[DNG] Intel Says you Should Not Install its Meltdown Firmware Fixes

[Tom Cassidy]

https://soylentnews.org/breakingnews/article.pl?sid=18/01/22/218258

Looks like Intel is saying to hold off on the microcode updates for the moment.___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Help with Spectre and Meltdown

[Tom Cassidy]

It looks like the latest Firefox has mitigations in place for spectre and/or 
meltdown. Chrome will include them in the next update too I believe.

https://blog.mozilla.org/security/2018/01/03/mitigations-landing-new-class-timing-attack/

> On 17 Jan 2018, at 23:00, jacksprat  wrote:
> 
> Thanks for the replies.  When I run the "spectre-meltdown-checker.sh" script 
> [github.com/speed47] I see that even using a recent kernel [4.15-rc8] only 
> Meltdown is covered.
> 
> The two mitigations for Spectre [IBRS or kernel compiled with "retpoline" 
> option with a retpoline-aware compiler] are harder for me to achieve.  The 
> latter requires a retpoline-aware version of gcc - did anyone try to make 
> one?  Even then, it seems I need "reptoline-aware" versions of things like 
> Firefox.
> 
> I have explored disabling javascript in Firefox on a per-site basis, but this 
> cannot be the future [devuan has old versions of Policy-Control addon 
> compared to [say] antix-17].  Early days.  
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Help with Spectre and Meltdown

[Tom Cassidy]

You can install the intel-microcode package. AMD processors have a similar 
amd-microcode package.

https://packages.debian.org/intel-microcode

It looks like the updated microcode with the latest fixes is currently in 
Debian testing so I guess you could grab it from there directly and install 
manually if required.

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=886806

> On 17 Jan 2018, at 21:09, Didier Kryn  wrote:
> 
>> Le 17/01/2018 à 13:59, vmlinux a écrit :
>> 
>> On January 16, 2018 6:50:32 PM CST, KatolaZ  wrote:
>> [Snip]
>> 
>> ::
>> ::The only affected component is the kernel. Patch exist for jessie,
>> ::AFAWN, there is no way to
>> ::effectively patch Spectre.
>> 
>> I haven't had time to actually read up on it, however, isn't there a micro 
>> code mitigation available from Intel? I'm assuming this is some sort of cpu 
>> firmware update but not sure you can flash a cpu :/ so...
>> 
>> https://www.reddit.com/r/sysadmin/comments/7pe2ew/intel_spectre_microcode_update/.compact
>> 
> Still reading (subjects only) the mailing list of Linux on Dell 
> Poweredge, it seems they provide a means do download and install a new 
> microcode. Dunno how to do the same core-i7 of my laptop...
> 
> Didier
> 
> 
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Apache2 CVE-2017-9798

[Tom Cassidy]

Ok thanks. In that case I will add the proposed updates repo and then wait for 
amprolla3.

—Tom

> On 28 Sep 2017, at 05:23, . fsmithred  wrote:
> 
> I don't think anything is coming through ascii-security. This will probably 
> change when amprolla3 is operational. I expect that will happen soon. Around 
> the same time, I hope that beowulf repos get set up.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Apache2 CVE-2017-9798

[Tom Cassidy]

Is that documented anywhere? I would have thought it would come through to 
ascii-security as that one is listed on the Devuan website at 
https://devuan.org/os/etc/apt/sources.list. There is no mention of 
ascii-proposed-updates on that page.

—Tom

> On 27 Sep 2017, at 22:22, . fsmithred <fsmith...@gmail.com> wrote:
> 
> apache2 version 2.4.25-3+deb9u3 is in ascii-proposed-updates. I believe 
> that's where the strech security updates are going.
> 
> 
>> On Tue, Sep 26, 2017 at 8:39 PM, Tom Cassidy <wirelessd...@gmail.com> wrote:
>> Does Devuan’s repository have updates for apache2 to fix CVE-2017-9798? I 
>> can only see 2.4.25-3+deb9u1 on ASCII while Debian Stretch has 
>> 2.4.25-3+deb9u3.
>> 
>> —Tom
>> 
>> ___
>> Dng mailing list
>> Dng@lists.dyne.org
>> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
>> 
> 
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Apache2 CVE-2017-9798

[Tom Cassidy]

Does Devuan’s repository have updates for apache2 to fix CVE-2017-9798? I can 
only see 2.4.25-3+deb9u1 on ASCII while Debian Stretch has 2.4.25-3+deb9u3.

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Yunit

[Tom Cassidy]

> On 20 Sep 2017, at 21:08, Nate Bargmann  wrote:
> 
> * On 2017 20 Sep 04:01 -0500, Arnt Karlsen wrote:
> 
>> ..these https://forum.yunit.io/search.php?keywords=systemd 
>> and https://yunit.io/?s=systemd would if anything, suggest 
>> "systemd is not a worry here.", which might mean they might
>> be or become agnostic on init systems.
> 
> I read the forum post link as though the developer will have it
> completely supporting (depending on?) systemd.

Perhaps if we let the developers know there are users wanting it in Devuan sans 
systemd, they might reconsider that approach?

I will setup an ASCII test box sometime this week or next to try it out, as the 
Debian packages appear to be only for stable onwards.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Yunit

[Tom Cassidy]

> ..these https://forum.yunit.io/search.php?keywords=systemd 
> and https://yunit.io/?s=systemd would if anything, suggest 
> "systemd is not a worry here.", which might mean they might
> be or become agnostic on init systems.

That doesn’t surprise me, considering Ubuntu was using Unity for a long time 
before systemd appeared on the scene.

—Tom
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] Yunit

[Tom Cassidy]

Has anyone tried out Yunit on Devuan? It’s a community fork of the Unity 8 code 
that was abandoned after Ubuntu switched to Gnome for their next release.

https://yunit.io/

https://yunit.io/yunit-packages-for-debian-stable-testing-and-unstable/

—Tom___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] ASCII - clearlooks-Phenix-Purpy style issues

[Tom Cassidy]

I had filed bug #107 against xfce4-terminal in ascii for this issue but I guess 
I can close that now if it's caused by the theme.

I have also solved my issue by switching to another theme.

--Tomas

> I never expected Clearlooks Phenix Purpy to work in ascii.   Both Xfce and 
> (I'm pretty sure) Mate have jumped the GTK3 shark.  Sorry to hear pluma has 
> gone down that road.   When I finally get around to playing with ascii, I'll 
> start looking for a theme that doesn't break GTK3 apps.  Still waiting for an 
> ascii 32 bit iso to test . . . hint, hint.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Which desktops are available in Devuan?

[Tom Cassidy]

Thanks for the link. Might check it out when I can find some spare hardware 
lying around.

> Sorry, i didn't attach the link:
> 
> http://gnuinos.org/Gnuinos%20Ascii%20Beta/
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Which desktops are available in Devuan?

[Tom Cassidy]

There's no release for ascii yet. You'll just have to dist-upgrade from jessie 
if you want to try it.

I've been running ascii + experimental/eudev on my work desktop and laptop for 
a few months without trouble.

-- Tomas

> I might just settle for the default XFCE for a while, after all: Life is
> the art of the possible. LXQt on ascii will be worth a try when it's
> out, though. (No ascii on the belltower mirror. I haven't seen one
> closer to Oz, either, yet.)
> 
> Erik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Which desktops are available in Devuan?

[Tom Cassidy]

Have you thought about LXQt? Upstream LXDE stopped development a while back and 
merged with Razor-qt into the new project running on Qt instead of GTK.

Unfortunately it's only in repositories for ascii and later, so not available 
on jessie.

-- Tomas

> I've downloaded the CD iso, and will try installing it. You never know,
> XFCE might suit well enough. But I'll try a simple apt-get replacement
> with LXDE, for consistency with my other hosts. Now's the time, before I
> begin using the little Udoo X86 for anything other than video streaming.
> 
> Thanks, all. I'll be over in the corner, futzing.
> 
> Erik
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] WICD & DNS & IPv6

[Tom Cassidy]

> On 20 Jul 2017, at 18:44, Yevgeny Kosarzhevsky  wrote:
> 
> Hello,
> 
> which connection manager can also work with 3/4g equipment?

NetworkManager offers a GUI for this. Otherwise, wvdial is a console-based 
utility that will connect to USB 3/4g modems.
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Install tomcat on devuan

[Tom Cassidy]

There is a tomcat8 package in the repositories. Have you tried that?

> On 21 Apr 2017, at 06:22, "alberto.se...@tin.it"  wrote:
> 
> Hi to all,
> 
> Is it possible install Apache Tomcat on Devuan ?
> 
> Alberto Senni
> 
> ---
> Questa e-mail è stata controllata per individuare virus con Avast antivirus.
> https://www.avast.com/antivirus
> 
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Uninstallable packages on ascii

[Tom Cassidy]

FWIW, I've joined a Devuan machine to a Windows AD domain with samba/winbind 
and have no problems logging in with a domain user from slim when properly 
setup. I'll admit it's not as nice as lightdm in that it doesn't show a list of 
previous login names, but it is basically functional as a GUI login screen.

I'll try installing lightdm to see how that goes on Devuan compared to Ubuntu.

Does anyone recommend other display managers on Devuan?

-- Tom

> On 19 Jun 2017, at 21:09, Rowland Penny  wrote:
> 
> On Mon, 19 Jun 2017 20:34:49 +1000
> Tom  wrote:
> 
>> Both slim and rsyslog are uninstallable on ascii.  Thankfully I have
>> rsyslog still installed from jessie, but I accidentally uninstalled
>> slim and now can't re-install it.  Wha'ts involved in updating package
>> dependencies to get these (and other packages) installable on ascii?
>> Does it require extensive packaging knowledge, or could this be
>> handled by someone without any prior packaging/development experience?
>> 
>> http://bugs.devuan.org//cgi/bugreport.cgi?bug=72
>> 
>> -- Tom
> 
> I actually think it is a bonus that slim is not installable on ascii,
> Unless things have changed, it is a dead project, it is also about as
> much use as chocolate fire guard if you need to connect to a Samba AD
> domain. One of the first things I do after installing Devuan is
> replace slim with lightdm. You are quite at liberty to use slim if you
> like, but I will never use it ;-) 
> 
> Rowland
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] Upgrades to testing... Is DebianBug#864043 relevant to us?

[Tom Cassidy]

On 10 June 2017 at 22:37, Hendrik Boom  wrote:

> This is in response to a bug on the Debian documenation mailing list,
> but I'm replying to Devuan instead because some of it may be relevant
> here.
>
> I'm particularly concerned by the sentence at the end:
>
> > But I haven't heard anybody claiming to have
> > done any bug-free upgrades, so it's hard to be confident.
>
> I gather he's talking about upgrades from jessie to stretch.
>
> Are his problems caused by systemd issues?  Or are we going to
> run afoul of them, too?  Does Devuan have reports of clean
> upgrades to ascii?
>
> -- hendrik
>

I've noticed a mismatch in tasksel versions between jessie and ascii.

The desktop jessie install has a higher tasksel version than the ascii
install.

Is this expected?

goat@ascii-server:~$ apt-cache policy tasksel
tasksel:
  Installed: 3.33+devuan0.3
  Candidate: 3.33+devuan0.3
  Version table:
 *** 3.33+devuan0.3 500
500 http://auto.mirror.devuan.org/merged ascii/main amd64 Packages
500 http://packages.devuan.org/merged ascii/main amd64 Packages
100 /var/lib/dpkg/status

goat@jessie-desktop:~$ apt-cache policy tasksel
tasksel:
  Installed: 3.33+devuan1.0
  Candidate: 3.33+devuan1.0
  Version table:
 *** 3.33+devuan1.0 0
500 http://auto.mirror.devuan.org/merged/ jessie/main amd64 Packages
500 http://packages.devuan.org/merged/ jessie/main amd64 Packages
100 /var/lib/dpkg/status
___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Re: [DNG] A shell script for network connections

[Tom Cassidy]

Hi KatolaZ,

I would suggest running setnet.sh through the shellcheck program to lint the 
script.

You can access it online[1] or it should be available in the repository[2].

It has support for checking portability issues[3] (eg. bashisms, POSIX 
compliance) depending on which shell is specified in the shebang line, which 
sounds like it would help here.

Tom


[1] https://www.shellcheck.net/ 
[2] https://github.com/koalaman/shellcheck#user-content-installing 

[3] https://github.com/koalaman/shellcheck#portability 


> On 1 Jan 2017, at 04:40, KatolaZ  wrote:
> 
> On Sat, Dec 31, 2016 at 05:15:56PM +, KatolaZ wrote:
>> On Sat, Dec 31, 2016 at 10:38:48AM +, KatolaZ wrote:
>> 
>> [cut]
>> 
>>> 
>>> 
>>> Hi Steve,
>>> 
>>> thanks for your encouragement. bash is currently a requirement, since
>>> I am using a few non-posix little things. So if you want to test it
>>> and report bugs, please use it under bash atm since a few things will
>>> not work at all with dash. I hope I will be able to port it to
>>> posix-sh soon.
>>> 
>> 
>> Hi All,
>> 
>> it turns out that my last statement was wrong. To my own surprise,
>> setnet.sh seems to be already posix-compliant with a very slight
>> modification. In particular, it is sufficient to comment out the
>> keyword "function" in function declarations, which is done with
>> 
>>  sed -r -e 's/^function\ /##function\ \n/g' setnet.sh > setnet.dash
>> 
> 
> Actually, it is not that easy, and there are indeed a few things to
> iron out, but it should not be too difficult, I believe :)
> 
> StayTuned
> 
> KatolaZ
> 
> -- 
> [ ~.,_  Enzo Nicosia aka KatolaZ - GLUGCT -- Freaknet Medialab  ]  
> [ "+.  katolaz [at] freaknet.org --- katolaz [at] yahoo.it  ]
> [   @)   http://kalos.mine.nu ---  Devuan GNU + Linux User  ]
> [ @@)  http://maths.qmul.ac.uk/~vnicosia --  GPG: 0B5F062F  ] 
> [ (@@@)  Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ  ]
> ___
> Dng mailing list
> Dng@lists.dyne.org
> https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

___
Dng mailing list
Dng@lists.dyne.org
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng