The officially official Devuan Forum!

You are not logged in.

#826 Re: Installation » bug: timeshift doesnt work with LUKS encrypted / » 2023-03-30 01:30:02

Hello:

tom wrote:

Thanks ...

You're welcome.

tom wrote:

Downloaded the Version of backports ...

I have the persistent feeling that this may be related to the fact that you are running Ceres, which (by definition/design) is unstable and prone to this sort of problem. ie: it has quite a bit of loose ends.

You may want to consider setting up a Chimaera system with a btrfs/LUKS just to rule that out.

Best,

A.

#827 News & Announcements » [ANNOUNCE] xorg-server 21.1.8 » 2023-03-29 16:48:18

Altoid
Replies: 0

Hello:

This just came in.

---

[ANNOUNCE] xorg-server 21.1.8

This release contains the fix for CVE-2023-1393 in today's security
advisory: https://lists.x.org/archives/xorg-annou … 03374.html

Benno Schulenberg (1):
       xkbUtils: use existing symbol names instead of deleted deprecated ones

Olivier Fourdan (2):
       composite: Fix use-after-free of the COW
       xserver 21.1.8

git tag: xorg-server-21.1.8

https://xorg.freedesktop.org/archive/in … 1.8.tar.gz
SHA256: d845d1fee2edb33cb94f31b5170f26d98ed31f853ce2da21daca7c60c8ff3aae  xorg-server-21.1.8.tar.gz

https://xorg.freedesktop.org/archive/in … 1.8.tar.xz
SHA256: 38aadb735650c8024ee25211c190bf8aad844c5f59632761ab1ef4c4d5aeb152  xorg-server-21.1.8.tar.xz

---

#828 News & Announcements » X.Org Security Advisory - 20230329 » 2023-03-29 13:20:09

Altoid
Replies: 0

Hello:

Received this in my inbox this morning.

---

X.Org Security Advisory: March 29, 2023

X.Org Server Overlay Window Use-After-Free
==========================================

This issue can lead to local privileges elevation on systems where the X
server is running privileged and remote code execution for ssh X forwarding
sessions.

ZDI-CAN-19866/CVE-2023-1393: X.Org Server Overlay Window Use-After-Free
Local Privilege Escalation Vulnerability

If a client explicitly destroys the compositor overlay window (aka COW),
the Xserver would leave a dangling pointer to that window in the CompScreen
structure, which will trigger a use-after-free later.

Patches
-------
Patch for this issue have been committed to the xorg server git repository.
xorg-server 21.1.8 will be released shortly and will include this patch.

- commit 26ef545b3 - composite: Fix use-after-free of the COW
   (https://gitlab.freedesktop.org/xorg/xse … /26ef545b3)

ZDI-CAN-19866/CVE-2023-1393

If a client explicitly destroys the compositor overlay window (aka COW),
we would leave a dangling pointer to that window in the CompScreen
structure, which will trigger a use-after-free later.

Make sure to clear the CompScreen pointer to the COW when the latter gets
destroyed explicitly by the client.

Thanks
======

The vulnerabilities have been discovered by Jan-Niklas Sohn working with
Trend Micro Zero Day Initiative.

---

Best,

A.

#829 Re: Installation » bug: timeshift doesnt work with LUKS encrypted / » 2023-03-29 11:58:45

Hello:

tom wrote:

4L3XK commented Feb 2, 2022 •
It seems timeshift need systemd ...

I have been using timeshift for the longest while, now version 20.11.1 on Devuan Beowulf with a backported kernel:

~$ uname -a
Linux devuan 5.10.0-0.deb10.16-amd64 #1 SMP Debian 5.10.127-2~bpo10+1 (2022-07-28) x86_64 GNU/Linux
~$ 
~$ apt list | grep installed | grep shift
--- snip ---
timeshift/oldstable-backports,now 20.11.1-1~bpo10+1 amd64 [installed]
~$ 

No systemd in my box and as far as I can tell, it is working properly, but there is no btrfs or LUKS in use.

Now, according to the project page page, timeshift is now maintained by the LinuxMint project.
The teejee2008 repository has been archived.

And it would seem that although Linux Mint is systemd able, it is up to the user to both install it and choose to use it.

Installing the systemd package will not switch your init system unless you boot with init=/lib/systemd/systemd or install systemd-sysv in addition.

Maybe some systemd crap trickled into timeshift?
Could well be ...

Maybe it is something related to LUKS encritped? 
No idea.

But it would be a real pity to see a neat/useful application such as timeshift get poisoned by systemd crap.

Edit:

See posts by the original timeshift author, here and here.

teejee2008 wrote:

Linux Mint is maintaining a forked version of Timeshift and they are planning to develop it further. This repo will continue to be available but will only see bug fixes and minor changes. You will have an option to use either this version or the fork developed by Linux Mint.

teejee2008 wrote:

Sorry. No plans to close this repo. There's already a message redirecting to the Linux Mint fork. The version of Timeshift in this repo will continue to be available for those who need it.

So, if the original version works, you may want to stick with it for the time being.

If not, maybe contacting teejee2008 to ask about this would get you an answer to the problem.
It seems that he is open to seeing about bug fixes and minor changes.

Best,

A.

#830 Re: Other Issues » Where do I report bugs in devuan-backports packages? » 2023-03-28 15:00:50

Hello:

steve_v wrote:

... need some level of confidence that I can run headless servers, with unattended upgrades, and not have them break unexpectedly ...

Sure ...

Remember the 21(!) critical vulnerabilities, many of them longstanding ones, lurking within Exim4? (a Debian package)
https://www.theregister.com/2021/05/05/ … exim_mail/

When it was patched/upgraded, every Tom's, Dick & Harry's Exim4 system risked going south without any notice, just like mine did.
Without being noticed for a good while, just like mine.

That happened because on upgrade all previously used scripts were rendered obsolete/useless while at the same time the installer routine advised that the original/existing scripts be kept.

The net result being a totally borked MTA.

https://dev1galaxy.org/viewtopic.php?id=4379
https://lists.exim.org/lurker/message/2 … 4d.en.html

steve_v wrote:

Maybe FreeBSD is the answer after all.

Indeed ....
Maybe (for you, after all) it is the answer you are looking for.

I do not think that Devuan pretends to be the answer for everyone.
In true Linux fashion, I think it is just one answer to the systemd debacle that is slowly and steadily corroding the Linux ecosystem.

I am just a greybeardish (old, actually) user with far too many years of doing tier one/two maintenance of registry run MS OSs to make a living.
To me, Devuan was just what I was needing when systemd started cropping up everywhere I looked.
So here I am.

Now, it is quite evident that your mileage varies.
No problem with that.

That said and with no further comments to make, I'll wish you the best of luck and be on my way.

BTW: thanks for posting the bug report. 8^)

A.

#831 Re: Other Issues » Where do I report bugs in devuan-backports packages? » 2023-03-28 11:46:38

Hello:

steve_v wrote:

... the file '/usr/lib/rsyslog/rsyslog-rotate' installed by rsyslog-8.2302.0-1~bpo11+1devuan1 ...

#!/bin/sh

if [ -d /run/systemd/system ]; then
    systemctl kill -s HUP rsyslog.service
fi

Where it should be (and is in rsyslog-8.2102.0-2+devuan3):

#!/bin/sh

if [ -d /run/systemd/system ]; then
    systemctl kill -s HUP rsyslog.service
else
    invoke-rc.d rsyslog rotate > /dev/null
fi

Yes.
I've checked and there are two lines missing in the backported /usr/lib/rsyslog/rsyslog-rotate file.

Congratulations!
------------------------------
You have found a bug.
------------------------------

Now, please file a report so it gets fixed.

That said:

Bear in mind that Devuan survives today thanks to a small but very dedicated cast of knowlegeable individuals who devote their time and effort to keep it running.

Doing that, with the resources the Devuan project has at hand, is no small feat.
By any means: it is an endless task.

Unfortunately, as systemd and other assorted crap (eg.: zeigeist) advance and dig their tentacles into the workings of Debian, that task becomes more and more difficult.

It is something most people are not aware of.

                    -----------------------------------> You seem to be one of them. <-----------------------------------

steve_v wrote:

... please tell me somebody is actually checking packages (and their config files) ...

Indeed ...
There are a few 'somebodies' who sanitise Debian packages for their use in Devuan.
But not nearly enough of them. (see above)

steve_v wrote:

... not the first time this kind of thing has happened ...

I'm sorry to have to break it to you: it is not the first time and it won't be the last.
Please take note of that.

That is how it works with any OS.
Linux is no exception.  ie: shit happens

Fortunately, it seldom happens in Devuan.

steve_v wrote:

... and it is seriously eroding my trust in the distribution.

Ahhh ...
I am (very) sorry to hear that.
Really.

Mainly because, if I take you to your word, you will most probably leave the ever growing Devuan user base.
Which is a real pity as Devuan could use another 'somebody', more so if it is one with your bug-tracking skills.

steve_v wrote:

... backports on debian, by contrast, has caused me no grief at all in the last ~20 years.

See above.

If you need the type of trust and assurances that Debian has given/gives you, you may want to consider going back to Debian.

I'm sure they have no bugs (undetected/outstanding/won't-fix) to speak of.
ie: if you don't take systemd into account.

Now: close your eyes, take a deep breath, relax while you have a cuppa while you file the report with Devuan.

You'll feel better afterwards.

Best,

A.

#832 Re: Installation » Devuan doesn't have graphical user management » 2023-03-25 20:14:03

Hello:

thierrybo wrote:

... just Debian without systemd ...
... what many old Debian users are awaiting ...

No small feat by any means, an endless task.
Devuan survives today thanks to a small but very dedicated cast of knowlegeable individuals who devote their time and effort to keep it running.

Unfortunately, as systemd and other assorted crap (eg.: zeigeist) advance and dig their tentacles into the workings of Debian, that task becomes more and more difficult.

That is what newcomers are not fully aware of. 

Best,

A.

#833 Re: Installation » Devuan doesn't have graphical user management » 2023-03-25 16:23:54

Hello:

boughtonp wrote:

... raised legitimate issues in XFCE, but blamed Devuan for those issues, and had a generally poor attitude.

Just to add: I have experienced exactly that type of thing when reporting issues related to windows crashing in XFCE.
As a result, I decided to be rid of XFCE as soon as I can get together my Chimaera/Openbox act.

Best,

A.

#834 Re: Hardware & System Configuration » [SOLVED] Lost sound, not sure if latest updates caused it » 2023-03-23 13:18:47

Hello:

Ron wrote:

... an answer for your popping sound.
--- snip ---

options snd-hda-intel power_save=0 power_save_controller=N

Exactly ...
That is what keps your sound controller from going to sleep, the pop being caused by the controller waking up, so to speak.
Depending on your hardware, it can get to be quite annoyning.

I don't think the options snd_hda_intel index=1,0 line is related to the pop.
It is probably related to the contents of /proc/asound/cards and /proc/asound/modules.

In my case:

~$ cat /proc/asound/cards
 0 [Intel   ]: HDA-Intel - HDA Intel
               HDA Intel at 0xf5ff8000 irq 35
 1 [Webcam  ]: USB-Audio - Genius Webcam
               KYE Systems corp. Genius Webcam at usb-0000:00:1d.7-2, high speed
~$
~$ cat /proc/asound/modules
 0 snd_hda_intel   <- Ultra 24 WS on board sound system
 1 snd_usb_audio   <- Genius Webcam microphone
~$ 

Best,

A.

#835 Re: Installation » [SOLVED] Where did obmenu go? » 2023-03-23 09:59:57

Hello:

czeekaj wrote:

I still use the og obmenu.
After all we still use slim.

Quite so, it is yet another reason I am still on Beowulf.

Fortunately (unlike Wicd which is abandoned) it is getting worked on again.

See here.

Kudos and a big Thank You to Robert Pierce for stepping up to save SLiM.

Best,

A.

#836 Re: ARM Builds » Video turns off on high CPU usage with Devuan 4.0 on Raspberry PI 4 » 2023-03-18 20:32:36

Hello:

vanfanel wrote:

... throttling shouldn't cause video to go off. That's a different issue.

Yes, you are quite right.

But throttling is a feature to protect the CPU from overheating and (eventually) blowing.

So (IMO) throttling must be avoided and that's what a heatsink is for.

In my 3B+ (now unused, a huge dissapointment) the adding of a heatsink to the chip without the speader made an important difference, at least in the comprehensive tests I ran at the time.

Edit: this video may be of use to you, if not there are others.

As always, YMMV.

Best,

A.

#837 Re: Off-topic » Ken Thompson and Linux » 2023-03-17 19:34:23

Hello:

golinux wrote:

... gem from 2012:

Indeed ...

"We need free software.
Unless we control the software in the network, the network will in the end control us."

Thanks for that.

Best,

A.

#838 Re: Off-topic » Ken Thompson and Linux » 2023-03-17 18:17:14

Hello:

golinux wrote:

Made my day!!

You're welcome.

Don't miss this part:

"... even though I've invested a zillion years in Apple, I'm throwing it away, and I'm going to Linux. To Raspbian, in particular."

Pity it is a systemd distribution.

Best,

A.

#839 Off-topic » Ken Thompson and Linux » 2023-03-17 16:14:31

Altoid
Replies: 7

Hello:

This up today at ElReg:

https://www.theregister.com/2023/03/17/ … _a_maccie/

Liam Proven @theregister.com wrote:

Although Thompson is now 80 years old, he most recently worked at Google, where he co-developed Go… although his hiring caused problems: he refused to take the company's mandatory C proficiency test, on the feeble pretext that he designed the C language.

A must read/watch.  8^D

A good week-end to all.

A.

#840 Re: Other Issues » [SOLVED] /.config and /.cache with Daedalus » 2023-03-16 23:55:53

Hello:

boughtonp wrote:

... because there's no obvious harm at the moment doesn't mean there isn't some hidden/future problem.

Maybe no even harm, obvious or not.
But *something* left behind that could/may, in conjunction with something else, bring up a problem or a situation that could bring up a problem.

boughtonp wrote:

... remembered inotify, which can monitor filesystem use ...

Good idea ...
Please keep us posted.

Thanks for your input.

Best,

A.

#841 Re: Other Issues » [SOLVED] /.config and /.cache with Daedalus » 2023-03-16 20:29:09

Hello:

User479 wrote:

I'll keep digging.

Please do.

User479 wrote:

... not hurting anything ...

Not that you know of.

User479 wrote:

... just annoying now that I know about it.

Indeed ...

I think that what is annoying is that something (unknown to you) is creating a .config dir in /.

And from what I have been told, it should not be happening.
Unless at some time your $HOME was set to /.
Which does not seem to be the case.

Granted, it may not be a big deal, but it should not be happening.

My idea of things like these is that they should be investigated and fixed.
If it is a bug or an oversight, it should be squashed/fixed.

All those "won't fix because it is harmless" issues, warnings and/or bug reports which end up being swept under the rug will are not healthy.
I see it as lousy coding and may (eventually) end up causing issues somewhere in the system.

Of course, YMMV.

Best,

A.

#842 Re: Other Issues » [SOLVED] /.config and /.cache with Daedalus » 2023-03-15 20:36:45

configHello:

User479 wrote:

... pulseaudio purged, an empty /.cache/ is getting created at each boot.

Not here:

~$ uname -a
Linux devuan 5.10.0-0.deb10.16-amd64 #1 SMP Debian 5.10.127-2~bpo10+1 (2022-07-28) x86_64 GNU/Linux
~$ 

There is no .cache in my /.
All of them live in the /home/user dir.

And this is all the pulse I have:

~$ apt list | grep installed | grep -i pulse*
--- snip ---
debian-pulseaudio-config-override/oldstable,oldstable,now 1.0 all [installed,automatic]
libpulse0/oldstable,now 12.2-4+deb10u1 amd64 [installed,automatic]
libpulse0/oldstable,now 12.2-4+deb10u1 i386 [installed,automatic]
~$ 

Maybe something else is doing that?

Best,

A.

#843 Re: Desktop and Multimedia » How disable apparmor? » 2023-03-10 20:53:02

Hello:

humpty wrote:
Altoid wrote:

..
But then you upgrade the kernel and there it is again.
What I always do is purge apparmor after the upgrade..
A.

What about holding the package;  sudo apt-mark hold apparmor
or even pinning it ?

Would the upgrade still go through ?

Hmm ...
No idea.
Have not tried it but I don't see (?) why it shouldn't.

Yes, I guess I could pin it.
ie: the same way I do with pulseaudio and see what happens on the next upgrade.

Bear in mind that there are other apparmor related libraries which are/may be needed by other packages.

eg: libapparmor1

~$ aptitude why libapparmor1
i   stress-ng Depends libapparmor1 (>= 2.10)
~$ 

Edit:

It seems that there's more than stress-ng involved with libapparmor1.

~$ aptitude why libapparmor1
i   slim Depends dbus                    
i A dbus Depends libapparmor1 (>= 2.8.94)
~$

---> Very strange all this did not show up on my previous query to aptitude. <---

I have not used stress-ng in years, so I might as well get rid of it. and solve the issue.

We'll see how the pinning goes.

Best,

A.

#844 Re: Other Issues » [SOLVED] /.config and /.cache with Daedalus » 2023-03-06 09:55:57

Hello:

steve_v wrote:

... strongly suspect we're going to need something like daemon ...

... as systemd user-units become more popular. continues to extend its tentacles further and further into Linux.   <--- reads better now, I think.

steve_v wrote:

... this /.config and /.cache garbage is created on chimera ...

Not only on chimaera.

I run Devuan Beowulf with a backported kernel.
I suspect it was there since ascii but can't confirm.

steve_v wrote:

... but not remove them if they exist ...
... not tracked by dpkg (for extra nastiness).

So I have seen.

steve_v wrote:

... absolutely consider this a bug to be fixed.

Probably to be reported to Debian.
Don't think it's a Devuan thing, but ...

steve_v wrote:

... has to do with pulse assuming systemd and doing broken things ...

... if that is so, it could/may be due to an incomplete/faulty sanitisation of the pulseaudio package by the Devuan devs.

Thanks for your input.

Best,

A.

#845 Re: Other Issues » [SOLVED] /.config and /.cache with Daedalus » 2023-03-05 21:25:33

Hello:

User479 wrote:

... ditch pulseaudio on my destop.

Yes, but do remember to check the link I posted.
You don't want pulseaudio pulled in again by some uncouth package.

~$ cat /etc/apt/preferences.d/avoid_pulseaudio
Package: pulseaudio:*
Pin: version *
Pin-Priority: -1
~$ 

Best,

A.

#846 Re: Other Issues » [SOLVED] /.config and /.cache with Daedalus » 2023-03-05 19:57:13

Hello:

steve_v wrote:

... only where pulseaudio is involved.
... janky behaviour for potteringware ...
... extremely ugly.

Ah ...

boughtonp wrote:

... could still be a bug in pulseaudio ...

Could well be.
No matter, quite easy to fix.

First this:

# apt purge pulseaudio && apt autoclean && apt autoremove

And then this.

Best,

A.

Edit:
Out or curiosity (I purged pulseaudio two/three years ago) I went to see what was up in my / dir.

Seems that purging pulseaudio is not enough: I found  /.config/pulse and within it, two files.

One was a 26a708d3d7dc6778fc6ff9f55921b024-runtime file and the other was a cookie file and they were not size nought.

So I left the /.config dir (don't know if it is needed), but eliminated its contents.

#847 Re: Installation » Trouble with Nvidia drivers » 2023-03-02 14:38:41

Hello:

sneed4feed wrote:

The last time I updated my Nvidia drivers was probably before moving from beowulf to chimaera ...

Some Nvidia cards can no longer be used in Linux systems as Nvidia dropped support for them.
In my specific case, the 340.108 driver I use for my two perfectly working FX580 cards.

That is the main reason I am still on Devuan Beowulf running a backported kernel till I am forced to move on and use the Nouveau drivers.
Hopefully, they may work better than the last time I tried them.

You may want to have a read here and see if you find the answer you are looking for.

Best,

A.

#848 Hardware & System Configuration » BlackLotus malware, Secure Boot and Windows machines » 2023-03-02 10:50:26

Altoid
Replies: 2

Hello:

Just saw this article on The Register.

---
It's official: BlackLotus malware can bypass Secure Boot on Windows machines.
---

Best,

A.

#849 Re: Hardware & System Configuration » Attention Dual/Multi-booters: Latest GRUB (2.06-2) disables os-prober » 2023-02-28 19:41:29

Hello:

piledriver wrote:

... figured it was some form of operator error ...

So ...
It's a bug in the grub installer?

Best,

A.

#850 Re: Hardware & System Configuration » Attention Dual/Multi-booters: Latest GRUB (2.06-2) disables os-prober » 2023-02-27 10:38:44

Hello:

piledriver wrote:

... "missing grub binaries" were just a path issue, had to do "su -" to get proper roots path ...

This has been so since the Beowulf release:

Devuan 3.1.0 Beowulf Release Notes wrote:

### What's new in this release
--- snip ---
Changes in su
- The behavior of su has changed. Use 'su -' to get root's path or use
   the full path to commands if you use only 'su'.
   
- There are several ways to get the old behavior. The easiest is to
   edit /etc/default/su to add the line:

    ALWAYS_SET_PATH yes

   See the following for more information:
   https://www.debian.org/releases/buster/ … -variables
   https://wiki.debian.org/NewInBuster
   https://bugs.debian.org/cgi-bin/bugrepo … bug=905564

piledriver wrote:

... the grub installation "appears" broken, as the usual grub binaries and scripts are mia-- i.e no "grub-install" "grub-mkconfig" etc.

Could this be a bug?

The grub installer seems to ignore the new su behaviour as described in https://files.devuan.org/devuan_beowulf … _notes.txt.

Not running an efi box, so can't say much more about this.

Best,

A.

Board footer

Forum Software