Re: systemd process(es) consuming CPU when laptop lid closed

[Glen B]

My emails to this list are delayed by about 24 hours (am I the only one?) but I 
think I may have solved my issue with systemd-logind, thanks to the helpful 
command posted earlier by Mr. Biebl.

After running the command, I saw a message that grabbed my attention; 
"suspend.target is masked". Jumping back on to the search engines, I come 
across this 

 topic almost immediately (somehow my searching before completely missed it?). 
In the topic, the user was experiencing nearly the exact same issue. They 
checked /etc/systemd/login.conf and set the following options:

HandlePowerKey=poweroff
HandleLidSwitch=ignore
IdleAction=ignore
IdleActionSec=30min

Going to the /etc/systemd folder however, I see that there is no login.conf 
file - only a login.conf.bak file, which I must have been editing before since 
a couple of the lines were already commented out. I mv'ed the file back to 
login.conf, made sure the above lines were enabled, and rebooted the machine. 
No more excessive CPU usage!

I think this raises a few questions;

- Why was this absurd CPU usage occurring in the first place,
- In the comments at the top of the file, it seems implied that the file should 
be regenerated if it does not exist. Then why wasn't the file being regenerated 
since I had moved it? What was logind using as configuration instead?

Does anyone think this deserves a bug report or am I misunderstanding something 
here?

Glen

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[Richard Hector]

On 18/10/17 06:56, Greg Wooledge wrote:
> On Tue, Oct 17, 2017 at 06:42:04PM +0100, Brian wrote:
>> On Tue 17 Oct 2017 at 11:38:40 -0500, David Wright wrote:
>>> On Tue 17 Oct 2017 at 19:32:11 (+0500), Alexander V. Makartsev wrote:
 Deprecated doesn't mean it doesn't exist or work anymore at all, it
 means it isn't supported anymore and should not be used.
 Look it up, it was deprecated for quite some time.
> 
>>  https://forums.mageia.org/en/viewtopic.php?f=8&t=8737 
> 
> So it's deprecated in Mageia GNU/Linux?  OK.  If I were a Mageia user (or
> had ever heard of it before today) that might carry some weight with me.
> 
> Just curious, what are Mageia users expected to use instead of startx if
> they want to start a traditional X session from a console?  Or is that
> no longer a supported configuration at all?  (By traditional, I mean
> a ~/.xsession or ~/.xinitrc file that contains "exec twm" or whatever
> window manager you prefer.)
> 
> Did they simply throw every window manager under the bus and say "Nope,
> sorry, you gotta run a desktop environment now"?

Now I'm curious - assuming Mageia has deprecated startx, how does that
impact using a plain window manager? It's perfectly possible to run twm
or whatever when logging in to a display manager, no? I'm sure I used to
do that with xdm and icewm.

Richard



signature.asc
Description: OpenPGP digital signature

Sshfs and umask

[Paul van der Vlis]

Hello,

I try to force the umask of an sshfs on the server side.

I've tried /etc/ssh/sshd_config with for example:
Subsystem   sftp/usr/lib/openssh/sftp-server -u 0002
or:
ForceCommand internal-sftp -u 0002
But this does not change the umask.

And adding "session optional pam_umask.so umask=0002" to
/etc/pam.d/sshd/ does change the umask for ssh, but not for sshfs.

Does somebody understand where it goed wrong?

With regards,
Paul van der Vlis


-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/







-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/

Re: Lightweight Audio-Only DLNA player

[Rob McCathie]

On 17/10/17 23:37, Robert Latest wrote:

Hello,

there's plenty of DLNA capable media players around, but all of them
(or at least, all that I could find) are gargantuan packages with tons
of functionality and dependencies that I don't need or want. This is
supposed to run audio-only on a small headless SBC with a USB
connected DAC, nothing else.

Thanks,
robert



minidlna is not suitable?

--
Regards,

Rob McCathie

pm-utils by default on Xfce for suspend/hibernate

[Pétùr]

On my computer (Debian sid), with a nvidia graphical card and the 340
proprietary driver, suspend/hibernate does not work with xfce tools.

I means that xfce4-session-logout --suspend does not work for example.

But pm-suspend or pm-hibernate works perfectly.

And I can launch them as user because I edited my /etc/sudoers file with:

my_user  ALL = NOPASSWD: /usr/sbin/pm-hibernate
my_user  ALL = NOPASSWD: /usr/sbin/pm-suspend

So I would like to make pm-utils tools the default ones for
suspend/hibernate in Xfce. pm-utils commands should be triggered when
clicking "suspend/hibernate" on the xfce logout window.

How can I do that?

Re: [OT] Breaking WPA2 by forcing nonce reuse

[Henrique de Moraes Holschuh]

On Mon, Oct 16, 2017, at 14:49, Alexander V. Makartsev wrote:
> That is one smoking fast update release. Demo works in perfect
> environment, but I wonder if there are some settings on AP that help
> to prevent successful
Yes, there is.  The AP may refuse to ever resent the third packet of the
4-way handshake if it is lost.  This causes slowdowns on association in
noisy/lossy environments, but safeguards the session key.
Newest openwrt and LEDE and hostapd/WPA git trees have a manual setting
that can do this.  It is not on any release yet,  but might be
available in nightly build images or the updated packages with the
wpa/hostapd binaries.
It obviously protects you only while connected to that AP. You still
want/need a device firmware update or to always use a VPN (or ssh or
https, etc) when using random APs out there...
--
  Henrique de Moraes Holschuh 

After update only opengl 1.4 instead of 2.0

[Hans]

Dear list, 

my netbook with an I945 graphics chip does no more support opengl 2.0. Only 
opengl 1.4 is loaded.

It would be nice, if someone could verify this before I send a bugreport. I 
believe, the package responsible for this is libgl1-mesa, but I am not sure. 

If this is really a bug, what is the responsible package?

Thanks for any help! 

Best regards

Hans

Attachement:
This is the output of glxinfo:

glxinfo 
name of display: :0
display: :0  screen: 0
direct rendering: Yes
server glx vendor string: SGI
server glx version string: 1.4
server glx extensions:
GLX_ARB_create_context, GLX_ARB_create_context_profile, 
GLX_ARB_fbconfig_float, GLX_ARB_framebuffer_sRGB, GLX_ARB_multisample, 
GLX_EXT_create_context_es2_profile, GLX_EXT_create_context_es_profile, 
GLX_EXT_fbconfig_packed_float, GLX_EXT_framebuffer_sRGB, 
GLX_EXT_import_context, GLX_EXT_libglvnd, GLX_EXT_texture_from_pixmap, 
GLX_EXT_visual_info, GLX_EXT_visual_rating, GLX_INTEL_swap_event, 
GLX_MESA_copy_sub_buffer, GLX_OML_swap_method, GLX_SGIS_multisample, 
GLX_SGIX_fbconfig, GLX_SGIX_pbuffer, GLX_SGIX_visual_select_group, 
GLX_SGI_make_current_read, GLX_SGI_swap_control
client glx vendor string: Mesa Project and SGI  
   
client glx version string: 1.4  
   
client glx extensions:  
   
GLX_ARB_create_context, GLX_ARB_create_context_profile, 
   
GLX_ARB_create_context_robustness, GLX_ARB_fbconfig_float,  
   
GLX_ARB_framebuffer_sRGB, GLX_ARB_get_proc_address, GLX_ARB_multisample,
   
GLX_EXT_buffer_age, GLX_EXT_create_context_es2_profile, 
   
GLX_EXT_create_context_es_profile, GLX_EXT_fbconfig_packed_float,   
   
GLX_EXT_framebuffer_sRGB, GLX_EXT_import_context,   
   
GLX_EXT_texture_from_pixmap, GLX_EXT_visual_info, GLX_EXT_visual_rating,
   
GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer, 
   
GLX_MESA_multithread_makecurrent, GLX_MESA_query_renderer,  
   
GLX_MESA_swap_control, GLX_OML_swap_method, GLX_OML_sync_control,   
   
GLX_SGIS_multisample, GLX_SGIX_fbconfig, GLX_SGIX_pbuffer, 
GLX_SGIX_visual_select_group, GLX_SGI_make_current_read, 
GLX_SGI_swap_control, GLX_SGI_video_sync
GLX version: 1.4
GLX extensions:
GLX_ARB_create_context, GLX_ARB_create_context_profile, 
GLX_ARB_fbconfig_float, GLX_ARB_framebuffer_sRGB, 
GLX_ARB_get_proc_address, GLX_ARB_multisample, 
GLX_EXT_create_context_es2_profile, GLX_EXT_create_context_es_profile, 
GLX_EXT_fbconfig_packed_float, GLX_EXT_framebuffer_sRGB, 
GLX_EXT_import_context, GLX_EXT_texture_from_pixmap, GLX_EXT_visual_info, 
GLX_EXT_visual_rating, GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer, 
GLX_MESA_multithread_makecurrent, GLX_MESA_query_renderer, 
GLX_MESA_swap_control, GLX_OML_swap_method, GLX_OML_sync_control, 
GLX_SGIS_multisample, GLX_SGIX_fbconfig, GLX_SGIX_pbuffer, 
GLX_SGIX_visual_select_group, GLX_SGI_make_current_read, 
GLX_SGI_swap_control, GLX_SGI_video_sync
Extended renderer info (GLX_MESA_query_renderer):
Vendor: Intel Open Source Technology Center (0x8086)
Device: Mesa DRI Intel(R) 945GME x86/MMX/SSE2 (0x27ae)
Version: 17.2.2
Accelerated: yes
Video memory: 192MB
Unified memory: yes
Preferred profile: compat (0x2)
Max core profile version: 0.0
Max compat profile version: 1.4
Max GLES1 profile version: 1.1
Max GLES[23] profile version: 2.0
OpenGL vendor string: Intel Open Source Technology Center
OpenGL renderer string: Mesa DRI Intel(R) 945GME x86/MMX/SSE2
OpenGL version string: 1.4 Mesa 17.2.2
OpenGL extensions:
GL_3DFX_texture_compression_FXT1, GL_AMD_shader_trinary_minmax, 
GL_ANGLE_texture_compression_dxt3, GL_ANGLE_texture_compression_dxt5, 
GL_APPLE_object_purgeable, GL_APPLE_packed_pixels, 
GL_ARB_ES2_compatibility, GL_ARB_clear_buffer_object, 
GL_ARB_compressed_texture_pixel_storage, GL_ARB_copy_buffer, 
GL_ARB_d

Stretch & middle Button on Thinkpad T530 trackpoint

[Erwan David]

Hi,

I have a Lenovo T530, that I just upgraded from jessie to stretch.

On jessie, I had the 3 buttons of the track point working, on stretch
the middle button does not work, there is no event "button 2" in X11
(tested with Xev). Does someone have an idea at what to do to get this
middle button working ?


Thank you.

Debian 9.2, VSphere 6.5.0, "TCP performance may be compromised"

[Nicholas Geovanis]

I have a 9.2 system running in a VMware VM which receives the following
message at startup which I've never seen before. The VMware network driver
in use is VMXNET 3; the VMware tools daemon is running:

kernel: TCP: ens192: Driver has suspect GRO implementation, TCP performance
may be compromised

There does not appear to be any actual networking or performance impact so
far, but obviously this will be used eventually for higher-volume servers,
so any performance impact is important. Does anyone have more info on this
issue?
Thanks.Nick

Re: After update only opengl 1.4 instead of 2.0

[bw]

On Wed, 18 Oct 2017, Hans wrote:

> Dear list, 
> 
> my netbook with an I945 graphics chip does no more support opengl 2.0. Only 
> opengl 1.4 is loaded.
> 
> It would be nice, if someone could verify this before I send a bugreport. I 
> believe, the package responsible for this is libgl1-mesa, but I am not sure. 
> 
> If this is really a bug, what is the responsible package?
> 
> Thanks for any help! 
> 
> Best regards
> 
> Hans
> 

I don't use testing, but I assume you do?

> Device: Mesa DRI Intel(R) 945GME x86/MMX/SSE2 (0x27ae)
>Version: 17.2.2

You can find out more about the packages in all distributions at 
packages.debian.org and find links to the bug reports.

Offhand, from a quick search for mesa there has been a change for 
libgl1-mesa in buster, it is now a 'dummy' package.  Maybe there are more 
changes to come shortly that will solve your problem?

I know there are certain recommended ways to keep a testing system 
running, are you following these?

https://wiki.debian.org/DebianTesting
 

Re: Debian 9.2, VSphere 6.5.0, "TCP performance may be compromised"

[Sven Hartge]

Nicholas Geovanis  wrote:

> I have a 9.2 system running in a VMware VM which receives the
> following message at startup which I've never seen before. The VMware
> network driver in use is VMXNET 3; the VMware tools daemon is running:

> kernel: TCP: ens192: Driver has suspect GRO implementation, TCP
> performance may be compromised

> There does not appear to be any actual networking or performance
> impact so far, but obviously this will be used eventually for
> higher-volume servers, so any performance impact is important. Does
> anyone have more info on this issue?

As long as you use at lease ESXi 6.5u1 there will be no problem. If you
are on pre-6.5u1, your Stretch VMs will freeze/crash after a short amount of
traffic because of a bug in those earlier ESXi releases.

See also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864642
https://www.reddit.com/r/homelab/comments/6s5dh6/debian_9_on_esxi_65u1_complete_lockup/
https://bugzilla.kernel.org/show_bug.cgi?id=191201#c49

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

Re: pm-utils by default on Xfce for suspend/hibernate

[Alexander V. Makartsev]

I have PC with Debian 9 "stretch" x86_64 + Xfce and I never needed to
have pm-utils installed, but hibernation\suspend feature works normally
through xfce4 GUI once I set up all prerequisites for hibernation to
work (such as at least working swap and initramfs resume variable). I
also removed packages such as "uswsusp", "hibernate". I have used them
previously, but now they are unnecessary for hibernation to work on my
computer.

How you start Xfce DE and did you installed "xfce4-power-manager" package?
You've said hibernation works when you trigger it manually, so check if
hibernation works via systemd:
    $ systemctl hibernate


On 18.10.2017 18:26, Pétùr wrote:
> On my computer (Debian sid), with a nvidia graphical card and the 340
> proprietary driver, suspend/hibernate does not work with xfce tools.
>
> I means that xfce4-session-logout --suspend does not work for example.
>
> But pm-suspend or pm-hibernate works perfectly.
>
> And I can launch them as user because I edited my /etc/sudoers file with:
>
> my_user  ALL = NOPASSWD: /usr/sbin/pm-hibernate
> my_user  ALL = NOPASSWD: /usr/sbin/pm-suspend
>
> So I would like to make pm-utils tools the default ones for
> suspend/hibernate in Xfce. pm-utils commands should be triggered when
> clicking "suspend/hibernate" on the xfce logout window.
>
> How can I do that?
>

-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 

Re: Sshfs and umask

[Sven Hartge]

Paul van der Vlis  wrote:

> I try to force the umask of an sshfs on the server side.

> I've tried /etc/ssh/sshd_config with for example:
> Subsystem   sftp/usr/lib/openssh/sftp-server -u 0002
> or:
> ForceCommand internal-sftp -u 0002
> But this does not change the umask.

> And adding "session optional pam_umask.so umask=0002" to
> /etc/pam.d/sshd/ does change the umask for ssh, but not for sshfs.

> Does somebody understand where it goed wrong?

The umask can only enforce stricter permissions, i.e. the client wants
to set 0777 but the file gets set to 0775 in your case.

But it can't set wider permissions. If the client sets the permissions
to 0700 then no umask in the world will get you to 0775.

Dirty hack: use something like incron to trigger a script via inotify to
change the permssions.

Grüße,
Sven.

-- 
Sigmentation fault. Core dumped.

Update - was {Re: Recovering accidentally deleted file folder}

[Richard Owlett]

I had posted:


It wasn't backed up - will have to follow advice advice I've given
others ;/

I've not done file recovery since early days of WinXP.

On the affected machine I'm running Stretch(9.1) with Mate desktop.

The affected folders are on a partition normally mounted by a line
in fstab.


I immediately shut down.
There is another instance of Debian on a separate partition.

Logging in as root I edited fstab commenting out the appropriate line.


I feel the the data is still valid - there is just no appropriate
directory entries for the affected folder and its sub-directories.




I have copied the partition to another partition (using dd).
The critical data in the deleted  folder(s) was my SeaMonkey profile.
I discovered I did have a several months old backup of the profile.
I am now running Squeeze  (9.1) from a fresh install and installed the 
latest SeaMonkey on it.


Several packages in the Debian repository have been suggested. I will 
download their man-pages and will try them.


Several forensic packages have also been suggested which will used if 
required.


Thanks for the help.

Re: Debian 9.2, VSphere 6.5.0, "TCP performance may be compromised"

[Nicholas Geovanis]

On Wed, Oct 18, 2017 at 10:26 AM, Sven Hartge  wrote:

> Nicholas Geovanis  wrote:
>
> > kernel: TCP: ens192: Driver has suspect GRO implementation, TCP
> > performance may be compromised
>


> As long as you use at lease ESXi 6.5u1 there will be no problem. If you
> are on pre-6.5u1, your Stretch VMs will freeze/crash after a short amount
> of
> traffic because of a bug in those earlier ESXi releases.
>

Thanks Sven, I later ran across the bugzilla. Unfortunately we are at ESXi
5.5 for at least the rest of the year, so that route is closed for now.

Have you tried the "ethtool WXYZ -G rx-mini 0" workaround?
I receive messages:
rx-mini unmodified, ignoring
no ring parameters changed, aborting

However ethtool reports that rx-mini is already 0:
root@saltlab05:~# ethtool -g ens192
Ring parameters for ens192:
Pre-set maximums:
RX: 4096
RX Mini:0
RX Jumbo:   4096
TX: 4096
Current hardware settings:
RX: 256
RX Mini:0
RX Jumbo:   128
TX: 512

Have you tried the vmx file change?
vmxnet3.rev.30 = FALSE

Vielen Dank.Nick G


> See also https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=864642
> https://www.reddit.com/r/homelab/comments/6s5dh6/debian_9_on_esxi_65u1_
> complete_lockup/
> https://bugzilla.kernel.org/show_bug.cgi?id=191201#c49
>
> Grüße,
> Sven.
>

X crashes when closing one of two running X sessions

[Robert Arkiletian]

Using Debian Stretch x86_64. I don't use a greeter like lightdm. I
just log in at the virtual terminal, then startx (xfce desktop). I
like to use multiple accounts (running X) at the same time on
different virtual terminals (eg. ctrl-alt-f1  ctrl-alt-f2)

All is fine until I exit (shutdown) one X session, then the other
running X session freezes and then after a little while crashes. Any
ideas on how to find or diagnose what's causing this issue are much
appreciated.

Thanks

Re: systemd process(es) consuming CPU when laptop lid closed

[David Christensen]

On 10/16/17 11:13, Glen B wrote:

Does anyone think this deserves a bug report

 or am I misunderstanding something here?

Yes.  Do the bug report, so that somebody, somewhere, sometime might 
develop a test for the problem, run the test, and fix the problem in 
future systemd, X.org, Debian, whatever releases.



I also have a laptop, redirect the video to an external monitor, and 
close the lid.  I believe it has the same problem as you have reported. 
But, when I SSH in from another machine to run top, the problem goes 
away.  So, I'll have to write a cron job that runs top once a minute and 
dumps the output to a timestamped file if I want more information.



However, one CPU in my laptop goes to 100% whenever I lock the screen. 
That I could see via SSH and top:


https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878313


David

Re: Debian 9.2, VSphere 6.5.0, "TCP performance may be compromised"

[Sven Hartge]

Nicholas Geovanis  wrote:
> On Wed, Oct 18, 2017 at 10:26 AM, Sven Hartge  wrote:
>> Nicholas Geovanis  wrote:

>>> kernel: TCP: ens192: Driver has suspect GRO implementation, TCP
>>> performance may be compromised

>> As long as you use at lease ESXi 6.5u1 there will be no problem. If
>> you are on pre-6.5u1, your Stretch VMs will freeze/crash after a
>> short amount of traffic because of a bug in those earlier ESXi
>> releases.
>>

> Thanks Sven, I later ran across the bugzilla. Unfortunately we are at
> ESXi 5.5 for at least the rest of the year, so that route is closed
> for now.

*Only* ESX6.5 with VM-HW13 is vulnerable. All other releases, 5.5, 6.0
and 6.5 with VM-HW7 to 12 don't suffer from that bug.

You will get the "suspect GRO implementation" with 5.5 as well, but it
is harmless. I have not yet found any performance problems. 

S°

-- 
Sigmentation fault. Core dumped.

Re: Stretch & middle Button on Thinkpad T530 trackpoint

[Erwan David]

Le 10/18/17 à 17:00, Erwan David a écrit :
> Hi,
>
> I have a Lenovo T530, that I just upgraded from jessie to stretch.
>
> On jessie, I had the 3 buttons of the track point working, on stretch
> the middle button does not work, there is no event "button 2" in X11
> (tested with Xev). Does someone have an idea at what to do to get this
> middle button working ?
>
>
> Thank you.
>
>
Ok found on
http://thinkwiki.org/wiki/How_to_configure_the_TrackPoint#xorg.conf.d

It works after reboot.

Re: [OT] Breaking WPA2 by forcing nonce reuse

[tv.deb...@googlemail.com]

On 18/10/2017 19:03, Henrique de Moraes Holschuh wrote:

On Mon, Oct 16, 2017, at 14:49, Alexander V. Makartsev wrote:

That is one smoking fast update release. Demo works in perfect
environment, but I wonder if there are some settings on AP that help
to prevent successful

Yes, there is.  The AP may refuse to ever resent the third packet of the
4-way handshake if it is lost.  This causes slowdowns on association in
noisy/lossy environments, but safeguards the session key.
Newest openwrt and LEDE and hostapd/WPA git trees have a manual setting
that can do this.  It is not on any release yet,  but might be
available in nightly build images or the updated packages with the
wpa/hostapd binaries.

[...]

Hi,

17.01.4 just released [2] with fixed wpa and possibility to activate an 
AP side workaround. It is just a mitigation really, but should in 
practice impair an exploit. It is OFF by default.


Quote:

"an optional AP-side
workaround was introduced in hostapd to complicate these attacks,
slowing them down. Please note that this does not fully protect you from
them, especially when running older versions of wpa_supplicant
vulnerable to CVE-2017-13086, which the workaround does not address. As
this workaround can cause interoperability issues and reduced robustness
of key negotiation, this workaround is disabled by default."

Option in hostapd.sh [1] is:

wpa_disable_eapol_key_retries


[1] 
https://git.lede-project.org/?p=source.git;a=commitdiff;h=d501786ff25684208d22b7c93ce60c194327c771


[2] https://downloads.lede-project.org/releases/17.01.4/targets/

Re: After update only opengl 1.4 instead of 2.0

[Clemens Eisserer]

Hello Hans,

i945 only supports OpenGL-1.4, it lacks a few hardware features to
reach 2.0: 
https://www.phoronix.com/scan.php?page=news_item&px=Mesa-i915-OpenGL-2-Drop

advertising it as 2.0 capable caused many issues, so mesa developers
decided to revert back to 1.4


best regards, Clemens

2017-10-18 15:54 GMT+02:00 Hans :
> Dear list,
>
> my netbook with an I945 graphics chip does no more support opengl 2.0. Only
> opengl 1.4 is loaded.
>
> It would be nice, if someone could verify this before I send a bugreport. I
> believe, the package responsible for this is libgl1-mesa, but I am not sure.
>
> If this is really a bug, what is the responsible package?
>
> Thanks for any help!
>
> Best regards
>
> Hans
>
> Attachement:
> This is the output of glxinfo:
>
> glxinfo
> name of display: :0
> display: :0  screen: 0
> direct rendering: Yes
> server glx vendor string: SGI
> server glx version string: 1.4
> server glx extensions:
> GLX_ARB_create_context, GLX_ARB_create_context_profile,
> GLX_ARB_fbconfig_float, GLX_ARB_framebuffer_sRGB, GLX_ARB_multisample,
> GLX_EXT_create_context_es2_profile, GLX_EXT_create_context_es_profile,
> GLX_EXT_fbconfig_packed_float, GLX_EXT_framebuffer_sRGB,
> GLX_EXT_import_context, GLX_EXT_libglvnd, GLX_EXT_texture_from_pixmap,
> GLX_EXT_visual_info, GLX_EXT_visual_rating, GLX_INTEL_swap_event,
> GLX_MESA_copy_sub_buffer, GLX_OML_swap_method, GLX_SGIS_multisample,
> GLX_SGIX_fbconfig, GLX_SGIX_pbuffer, GLX_SGIX_visual_select_group,
> GLX_SGI_make_current_read, GLX_SGI_swap_control
> client glx vendor string: Mesa Project and SGI
> client glx version string: 1.4
> client glx extensions:
> GLX_ARB_create_context, GLX_ARB_create_context_profile,
> GLX_ARB_create_context_robustness, GLX_ARB_fbconfig_float,
> GLX_ARB_framebuffer_sRGB, GLX_ARB_get_proc_address, GLX_ARB_multisample,
> GLX_EXT_buffer_age, GLX_EXT_create_context_es2_profile,
> GLX_EXT_create_context_es_profile, GLX_EXT_fbconfig_packed_float,
> GLX_EXT_framebuffer_sRGB, GLX_EXT_import_context,
> GLX_EXT_texture_from_pixmap, GLX_EXT_visual_info, GLX_EXT_visual_rating,
> GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer,
> GLX_MESA_multithread_makecurrent, GLX_MESA_query_renderer,
> GLX_MESA_swap_control, GLX_OML_swap_method, GLX_OML_sync_control,
> GLX_SGIS_multisample, GLX_SGIX_fbconfig, GLX_SGIX_pbuffer,
> GLX_SGIX_visual_select_group, GLX_SGI_make_current_read,
> GLX_SGI_swap_control, GLX_SGI_video_sync
> GLX version: 1.4
> GLX extensions:
> GLX_ARB_create_context, GLX_ARB_create_context_profile,
> GLX_ARB_fbconfig_float, GLX_ARB_framebuffer_sRGB,
> GLX_ARB_get_proc_address, GLX_ARB_multisample,
> GLX_EXT_create_context_es2_profile, GLX_EXT_create_context_es_profile,
> GLX_EXT_fbconfig_packed_float, GLX_EXT_framebuffer_sRGB,
> GLX_EXT_import_context, GLX_EXT_texture_from_pixmap, GLX_EXT_visual_info,
> GLX_EXT_visual_rating, GLX_INTEL_swap_event, GLX_MESA_copy_sub_buffer,
> GLX_MESA_multithread_makecurrent, GLX_MESA_query_renderer,
> GLX_MESA_swap_control, GLX_OML_swap_method, GLX_OML_sync_control,
> GLX_SGIS_multisample, GLX_SGIX_fbconfig, GLX_SGIX_pbuffer,
> GLX_SGIX_visual_select_group, GLX_SGI_make_current_read,
> GLX_SGI_swap_control, GLX_SGI_video_sync
> Extended renderer info (GLX_MESA_query_renderer):
> Vendor: Intel Open Source Technology Center (0x8086)
> Device: Mesa DRI Intel(R) 945GME x86/MMX/SSE2 (0x27ae)
> Version: 17.2.2
> Accelerated: yes
> Video memory: 192MB
> Unified memory: yes
> Preferred profile: compat (0x2)
> Max core profile version: 0.0
> Max compat profile version: 1.4
> Max GLES1 profile version: 1.1
> Max GLES[23] profile version: 2.0
> OpenGL vendor string: Intel Open Source Technology Center
> OpenGL renderer string: Mesa DRI Intel(R) 945GME x86/MMX/SSE2
> OpenGL version string: 1.4 Mesa 17.2.2
> OpenGL extensions:
> GL_3DFX_texture_compression_FXT1, GL_AMD_shader_trinary_minmax,
> GL_ANGLE_texture_compression_dxt3, GL_ANGLE_texture_compression_dxt5,
> GL_APPLE_object_purgeable, GL_APPLE_packed_pixels,
> GL_ARB_ES2_compatibility, GL_ARB_clear_buffer_object,
> GL_ARB_compressed_texture_pixel_storage, GL_ARB_copy_buffer,
> GL_ARB_debug_output, GL_ARB_depth_texture, GL_ARB_draw_buffers,
> GL_ARB_draw_elements_base_vertex, GL_ARB_explicit_attrib_location,
> GL_ARB_explicit_uniform_location, GL_ARB_fragment_program,
> GL_ARB_fragment_shader, GL_ARB_framebuffer_object,
> GL_ARB_get_program_binary, GL_ARB_get_texture_sub_image,
> GL_ARB_half_float_pixel, GL_ARB_internalformat_query,
> GL_ARB_invalidate_subdata, GL_ARB_map_buffer_alignment,
> GL_ARB_map_buffer_range, GL_ARB_multi_bind, GL_ARB_multisample,
> GL_ARB_multitexture, GL_ARB_pixel_buffer_object, GL_ARB_point_parameters,
> GL_ARB_point_sprite, GL_ARB_program_interface_query,
> GL_ARB_provoking_vertex, G

Re: After update only opengl 1.4 instead of 2.0

[Hans]

Am Mittwoch, 18. Oktober 2017, 20:12:51 CEST schrieb Clemens Eisserer:
Hi Clemens.
That is bad news! Yesterday everything worked fine, and today, one version 
later, it doesn't work any more. So they are reverting back, although it 
worked fine - until today.

Very bad news... 

Ok, anyway, thank you very much for this information. As it is a feature, not 
a bug, it is not necessary to file a bugreport any more.

Greetz, 

Hans

> Hello Hans,
> 
> i945 only supports OpenGL-1.4, it lacks a few hardware features to
> reach 2.0:
> https://www.phoronix.com/scan.php?page=news_item&px=Mesa-i915-OpenGL-2-Drop
> 
> advertising it as 2.0 capable caused many issues, so mesa developers
> decided to revert back to 1.4
> 
> 
> best regards, Clemens
> 

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[Ionel Mugurel Ciobîcă]

On 18-10-2017, at 22h 17'14", Richard Hector wrote about "Re: removing of sddm 
(debian 9 -kde5) to start in console mode then startx to start kde5"
> > 
> > Did they simply throw every window manager under the bus and say "Nope,
> > sorry, you gotta run a desktop environment now"?
> 
> Now I'm curious - assuming Mageia has deprecated startx, how does that
> impact using a plain window manager? It's perfectly possible to run twm
> or whatever when logging in to a display manager, no? I'm sure I used to
> do that with xdm and icewm.
> 

I never ran an desktop manager, nor I used startx. I always used a
dm (xdm, kdm, etc.) and fvwm. In my ~/.xsession file the last line
is "fvwm2" (no quotes). Before that I set the background, set the
keyboard (with xmodmap), start the ssh agent, start rclock, etc.

I think kdm has an option to overlook ~/.xsession and start another
wm. Set it to default, which means "read the config files".

I never understood the need for desktop managers. I use Debian since
hamm and Linux/Unix since 1995. My take is that desktop managers are
for people more used to microsoft OS'. Why do I need to click on
something when the xterm I type in can call any program I need?...

Ionel

Nagios package - hiding or not existing

[Fekete Tamás]

Dear All,

does anyone know if there is a nagios3 package available for Debian 9.x?

According to : https://packages.debian.org/search?keywords=nagios3  there
is no package for this generation of this Debian. Is it possible?

- Tamas Fekete

Re: g++ can't build "Hello World" programm

[Evgeny]

Thanks all for answers, libc6-dev was installed. And more intresting, any
"bits/locale.h" among indlude files that you listed have already existed in
my system. but g++ continue give me error message that there is no such
file or directory

even if I use -I/usr/include/x86_64-linux-gnu/ flag or add directory in
cmake include directories

What can it be?

2017-10-13 20:42 GMT+06:00 Thomas Schmitt :

> Hi,
>
> i can compile the test program on my amd64 Debian 8.
>
> Google and
>   https://stackoverflow.com/questions/5834778/how-to-tell-
> where-a-header-file-is-included-from
> caused me to run
>
>   $ g++ -H test.cpp
>
> to see all included files.
> Maybe it helps you to find what's missing on your system or where
> your local include empire derails:
>
>   . /usr/include/c++/4.9/iostream
>   .. /usr/include/x86_64-linux-gnu/c++/4.9/bits/c++config.h
>   ... /usr/include/x86_64-linux-gnu/c++/4.9/bits/os_defines.h
>    /usr/include/features.h
>   . /usr/include/x86_64-linux-gnu/sys/cdefs.h
>   .. /usr/include/x86_64-linux-gnu/bits/wordsize.h
>   . /usr/include/x86_64-linux-gnu/gnu/stubs.h
>   .. /usr/include/x86_64-linux-gnu/gnu/stubs-64.h
>   ... /usr/include/x86_64-linux-gnu/c++/4.9/bits/cpu_defines.h
>   .. /usr/include/c++/4.9/ostream
>   ... /usr/include/c++/4.9/ios
>    /usr/include/c++/4.9/iosfwd
>   . /usr/include/c++/4.9/bits/stringfwd.h
>   .. /usr/include/c++/4.9/bits/memoryfwd.h
>   . /usr/include/c++/4.9/bits/postypes.h
>   .. /usr/include/c++/4.9/cwchar
>   ... /usr/include/wchar.h
>    /usr/include/stdio.h
>    /usr/lib/gcc/x86_64-linux-gnu/4.9/include/stdarg.h
>    /usr/include/x86_64-linux-gnu/bits/wchar.h
>    /usr/lib/gcc/x86_64-linux-gnu/4.9/include/stddef.h
>    /usr/include/xlocale.h
>    /usr/include/c++/4.9/exception
>   . /usr/include/c++/4.9/bits/atomic_lockfree_defines.h
>    /usr/include/c++/4.9/bits/char_traits.h
>   . /usr/include/c++/4.9/bits/stl_algobase.h
>   .. /usr/include/c++/4.9/bits/functexcept.h
>   ... /usr/include/c++/4.9/bits/exception_defines.h
>   .. /usr/include/c++/4.9/bits/cpp_type_traits.h
>   .. /usr/include/c++/4.9/ext/type_traits.h
>   .. /usr/include/c++/4.9/ext/numeric_traits.h
>   .. /usr/include/c++/4.9/bits/stl_pair.h
>   ... /usr/include/c++/4.9/bits/move.h
>    /usr/include/c++/4.9/bits/concept_check.h
>   .. /usr/include/c++/4.9/bits/stl_iterator_base_types.h
>   .. /usr/include/c++/4.9/bits/stl_iterator_base_funcs.h
>   ... /usr/include/c++/4.9/debug/debug.h
>   .. /usr/include/c++/4.9/bits/stl_iterator.h
>   ... /usr/include/c++/4.9/bits/ptr_traits.h
>   .. /usr/include/c++/4.9/bits/predefined_ops.h
>   . /usr/include/c++/4.9/cwchar
>   .. /usr/include/wchar.h
>    /usr/include/c++/4.9/bits/localefwd.h
>   . /usr/include/x86_64-linux-gnu/c++/4.9/bits/c++locale.h
>   .. /usr/include/c++/4.9/clocale
>   ... /usr/include/locale.h
>    /usr/lib/gcc/x86_64-linux-gnu/4.9/include/stddef.h
>    /usr/include/x86_64-linux-gnu/bits/locale.h
>   . /usr/include/c++/4.9/cctype
>   .. /usr/include/ctype.h
>   ... /usr/include/x86_64-linux-gnu/bits/types.h
>    /usr/include/x86_64-linux-gnu/bits/wordsize.h
>    /usr/include/x86_64-linux-gnu/bits/typesizes.h
>   ... /usr/include/endian.h
>    /usr/include/x86_64-linux-gnu/bits/endian.h
>    /usr/include/x86_64-linux-gnu/bits/byteswap.h
>   . /usr/include/x86_64-linux-gnu/bits/wordsize.h
>   . /usr/include/x86_64-linux-gnu/bits/byteswap-16.h
>    /usr/include/c++/4.9/bits/ios_base.h
>   . /usr/include/c++/4.9/ext/atomicity.h
>   .. /usr/include/x86_64-linux-gnu/c++/4.9/bits/gthr.h
>   ... /usr/include/x86_64-linux-gnu/c++/4.9/bits/gthr-default.h
>    /usr/include/pthread.h
>   . /usr/include/sched.h
>   .. /usr/lib/gcc/x86_64-linux-gnu/4.9/include/stddef.h
>   .. /usr/include/time.h
>   .. /usr/include/x86_64-linux-gnu/bits/sched.h
>   . /usr/include/time.h
>   .. /usr/lib/gcc/x86_64-linux-gnu/4.9/include/stddef.h
>   .. /usr/include/x86_64-linux-gnu/bits/time.h
>   ... /usr/include/x86_64-linux-gnu/bits/timex.h
>   . /usr/include/x86_64-linux-gnu/bits/pthreadtypes.h
>   .. /usr/include/x86_64-linux-gnu/bits/wordsize.h
>   . /usr/include/x86_64-linux-gnu/bits/setjmp.h
>   .. /usr/include/x86_64-linux-gnu/bits/wordsize.h
>   . /usr/include/x86_64-linux-gnu/bits/wordsize.h
>   .. /usr/include/x86_64-linux-gnu/c++/4.9/bits/atomic_word.h
>   . /usr/include/c++/4.9/bits/locale_classes.h
>   .. /usr/include/c++/4.9/string
>   ... /usr/include/c++/4.9/bits/allocator.h
>    /usr/include/x86_64-linux-gnu/c++/4.9/bits/c++allocator.h
>   . /usr/include/c++/4.9/ext/new_allocator.h
>   .. /usr/include/c++/4.

Re: Update - was {Re: Recovering accidentally deleted file folder}

[Richard Owlett]

On 10/18/2017 11:04 AM, Richard Owlett wrote:

I had posted:


It wasn't backed up - will have to follow advice advice I've given
others ;/

I've not done file recovery since early days of WinXP.

On the affected machine I'm running Stretch(9.1) with Mate desktop.

The affected folders are on a partition normally mounted by a line
in fstab.


I immediately shut down.
There is another instance of Debian on a separate partition.

Logging in as root I edited fstab commenting out the appropriate line.


I feel the the data is still valid - there is just no appropriate
directory entries for the affected folder and its sub-directories.




I have copied the partition to another partition (using dd).
The critical data in the deleted  folder(s) was my SeaMonkey profile.
I discovered I did have a several months old backup of the profile.
I am now running Squeeze  (9.1) from a fresh install and installed the
latest SeaMonkey on it.

Several packages in the Debian repository have been suggested. I will
download their man-pages and will try them.

Several forensic packages have also been suggested which will used if
required.

Thanks for the help.


I did "extundelete --restore-all /dev/sdaNN".
It apparently worked while stating it could not restore several files.
SeaMonkey was unhappy with the results -- giving an error message 
suggestive of permission problem(s).

That is still progress, before SeaMonkey would not start.
I'll have to take a break and work out a reasonable diagnostic routine.
Thanks again.

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[David Wright]

On Wed 18 Oct 2017 at 20:47:08 (+0200), Ionel Mugurel Ciobîcă wrote:
> On 18-10-2017, at 22h 17'14", Richard Hector wrote about "Re: removing of 
> sddm (debian 9 -kde5) to start in console mode then startx to start kde5"
> > > 
> > > Did they simply throw every window manager under the bus and say "Nope,
> > > sorry, you gotta run a desktop environment now"?
> > 
> > Now I'm curious - assuming Mageia has deprecated startx, how does that
> > impact using a plain window manager? It's perfectly possible to run twm
> > or whatever when logging in to a display manager, no? I'm sure I used to
> > do that with xdm and icewm.
> > 
> 
> I never ran an desktop manager, nor I used startx. I always used a
> dm (xdm, kdm, etc.) and fvwm. In my ~/.xsession file the last line
> is "fvwm2" (no quotes). Before that I set the background, set the
> keyboard (with xmodmap), start the ssh agent, start rclock, etc.
> 
> I think kdm has an option to overlook ~/.xsession and start another
> wm. Set it to default, which means "read the config files".
> 
> I never understood the need for desktop managers. I use Debian since
> hamm and Linux/Unix since 1995. My take is that desktop managers are
> for people more used to microsoft OS'. Why do I need to click on
> something when the xterm I type in can call any program I need?...

[ It might be clearer to write "Desktop Environment" (or DE) instead
of "desktop manager" because of the latter's having the same initials
as Display Manager (or DM). ]

That said, what are the advantages of running a DM in your case,
compared with using startx? One big disadvantage has already been
mentioned (that Linux Consoles rely on particular drivers far less
than X does).

Cheers,
David.

Re: g++ can't build "Hello World" programm

[Greg Wooledge]

On Thu, Oct 19, 2017 at 01:04:05AM +0600, Evgeny wrote:
> Thanks all for answers, libc6-dev was installed. And more intresting, any
> "bits/locale.h" among indlude files that you listed have already existed in
> my system. but g++ continue give me error message that there is no such
> file or directory

You need more than libc6-dev for C++ programs.  There are C++ specific
library packages.

Installing build-essential should be your first step.

Re: g++ can't build "Hello World" programm

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Oct 19, 2017 at 01:04:05AM +0600, Evgeny wrote:
> Thanks all for answers, libc6-dev was installed. And more intresting, any
> "bits/locale.h" among indlude files that you listed have already existed in
> my system. but g++ continue give me error message that there is no such
> file or directory
> 
> even if I use -I/usr/include/x86_64-linux-gnu/ flag or add directory in
> cmake include directories
> 
> What can it be?

Strange. I'd try to eliminate actors one by one. What happens if you bypass
cmake and call g++ directly?

Another approach is to call g++ under strace and see what files it tries
to open (caution: this will produce copious output: use the -o option
to let strace write to a file, and the -f option to follow the process
forks, I'd expect g++ to spawn quite a few subprocesses).

Or just re-install g++ and all the "interesting" libs: likely there's
something broken in your setup.

Are you sure you're calling the g++ you think you are calling?

Cheers
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlnnqYUACgkQBcgs9XrR2kaTsQCeJFZ7BLtE7yquaj7sxrIMGGWQ
mjUAn2bvDioeqkd4JcbG/VgGTLH6Gdu4
=O6jp
-END PGP SIGNATURE-

Re: Nagios package - hiding or not existing

[Brian]

On Wed 18 Oct 2017 at 21:03:19 +0200, Fekete Tamás wrote:

> does anyone know if there is a nagios3 package available for Debian 9.x?
> 
> According to : https://packages.debian.org/search?keywords=nagios3  there
> is no package for this generation of this Debian. Is it possible?

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845765

-- 
Brian.

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[Ionel Mugurel Ciobîcă]

> 
> [ It might be clearer to write "Desktop Environment" (or DE) instead
> of "desktop manager" because of the latter's having the same initials
> as Display Manager (or DM). ]

You are right.

> That said, what are the advantages of running a DM in your case,
> compared with using startx? One big disadvantage has already been
> mentioned (that Linux Consoles rely on particular drivers far less
> than X does).
> 

I use more than one X session. startx would work just as good but then
I will not know how to commute between sessions. The Ctrl-Alt-Fx or
Shift-Fx would not work since startx starts the X on a higher
terminal... If I press Ctrl-Alt-F1 I do not have a way to return to X.
I have to kill the X and type startx again. I never studied startx
carefully, I just rely on xdm that I fully configured. 

Ionel

Re: g++ can't build "Hello World" programm

[Evgeny]

Problems gone when i reinstalled libc6-dev, now hello world compiling fine,
but the problem is that after removing lib6c-dev a lot of other packages
was deleted and when I trying to install them back I have error (Unable to
correct problems, you have held broken packages)

Anyway, thanks a lot, I finally figured it out

2017-10-19 1:20 GMT+06:00 :

> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> On Thu, Oct 19, 2017 at 01:04:05AM +0600, Evgeny wrote:
> > Thanks all for answers, libc6-dev was installed. And more intresting, any
> > "bits/locale.h" among indlude files that you listed have already existed
> in
> > my system. but g++ continue give me error message that there is no such
> > file or directory
> >
> > even if I use -I/usr/include/x86_64-linux-gnu/ flag or add directory in
> > cmake include directories
> >
> > What can it be?
>
> Strange. I'd try to eliminate actors one by one. What happens if you bypass
> cmake and call g++ directly?
>
> Another approach is to call g++ under strace and see what files it tries
> to open (caution: this will produce copious output: use the -o option
> to let strace write to a file, and the -f option to follow the process
> forks, I'd expect g++ to spawn quite a few subprocesses).
>
> Or just re-install g++ and all the "interesting" libs: likely there's
> something broken in your setup.
>
> Are you sure you're calling the g++ you think you are calling?
>
> Cheers
> - -- tomás
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.12 (GNU/Linux)
>
> iEYEARECAAYFAlnnqYUACgkQBcgs9XrR2kaTsQCeJFZ7BLtE7yquaj7sxrIMGGWQ
> mjUAn2bvDioeqkd4JcbG/VgGTLH6Gdu4
> =O6jp
> -END PGP SIGNATURE-
>

Re: g++ can't build "Hello World" programm

[Thomas Schmitt]

Hi,

Evgeny wrote:
> any
> "bits/locale.h" among indlude files that you listed have already existed in
> my system. but g++ continue give me error message that there is no such file
> or directory

What do you get from

  g++ -o test -H test.cpp

If i rename my local
  /usr/include/x86_64-linux-gnu/bits/locale.h
then i get exactly your error message:

  ... /usr/include/locale.h
   /usr/lib/gcc/x86_64-linux-gnu/4.9/include/stddef.h
  In file included from /usr/include/c++/4.9/clocale:42:0,
 from /usr/include/x86_64-linux-gnu/c++/4.9/bits/c++locale.h:41,
 from /usr/include/c++/4.9/bits/localefwd.h:40,
 from /usr/include/c++/4.9/ios:41,
 from /usr/include/c++/4.9/ostream:38,
 from /usr/include/c++/4.9/iostream:39,
 from test.cpp:1:
  /usr/include/locale.h:29:25: fatal error: bits/locale.h: No such file or 
directory

My g++ version is like yours
  g++ (Debian 4.9.2-10) 4.9.2


> -I/way-to-the-missing-lib,

The path up to but not including "bits" idid not help ?
Like:

  -I /usr/include/x86_64-linux-gnu/


> What can it be?

Is the the file name invisibly altered ?
What do you get when explicitely asking for its path:

  ls -ld '/usr/include/x86_64-linux-gnu/bits/locale.h'


Have a nice day :)

Thomas

Re: g++ can't build "Hello World" programm

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Thu, Oct 19, 2017 at 02:01:18AM +0600, Evgeny wrote:
> Problems gone when i reinstalled libc6-dev, now hello world compiling fine,
> but the problem is that after removing lib6c-dev a lot of other packages
> was deleted and when I trying to install them back I have error (Unable to
> correct problems, you have held broken packages)

Phew :-)

You might try

  apt-get -s install --fix-broken

(the -s is for "simulate": then you can see what apt-get would do. You don't
need sudo while simulating).

If you like what the system proposes, then

  sudo apt-get install --fix-broken

> Anyway, thanks a lot, I finally figured it out

Glad you found it!

Cheers
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlnnuf8ACgkQBcgs9XrR2kZaXgCfTrOwIWGgJ2z/B16EZsfelSX0
q0sAoIEEilHIiTIRjMDdReDpNvG96ovG
=nlbf
-END PGP SIGNATURE-

Re: Sshfs and umask

[Paul van der Vlis]

Op 18-10-17 om 17:31 schreef Sven Hartge:
> Paul van der Vlis  wrote:
> 
>> I try to force the umask of an sshfs on the server side.
> 
>> I've tried /etc/ssh/sshd_config with for example:
>> Subsystem   sftp/usr/lib/openssh/sftp-server -u 0002
>> or:
>> ForceCommand internal-sftp -u 0002
>> But this does not change the umask.
> 
>> And adding "session optional pam_umask.so umask=0002" to
>> /etc/pam.d/sshd/ does change the umask for ssh, but not for sshfs.
> 
>> Does somebody understand where it goed wrong?
> 
> The umask can only enforce stricter permissions, i.e. the client wants
> to set 0777 but the file gets set to 0775 in your case.
> 
> But it can't set wider permissions. If the client sets the permissions
> to 0700 then no umask in the world will get you to 0775.

Thanks for the information, I have tested it and it's correct. I can set
a stricter permission.

> Dirty hack: use something like incron to trigger a script via inotify to
> change the permssions.

That's possible, I can think about it.

> Grüße,
> Sven.

Groeten, Paul




-- 
Paul van der Vlis Linux systeembeheer Groningen
https://www.vandervlis.nl/

Re: Sshfs and umask

[Sven Hartge]

Paul van der Vlis  wrote:
> Op 18-10-17 om 17:31 schreef Sven Hartge:
>> Paul van der Vlis  wrote:

>>> And adding "session optional pam_umask.so umask=0002" to
>>> /etc/pam.d/sshd/ does change the umask for ssh, but not for sshfs.
>> 
>>> Does somebody understand where it goed wrong?
>> 
>> The umask can only enforce stricter permissions, i.e. the client wants
>> to set 0777 but the file gets set to 0775 in your case.
>> 
>> But it can't set wider permissions. If the client sets the permissions
>> to 0700 then no umask in the world will get you to 0775.

> Thanks for the information, I have tested it and it's correct. I can
> set a stricter permission.

>> Dirty hack: use something like incron to trigger a script via inotify
>> to change the permssions.

> That's possible, I can think about it.

You also could try Posix-ACLs. 

(The last time, I tried to use them for a similar use case, I lost
nearly all my hair, but YMMV.)

S°

-- 
Sigmentation fault. Core dumped.

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[Jimmy Johnson]

On 10/17/2017 11:42 AM, Brian wrote:

On Tue 17 Oct 2017 at 13:56:37 -0400, Greg Wooledge wrote:


On Tue, Oct 17, 2017 at 06:42:04PM +0100, Brian wrote:

On Tue 17 Oct 2017 at 11:38:40 -0500, David Wright wrote:

On Tue 17 Oct 2017 at 19:32:11 (+0500), Alexan:der V. Makartsev wrote:

Deprecated doesn't mean it doesn't exist or work anymore at all, it
means it isn't supported anymore and should not be used.
Look it up, it was deprecated for quite some time.



  https://forums.mageia.org/en/viewtopic.php?f=8&t=8737


So it's deprecated in Mageia GNU/Linux?  OK.  If I were a Mageia user (or
had ever heard of it before today) that might carry some weight with me.

Just curious, what are Mageia users expected to use instead of startx if
they want to start a traditional X session from a console?  Or is that
no longer a supported configuration at all?  (By traditional, I mean
a ~/.xsession or ~/.xinitrc file that contains "exec twm" or whatever
window manager you prefer.)

Did they simply throw every window manager under the bus and say "Nope,
sorry, you gotta run a desktop environment now"?


That is possible, but I'm not going to invest the time in finding out.
The purpose of my post was to point out Alexan:der V. Makartsev's use
of a post from elsewhere without acknowledgement and indicate Debian's
attitude towards startx (without going into detail).

I use startx. My users get xdm because they have poor memories for the
names of commands and like pretty pictures.


I use startx a lot because I install a lot of systems from a base 
install and after installing drivers, firmware and desktop I can startx 
and do my desktop setup before rebooting or logging out.  I'm sure there 
are other ways like starting sddm or start plasma or? But I know and use 
startx.

--
Jimmy Johnson

Debian Buster - KDE Plasma 5.10.5 - AMD A8-7600 - EXT4 at sda7
Registered Linux User #380263

Call for Papers

[submission]

 Dear Professor, Doctor / Researcher,

Apex Journal International, is currently accepting manuscript for
publication in the following journals:

*International Research on Medical Sciences*

* *

*Research Journal of Agricultural and Environmental Management*

* *

*Journal of Business Administration and Management Sciences Research *

* *

*Journal of Cell Biology and Biochemistry Research*

* *

*Journal of Data Management and Computer Science*

* *

*Journal of Education Research and Behavioral Sciences *

* *

*International Research Journal on Engineering*

* *

*International Law and Policy Research Journal*

* *

*International Journal of Microbiology and Immunology Research*

* *

*Journal of Public Health and Environmental Pollution*

* *

*Journal of Poisonous and Medicinal Plants Research*

* *

*Research Journal of Public Administration*

We welcome a timely submission of Original articles, Case studies,
Expert reviews, surveys, opinions, commentaries and essays in all
fields covered by our journals.

Please note that we accept manuscript in .doc, .docx and rtf formats.
Figures and table should be submitted alongside the main manuscript or
attached as supporting documents. Please see our Instruction for
Authors and Author Guidelines link:
http://apexjournal.org/Auth_instr.htm
 and http://apexjournal.org/rjaem/guide.htm

All manuscript(s) as well as supporting documents should be submitted
as e-mail attachment(s) to submiss...@apexjournal.org and
edi...@apexjournal.org.

Best Regards,

Apex Journal International Editorial Team

http://www.apexjournal.org



--
If you do not want to receive any more newsletters, 
https://apexjournals.ga/?p=unsubscribe&uid=88b3c4bc6096256cf9fc49dd5739f6a6

To update your preferences and to unsubscribe visit
https://apexjournals.ga/?p=preferences&uid=88b3c4bc6096256cf9fc49dd5739f6a6
Forward a Message to Someone
https://apexjournals.ga/?p=forward&uid=88b3c4bc6096256cf9fc49dd5739f6a6&mid=3


--
powered by phpList, www.phplist.com --

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[Felix Miata]

Ionel Mugurel Ciobîcă composed on 2017-10-18 20:47 (UTC+0200):

> I never understood the need for desktop managers. I use Debian since
> hamm and Linux/Unix since 1995. My take is that desktop managers are
> for people more used to microsoft OS'. Why do I need to click on
> something when the xterm I type in can call any program I need?... 

Finding a wanted app to run from a classified tree list of 30 or 40 or 50 or
more applications is easier for most people than remembering the name and any
required startup options to type, both for those uncommonly used, and even for
the commonly used ones if there are more than a scant few such. 2 or 3 or 4
clicks to start one up is typically easier than typing 4, 5, 6, 7 or more
characters, or searching command history more than a few entries back. It's a
nice bonus in some DEs that automatically remember and reopen apps, their
content states, and their window sizes and positions.

For some, the microscopic default text size and fractional default proportion of
screen area (80x25, using as little as 1/16 or less of total screen space) of
xterm windows impedes their use for anything.
-- 
"Wisdom is supreme; therefore get wisdom. Whatever else you
get, get wisdom." Proverbs 4:7 (New Living Translation)

 Team OS/2 ** Reg. Linux User #211409 ** a11y rocks!

Felix Miata  ***  http://fm.no-ip.com/

Missing KDE "Switch user" command in Stretch

[Roger Lynn]

Hi,

When I upgraded to Stretch I lost the "Switch user" command from the Leave
section of the KDE launcher menu, from the KDE lock screen and from the SDDM
login screen. This should give the choice of activating an existing session
or starting a new one. Without it, it is difficult to tell if I am already
logged in, so I am in danger of creating duplicate sessions.

The login screen used to have a menu with "Cancel Session", "Remote Login"
and "Console Login" commands too. These have also disappeared.

The only workaround I can find is to manually check every virtual console to
see if I have a session running there. This is not a suitable solution for
other users. I think my son is currently logged in three times and is
probably trying to edit the same file in each KDE session.

What additional information do I need to supply? How can I get the commands
back? Have I configured something wrongly? Is this a bug in KDE? If so, it
would appear to be a serious regression since the version in Jessie.

Thanks,

Roger

Re: [OT] Breaking WPA2 by forcing nonce reuse

[Celejar]

On Tue, 17 Oct 2017 19:20:08 +0100
Brian  wrote:

> On Tue 17 Oct 2017 at 10:57:15 -0400, Celejar wrote:
> 
> > On Tue, 17 Oct 2017 08:43:00 +0530
> > "tv.deb...@googlemail.com"  wrote:
> > 
> > > So using https or better for communications on the local network is a 
> > > good idea, but is it the norm? Many router firmwares or built-in 
> > > webservers from cameras to printers default to http, sometime don't even 
> > > offer https as an option.
> > 
> > Yes, after I sent my mail I realized that my wirelessly networked
> > printer is going to be a problem. Some printers apparently support
> > access via SSL/TLS (IPPS), but it looks like mine (Brother
> > HL-2280DW) does not. And what are the odds that Brother will do a
> > firmware update to patch WPA for this some 6 years old model ;)
> 
> I, and you, probably, are not dealing with printing confidential
> documents. Those entities which are should be more concerned.

I'm not? What happens when I need to print out some sort of financial
statement?

...

> > > It's patched in most distributions, and in router firmwares like LEDE 
> > > already, was patched in some BSD even before publication, but how long 
> > > before we see a patches for all affected devices?
> > 
> > Never - for many / most Android devices, my printer (probably), etc.
> 
> A timely fix arrives in Debian. Users who update are once again safe.
> What more could you ask for? What can you say apart from "thanks"?

? Yes, my Debian installations are now safe, and I'm duly thankful to
the Debian maintainers, the wpa_supplicant developers, the LEDE
developers, etc., but why should I not be worried and upset about the
situation with my phone, printer, etc.?

Celejar

Re: removing of sddm (debian 9 -kde5) to start in console mode then startx to start kde5

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Oct 18, 2017 at 07:22:53PM -0400, Felix Miata wrote:
> Ionel Mugurel Ciobîcă composed on 2017-10-18 20:47 (UTC+0200):
> 
> > I never understood the need for desktop managers. I use Debian since
> > hamm and Linux/Unix since 1995. My take is that desktop managers are
> > for people more used to microsoft OS'. Why do I need to click on
> > something when the xterm I type in can call any program I need?... 
> 
> Finding a wanted app to run from a classified tree list of 30 or 40 or 50 or
> more applications is easier for most people than remembering the name and any
> required startup options to type, both for those uncommonly used, and even for
> the commonly used ones if there are more than a scant few such.

All generalizations suck.

My experience is that there's some tension between "easy to learn for a
newcomer" and "ergonomic for an experienced user". And my hunch is that,
in the last decennium, the "newcomer" part has been overemphasized to
a paradoxical level, where even the newcomers aren't treated very well
(an over-padded desktop environment which behaves erratically because
their creators don't master its exploding complexity[1] *is*
user-unfriendly, after all).

I think we should strive for a continuum which welcomes newcomers but
offers them a path towards experienced users they may follow if they
wish. Baroque complexity and arbitrary barriers (here users, there
sysadmins, yonder app programmers and far out, system programmers)
don't help.

The worst part is that nowadays there are strong financial incentives
in keeping users dumb. Watch the silos of Apple, Microsoft, Google,
Facebook et al. to see what I mean.

Cheers

[1] And no, I don't think Gnome's or KDE's creators are idiots, on
   the contrary. But I definitely believe they've fallen to one of
   the programmers "virtues" (Larry Wall): hubris.

- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlnoRfkACgkQBcgs9XrR2kb9hgCcClRTCCRavUMeLvzRkFFRCz9X
GaUAn00so0+WlID82DN3ZNLAhjHHaoLp
=lEYB
-END PGP SIGNATURE-