- Arch-general - lists.archlinux.org

[arch-general] Tbird 78.2 enable Master Password of GPG keys stored in profile unencrypted
by David C. Rankin 17 Sep '20

17 Sep '20

All, Just a heads up. SuSE has been doing work with Thunderbird 78.2 trying to prepare for a move to it with the openPGP replacement for Enigmail. One issue that has come from that is the realization that unless you enable a Master Password for thunderbird passwords, once you import your GPG keys, they will be stored unencrypted in your thunderbird profile. If you have never set a mater password for thunderbird before (I haven't), it looks like that will be required with 78.2 hits. -- David C. Rankin, J.D.,P.E.

3 3

[arch-general] [off-topic] Alternative to Thunderbird, with GPG support, caldav + cardav support, and ics remote webcal support and syncing
by Javier 16 Sep '20

16 Sep '20

Hi ! I'm looking for a mail client integrated with a calendar system and a contacts system, that works on both GNU+Linux and Windows, hopefully not Thunderbird, Kontact (Kmail + Korganizer + Kaddressbook), neither Evolution. I'm looking for a client which supports and uses GPG and its keyring and agent, for signing and recognizing signatures, encrypting and decrypting, and that supports autocrypt (autocrypt is pretty important to me). I'm also looking for integration with calendar, being able to receive invitations and events via email, and adding them to the calendar if wanted. The calendar must be able to add and keep in sync caldav remote calendars as well as ics remote web calendars (syncing them periodically, being able to set the period up, and the ics included calendars can be read only, but not the caldav ones). I'm also looking for integration with contacts, and the contact must be able to add and keep in sync cardav remote contancts. Until Thunderbird v68, it was the option through the enigmail, lightning and the cardbook extensions, but I really don't want to keep using Thunderbird v78 and beyond any more. I don't like several design decisions made by the Thunderbird team, regarding how they'll handle PGP, like not using the GPG keyring, not using the GPG agent, not integrating with GPG in general, and neither supporting autocrypt initially (which should be a must to release, or so I think, even K9 for android supports it). I understand Kontact is close, it even works on Windows, but besides the fact I don't like the bunch of dependencies brought to the system by it, neither its Akonadi sort of DB, I never got it syncing ics remote web calendars and I really don't know if one can't set autocrypt for it. I really never liked Evolution either, so that really is less of an option for me, but besides it doesn't work on windows that I know of. I'd prefer Qt applications, but that's just a preference, not a requirement. I was investigating about Trojitá, to see if it would integrate with other applications it doesn't provide, but I found it can decrypt, but not encrypt, and it doesn't support carddav contacts, and even less keeping them in sync, so it was not worth investigating about calendars being able to extend the Trojitá functionality... Kube looked promising, but it's only for GNU+Linux and Mac (perhaps, though not officially supported BSDs). Are there any options for such client, or set of clients working together? Thanks ! -- Javier

3 7

[arch-general] pam_faillock -- can we just remove it from /etc/pam.d/login?
by David C. Rankin 12 Sep '20

12 Sep '20

Following the [arch-dev-public] Pam lockout thread, Can we just remove the faillock entries from /etc/pam.d/login without breaking anything if we don't need it at all (like for home computers, etc..) The any 3 attempts in 15 minutes which is the default under faillock.conf: # The default is 900 (15 minutes). # fail_interval = 900 means that if I mistype a password on login, then 10 minutes later mess up with sudo, and then 14 minutes later have another slip with sudo, I'm locked out by faillock. That seems like overkill for home users. It should be limited to 3 failed logins at a single prompt, not any 3 in 15 minutes. # admin_group = <admin_group_name> is another option -- but at this point, I'd rather just remove it from the pam stack. Is that doable? -- David C. Rankin, J.D.,P.E.

3 3

[arch-general] [off-topic] Korganizer: get ics webcals periodically sync (can be read only)
by Javier 11 Sep '20

11 Sep '20

Hi ! Sorry for being a bit off-topic, however there might be Kontact Arch users that can help me out answering a question about Korganizer, from the Kontact suite. See when I tried using Korganizer, I could add caldav calendars, and I also could add ics online web calendars, however it seems the only way to add such calendar is treating them as static calendars, meaning they get added, but can't be periodically sync, which is what I'm looking for, since I access as read only my office calendar from office365, which requires pretty frequent syncs, and I also access astronomy events calendars and holidays calendars, which all evolve over time. Examples (excluding the office one): https://cantonbecker.com/astronomy-calendar-files/astrocal.ics https://www.officeholidays.com/ics/ics_country_code.php?iso=US https://www.officeholidays.com/ics/ics_country_code.php?iso=CR When adding those ics calendar as ical files (the only way I found to add them), I got sad warnings: > Select the file whose contents should be represented by this resource. If the file does not exist, it will be created. A URL of a remote file can also be specified, but note that monitoring for file changes will not work in this case. I'm assuming no monitoring means no syncing at all, :( Isn't there a way to add such calendars, but keeping them doing periodic syncs, hopefully with individual periods each (more frequent for the office one, and less frequent for the other ones). Thanks ! -- Javier

2 2

[arch-general] conflict on /usr/bin generated by tigervnc?
by Javier 10 Sep '20

10 Sep '20

Hi ! On Today's upgrade: % pacman -Syu :: Synchronizing package databases... ... Packages (9) ... tigervnc-1.11.0-1 ... ... tigervnc-1.11.0-1-x86_64 131.3 MiB 3.51 MiB/s 00:37 [########################################################] 100% (9/9) checking keys in keyring [########################################################] 100% (9/9) checking package integrity [########################################################] 100% (9/9) loading package files [########################################################] 100% (9/9) checking for file conflicts [########################################################] 100% error: failed to commit transaction (conflicting files) tigervnc: /usr/sbin exists in filesystem (owned by filesystem) Errors occurred, no packages were upgraded. Usually that get fixed by using "--overwrite /usr/sbin". But I find it wrong for tigervnc to own "/usr/sbin", so I think in this case tigervnc is not right. Would this be the case, or it's OK for tigervnc to be the owner and then to overwrite? Thanks ! -- Javier

8 10

[arch-general] What companion SW to use with Trojitá to get integration and syncing of calendar (caldav) and contacts (carddav)
by Javier 08 Sep '20

08 Sep '20

I've been thinking on trying Trojitá as e-mail client, specially because it's GNUPG integration and support. However I understand it doesn't integrate neither synchronize with a calendar, neither it recognizes calendar invitations to integrate with a calendar, and I believe it doesn't support neither synchronize with remote contacts. I do depend on syncing with a remote caldav calendar, as well as with remote ics calendars for events like holidays, or astronomy calendars. And I also depend on syncing with a remote cardav contacts addressbook. I'm wondering if there is SW that can interact with Trojitá to get the needed functionality. Has anyone gotten such functionality using Trojitá? Which sw/applications? How? Thanks ! -- Javier

2 2

[arch-general] permission problems with brasero (cdrecord)
by Łukasz Michalski 07 Sep '20

07 Sep '20

Hi, Today I discovered that I cannot burn CD from iso image with brasero - it says I do not have requires permissions. My user is in "optical group". I finally resolved this problem by setting sticky bit on /bin/cdrecord and /bin/cdrdao. Is there a better solution? Here is interesting part of log from brasero run with --brasero-media-debug --brasero-burn-debug --brasero-utils-debug: BraseroBurn: (at burn-process.c:142) BraseroCDRecord got varg: BraseroBurn: (at burn-process.c:145) cdrecord BraseroBurn: (at burn-process.c:145) -v BraseroBurn: (at burn-process.c:145) dev=/dev/sr0 BraseroBurn: (at burn-process.c:145) gracetime=0 BraseroBurn: (at burn-process.c:145) speed=24 BraseroBurn: (at burn-process.c:145) driveropts=burnfree BraseroBurn: (at burn-process.c:145) fs=16m BraseroBurn: (at burn-process.c:145) -data BraseroBurn: (at burn-process.c:145) -nopad BraseroBurn: (at burn-process.c:145) /home/zork/Downloads/cd140201.iso BraseroBurn: (at burn-process.c:624) BraseroCDRecord Launching command BraseroBurn: (at burn-job.c:1309) BraseroCDRecord called brasero_job_get_fd_out BraseroBurn: (at burn-task.c:439) entering loop BraseroBurn: (at burn-process.c:415) BraseroCDRecord stdout: BraseroBurn: (at burn-job.c:1190) BraseroCDRecord called brasero_job_get_fd_in BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: No write mode specified. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stdout: BraseroBurn: (at burn-job.c:1309) BraseroCDRecord called brasero_job_get_fd_out BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Assuming -sao mode. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: If your drive does not accept -sao, try -tao. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Future versions of cdrecord may have different drive dependent defaults. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Operation not permitted. Warning: Cannot raise RLIMIT_MEMLOCK limits. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Cannot allocate memory. WARNING: Cannot do mlockall(2). BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: WARNING: This causes a high risk for buffer underruns. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Operation not permitted. WARNING: Cannot set RR-scheduler. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Permission denied. WARNING: Cannot set priority using setpriority(). BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: WARNING: This causes a high risk for buffer underruns. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Insufficient 'file read' privileges. You will not be able to open all needed devices. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Insufficient 'file write' privileges. You will not be able to open all needed devices. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Insufficient 'device' privileges. You may not be able to send all needed SCSI commands, this my cause various unexplainable problems. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Insufficient 'memlock' privileges. You may get buffer underruns. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Insufficient 'priocntl' privileges. You may get buffer underruns. BraseroBurn: (at burn-job.c:1374) BraseroCDRecord called brasero_job_get_flags BraseroBurn: (at burn-process.c:415) BraseroCDRecord stderr: cdrecord: Insufficient 'network' privileges. You will not be able to do remote SCSI. Regards, Łukasz

2 1

[arch-general] brltty - Detected unsafe path transition /etc → /etc/brlapi.key Howto Fix?
by David C. Rankin 06 Sep '20

06 Sep '20

All, On system update, I get the following related to the brltty[1] package: (2/7) Creating temporary files... Detected unsafe path transition /etc → /etc/brlapi.key during canonicalization of /etc/brlapi.key. error: command failed to execute correctly Apparently this package was installed as a dependency of qemu. I generally do not want to ignore errors on update, so how do I fix this problem? The package was updated August 29, but the issue continues. Should I just delete the key and let qemu start over with a new one in a new location? Checked https://wiki.archlinux.org/index.php/QEMU, but nothing noted. [1] https://www.archlinux.org/packages/extra/x86_64/brltty/ -- David C. Rankin, J.D.,P.E.

2 2

[arch-general] arch-general list down?
by David C. Rankin 06 Sep '20

06 Sep '20

All, I have no posts from arch-general since 8/30. I have tried to post related to a pacman update issue, but the posts are not getting though?? -- David C. Rankin, J.D.,P.E.

3 2

[arch-general] brltty - Detected unsafe path transition /etc → /etc/brlapi.key Howto Fix?
by David C. Rankin 03 Sep '20

03 Sep '20

All, On system update, I get the following related to the brltty[1] package: (2/7) Creating temporary files... Detected unsafe path transition /etc → /etc/brlapi.key during canonicalization of /etc/brlapi.key. error: command failed to execute correctly Apparently this package was installed as a dependency of qemu. I generally do not want to ignore errors on update, so how do I fix this problem? The package was updated August 29, but the issue continues. Should I just delete the key and let qemu start over with a new one in a new location? Checked https://wiki.archlinux.org/index.php/QEMU, but nothing noted. [1] https://www.archlinux.org/packages/extra/x86_64/brltty/ -- David C. Rankin, J.D.,P.E.

1 0