June 2010 - Arch-general - lists.archlinux.org

[arch-general] What should the Arch Security Team be called?
by Ananda Samaddar 18 Jun '10

18 Jun '10

On to the first order of business. As the subject says, what should security team be called. Hopefully we can get a few suggestions and then reach a consensus. Arch Linux Security Task Force just sounds like too much of a mouthful to me. I was brooding over this and I thought some sort of acronym that's an actual word would sound better, so I came up with this: 'Arch Response Team for Security' or ARTS. It's a bit cheesy and cheats a bit to get the acronym but is instantly memorable. I'm aware arts was also a KDE technology but it has long since been deprecated. Ideas? Ananda

12 14

[arch-general] intel video & suspend
by Sergey Manucharian 18 Jun '10

18 Jun '10

Hi folks, Regularly I put my ThinkPad R61 into suspend twice a day, and everything worked perfectly until 2.6.32 and 2.6.33 kernels. Now from time to time (≈ once a week) when I wake it up, the screen remains black in both X and text console. Nothing can bring it back, but everything else works just fine. No errors in logs either. The suspend is done with: # echo -n mem >/sys/power/state (just the stock /etc/acpi/handler.sh of acpid package) I have Intel GM965 card and run xorg-server-1.7.6-3. Driver: xf86-video-intel-2.10.0-1 I found that there are a couple of patches [1,2] for i915 and intel bios were made in Nov-Dec 2009 to fix such problems, and they were supposed to be in 2.6.33, but my problem persists. Does anybody have ideas/info? Thanks, Sergey [1] http://bbs.archlinux.org/viewtopic.php?id=87828 [2] https://patchwork.kernel.org/patch/62734/

9 17

[arch-general] New Google Group for discussion and notices on Arch security.
by Ananda Samaddar 18 Jun '10

18 Jun '10

I've created a Google Group here for discussion around creating an Arch Security Team: http://groups.google.com/group/arch-security Please join it if you're interested. The reason for this group is in response to my rejected suggestion for an arch-security mailing list. I'll CC any policy or process suggestions to arch-general, but when announcements happen and also discussion regarding specific vulnerabilities and mitigation they won't be CCed. If an Arch Security Team comes coalesces and the Devs are happy to integrate us officially then we can consider deleting the group and if possible transferring the archives to archlinux.org. Ananda

10 16

[arch-general] mplayer 31428-1 broken without libvpx.so.0
by PT M. 18 Jun '10

18 Jun '10

after recent update, mplayer failed to load with such error: $ mplayer > mplayer: error while loading shared libraries: libvpx.so.0: cannot open > shared object file: No such file or directory > this so i think is supposed by libvpx, but: $ pacman -Ql libvpx|grep /usr/lib > libvpx /usr/lib/ > libvpx /usr/lib/libvpx.a > only a static lib is supplied. libvpx is about the VP8 Codec which is newly added to ffmpeg and mplayer, but this does this need some fix. -- Arch Linuxer, Pythoner, Geek --> Blog: http://apt-blog.net

4 4

[arch-general] Xorg-server 1.8 - when?
by Lukáš Jirkovský 18 Jun '10

18 Jun '10

Hello, I'd like to ask what are the plans for the xorg-server 1.8, especially now when RC1 of xorg-server 1.9 is out. Please don't get me wrong, I'm not demanding anything but I'm wondering what is holding back the move to [extra]. I'm using new xorg-server on two different computers (notebook with intel and desktop with nvidia's blob) for some time without any problems. Have a nice day, Lukas

7 7

[arch-general] File Associations for firefox & thunderbird :)^
by Nilesh Govindarajan 18 Jun '10

18 Jun '10

I am a full time KDE user and I don't have GNOME or its libraries. Firefox and Thunderbird keep asking me to choose applications to open .pdf, .doc, .xls, http://, etc. Is there no package which can fix the file associations for FF and TB ? -- Nilesh Govindarajan Facebook: http://www.facebook.com/nilesh.gr Twitter: http://twitter.com/nileshgr Website: http://www.itech7.com Cheap and Reliable VPS Hosting: http://j.mp/arHk5e

9 12

Re: [arch-general] [arch-dev-public] dropping flashplugin x86_64
by Caleb Cushing 18 Jun '10

18 Jun '10

On Tue, Jun 15, 2010 at 12:23 PM, Thomas Bächler <thomas(a)archlinux.org> wrote: > I'll keep this installed despite the security problem. Combined with > flashblock, I can at least watch youtube this way. Force-removing it by > a dummy update is something I don't want. Same here. I block all plugins and js by default anyways... it's not like anyone should actually be trusting flash to be secure... removing it will just harm user functionality. Linus is right http://article.gmane.org/gmane.linux.kernel/706950 of course no matter what... adobe is wrong... they shouldn't have released without 64-bit... but their wrongs shouldn't make us choose to harm our users functionality. -- Caleb Cushing http://xenoterracide.blogspot.com

19 48

[arch-general] Package fwbuilder flagged out-of-date
by Gaurish Sharma 17 Jun '10

17 Jun '10

Hi, The fwbuilder package which is very usefull for writing firewall rules is flagged out of date since weeks. there is a major 4 which has lots of new features[1] Any reason its not being updated to latest version? [1]http://www.fwbuilder.org/4.0/docs/whats_new/firewall_builder_whats_new_in… Regards, Gaurish Sharma

4 11

Re: [arch-general] [arch-security] Re: What should the Arch Security Team be called?
by Ananda Samaddar 17 Jun '10

17 Jun '10

On Thu, 17 Jun 2010 13:27:59 -0700 (PDT) nepherte <nepherte(a)gmail.com> wrote: > Why not just "Arch Security Team" (AST) not to be confused with > abstract syntax trees :) No need to make things complicated. This looks like the way to go, if there's no more dissenters or better suggestions. Ananda

1 0

[arch-general] unrealircd 3.2.8.1-2 contains backdoor
by Alexander Duscheleit 17 Jun '10

17 Jun '10

Hi folks, the unrealircd version in community (3.2.8.1-2) has been flagged as containing a backdoor which allows an attacker to execute commands with the privileges of the user running the daemon. The md5sum in the PKGBUILD (abs) matches the known-bad md5sum from this announcement: http://sourceforge.net/mailarchive/message.php?msg_name=4C134F7E.202%40vuln… I've already filed a bug as FS#19780 to the community project, but given the severity I thought it would be wise to alert a wider audience. Greetings, Jinks

14 37