Bug#730434: same problem

Up-to-date Debian 7.6 here, I've noticed that after coming back to work after lunch break hour (no suspend, just screen lock), Dolphin freezes. Even new Dolphin instances locks up. I am not sure how it fixes up, some times I just restart system. I've tried to run: $stat /media/public And

Bug#770826: From address is incorrect

Could it be possible to change From: eterna to From: Vincas Dargis. I've sent that email from work computer without proper reportbug configuration... -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas

Bug#681578: About i8kmon.conf

Hello, I have also got tricked by documentation. It mentions /etc/default/i8kmon and /etc/i8kmon, while actually daemon uses /etc/i8kmon.conf ! Any progress in fixing this? Also, shouldn't there be a default /etc/i8kmon.conf created? It is not, at least in Wheezy i8kutils 1.33.

Bug#772914: cifs-utils: CIFS timeouts when shutitng down system using WiFi network

Package: cifs-utils Version: 2:5.5-1 Severity: important Dear Maintainer, I have laptop with KDE desktop, using WiFi network configured with NetworkManager (KDE GUI). I have mounted Windows shared folder like this: \\192.168.1.2\Users\Public /media/public cifs

Bug#726117: Apper changelog download failes

Hi, I've have noticed same problem that Apper does not show changelogs. Using Wireshark I have captured how apper tries to download them: 1012.078138000192.168.1.105.153.231.3HTTP251GET /changelogs/pool/main/d/dbus/dbus_1.6.8-1+deb7u5/changelog HTTP/1.1 12

Bug#772950: munin: Show duration of selected range

Package: munin Severity: wishlist Dear Maintainer, I thought it would be very useful if user could see duration of interval when selecting and viewing zoomed-in range. Currently, if user wants to calculate for how log does some process/anomaly occurred, he has to hand-count segments and resolve

Bug#772950: [Packaging] Bug#772950: munin: Show duration of selected range

I'm glad to hear that! Thank you Holger for communication. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#726117: Apper changelog download failes

2014.12.12 14:42, Matthias Klumpp wrote: Hi! Which version of PackageKit do you have installed? Cheers, Matthias I cannot tell specifics until Monday, but that should be whatever default Wheezy version is. I do not recall installing something specific (especially as I do not know

Bug#772914: Some additional testing results

I have tried to add _netdev option, marked WiFi connection as System connection, but with no positive results. Just plugged in ethernet and shut down / reboot goes without hanging.

Bug#726117: packagekit version

On Fri, 12 Dec 2014 13:42:34 +0100 Matthias Klumpp matth...@tenstral.net wrote: Hi! Which version of PackageKit do you have installed? It's Debian 7 default: $ apt-cache policy packagekit packagekit: Installed: 0.7.6-3 Candidate: 0.7.6-3 Version table: *** 0.7.6-3 0 500

Bug#660298: Progress

Hello, Any progress with this? Maybe there is walk-around/alternative to get/convert Debian Reference as pdf/epub? Thanks. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Bug#418519: Reason for having raw disk as physical volume

Hello, I can tell example where having raw disk as PV is handy: using hardware RAID controllers, such as Areca ones. Raid controllers allows you to add new disks to existing raid array. For example, if you have Raid 10 using four 1TB disks, you can add two more disks and increase capacity from

Bug#418519: Reason for having raw disk as physical volume

2015.01.02 22:13, Geert Stappers wrote: workaround: use an additional dedicated boot disk[1] With HW Raid, it's exactly what we intended to do: create very small volume (for Linux point of view it's just /dev/sda) to be as boot disk, containing only boot loader (and maybe /boot), which

Bug#418519: Reason for having raw disk as physical volume

2015.01.03 17:24, Lennart Sorensen wrote: Also there has to be somewhere to install the bootloader, and blockmapping into the filesystem is a very bad idea Uhm, yes, of course. Bootloader is just before /dev/sda1 partition, which may be /boot or a dummy/unused. Everything in /dev/sda raid

Bug#776277: Typo

Sorry, I ment VisualSVN instead of WinSVN.

Bug#776002: Other problems

On Sun, 25 Jan 2015 14:34:52 + Ben Hutchings b...@decadent.org.uk wrote: What if you set it to linux-image/wheezy-backports initramfs-tools/wheezy-backports? Thank you, that helped! But...I have other problem - ifupdown package is removed during install, and so I have system without

Bug#777109: vim: /etc/vim/vimrc.local not mentioned in man page

Package: vim Version: 2:7.3.547-7 Severity: minor Dear Maintainer, I researched how could I apply vim settings globally (enabling usefull options for all users during automated install). Search gave me information that I could create /etc/vim/vimrc.local file, and that's true, vim tries to open

Bug#670947: Same here

I have missed that feature too. Bug reported in 2012... is anyone maintaining list search?

Bug#778596: php5-gd: imageantialias is still missing

Package: php5-gd Version: 5.6.5+dfsg-1 Severity: normal Dear Maintainer, Quite some time ago bug #321237 was posted, noting that php5-gd used by Debian has missing some funtions. There is a comment (#71) stating that There is also an ongoing work, and since Jessie is comming, I have checked if

Bug#776277: Solution

I have recreated self-signed certificate with propper CN inside VisualSVN (by default it was computer hostname), and now --non-interactive --trust-server-cert is working as expected (accepts without prompting or error). Self-signed is also untrusted as one with non matching hostname, but maybe

Bug#776456: kdesvn: Opening of files in kdiff3 for conflict resolution fails because of duplicated paths

Package: kdesvn Version: 1.5.5-4.1 Severity: normal Dear Maintainer, I have tree conflict in my repository, and to fix that I've: * opened checkout directory using kdesvn * right-clicked on conflicted file, selected Resolve conflcit * KDiff3 opened, but with error message like this: Opening of

Bug#776577: fglrx-driver: fglrx fails to start after logout (Can not load glesx module)

Package: fglrx-driver Version: 1:12-6+point-3 Severity: important Dear Maintainer, I am using Wheezy KDE desktop on Vostro 3560 laptop with Radeon HD 7600M. lspci output: 01:00.0 VGA compatible controller: Advanced Micro Devices [AMD] nee ATI Thames XT/GL [Radeon HD 7600M Series] When I

Bug#775215: Jessie crashes too

I have just tested Debian Jessie with default 3.16 kernel, it seems that it crashes too. Attached screenshot with a little different call trace.

Bug#775215: linux-image-3.2.0-4-amd64: Segmentation fault in ext4_clear_journal_err when remounting ext4 filesystem after disabling journal

Package: src:linux Version: 3.2.65-1 Severity: important Dear Maintainer, I wanted to disable journal for my root ext4 filesystem running in virtual Debian Wheezy amd64 (using Virt Manager, KVM machine), but just after remounting filesystem to 'rw' mode with disabled journal, kernel

Bug#781639: apticron: email contains E: There are problems error when some packages put on hold

Package: apticron Version: 1.1.55 Severity: normal Dear Maintainer, After putting some postgresql packages (from pgdg repository) on hold to delay upgrade, I've started receiving apticron emails with this error message: E: There are problems and -y was used without --force-yes Please take a

Bug#779299: apper: Apper window shows almost no content when launched with kdesudo

On Fri, 27 Feb 2015 15:56:30 +0100 Matthias Klumpp matth...@tenstral.net wrote: Can you run kcmshell4 apper and see if that works? There should also be a --debug option to show more information. $ kcmshell4 apper kcmshell(7010)/kdecore (services) KServiceFactory::findServiceByDesktopPath:

Bug#779366: task-kde-desktop: nepomuk-core-runtime missing while nepomuk-core-data with non-working shortcuts exists

Package: task-kde-desktop Version: 3.29 Severity: important Dear Maintainer, I have installed Jessie amd64 form RC1 netinst iso with KDE and OpenSSH tasks selected in virtual machine. In app list I can see Nepomuk Cleaner and Nepomuk Backup shortcuts, but then I click I get message: KDEInit

Bug#779241: apper: Apper requests root (not sudo user's) password to Edit Origins

2015.02.27 16:52, Matthias Klumpp wrote: Looks like this issue is known... But I can't reproduce it here. Did you change any PolicyKit rules? No. I have just finished installing yet another virtual machine (this time using Virt-Manager in Kubuntu), no extra packages, just KDE and SSH Server

Bug#761178: Upstream walkaround

I've noticed same problem on wheezy with latest Iceweasel. There is upstream bug with one comment with possible walkaround, that worked for me: https://bugzilla.mozilla.org/show_bug.cgi?id=727422#c24 Basically one has to change pdf association settings other then Okular, apply settings, and then

Bug#779241: apper: Apper requests root (not sudo user's) password to Edit Origins

Package: apper Version: 0.9.1-2 Severity: important Dear Maintainer, I've installed Debian Jessie amd64 in VirtualBox from RC1 netinst iso. While installing, I've chosen not to set root password as I prefere having user with sudo group. Now, when installation is finished, Apper allows me to

Bug#779299: apper: Apper window shows almost no content when launched with kdesudo

Package: apper Version: 0.9.1-2 Severity: important Dear Maintainer, Earlier I've reported bug #779241 and to walkaround it I tried to launch apper using kdesudo: $kdesudo apper Apper window appears, but it has only few buttons, no main content is visible. Please take a look at uploaded

Bug#418519: Layout example

I've just remembered that this wishlist exists... Here I've copied our server's current layout as motivational example: $ lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT sda8:00 186.3G 0 disk └─sda1 8:10 186.3G

Bug#784309: kdesvn: Crash when opening not yet versioned directory created inside checkouted repo

Package: kdesvn Version: 1.6.0-2 Severity: important Dear Maintainer, To reproduce: * Checkout repository with SVN * Navigate with Dolphin (I'm using KDE) to that checkouted directory * Create new directory inside checkouted directory, but do not add it to SVN * Right click on new directory,

Bug#785596: kde-plasma-desktop: Permission denied for VBoxLinuxAdditions.run mounted with KDE

Package: kde-plasma-desktop Version: 5:84 Severity: important Dear Maintainer, Firs of all, I have no idea which packages is actually responsible for this, so please reassign this bug if needed. I have testing Debian 8 Jessie installed in Virtualbox 4.3.28 (Debian Wheezy amd64 host), and time

Bug#821881: apparmor-profiles: sshd unable to read blacklists from openssh-blacklist* packages

2016.04.24 17:30, intrigeri rašė: This sounds right. I'm afraid we lack resources, on the Debian side, to support profiles shipped in the extra/ directory, so please take it directly upstream (appar...@lists.ubuntu.com). I've posted to their mailing list, looks like it's fixed, at least in

Bug#783449: linux-image-3.16.0-0.bpo.4-amd64: Xorg fails to start with Radeon HD 7600M on Vostro 3560 after upgrade to 3.16

2016-02-22 15:43 GMT+02:00 Andreas Beckmann : > Does that conbination even build the kernel module? Well, actually, I just figured it out that it was not successfully built. linux-headers-3.16.0-0.bpo.4-amd64 packages was missing. Now after installing headers and reinstalling

Bug#481353: Please add support for logcheck.logfiles.d

Tags: patch Hello, I have attempted to implement logcheck.logfiles.d directory support, patch is attached. >From 63c41f4748730d99effec68492a7b23fa55a5d90 Mon Sep 17 00:00:00 2001 From: Vincas Dargis <vin...@gmail.com> Date: Sun, 14 Feb 2016 19:44:36 +0200 Subject: [P

Bug#778596: php5-gd: imageantialias is still missing

On Tue, 19 May 2015 16:02:48 +0200 Florian Baumann wrote: > Where is the advantage of the old flag? If it is done like tutorials suggests, then there will be two libgd libraries in Debian: one in upstream libgd2 package, AND another statically linked inside PHP itself. In this

Bug#776577: fglrx-driver: fglrx fails to start after logout (Can not load glesx module)

On Sat, 30 Jan 2016 02:38:48 +0100 Andreas Beckmann wrote: > Please try again with the 15.12 driver that is now available in > unstable, testing, and jessie-backports. I am at Wheezy, I guess I cant use latest 15.12? Though I just checked, now my flgrx is

Bug#819248: coreutils: chown does not have dot separator (as in user.group) documented

Package: coreutils Version: 8.13-3.5 Severity: wishlist Dear Maintainer, Recently I discovered (with help of some blog post) that chown supports dot '.' in user/group argument: chown -R root.www-data /var/www/some-site It is more convenient that column, because there is no need to pres Shift

Bug#819970: systemd.resource-control man page has dead links related to cgroups

Package: systemd Version: 215-17+deb8u4 Severity: normal Dear Maintainer, These links referenced in systemd.resource-control man page are dead: https://www.kernel.org/doc/Documentation/cgroups/memory.txt https://www.kernel.org/doc/Documentation/cgroups/blkio-controller.txt

Bug#823197: gtk3-engines-oxygen: firefox 46 crashes with oxygen-gtk theme

Package: gtk3-engines-oxygen Version: 1.0.4-1 Severity: normal Tags: upstream patch Dear Maintainer, Firefox 46 installed from wheezy-backports/firefox-release on Debian Wheezy with KDE crashes on start. Relevant bug report on Launchpad:

Bug#821881: apparmor-profiles: sshd unable to read blacklists from openssh-blacklist* packages

Package: apparmor-profiles Version: 2.7.103-4 Severity: normal Tags: upstream Dear Maintainer, In Wheezy I've enabled complain mode for usr.sbin.ssh (from apparmor-profiles extras directory) and noticed these lines: Apr 20 08:52:43 vdebian2 kernel: [30870.004961] audit: type=1400

Bug#343346: samhain package does not include the server side "yule" program

On Mon, 17 Jun 2013 15:01:19 +0200 =?utf-8?b?Tm/Dq2wgS8O2dGhl?= wrote: in wheezy (version 2.8.3a-1) yule is still missing. Looks like it's missing even in latest Testing 4.1 release: https://packages.debian.org/stretch/amd64/samhain/filelist Dear maintainer, could we please

Bug#835277: vim-common: /etc/vim/vimrc.local is not mentioned in the man page

Package: vim-common Version: 2:7.4.488-7 Severity: normal Dear Maintainer, `man vim` shows: /usr/share/vim/vimrc System wide gvim initializations. But but optional /etc/vim/vimrc.local that can be created by user and will be included is not mentioned there. --

Bug#841272: auditd: aureport endless loop with specific input

Package: auditd Version: 1:2.4-1+b1 Severity: important Dear Maintainer, "aureport -i --file --summary", after upgrade to Debian 8, started to lock up with 100% CPU usage. It does not exit for hours (it is started by cron job ant midnight), and I have to kill it in the morning. It appears that

Bug#841272: Another ausearch output example

I've attached another ausearch output which makes aureport to hang on 100% usage. type=CONFIG_CHANGE msg=audit(1477974302.999:714974): auid=0 ses=59247 op="updated rules" path="/var/log/wtmp" key=6163636573730173657373696F6E list=4 res=1 type=SYSCALL msg=audit(1477974302.999:714975):

Bug#775215: Same on 4.8

tags 775215 +stretch thanks I can still reproduce crash with 4.8.7-1 on Debian Testing Virtualbox machine.

Bug#847314: awstats: add databasebreak support in update.sh

2016.12.07 12:58, Sergey B Kirpichev wrote: Sounds interesting, feel free to provide the patch. Could you hint me the proper way to produce patch? I image I should install Debian Jesting virtual machine, checkout latest source package... do changes in update.sh, build & install package,

Bug#784309:

I can still reproduce crash on Testing with 1.7.0-2

Bug#847314: awstats: add databasebreak support in update.sh

2016.12.10 14:35, Sergey B Kirpichev wrote: On Sat, Dec 10, 2016 at 12:24:00PM +0200, Vincas Dargis wrote: If you are member of the alioth group collab-maint (feel free to join) - you also can just commit your changes. No I am not, I do not know what's that "collab-maint" or h

Bug#847314: awstats: add databasebreak support in update.sh

Package: awstats Version: 7.5+dfsg-1 Severity: normal Dear Maintainer, Awstats has `databasebreak` parameter witch which user can access to statistic per day basis, for example, instead only by month due to current defaults. update.sh currently has two parameters set, with no possibility to

Bug#858415: munin-plugins-core: postgres_users graph shows different value than plugin provides for one entry

Package: munin-plugins-core Version: 2.0.25-1+deb8u3 Severity: normal Dear Maintainer, I have noticed that PostgreSQL users graph shows that some new user has two connections to PostgreSQL database, though in reality there is only one (it's our app having permanent connection). Running

Bug#847314: awstats: add databasebreak support in update.sh

I've attached v2 patch. It has break statement to stop at first iteration in case of error (if there are many database breaks as "month day hour"). diff --git a/debian/default/awstats b/debian/default/awstats index cf06f7d..75a851f 100644 --- a/debian/default/awstats +++

Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox

2017.03.20 11:23, intrigeri rašė: Last time I checked, they did include it just like we already do, via /usr/share/doc/apparmor-profiles/extras/usr.lib.firefox.firefox in the apparmor-profiles package. But I didn't check recently so they might very well be shipping another profile in their

Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox

2017.04.04 08:26, intrigeri rašė: Thanks! But it ships disabled (or in complain mode) by default, right? Yes it's disabled, and it's from firefox package. Tested on clean Ubuntu 16.04 LTS and 17.04 daily build virtual machines (it's the same): $ file /etc/apparmor.d/disable/usr.bin.firefox

Bug#847314: awstats: add databasebreak support in update.sh

tags 847314 patch thanks I've implemented patch on top of current git master which I tested on stretch. diff --git a/debian/default/awstats b/debian/default/awstats index cf06f7d..bb0b857 100644 --- a/debian/default/awstats +++ b/debian/default/awstats @@ -17,3 +17,10 @@ AWSTATS_LANG="en" #

Bug#859746: logcheck: missing dot in manual page

Package: logcheck Version: 1.3.18 Severity: minor Dear Maintainer, I've left bug in the patch for the #481353 [0] - there is missing dot in this logcheck manual page line: -D DIROverrule default logfiles lists directory [0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=481353 --

Bug#858174: Re: Bug#858174: Please provide an AppArmor profile for Firefox

2017.04.05 09:08, intrigeri rašė: IMO the parts that require third-party kernel patches shall be upstreamed as well: the end goal would be that the resulting upstream profile can be pulled as-is by as many distros as possible, including those that apply these patches, i.e. Ubuntu and OpenSUSE.

Bug#860546: xfsprogs: xfs_fsr returns success (zero) on failure

Package: xfsprogs Version: 4.9.0+nmu1 Severity: normal Dear Maintainer, I've discovered (in the hard way) that xfs_fsr does not report errors by returning non-zero exit code. Here's some examples: # xfs_fsr /some/nonexiting/path; echo $? xfs_fsr: could not stat: /some/nonexiting/path: No such

Bug#860542: exim4-base: outdated link in README.Debian.gz

Package: exim4-base Version: 4.89-1 Severity: normal Dear Maintainer, I've discovered that "/usr/share/doc/exim4-base/README.Debian.gz" file, "1.3. Packaging" paragraph contains link "4. http://pkg-exim4.alioth.debian.org/; that opened displays "The Exim v4 Packages for Debian Web Page has

Bug#867875: iproute2: typo in ss man page

Package: iproute2 Version: 4.9.0-1 Severity: minor Dear Maintainer, SEE ALSO section of ss manual page states: ip(8), /usr/share/doc/iproute-doc/ss.html (package iproutedoc), It should be "package iproute-doc", not "package iproutedoc". -- System Information: Debian Release: 9.0 APT

Bug#869865: usr.sbin.mysqld-akonadi: denied access to /etc/mysql/mariadb.cnf

Package: akonadi-backend-mysql Version: 4:16.04.3-5 Severity: normal Dear Maintainer, I've discovered this DENIED message on Debian Unstable with KDE: type=AVC msg=audit(1501142057.552:105): apparmor="DENIED" operation="open" profile="/usr/sbin/mysqld-akonadi///usr/sbin/mysqld"

Bug#861304: firefox-esr: font anti-aliasing missing for some sites since upgrade to 52

Package: firefox-esr Version: 52.1.0esr-1~bpo80+1 Severity: normal Dear Maintainer, I was using iceweasel (or was it named firefox?) from mozilla backports, and after installing firefox-esr 52 (after migration from "iceweasel" to "firefox") I noticed that some sites has jagged font. github.com

Bug#872726: linux: apparmor doesn't use proper audit event ids

On Sun, 20 Aug 2017 16:42:55 +0200 Laurent Bigonville wrote: IMVHO, in regard to the recent proposal of enabling apparmor in debian by default, this needs to be addressed first. Yes this is very important, although we have aa-logprof to be used as auditing tool, but I agree

Bug#872726: linux: apparmor doesn't use proper audit event ids

This is upstream bug report: https://bugs.launchpad.net/ubuntu/+source/audit/+bug/1117804

Bug#864347: needrestart: Multiple "Use of uninitialized value" error messages

Package: needrestart Version: 1.2-8+deb8u1 Severity: normal Dear Maintainer, I've noticed that running needrestart produces these "uninitialized value" messages: # needrestart -b # Use of runtime loader module Module::Implementation detected. Results # of static scanning may be incomplete. #

Bug#875959: vidia-graphics-drivers: port nvidia-prime from Ubuntu

I have tried (naively) `nvidia-prime` Ubuntu package installed in Debian Testing, but it does not work: sudo prime-select nvidia Info: the current GL alternatives in use are: [None, None] Info: the current EGL alternatives in use are: [None, None] Error: the installed packages do not support

Bug#875959: nvidia-graphics-drivers: port nvidia-prime from Ubuntu

Source: nvidia-graphics-drivers Severity: wishlist Dear Maintainer, Ubuntu has `nvidia-prime` [0] package that allows to switch integrated/descrete card "permanently" (until `nvidia-prime is executed with different arguments) with single command. This allows, for example, to enter desktop

Bug#876209: Cannot reproduce

I cannot reproduce this issue, it seems it fixed somehow by itself, after some full-upgrades I guess. Sorry for bothering.

Bug#795431: Fix for #795431 v2

Patch v2. === modified file 'debian/control' --- debian/control 2017-09-19 06:19:23 + +++ debian/control 2017-09-20 16:40:37 + @@ -30,7 +30,7 @@ Replaces: fcitx-data (<< 1:4.2.9.1-1ubuntu2) Suggests: apparmor-profiles, apparmor-profiles-extra, apparmor-utils Description: user-space

Bug#795431: Fix for #795431

On 2017.09.20 17:08, intrigeri wrote: I think something like "apparmor-profiles provides […]" would solve the problem. OK, I will provide another patch, thanks for clarification. I though "This" is style error in English, and this tiny change would be enough.

Bug#876333: thunderbird: AppArmor profile allows mmap executables from user writable directories

Package: thunderbird Version: 1:52.3.0-4~deb8u2 Severity: normal Tags: upstream Dear Maintainer, /etc/apparmor.d/usr.bin.thunderbird has these lines: owner /tmp/** m, owner /var/tmp/** m, Is this really necesarry? If Thunderbir actually tries to mmap files with executable flags, I believe it

Bug#734693: Please rename /etc/apparmor.d/tunables/home.d/ubuntu

On Thu, 09 Jan 2014 11:32:07 +0100 intrigeri wrote: How about we rename this to /etc/apparmor.d/tunables/home.d/vendor or something distro-independant, so that Debian and every derivative can share the same apparmor.post* maintainer scripts? Yea that would be nicer. I

Bug#795431: Fix for #795431

Hello, I am proposing patch to change "This poivides the .." into "The package provides ..." === modified file 'debian/control' --- debian/control 2017-08-09 14:46:06 + +++ debian/control 2017-09-14 17:05:44 + @@ -31,7 +31,7 @@ Replaces: fcitx-data (<< 1:4.2.9.1-1ubuntu2) Suggests:

Bug#876209: libgd3:i386 conflicts with libgd3:amd64

Package: libgd3 Version: 2.2.5-3 Severity: important Dear Maintainer, I have tried to install winehq-staging package from wineqh.org, but it fails with this chain: ``` winehq-staging : Depends: wine-staging (= 2.16.0~buster) wine-staging : Depends: wine-staging-i386 (= 2.16.0~buster)

Bug#877581: About help

After your call [0] write here to help. What can I aquatically do? Install experimental kernel on VM and check if profiles there and here does not produces denies? [0] https://lists.alioth.debian.org/pipermail/pkg-apparmor-team/2017-October/001762.html

Bug#877581: Patch

Indeed, with 4.14 I got my first Debian network (potential) denies (yay! :-D ): type=AVC msg=audit(1507226290.361:585): apparmor="ALLOWED" operation="recvmsg" profile="/usr/sbin/avahi-daemon" pid=526 comm="avahi-daemon" family="unix" sock_type="stream" protocol=0 requested_mask="receive"

Bug#877581: apparmor: Ensure Linux 4.14 does not break abstractions/nameservice

On 2017.10.12 07:37, intrigeri wrote: I suspect more is coming. Ubuntu / OpenSUSE probably already have some of this stuff. Could you clarify, why Ubuntu should have issues, if they had network mediation before?

Bug#874432: More info

I have found the core issue. It's not about kernel update, it's about the fact that Thunderbird package now has usr.bin.thunderbird AppArmor profile, and it conflicted with other profile usr.lib.thunderbird.thunderbird I had enabled earlier (attached). Kernel upgrade just made me to reboot

Bug#832900: plasma-workspace: Third-party systray icons get a black background

Here is upstream bug report: https://bugs.kde.org/show_bug.cgi?id=356937

Bug#877255: apparmor-profiles-extra: usr.bin.totem profile produces aa-logprof error: permission contains unknown character(s) Pux

On 2017.09.30 08:27, intrigeri wrote: Interestingly http://wiki.apparmor.net/index.php/AppArmor_Core_Policy_Reference#Execute_rules says that Pux is supported since 2.5, so I wonder who's correct. I've grep'ed through upstream apparmor-profiles repository too, there is no single `Pux` usage.

Bug#877324: thunderbird: AppArmor profiles denies access to Mozilla and Java plugins

Package: thunderbird Version: 1:52.3.0-4~deb8u2 Severity: normal User: apparmor-t...@lists.alioth.debian.org Usertags: modify-profile Dear Maintainer, I have discovered AppArmor denies on Debian 7 (jessie) and Debina 8 (stretch), that prevent to load plugin ibraries: On jessie (from

Bug#877345: tmux: Clearing output with Ctrl+L does not work when using tmux

Package: tmux Version: 2.6~rc3-1 Severity: normal Dear Maintainer, I have discovered that pressing Ctrl+L while in Konsole (KDE) within tmux session does move cursor to the top of the console, but it does not clear all previous output below. Please see screenshot attached. I have executed: $

Bug#877345: tmux: Clearing output with Ctrl+L does not work when using tmux

On 2017.09.30 22:43, Romain Francoise wrote: This is probably a duplicate of #876362, can you try with konsole from experimental? Yes, konsole from experimental has this issue fixed, Thanks!

Bug#877255: apparmor-profiles-extra: usr.bin.totem profile produces aa-logprof error: permission contains unknown character(s) Pux

Package: apparmor-profiles-extra Version: 1.14 Severity: important Tags: upstream Dear Maintainer, Running `aa-logprof` produces this error: ERROR: permission contains unknown character(s) Pux I have grepped through /etc/apparmor.d: $ sudo fgrep -R Pux /etc/apparmor.d/

Bug#874100: thunderbird: Let's clarify what's the upstream for our AppArmor profile

This is really confusing, please consider upstreaming to lp:apparmor-profiles.

Bug#877255: apparmor-profiles-extra: usr.bin.totem profile produces aa-logprof error: permission contains unknown character(s) Pux

Control: tag -1 + patch Attached patch from upstream MR [0] [0] https://code.launchpad.net/~talkless/apparmor-profiles/+git/apparmor-profiles/+merge/332143 diff --git a/debian/README.Debian b/debian/README.Debian index 8469bcb..8ef2e61 100644 --- a/debian/README.Debian +++

Bug#878923: vlc: starting video crashes KDE session

Package: src:vlc Version: 2.2.6-6 Severity: grave Justification: renders package unusable Dear Maintainer, Probably after some recent package upgrades, I cannot launch video with VLC as it crashes whoe X session: LANG=en_US vlc ~/Parsiuntimai/David\ Stone\ Exceptional\ Performance_48_20.mp4

Bug#878923: vlc: starting video crashes KDE session

On 2017.10.17 21:18, Sebastian Ramacher wrote: A quick internet search suggests that is caused by old sessions and cleaning them should help getting rid of this error. I believe I have tried that without success. Unless you have some specific hints. Does it happen only with that file or

Bug#879030: 375.82-5: glxgears segmentation fault in glXCreateContext

Package: nvidia-driver Version: 375.82-5 Severity: normal Dear Maintainer, First of all sorry, but I am not sure to which package I should send this bug report - nvidia-driver, bumblebee, primus or whatver... :-) I believe after recent 375.82-5 upgrade on ASUS N551JM (i7-4710HQ, GTX 860M) I

Bug#879030: 375.82-5: glxgears segmentation fault in glXCreateContext

I just reinstalled Stretch and upgraded again into Testing, now I get different errors: [ 933.082366] [DEBUG]Process glxgears started, PID 28318. primus: fatal: failed to load any of the libraries:

Bug#879030: 375.82-5: glxgears segmentation fault in glXCreateContext

I managed to fix the crash, somehow. I believe it's problem with primus package, as after purging and reinstalling nvidia/bumblebee/primus stuff, I got glxgears working, BUT without primus. If I try to install primus, apt attempts to remove stuff: ``` The following additional packages will

Bug#882048: [pkg-apparmor] Bug#882048: Bug#882048: Re: Bug#882048: apparmor should let thunderbird use signatures from files

On 2017-11-28 03:36, Seth Arnold wrote: On Sat, Nov 25, 2017 at 05:23:16PM +0200, Vincas Dargis wrote: $ sudo sysdig "proc.name=thunderbird and fd.name=/home/vincas/.vimrc" 257671 17:14:42.523705164 7 thunderbird (8712) < open fd=69(/home/vincas/.vimrc) name=/home/vincas/.vimrc fla

Bug#882597: Re: Bug#882597: libreoffice: Failed to start when apparmor is running because of user rights

On 2017-11-28 12:19, intrigeri wrote: → In this case, I would argue that we're talking about a corner case, that only rather advanced users will hit, and I find it sad that everyone else can't benefit from AppArmor security benefits due to that, so I'm leaning towards:

Bug#882048: apparmor should let thunderbird use signatures from files

Please test my WIP solution: https://gitlab.com/Talkless/apparmor-profiles/blob/fix-thunderbird-signature/ubuntu/18.04/usr.bin.thunderbird Biggest danger is the fact that, although it is more secure now, it might deny access to some not yet discovered `$HOME/.directory/whatever`, as I got with

Bug#882048: Re: Bug#882048: apparmor should let thunderbird use signatures from files

On 2017.11.23 21:14, intrigeri wrote: 4. Opening a File dialog to select file to be attached, produces bunch of DENIED messages in log, when user browses it's $HOME, which contains dot-files and directories. I have experienced this myself, as for some reason file select dialog tries to read

Bug#882048: apparmor should let thunderbird use signatures from files

On 2017.11.23 22:07, Simon Deziel wrote: I can't reproduce this after commenting out the "deny @{HOME}/.* r" rule. Me neither and it's not in Firefox profile either so that's a good sign that we can safely drop it. After looking more, if this deny is dropped, then we have to change this:

Bug#882765: x2goserver fails to install on Sid

Package: x2goserver Severity: important Dear Maintainer, Installation fails on Debian Sid with this error: ``` sudo apt install x2goserver Reading package lists... Done Building dependency tree Reading state information... Done Some packages could not be installed. This may mean that you

Bug#882135: apparmor: Update AppArmor abstractions for Java 8 and 9

On 2017.11.23 19:37, intrigeri wrote: Hi, I have discovered denies on Debian Sid by Thunderbird being unable to load IcedTead plugin upon profile creation (can be reproduced by deleteing/moving $HOME/.thunderbird directory). What are the practical consequences of this bug? In other words:

  1   2   3   4   5   >