:17 linux-14wp systemd[1]: Stopping Network Manager... Aug 27 01:15:17 linux-14wp NetworkManager[2674]: <info> [1566861317.6149] caught SIGTERM, shutting down normally. Aug 27 01:15:17 linux-14wp NetworkManager[2674]: <info> [1566861317.6156] manager: NetworkManager state is now CONN> Aug 27 01:15:17 linux-14wp NetworkManager[2674]: <info> [1566861317.6362] exiting (success) Aug 27 01:15:17 linux-14wp systemd[1]: Stopped Network Manager. nm-applet also indicates that the network is off (small red x in the applet icon). Still I can ping sites and can browse the internet: # ping opensuse.org PING opensuse.org(opensuse.org (2620:113:80c0:8::19)) 56 data bytes 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=1 ttl=54 time=52.2 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=2 ttl=54 time=52.3 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=3 ttl=54 time=52.3 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=4 ttl=54 time=52.0 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=5 ttl=54 time=51.9 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=6 ttl=54 time=52.1 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=7 ttl=54 time=51.7 ms 64 bytes from opensuse.org (2620:113:80c0:8::19): icmp_seq=8 ttl=54 time=52.4 ms ^C --- opensuse.org ping statistics --- 8 packets transmitted, 8 received, 0% packet loss, time 7009ms rtt min/avg/max/mdev = 51.754/52.161/52.463/0.361 ms What do I do wrong? Thanks, Istvan -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

2 1

[opensuse] exFAT specs published!
by Carlos E. R. 30 Aug '19

30 Aug '19

It seems that M$ has just published the exFAT specs, explicitly so that Linux adds full and legal support for it :-) <https://www.theinquirer.net/inquirer/news/3080947/microsoft-exfat-open-sour…> Comments on the offtopic list, perhaps, please :-) -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)

4 5

[opensuse] trying to get scanner to work
by Doug McGarrett 30 Aug '19

30 Aug '19

Went to Epson site and looked up this scanner and Linux. It says, and I quote: "On Linux, you need to set up libusb device protections. " I don't know what this means, or how to do it. Please advise! Thanx, Doug -- To unsubscribe, e-mail: opensuse+unsubscribe(a)opensuse.org To contact the owner, e-mail: opensuse+owner(a)opensuse.org

7 11