Bug#860040: policykit-1: Hardening /proc in fstab with hidepid=1 or 2 blocks pkexec
Package: policykit-1 Version: 0.105-17 Severity: normal Dear Maintainer, Hardening my Debian Stretch system with lynis, I enabled hardening /proc to limit non-superuser access to /proc directories. proc /proc proc defaults,hidepid=2 0 0 After reboot, all programs that required root authentication via a popup are blocked from opening the window. Programs tested include; /usr/bin/synaptic- pkexec and /usr/bin/gufw-pkexec. /var/log/auth.log Apr 9 12:07:30 hostname polkitd(authority=local): Registered Authentication Agent for unix-process:21299:214113 (system bus name :1.88 [pkexec /usr/sbin/synaptic], object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) Apr 9 12:07:33 hostname polkitd(authority=local): Operator of unix- process:21299:214113 FAILED to authenticate to gain authorization for action com.ubuntu.pkexec.synaptic for unix-process:21299:214113 [/bin/sh /usr/bin/synaptic-pkexec] (owned by unix-user:username) Apr 9 12:07:33 hostname pkexec[21300]: username: Error executing command as another user: Not authorized [USER=root] [TTY=/dev/pts/0] [CWD=/home/username] [COMMAND=/usr/sbin/synaptic] Apr 9 12:07:33 hostname polkitd(authority=local): Unregistered Authentication Agent for unix-process:21299:214113 (system bus name :1.88, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8) In fstab, hidepid=1 or hidepid=2 causes the same behavior. Commenting out the /proc line in fstab and rebooting solves the issue but reduces my hardening. The behavior of blocking the user from running a program as root seems to be correct. However, there is no warning to the user that they are being blocked from running the program since the popup window to enter authentication never opens. I suggest that if the authentication window cannot open then a warning window is displayed to the user that permission is denied. Debian Stretch 4.9.18-1 (2017-03-30) x86_64 GNU/Linux lightdm 1.18.3 Openbox 3.6.1 LXQt Version: 0.11.1 -- System Information: Debian Release: 9.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.9.0-2-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages policykit-1 depends on: ii dbus 1.10.16-1 ii libc6 2.24-9 ii libglib2.0-0 2.50.3-2 ii libpam-systemd 232-22 ii libpam0g 1.1.8-3.5 ii libpolkit-agent-1-00.105-17 ii libpolkit-backend-1-0 0.105-17 ii libpolkit-gobject-1-0 0.105-17 policykit-1 recommends no packages. policykit-1 suggests no packages. -- no debconf information
Bug#856697: [libreoffice-writer] libreoffice-writer missing required JRE
When I installed the libreoffice metapackage the JRE error disappeared but the LLVM remained. I am troubleshooting the LLVM but I too don't think it is related to libreoffice. Thanks. Tony On Sat, Mar 4, 2017 at 12:36 AM, Rene Engelhard wrote: > Hi, > > On Sat, Mar 04, 2017 at 08:22:41AM +0100, Rene Engelhard wrote: > > > This is the same behavior when running localc, loimpress, lodraw and > > > lomath. If you install the libreoffice metapackage then it will > install > > > JRE. > > > > This is intended. Only stuff really needing it (and the metapackage) > depends > > on a JRE. > > And some packages which might or might not want to use Java-based features > have (e.g. as here in writer) Recommends or Suggests on it: > > Package: libreoffice-writer > Architecture: amd64 > Version: 1:5.2.5-2 > Priority: optional > Section: editors > Source: libreoffice > Maintainer: Debian LibreOffice Maintainers debian.org> > Installed-Size: 26106 > Pre-Depends: dpkg (>= 1.17.13) > Depends: libreoffice-base-core (= 1:5.2.5-2), libreoffice-core (= > 1:5.2.5-2), libabw-0.1-1, libc6 (>= 2.14), libe-book-0.1-1, > libetonyek-0.1-1, libgcc1 (>= 1:3.0), libicu57 (>= 57.1-1~), libmwaw-0.3-3, > libodfgen-0.1-1, librevenge-0.0-0, libstdc++6 (>= 5.2), libwpd-0.10-10, > libwpg-0.3-3, libwps-0.4-4, libxml2 (>= 2.7.4), uno-libs3 (>= 5.1.0~alpha), > ure, zlib1g (>= 1:1.1.4) > Recommends: libreoffice-math > Suggests: fonts-crosextra-caladea, fonts-crosextra-carlito, > libreoffice-base, libreoffice-gcj, libreoffice-java-common (>= 1:5.2.5~), > default-jre | openjdk-8-jre | openjdk-7-jre | openjdk-6-jre | gcj-jre | > sun-java5-jre | sun-java6-jre | java5-runtime | jre > > > ^^^ > Replaces: libreoffice-core (<< 1:3.3.2-5) > Filename: ./libreoffice-writer_5.2.5-2_amd64.deb > Size: 7584068 > MD5sum: 9a4d173abd074b858ff0dbbd1bb57d5f > SHA1: a4f122d56635ac6032d9c62db203d0321dcc460d > SHA256: f73b1826ef1553cbb2a604bead421f97774780d03ab576091752c5e1637ba482 > SHA512: c1f8c99a0a62dd6b1d2ebf3011f1b8c462811c93876dbbf790cd5f2e > a641b8b63f3fc4ae90846b2f89e1c219de932eb99fdcff09d949cec8a550fc1905d5 > Homepage: http://www.libreoffice.org > Description-en: office productivity suite -- word processor > LibreOffice is a full-featured office productivity suite that provides > a near drop-in replacement for Microsoft(R) Office. > . > This package contains the wordprocessor component for LibreOffice. > Description-md5: 7ddf1a7be67dc22b315f212f564325e8 > > Just tried it again, and indeed it works here. Current stretch. No idea > what you did which involves LLVM and/or enable-value-profiling but THAT is > probably your issue. > > Regards, > > Rene >
Bug#856697: [libreoffice-writer] libreoffice-writer missing required JRE
Package: libreoffice-writer Version: 1:5.2.5-2 Severity: normal --- Please enter the report below this line. --- Libreoffice Writer does not install JRE as a dependency but is required to run. Installed from testing-stretch. user@hostname:~$ lowriter javaldx: Could not find a Java Runtime Environment! Warning: failed to read path from javaldx : CommandLine Error: Option 'enable-value-profiling' registered more than once! LLVM ERROR: inconsistency in registered CommandLine options This is the same behavior when running localc, loimpress, lodraw and lomath. If you install the libreoffice metapackage then it will install JRE. --- System information. --- Architecture: Kernel: Linux 4.9.0-1-amd64 Debian Release: 9.0 500 testing ftp.us.debian.org --- Package information. --- Depends (Version) | Installed ===-+-=== libreoffice-base-core (= 1:5.2.5-2) | 1:5.2.5-2 libreoffice-core (= 1:5.2.5-2) | 1:5.2.5-2 libabw-0.1-1 | 0.1.1-4 libc6 (>= 2.14) | libe-book-0.1-1 | libetonyek-0.1-1 | libgcc1 (>= 1:3.0) | libicu57 (>= 57.1-1~) | libmwaw-0.3-3 | libodfgen-0.1-1 | librevenge-0.0-0 | libstdc++6 (>= 5.2) | libwpd-0.10-10 | libwpg-0.3-3 | libwps-0.4-4 | libxml2 (>= 2.7.4) | uno-libs3 (>= 5.1.0~alpha) | ure | zlib1g (>= 1:1.1.4) | fontconfig | fonts-opensymbol | libreoffice-common (>> 1:5.2.5) | ure (>= 4.2~) | libboost-date-time1.62.0 | libc6 (>= 2.16) | libcairo2 (>= 1.14.0) | libclucene-contribs1v5 (>= 2.3.3.4+dfsg) | libclucene-core1v5 (>= 2.3.3.4+dfsg) | libcmis-0.5-5v5 (>= 0.5.1+git20160603) | libcups2 (>= 1.4.0) | libcurl3-gnutls (>= 7.16.2) | libdbus-1-3 (>= 1.9.14) | libdbus-glib-1-2 (>= 0.78) | libdconf1 (>= 0.14.0) | libeot0 | libexpat1 (>= 2.0.1) | libexttextcat-2.0-0 (>= 2.2-8) | libfontconfig1 (>= 2.11) | libfreetype6 (>= 2.3.5) | libgcc1 (>= 1:3.4) | libgl1-mesa-glx | OR libgl1 | libglew2.0 (>= 1.12.0) | libglib2.0-0 (>= 2.31.8) | libgltf-0.0-0v5 | libglu1-mesa | OR libglu1 | libgraphite2-3 (>= 1.2.2) | libharfbuzz-icu0 (>= 0.9.18) | libharfbuzz0b (>= 0.9.18) | libhunspell-1.4-0 | libhyphen0 (>= 2.7.1) | libice6 (>= 1:1.0.0) | libicu57 (>= 57.1-1~) | libjpeg62-turbo (>= 1.3.1) | liblangtag1 (>= 0.4.0) | liblcms2-2 (>= 2.2+git20110628) | libldap-2.4-2 (>= 2.4.7) | libmythes-1.2-0 | libneon27-gnutls | libnspr4 (>= 2:4.9-2~) | libnss3 (>= 2:3.13.4-2~) | libodfgen-0.1-1 | libpcre3 | libpng16-16 (>= 1.6.2-1) | librevenge-0.0-0 | libsm6 | libstdc++6 (>= 5.2) | libx11-6 | libxext6 | libxinerama1 | libxml2 (>= 2.7.4) | libxrandr2 | libxrender1 | libxslt1.1 (>= 1.1.25) | uno-libs3 (>= 5.2.0~alpha) | zlib1g (>= 1:1.1.4) | librdf0 (>= 1.0.17) | Recommends (Version) | Installed ===-+-=== libreoffice-math | 1:5.2.5-2 libpaper-utils | 1.1.24+nmu5 Suggests (Version) | Installed =-+-== fonts-crosextra-caladea | fonts-crosextra-carlito | libreoffice-base | libreoffice-gcj | libreoffice-java-common (>= 1:5.2.5~) | default-jre | OR openjdk-8-jre | OR openjdk-7-jre | OR openjdk-6-jre | OR gcj-jre | OR sun-java5-jre | OR sun-java6-jre | OR java5-runtime | OR jre | -- Tony
Bug#852751: [cryptkeeper] Sets the same password "p" for everything independently of user input
Will a conflict encfs still permit use of cryptkeeper with existing encfs folders? If yes, then that may be a good approach. Another approach, probably out of scope, would be to disable New Folder functionality in cryptkeeper and instruct users to the shell with encfs. Tony On Feb 1, 2017, 3:57 PM, at 3:57 PM, Eduard Bloch wrote: >Hallo, >* Francesco Namuri [Tue, Jan 31 2017, 06:06:01PM]: > >> > Yes, I agree that it's easily discoverable--which is why I'm >concerned >> > that simply removing the entire functionality of the package >without >> > any kind of notification to the user isn't the best way to address >the >> > problem. Again: removing the package simply ensures that people >> > upgrading to stretch will either end up with a cryptkeeper package >> > that exhibits this bug, or will remove their cryptkeeper package >and >> > not know how to access their stored data, right? >> > >> > Mike Stone >> >> Hello Mike, >> thanks for the comments. >> >> This issue only affectes the cryptkeeper working with encfs 1.9.1-3, >in >> stable we have 1.7.4-5 that works as cryptkeeper expects. >> >> People that upgrades from jessie to stretch simple "loses" >cryptkeeper, >> package, of course they are still able to access their stored data >using >> encfs or any other frontend to it. >> >> IMHO it's better to remove the program in any envrionment that is >affected >> by this issue, putting a note in the README or also on the debconf >isn't >> enough to balance the gravity of the issue. Users can think they lost >data >> because of a wrong password, or even worst they can trust on a >worthless >> data encryption. > >Also many thanks from my side... > >So I guess I better upload an encfs package which simply conflicts with >cryptkeeper or does anyone have a better idea? > >Best Regards, >Eduard.
Bug#852751: Fix buggy encfs behavior
I agree with fixing the buggy behavior in encfs. I created an encfs paranoid folder and use cryptkeeper to open it without issues in Stretch. If someone creates one through cryptkeeper they will discover the problem quickly. That being said, I agree having a program with known bad behavior (cryptkeeper) is not preferred but the cause appears to come from another application. Tony
Bug#842650: closed by Scott Kitterman (Re: Bug#842650: sddm won't install without kde packages)
Thanks. I will give that a try. On Oct 30, 2016 9:57 PM, "Debian Bug Tracking System" wrote: > This is an automatic notification regarding your Bug report > which was filed against the sddm package: > > #842650: sddm won't install without kde packages > > It has been closed by Scott Kitterman . > > Their explanation is attached below along with your original report. > If this explanation is unsatisfactory and you have not received a > better one in a separate message then please contact Scott Kitterman < > deb...@kitterman.com> by > replying to this email. > > > -- > 842650: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842650 > Debian Bug Tracking System > Contact ow...@bugs.debian.org with problems > > > -- Forwarded message -- > From: Scott Kitterman > To: 842650-d...@bugs.debian.org > Cc: > Date: Sun, 30 Oct 2016 23:52:06 -0400 > Subject: Re: Bug#842650: sddm won't install without kde packages > On Sunday, October 30, 2016 08:53:59 PM Tony Sultana wrote: > > Package: sddm > > Version: 0.13.0-1 > > Severity: important > > > > Dear Maintainer, > > > > I am currently using LXQT 0.11 with the LightDM display manager. I > > understand that SDDM is recommended as a display manager for several > > distros. When I try to install SDDM it appears to try to install a full > > version of KDE Plasma along with it. > > > > The SDDM website installation makes no mention of requiring KDE Plasma, > > https://github.com/sddm/sddm/wiki/Installation. > > > > I am thinking that the requirements may be too broad for SDDM. It may be > > required for KDE but I think the reverse should not be needed. > > In Debian, the only even vaguely KDE/Plasma depends that sddm has is: > > sddm-theme-breeze | sddm-theme > > sddm-theme-breeze does depend on plasma-workspace, but if you install > another > sddm-theme, nothing will get pulled in. I don't think this is a bug, but > an > attribute of how the maintainer decided to arrange the dependency. You > have > to pick one real package to be installed if the virtual package is > provided by > multiple packages. The other choices currently in unstable are: > > sddm-theme-maui 0.13.0-1 > sddm-theme-maldives 0.13.0-1 > sddm-theme-elarun 0.13.0-1 > sddm-theme-circles 0.13.0-1 > > Scott K > > -- Forwarded message -- > From: Tony Sultana > To: Debian Bug Tracking System > Cc: > Date: Sun, 30 Oct 2016 20:53:59 -0600 > Subject: sddm won't install without kde packages > Package: sddm > Version: 0.13.0-1 > Severity: important > > Dear Maintainer, > > I am currently using LXQT 0.11 with the LightDM display manager. I > understand > that SDDM is recommended as a display manager for several distros. When I > try > to install SDDM it appears to try to install a full version of KDE Plasma > along > with it. > > The SDDM website installation makes no mention of requiring KDE Plasma, > https://github.com/sddm/sddm/wiki/Installation. > > I am thinking that the requirements may be too broad for SDDM. It may be > required for KDE but I think the reverse should not be needed. > > > > > -- System Information: > Debian Release: stretch/sid > APT prefers testing > APT policy: (500, 'testing') > Architecture: amd64 (x86_64) > Foreign Architectures: i386 > > Kernel: Linux 4.7.0-1-amd64 (SMP w/8 CPU cores) > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) > >
Bug#842650: sddm won't install without kde packages
Package: sddm Version: 0.13.0-1 Severity: important Dear Maintainer, I am currently using LXQT 0.11 with the LightDM display manager. I understand that SDDM is recommended as a display manager for several distros. When I try to install SDDM it appears to try to install a full version of KDE Plasma along with it. The SDDM website installation makes no mention of requiring KDE Plasma, https://github.com/sddm/sddm/wiki/Installation. I am thinking that the requirements may be too broad for SDDM. It may be required for KDE but I think the reverse should not be needed. -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.7.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) root@desktop:/home/user$ apt-get install sddm Reading package lists... Done Building dependency tree Reading state information... Done The following additional packages will be installed: breeze breeze-cursor-theme breeze-icon-theme catdoc fonts-hack-ttf frameworkintegration gdb-minimal kactivities-bin kactivitymanagerd kde-cli-tools kde-cli-tools-data kde-config-screenlocker kde-style-breeze kde-style-breeze-qt4 kde-style-qtcurve-qt4 kde-style-qtcurve-qt5 kded5 kdelibs5-data kinit kio kio-extras kio-extras-data kpackagelauncherqml kpackagetool5 ktexteditor-data ktexteditor-katepart kwin-style-breeze libattica0.4 libdbusmenu-qt2 libdlrestrictions1 libepub0 libfam0 libgps22 libkdecorations2-5v5 libkdecorations2private5v5 libkdecore5 libkdeui5 libkf5activities5 libkf5archive5 libkf5attica5 libkf5auth-data libkf5auth5 libkf5baloo5 libkf5balooengine5 libkf5bookmarks-data libkf5bookmarks5 libkf5calendarevents5 libkf5codecs-data libkf5codecs5 libkf5completion-data libkf5completion5 libkf5config-bin libkf5config-data libkf5configcore5 libkf5configgui5 libkf5configwidgets-data libkf5configwidgets5 libkf5coreaddons-data libkf5coreaddons5 libkf5crash5 libkf5dbusaddons-bin libkf5dbusaddons-data libkf5dbusaddons5 libkf5declarative-data libkf5declarative5 libkf5dnssd-data libkf5dnssd5 libkf5filemetadata-bin libkf5filemetadata-data libkf5filemetadata3 libkf5globalaccel-bin libkf5globalaccel-data libkf5globalaccel5 libkf5globalaccelprivate5 libkf5gpgmepp5 libkf5guiaddons5 libkf5holidays-data libkf5holidays5 libkf5i18n-data libkf5i18n5 libkf5iconthemes-bin libkf5iconthemes-data libkf5iconthemes5 libkf5itemmodels5 libkf5itemviews-data libkf5itemviews5 libkf5jobwidgets-data libkf5jobwidgets5 libkf5js5 libkf5jsembed-data libkf5jsembed5 libkf5kcmutils-data libkf5kcmutils5 libkf5kdelibs4support-data libkf5kdelibs4support5 libkf5kdelibs4support5-bin libkf5khtml-bin libkf5khtml-data libkf5khtml5 libkf5kiocore5 libkf5kiofilewidgets5 libkf5kiontlm5 libkf5kiowidgets5 libkf5networkmanagerqt6 libkf5newstuff-data libkf5newstuff5 libkf5notifications-data libkf5notifications5 libkf5notifyconfig-data libkf5notifyconfig5 libkf5package-data libkf5package5 libkf5parts-data libkf5parts-plugins libkf5parts5 libkf5plasma5 libkf5plasmaquick5 libkf5pty-data libkf5pty5 libkf5quickaddons5 libkf5runner5 libkf5service-bin libkf5service-data libkf5service5 libkf5sonnet5-data libkf5sonnetcore5 libkf5sonnetui5 libkf5style5 libkf5su-bin libkf5su-data libkf5su5 libkf5sysguard-data libkf5texteditor5 libkf5textwidgets-data libkf5textwidgets5 libkf5threadweaver5 libkf5wallet-bin libkf5wallet-data libkf5wallet5 libkf5waylandserver5 libkf5widgetsaddons-data libkf5widgetsaddons5 libkf5xmlgui-bin libkf5xmlgui-data libkf5xmlgui5 libkf5xmlrpcclient-data libkf5xmlrpcclient5 libkscreenlocker5 libksgrd7 libkwalletbackend5-5 libkworkspace5-5 liblmdb0 libpam-kwallet-common libpam-kwallet5 libphonon4qt5-4 libplasma-geolocation-interface5 libprocesscore7 libprocessui7 libqt5clucene5 libqt5designer5 libqt5designercomponents5 libqt5help5 libqt5quickwidgets5 libqt5test5 libqtcurve-utils2 libssh-4 libtaskmanager6 libweather-ion7 libxcb-damage0 libzip4 milou phonon4qt5 phonon4qt5-backend-vlc plasma-framework plasma-integration plasma-workspace qdbus-qt5 qml-module-org-kde-activities qml-module-org-kde-draganddrop qml-module-org-kde-extensionplugin qml-module-org-kde-kcoreaddons qml-module-org-kde-kquickcontrols qml-module-org-kde-kquickcontrolsaddons qml-module-org-kde-kwindowsystem qml-module-org-kde-runnermodel qml-module-org-kde-solid qml-module-qt-labs-folderlistmodel qml-module-qtgraphicaleffects qml-module-qtqml-models2 qml-module-qtquick-controls qml-module-qtquick-controls-styles-breeze qml-module-qtquick-dialogs qml-module-qtquick-layouts qml-module-qtquick-privatewidgets qml-module-qtquick-window2 qml-module-qtquick2 qttools5-dev-tools sddm-theme-breeze socat sonnet-plugins Suggested packages: orion-gtk-theme gtk2-engines-qtcurve fam gpsd hspell phonon4qt5-backend-gstreamer The following NEW packages will be
Bug#842649: lxqt-session: version not displayed at command line
Package: lxqt-session Version: 0.11.0-2 Severity: normal Dear Maintainer, Looking for a command line option to identify the current version of LXQT I tried entered lxqt-leave --help. user@desktop:~$ lxqt-leave --help Usage: lxqt-leave [options] lxqt-leave Options: -h, --help Displays this help. -v, --version Displays version information. --logout Logout. --lockscreen Lockscreen. --suspend Suspend. --hibernateHibernate. --shutdown Shutdown. --reboot Reboot. I then entered lxqt-leave --version to get the version number but only the program name is returned. user@desktop:~$ lxqt-leave --version lxqt-leave No command line solution was found to get the current version. Thank you, Tony -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.7.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages lxqt-session depends on: ii libc62.24-5 ii libkf5windowsystem5 5.27.0-1 ii liblxqt0 0.11.0-2 ii libqt5core5a 5.6.1+dfsg-3+b1 ii libqt5dbus5 5.6.1+dfsg-3+b1 ii libqt5gui5 5.6.1+dfsg-3+b1 ii libqt5widgets5 5.6.1+dfsg-3+b1 ii libqt5x11extras5 5.6.1-2 ii libqt5xdg2 2.0.0-4 ii libstdc++6 6.2.0-9 ii libudev1 231-9 ii libx11-6 2:1.6.3-1 ii lxqt-common 0.11.0-3 ii x11-xkb-utils7.7+3 Versions of packages lxqt-session recommends: ii lxqt-session-l10n 0.11.0-19-g717bd7e-5 lxqt-session suggests no packages. -- no debconf information
Bug#825757: nemo: Open as Root window will Zombie when closed
Package: nemo Version: 3.0.1-1 Severity: normal Dear Maintainer, With Nemo open, right-clicking on nemo to open the menu and select Open as Root and enter password opens a root window correctly. When the window is closed (x) the process turns into a zombie. The window should release the pid back to the system. I can reproduce it everytime. top command output PID USER PR NIVIRTRESSHR S %CPU %MEMTIME+ COMMAND 2700 user 20 0 1192048 54056 29560 S 0.3 0.3 0:05.91 nemo 3111 root 20 0 0 0 0 Z 0.0 0.0 0:00.69 nemo -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.5.0-2-amd64 (SMP w/6 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages nemo depends on: ii desktop-file-utils 0.22-1 ii gsettings-desktop-schemas 3.20.0-3 ii gvfs 1.28.2-1 ii libatk1.0-02.20.0-1 ii libc6 2.22-7 ii libcairo-gobject2 1.14.6-1+b1 ii libcairo2 1.14.6-1+b1 ii libcinnamon-desktop4 3.0.1-2 ii libexempi3 2.3.0-2 ii libexif12 0.6.21-2 ii libgail-3-03.20.4-1 ii libgdk-pixbuf2.0-0 2.34.0-1 ii libglib2.0-0 2.48.1-1 ii libglib2.0-data2.48.1-1 ii libgtk-3-0 3.20.4-1 ii libnemo-extension1 3.0.1-1 ii libnotify4 0.7.6-2 ii libpango-1.0-0 1.40.1-1 ii libpangocairo-1.0-01.40.1-1 ii libx11-6 2:1.6.3-1 ii libxml22.9.3+dfsg1-1 ii nemo-data 3.0.1-1 ii shared-mime-info 1.6-1 Versions of packages nemo recommends: ii cinnamon-l10n3.0.0-1 ii gvfs-backends1.28.2-1 ii librsvg2-common 2.40.15-1 ii nemo-fileroller 3.0.0-1~ Versions of packages nemo suggests: ii eog3.20.2-1 ii evince [pdf-viewer]3.20.0-3 ii vlc [mp3-decoder] 2.2.3-1 ii vlc-nox [mp3-decoder] 2.2.3-1 ii xdg-user-dirs 0.15-2 -- no debconf information