[DNG] Apache2 CVE-2017-9798

[Tom Cassidy]

Does Devuan’s repository have updates for apache2 to fix CVE-2017-9798? I can 
only see 2.4.25-3+deb9u1 on ASCII while Debian Stretch has 2.4.25-3+deb9u3.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] docker images

[Ozi Traveller]

Thanks Olaf

I agree any devuan docker images should be totally devuan so it can be
"official".

ozi


Virus-free.
www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

On Tue, Sep 26, 2017 at 9:59 PM, Olaf Meeuwissen 
wrote:

> Sorry for the late follow-up, been travelling.
>
> Enrico Weigelt, metux IT consult writes:
>
> > On 16.09.2017 21:11, goli...@dyne.org wrote:
> >> On 2017-09-16 14:03, Enrico Weigelt, metux IT consult wrote:
> >>> Hi folks,
> >>>
> >>> anyone of you already created docker images ?
> >>>
> >>> What do you think about publishing 'official' images into the
> >>> docker.io registry ? Maybe starting with very minimal - one per
> release
> >>> and arch ...
> >>
> >> Did you not see this thread started about a week ago?
> >>
> >> https://lists.dyne.org/lurker/message/20170906.214658.6fa81dd7.en.html
>
> @golinux> thanks for mentioning it.
>
> > must have missed that.
> >
> > by 'official' I mean something equivalent to the debian ones,
> > w/ 'devuan' username in the registry, so it clear to everybody,
> > it's coming from the devuan project itself, not just some
> > individual.
>
> # Technically it's the 'devuan' *image* that lives in the "official"
> # namespace of the special cased Docker Hub registry.  BTW, that hub
> # has been renamed to the Docker Store ...
>
> To make it really clear it comes from the Devuan project itself, I'd
> prefer getting it from a Devuan hosted registry.
>
> > IMHO, this should be coming directly bootstrappe'd from devuan repos
> > and be very minimal.
>
> The devuan images available from my GitLab registry *are* directly
> bootstrapped from the devuan repos using devuan's debootstrap.  All
> the bootstrapping is done on an intermediate devuan image that was
> created by migrating the debian base image to Devuan.
>
> > My *current* goal is setting up some builder image for ptxdist-based
> > applications - later on, I'd like to replace my manually built chroot
> > on my notebook via docker, add another one for skype jail, etc.
> > For that it would be cool to have a well-maintained minimal base.
> > (for now, I still have lots of stuff on ubuntu and debian, which
> > I'd like to replace in the future)
>
> If you have any suggestions for my images feel free to submit issues
> at
>
>  https://gitlab.com/paddy-hack/devuan/issues
>
> Hope this helps,
> --
> Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27
>  GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
>  Support Free Softwarehttps://my.fsf.org/donate
>  Join the Free Software Foundation  https://my.fsf.org/join
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Gnome?

[John Franklin]

> On Sep 26, 2017, at 3:42 AM, taii...@gmx.com wrote:
> 
> Why not use the gnome 2 fork MATE?

If you really want Gnome 3 Shell, then you want to run Fedora.  Any other 
(major) distro might run G3S, but it will have odd quirks.  Ubuntu, for 
example, is really a Unity distro, and the package configs and dependencies 
will tend towards the Unity configuration.

jf
-- 
John Franklin
frank...@tux.org



___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Problems with network-manager

[John Franklin]

> On Sep 26, 2017, at 12:03 PM, R. G. Sidler  wrote:
> 
> Replace the entry for ethernet in your /etc/network/interfaces with just auto 
> eth0 (vor whatever Name your device has). Sign off and sign in again. You 
> should now be able to connect to your LAN.


Thanks.  I have a similar issue in Ascii and that fixed it.

Note, the network-manager package in the Ascii repository won’t install (see 
http://bugs.devuan.org/db/13/133.html  
for details), but rebuild it without a build-dep and a package dependency, and 
it’ll install just fine.

jf
-- 
John Franklin
frank...@tux.org



___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Problems with network-manager

[golinux]

On 2017-09-26 10:36, J. Fahrner wrote:

I just tried to replace wicd with network-manager and found 3 problems:

1. gnome-keyring is needed for storing wifi passwords but was not
installed. This is a missing dependency.

2. in nm-applet the ethernet network is shown as "device not managed"
so I can not connect through lan cable.

3. in tint2 the nm-applet has no icon.

Jochen




Not sure if it's relevant but a similar issue just popped up over at FDN

http://forums.debian.net/viewtopic.php?f=6=134808

golinux


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Problems with network-manager

[J. Fahrner]

Am 2017-09-26 18:34, schrieb Florian Zieboll:

Replace the entry for ethernet in your /etc/network/interfaces with
just auto eth0 (vor whatever Name your device has). Sign off and sign
in again. You should now be able to connect to your LAN.



Its sufficient to toggle the "managed=false" line in the "ifupdown"
section of /etc/NetworkManager/NetworkManager.conf to "true".


Both are working, but editing /etc/network/interfaces looks nicer. 
"managed=true" results in 2 entries for eth0, one "eth0" and one 
"ifupdown(eth0)".


Any ideas why nm-applet has no icon in tint2 panel?. The desktop file 
has an entry Icon=nm-device-wireless and there are images 
nm-device-wireless.png in my icon theme.


Jochen
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Problems with network-manager

[Florian Zieboll]

On Tue, 26 Sep 2017 18:03:32 +0200
"R. G. Sidler"  wrote:

> Replace the entry for ethernet in your /etc/network/interfaces with
> just auto eth0 (vor whatever Name your device has). Sign off and sign
> in again. You should now be able to connect to your LAN.


Its sufficient to toggle the "managed=false" line in the "ifupdown"
section of /etc/NetworkManager/NetworkManager.conf to "true".

libre Grüße,

Florian
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan, Firefox and Apulse

[Rick Moen]

Quoting taii...@gmx.com (taii...@gmx.com):

> Yeah I am very bothered at mozilla's, and a variety of other
> organizations choices that don't respect the end users and
> developers.
> Doing something that alienates the majority of your users for
> "progress" doesn't seem like a good idea, only a non-profit or a
> monopoly is whacked out enough to pull this type of thing.

Haven't you ever stopped to consider where Mozilla, Inc.'s revenue
stream comes from?  Hint:  not you.  Web browser users are not the
company's customers.  Who they respect, and who they serve, follows the
money.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Problems with network-manager

[R. G. Sidler]

Hi

Replace the entry for ethernet in your /etc/network/interfaces with just auto 
eth0 (vor whatever Name your device has). Sign off and sign in again. You 
should now be able to connect to your LAN.

Roland

Am 26. September 2017 17:36:54 MESZ schrieb "J. Fahrner" :
>I just tried to replace wicd with network-manager and found 3 problems:
>
>1. gnome-keyring is needed for storing wifi passwords but was not 
>installed. This is a missing dependency.
>
>2. in nm-applet the ethernet network is shown as "device not managed"
>so 
>I can not connect through lan cable.
>
>3. in tint2 the nm-applet has no icon.
>
>Jochen
>
>
>___
>Dng mailing list
>Dng@lists.dyne.org
>https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

-- 
Diese Nachricht wurde von meinem Android-Gerät mit K-9 Mail gesendet.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] security

[Hendrik Boom]

On Tue, Sep 26, 2017 at 03:42:45AM -0400, taii...@gmx.com wrote:
> On 09/19/2017 02:47 PM, Hendrik Boom wrote
> 
> >Unfortunately, that comes at too high high a price for many of us.
> >But the cheaper systems are riddled with unexaminable firmware.
> >There's no good technical reason why this should be the case.  We end
> >up resenting it but settling for it because it's what we can
> >afford.
> I thought the average sysadmin made 80K+? even in poor areas of US/EU

Many of us are not sysadmins.  We my be students, hobbyists, or even 
retired on fixed income.

-- hendrik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] security

[Steve Litt]

On Tue, 26 Sep 2017 03:42:45 -0400
"taii...@gmx.com"  wrote:

> On 09/19/2017 02:47 PM, Hendrik Boom wrote
> 
> > Unfortunately, that comes at too high high a price for many of us.
> > But the cheaper systems are riddled with unexaminable firmware.
> > There's no good technical reason why this should be the case.  We
> > end up resenting it but settling for it because it's what we can
> > afford.  

> I thought the average sysadmin made 80K+? even in poor areas of US/EU

Classy!

Average cost to raise each child from age 0 thru 17 is $233,610
(http://money.cnn.com/2017/01/09/pf/cost-of-raising-a-child-2015/index.html).
This does not include college. It's just possible there are people on
this list who prioritize saving for their kids' college education or
extra-curricular activities over squeezing out that last tiny bit of
proprietary design.

SteveT

Steve Litt
September 2017 featured book: Manager's Guide to Technical
Troubleshooting Brand new, second edition
http://www.troubleshooters.com/mgr
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] docker images

[Olaf Meeuwissen]

Sorry for the late follow-up, been travelling.

Enrico Weigelt, metux IT consult writes:

> On 16.09.2017 21:11, goli...@dyne.org wrote:
>> On 2017-09-16 14:03, Enrico Weigelt, metux IT consult wrote:
>>> Hi folks,
>>>
>>> anyone of you already created docker images ?
>>>
>>> What do you think about publishing 'official' images into the
>>> docker.io registry ? Maybe starting with very minimal - one per release
>>> and arch ...
>>
>> Did you not see this thread started about a week ago?
>>
>> https://lists.dyne.org/lurker/message/20170906.214658.6fa81dd7.en.html

@golinux> thanks for mentioning it.

> must have missed that.
>
> by 'official' I mean something equivalent to the debian ones,
> w/ 'devuan' username in the registry, so it clear to everybody,
> it's coming from the devuan project itself, not just some
> individual.

# Technically it's the 'devuan' *image* that lives in the "official"
# namespace of the special cased Docker Hub registry.  BTW, that hub
# has been renamed to the Docker Store ...

To make it really clear it comes from the Devuan project itself, I'd
prefer getting it from a Devuan hosted registry.

> IMHO, this should be coming directly bootstrappe'd from devuan repos
> and be very minimal.

The devuan images available from my GitLab registry *are* directly
bootstrapped from the devuan repos using devuan's debootstrap.  All
the bootstrapping is done on an intermediate devuan image that was
created by migrating the debian base image to Devuan.

> My *current* goal is setting up some builder image for ptxdist-based
> applications - later on, I'd like to replace my manually built chroot
> on my notebook via docker, add another one for skype jail, etc.
> For that it would be cool to have a well-maintained minimal base.
> (for now, I still have lots of stuff on ubuntu and debian, which
> I'd like to replace in the future)

If you have any suggestions for my images feel free to submit issues
at

 https://gitlab.com/paddy-hack/devuan/issues

Hope this helps,
--
Olaf Meeuwissen, LPIC-2FSF Associate Member since 2004-01-27
 GnuPG key: F84A2DD9/B3C0 2F47 EA19 64F4 9F13  F43E B8A4 A88A F84A 2DD9
 Support Free Softwarehttps://my.fsf.org/donate
 Join the Free Software Foundation  https://my.fsf.org/join
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Gnome?

[Rowland Penny]

On Tue, 26 Sep 2017 10:04:24 +0200
Narcis Garcia  wrote:

> Current Mate is pretty different than current Gnome.
> It's like somebody asking for Windows GUI and responding with Windows
> 3.11-like GUI.
> 
> 

Windows 3.11-like would be 'Windows for workgroups' and Mate is nothing
like 'Windows for workgroups'
It is more like XP or Win7

Rowland


___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Gnome?

[Narcis Garcia]

Current Mate is pretty different than current Gnome.
It's like somebody asking for Windows GUI and responding with Windows
3.11-like GUI.


El 26/09/17 a les 09:42, taii...@gmx.com ha escrit:
> Why not use the gnome 2 fork MATE?
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] librezilla: [WAS: Has anyone tried waterfox?]

[taii...@gmx.com]

On 09/21/2017 12:12 PM, Edward Bartolo wrote:


Excuse me for interrupting this conversation, but, what is the point
of making sure a browser is secure knowing there is a complete HIDDEN
OS running all the time?

Not everyone is a sucker who uses stuff with ME/PSP.

Devices:
You can get a (libre firmware) KCMA-D8/KGPE-D16 pre-PSP AMD for x86, 
which for now is good enough to play video games.

A Lenovo G505S laptop (almost open source firmware, also pre-PSP)
Or a TALOS 2 (libre hardware and firmware, pending RYF certificated)
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Devuan, Firefox and Apulse

[taii...@gmx.com]

On 09/19/2017 10:46 AM, Adam Borowski wrote:


On Tue, Sep 19, 2017 at 08:38:24AM -0500, dev wrote:

Mozilla got a new bedmate named PulseAudio.

Looks like another Smooth Move by Mozilla that will end up costing them
market share.  I don't like Chrome, but basically forced to choose between
Pottering or Google at this point :/

You mean, there'll be anything left of current 5% after FF57 hits?

Too bad, Firefox is the only somewhat usable browser.  With enough
extensions (hello 57...) it's possible to beat some basic security into it,
while Chromium has built-in spyware even in that "incognito mode" snake oil
that can't be disabled by extensions.  Pale Moon guys, while their heart is
in the right place, don't seem to be doing well.

On the other hand, I don't quite see what's the point of sound in a WWW
browser.  From time to time, someone insists you to view something on
YouTube (because it's so hard to write that instead...) but that's a matter
of clicking "download" then using a proper media player.
Yeah I am very bothered at mozilla's, and a variety of other 
organizations choices that don't respect the end users and developers.
Doing something that alienates the majority of your users for "progress" 
doesn't seem like a good idea, only a non-profit or a monopoly is 
whacked out enough to pull this type of thing.


They haven't put the users at #1 for a long time, why do you think that 
firefox is still very vulnerable to browser fingerprinting? that is by 
design.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Gnome?

[taii...@gmx.com]

Why not use the gnome 2 fork MATE?
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] security

[taii...@gmx.com]

On 09/19/2017 02:47 PM, Hendrik Boom wrote


Unfortunately, that comes at too high high a price for many of us.
But the cheaper systems are riddled with unexaminable firmware.
There's no good technical reason why this should be the case.  We end
up resenting it but settling for it because it's what we can
afford.

I thought the average sysadmin made 80K+? even in poor areas of US/EU
There are a few other libre firmware boards out there such as the 
KGPE-D16 and KCMA-D8 (only $250!) not anywhere near as powerful but 
still quite useful, I play games on mine.

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng