- Arch-general - lists.archlinux.org

Re: [arch-general] Sites hosted on gudrun are now https-only
by Kevin Chadwick 21 Oct '12

21 Oct '12

On Sun, 21 Oct 2012 22:32:07 +0200 Thomas Bächler <thomas(a)archlinux.org> wrote: > Out of curiosity, what is the motivation for this change? I wonder too, if you have some server side PHP or cgi, then enforcement is far better via a persistent redirect, MITM is not prevented in either case. From experience of a friend of mine having boot trouble with linux fsck, (a problem OpenBSD does not have) with a dead laptop and bios battery. Any machine with a wrong clock (many more than you think, despite ntp) will be denied service with little gain in security over a PHP enforced redirect (except making the attacker proxy no ssl or a similar rather than same domain, you could argue a smaller window after first connect but considering the constant exploits for browsers and a MITM, does it buy you anything except deny some users access when pacman uses gpg). SSL RFCs knew this and state that except for higher level protocols standard SSL does not require a correct clock. I won't deny any customers access to my sites for the sake of HSTS, in any case. If the data about lost customers is discovered by the likes of Paypal, I will expect it to be promptly switched off or modified for compliance like the terrible DNSSEC saga.

1 0

[arch-general] syslog-ng depends on systemd?
by gt 21 Oct '12

21 Oct '12

Hi, with the recent update of syslog-ng (3.3.6-2), systemd has been added as a dependency. I though systemd providing its own logging and syslog-ng wasn't needed. Then why is systemd needed for syslog-ng to run? As far i can see from the diffs, nothing has changed apart from adding systemd as a dependency.

4 4

[arch-general] [seamonkey] Update is strongly required
by Christopher Reimer 21 Oct '12

21 Oct '12

I've already written this to the bugtracker. There I was told to post it here: seamonkey is flagged out of date for about 4 weeks now. There are several security vulnerabilites in 2.11 --> http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html Could the maintainer update the seamonkey package as soon as possible? Is it an usual case, that there are over 100 packages flagged out of date? Thank you Christopher Reimer

5 6

[arch-general] systemd adds entries to /etc/mtab
by Janna M. 20 Oct '12

20 Oct '12

I just switched to systemd, and was poking around a bit when I noticed many new entries in /etc/mtab: ... securityfs /sys/kernel/security securityfs rw,nosuid,nodev,noexec,relatime 0 0 tmpfs /sys/fs/cgroup tmpfs rw,nosuid,nodev,noexec,mode=755 0 0 cgroup /sys/fs/cgroup/systemd cgroup rw,nosuid,nodev,noexec,relatime,release_agent=/usr/lib/systemd/systemd-cgroups-agent,name=systemd 0 0 cgroup /sys/fs/cgroup/cpuset cgroup rw,nosuid,nodev,noexec,relatime,cpuset 0 0 cgroup /sys/fs/cgroup/cpu,cpuacct cgroup rw,nosuid,nodev,noexec,relatime,cpuacct,cpu 0 0 cgroup /sys/fs/cgroup/devices cgroup rw,nosuid,nodev,noexec,relatime,devices 0 0 cgroup /sys/fs/cgroup/freezer cgroup rw,nosuid,nodev,noexec,relatime,freezer 0 0 cgroup /sys/fs/cgroup/net_cls cgroup rw,nosuid,nodev,noexec,relatime,net_cls 0 0 cgroup /sys/fs/cgroup/blkio cgroup rw,nosuid,nodev,noexec,relatime,blkio 0 0 systemd-1 /proc/sys/fs/binfmt_misc autofs rw,relatime,fd=21,pgrp=1,timeout=300,minproto=5,maxproto=5,direct 0 0 hugetlbfs /dev/hugepages hugetlbfs rw,relatime 0 0 debugfs /sys/kernel/debug debugfs rw,relatime 0 0 mqueue /dev/mqueue mqueue rw,relatime 0 0 tmpfs /tmp tmpfs rw 0 0 fusectl /sys/fs/fuse/connections fusectl rw,relatime 0 0 In particular, I notice that /dev/hugepages, /dev/mqueue, and /sys/kernel/debug seem to correspond to unit files dev-hugepages.mount, dev-mqueue.mount, and sys-kernel-debug.mount, respectively. As I'm trying to pare down the output of systemctl list-units, I'd like to know if these things can safely be removed. (Nothing has gone wrong, but I'm just curious, and can't seem to find much online about the relevance of these things to systemd.) Many thanks, J.M.

3 3

Re: [arch-general] Xorg-server 1.13/Mesa move to testing
by Vincent Cappe 20 Oct '12

20 Oct '12

Andreas Radke a écrit: > And I've received a report about broken -nv driver pkg not working with > 1.13. This one just needs a rebuild for the new abi. It complains about xf86PciInfo.h being deprecated during compilation, but seems to work nonetheless. --- /var/abs/extra/xf86-video-nv/PKGBUILD 2012-10-10 06:05:50.000000000 +0200 +++ PKGBUILD 2012-10-20 22:29:29.816107850 +0200 @@ -3,14 +3,14 @@ pkgname=xf86-video-nv pkgver=2.1.20 -pkgrel=1 +pkgrel=2 pkgdesc="X.org nv video driver" arch=('i686' 'x86_64') license=('custom') url="http://xorg.freedesktop.org/" depends=('glibc') -makedepends=('xorg-server-devel>=1.11.99.903') -conflicts=('xorg-server<1.11.99.903') +makedepends=('xorg-server-devel' 'X-ABI-VIDEODRV_VERSION=13' 'resourceproto') +conflicts=('xorg-server<1.13.0' 'X-ABI-VIDEODRV_VERSION<13' 'X-ABI-VIDEODRV_VERSION>=14') options=('!libtool') groups=('xorg-drivers' 'xorg') source=(${url}/releases/individual/driver/${pkgname}-${pkgver}.tar.bz2) -- Vincent Cappe

1 0

[arch-general] Immediate suspend after wake-up
by Karol Babioch 20 Oct '12

20 Oct '12

Hi, since a few weeks my machines are going to an immediate suspend after the wake-up of another suspend. So basically I have to wake-up my machines twice after a suspend. One of my machine even reboots randomly after the wake-up, which renders the suspend functionality quite useless. Now originally I thought that this is something specific to my Sony laptops, because both of my machines are Sony ones. However I've installed Arch to an Medion laptop today and experienced the same issue here. So now I'm thinking that this is something more generic. I haven't looked deep into this yet, but wanted to ask whether this is something you are also experiencing? I'm pretty sure this came about with a larger update a few weeks ago. The suspected candidates are the kernel itself as well as systemd. So, before digging into this, I would like to know whether some of you know about this already and whether there is a workaround/fix for this? Best regards, Karol Babioch

2 2

[arch-general] boot problem with missing root fs solved
by Genes MailLists 20 Oct '12

20 Oct '12

With recent kernels & udev + initscripts I started having warm boot problems with one of my desktops. Fully updated testing repo (3.6.2). Cold boot works fine. The boot console looks very similar to these: https://bbs.archlinux.org/viewtopic.php?id=142052 http://serverfault.com/questions/394721/strange-boot-behaviour Today I switched that pc to systemd - and the problem has gone away. I cannot tell if it was udev timout bug - but booting with systemd did make the issue vanish. In case anyone else has this. gene

1 1

[arch-general] special keys on latop don't work
by Nelson Marambio 20 Oct '12

20 Oct '12

Hi, folks, until a few days ago running GNOME I could use the special keys on my laptop, e.g. for volume up/down. Now nothing happens when I press one of these keys. Strange enough, it seems like only the volume up/down keys have quit their work. Because they did their job out of the box I don't know how to re-acitivate them. Does anyone have a hint for me ? The keys behave this way so in GNOME but also in other DEs like LXDE. Kind regards, Nelson.

5 4

[arch-general] Unable to mount external USB HD from two of my USB ports
by Robbie Smith 20 Oct '12

20 Oct '12

I've been having troubles mounting an external USB HDD to two of the three USB ports on my laptop. dmesg reports a timeout connecting to the device; plugging in other devices to the same ports works fine with no errors. I've attached the log here[1]. The drive in question is a Seagate 1.5 TB Expansion Portable Drive, model ST1500LM003-9YH148. I reformatted it upon purchase to have two partitions, a NTFS one for Windows compatibility, and an Ext4 one for Linux backups and miscellanea. Each partition is ~750GB in size. Any idea what is going on? I think the issue may be with the drive, which is virtually brand new (I bought it ~3 months ago). [1] https://gist.github.com/3916478

2 2

[arch-general] is mesa, glproto, dri2proto not needed by intel video driver anymore?
by Thanos Zygouris 19 Oct '12

19 Oct '12

Hi, If i run 'pacman -Qdt' (search for not needed installed packages) i got: dri2proto 2.8-1 glproto 1.4.16-1 mesa 9.0-1 If i remember right, these were intalled by xf86-video-intel, or intel-dri in the past. So, my question is: can i remove these packages safely? My video card is: 'Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller' and i am using intel driver, with KMS (i915).

2 2