- Arch-general - lists.archlinux.org

[arch-general] Why does a regular user have access to /dev/uinput (and why only temporary)
by Manuel Reimer 02 Feb '16

02 Feb '16

Hello, I'm currently developing a usermode input driver using uinput. While doing this, I've found some "ugly" behaviour. If I do getfacl from my regular user, I get: $ getfacl /dev/uinput getfacl: Removing leading '/' from absolute path names # file: dev/uinput # owner: root # group: root user::rw- user:manuel:rw- group::--- mask::rw- other::--- So for whatever reason my user is able to launch a usermode input driver. No root permission needed. But in fact the driver isn't even loaded (no uinput module). But it is loaded as soon as I try to access the device. After that, I have: $ getfacl /dev/uinput getfacl: Removing leading '/' from absolute path names # file: dev/uinput # owner: root # group: root user::rw- user:manuel:rw- #effective:--- group::--- mask::--- other::--- So somehow the permission is still there, but no longer effective??? If I switch VT once (and probably switching the active session this way) I have permission again and now my user keeps it. What is causing this ugly behaviour? Why does a user have to have uinput permissions at all? The (possible security) problem with this is, that the driver (may be a simulated keyboard driver) keeps active even if the session changes. So a software, launched in one session, affects another session. Thanks in advance Manuel

2 2

[arch-general] btrfs/snapper hook for pacman 5.0?
by Karol Babioch 02 Feb '16

02 Feb '16

Hi all, now with hooks newly introduced to pacman, are there already some useful btrfs and/or snapper hooks available? At least a quick look-around in the forums and with Google hasn't revealed anything yet. Maybe I'm getting something wrong here, but in my understanding it should be doable and probably is even a cool feature that other distros / package managers already provide. Basically all we have to do is to create a snapshot before and after each pacman invocation. However, after having a look at the alpm-hooks(5) man page I'm not too sure what kind of trigger would make the most sense here. With the "recommended" btrfs / snapper subvolume layout, one could add triggers for paths that should be backed up (e.g. /, /var/, etc.). On the other hand the man page tells us that using the root directory as trigger path is not recommended. So has anyone already looked into this and has some thoughts on this? Best regards, Karol Babioch

6 13

[arch-general] Instructions to mount efivars as readonly should be linked to in Beginner's Guide
by Jayesh Badwaik 02 Feb '16

02 Feb '16

Hi, I have read the dangers of mounting efivars as writable recently, and I think there should be an entry in the archlinux installation guide and beginner's guide which should say exactly what is said in the warning in [1], and then link to [1] for further instructions. -- Cheers Jayesh Badwaik [1] https://wiki.archlinux.org/index.php/ Unified_Extensible_Firmware_Interface#Mount_efivarfs

9 11

[arch-general] opinion request about Firefox add-ons
by Francis Gerund 01 Feb '16

01 Feb '16

Hi. Firefox 44.0 does not seem to allow installing the firefox-adblock-plus addon package from the Arch community repository. Instead, Firefox states that it only allows addons "signed" by Mozilla to be installed. That seems to exclude the package mentioned. I could install the adblock-plus addon version available from Mozilla, directly through Firefox. But is this okay, or a bad idea, or is there a better idea? Any opinions?

9 15

[arch-general] Chromium Favorites Bar Partially Inoperative
by Dutch Ingraham 01 Feb '16

01 Feb '16

Hello all: I just installed Chromium, v. 48.0.2564.97, two days ago. I imported my bookmarks from Firefox and enabled the bookmarks bar. I added a few new bookmarks to the bar, but not in my existing folders. Today, I tried to drag-and-drop the bookmarks into the folders on my bookmarks bar, but nothing happened - the bookmarks just remained on the bar. In addition, it seems impossible to move anything on the bar, i.e., adjusting the order of folders or bookmarks. Everything just stays where it was originally placed. For those who don't use Chromium, this is not normal behavior - one should be able to drag-and-drop into folders, subfolders, and slide things around at will. In fact, even in the bookmark manager it is not possible to drag-and-drop; the only way I've found to move a bookmark into a folder is to copy and paste it there, then delete the original. I've tried disabling my two extensions without luck, and I see no recent activity on the boards or on Chromium's bug tracker. Anyone else seeing this? Any suggestions?

3 4

[arch-general] FireFox 44 turning the bookmark toolbar+ extensions area + current tab into light gray (like selected) [gist image]
by Javier Vasquez 31 Jan '16

31 Jan '16

Hi, Just updated Arch, and got FF 44, but there's a new color behavior on the bookmark toolbar, the extensions area, and current tab. It looks like if everything was somehow selected, light grayed. This is new, but I don't know if it's the new 44+ expected behavior, or something that got broken, and perhaps there's a way to work it around. The gist linked image provides a snapshot of the new weird behavior: https://gist.github.com/je-vv/7a00601e9217cd9d3447 Thanks, -- Javier

3 4

Re: [arch-general] [arch-security] [Announcement] Discussion about restricting arch-security for public participation
by Elmar Stellnberger 30 Jan '16

30 Jan '16

Am 2016-01-30 um 20:37 schrieb Emil Lundberg: > > Getting posts about imminent and potential security risks from many > different sides is f.i. something I still estimate about the Debian > security list very much. > > > I think the word you're looking for instead of "estimate" is > "appreciate". I suspect these two words translate to the same word in > your native language (German?), as they do in mine (Swedish). :) > > /Emil Actually, yes; that is to say. Elmar

1 0

[arch-general] [Announcement] Discussion about restricting arch-security for public participation
by Levente Polyak 30 Jan '16

30 Jan '16

Dear arch-security subscribers, Dear arch-general subscribers, the policy of the arch-security mailinglist is currently changed to a restricted advisory announcements only list due to certain reason roughly explained on the arch-devops [0] and arch-dev-public [1] lists. As there was no announcement and discussion about this change yet, we want to invite you to discuss the restriction of the arch-security mailinglist on the CC-ed arch-general list. After making sure you are subscribed to arch-general [2], you can simply reply to this announcement by posting directly to the arch-general mailinglist. Our main goal behind this change is to separate relevant official announcements and advisories from possibly long and frequent discussions. The security teams idea is that each announcement to the arch-security list should be considered as an urgent alert and reviewed as soon as possible, without the need to filter them from general conversations and exchange of "unverified" information. sincerely, Levente (anthraxx) [0] https://lists.archlinux.org/pipermail/arch-devops/2016-January/000007.html [1] https://lists.archlinux.org/pipermail/arch-dev-public/2015-December/027581.… [2] https://lists.archlinux.org/listinfo/arch-general

5 7

[arch-general] Gnucash 2.6.10-1 download error
by Francis Gerund 30 Jan '16

30 Jan '16

Hello. I am running Arch x86_64. sudo pacmatic -Syyuv gnucash results in: Root : / Conf File : /etc/pacman.conf DB Path : /var/lib/pacman/ Cache Dirs: /var/cache/pacman/pkg/ Lock File : /var/lib/pacman/db.lck Log File : /var/log/pacman.log GPG Dir : /etc/pacman.d/gnupg/ Targets : gnucash :: Synchronizing package databases... core 122.4 KiB 408K/s 00:00 [#########################################] 100% extra 1764.7 KiB 1812K/s 00:01 [#########################################] 100% community 3.3 MiB 1832K/s 00:02 [#########################################] 100% :: Starting full system upgrade... resolving dependencies... looking for conflicting packages... Packages (18) aqbanking-5.5.1-2 goffice0.8-0.8.17-3 guile1.8-1.8.8-4 gwenhywfar-4.13.1-3 ktoblzcheck-1.48-3 libart-lgpl-2.3.21-3 libdbi-0.9.0-2 libdbi-drivers-0.9.0-2 libgnomecanvas-2.30.3-3 libgsf-1.14.34-1 libmariadbclient-10.1.10-1 libofx-0.9.10-1 libxml++-2.40.1-1 opensp-1.5.2-5 postgresql-libs-9.4.5-1 python-3.5.1-1 slib-3b5-1 gnucash-2.6.10-1 Total Download Size: 0.66 MiB Total Installed Size: 221.06 MiB :: Proceed with installation? [Y/n] :: Retrieving packages ... libdbi-0.9.0-2-x86_64 642.2 KiB 1212K/s 00:01 [#########################################] 100% libdbi-drivers-0.9.0-2-x86_64 35.4 KiB 1771K/s 00:00 [#########################################] 100% (18/18) checking keys in keyring [#########################################] 100% (18/18) checking package integrity [#########################################] 100% error: libdbi: signature from "Thorsten Töpper <atsutane(a)freethoughts.de>" is unknown trust :: File /var/cache/pacman/pkg/libdbi-0.9.0-2-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: libdbi-drivers: signature from "Thorsten Töpper < atsutane(a)freethoughts.de>" is unknown trust :: File /var/cache/pacman/pkg/libdbi-drivers-0.9.0-2-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: failed to commit transaction (invalid or corrupted package) Errors occurred, no packages were upgraded. No pacnew files to update. Also, sudo pacmatic -S libdbi [sudo] password for default: Recent ML chatter: resolving dependencies... looking for conflicting packages... Packages (1) libdbi-0.9.0-2 Total Download Size: 0.63 MiB Total Installed Size: 1.92 MiB :: Proceed with installation? [Y/n] :: Retrieving packages ... libdbi-0.9.0-2-x86_64 642.2 KiB 1387K/s 00:00 [#########################################] 100% (1/1) checking keys in keyring [#########################################] 100% (1/1) checking package integrity [#########################################] 100% error: libdbi: signature from "Thorsten Töpper <atsutane(a)freethoughts.de>" is unknown trust :: File /var/cache/pacman/pkg/libdbi-0.9.0-2-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. No pacnew files to update. And, sudo pacmatic -S libdbi-drivers Recent ML chatter: resolving dependencies... looking for conflicting packages... Packages (2) libdbi-0.9.0-2 libdbi-drivers-0.9.0-2 Total Download Size: 0.66 MiB Total Installed Size: 2.08 MiB :: Proceed with installation? [Y/n] :: Retrieving packages ... libdbi-0.9.0-2-x86_64 642.2 KiB 698K/s 00:01 [#########################################] 100% libdbi-drivers-0.9.0-2-x86_64 35.4 KiB 4.94M/s 00:00 [#########################################] 100% (2/2) checking keys in keyring [#########################################] 100% (2/2) checking package integrity [#########################################] 100% error: libdbi: signature from "Thorsten Töpper <atsutane(a)freethoughts.de>" is unknown trust :: File /var/cache/pacman/pkg/libdbi-0.9.0-2-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: libdbi-drivers: signature from "Thorsten Töpper < atsutane(a)freethoughts.de>" is unknown trust :: File /var/cache/pacman/pkg/libdbi-drivers-0.9.0-2-x86_64.pkg.tar.xz is corrupted (invalid or corrupted package (PGP signature)). Do you want to delete it? [Y/n] y error: failed to commit transaction (invalid or corrupted package (PGP signature)) Errors occurred, no packages were upgraded. No pacnew files to update. (Note: other packages download fine, and I see no apparent problems with pacman. ) Should this be reported as a bug (or 2-3 bugs)? Or just I just patiently wait for Gnucash 2.6.11-1 (gnucash-latest) to move to the "extra" repository? And if so, any idea when it might be ready?

5 11

[arch-general] systemd user unit files from custom directory
by Andre "Osku" Schmidt 30 Jan '16

30 Jan '16

hello, thought i'd ask here first, in case it's a distro problem. was wondering if we can use systemd to start and stop a daemon for testing purposes during development. meaning, i would like to not have to "install" my daemon nor its systemd service file, and instead run all from the working directory. from systemd.unit man page i got the impression that this example would work: ❱ tree $PWD /data/projects/hmm └── systemd └── user └── foobar.service ❱ cat systemd/user/foobar.service [Unit] Description=Foo Bar [Service] ExecStart=/usr/bin/sleep 42 ❱ XDG_CONFIG_HOME=$PWD systemctl --user start foobar Failed to start foobar.service: Unit foobar.service failed to load: No such file or directory. am i doing it wrong, or? Cheers Andre Schmidt

2 3