You are not logged in.
- Topics: Active | Unanswered
#1126 Installation » It's not just Wondows: apparently we have a problem » 2021-07-21 12:04:23
- Altoid
- Replies: 8
Hello:
From this morning's edition of ElReg:
https://www.theregister.com/2021/07/21/ … scalation/
It's not just Windows: a security hole has been discovered in Linux kernels since version 3.16 that can be exploited by rogue users and malware already on a system to gain root-level privileges. The vulnerability has been assigned the ID CVE-2021-33909.
Dubbed Sequoia by the Qualys team that found and responsibly reported the flaw, we're told the bug is present in "default installations of Ubuntu 20.04, Ubuntu 20.10, Ubuntu 21.04, Debian 11, and Fedora 34 Workstation. Other Linux distributions are likely vulnerable and probably exploitable." Thus, check for updates and install them as soon as you can as patches should be available by now now or shortly for your distro.
Technical details of the file-system-code-level programming blunder are here. Qualys' proof-of-concept exploit required 5GB of RAM and a million inodes to succeed.
Qualys also found another security weakness in Linux systems, CVE-2021-33910, a denial-of-service kernel panic via systemd. Patches are also available so grab those updates, too.
I don't know how high the possibilities of this being executed are, but I thought I'd point to it for those who know more about these things.
Best,
A.
#1127 Re: Desktop and Multimedia » [SOLVED] Browsers and the demise of Adobe Flash Player » 2021-07-21 11:41:04
Hello:
Which newspapers/sites are still using flash...?
In this site, https://projects.newsday.com/cartoons/o … rtoons/#!/ I cannot see the cartoonists' work.
In this site, https://www.theguardian.com/international some content does not render properly ie: as it did before.
I'm attributing it all to Flash, maybe I'm mistaken?
I've come across others.
Best,
A.
#1128 Re: Desktop and Multimedia » [SOLVED] Browsers and the demise of Adobe Flash Player » 2021-07-21 11:35:50
Hello:
... project called "ruffle" that seeks to be a flash emulator.
... used by the Internet Archive ...
Thanks for the suggestion, but Palemoon does not support WebExtensions.
Best,
A.
#1129 Desktop and Multimedia » [SOLVED] Browsers and the demise of Adobe Flash Player » 2021-07-20 19:55:13
- Altoid
- Replies: 19
Hello:
I think that the demise of Adobe's infamous Flash/Flash Player is a (most probably) good thing ...
Except for the fact that it has turned quite a few things upside down for me.
eg:
Although I can get my daily dose of Charles Schultz's Peanuts, I can no longer see my favourite political cartoonists' (Matt Davies) work every morning like I used to.
Watching films and series from pirate links posted on various sites (yes, so what?) has lost the possibility of adding *.srt subtitle files to the stream, needed when what I am watching is in a language I don't understand or when the Irish or Welsh accent makes it difficult to understand what's going on.
I can still watch the flics with whatever comes up in Palemoon 29 but there's no option for subtitles.
A couple of the newspapers/sites I read on-line apparently have Flash enabled pages so there are parts I cannot read and so on ...
What can be done to ameliorate this sad state of things?
Is there a replacement for Adobe Flash to be installed?
Thanks in advance,
A.
#1130 Re: Other Issues » Dependency not available to install an application needed » 2021-07-14 16:04:16
Hello:
... not spotted that element on the site.
Many thanks.
You're welcome.
... before I moved to Devuan I had to splatter the desktop ...
... remove Java 11 and install Java 8.
The type of thing that frequently happens with packages from outside the repositories.
... hoping it would have worked ...
You may want to consider sending them an email to let them know about your issue.
There's probably other users affected, some may run on Devuan.
... appreciated that you took all that trouble ...
No trouble at all.
That's how the Pay It Forward system works.
Others here at Dev1 have done the same for me many times, so I try to do it for someone if I have the chance.
Usually works => everyone wins. 8^)
Best,
A.
#1131 Re: Desktop and Multimedia » chimaera: no more icons in xfce-panel application menu » 2021-07-13 21:48:52
Hello:
... don't have any icons in the xfce-panel application menu any more.
... path to some of the Xfce icons has been changed
... some redesigned ...
... some are now eye-shattering blue.
I guess it was bound to happen to Devuan, sooner or later.
Sometime ago (last year?) I read about the huge backlash to the new path Xfce was taking as it moved forward to v. 4.16.
If I remember correctly, it was mainly about Client Side Decorations.
See:
https://forum.xfce.org/viewtopic.php?pid=56141#p56141
https://forum.xfce.org/viewtopic.php?pid=56143#p56143
https://forum.xfce.org/viewtopic.php?pid=56144#p56144
... not an issue about what the Users want ...
... why follow and mimic Gnome?
---
... XFCE and Mate both seem to have this strange and senseless desire to become like Gnome ...
... with Gnome trying so hard to be like Microsoft.
I then thought it over and decided to stay with the version I have (4.12) as long as I can so as to give me time to consider something else altogether.
I was never too happy with how Xfce worked and this sort of set a limit.
Hopefully it can be sorted.
No need (for me), I won't continue past Xfce 4.12.
Q: which would be the safest and most foolproof/bulletproof way to keep Xfce from upgrading anything from now on?
Thanks in advance.
Best,
A.
#1132 Re: Other Issues » Dependency not available to install an application needed » 2021-07-12 16:15:56
Hello:
... trying to install the latest version of Bralleblaster stable.
Is this application in the stable Debian repository?
If it is, it should (unless for some reason blacklisted) also be in the stable Devuan repository.
But ...
Check this thread from 11/2017 at lists.debian.org:
https://lists.debian.org/debian-accessi … 00047.html
It is mid-2021 and I could not find it in the Debian package repository search:
https://packages.debian.org/search?keyw … ection=all
Have you asked the developers about the dependency and the reason it is not included in the package?
Edit:
Check this page: https://www.brailleblaster.org/docs/sys … ements.php
BrailleBlaster System Requirements
Software RequirementsWhen using one of the BrailleBlaster installer packages you will need a computer running one of the below operating systems.
Windows 10 or Newer
Mac OS X or Newer
Ubuntu Linux 20.04 or later <-------------- Bear in mind that Ubuntu Linux ≠ Debian/Devuan Linux.
ie: it does not mean that it will run on them and that there's probably
a reason Ubuntu is mentioned but not Debian/Devuan.Only if using the universal zip archive distribution of BrailleBlaster you will also need Java15 or higher installed on your computer.
Best,
A.
#1133 Re: Devuan » Windows 11 will _enforce_ Secure Boot » 2021-07-11 11:27:47
Hello:
... take issue with "binary blobs" in Linux.
For what it may be worth, I sit sort of in the middle with respect to how pragmatic I'll willing to be.
Call it pragmatic but only up to a point.
ie:
I can, if the advantages are relevant, accept to have proprietary code within my installation if I can trust the origin and some of my hardware (WiFi, video card) needs it to work.
But I would not be willing to accept proprietary code if it is required for the OS itself to work.
A.
#1134 Re: Installation » [SOLVED] Getting rid of Pulseaudio » 2021-07-10 20:24:49
Hello:
Try ...
Done.
Works as expected.
Thanks a lot for your input.
Best,
A.
#1135 Installation » [SOLVED] Getting rid of Pulseaudio » 2021-07-10 15:49:37
- Altoid
- Replies: 2
Hello:
I have been wanting to get rid of Pulseaudio for a while but have not paid much attention to it till now.
I didn't install it and my guess was that it was not part of my Devuan Beowulf installation.
So I checked with aptitude:
groucho@devuan:~$ aptitude why pulseaudio
i xfce4-pulseaudio-plugin Recommends pulseaudio
groucho@devuan:~$ So it seems that by simply installing a volume control for the Xfce panel, I got Pulseaudio as an added bonus, so to speak.
I tried apt to see what a purge would drag along with it:
groucho@devuan:~$ sudo apt purge pulseaudio --dry-run
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
libpulsedsp pulseaudio-utils rtkit
Use 'sudo apt autoremove' to remove them.
The following packages will be REMOVED:
pulseaudio*
0 upgraded, 0 newly installed, 1 to remove and 0 not upgraded.
Purg pulseaudio [12.2-4+deb10u1]
groucho@devuan:~$ I see that xfce4-pulseaudio-plugin does not get removed but I'm not at all confident that it will still work.
ie: the name says it all.
The panel volume control/mixer is something I use a lot but it does not have to be this one.
Any suggestions/recommendations with respect to this?
Thanks in advance,
Best,
A.
#1136 Re: Devuan » Windows 11 will _enforce_ Secure Boot » 2021-07-09 19:58:06
Hello:
Secureboot is not a security feature.
... a ploy by Microsoft to have greater control ...
... an undisclosed deal with the OEMs.
... exclusivity for MS Windows.
A decades long arrangement, if you want to call it that.
More like extorsion:
Want be able to sell your OEM products?
Then they'll have to be Windowsabled (ie: approved/tested/whatever) by MS.
BIOS and drivers according to our specifications and don't give us any of that Linux cancer/OSS crap.
Right?
And it's only undisclosed in that the public in general doesn't know the exact details, but it has always been blindingly obvious.
O.
#1137 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-09 01:19:24
Hello:
nemo@nautilus:~$ apt list | grep installed | grep openjdk --- snip --- openjdk-8-jre/oldstable-security,now 8u292-b10-0+deb9u1 amd64 [installed,automatic] openjdk-8-jre-headless/oldstable-security,now 8u292-b10-0+deb9u1 amd64 [installed,automatic]nemo@nautilus:~$ apt list | grep installed | grep icedtea --- snip --- icedtea-8-plugin/now 1.6.2-3.1 amd64 [installed,local] icedtea-netx-common/oldstable,now 1.6.2-3.1+deb9u1 all [installed,automatic]
Right ....
Let's try doing this:
~# apt install icedtea-netx-common --dry-runThis should tell us if it will fix part/all of the dependency issues as it should drag in updated versions of openjdk-6-jre and openjdk-6-jre-headless.
Please post the output.
Best,
A.
#1138 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-08 23:32:20
Hello:
... finally have a result.
Indeed ...
nemo@nautilus:~$ apt-cache rdepends icedtea-netx
icedtea-netx
Reverse Depends:
icedtea-8-plugin
icedtea-netx-common
libbiojava4.0-javanemo@nautilus:~$ apt-cache depends icedtea-netx
icedtea-netx
Depends: openjdk-8-jre
Depends: icedtea-netx-common
Conflicts: <openjdk-6-jre>
Conflicts: <openjdk-6-jre-headless>
Replaces: <openjdk-6-jre>
Replaces: <openjdk-6-jre-headless>From what I understand, the latest (kept back) version of icedtea-netx breaks openjdk-6-jre and openjdk-6-jre-headless.
Open a terminal and as sudo/root do:
apt list | grep installed | grep openjdk-and
apt list | grep installed | grep icedtea-This will show us what openjdk- and icedtea- packages are installed.
Please post the result.
Best,
A.
#1139 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-08 21:14:43
Hello:
... command line programs are ingenius in their ability to find nitpicks ...
No ...
It was because it was late and I did not test the stanza first.
Command line stanzas must use the correct syntax to work.
The correct one is this:
~$ apt-cache depends icedtea-netxIt will get you the package's dependencies.
Then this one will get you the package's dependencies as well as the dependencies of the dependencies.
ie: the dependency tree.
~$ apt-cache rdepends icedtea-netxMy apologies for the slip.
Please run those and post the result.
root@nautilus:~# apt list | grep installed | grep icedtea
WARNING: apt does not have a stable CLI interface. Use with caution in scripts.
icedtea-8-plugin/now 1.6.2-3.1 amd64 [installed,local]
icedtea-netx-common/oldstable,now 1.6.2-3.1+deb9u1 all [installed,automatic]--> There's no need for root for these. <--
BTW: you are using 'quote" instead of "code".
Best,
A.
#1140 Re: Off-topic » Presentation of LinuC » 2021-07-08 10:18:52
Hello:
@dice, @steve_v:
This forum is familiar with LinuC (aka JSM) and his agenda. Please, let's not go there again.
You are only giving the chap nut-job air time and Dev1's forum resources.
No need for that.
Is there?
Because ...
Who here gives a flying flamingo™ what the website he slapped together does or how it works?
Just my $0.02.
A.
#1141 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-08 00:51:07
Hello:
... complains that "apt upgrade --dry-run" is not a valid combination of options.
Sorry ...
My bad.
The other works, but doesn't seem to produce any new information.
Yes it does.
root@nautilus:/# apt upgrade --dry-run
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following package was automatically installed and is no longer required:
linux-image-4.9.0-14-amd64
Use 'apt autoremove' to remove it.
The following packages have been kept back: <---- | x |
icedtea-netx <---- | x |
0 upgraded, 0 newly installed, 0 to remove and 1 not upgraded.From what I see, the package icedtea-netx has been kept back and when a package is kept back it is because there is a dependency problem.
Open a terminal and do:
~$ apt list | grep installed | grep icedteaThis will tell you which icedtea-netx version is installed.
Then do:
apt-cache rdepends --installed $icedtea-netxThis will tell you which package is asking for icedtea-netx.
Best,
A.
#1142 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-07 23:51:44
Hello:
Linux nautilus 4.9.0-15-amd64 #1 SMP Debian 4.9.258-1 (2021-03-08) x86_64 GNU/Linux
Right.
You are running kernel version 4.9.0-15.
Open a terminal and (as root/sudo) do:
~$ sudo apt update --dry-runThis will simulate an update, please post the output.*
Then (as root/sudo) do:
~$ sudo apt upgrade --dry-runThis will simulate an upgrade, please post the output.*
* Please post the output as code.
Best,
A.
#1143 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-07 23:27:18
Hello:
... thinks the version '14' kernel is obsolete ...
Not necessarily.
Please open a terminal, do ~$ uname -a and post the result.
That will tell us exactly what kernel version you are booting from.
Best,
A.
#1144 Re: Installation » [SOLVED] Ownership/permisisons of /home/user/mbox » 2021-07-07 19:27:00
Hello:
Check what root's home directory is ...
Yes.
groucho@eee-dev3:/var/mail$ ls -l
total 0
-rw-rw---- 1 groucho mail 0 Jul 7 16:14 groucho
-rw------- 1 root mail 0 Jul 6 22:18 root
groucho@eee-dev3:/var/mail$ ... ever switch to root via su without a -, then run mail as root?
Ahhh ...
That could have been the culprit. ie: me.
I have that annoyance fixed in my box but not yet in the 1000HE.
Fixed now. 8^)
Thanks for the heads up.
Best,
A.
#1145 Re: Off-topic » Presentation of LinuC » 2021-07-07 16:19:49
Please, let's not go there again.
Thank you.
+1
A.
#1146 Re: Installation » [SOLVED] Ownership/permisisons of /home/user/mbox » 2021-07-07 11:34:31
Hello:
Any idea as to how this could have happened?
---
How is it that I have to chown my own user mbox?
I was not able to find out why this happened, which would have been nice.
But I was able to fix it without using chown.
Turns out that, for whatever reason, there were two mailboxes in /home/user/: /.mbox and /mbox, only the first one available to my user.
But when I logged in and checked my mail, mail checked the mailbox that should have been available to my user. ie: /mbox which belonged to root.
So I just did # rm .mbox and # rm mbox, rebooted, checked my user mail and now all is as it should be.
Best,
A.
#1147 Re: Devuan » Windows 11 will _enforce_ Secure Boot » 2021-07-07 11:22:30
Hello:
Using ARM CPU's instead of amd64 ...
Good luck finding getting any one of the existing/surviving motherboard OEMs to put out a properly oufitted motherboard with provision for an ARM CPU instead of an amd64 one.
Never heard of the WinTel racket?
I would not be surprised ...
I would be (very) and much more so if it did not cost 3x or 4x the amd64 equivalent.
A.
#1148 Installation » [SOLVED] Ownership/permisisons of /home/user/mbox » 2021-07-07 00:09:01
- Altoid
- Replies: 3
Hello:
Just came across this when I was doing some maintenance in a Devuan ascii 4.19.0-17-686-pae installed on an Asus 1000HE 2Gb.
groucho@eee-dev3:~$ ls -l /home/groucho/mbox
-rw------- 1 root root 5691 May 30 2019 /home/groucho/mbox
groucho@eee-dev3:~$ I cannot access my own mbox. 8^'
Any idea as to how this could have happened?
I belong to the groups I should belong to.
groucho@eee-dev3:~$ groups
groucho adm disk mail dialout voice cdrom floppy tape sudo audio dip backup video plugdev users crontab netdev bluetooth Debian-exim pulse pulse-access
groucho@eee-dev3:~$ How is it that I have to chown my own user mbox?
Thanks in advance,
A.
#1149 Re: Hardware & System Configuration » Ascii kernel update borks laptop » 2021-07-06 21:18:20
Hello:
Hello:
I run ascii 4.19.0-16-686-pae on an Asus 1000HE 2Gb.
Just did my weekly apt update && apt upgrade.
Besides getting apparmor yet again* (like a very persistent case of the clap) got linux-image-4.19.0-17-686-pae.
Boots and loads desktop without issues.
A.
* Happens with every #%&" kernel update, in spite of apparmor not being installed in my system and having apparmor=0 in my kernel command line.
Is there no remedy for this?
#1150 Re: Devuan » Windows 11 will _enforce_ Secure Boot » 2021-07-06 15:12:40
Hello:
... hope my next computer will not be something microsoft has had a hand in making ...
Hmm ....
Very optimistic of you.
eg: ever seen a pig whistle, a cow fly or a talking dog?
No, Snoopy does not count, it's just baloon talk.
... saying that win11 will only be for the very latest machines ...
I have no intention of using W11 or any other MS Wxx incarnation.
My only worry is that Linux suddenly finds itself not being able to boot in whatever crap they come up with.
Fortunately I'm quite happy with my present rig, a ca. 2007 Sun Microsystems Ultra 24 running on an Intel Core2 Q9550.
A.
Board footer
