Re: [DNG] Preserving rsync: was systemd local privilege escalation (CVE-2017-18078)

On 07/02/18 07:10, Steve Litt wrote: According to https://git.samba.org/?p=rsync.git;a=shortlog , it looks to me like poettering has never committed to rsync, so that's good news. LOL, I had to take some flack in order to get that URL from the Samba list, but it's worth it. I'm not trying to

Re: [DNG] Preserving rsync: was systemd local privilege escalation (CVE-2017-18078)

On Tue, 6 Feb 2018 21:17:21 + KatolaZ wrote: > On Tue, Feb 06, 2018 at 03:57:48PM -0500, Steve Litt wrote: > > [cut] > > > > > > > No need to panic Steve :) You are not the only one using rsync, > > > so I guess it's not going to disappear. > > > > Tell that to

Re: [DNG] Preserving rsync: was systemd local privilege escalation (CVE-2017-18078)

On Tue, Feb 06, 2018 at 03:57:48PM -0500, Steve Litt wrote: [cut] > > > > No need to panic Steve :) You are not the only one using rsync, so I > > guess it's not going to disappear. > > Tell that to dedicated users of dracut. > Well, it means that the dracut users were not so "dedicated" :)

Re: [DNG] Preserving rsync: was systemd local privilege escalation (CVE-2017-18078)

On Tue, 6 Feb 2018 20:39:53 + KatolaZ wrote: > On Tue, Feb 06, 2018 at 03:34:25PM -0500, Steve Litt wrote: > > On Tue, 6 Feb 2018 21:21:09 +0100 > > Jaromil wrote: > > > > > > > ...meanwhile I heard from people back from FOSDEM that > > >

Re: [DNG] Preserving rsync: was systemd local privilege escalation (CVE-2017-18078)

On Tue, Feb 06, 2018 at 03:34:25PM -0500, Steve Litt wrote: > On Tue, 6 Feb 2018 21:21:09 +0100 > Jaromil wrote: > > > > ...meanwhile I heard from people back from FOSDEM that Mr.Poettering > > went on to rewrite rsync :^D > > > > ciao > > Where can one get the original

[DNG] Preserving rsync: was systemd local privilege escalation (CVE-2017-18078)

On Tue, 6 Feb 2018 21:21:09 +0100 Jaromil wrote: > ...meanwhile I heard from people back from FOSDEM that Mr.Poettering > went on to rewrite rsync :^D > > ciao Where can one get the original rsync source code *right now*? It must be preserved. At least once before, Redhat

Re: [DNG] New Sakura document

On Tue, 6 Feb 2018 11:10:52 +0100 Didier Kryn wrote: > Le 06/02/2018 à 00:17, Steve Litt a écrit : > > Oh Oh. Here's what my Chromium browser says the last paragraph of > > the document says: [snip my description] > > > > On what browser did you observe the lack of the tilde? >

[DNG] systemd local privilege escalation (CVE-2017-18078)

hi everyone Parazyd just caught my attention with this interesting story, to be added to the history of catastrophies we dodged. I hope someone keeps a list of systemd CVEs somewhere? https://packetstormsecurity.com/files/146184/systemd-Local-Privilege-Escalation.html " Before version 237, the

Re: [DNG] Minor Ascii upgrade fixes ?

On 2018-02-06 09:58, Irrwahn wrote: dev wrote on 06.02.2018 16:28: On 02/06/2018 09:15 AM, Irrwahn wrote: In xfce4-terminal: Right click --> Preferences --> Colors. Thanks, this is great for setting the terminal colors but I don't see a way to change the "window frame" color:

Re: [DNG] Minor Ascii upgrade fixes ?

dev wrote on 06.02.2018 16:28: > > > On 02/06/2018 09:15 AM, Irrwahn wrote: >> In xfce4-terminal: Right click --> Preferences --> Colors. > > Thanks, this is great for setting the terminal colors but I don't see a > way to change the "window frame" color: https://imgur.com/a/bedWL > > Is this

Re: [DNG] Minor Ascii upgrade fixes ?

On 02/06/2018 09:15 AM, Irrwahn wrote: > In xfce4-terminal: Right click --> Preferences --> Colors. Thanks, this is great for setting the terminal colors but I don't see a way to change the "window frame" color: https://imgur.com/a/bedWL Is this perhaps an Openbox setting?

Re: [DNG] desktop screen recording with sound?

On 02/04/2018 07:24 AM, Alessandro Selli wrote: > Better disable whatever you have > in /etc/apt/sources.list.d/, to avoid issues. Then you update and > dist-upgrade as usual. I did just that and have it working OK. Thanks! ___ Dng mailing list

Re: [DNG] Minor Ascii upgrade fixes ?

dev wrote on 06.02.2018 16:03: [...] > * I'm running xfce-terminal on LXDE. Anyone know how to change the > terminal color scheme? I thought xfce4-appearance-settings > would do, but I have "dusk" selected and the terminal is still > white: https://imgur.com/a/v8hHd In xfce4-terminal: Right

[DNG] Minor Ascii upgrade fixes ? (was: Re: desktop screen recording with sound?)

On 02/02/2018 04:36 PM, KatolaZ wrote: > So I guess it must be possible to get a proper devuan jessie/ascii > from a MeDeBunVuan, without reinstalling. I think it went OK? I did run out of space in /var so I killed the upgrade, extended the FS and restarted it. Would be a nice catch for the

Re: [DNG] reaffirm security in Devuan with spectre-meltdown mitigations WAS: grsecunoff retpoline patch, toolchain update needed

On 180206-11:32+, KatolaZ wrote: > On Tue, Feb 06, 2018 at 10:57:39AM +, Miroslav Rovis wrote: > > This is a re-send, because indeed the planned changed subject (just below) > > got > > lost. All the rest of the email is same as the previous. Pls. if you do > > reply, > > use this one

Re: [DNG] reaffirm security in Devuan with spectre-meltdown mitigations WAS: grsecunoff retpoline patch, toolchain update needed

On Tue, Feb 06, 2018 at 10:57:39AM +, Miroslav Rovis wrote: > This is a re-send, because indeed the planned changed subject (just below) got > lost. All the rest of the email is same as the previous. Pls. if you do reply, > use this one with the changed subject. Miroslav, the microcode

Re: [DNG] deb.devuan.org, netboot, ascii

On Tue, Feb 06, 2018 at 10:17:07AM +0100, Thomas Besser wrote: [cut] > > I love to install linux boxes with "netboot.tar.gz", because it's really > smart. > > Please give short information on the list, when the big issues with the > ascii installer are solved and you need feedback of testing

[DNG] reaffirm security in Devuan with spectre-meltdown mitigations WAS: grsecunoff retpoline patch, toolchain update needed

This is a re-send, because indeed the planned changed subject (just below) got lost. All the rest of the email is same as the previous. Pls. if you do reply, use this one with the changed subject. --- I changed the subject because it's the (still) hot freshly known spectre-meltdown security issue

Re: [DNG] New Sakura document

Le 06/02/2018 à 00:17, Steve Litt a écrit : Oh Oh. Here's what my Chromium browser says the last paragraph of the document says: === Sakura is much more featureful than discussed in this document, and its features are easy to use. Perform

Re: [DNG] deb.devuan.org, netboot, ascii

Hi KatolaZ Am 05.02.2018 um 12:52 schrieb KatolaZ: > On Mon, Feb 05, 2018 at 12:41:50PM +0100, m_maass wrote: >> i just play with >> >> http://deb.devuan.org/devuan/dists/ascii/main/installer-amd64/current/images/netboot/netboot.tar.gz >> >> There is an error, the mirror "deb.devuan.org" do not