Re: [DNG] nevermind, my messages,
dear zap, On Tue, 18 Jul 2017, zap wrote: > I found my openrc packages and it is on again! hehe rather than opening three new thread subjects dng is a mailinglist with >500 participants, some with lower vision, and with online archives. your behaviour here affects us all and the people reading archives online. if you have messages about your own personal doings, we would really appreciate if you could observe netiquette and use other channels of communication, for instance IRC would be much more appropriate for this sort of interaction. this is not just a signal to you of course, but to anyone else who has happily joined this list, and you are all very welcome, but please always consider how to not disrupt threads and avoid unnecessary messaging to all. thanks for your cooperation ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 04:27:44PM -0400, Fungi4All wrote: > Are all the bug reports going to bugs.debian.whoreg? No, they shouldn't, as you can see here: http://bugs.devuan.org Which version of reportbug are you using? On which release? HND KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
On Tue, Jul 18, 2017 at 03:10:13PM -0400, Ismael L. Donis Garcia wrote: [cut] > >>No Arnt, there is actually an error in the Release file generated by > >>dak for experimental, and apparently this mistake bothers debmirror > >>(but not apt & Co., otherwise we would have noticed this before). It > >>does not seem to be Ismael's fault. > > > >..ok, we have found a debmirror bug. :o) > > I do not think so, I think it's an insect that generates the Release file. > Just to clarify: The bug is *both* in that particular Release file and in the usage that debmirror does of the Release file. As we have said several times, the bug seems to appear only if debmirror tries to use that particular Release file, while apt, apt-get, aptitude, synaptic, apt-mirror, etc. seem to not be bothered. Perhaps the easiest thing would be to patch *also* debmirror, on top of correcting the mistake in the generation of that Release file. HND KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] I apologize, but I lost my email somehow with the, packages needed for openrc
On 170718-18:00-0400, zap wrote: > I want to install it on another laptop with ascii... > > util-linux > > sysvinit-util > > and one other package needed? i forget which though... (You've already found your own packages, as you say in your other messages, all three of different subject --that's not how you treat the mailing list, if you look at it as archive for other readers, now and later-- after almost 4 hours (!), but, for others who may wish to install OpenRC, as well as for your next more correct installation of OpenRC) You need only two packages which are currently not in the repos, due to bug in pbuilder or somesuch. The download till that is sorted is at: https://www.croatiafidelis.hr/foss/Devuan-OpenRC/ and more detailed info is at (and from...): OpenRC installation in Devuan Ascii https://dev1galaxy.org/viewtopic.php?id=1128#p3286 > > svante, can you send those three packages directly to me one more time? > > I thought I had them saved somewhere... alas. One of your packages that you originally sent to me is not to be used! But pls. read there, there is all the info And I got those packages from *you* (those that I needed, I didn't need the i386 for myself), and installed them with kind help from *you* (in that very topic linked above) and, of course, the OpenRC maintainer Svante and others. How long is the span of your attention, zap? :) -- Miroslav Rovis Zagreb, Croatia https://www.CroatiaFidelis.hr signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] nevermind, my messages,
I found my openrc packages and it is on again! hehe ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
https://dev1galaxy.org/viewtopic.php?pid=3224#p3224 by nixer: I have a couple of "nasty" hacks. They are done on all my devuan installs. So, I will share. Before I start, one thing you may want to know. I have a home network server operational 24/7. It is only off during power outages, which is seldom. The first of my hacks begin with already having successfully configured nfs to be shared on the server, and both hacks depend on the installation of and configuring autofs on the client computers. Autofs is used on both hacks, to mount nfs network mounts and to mount the local partitions. With autofs, the fstab file is not altered, but fstab may need to be altered to successfully test and troubleshoot the mount procedure. Hack #1 - Recycle and Reuse Apt Cache, Use NFS network mount (with autofs) I use this "nasty hack" to use, share, and recycle my downloaded apt cache across all my devuan installations. I rename /var/cache/apt/archives to archives.local and then I create a symlink to the network mount location. - Manually create the folder /mnt/nfs, and then /mnt/nfs/auto-server-data - Install autofs, as root apt-get install autofs - Add the below to /etc/auto.master, adjusting for your paths # nfs shares /mnt/nfs/auto-server-data /etc/auto.nfs --timeout=30 --ghost - Create the file /etc/auto.nfs and add to it, adjusting to your needs data -fstype=nfs,rw 192.168.1.100:/mnt/data As root, enter the command service autofs restart These two entries combined will mount the remote location from 192.168.1.100:/mnt/data, and mount it locally at /mnt/nfs/auto-server-data/data. The mount will timeout after 30 seconds (minutes?) and the "data" folder itself will disappear. Don't worry, it will be re-created as needed, and upon a re-mount. After it is successfully mounted, then the symlink to /var/cache/apt/archives can be created with, and adjust for your paths: # ln -s /mnt/nfs/auto-server-data/data/devuan/apt/archives /var/cache/apt/archives For any permissions problem on the local system, I adjust the network folder to 0777. Be sure to set apt to not delete the cache. I do this from within synaptic. This hack allows me to save bandwidth on the repository servers as I have several devuan installs in my network.___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] svante, do you still have those three packages,
i forgot to save them, i need them for a different laptop... ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] I apologize, but I lost my email somehow with the, packages needed for openrc
I want to install it on another laptop with ascii... util-linux sysvinit-util and one other package needed? i forget which though... svante, can you send those three packages directly to me one more time? I thought I had them saved somewhere... alas. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
On Tue, Jul 18, 2017 at 10:07:35PM +0200, Adam Borowski wrote: > Actually, imagemagick is one of worst offenders here. The version in Jessie > is at deb8u9, and every security update tends to mention ~20 CVEs. ... nd, just hours later, here comes deb8u10: # Package: imagemagick # CVE ID : CVE-2017-9439 CVE-2017-9440 CVE-2017-9500 CVE-2017-9501 # CVE-2017-10928 CVE-2017-11141 CVE-2017-11170 # CVE-2017-11360 CVE-2017-11188 # Debian Bug : 863126 867367 867778 867721 864273 864274 867806 868264 # 868184 867810 867808 867811 867812 867896 867798 867821 # 867824 867825 867826 867893 867823 867894 867897 # # This updates fixes several vulnerabilities in imagemagick: Various # memory handling problems and cases of missing or incomplete input # sanitising may result in denial of service, memory disclosure or the # execution of arbitrary code if malformed RLE, SVG, PSD, PDB, DPX, MAT, # TGA, VST, CIN, DIB, MPC, EPT, JNG, DJVU, JPEG, ICO, PALM or MNG # files are processed. -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ A dumb species has no way to open a tuna can. ⢿⡄⠘⠷⠚⠋⠀ A smart species invents a can opener. ⠈⠳⣄ A master species delegates. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
On 2017-07-18 20:07, Adam Borowski wrote: > On Tue, Jul 18, 2017 at 06:15:20PM +, Daniel Abrecht wrote: >> Since thumbnails have to be generated somehow, they need some kind of >> generator. To use plugins, which are resembled by executables in this >> case, is a perfectly fine approach for this. > > Uhm, but why? I can understand a thumbnail for an image file: it may be > useful to see what's inside without having to open it. But there's a limit > to thumbnailing. If it's an .exe, give it an icon that says "EXE" (or a > broken four-panelled window image), and that's it. It isn't possible to predict every image/file type a user may have to deal with, therefore others need a way to add support for not per default supported file formats. Additionally, if a developer writes a program, a 3D game for example, and it uses a custom file format, for a game level for example, said developer may want to add thumbnails to those files. A plugin system allows for this, and it enables the developer to choose to include a thumbnailer, it leaves the choice to include the thumbnailer in a package to it's package maintainer, and it allows the user to install or remove the thumbnailer. If there is no thumbnailer, a default icon for the file is used. At any point, anyone can decide if they want generated thumbnails for certain file types or not. That said, I don't see a reason to not provide a way to display thumbnails for exotic file types. I don't even see a problem in generating thumbnails for exe files. Most exe fils are just like some archive file containing some icon files, so whats wrong with someone providing a thumbnailer extracting those icons? Why should that be any more dangerous than generating thumbnails for any kind of image? There is no reason any thumbnail generator couldn't have any bugs, therefore it would make the most sense to prevent bugs in thumbnailers to have any security impact. >> The real problem is that despite it's well known that thumbnail >> generators have a really big attack surface, nothing has been done to >> limit the impact of vulnerabilities in thumbnail generators. > [...] >> My guess on why noone actually does this is because it would break any >> existing thumbnailer and programs like imagemagic couldn't be used for >> thumbnail generation anymore. > > Actually, imagemagick is one of worst offenders here. The version in Jessie > is at deb8u9, and every security update tends to mention ~20 CVEs. Yes, I know. I didn't mean to imply that keeping existing thumbnail generators or using imagemagick for thumbnail generation is a good thing. I just tried to reason why thumbnails may still be generated in an insecure manner. If I had the choice between keeping every desktop system insecure forever or breaking every thumbnailer ever created, I would always choose the later. However, I don't think that's an option for gnome or KDE. Daniel Abrecht signature.asc Description: OpenPGP digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
> On Tue, 18 Jul 2017 15:14:41 -0400, fungi4...@protonmail.com>: >> > From: sli...@natio.co.cu >> > To: dng@lists.dyne.org >> > - Original Message - >> > From: "Arnt Karlsen" >> >> >> >> ..ok, we have found a debmirror bug. :o) >> > I do not think so, I think it"s an insect that generates the >> > Release file. > ..disagreed, debmirror (or devmirror? ;o)) should check this, > and issue warnings on such Release file errors. >> >> ..med vennlig hilsen = with Kind Regards from Arnt Karlsen >> >> ...with a number of polar bear hunters in his ancestry... >> >> Scenarios always come in sets of three: >> >> best case, worst case, and just in case. >> >> Maybe this is a good idea. Rename bug-reporting from Debian and >> call it pest-control-erD >> Hey hey hey! > ..do it! ;oD No you Arnt R'nt aren't No seriously, I wouldn't know. All I know is that I filled one up and it went to the wrong people, bug.debian.whoreg Here it is if you don't believe me :) https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=868789___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
Are all the bug reports going to bugs.debian.whoreg?___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
On Tue, Jul 18, 2017 at 06:15:20PM +, Daniel Abrecht wrote: > Since thumbnails have to be generated somehow, they need some kind of > generator. To use plugins, which are resembled by executables in this > case, is a perfectly fine approach for this. Uhm, but why? I can understand a thumbnail for an image file: it may be useful to see what's inside without having to open it. But there's a limit to thumbnailing. If it's an .exe, give it an icon that says "EXE" (or a broken four-panelled window image), and that's it. > The real problem is that despite it's well known that thumbnail > generators have a really big attack surface, nothing has been done to > limit the impact of vulnerabilities in thumbnail generators. [...] > My guess on why noone actually does this is because it would break any > existing thumbnailer and programs like imagemagic couldn't be used for > thumbnail generation anymore. Actually, imagemagick is one of worst offenders here. The version in Jessie is at deb8u9, and every security update tends to mention ~20 CVEs. -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ A dumb species has no way to open a tuna can. ⢿⡄⠘⠷⠚⠋⠀ A smart species invents a can opener. ⠈⠳⣄ A master species delegates. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
On Tue, Jul 18, 2017 at 10:47:07AM -0700, Rick Moen wrote: > WINE is a fine and useful package (and this bug isn't its fault). My > point is merely that in the _general_ case, it would not be expected to > accompany GNOME. (I'm very much not a GNOME fan.) It's not software that would in any way conflict with GNOME (like, while you can install GNOME and WindowMaker together, very few people would do that). It's kind of like installing gcc and libreoffice on the same machine. > (I wasn't really making an _excuse_ for GNOME, but even saying anything > in favour of it makes me feel vaguely unclean. ;-> My wording was > somewhere on the spectrum between poor word choice and a mild gag that > didn't work well.) Hell no! This was not I was chastising you for. Your gag was not unfunny -- in fact, these days I find not a single good word to say about GNOME, and that excusing it for anything makes one dirty. :) Meow! -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ A dumb species has no way to open a tuna can. ⢿⡄⠘⠷⠚⠋⠀ A smart species invents a can opener. ⠈⠳⣄ A master species delegates. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
On Tue, 18 Jul 2017 15:14:41 -0400, Fungi4All wrote in message : > > From: sli...@natio.co.cu > > To: dng@lists.dyne.org > > - Original Message - > > From: "Arnt Karlsen" > >> > >> ..ok, we have found a debmirror bug. :o) > > I do not think so, I think it"s an insect that generates the > > Release file. ..disagreed, debmirror (or devmirror? ;o)) should check this, and issue warnings on such Release file errors. > >> ..med vennlig hilsen = with Kind Regards from Arnt Karlsen > >> ...with a number of polar bear hunters in his ancestry... > >> Scenarios always come in sets of three: > >> best case, worst case, and just in case. > > Maybe this is a good idea. Rename bug-reporting from Debian and > call it pest-control-erD > Hey hey hey! ..do it! ;oD -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
> From: sli...@natio.co.cu > To: dng@lists.dyne.org > - Original Message - > From: "Arnt Karlsen" >> >> ..ok, we have found a debmirror bug. :o) > I do not think so, I think it"s an insect that generates the Release file. >> ..med vennlig hilsen = with Kind Regards from Arnt Karlsen >> ...with a number of polar bear hunters in his ancestry... >> Scenarios always come in sets of three: >> best case, worst case, and just in case. Maybe this is a good idea. Rename bug-reporting from Debian and call it pest-control-erD Hey hey hey!___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
- Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 2:48 PM Subject: Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement On Tue, 18 Jul 2017 18:13:09 +0100, KatolaZ wrote in message <20170718171309.gk15...@katolaz.homeunix.net>: On Tue, Jul 18, 2017 at 07:06:46PM +0200, Arnt Karlsen wrote: [cut] > > error al abrir fichero > > gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID > > 541922FB gpgv: Imposible comprobar la firma: clave pública no > > encontrada Release gpg signature does not verify. > > [ 23%] Getting: dists/None/main/binary-i386/Packages.gz... #** > > GET > > ..which _should_ be "dists/experimental/main/", and _not_ > "dists/None/main/"... etc, your script is picking up the > wrong "None" name instead of "experimental". > No Arnt, there is actually an error in the Release file generated by dak for experimental, and apparently this mistake bothers debmirror (but not apt & Co., otherwise we would have noticed this before). It does not seem to be Ismael's fault. ..ok, we have found a debmirror bug. :o) I do not think so, I think it's an insect that generates the Release file. -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Best Regards -- Ismael Devuan User : http://distrowatch.com/table.php?distribution=devuan ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
On Tue, 18 Jul 2017 18:13:09 +0100, KatolaZ wrote in message <20170718171309.gk15...@katolaz.homeunix.net>: > On Tue, Jul 18, 2017 at 07:06:46PM +0200, Arnt Karlsen wrote: > > [cut] > > > > error al abrir fichero > > > gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID > > > 541922FB gpgv: Imposible comprobar la firma: clave pública no > > > encontrada Release gpg signature does not verify. > > > [ 23%] Getting: dists/None/main/binary-i386/Packages.gz... #** > > > GET > > > > ..which _should_ be "dists/experimental/main/", and _not_ > > "dists/None/main/"... etc, your script is picking up the > > wrong "None" name instead of "experimental". > > > > No Arnt, there is actually an error in the Release file generated by > dak for experimental, and apparently this mistake bothers debmirror > (but not apt & Co., otherwise we would have noticed this before). It > does not seem to be Ismael's fault. ..ok, we have found a debmirror bug. :o) -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
- Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 1:06 PM Subject: Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement On Tue, 18 Jul 2017 09:36:10 -0400, Ismael wrote in message : - Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 9:04 AM Subject: [DNG] ..experimental mirror is fixed now?, was: udev replacement > On Tue, 18 Jul 2017 08:43:11 -0400, Ismael wrote in message > <137df52c5546401899313d3793aa3...@natio.co.cu>: > >> - Original Message - >> From: "Arnt Karlsen" >> To: >> Sent: Monday, July 17, 2017 5:35 PM >> Subject: Re: [DNG] udev replacement > > ... > >> > ..weird, I got a mine ok right now, so I recommend you retry. >> >> The problem persists >> >> The problem is not: >> ..these "//"'s in your ".devuan.org/devuan//dists/" paths looks >> fishy >> >> The problem is that you try to download >> >> Getting: dists/None/main/binary-i386/Packages.gz... #** GET >> http://auto.mirror.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz >> ==> 404 Not Found (4s) >> >> And should download: >> Getting: dists/None/main/binary-i386/Packages.gz... #** GET >> http://auto.mirror.devuan.org/devuan//dists/experimental/main/binary-i386/Packages.gz >> ==> 404 Not Found (4s) >> >> The Release file has the following line: >> Codename: None >> And it should be: >> Codename: experimental >> >> At least that's what I understand. > > ..you're right, and it looks like it was fixed today at 10:02, > can you verify it works ok now? > > -- > ..med vennlig hilsen = with Kind Regards from Arnt Karlsen > ...with a number of polar bear hunters in his ancestry... > Scenarios always come in sets of three: > best case, worst case, and just in case. > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > No, the problem persists root@(none):/mnt/datos/sistemas/linux/devuan# sh rdexperimental.sh = Actualizando los repositorios DEVUAN 'experimental'; main = Mirroring to /mnt/datos/sistemas/linux/devuan/experimental from http://packages.devuan.org/devuan// Arches: i386,amd64 Dists: experimental Sections: main Pdiff mode: none Will clean up after mirroring. Attempting to get lock ... Not able to use rsync to update remote trace files ... Getting meta files ... [ 0%] Getting: dists/experimental/Release... #** GET http://packages.devuan.org/devuan//dists/experimental/Release ==> 200 OK (63s) ok [ 0%] Getting: dists/experimental/Release.gpg... #** GET http://packages.devuan.org/devuan//dists/experimental/Release.gpg ==> 200 OK (2s) ok [GNUPG:] ERRSIG 94532124541922FB 1 8 00 1500372143 9 [GNUPG:] NO_PUBKEY 94532124541922FB gpgv: recurso de bloque de clave `/root/.gnupg/trustedkeys.gpg': error al abrir fichero gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID 541922FB gpgv: Imposible comprobar la firma: clave pública no encontrada Release gpg signature does not verify. [ 23%] Getting: dists/None/main/binary-i386/Packages.gz... #** GET ..which _should_ be "dists/experimental/main/", and _not_ "dists/None/main/"... etc, your script is picking up the wrong "None" name instead of "experimental". It is not my script, the file path the file takes. http://packages.devuan.org/devuan//dists/experimental/Release Which does not correctly have the row belonging to the branch of the distribution. has: Codename: none And should have: Codename: experimental And that name is the one that uses debmirror to download the packages. -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Best Regards -- Ismael Devuan User : http://distrowatch.com/table.php?distribution=devuan ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
Since thumbnails have to be generated somehow, they need some kind of generator. To use plugins, which are resembled by executables in this case, is a perfectly fine approach for this. The real problem is that despite it's well known that thumbnail generators have a really big attack surface, nothing has been done to limit the impact of vulnerabilities in thumbnail generators. An easy approach for safe thumbnail generators would be to enforce secomp before the plugin for thumbnail generation is loaded/executed. This would allow to prevent a thumbnail generator to do anything but reading from the file which needs a thumbnail, writing to the thumbnail file/memory, and maybe some memory allocations, which could be further restricted using rlimits. My guess on why noone actually does this is because it would break any existing thumbnailer and programs like imagemagic couldn't be used for thumbnail generation anymore. Daniel Abrecht signature.asc Description: OpenPGP digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
Quoting Adam Borowski (kilob...@angband.pl): > But _why_ would you say this is an excuse? Wine is an unrelated piece of > software, and it's not a bug in Wine. I agree with your well-stated take on this. I'm merely pointing out that the original statement that GNOME's thumbnailer displays the indicated bug behaviour should be amended: It displays that bug behaviour if the system also has WINE installed. WINE is a fine and useful package (and this bug isn't its fault). My point is merely that in the _general_ case, it would not be expected to accompany GNOME. (I'm very much not a GNOME fan.) (I wasn't really making an _excuse_ for GNOME, but even saying anything in favour of it makes me feel vaguely unclean. ;-> My wording was somewhere on the spectrum between poor word choice and a mild gag that didn't work well.) ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
Quoting Enrico Weigelt, metux IT consult (enrico.weig...@gr13.net): > On 18.07.2017 08:45, Rick Moen wrote: > > >Strictly speaking, I am reasonably sure it doesn't _depend_ on WINE, but > >merely use it if it's present. > > The fact that it silently starts proprietary executables (eg. the > windows scripting host), just because they're there, indeed is a > huge bug, more precisely: a fundamental conceptional error. Clarification: To the best of my understanding, the cscript.exe in question is WINE LGPLed code, not Microsoft code. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
On Tue, Jul 18, 2017 at 07:06:46PM +0200, Arnt Karlsen wrote: [cut] > > error al abrir fichero > > gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID > > 541922FB gpgv: Imposible comprobar la firma: clave pública no > > encontrada Release gpg signature does not verify. > > [ 23%] Getting: dists/None/main/binary-i386/Packages.gz... #** GET > > ..which _should_ be "dists/experimental/main/", and _not_ > "dists/None/main/"... etc, your script is picking up the > wrong "None" name instead of "experimental". > No Arnt, there is actually an error in the Release file generated by dak for experimental, and apparently this mistake bothers debmirror (but not apt & Co., otherwise we would have noticed this before). It does not seem to be Ismael's fault. HND KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
On Tue, 18 Jul 2017 09:36:10 -0400, Ismael wrote in message : > - Original Message - > From: "Arnt Karlsen" > To: > Sent: Tuesday, July 18, 2017 9:04 AM > Subject: [DNG] ..experimental mirror is fixed now?, was: udev > replacement > > > > On Tue, 18 Jul 2017 08:43:11 -0400, Ismael wrote in message > > <137df52c5546401899313d3793aa3...@natio.co.cu>: > > > >> - Original Message - > >> From: "Arnt Karlsen" > >> To: > >> Sent: Monday, July 17, 2017 5:35 PM > >> Subject: Re: [DNG] udev replacement > > > > ... > > > >> > ..weird, I got a mine ok right now, so I recommend you retry. > >> > >> The problem persists > >> > >> The problem is not: > >> ..these "//"'s in your ".devuan.org/devuan//dists/" paths looks > >> fishy > >> > >> The problem is that you try to download > >> > >> Getting: dists/None/main/binary-i386/Packages.gz... #** GET > >> http://auto.mirror.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz > >> ==> 404 Not Found (4s) > >> > >> And should download: > >> Getting: dists/None/main/binary-i386/Packages.gz... #** GET > >> http://auto.mirror.devuan.org/devuan//dists/experimental/main/binary-i386/Packages.gz > >> ==> 404 Not Found (4s) > >> > >> The Release file has the following line: > >> Codename: None > >> And it should be: > >> Codename: experimental > >> > >> At least that's what I understand. > > > > ..you're right, and it looks like it was fixed today at 10:02, > > can you verify it works ok now? > > > > -- > > ..med vennlig hilsen = with Kind Regards from Arnt Karlsen > > ...with a number of polar bear hunters in his ancestry... > > Scenarios always come in sets of three: > > best case, worst case, and just in case. > > ___ > > Dng mailing list > > Dng@lists.dyne.org > > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > > > > No, the problem persists > > root@(none):/mnt/datos/sistemas/linux/devuan# sh rdexperimental.sh > = > Actualizando los repositorios DEVUAN 'experimental'; main > = > > Mirroring to /mnt/datos/sistemas/linux/devuan/experimental from > http://packages.devuan.org/devuan// > Arches: i386,amd64 > Dists: experimental > Sections: main > Pdiff mode: none > Will clean up after mirroring. > Attempting to get lock ... > Not able to use rsync to update remote trace files ... > Getting meta files ... > [ 0%] Getting: dists/experimental/Release... #** GET > http://packages.devuan.org/devuan//dists/experimental/Release ==> 200 > OK (63s) > ok > [ 0%] Getting: dists/experimental/Release.gpg... #** GET > http://packages.devuan.org/devuan//dists/experimental/Release.gpg ==> > 200 OK (2s) > ok > [GNUPG:] ERRSIG 94532124541922FB 1 8 00 1500372143 9 > [GNUPG:] NO_PUBKEY 94532124541922FB > gpgv: recurso de bloque de clave `/root/.gnupg/trustedkeys.gpg': > error al abrir fichero > gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID > 541922FB gpgv: Imposible comprobar la firma: clave pública no > encontrada Release gpg signature does not verify. > [ 23%] Getting: dists/None/main/binary-i386/Packages.gz... #** GET ..which _should_ be "dists/experimental/main/", and _not_ "dists/None/main/"... etc, your script is picking up the wrong "None" name instead of "experimental". -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] Hello says 'idonis'
Package: amprolla Create the Release file of the experimental branch with the line: Codename: none And should have the name of the branch Codename: experimental This prevents me from downloading the repositories to my PC. Which prevents me from using devuan in places where there is no Internet access. goodbye ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
On 18.07.2017 08:45, Rick Moen wrote: Strictly speaking, I am reasonably sure it doesn't _depend_ on WINE, but merely use it if it's present. The fact that it silently starts proprietary executables (eg. the windows scripting host), just because they're there, indeed is a huge bug, more precisely: a fundamental conceptional error. This is something you really wouldn't expect in GNU/Linux world. OTOH, Gnome3 (or Lennartware in general) has the same attitude like Windoze stuff - treat the user/operator as the dumbest being in the world and try to do lots of magical things, but even w/o some careful thoughts. Such things are even worse then the good old autorun.inf misfeature. IMHO, these Lennartists have totally lost control of their actions. They've become even worse than M$. --mtx ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 11:26:42AM -0400, Ismael L. Donis Garcia wrote: [cut] > > If I understand it very well to you. > > The problem is that I do not know how to proceed since it is not a package. > The problem is the release file, which must have the name of the codename and > not have none. Please file the bug tpo the package "amprolla". Thanks KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
- Original Message - From: "Antony Stone" To: Sent: Tuesday, July 18, 2017 11:01 AM Subject: Re: [DNG] udev replacement > On Tuesday 18 July 2017 at 15:59:01, Ismael L. Donis Garcia wrote: > >> >- Original Message - >> >From: "KatolaZ" >> >To: >> >Sent: Tuesday, July 18, 2017 10:32 AM >> >Subject: Re: [DNG] udev replacement >> > >> >And also, could you please file a bug report on bugs.devuan.org? >> >> I have never used it and I do not know how to do it. I do not know if it's >> too much for you to do for me. > > Have you looked at http://bugs.devuan.org/Reporting.html ? > > You can even submit a report by email - it can't get much simpler than that :) > > > Antony. > > -- > Programming is a Dark Art, and it will always be. The programmer is > fighting against the two most destructive forces in the universe: > entropy and human stupidity. They're not things you can always > overcome with a "methodology" or on a schedule. > > - Damian Conway, Perl God > > Please reply to the list; > please *don't* CC me. > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > If I understand it very well to you. The problem is that I do not know how to proceed since it is not a package. The problem is the release file, which must have the name of the codename and not have none. has: Codename: none should have: Codename: experimental Anyway send me a message, I do not know if it's the right way. The message read as follows: subject: Hello says 'idonis' Package: Release Version: experimental Has on the line: Codename: none Must possess: Codename: experimental This prevents me from downloading the repositories to my PC. Which prevents me from using devuan in places where there is no Internet access. goodbye___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 10:59:01AM -0400, Ismael L. Donis Garcia wrote: > >- Original Message - From: "KatolaZ" > >To: > >Sent: Tuesday, July 18, 2017 10:32 AM > >Subject: Re: [DNG] udev replacement > > > >And also, could you please file a bug report on bugs.devuan.org? > > I have never used it and I do not know how to do it. I do not know if it's > too much for you to do for me. You use the "reportbug" tool, which should be already installed in your system. It's not like I don't want to do it, rather it is far better if more and more Devuan users are able to report bugs: it's a very good way of helping Devuan out. So please consider giving a try to reportbug (it's not difficult), and thank you in advance for your time :) > > From now thank you for your time, which if I would be very useful to solve > this problem. Not only to me but to many people in my country since we here > many are deprived of the connectivity so that for their use we are forced to > download the repository locally. I do not know if this happens in other > countries. > I really understand the problem. Please try using apt-mirror in the meanwhile. HND KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tuesday 18 July 2017 at 15:59:01, Ismael L. Donis Garcia wrote: > >- Original Message - > >From: "KatolaZ" > >To: > >Sent: Tuesday, July 18, 2017 10:32 AM > >Subject: Re: [DNG] udev replacement > > > >And also, could you please file a bug report on bugs.devuan.org? > > I have never used it and I do not know how to do it. I do not know if it's > too much for you to do for me. Have you looked at http://bugs.devuan.org/Reporting.html ? You can even submit a report by email - it can't get much simpler than that :) Antony. -- Programming is a Dark Art, and it will always be. The programmer is fighting against the two most destructive forces in the universe: entropy and human stupidity. They're not things you can always overcome with a "methodology" or on a schedule. - Damian Conway, Perl God Please reply to the list; please *don't* CC me. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
- Original Message - From: "KatolaZ" To: Sent: Tuesday, July 18, 2017 10:32 AM Subject: Re: [DNG] udev replacement And also, could you please file a bug report on bugs.devuan.org? I have never used it and I do not know how to do it. I do not know if it's too much for you to do for me. From now thank you for your time, which if I would be very useful to solve this problem. Not only to me but to many people in my country since we here many are deprived of the connectivity so that for their use we are forced to download the repository locally. I do not know if this happens in other countries. Thanks KatolaZ ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Best Regards -- Ismael Devuan User : http://distrowatch.com/table.php?distribution=devuan ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 09:46:40AM -0400, Ismael L. Donis Garcia wrote: > > English is not my native language, so I may not explain it well. > Try the following script and you will notice the error that is giving me > when trying to download the repository for my pc. > That does not happen to me either with jessie or ascii > OK, I see your point now. It seems that the Release file generated under /devuan/dists/experimental contains : Origin: Devuan Label: Master Suite: experimental Version: 1.0.0 Codename: None while the one downloaded from ftp.debian.org is more like: Origin: Debian Label: Debian Suite: experimental Codename: experimental ... and apparently debmirror doesn't like it (notice the "Codename: None" vs "Codename: experimental"). It must be something peculiar to debmirror though, since apt, apt-get, aptitute, and synaptic (and also apt-mirror, AFAIK) do not seem to be affected. There is no doubt we should fix it, but maybe you can try apt-mirror of debmirror in the meanwhile? And also, could you please file a bug report on bugs.devuan.org? Thanks KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
- Original Message -
From: "KatolaZ"
To:
Sent: Tuesday, July 18, 2017 9:29 AM
Subject: Re: [DNG] udev replacement
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
English is not my native language, so I may not explain it well.
Try the following script and you will notice the error that is giving me
when trying to download the repository for my pc.
That does not happen to me either with jessie or ascii
#!/bin/sh
if pidof -x $(basename $0) > /dev/null; then
for p in $(pidof -x $(basename $0)); do
if [ $p -ne $$ ]; then
exit
fi
done
fi
ARQUITECTURA=i386,amd64
METODO=http
RAMA=experimental
HOST=auto.mirror.devuan.org
DIR_MIRROR=/mnt/datos/sistemas/linux/devuan/experimental
SECCIONES=main
echo "Updating repositories DEVUAN 'experimental'; main"
debmirror -a ${ARQUITECTURA} \
-s ${SECCIONES} \
-h ${HOST}/devuan \
-d ${RAMA} -r / --progress \
-e
${METODO} --postcleanup --ignore-small-errors --ignore-missing-release
--ignore-release-gpg
--nosource --allow-dist-rename \
--diff=none \
${DIR_MIRROR}
***
If you try this other you will see that it works correctly
***
#!/bin/sh
if pidof -x $(basename $0) > /dev/null; then
for p in $(pidof -x $(basename $0)); do
if [ $p -ne $$ ]; then
exit
fi
done
fi
ARQUITECTURA=i386,amd64
METODO=http
RAMA=ascii
HOST=auto.mirror.devuan.org
DIR_MIRROR=/mnt/datos/sistemas/linux/devuan/ascii/ascii
SECCIONES=main/debian-installer,main,contrib,non-free
echo "Updating repositories DEVUAN 'merged'; main/debian-installer, main,
contrib, non-free"
debmirror -a ${ARQUITECTURA} \
-s ${SECCIONES} \
-h ${HOST}/merged \
-d ${RAMA} -r / --progress \
-e
${METODO} --postcleanup --ignore-small-errors --ignore-missing-release
--ignore-release-gpg
--nosource --allow-dist-rename \
--diff=none \
${DIR_MIRROR}
Best Regards
--
Ismael
Devuan User : http://distrowatch.com/table.php?distribution=devuan
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] ..experimental mirror is fixed now?, was: udev replacement
- Original Message - From: "Arnt Karlsen" To: Sent: Tuesday, July 18, 2017 9:04 AM Subject: [DNG] ..experimental mirror is fixed now?, was: udev replacement On Tue, 18 Jul 2017 08:43:11 -0400, Ismael wrote in message <137df52c5546401899313d3793aa3...@natio.co.cu>: - Original Message - From: "Arnt Karlsen" To: Sent: Monday, July 17, 2017 5:35 PM Subject: Re: [DNG] udev replacement ... > ..weird, I got a mine ok right now, so I recommend you retry. The problem persists The problem is not: ..these "//"'s in your ".devuan.org/devuan//dists/" paths looks fishy The problem is that you try to download Getting: dists/None/main/binary-i386/Packages.gz... #** GET http://auto.mirror.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz ==> 404 Not Found (4s) And should download: Getting: dists/None/main/binary-i386/Packages.gz... #** GET http://auto.mirror.devuan.org/devuan//dists/experimental/main/binary-i386/Packages.gz ==> 404 Not Found (4s) The Release file has the following line: Codename: None And it should be: Codename: experimental At least that's what I understand. ..you're right, and it looks like it was fixed today at 10:02, can you verify it works ok now? -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng No, the problem persists root@(none):/mnt/datos/sistemas/linux/devuan# sh rdexperimental.sh = Actualizando los repositorios DEVUAN 'experimental'; main = Mirroring to /mnt/datos/sistemas/linux/devuan/experimental from http://packages.devuan.org/devuan// Arches: i386,amd64 Dists: experimental Sections: main Pdiff mode: none Will clean up after mirroring. Attempting to get lock ... Not able to use rsync to update remote trace files ... Getting meta files ... [ 0%] Getting: dists/experimental/Release... #** GET http://packages.devuan.org/devuan//dists/experimental/Release ==> 200 OK (63s) ok [ 0%] Getting: dists/experimental/Release.gpg... #** GET http://packages.devuan.org/devuan//dists/experimental/Release.gpg ==> 200 OK (2s) ok [GNUPG:] ERRSIG 94532124541922FB 1 8 00 1500372143 9 [GNUPG:] NO_PUBKEY 94532124541922FB gpgv: recurso de bloque de clave `/root/.gnupg/trustedkeys.gpg': error al abrir fichero gpgv: Firmado el mar 18 jul 2017 06:02:23 CDT usando clave RSA ID 541922FB gpgv: Imposible comprobar la firma: clave pública no encontrada Release gpg signature does not verify. [ 23%] Getting: dists/None/main/binary-i386/Packages.gz... #** GET http://packages.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz ==> 404 Not Found (6s) failed 404 Not Found [ 23%] Getting: dists/None/main/binary-i386/Packages... #** GET http://packages.devuan.org/devuan//dists/None/main/binary-i386/Packages ==> 404 Not Found (3s) failed 404 Not Found [ 23%] Getting: dists/None/main/binary-i386/Release... #** GET http://packages.devuan.org/devuan//dists/None/main/binary-i386/Release ==> 404 Not Found (7s) failed 404 Not Found [ 23%] Getting: dists/None/main/binary-amd64/Packages.gz... #** GET http://packages.devuan.org/devuan//dists/None/main/binary-amd64/Packages.gz ==> 404 Not Found (7s) failed 404 Not Found [ 23%] Getting: dists/None/main/binary-amd64/Packages... #** GET http://packages.devuan.org/devuan//dists/None/main/binary-amd64/Packages ==> 404 Not Found (11s) failed 404 Not Found [ 23%] Getting: dists/None/main/binary-amd64/Release... #** GET http://packages.devuan.org/devuan//dists/None/main/binary-amd64/Release ==> 404 Not Found (3s) failed 404 Not Found Errors: Download of dists/None/main/binary-i386/Packages.gz failed: 404 Not Found dists/None/main/binary-i386/Packages.gz failed checksum verification Download of dists/None/main/binary-i386/Packages failed: 404 Not Found dists/None/main/binary-i386/Packages failed checksum verification Download of dists/None/main/binary-i386/Release failed: 404 Not Found dists/None/main/binary-i386/Release failed checksum verification, removing Download of dists/None/main/binary-amd64/Packages.gz failed: 404 Not Found dists/None/main/binary-amd64/Packages.gz failed checksum verification Download of dists/None/main/binary-amd64/Packages failed: 404 Not Found dists/None/main/binary-amd64/Packages failed checksum verification Download of dists/None/main/binary-amd64/Release failed: 404 Not Found dists/None/main/binary-amd64/Release failed checksum verification, removing Failed to download some Package, Sources or Release files! WARNING: releasing 1 pending lock... root@(none):/mnt/datos/sistemas/linux/devuan# Try the following script: "Add it to a folder you have on your pc" #
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 09:22:11AM -0400, Ismael L. Donis Garcia wrote: [cut] > > I'm trying to download it locally because I use it without internet access. > > Where I live very few people have access to the internet and in their homes > practically nobody, that is why usually the one who has access to the > internet downloads it and then is used in the local pc, for it is written in > the source .list for example: > Deb file: /// mnt / data / systems / linux / devuan / jessie / jessie / > jessie non-free contrib main > But this is not for experimental, rather for Jessie... According to the script you showed below: [cut] > ARQUITECTURA=i386,amd64 > METODO=http > RAMA=experimental > HOST=auto.mirror.devuan.org > DIR_MIRROR=/mnt/datos/sistemas/linux/devuan/experimental > SECCIONES=main > ...your deb line in sources.list should look like: deb file:///mnt/datos/sistemas/linux/devuan/ experimental main note the space between "devuan/" and "experimental". I might have totally missed your point though, but the error you showed a few mails back is typical of a wrong repo path. My2Cents KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
- Original Message -
From: "KatolaZ"
To:
Sent: Tuesday, July 18, 2017 8:56 AM
Subject: Re: [DNG] udev replacement
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
I'm trying to download it locally because I use it without internet access.
Where I live very few people have access to the internet and in their homes
practically nobody, that is why usually the one who has access to the
internet downloads it and then is used in the local pc, for it is written in
the source .list for example:
Deb file: /// mnt / data / systems / linux / devuan / jessie / jessie /
jessie non-free contrib main
The script I have to download the reset is as follows:
#!/bin/sh
if pidof -x $(basename $0) > /dev/null; then
for p in $(pidof -x $(basename $0)); do
if [ $p -ne $$ ]; then
exit
fi
done
fi
ARQUITECTURA=i386,amd64
METODO=http
RAMA=experimental
HOST=auto.mirror.devuan.org
DIR_MIRROR=/mnt/datos/sistemas/linux/devuan/experimental
SECCIONES=main
echo "="
echo "Actualizando los repositorios DEVUAN 'experimental'; main"
echo "="
echo ""
debmirror -a ${ARQUITECTURA} \
-s ${SECCIONES} \
-h ${HOST}/devuan \
-d ${RAMA} -r / --progress \
-e
${METODO} --postcleanup --ignore-small-errors --ignore-missing-release --ignore-release-gpg
--nosource --allow-dist-rename \
--diff=none \
${DIR_MIRROR}
*
However, the main repository script does work:
#!/bin/sh
if pidof -x $(basename $0) > /dev/null; then
for p in $(pidof -x $(basename $0)); do
if [ $p -ne $$ ]; then
exit
fi
done
fi
ARQUITECTURA=i386,amd64
METODO=http
RAMA=ascii
HOST=auto.mirror.devuan.org
DIR_MIRROR=/mnt/datos/sistemas/linux/devuan/ascii/ascii
SECCIONES=main/debian-installer,main,contrib,non-free
echo
"="
echo "Actualizando los repositorios DEVUAN 'merged'; main/debian-installer,
main, contrib, non-free"
echo
"="
echo ""
debmirror -a ${ARQUITECTURA} \
-s ${SECCIONES} \
-h ${HOST}/merged \
-d ${RAMA} -r / --progress \
-e
${METODO} --postcleanup --ignore-small-errors --ignore-missing-release --ignore-release-gpg
--nosource --allow-dist-rename \
--diff=none \
${DIR_MIRROR}
Best Regards
--
Ismael
Devuan User : http://distrowatch.com/table.php?distribution=devuan
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] ..experimental mirror is fixed now?, was: udev replacement
On Tue, 18 Jul 2017 08:43:11 -0400, Ismael wrote in message <137df52c5546401899313d3793aa3...@natio.co.cu>: > - Original Message - > From: "Arnt Karlsen" > To: > Sent: Monday, July 17, 2017 5:35 PM > Subject: Re: [DNG] udev replacement ... > > ..weird, I got a mine ok right now, so I recommend you retry. > > The problem persists > > The problem is not: > ..these "//"'s in your ".devuan.org/devuan//dists/" paths looks fishy > > The problem is that you try to download > > Getting: dists/None/main/binary-i386/Packages.gz... #** GET > http://auto.mirror.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz > ==> 404 Not Found (4s) > > And should download: > Getting: dists/None/main/binary-i386/Packages.gz... #** GET > http://auto.mirror.devuan.org/devuan//dists/experimental/main/binary-i386/Packages.gz > > ==> 404 Not Found (4s) > > The Release file has the following line: > Codename: None > And it should be: > Codename: experimental > > At least that's what I understand. ..you're right, and it looks like it was fixed today at 10:02, can you verify it works ok now? -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 08:56:11AM -0400, Ismael L. Donis Garcia wrote: [cutting-off-a-whole-bunch-of-irrelevant-lines] > > The problem is that try to download > http://auto.mirror.devuan.org/devuan//dists/None/main/binary-i386/Packages.gz > > And should download: > http://auto.mirror.devuan.org/devuan//dists/experimental/main/binary-i386/Packages.gz > > To my understanding the problem is in the Release file on the line that > says: could you please show the precise line you are using to in your sources.list to include the experimental repo? Thanks KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
On Tue, Jul 18, 2017 at 08:43:11AM -0400, Ismael L. Donis Garcia wrote: > - Original Message - From: "Arnt Karlsen" [a-276-lines-long-cut-of-mostly-irrelevant-stuff] Could I just encourage all of us to please have a fresh look at one of the links below: - http://www.kassj.com/netiquette/netiquette.html#5 - https://earlydues.usanethosting.com/ieel/netiquette.htm#quote - https://www.lifewire.com/quoting-original-email-message-1165432 These are just the first few results I got by googling "email quoting netiquette". Pick any other you like. They shouls say more or less the same thing (i.e., something in the lines of "...avoid quoting 276 lines when replying just to the last three lines of an email...") My2Cents KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: Digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] udev replacement
- Original Message - From: "Arnt Karlsen" To: Sent: Monday, July 17, 2017 5:35 PM Subject: Re: [DNG] udev replacement On Mon, 17 Jul 2017 10:08:02 -0400, Ismael wrote in message : - Original Message - From: "Arnt Karlsen" To: "Yevgeny Kosarzhevsky" Cc: Sent: Monday, July 17, 2017 6:37 AM Subject: Re: [DNG] udev replacement > On Mon, 17 Jul 2017 17:46:26 +0800, Yevgeny wrote in message > : > >> On 17 July 2017 at 17:44, Arnt Karlsen wrote: >> >> > On Mon, 17 Jul 2017 17:23:14 +0800, Yevgeny wrote in message >> > : >> > >> > > Hello everyone, >> > > >> > > I have just subscribed recently. >> > > Could someone please enlighten me on the current udev >> > > replacement status? I found there was vdev project but it >> > > looks abandoned (?) Is there any other? >> > > >> > >> > ..I'm on experimental vdev-0.1.2, upgraded from jessie >> > vdev-0.1.1. We also have eudev. >> > >> > ..my understanding is much of the systemd-udev development is >> > "just" obfuscation, to cover up systemd's true purpose and >> > capabilities. My understanding comes from my experience with >> > "banana republic" and Cold War politics. >> >> Hi, >> >> thanks for response. >> Do you know repositories where to get them (vdev/eudev)? I am not >> finding both in any of devuan repos. > > ..add these "experimental" lines, and re-try 'apt-get update': > root@box:/var/cache/apt/archives# cat /etc/apt/sources.list > ... > > # /etc/apt/sources.list.d/devuan-experimental.list > # > deb http://auto.mirror.devuan.org/devuan experimental main > # contrib > # non-free > # > deb-src http://auto.mirror.devuan.org/devuan experimental main > # contrib > # non-free > > ..once you have vdev installed and working, you may consider > commenting my "experimental" lines out. > I haven't tried eudev on a fresh install, only on a messy and > failed recovery attempt on an 8 yr old Debian install. > > ..my messy /etc/apt/sources.list: > root@box:/var/cache/apt/archives# cat /etc/apt/sources.list > # Devuan repositories > # > deb http://packages.devuan.org/merged jessie main contrib non-free > > # > deb-src http://packages.devuan.org/merged jessie main contrib > non-free > > # /etc/apt/sources.list.d/devuan-stable-security.list > # > deb http://packages.devuan.org/merged jessie-security main > contrib non-free > > # > deb-src http://packages.devuan.org/merged jessie-security main > contrib non-free > > # /etc/apt/sources.list.d/devuan-stable-updates.list > # > deb http://auto.mirror.devuan.org/merged jessie-updates main > contrib non-free > > # > deb-src http://auto.mirror.devuan.org/merged jessie-updates main > contrib non-free > > # /etc/apt/sources.list.d/devuan-stable-proposed-updates.list > # > deb http://auto.mirror.devuan.org/merged jessie-proposed-updates > main contrib non-free > > # > deb-src http://auto.mirror.devuan.org/merged jessie-proposed-updates > main contrib non-free > > # /etc/apt/sources.list.d/devuan-stable-backports.list > # > deb http://auto.mirror.devuan.org/merged jessie-backports main > contrib non-free > # > deb-src http://auto.mirror.devuan.org/merged jessie-backports main > contrib non-free > > # /etc/apt/sources.list.d/devuan-experimental.list > # > deb http://auto.mirror.devuan.org/devuan experimental main > contrib non-free > # > deb-src http://auto.mirror.devuan.org/devuan experimental main > contrib non-free > > # https://wiki.trinitydesktop.org/DevuanInstall > # > deb > http://mirror.ppa.trinitydesktop.org/trinity/trinity-r14.0.0/debian > jessie main > > # > deb-src > http://mirror.ppa.trinitydesktop.org/trinity/trinity-r14.0.0/debian > jessie main > > # > deb > http://mirror.ppa.trinitydesktop.org/trinity/trinity-builddeps-r14.0.0/debian > jessie main > > # > deb-src > http://mirror.ppa.trinitydesktop.org/trinity/trinity-builddeps-r14.0.0/debian > jessie main > > > -- > ..med vennlig hilsen = with Kind Regards from Arnt Karlsen > ...with a number of polar bear hunters in his ancestry... > Scenarios always come in sets of three: > best case, worst case, and just in case. I get the repository error when trying to download it. How can I solve this problem? root@(none):/mnt/datos/sistemas/linux/devuan# sh rdexperimental.sh = Actualizando los repositorios DEVUAN 'experimental'; main = Mirroring to /mnt/datos/sistemas/linux/devuan/experimental from http://packages.devuan.org/devuan// Arches: i386,amd64 Dists: experimental Sections: main Pdiff mode: none Will clean up after mirroring. Attempting to get lock ... Not able to use rsync to update remote trace files ... Getting meta files ... [ 0%] Getting: dists/experimental/Release... #** GET http://packages.devuan.org/devuan//dists/experimental/Release ==> 200 OK (3s) ok [ 0%] Getting: dists/experimental/Release.gpg... #** GET http://packages.devuan.org/devuan//dists/experimental/Release.gpg ==> 200 OK (1s) ok [GNUPG:] ERRSIG 9453212454192
Re: [DNG] udev replacement
- Original Message - From: "Arnt Karlsen" To: Sent: Monday, July 17, 2017 5:35 PM Subject: Re: [DNG] udev replacement On Mon, 17 Jul 2017 10:08:02 -0400, Ismael wrote in message : - Original Message - From: "Arnt Karlsen" To: "Yevgeny Kosarzhevsky" Cc: Sent: Monday, July 17, 2017 6:37 AM Subject: Re: [DNG] udev replacement > On Mon, 17 Jul 2017 17:46:26 +0800, Yevgeny wrote in message > : > >> On 17 July 2017 at 17:44, Arnt Karlsen wrote: >> >> > On Mon, 17 Jul 2017 17:23:14 +0800, Yevgeny wrote in message >> > : >> > >> > > Hello everyone, >> > > >> > > I have just subscribed recently. >> > > Could someone please enlighten me on the current udev >> > > replacement status? I found there was vdev project but it >> > > looks abandoned (?) Is there any other? >> > > >> > >> > ..I'm on experimental vdev-0.1.2, upgraded from jessie >> > vdev-0.1.1. We also have eudev. >> > >> > ..my understanding is much of the systemd-udev development is >> > "just" obfuscation, to cover up systemd's true purpose and >> > capabilities. My understanding comes from my experience with >> > "banana republic" and Cold War politics. >> >> Hi, >> >> thanks for response. >> Do you know repositories where to get them (vdev/eudev)? I am not >> finding both in any of devuan repos. > > ..add these "experimental" lines, and re-try 'apt-get update': > root@box:/var/cache/apt/archives# cat /etc/apt/sources.list > ... > > # /etc/apt/sources.list.d/devuan-experimental.list > # > deb http://auto.mirror.devuan.org/devuan experimental main > # contrib > # non-free > # > deb-src http://auto.mirror.devuan.org/devuan experimental main > # contrib > # non-free > > ..once you have vdev installed and working, you may consider > commenting my "experimental" lines out. > I haven't tried eudev on a fresh install, only on a messy and > failed recovery attempt on an 8 yr old Debian install. > > ..my messy /etc/apt/sources.list: > root@box:/var/cache/apt/archives# cat /etc/apt/sources.list > # Devuan repositories > # > deb http://packages.devuan.org/merged jessie main contrib non-free > > # > deb-src http://packages.devuan.org/merged jessie main contrib > non-free > > # /etc/apt/sources.list.d/devuan-stable-security.list > # > deb http://packages.devuan.org/merged jessie-security main > contrib non-free > > # > deb-src http://packages.devuan.org/merged jessie-security main > contrib non-free > > # /etc/apt/sources.list.d/devuan-stable-updates.list > # > deb http://auto.mirror.devuan.org/merged jessie-updates main > contrib non-free > > # > deb-src http://auto.mirror.devuan.org/merged jessie-updates main > contrib non-free > > # /etc/apt/sources.list.d/devuan-stable-proposed-updates.list > # > deb http://auto.mirror.devuan.org/merged jessie-proposed-updates > main contrib non-free > > # > deb-src http://auto.mirror.devuan.org/merged jessie-proposed-updates > main contrib non-free > > # /etc/apt/sources.list.d/devuan-stable-backports.list > # > deb http://auto.mirror.devuan.org/merged jessie-backports main > contrib non-free > # > deb-src http://auto.mirror.devuan.org/merged jessie-backports main > contrib non-free > > # /etc/apt/sources.list.d/devuan-experimental.list > # > deb http://auto.mirror.devuan.org/devuan experimental main > contrib non-free > # > deb-src http://auto.mirror.devuan.org/devuan experimental main > contrib non-free > > # https://wiki.trinitydesktop.org/DevuanInstall > # > deb > http://mirror.ppa.trinitydesktop.org/trinity/trinity-r14.0.0/debian > jessie main > > # > deb-src > http://mirror.ppa.trinitydesktop.org/trinity/trinity-r14.0.0/debian > jessie main > > # > deb > http://mirror.ppa.trinitydesktop.org/trinity/trinity-builddeps-r14.0.0/debian > jessie main > > # > deb-src > http://mirror.ppa.trinitydesktop.org/trinity/trinity-builddeps-r14.0.0/debian > jessie main > > > -- > ..med vennlig hilsen = with Kind Regards from Arnt Karlsen > ...with a number of polar bear hunters in his ancestry... > Scenarios always come in sets of three: > best case, worst case, and just in case. I get the repository error when trying to download it. How can I solve this problem? root@(none):/mnt/datos/sistemas/linux/devuan# sh rdexperimental.sh = Actualizando los repositorios DEVUAN 'experimental'; main = Mirroring to /mnt/datos/sistemas/linux/devuan/experimental from http://packages.devuan.org/devuan// Arches: i386,amd64 Dists: experimental Sections: main Pdiff mode: none Will clean up after mirroring. Attempting to get lock ... Not able to use rsync to update remote trace files ... Getting meta files ... [ 0%] Getting: dists/experimental/Release... #** GET http://packages.devuan.org/devuan//dists/experimental/Release ==> 200 OK (3s) ok [ 0%] Getting: dists/experimental/Release.gpg... #** GET http://packages.devuan.org/devuan//dists/experimental/Release.gpg ==> 200 OK (1s) ok [GNUPG:] ERRSIG 9453212454192
Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]
On Tue, 18 Jul 2017 10:32:58 + "Enrico Weigelt, metux IT consult" wrote: > On 18.07.2017 07:48, Fungi4All wrote: > > > Jus'b'cause lots of you want to go to bed with Poetering does not > > make this a gay distribution > > Is Lennart a man at all ? :o > Look, you have been asked politely, I will now be very impolite! WILL, YOU JUST STOP. There is no reason for this to be discussed on this list. Rowland ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]
On 18.07.2017 07:48, Fungi4All wrote: Jus'b'cause lots of you want to go to bed with Poetering does not make this a gay distribution Is Lennart a man at all ? :o --mtx ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
On Tue, Jul 18, 2017 at 12:39:45AM -0700, Rick Moen wrote: > Quoting Joachim Fahrner (j...@fahrner.name): > > > Another nice bug in Gnome: > > http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html > > I feel almost dirty making excuses for GNOME ;-> , but this bug in > /usr/bin/gnome-exe-thumbnailer appears to be exploitable only if WINE > is installed and findable by that GNOME utility. The thumbnailer > invokes WINE's cscript.exe, which appears to be a Windows Scripting Host > command interpreter -- and thus run VBScript. But _why_ would you say this is an excuse? Wine is an unrelated piece of software, and it's not a bug in Wine. It's nice to have Wine installed, it reduces your need to have a Windows partition/VM[1] to basically zero. It's like saying that Perl is responsible if you feed it a program from an untrusted source. Wine does one task: run programs in PE format for win32/win64 ABI, and does it quite well. [1]. For your own use, that is -- if you want to test programs for others you'll obviously want VMs for multiple versions of Windows, just like you have a Fedora VM and an OpenBSD VM. -- ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ A dumb species has no way to open a tuna can. ⢿⡄⠘⠷⠚⠋⠀ A smart species invents a can opener. ⠈⠳⣄ A master species delegates. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
schrieblings From: j...@fahrner.name > That"s the point. All these things made by Poettering, Gnome Team, Read > Hat ... are rubbish monsters, too complex to make them safe. They put > all things in they can think of. A thumbnailer that depends on wine! > Unbelievable! That"s no good and clean software. Believable, understandable and purely logical. You do as your masters pay you to do. There is no room for ethics, morality, ideals, in a neo-liberal world. Those fools that thought linux alone would bring a revolution in society are the real morons. Unless you are further disillusioned to believe that you can have bubbles of sterile communities within the system of inequality, oppression, and exploitation. You want free and open? Eat shit or do something about it. > Jochen Two thumbs up for agent Poettering and the rest of the "company". There is no room for moralists in the front line.___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
Quoting Joachim Fahrner (j...@fahrner.name): > That's the point. All these things made by Poettering, Gnome Team, > Read Hat ... are rubbish monsters, too complex to make them safe. > They put all things in they can think of. A thumbnailer that depends > on wine! Unbelievable! That's no good and clean software. Strictly speaking, I am reasonably sure it doesn't _depend_ on WINE, but merely use it if it's present. (I reiterate that the parser bug in /usr/bin/gnome-exe-thumbnailer is damning, but note that it seems to be harmless in the general case, and exploitable only on systems that also have WINE installed.) -- Cheers, Rick (not a GNOME fan) Moen r...@linuxmafia.com McQ! (4x80) ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
Am 2017-07-18 09:39, schrieb Rick Moen: OTOH, clearly the parser code in /usr/bin/gnome-exe-thumbnailer is rubbish, as it shouldn't be possible to fool it into processing embedded VBSCript in a filename. That's the point. All these things made by Poettering, Gnome Team, Read Hat ... are rubbish monsters, too complex to make them safe. They put all things in they can think of. A thumbnailer that depends on wine! Unbelievable! That's no good and clean software. Jochen ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] GVFS and dependants
In my initial installation with a live-xfce iso, there seem to have been some left overs. I am trying to find out what this group of running process does and how essential they may be. While trying to attempt to remove the 6 of the 7 installed pkgs (gvfs -- bin, is not installed) I would think that some of their dependants may have to be removed as their dependencies would break them. To my surprise nothing came on the list to be removed other than those six I tried to uninstall. Are there alternative dependencies or are the gvfs providing additional features to filemanagers and such that thunar or pcmanfm or evince or engrampa may utilize. This is on a current ceres-amd64 installation.___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Sexual politics and society: [was: Forums: was I have a question about libsystemd0 in devuan ascii, ]
> From: jaro...@dyne.org >> 1. What does this have to do with Devuan? > perhaps just one thing, that the first image this project ever > released was a Valentine present, with attached a love declaration, > between two men. it may be defined a platonic dev relationship, but > definitely makes Devuan among the most gay distributions out there - > and with a certain pride! :^D Jus'b'cause lots of you want to go to bed with Poetering does not make this a gay distribution lets get our fuckts straight. Straight, not narrow. > ciao arrivederci___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] VBScript Injection via GNOME Thumbnailer
Quoting Joachim Fahrner (j...@fahrner.name): > Another nice bug in Gnome: > http://news.dieweltistgarnichtso.net/posts/gnome-thumbnailer-msi-fail.html I feel almost dirty making excuses for GNOME ;-> , but this bug in /usr/bin/gnome-exe-thumbnailer appears to be exploitable only if WINE is installed and findable by that GNOME utility. The thumbnailer invokes WINE's cscript.exe, which appears to be a Windows Scripting Host command interpreter -- and thus run VBScript. OTOH, clearly the parser code in /usr/bin/gnome-exe-thumbnailer is rubbish, as it shouldn't be possible to fool it into processing embedded VBSCript in a filename. -- Cheers, 299792458 meters per second. Not Rick Moenjust a good idea. It's the law. r...@linuxmafia.com McQ! (4x80 ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
