- openSUSE Users

TW - How to fix display-manager so starting doesn't move tty1 to tty2 and put syslog on tty1?
by David C. Rankin 01 Mar '25

01 Mar '25

All, Devs, I'm currently booting to multi-user target due to the i915 issue on this box. I needed to start icewm, but using startx calling icewm-session in .xinitrc didn't fully set the environment for icewm. So I started the display-manager and then started icewm. (I needed it because there is no yast-firewall in the text based yast) When you start display-manager, your login on tty1 is moved to tty2 and syslog is displayed on tty1, lightdm/X is on vt7. When done in icewm, I need … [View More]

2 2

In xterm "su: failed to execute /bin/bash: Permission denied" - pam_selinux.so (Ok from console)
by David C. Rankin 28 Feb '25

28 Feb '25

Devs, When running an xterm in fluxbox or icewm is su blocked? Attempting to su I get: $ su su: failed to execute /bin/bash: Permission denied When I'm running from a console or ssh into the box, su works just fine: 08:24 wizard:~> ssh niflheim Last login: Fri Feb 28 08:23:05 CST 2025 on tty1 Have a lot of fun... 08:24 niflheim:~> su [08:24 niflheim:/home/david] # This seems to be the result of /etc/pam.d/common-session including: session required pam_selinux.so … [View More]

1 1

How to move TW UEFI install off ssd1 to ssd2?
by David C. Rankin 28 Feb '25

28 Feb '25

All, I had originally bought a 1T drive and split it in half for Arch and Tumbleweed. I've installed both to test the i915 issue. However, It's a bit awkward having both on the same drive. So I bought another 1T ssd and want to move Tumbleweed off the drive it shares with Arch to it's own drive. I envision I can just copy the partitions to the new drive with gparted, etc.. (or dd for that matter), but what do I do about Grub UEFI? Right now, Tumbleweed took over the drive and … [View More]

2 1

New TW - How to stop selinux from change all dir permission back? And sshd not open after install (explicitly changed)
by David C. Rankin 28 Feb '25

28 Feb '25

All, devs, New TW install today. Three issues: (1) when I change /usr/local with: chown -R :devs * chmod -R 0775 * on next reboot all the permissions are changed back to root:root 0755. How do I tell selinux to stop that? (2) During install I explicitly toggled sshd (disabled) firewall (closed) to 'enabled' and 'open'. The system came up without ssh added to any zone in the firewall. It was blocked and trying to access the box you get: $ ssh niflheim ssh: connect to host … [View More]

2 7

Re: TW - How to fix display-manager so starting doesn't move tty1 to tty2 and put syslog on tty1?
by David C. Rankin 28 Feb '25

28 Feb '25

On 2/27/25 9:54 AM, paka wrote: > ** > I use sddm and do not experience your problem ??? > Wait a minute... So you can boot to multi-user (runlevel 3), then start sddm, do whatever, then stop sddm and be back in multi-user without any change to the Tumbleweed order of tty1-tty6 and vt7? That would be much different that what I see with lightdm. I haven't installed kdm yet, waiting on this i915 issue, but I can't image it doing anything different. The big issue is I … [View More]

1 0

Console screensaver - basically zero load (Goofy screensaver)
by David C. Rankin 27 Feb '25

27 Feb '25

All, Faced with a box with i915 Gen 9.5 graphics that cannot probe lspcon on boot it is left unable to run any dpms. That means no console-blanking and no X. So needing a way to prevent the cursor blinking away forever on this all-in-one HP ProOne 600 i5-8500 thing, I looked at the traditional console screen savers like cmatrix (still great looking but demands 10% of one core continually), all were either too processor intensive for my taste or had unwanted dependencies like pip, etc..… [View More]

3 3

SELinux - don't disable, on reboot/enable Network is broken
by David C. Rankin 27 Feb '25

27 Feb '25

All, I'm not sure SELinux is a good idea, or at least not in it current form. I had the need to work with different kernel command line parameters testing the i915 LSPCON issue and I left the selinux options out. On next reboot, the network failed to start. Examining the journal this was due to wicked not being able to rename a temporary file - "Permission denied" ?? Feb 26 09:38:28 niflheim wickedd-dhcp4[1346]: Unable to rename temporary lease file '/var/lib/wicked/lease-eno1-dhcp-… [View More]ipv4.xml.uBxBSv' to '/var/lib/wicked/lease-eno1-dhcp-ipv4.xml': Permission denied What the ....? No restart would cure the issue, removing the temporary file doesn't cure the issue (a new temporary is written on shutdown). This is selinux again. On the i915 test boot without the selinux kernel parameters the temp gets written without the selinux extended attributes apparently, so when you boot with the normal kernel command-line enabled, the file is treated like a bastard-child of the system and the system just chokes on it. I think little issue like this are going to bite people all day long when the switch occurs or they install a new system. One Tumbleweed box with Apparmor behave like a normal Linux box, you can make changes and there are no problems. With this selinux stuff, it's like the system is made of glass and any change just breaks it. So if I understood Andrei earlier, I can just delete the selinux kernel parameters and add "security=apparmor" and be back to the normal Tumbleweed so both my Tumbleweed boxes will work the same? Do I need to remove any selinux packages? What about the entire system that now has extended attributes of 'security.selinux' on just about every file and directory?, e.g. # find /usr/local -type d,f -exec getfattr -m security.selinux -d '{}' + # file: usr/local/include security.selinux="system_u:object_r:usr_t:s0" # file: usr/local/man security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/mann security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man5 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man8 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man9 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man4 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man6 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man7 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man2 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man1 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/man/man3 security.selinux="system_u:object_r:man_t:s0" # file: usr/local/libexec security.selinux="system_u:object_r:bin_t:s0" # file: usr/local/src security.selinux="system_u:object_r:usr_t:s0" # file: usr/local/sbin security.selinux="system_u:object_r:bin_t:s0" # file: usr/local/lib security.selinux="system_u:object_r:lib_t:s0" # file: usr/local/lib64 security.selinux="system_u:object_r:lib_t:s0" # file: usr/local/bin security.selinux="system_u:object_r:bin_t:s0" # file: usr/local/share security.selinux="system_u:object_r:usr_t:s0" Does all that need to be removed from the filesystem? Is there an easy way to purge all extended attributes from the system in a recovery shell or the like? -- David C. Rankin, J.D.,P.E. [View Less]

2 1

nginx and modsecurity
by Cyrus 26 Feb '25

26 Feb '25

Hello!, Anybody knows what happened to nginx-module-modsecurity?, it was included in the past in the official repository for 15.2 or 15.3 (can't remember) but nowhere to be found in 15.6. Regards Cyrus

1 0

selinux? New install sshd can't open authorized_keys - permission denied?
by David C. Rankin 26 Feb '25

26 Feb '25

All, I think the new Tumbleweed has growing-pains associated with this new selinux stuff. sshd was broken after install, no firewall was opened despite the installer telling me it was after I explicitly turned it on. Now, I can't use public/private keys to access the new Tumbleweed install. I can enter a password, but public/private key auth fails with "Permission denied" ?? : Feb 25 15:57:02 niflheim sshd-session[2750]: Could not open user 'david' authorized keys '/home/david/.… [View More]

2 1

Huge tower recovery
by bent fender 25 Feb '25

25 Feb '25

Well I don't know how THIS is going to pan out but here goes anyway. It befell me to recover my late son's server tower; OpenSuse-Leap seemed to be his goto system because that's where he had Thunderbird installed for his email. https://limewire.com/d/c6f77f8a-8fd5-4e2b-a16f-c13f063de0e2#6fpts5bAm1_dWbu… I don't even know where to begin, started by mapping out what the box has as best as I could in a first session. Significant notes... 1 Two 4tb disks are in a RAID array, I *never saw a … [View More]

4 12

Main

Development

Information

Community

Social Media

Other

openSUSE Users