Re: [opensuse-gnome] Deleting auto wifi connections
Le mercredi 29 février 2012, à 01:05 -0600, Bryen M Yunashko a écrit : > Where do I go to look at the list of known wifi networks in network > manager? I accidentally clicked on a wrong wifi network some time ago > and now when my sometimes-glitchy wifi router briefly goes out, network > manager keeps wanting to toggle on to the next auto-connect available > network. > > Which of course then pops up the annoying admin-password request window. > > There's got to be some way to delete these unused auto-connects. I used > to be able to do it in previous versions of openSUSE. This one is now > 12.1. There's a new "Forget network" in GNOME 3.4. Otherwise, just start nm-connection-editor and remove things from there. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
Le mardi 28 février 2012, à 23:53 +0100, Gerald Pfeifer a écrit : > Hi there, > > Linus vocally complained about this today at > https://plus.google.com/u/0/102150693225130002912/posts/1vyfmNCYpi5 > and I verified that running GNOME on openSUSE 12.1, all updates applied, > I do need to provide the root password to change the timezone or add > a printer. > > That is a major usability issue for personas "Daniela" and "significant > other", which means it has real life impact on both Linus and myself. :-) > > Surprisingly enough, I did not find existing Bugzilla entries, but > perhaps those were (incorrectly) closed earlier and I missed them > therefore? > > In any case, I filed > > https://bugzilla.novell.com/show_bug.cgi?id=749451 > Adding a new printer via system-config-printer requires root password This is because of the default polkit policies in openSUSE: the org.opensuse.cupspkhelper.mechanism.* actions require the root password. Note that I wrote cups-pk-helper in order to enable adding a printer without root password... > https://bugzilla.novell.com/show_bug.cgi?id=749453 > Changing the timezone via world clock requires root password This one is actually GNOME's fault: the new design of GNOME means that when you can change the timezone, you can also change the time. And we don't want to allow the latter without root password. Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
Le mercredi 29 février 2012, à 09:15 +0100, Vincent Untz a écrit : > Le mardi 28 février 2012, à 23:53 +0100, Gerald Pfeifer a écrit : > > https://bugzilla.novell.com/show_bug.cgi?id=749453 > > Changing the timezone via world clock requires root password > > This one is actually GNOME's fault: the new design of GNOME means that > when you can change the timezone, you can also change the time. And we > don't want to allow the latter without root password. Forgot to put the upstream bug: https://bugzilla.gnome.org/show_bug.cgi?id=646185 Vincent -- Les gens heureux ne sont pas pressés. -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
[opensuse-gnome] Re: [opensuse-security] Timezone and printer settings too restrictive by default
Hello, On Feb 28 23:53 Gerald Pfeifer wrote (excerpt): Linus vocally complained about this today at https://plus.google.com/u/0/102150693225130002912/posts/1vyfmNCYpi5 His tone is not acceptable so that I ignore what he spits out. https://bugzilla.novell.com/show_bug.cgi?id=749451 Adding a new printer via system-config-printer requires root password https://bugzilla.novell.com/show_bug.cgi?id=749453 Changing the timezone via world clock requires root password Any chance we can get these two resolved quickly? https://bugzilla.novell.com/show_bug.cgi?id=749451 is no bug because it works as intended. To change the intention how something works, bug reports are not appropriate. In such cases please file a FATE request. And then you manager, please do manage it to get it actually done and not lost again in endless futile duscussions as it happened all the time in the past with exactly the same issue. I suggest to file a FATE request to have two kind of security defaults out of the box: - The "traditional" one e.g. for corporate environments where ony a dedicated admin can change system settings. (It is questionable if e.g. the timezone is a system setting or only a user-level preference.) - Another one for "single user systems" where one same person who installs the system is also its user. I would be against a security default where any person who get access to the system can change anything (i.e. where anybody could hijack an unattended computer). Kind Regards Johannes Meixner -- SUSE LINUX Products GmbH -- Maxfeldstrasse 5 -- 90409 Nuernberg -- Germany HRB 16746 (AG Nuernberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendoerffer -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-security] Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
Hello, On Feb 29 00:36 Gerald Pfeifer wrote (excerpt): On Tue, 28 Feb 2012, Bryen M Yunashko wrote: As for printers... I see the issue being installation of drivers. If we're setting up a printer which has a driver already installed on the machine, then no, password should not be required like that. Great, we agree on that. Of course it is not as easy as you think. Your current point of view "printer setup on my own machine" does not apply in any case. In corporate environments where an admin maintains the workstations it is usually not wanted that users can change how workstations print because this can cause printing security issues in the whole network, see "print job phishing" at http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings But if setting up the printer means downloading the driver... then it should be treated the same way as any other software installation which requires system authentication. And I can agree on that. Installation of new software, not yet on the systems or authorized somehow (for example, Linus could have put all acceptable drivers somewhere on the machine for the system to pick up in case of need) is a different beast. For you current use case "printer setup on my own machine" why shold the user not also install a driver on his own machine? More and more printers require a driver from the manufacturer. In particular low-level printers which are of major interest for the use case "printer setup on my own machine". Of course long ago I had aready filed a matching FATE request https://features.opensuse.org/307745 but nobody - in particular nobody of the management - cares. Kind Regards Johannes Meixner -- SUSE LINUX Products GmbH -- Maxfeldstrasse 5 -- 90409 Nuernberg -- Germany HRB 16746 (AG Nuernberg) GF: Jeff Hawn, Jennifer Guild, Felix Imendoerffer -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-security] Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
On Wednesday, February 29, 2012 10:30:38 Johannes Meixner wrote:
> Hello,
>
> On Feb 29 00:36 Gerald Pfeifer wrote (excerpt):
> > On Tue, 28 Feb 2012, Bryen M Yunashko wrote:
> >> As for printers... I see the issue being installation of drivers.
> >> If we're setting up a printer which has a driver already installed
> >> on the machine, then no, password should not be required like that.
> >
> > Great, we agree on that.
>
> Of course it is not as easy as you think.
>
> Your current point of view "printer setup on my own machine"
> does not apply in any case.
>
> In corporate environments where an admin maintains the workstations
> it is usually not wanted that users can change how workstations print
> because this can cause printing security issues in the whole network,
> see "print job phishing" at
> http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
openSUSE is not corporate environment but individual desktops, so let's use
sane defaults there.
If the defaults for corporate environments need to be different, then SLES
and SLED can use different defaults - but that doesn't mean openSUSE
should...
Andreas
--
Andreas Jaeger aj@{suse.com,opensuse.org} Twitter/Identica: jaegerandi
SUSE LINUX Products GmbH, Maxfeldstr. 5, 90409 Nürnberg, Germany
GF: Jeff Hawn,Jennifer Guild,Felix Imendörffer,HRB16746 (AG Nürnberg)
GPG fingerprint = 93A3 365E CE47 B889 DF7F FED1 389A 563C C272 A126
--
To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org
To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-02-29 06:38, Sankar P wrote: > This is how I remember this. But I may be wrong and could not verify now. > Just check once if time is stored in UTC in yast and then try to see if you > can change the timezone. You don't need YaST to change your timezone. It is an environment variable. What you can not change is the system timezone, affecting all users. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk9N8XsACgkQIvFNjefEBxr1DwCgvUteT+G5/MlJPSSVW0rhK5yB QuQAoKKvBPk5n+/wbTnkmWTHaqkwglut =ayKy -END PGP SIGNATURE- -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-02-29 03:36, Bryen M Yunashko wrote: > On Wed, 2012-02-29 at 03:23 +0100, Carlos E. R. wrote: >> However, printer configuration, as that is a hardware thing, is >> traditionally a task for the administrator, but perhaps something >> could be >> devised that allowed the user to do it if the administrator allows. >> However, if a driver has to be installed, then it is "no way". > > With the exception of requiring actual driver installations, I don't > agree with even needing an administrator allowance. I think that > tradition needs to go out the door in today's more modern mobility > world. Last thing I need if I'm on the road and need to hook up to a > printer for an important document is to call my IT admin guy and say > Hey, can you allow my machine to connect to this printer?? I think the administrator must choose whether to delegate that or not. On some fixed installations root may want to keep control, on other installations he may not want to bother. So we must make the choice available. But I don't know if this is possible. > Of course, there is an exception to every rule. :-) We may not want > users to connect to certain network printers. I certainly recall one > of my clients back when I was in consulting, having to put in > restrictions so students would not send prank printouts to the > principal's printer. :-) X'-) - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk9N8NQACgkQIvFNjefEBxrzUgCeKrvmxv+Fcy5Vfz/wrX3+eUwZ G+8AoLcz7c80lF+UVsKWKESQTfPb+mkt =++J5 -END PGP SIGNATURE- -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-gnome] Re: [opensuse-security] Timezone and printer settings too restrictive by default
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2012-02-29 10:14, Johannes Meixner wrote: > (It is questionable if e.g. the timezone is a system setting >or only a user-level preference.) It is both. You can change both settings separately, and each user can have his own different timezone. - -- Cheers / Saludos, Carlos E. R. (from 11.4 x86_64 "Celadon" at Telcontar) -BEGIN PGP SIGNATURE- Version: GnuPG v2.0.16 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/ iEYEARECAAYFAk9N8lwACgkQIvFNjefEBxoYXwCfZB35mFVNuWmOrMbya17VFUJA BZcAn2QHNjJHBfM0vit0O7FfVT5IJ2yG =kC4W -END PGP SIGNATURE- -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
[opensuse-gnome] Re: [opensuse-marketing] [Fwd: GNOME.Asia 2012 Official Announcement]
Dear KK Nundy: Do you live HongKong? Would you help GNOME.Asia 2012? Best regards sakana On Tue, Feb 28, 2012 at 6:28 PM, Koushik Kumar Nundy wrote: > Hi all, > > On 21 February 2012 01:41, Bryen M Yunashko wrote: >> Passing along an FYI for anyone interested. >> >> Bryen >> >> Forwarded Message >> From: Brian Cameron >> To: foundation-list , asia-summit-list >> , developing-world-l...@gnome.org, >> gnome-cn-l...@gnome.org, gugmasters-list >> Subject: GNOME.Asia 2012 Official Announcement >> Date: Mon, 20 Feb 2012 11:38:33 -0600 >> >> Hosting GNOME.Asia 2012 >> June 9-15, 2012 >> Hong Kong >> > > If anyone wants to come to GNOME Asia, I'll be glad to help, and > possibly host (not promising anything ;) ) him/her. > > I would personally have liked to take a more active initiative, but > I'll be extremely busy with work and travel over most of late May and > early June. > > Feel free to contact me on/off list. > > Cheerio, > ~kknundy > > >> > > > -- > Koushik Kumar Nundy > -- > To unsubscribe, e-mail: opensuse-marketing+unsubscr...@opensuse.org > To contact the owner, e-mail: opensuse-marketing+ow...@opensuse.org > -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
Re: [opensuse-security] Re: [opensuse-gnome] Timezone and printer settings too restrictive by default
On Wed, 29 Feb 2012, Johannes Meixner wrote: > In corporate environments where an admin maintains the workstations > it is usually not wanted that users can change how workstations print > because this can cause printing security issues in the whole network, > see "print job phishing" In corporate environments where an admin maintains the workstations, said admins can easily increase whatever security levels she desires to increase. A vanilla openSUSE installation is not exactly most common in such environments. It's a lot more common, as we see every day, in those cases Linus and me are concerned about. (In fact, a couple of SUSE employees contacted me in the last 24 hours indicating "Yes, I do have the root password, but this really has annoyed me all the time.") > Of course long ago I had aready filed a matching FATE request > https://features.opensuse.org/307745 > but nobody - in particular nobody of the management - cares. I am sorry your request did not get picked up for openSUSE. As far as all SUSE products go, indeed I am (Mr. Product) Management. openSUSE is not a SUSE product, though, and there I am just a lowly contributor like everyone else. :-) With a bit of influence, admittedly, in suggesting what SUSE engineering teams contribute to openSUSE, but not in the sense of classic (product) management. Gerald -- Dr. Gerald Pfeifer || SUSE || Director Product Management -- To unsubscribe, e-mail: opensuse-gnome+unsubscr...@opensuse.org To contact the owner, e-mail: opensuse-gnome+ow...@opensuse.org
