Re: Thunderbird almost unusable after upgrade

[MENGUAL Jean-Philippe]

Le 11/08/2017 à 07:38, Gene Heskett a écrit :
> On Thursday 10 August 2017 14:48:52 MENGUAL Jean-Philippe wrote:
> 
>> Hi,
>>
>> I am not sure I understand your mail in details. What I can say is
>> that we tried building against gtk2 and it works. It is just a build
>> option switch to change. Why do you think Debian package will not do
>> it?
>>
> It hasn't played a video, except some commercials in front of the video 
> in several weeks. I can't download the binary from mozilla because its 
> built against gtk3, and the dependency's it needs are not available in 
> the wheezy repo's. I haven't tried to build from src, no clue where to 
> get it even.

Wheezy is quite old, is it impossible to switch to Jessie at least?
Anyway, have you reported the problem?

> Why should I have to build FF from src, this isn't gentoo or arch?

I dont say you should, I say it is a working solution and we submitted
it to maintainers of the package. Dont hesitate to reply the bug report
I gave to help us to convince them to rebuild the package according to
this requirement for DebiaN 7 and 8.

Regards

> I have got chromium working in its place for everything but banking. I 
> can and now have, bought several things online using chromium.
> 
>> Regards,
>>
>> Le 10/08/2017 à 20:31, Gene Heskett a écrit :
>>> On Thursday 10 August 2017 13:05:02 MENGUAL Jean-Philippe wrote:
 Hi,


 It is a known bug we reported under number 870719. The problem is
 that this release builds against GTK3 and, in stable releases
 (including oldstable), it is a problem. The solution we suggest to
 the maintainer, and known to work), is building against GTK2 as
 Thunderbird 45 was. We are waiting for maintainers feedbacks, as we
 really think it is a debian-specific bug. Debian does not have to
 build against GTK3 and should not, given problems in display.


 Regards,
>>>
>>> In this old farts mind, gtk3 should been still born. gtk2 left one
>>> heck of a legacy code base behind and they won't let us use it
>>> anymore even on wheezy.  Thats about the same vacuum suckage as
>>> halfway to Alpha Centari.
>>>
 Le 10/08/2017 à 18:29, Gene Heskett a écrit :
> On Thursday 10 August 2017 11:08:44 Joe wrote:
>> On Thu, 10 Aug 2017 10:24:43 -0400
>>
>> Jape Person  wrote:
>>> After this upgrade
>>>
>>> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
>>>
>>> Thunderbird in Cinnamon DE is almost completely useless because
>>> portions of its windows / text / toolbars don't repaint until
>>> the window is resized. Is anyone else seeing this?
>>>
>>> Using different desktop themes or logging in as a different user
>>> results in same behavior.
>>>
>>> I'm curious to know whether this is being seen in different
>>> desktop environments, too.
>>
>> Not only that, but not just Thunderbird, Firefox also trashed.
>>
>> New update today OK.
>>
>> Never just have one mail client or one browser installed, at
>> least not in Sid...
>
> Despite a mozilla-flash update this AM, firefox is still DIW, will
> not play a video, not even the commercial in front of it. Using
> chromium for my default browser now.
>
> Do I detect an effort to kill mozilla/firefox?  It has not worked
> for any videos but you-tubes in 6 months. And for the last several
> weeks, not even there, as the debian version has no html5 support
> according the window the video is supposed to play in.
>
> Cheers, Gene Heskett
>>>
>>> Cheers, Gene Heskett
> 
> 
> Cheers, Gene Heskett
> 

-- 
Logo Hypra  JEAN-PHILIPPE MENGUAL
DIRECTEUR TECHNIQUE ET QUALITÉ
102, rue des poissonniers, 75018, Paris
Tel : +331 84 73 06 61  Mob : +336 76 34 93 37

jpmeng...@hypra.fr 
www.hypra.fr 
Facebook Hypra  Twitter Hypra
 Linkedin Jean-Philippe

Re: Thunderbird almost unusable after upgrade

[Gene Heskett]

On Thursday 10 August 2017 14:50:34 MENGUAL Jean-Philippe wrote:

Why did I get 3 copies of this?
>  Hi,
>
> I am not sure I understand your mail in details. What I can say is
> that we tried building against gtk2 and it works. It is just a build
> option switch to change. Why do you think Debian package will not do
> it?
>
> Regards,
>
> Le 10/08/2017 à 20:31, Gene Heskett a écrit :
> > On Thursday 10 August 2017 13:05:02 MENGUAL Jean-Philippe wrote:
> >> Hi,
[...]
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: Thunderbird almost unusable after upgrade

[Gene Heskett]

On Thursday 10 August 2017 14:48:52 MENGUAL Jean-Philippe wrote:

> Hi,
>
> I am not sure I understand your mail in details. What I can say is
> that we tried building against gtk2 and it works. It is just a build
> option switch to change. Why do you think Debian package will not do
> it?
>
It hasn't played a video, except some commercials in front of the video 
in several weeks. I can't download the binary from mozilla because its 
built against gtk3, and the dependency's it needs are not available in 
the wheezy repo's. I haven't tried to build from src, no clue where to 
get it even.

Why should I have to build FF from src, this isn't gentoo or arch?

I have got chromium working in its place for everything but banking. I 
can and now have, bought several things online using chromium.

> Regards,
>
> Le 10/08/2017 à 20:31, Gene Heskett a écrit :
> > On Thursday 10 August 2017 13:05:02 MENGUAL Jean-Philippe wrote:
> >> Hi,
> >>
> >>
> >> It is a known bug we reported under number 870719. The problem is
> >> that this release builds against GTK3 and, in stable releases
> >> (including oldstable), it is a problem. The solution we suggest to
> >> the maintainer, and known to work), is building against GTK2 as
> >> Thunderbird 45 was. We are waiting for maintainers feedbacks, as we
> >> really think it is a debian-specific bug. Debian does not have to
> >> build against GTK3 and should not, given problems in display.
> >>
> >>
> >> Regards,
> >
> > In this old farts mind, gtk3 should been still born. gtk2 left one
> > heck of a legacy code base behind and they won't let us use it
> > anymore even on wheezy.  Thats about the same vacuum suckage as
> > halfway to Alpha Centari.
> >
> >> Le 10/08/2017 à 18:29, Gene Heskett a écrit :
> >>> On Thursday 10 August 2017 11:08:44 Joe wrote:
>  On Thu, 10 Aug 2017 10:24:43 -0400
> 
>  Jape Person  wrote:
> > After this upgrade
> >
> > thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
> >
> > Thunderbird in Cinnamon DE is almost completely useless because
> > portions of its windows / text / toolbars don't repaint until
> > the window is resized. Is anyone else seeing this?
> >
> > Using different desktop themes or logging in as a different user
> > results in same behavior.
> >
> > I'm curious to know whether this is being seen in different
> > desktop environments, too.
> 
>  Not only that, but not just Thunderbird, Firefox also trashed.
> 
>  New update today OK.
> 
>  Never just have one mail client or one browser installed, at
>  least not in Sid...
> >>>
> >>> Despite a mozilla-flash update this AM, firefox is still DIW, will
> >>> not play a video, not even the commercial in front of it. Using
> >>> chromium for my default browser now.
> >>>
> >>> Do I detect an effort to kill mozilla/firefox?  It has not worked
> >>> for any videos but you-tubes in 6 months. And for the last several
> >>> weeks, not even there, as the debian version has no html5 support
> >>> according the window the video is supposed to play in.
> >>>
> >>> Cheers, Gene Heskett
> >
> > Cheers, Gene Heskett


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: How To Fix: Firewire IRQ Errors on Reboot

[RavenLX]

After some experimentation, I found that if you use "irqpoll" in the 
Grub command line, you'll end up with buffer underrun errors on a 
Lenovo/IBM ThinkPad T61.


Substitute this:

GRUB_CMDLINE_LINUX="irqpoll"

With this:

GRUB_CMDLINE_LINUX="noirqdebug"

[original post below:]

To: debian-user@lists.debian.org
Subject: How To Fix: Firewire IRQ Errors on Reboot
From: RavenLX 
Date: Wed, 7 Jun 2017 09:25:52 -0400
Message-id: <[?] 5abcce6c-1786-f85c-5ffe-4f9821aac...@sitesplace.net>

I would like to share another discovery. This one fixed my firewire IRQ 
errors when rebooting my ThinkPad T61.


(Not-So-Obligatory) Disclaimer:
---

While, I do not notice any change in overall functionality of the laptop 
as a result of this fix, I also do not know what the referenced setting 
is really used for. Do this at your own risk! I hold no responsibility 
for the outcome!


System:
---

IBM/Lenovo ThinkPad T61 Laptop
* This may (or may not) work on other ThinkPad Laptops.

Debian 9 (Stretch) RC4
4.9.0-3-amd64 #1 SMP Debian 4.9.25-1 (2017-05-02)

Problem Description:


I came across the following errors whenever rebooting:

irq 17: nobody cared (try booting with the "irqpoll" option
handlers:
[

sieve - "malformed email address"es - space at EOL?

[Zenaan Harkness]

Any sieve gurus?

(YES, I finally made it off of procmail, and sieve is AWEsome in
comparison - oh happy days :)

So two sieve failures (dodgy incoming emails got through gmail)
exposed themselves in relation to sieve in the last few days as
follows:


1)
The first is simply a "superfluous" space char at the end of the line
on the "From:" line, as follows (ignore leading spaces):

   From: "EFA" ⋅

Note the deceptively cheeky little space char at the end of the line
- and yes, either EFA or some middle man has a dodgy MUA/ mail
processing agent.

QUESTION:
Why is a single space at this EOL, so malformed as to cause sieve to
spit the dummy with an error?



2)
The dodgiest "To:" line I have literally ever seen, as follows:

To: 

Notice the colon, AND the semi colon, in this "email address".

Again gmail passed it right through.

I can actually accept this failure of sieve to pass the email through
- such an addy is indeed rather egregious.

BUT, it would be nice to have sieve actuallly OUTPUT the actual
problematic email address, and to this end, does anyone know some
magical incantation to add to sieve, so I can see all problematic
(and only the problematic) lines of incoming emails, as "error
output" by sieve to the cmd line?

Manually reducing the lines being processed by sieve, running sieve
each time, till I finally figured out exactly which lines of which
emails is causing the problem, is quite the biatch TBH :)


TIA,
Zen

customizing systemd config

[Gregory Seidman]

I'm trying to recreate under systemd something I had previously cobbled
together with shell scripts and init levels under sysvinit.

Only a few services ran under init 2, the default set in /etc/inittab,
including privoxy and ssh; the rest of the services I wanted running, such
as fetchmail, exim4, courier-imap, apache2, etc. would be started at init
level 3. Those services required an encrypted volume (actually a RAID that
was an encrypted LVM PV for a VG with several volumes) to be configured and
mounted before they could be started.

I wrote a shell script that I'd run manually which would take the
encryption password (via /etc/init.d/cryptdisks start), ensure that the
volume group was found, mount the filesystems, then run init 3. There was
also a flag in case I needed to get the VG up without mounting any volumes
(e.g. to run a manual fsck on some volume).

I have a new server with a fresh install of stretch and I'm trying to make
it just a systemctl start (or stop) to achieve the following:

1) the default.target (i.e. multi-user.target) is equivalent to init 2 with
   minimal services
2) "systemctl start decrypted" gets the encrypted VG up and running but
   doesn't mount any filesystems
3) "systemctl start operating" makes sure everything in "decrypted" is up
   before mounting the volumes then launching the various services
4) "systemctl stop operating" stops the various services and attempts to
   unmount those filesystems
5) "systemctl stop decrypted" stops everything from "operating" and shuts
   down the volume group and decryption

The first challenge is that the cryptsetup package still installs itself
(cryptdisks and cryptdisks-early) in /etc/init.d, which means that systemd
goes through a process I don't properly understand to run it; it seems to
be generating a unit file in /run/systemd/generator.late for it using the
lsb header on the /etc/init.d script. (Also, by default and installed as
part of the systemd package, /lib/systemd/system/cryptdisks.service is a
symlink to /dev/null which, I believe, prevents the generated service from
being enabled.)

It looks like (and according to the systemd.unit man page) I can override
the generated cryptdisks.service unit file with configuration in
/etc/systemd/system/cryptdisks.service.d/override.conf, at least according
to what "systemctl edit cryptdisks" creates. I know that's a piece of the
puzzle, but I'm still missing something.

If I'm even on the right track (and if I'm not please set me straight), I
have the following questions (and probably more to come):

1) Should "decrypted" and "operating" be .target units or something else?
2) What would I put in e.g. /etc/systemd/system/fetchmail.d/override.conf
   to prevent it from starting under multi-user.target? Or is it a matter
   of removing symlinks from /*/systemd/*/*.wants directories?
3) Is there a systemd command to help me with managing this (including
   transitive wants)? Or is it requires? What's the difference between
   wants and requires anyway?
3) What would I put in /etc/systemd/system/cryptdisks.d/override.conf to
   remove its "Before=checkfs.service" reverse dependency?
4) How do I specify the post-decryption mounts? Can I just set them up in
   /etc/fstab as noauto then symlink the generated .mount units to a
   .wants?

Thanks in advance,
--Greg

Amanda since the upgrade to Stretch

[Mark Fletcher]

Hello!

Since the upgrade from Jessie to Stretch, I have noticed occasional 
misbehaviour in my amanda setup. I didn't change anything in my hardware 
or software configuration that might have caused it. (Famous Last 
Words...)

The most recent occurrence was last night, and it was typical of what 
happens when it goes wrong:

--

These dumps were to tape RealBackup08.
Not using all tapes because taperflush criteria not met.
There are 210G of dumps left in the holding disk.
Run amflush to flush them to tape.

The next 2 tapes Amanda expects to use are: RealBackup09, RealBackup10.


FAILURE DUMP SUMMARY:
  localhost /opt lev 0  partial taper: taperflush criteria not met

--

Running amflush RealBackup as the backup user works fine to flush the 
dump. My question is why didn't the flush work during the main overnight 
backup run?

The system is otherwise idle during the backup run. I have it set to run 
at 1:30am and I was in bed last night by about 00:20. I had shut down 
both VirtualBox VMs on my system, and the backup script shuts down a 
bunch of services like mysql (actually mariadb nowadays) and svnserve on 
the machine before commencing the backup, so as to get as good quality 
as possible a backup. So the machine shouldn't have been doing anything 
else at the time except servicing the backup.

My amanda "tape" is a set of 10 vtapes on a 3TB hard disk mounted in an 
external USB drive cage. The holding disk is the second 3TB disk in the 
cage. Both disks are mounted by me after booting and left mounted until 
the next reboot. This issue I am seeing happens only a small percentage 
of backup runs. I backup every weeknight. This configuration worked 
without ever reporting problems in Jessie.

What does "taperflush criteria not met" mean?

Mark

Re: debian 9.1 dpkg error when installing xemacs and erlang

[Mark Fletcher]

On Thu, Aug 10, 2017 at 06:37:41PM +0200, Rémy Noulin wrote:
> On a freshly installed debian 9.1, apt-get fails to install xemacs due to
> some compilation related to erlang, here is the interesting part of log:
> 
> Compiling /usr/share/xemacs21/site-lisp/erlang/erldoc.el...
> While compiling toplevel forms in file
> /usr/share/xemacs21/site-lisp/erlang/erldoc.el:
>   !! File error (("Cannot open load file" "cl-lib"))
> >>Error occurred processing erldoc.el: Cannot open load file: cl-lib
> 
> Compiling /usr/share/xemacs21/site-lisp/erlang/path.el...
> Wrote /usr/share/xemacs21/site-lisp/erlang/path.elc
> Done
> ERROR: install script from erlang-mode package failed
> dpkg: error processing package xemacs21-mule (--configure):
>  subprocess installed post-installation script returned error exit status 1
> dpkg: dependency problems prevent configuration of xemacs21:
>  xemacs21 depends on xemacs21-mule (>= 21.4.24-4) | xemacs21-mule-canna-wnn
> (>= 21.4.24-4) | xemacs21-nomule (>= 21.4.24-4); however:
>   Package xemacs21-mule is not configured yet.
>   Package xemacs21-mule-canna-wnn is not installed.
>   Package xemacs21-nomule is not installed.
> 
> dpkg: error processing package xemacs21 (--configure):
>  dependency problems - leaving unconfigured
> Errors were encountered while processing:
>  xemacs21-mule
>  xemacs21
> E: Sub-process /usr/bin/dpkg returned an error code (1)
> 

OK so it looks like it can't complete the build because the cl-lib 
component it needs is missing. 

A good guess would be that this file is in another package that isn't 
installed, that the package for xemacs assumes will be installed but 
which isn't in its dependencies. That would arguably be a bug, but even 
if it is a bug that doesn't help you much, you still need to navigate 
out of the situation you are in.

So here's how to determine where that cl-lib component is:

1. Install apt-file if you don't have it already.
2. sudo apt-file update

3. apt-file search cl-lib

On my system the 3rd command produces:

aolserver4-doc: /usr/share/doc/aolserver4-doc/html/devel/tcl/tcl-libraries.html
emacs24-common: /usr/share/emacs/24.5/lisp/emacs-lisp/cl-lib.elc
emacs24-el: /usr/share/emacs/24.5/lisp/emacs-lisp/cl-lib.el.gz
emacs25-common: /usr/share/emacs/25.1/lisp/emacs-lisp/cl-lib.elc
emacs25-el: /usr/share/emacs/25.1/lisp/emacs-lisp/cl-lib.el.gz
maxima-src: /usr/share/maxima/5.38.1/src/numerical/f2cl-lib.lisp

aolserver4-doc and maxima-src are probably red herrings. You need one or 
more of emacs2{4,5}-{common,el} installed. I _think_ you are going to 
want to go either with the -24 or -25 series, not both, and if you held 
a gun to my head I would say it's probably the -el package rather than 
the -common package that you need, but that could easily be wrong. See 
which ones are not already installed on your system -- something that's 
already there isn't the missing package! :)

Hope that helps.

Mark

delay the start of a service until LACP negotiation is complete

[John Ratliff]

I need two services to wait until the network is fully up before I start
them. In Jessie, I made an rc.local script that pinged google 20 times
until it got a response. After that, it started the services. This seemed
to work great. I upgraded one of the systems to stretch, and the script
stopped working; or at least, I thought it did. Turns out, it just takes
longer under stretch than it did under Jessie (not sure why). Now I need
to do 30 pings to make sure it’s okay.

I’d like a better option. I tried delaying the services until
network-online.target, but this doesn’t really seem to work.

I have a 4 port LAGG (LACP / bond-mode 4) interface named bond0. It seems
to take about 45 seconds after the links come up to negotiate with the
switch. However, as soon as the network gets link active signals on the
individual links, it seems to think the network is up and starts the
services too soon. Is there something I can do to verify the LACP
negotiation is complete before starting some of my services?

Thanks.

Re: Big problem computer not booting

[Jimmy Johnson]

On 08/10/2017 12:00 PM, kelsang sherab wrote:

I run Debian stretch on MacBook Air

I did a restore backup from previous system[debian Jessie ]

Now machine is not booting

upon boot the machine gives the normal GRUB menu:
Debian GNU/Linux
Advanced options for Debian GNU/linux

Click the 1st one

saying
Loading etc
Loading initial ram disk

then a list of checks

[  0.049346] DMAR-IR:[Firmware Bug] : ioapic 2 has no mappin iommu,
interrupt remapping will be disabled
/dev/sda2: clean, 348430/7118848 files, 7186186/28466432 blocks
[  3.895353] sd 6:0:0:0: [sdb] No Caching mode page found
[  3.895361] sd 6:0:0:0: [sdb] Assuming drive cache: write trhough
[FAILED] Failed to start Network Manager Wait Online.
See 'systemctl status NetwrokManager-wait-online.service' for details.
then a list of things starting all [OK]

and then nothing happens

Switching the machine off and re-starting it into the advance option i
get some root access and i see al my files.I am not able to connect to the 
internet
When trying to do something like apt-get update
the system returns that a shared library libapt-pkg.so.4.12 is not
installed.
but I have no internet access so I cannot either find the lib or install
it. And so I cannot update the system and it feels like a catch 22
I could really do with some help



I don't know, but maybe I can help with the network, do an '#ifconfig 
-a' to get the name of your interface and then '#ifconfig 
(name-of-interface) up' and see if that helps get things going.


Cheers,
--
Jimmy Johnson

Debian Jessie - KDE 4.14.2 - AMD A8-7600 - EXT4 at sda6
Registered Linux User #380263

Re: Firefox-Esr version 52.3.0

[andre_debian]

On Thursday 10 August 2017 22:36:51 Pierre L. wrote:
> Tu peux tenter en les réactivant 1 à 1, l'un après l'autre, et trouver
> ainsi le fautif ;)
> (bouton du menu "Redémarrer modules désactivés")

> J'ai souvenir d'un plugin qui parlait de problème de compatibilité avec
> les futures versions de FF, à voir...
> Heuh, peut-être aucun rapport...
> Mais bon, à méditer...
> https://github.com/Aris-t2/ClassicThemeRestorer/issues/299/
> Le 10/08/2017 à 22:33, Pierre L. a écrit :
> > J'ai souvenir d'un plugin qui parlait de problème de compatibilité avec
> > les futures versions de FF, à voir...

# apt-cache search firefox
firefox-esr - Mozilla Firefox web browser - Extended Support Release (ESR).
Sans doute ai-je installé Firefox ESR via ce paquet,
sinon je le réinstallerai par : firefox-52.3.0esr.tar.bz2,
téléchargé sur le site de Firefox,
en le dépactant dans un répertoire ~firefox-esr/ de mon compte,
pour avoir la dernière version et la tester.

Bonne nuit à tous, il se fait tard :-)

André

Re: Firefox-Esr version 52.3.0

[Pierre L.]

Heuh, peut-être aucun rapport...
Mais bon, à méditer...

https://github.com/Aris-t2/ClassicThemeRestorer/issues/299/


Le 10/08/2017 à 22:33, Pierre L. a écrit :
> J'ai souvenir d'un plugin qui parlait de problème de compatibilité avec
> les futures versions de FF, à voir...




signature.asc
Description: OpenPGP digital signature

Re: Firefox-Esr version 52.3.0

[Pierre L.]

Tu peux tenter en les réactivant 1 à 1, l'un après l'autre, et trouver
ainsi le fautif ;)
(bouton du menu "Redémarrer modules désactivés")

J'ai souvenir d'un plugin qui parlait de problème de compatibilité avec
les futures versions de FF, à voir...

(excuse Philippe de passer par ton fil :p )

Le 10/08/2017 à 21:01, andre_deb...@numericable.fr a écrit :
 il doit certainement y avoir un plugin/addon qui t'embistrouille ? 
 A tester...
> Ok, mais lequel ? :-)
>  




signature.asc
Description: OpenPGP digital signature

Re: Thunderbird almost unusable after upgrade

[MENGUAL Jean-Philippe]

 Hi,

I am not sure I understand your mail in details. What I can say is that
we tried building against gtk2 and it works. It is just a build option
switch to change. Why do you think Debian package will not do it?

Regards,


Le 10/08/2017 à 20:31, Gene Heskett a écrit :
> On Thursday 10 August 2017 13:05:02 MENGUAL Jean-Philippe wrote:
> 
>> Hi,
>>
>>
>> It is a known bug we reported under number 870719. The problem is that
>> this release builds against GTK3 and, in stable releases (including
>> oldstable), it is a problem. The solution we suggest to the
>> maintainer, and known to work), is building against GTK2 as
>> Thunderbird 45 was. We are waiting for maintainers feedbacks, as we
>> really think it is a debian-specific bug. Debian does not have to
>> build against GTK3 and should not, given problems in display.
>>
>>
>> Regards,
> 
> In this old farts mind, gtk3 should been still born. gtk2 left one heck 
> of a legacy code base behind and they won't let us use it anymore even 
> on wheezy.  Thats about the same vacuum suckage as halfway to Alpha 
> Centari.
> 
>> Le 10/08/2017 à 18:29, Gene Heskett a écrit :
>>> On Thursday 10 August 2017 11:08:44 Joe wrote:
 On Thu, 10 Aug 2017 10:24:43 -0400

 Jape Person  wrote:
> After this upgrade
>
> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
>
> Thunderbird in Cinnamon DE is almost completely useless because
> portions of its windows / text / toolbars don't repaint until the
> window is resized. Is anyone else seeing this?
>
> Using different desktop themes or logging in as a different user
> results in same behavior.
>
> I'm curious to know whether this is being seen in different
> desktop environments, too.

 Not only that, but not just Thunderbird, Firefox also trashed.

 New update today OK.

 Never just have one mail client or one browser installed, at least
 not in Sid...
>>>
>>> Despite a mozilla-flash update this AM, firefox is still DIW, will
>>> not play a video, not even the commercial in front of it. Using
>>> chromium for my default browser now.
>>>
>>> Do I detect an effort to kill mozilla/firefox?  It has not worked
>>> for any videos but you-tubes in 6 months. And for the last several
>>> weeks, not even there, as the debian version has no html5 support
>>> according the window the video is supposed to play in.
>>>
>>> Cheers, Gene Heskett
> 
> 
> Cheers, Gene Heskett
> 

-- 
Logo Hypra  JEAN-PHILIPPE MENGUAL
DIRECTEUR TECHNIQUE ET QUALITÉ
102, rue des poissonniers, 75018, Paris
Tel : +331 84 73 06 61  Mob : +336 76 34 93 37

jpmeng...@hypra.fr 
www.hypra.fr 
Facebook Hypra  Twitter Hypra
 Linkedin Jean-Philippe

Re: Ass: Debian 9 fora de control?

[Alex Muntada]

Hola Narcís,

> En aquesta bitàcola veig que fou "unattended-upgrade" el
> programa que va actuar per instal·lar paquets

Has mirat si la pestanya Updates de software-properties-gtk té
activada l'opció d'instal·lar automàticament? Revisa també el
contingut del /etc/apt/apt.conf.d per si hi ha alguna variable
que ho activi.

> Realment em sorpren que a Debian s'hagi decidit aquest tipus de
> coses sense que es consulti l'usuari.

Hi ha a qui li sorprèn que no s'actualitzin els forats de
seguretat automàticament i el més aviat possible.

> S'ha passat de no actualitzar ni avisar per a res, a fer-ho
> «perquè toca» i silenciosament.

D'on ho treus això? La teva experiència particular no implica que
hi hagi cap decisió en aquest sentit. Pel que jo recordo, aquest
any s'ha discutit d'activar la instal·lació automàtica dels pegats
de seguretat a les imatges per a servidors. Però també hi ha gent
que hi veu inconvenients i no estic segur del que s'ha decidit
finalment.

Les decisions rellevants s'acostumen a documentar al document de
«release notes» però també pot passar que hom ho hagi oblidat o
que no s'hagi considerat rellevant si hi havia prou consens en el
moment de prendre la decisió.

Salut,
Alex

Re: no non-free firmware on lapton, no Ethernet, related?

[Emanuel Berg]

Doug wrote:

> I am primarily a PCLOS user, and I also have
> Mint 17 LTS. I can tell you that it is very
> tricky to get a Broadcom wireless interface
> to work on PCLOS, but on the Mint system it
> works "out of the box" with no installation
> whatever. So what I can say is that you may
> need some extra software from Broadcom to get
> your Deb wireless to work, and it may be
> difficult. Or you could get Mint and probably
> have no trouble! This is not a free plug,
> just some information for you.

Wireless is not necessary for this laptop, only
Internet thru the Ethernet port. Is this
influenced anyhow by the missing wireless
firmware? If it isn't, I'm all the happy to
drop the issue.

-- 
underground experts united
http://user.it.uu.se/~embe8573

Big problem computer not booting

[kelsang sherab]

I run Debian stretch on MacBook Air 

I did a restore backup from previous system[debian Jessie ]

Now machine is not booting

upon boot the machine gives the normal GRUB menu:
Debian GNU/Linux 
Advanced options for Debian GNU/linux

Click the 1st one

saying 
Loading etc
Loading initial ram disk 

then a list of checks 

[  0.049346] DMAR-IR:[Firmware Bug] : ioapic 2 has no mappin iommu,
interrupt remapping will be disabled
/dev/sda2: clean, 348430/7118848 files, 7186186/28466432 blocks
[  3.895353] sd 6:0:0:0: [sdb] No Caching mode page found
[  3.895361] sd 6:0:0:0: [sdb] Assuming drive cache: write trhough
[FAILED] Failed to start Network Manager Wait Online.
See 'systemctl status NetwrokManager-wait-online.service' for details.
then a list of things starting all [OK]

and then nothing happens

Switching the machine off and re-starting it into the advance option i
get some root access and i see al my files.I am not able to connect to the 
internet
When trying to do something like apt-get update 
the system returns that a shared library libapt-pkg.so.4.12 is not
installed.
but I have no internet access so I cannot either find the lib or install
it. And so I cannot update the system and it feels like a catch 22
I could really do with some help 


--
  kelsang sherab
  she...@fastmail.com

Re: modifying debian installer image

[Brian]

On Thu 10 Aug 2017 at 12:45:06 +0200, Fourhundred Thecat wrote:

> > On 2017-08-09 21:16, Brian wrote:
> > 
> > Not quite an answer to your question, but you could explore the
> > suggestion in
> > 
> >  https://lists.debian.org/debian-user/2017/07/msg00321.html
> > 
> >   If you want something more complicated, like not installing systemd at
> >   all, you'll have to pass --include and --exclude options to debootstrap
> >   using the base-installer/includes and base-installer/excludes preseed
> >   options; something like:
> > 
> >   base-installer/includes=sysvinit-core base-installer/excludes=systemd-sysv
> > 
> >   but that's totally untested.
> > 
> > I think this can be preseeded.
> > 
> 
> thanks, but unfortunately that does not work. I have added these to my
> preseeding file:
> 
>   d-i base-installer/includes sysvinit-core
>   d-i base-installer/excludes systemd systemd-sysv
> 
> but systemd still is installed, and sysvinit-core is not installed

Sorry. I have no other advice than to read what is given by a search
with "base-installer/includes sysvinit-core". I have never followed
this route. Others want to do the same as you; but they are shy in
describing the behaviour of debootstrap and fixing any deficiencies
in it.

-- 
Brian.

Re: Help with USB audio card

[Rodolfo Medina]

Curt  writes:

> On 2017-08-10, Rodolfo Medina  wrote:
>>
>>> I read that for the Lenovo to get an external
>>> usb sound card working the card must be indexed as card 0 (numero uno).
>>
>> The card doesn't work with my netbook Acer Aspire One either...
>
> Maybe it's defective.



No, it was tested by the shop owner and works fine with MS Windows...

Rodolfo

Re: Firefox-Esr version 52.3.0

[andre_debian]

On Thursday 10 August 2017 20:14:22 Pierre L. wrote:
> "La première des choses à faire en cas de bug" (à mon avis, qui n'est
> probablement pas divin), c'est tester son profil utilisateur car ca
> prend environ 20 secondes à peine avec le -p
> Merci André pour ton retour :)
> >> il doit certainement y avoir un plugin/addon qui t'embistrouille ? 
> >> A tester...

Ok, mais lequel ? :-)
 
> Sinon ca peut valoir le coup de tester avec la version téléchargeable de
> leur site.
> On peut dézipper sur le bureau, puis lancer le navigateur avec
> l’exécutable "firefox" contenu dedans. Ce ne sera plus la version ESR,
> juste la "conventionnelle", perso ca fait un moment que c'est celle-ce
> que je lance.

C'est la conventionnelle que j'ai installée sur mon compte
comme indiqué ci-dessus dans /home/andre/firefox/.

La ESR est installée aussi et se lance dans /usr/bin/firefox,
me rappelle plus à partir de quel moyen...
Ou télécharger la version 3 ?

J'ai aussi iceweasel.

Bonne soirée,

André

Re: Debian 9.1 amd64 Xfce panel clock broken

[Ralph Katz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

On 08/09/2017 06:13 PM, David Christensen wrote:
> debian-user:
> 
> I have a Dell Inspiron E1505 laptop with an Intel Core Duo T7400
> CPU, 2 GB RAM, 16 GB SSD, and a fresh install of 
> debian-9.1.0-amd64-xfce-CD-1.iso, with all updates and upgrades as
> of now:
> 
> 2017-08-09 16:59:07 root@tinkywinky ~ # cat /etc/debian_version 
> 9.1
> 
> 2017-08-09 16:59:18 root@tinkywinky ~ # uname -a Linux tinkywinky
> 4.9.0-3-amd64 #1 SMP Debian 4.9.30-2+deb9u3 (2017-08-06) x86_64
> GNU/Linux
> 
> 2017-08-09 16:59:22 root@tinkywinky ~ # dpkg-query --show xfce4 
> xfce44.12.3
> 
> 
> I would like to use the Xfce panel "clock" item.  Unfortunately, it
> is broken:
> 
> - If I right-click on the Xfce panel and choose "Panel
> Preferences...", the "Panel" dialog appears.
> 
> - Selecting Panel -> Items tab, "Clock" appears in the list of
> panel items.
> 
> - If I select Panel -> Items -> Clock and click the "Edit the
> currently selected item" button, the "Clock" dialog appears.
> 
> - I then configure Clock as follows:
> 
> Time Settings TimezonePST8PDT Appearance Layout
> Digital Tooltip formatWednesday 09 August 2017 Clock Options 
> Format05:04:55 PM
> 
> Once I have made the above settings, but before choosing "Close",
> the current time is displayed at the proper location in the Xfce
> panel. This is what I want.
> 
> - But when I click "Close", the current time disappears from the
> panel -- e.g. Clock breaks.
> 
> 
> Looking in /var/log and dmesg, I don't see any clues.
> 
> 
> Any suggestions for figuring out why Clock is broken and how to fix
> it?
> 
> 
> David

Mine works, but settings look different.  I made no changes to clock
properties, yet my field Timezone is blank.  Maybe try that?

There is an .xfce4-session.verbose-log , though I don't know what
you'll find.

Good luck!

Ralph


-BEGIN PGP SIGNATURE-
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=JIy6
-END PGP SIGNATURE-

Re: cannot get node dns program to work externally

[Mikkel Wilson]

I haven't run this locally to test, but you appear to be binding only to 
the localhost 
address: 
https://github.com/tjfontaine/node-dns/blob/master/examples/forwarder.js#L10

This should exhibit the symptoms you mention and allow it to work on 
localhost and not on remote addresses. Change this from '127.0.0.1' to 
'0.0.0.0' to bind on all addresses and it should be available externally as 
well.

Mikkel

On Monday, August 7, 2017 at 2:56:11 PM UTC-7, AaronNGray wrote:
>
> Hi,
>
> I have a node.js based dns program on port 53 and have it working as 
> localhost on debian 8.5 but I cannot seem to get it to work externally 
> despite getting the firewall rules right having tested them with Bind9.
>
> -A INPUT -p udp --dport 53 --sport 1024:65535 -j ACCEPT
> -A OUTPUT -p udp --sport 53 --dport 1024:65535 -j ACCEPT
> -A OUTPUT -p udp --sport 53 --dport 1024:65535 -j ACCEPT
> -A INPUT -p udp --dport 53 --sport 1024:65535 -j ACCEPT
>
> -A OUTPUT -p udp --sport 53 --dport 53 -j ACCEPT
> -A INPUT -p udp --dport 53 --sport 53 -j ACCEPT
>
>
> Also I have done :-
>
> setcap cap_net_bind_service=+ep /usr/bin/nodejs
>
> to allow node to work with ports less than 1024.
>
> I have my node dns program working on port 53 UDP with dig from localhost 
> but Basically not externally on the local network and cannot work out why ?
>
> I have mainly been using :-
>
> 
> https://github.com/tjfontaine/node-dns/blob/master/examples/forwarder.js
>
> for testing.
>
> Its probably something obvious hope someone can help !
>
> -- 
> Aaron Gray
>
> Independent Open Source Software Engineer, Computer Language Researcher, 
> Information Theorist, and amateur computer scientist.
>

Re: Firefox-Esr version 52.3.0

[MERLIN Philippe]

Le jeudi 10 août 2017, 20:17:58 CEST Pierre L. a écrit :
> Firefox-ESR est ok sur une Debian 9 upgradée depuis 8 Jessie il n'y a
> pas longtemps...
> Au cas où... ma ESR est en 52.3.0 (64 bits)
> 
> Le 10/08/2017 à 18:43, MERLIN Philippe a écrit :
> > Bonjour,
> > 
> > La dernière mise à jour de Firefox-Esr Sur Sid AMD64 a été pour moi
> > 
> > catastrophique et j'ai du revenir à la version antérieure la 52.2 pour
> > avoir
> > 
> > un fonctionnement correct, es ce que vous avez eu le même problème
> > avec cette
> > 
> > version de Firefox-Esr.
> > 
> > Philippe Merlin
Tu as de la chance, car pour moi Firefox-Esr avait un look étrange et un 
comportement bizarre, par exemple: consulter l'historique bloquait l'affichage, 
 
une nouvelle version la Firefox-Esr 53.2 la Esr-2 a été mis en service 
aujourd'hui je ne l'ai pas encore chargé car la mise à jour dist-upgrade 
supprimait bogofilter j'attends donc.
Philippe Merlin

Re: no non-free firmware on lapton, no Ethernet, related?

[Doug]

On 08/10/2017 07:11 AM, Emanuel Berg wrote:

Dejan Jocic wrote:


Also, you mentioned that you need your
ethernet to work, these b43 packages are for
Broadcom wireless cards.

Yes, that is what I meant in my OP, the lacking
firmware for wireless should not influence
Ethernet not working, right?

Anyway, to manually install it seems
unnecessary complicated, so I think I'll try
the ISO with the non-free firmware included.


Whatever that you choose to do, do not forget
to check your /etc/apt/sources.list file and
add contrib and non-free after main wherever
it is needed, something like this:

deb http://deb.debian.org/debian/ jessie main
contrib non-free

Yes, with Internet working it'll be no problems
setting up the system.

I am primarily a PCLOS user, and I also have Mint 17 LTS. I can tell you 
that it is very tricky to get a Broadcom wireless interface to work on 
PCLOS, but on the Mint
system it works "out of the box" with no installation whatever. So what 
I can say is that you may need some extra software from Broadcom to get 
your Deb wireless
to work, and it may be difficult. Or you could get Mint and probably 
have no trouble!  This is not a free plug, just some information for you.


--doug

Re: Help with USB audio card

[Curt]

On 2017-08-10, Rodolfo Medina  wrote:
>
>> I read that for the Lenovo to get an external
>> usb sound card working the card must be indexed as card 0 (numero uno).
>
> The card doesn't work with my netbook Acer Aspire One either...

Maybe it's defective.

> Thanks,
>
> Rodolfo
>
>


-- 
"Until the Lion learns to write, tales of the hunt shall always glorify the 
Hunter."
— African proverb

Re: Thunderbird almost unusable after upgrade

[Gene Heskett]

On Thursday 10 August 2017 13:05:02 MENGUAL Jean-Philippe wrote:

> Hi,
>
>
> It is a known bug we reported under number 870719. The problem is that
> this release builds against GTK3 and, in stable releases (including
> oldstable), it is a problem. The solution we suggest to the
> maintainer, and known to work), is building against GTK2 as
> Thunderbird 45 was. We are waiting for maintainers feedbacks, as we
> really think it is a debian-specific bug. Debian does not have to
> build against GTK3 and should not, given problems in display.
>
>
> Regards,

In this old farts mind, gtk3 should been still born. gtk2 left one heck 
of a legacy code base behind and they won't let us use it anymore even 
on wheezy.  Thats about the same vacuum suckage as halfway to Alpha 
Centari.

> Le 10/08/2017 à 18:29, Gene Heskett a écrit :
> > On Thursday 10 August 2017 11:08:44 Joe wrote:
> >> On Thu, 10 Aug 2017 10:24:43 -0400
> >>
> >> Jape Person  wrote:
> >>> After this upgrade
> >>>
> >>> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
> >>>
> >>> Thunderbird in Cinnamon DE is almost completely useless because
> >>> portions of its windows / text / toolbars don't repaint until the
> >>> window is resized. Is anyone else seeing this?
> >>>
> >>> Using different desktop themes or logging in as a different user
> >>> results in same behavior.
> >>>
> >>> I'm curious to know whether this is being seen in different
> >>> desktop environments, too.
> >>
> >> Not only that, but not just Thunderbird, Firefox also trashed.
> >>
> >> New update today OK.
> >>
> >> Never just have one mail client or one browser installed, at least
> >> not in Sid...
> >
> > Despite a mozilla-flash update this AM, firefox is still DIW, will
> > not play a video, not even the commercial in front of it. Using
> > chromium for my default browser now.
> >
> > Do I detect an effort to kill mozilla/firefox?  It has not worked
> > for any videos but you-tubes in 6 months. And for the last several
> > weeks, not even there, as the debian version has no html5 support
> > according the window the video is supposed to play in.
> >
> > Cheers, Gene Heskett


Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: Help with USB audio card

[Rodolfo Medina]

Curt  writes:

> Whether making the usb dongle the default card by creating a ~.asoundrc file:
>
> pcm.!default {
> type hw
> card 2
> }
>
> ctl.!default {
> type hw
> card 2
> } 
>
> would work or not I dunno.


It seems it does: now I get:

$ arecord -l
 List of CAPTURE Hardware Devices 
card 1: Device [USB PnP Sound Device], device 0: USB Audio [USB Audio]
  Subdevices: 1/1
  Subdevice #0: subdevice #0
card 2: Generic [HD-Audio Generic], device 0: ALC662 rev3 Analog [ALC662 rev3 
Analog]
  Subdevices: 1/1
  Subdevice #0: subdevice #0
card 2: Generic [HD-Audio Generic], device 2: ALC662 rev3 Alt Analog [ALC662 
rev3 Alt Analog]
  Subdevices: 1/1
  Subdevice #0: subdevice #0

but still the card does not work, neither with headphones nor with microphone:
to record from mic, I do now:

 $ sox -t alsa hw:1,0 output.wav

but no sound is recorded.


> I read that for the Lenovo to get an external
> usb sound card working the card must be indexed as card 0 (numero uno).

The card doesn't work with my netbook Acer Aspire One either...

Thanks,

Rodolfo

Re: Firefox-Esr version 52.3.0

[Pierre L.]

Firefox-ESR est ok sur une Debian 9 upgradée depuis 8 Jessie il n'y a
pas longtemps...
Au cas où... ma ESR est en 52.3.0 (64 bits)



Le 10/08/2017 à 18:43, MERLIN Philippe a écrit :
>
> Bonjour,
>
> La dernière mise à jour de Firefox-Esr Sur Sid AMD64 a été pour moi  
>
> catastrophique et j'ai du revenir à la version antérieure la 52.2 pour
> avoir 
>
> un fonctionnement correct, es ce que vous avez eu le même problème
> avec cette 
>
> version de Firefox-Esr.
>
> Philippe Merlin
>




signature.asc
Description: OpenPGP digital signature

Re: Firefox-Esr version 52.3.0

[Pierre L.]

"La première des choses à faire en cas de bug" (à mon avis, qui n'est
probablement pas divin), c'est tester son profil utilisateur car ca
prend environ 20 secondes à peine avec le -p
Merci André pour ton retour :)
>> il doit certainement y avoir un plugin/addon qui t'embistrouille ? A
tester...

Sinon ca peut valoir le coup de tester avec la version téléchargeable de
leur site.
On peut dézipper sur le bureau, puis lancer le navigateur avec
l’exécutable "firefox" contenu dedans. Ce ne sera plus la version ESR,
juste la "conventionnelle", perso ca fait un moment que c'est celle-ce
que je lance.


Le 10/08/2017 à 20:05, andre_deb...@numericable.fr a écrit :
> Je peux à nouveau me connecter à la page iDRAC KVM,
> avec Firefox dans mon compte, après avoir tapé : 
> "/home/andre/firefox/./firefox -p"
>
> Idem avec "/usr/bin/firefox -p" qui est la version ESR,
> mais installé en root.
>
> Merci !




signature.asc
Description: OpenPGP digital signature

Re: Firefox-Esr version 52.3.0

[andre_debian]

On Thursday 10 August 2017 19:16:36 Pierre L. wrote:
> Pas encore rebooté sur le pingouin je vous redirai ;)
> Sinon André, tu peux tenter avec un nouveau profil firefox, des fois que
> ton actuel soit plombé par je ne sais quel truc...
> C'est un test qui coute rien en install/désinstall, faut juste lancer
> Firefox avec le paramètre -p en fin de commande.
> Ca t'ouvrira leur gestionnaire de profils, et là tu en crée un tout neuf
> pour voir. Normalement ton actuel restera, tu pourras le retrouver au
> prochain lancement avec le -p.
> ps: ca marche comme ca sur l'OS du Bill... je pense que c'est aussi ok
> sur le pingouin ;)

Je peux à nouveau me connecter à la page iDRAC KVM,
avec Firefox dans mon compte, après avoir tapé : 
"/home/andre/firefox/./firefox -p"

Idem avec "/usr/bin/firefox -p" qui est la version ESR,
mais installé en root.

Merci !

J'ai plein de messages d'alertes, dont celles ci :

(firefox:2649): GLib-GObject-CRITICAL **: g_object_unref: 
assertion 'object->ref_count > 0' failed
(firefox:2649): Gtk-CRITICAL **: gtk_icon_theme_lookup_icon_for_scale: 
assertion 'scale >= 1' failed
etc...

André


> Le 10/08/2017 à 19:04, andre_deb...@numericable.fr a écrit :
> > Je ne peux plus me connecter à la page iDRAC KVM
> > de mon serveur, sans la moindre indication de Firefox,
> > alors qu'avec Google-Chrome, ça connecte parfaitement.

Fortinet/Juniper Networks/CheckPoint Users

[autumn . perry]

style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)">Hi, style="color:rgb(34,34,34)">


style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)">
would you be interested in Fortinet/Juniper Networks/CheckPoint  
Users contact

list?

style="margin-bottom:0.0001pt;line-height:normal">style="color:black"> 


style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)">Features:style="color:rgb(31,78,121)">

•         85% on email, 90% on other Data. 100% opt-in to
receive third party information.
•         Name, Title, Email, Phone Number, Company name,
Web Address, Physical Address, SIC Code, Industry, Company Size (Employee  
and

revenue).
•         Excel or CSV. Format for unlimited usage
•        We can provide you database from North America, Latin
America, EMEA and APAC
•        Verified, validated, accurate and up-to-date
contact details of users, customers and business professionalsstyle="color:rgb(34,34,34)">




style="margin-bottom:0.0001pt;line-height:normal">style="color:black"> 


style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)">We
also have other technology users like:style="color:rgb(34,34,34)">


style="width:175.25pt;border-collapse:collapse" width="234" cellspacing="0"  
cellpadding="0" border="0">

 
  style="width:67.6pt;border-width:1pt;border-style:solid;border-color:windowtext;background:rgb(68,114,196)  
none repeat scroll 0% 0%;padding:0in 5.4pt;height:15pt" width="90"  
valign="bottom" nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">SonicWALLstyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Fortify

  Software
  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Veeamstyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">IBM

  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Symantecstyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Qualysstyle="color:rgb(34,34,34)">

  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Sophosstyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Cigitalastyle="color:rgb(34,34,34)">

  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Trend

  Micro
  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">HP

  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">McAfeestyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Merakistyle="color:rgb(34,34,34)">

  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">FireEyestyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Impervastyle="color:rgb(34,34,34)">

  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">WatchGuardstyle="color:rgb(34,34,34)">

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">Mercury

  Interactive
  
 
 
  
  style="margin-bottom:0.0001pt;line-height:normal">lang="EN-GB">BigFix

  
  nowrap>
  style="margin-bottom:0.0001pt;line-height:normal">style="color:white">CheckPointstyle="color:rgb(34,34,34)">

  
 


style="margin-bottom:0.0001pt;line-height:normal">style="color:black"> 


style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)">Related Security  
Categories:

Cloud computing security, Backup, Disaster Recovery and Virtualization Data
Loss Prevention, Mobile security, Wireless LAN Security, Internet security,
Information security, Network security, Firewall, Data security and many  
more


style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)"> style="color:rgb(34,34,34)">


style="margin-bottom:0.0001pt;line-height:normal">style="color:rgb(31,78,121)">Please

review and let me know if you are interested and I will get back to you with
more information for the same.

Thanks,
Autumn Perry
Data Specialist

To opt-out response ‘Remove’ in the subject line.style="color:rgb(34,34,34)">



powered by GSM. Free mail merge and  
email marketing software for Gmail.

Re: Firefox-Esr version 52.3.0

[maderios]

On 08/10/2017 07:16 PM, Pierre L. wrote:


Sinon André, tu peux tenter avec un nouveau profil firefox, des fois que
ton actuel soit plombé par je ne sais quel truc...
La première des choses à faire en cas de bug, c'est d'aller voir ce qui 
se passe sur le net. Rien à voir avec l'utilisateur. Ce sont des bugs 
qui affectent en ce moment les nouvelles versions de firefox / 
thunderbird packagées pour testing et sid. En cours de résolution.


--
Maderios

Re: Thunderbird almost unusable after upgrade

[MENGUAL Jean-Philippe]

Hi,


It is a known bug we reported under number 870719. The problem is that
this release builds against GTK3 and, in stable releases (including
oldstable), it is a problem. The solution we suggest to the maintainer,
and known to work), is building against GTK2 as Thunderbird 45 was. We
are waiting for maintainers feedbacks, as we really think it is a
debian-specific bug. Debian does not have to build against GTK3 and
should not, given problems in display.


Regards,



Le 10/08/2017 à 18:29, Gene Heskett a écrit :
> On Thursday 10 August 2017 11:08:44 Joe wrote:
>
>> On Thu, 10 Aug 2017 10:24:43 -0400
>>
>> Jape Person  wrote:
>>> After this upgrade
>>>
>>> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
>>>
>>> Thunderbird in Cinnamon DE is almost completely useless because
>>> portions of its windows / text / toolbars don't repaint until the
>>> window is resized. Is anyone else seeing this?
>>>
>>> Using different desktop themes or logging in as a different user
>>> results in same behavior.
>>>
>>> I'm curious to know whether this is being seen in different desktop
>>> environments, too.
>> Not only that, but not just Thunderbird, Firefox also trashed.
>>
>> New update today OK.
>>
>> Never just have one mail client or one browser installed, at least not
>> in Sid...
> Despite a mozilla-flash update this AM, firefox is still DIW, will not 
> play a video, not even the commercial in front of it. Using chromium for 
> my default browser now.
>
> Do I detect an effort to kill mozilla/firefox?  It has not worked for any 
> videos but you-tubes in 6 months. And for the last several weeks, not 
> even there, as the debian version has no html5 support according the 
> window the video is supposed to play in.
>
> Cheers, Gene Heskett

-- 
signature_jp_2
Logo Hypra  JEAN-PHILIPPE MENGUAL
DIRECTEUR TECHNIQUE ET QUALITÉ
102, rue des poissonniers, 75018, Paris
Tel : +331 84 73 06 61  Mob : +336 76 34 93 37

jpmeng...@hypra.fr 
www.hypra.fr 
Facebook Hypra  Twitter Hypra
 Linkedin Jean-Philippe

Re: Firefox-Esr version 52.3.0

[Pierre L.]

Pas encore rebooté sur le pingouin je vous redirai ;)

Sinon André, tu peux tenter avec un nouveau profil firefox, des fois que
ton actuel soit plombé par je ne sais quel truc...
C'est un test qui coute rien en install/désinstall, faut juste lancer
Firefox avec le paramètre -p en fin de commande.
Ca t'ouvrira leur gestionnaire de profils, et là tu en crée un tout neuf
pour voir. Normalement ton actuel restera, tu pourras le retrouver au
prochain lancement avec le -p.

ps: ca marche comme ca sur l'OS du Bill... je pense que c'est aussi ok
sur le pingouin ;)



Le 10/08/2017 à 19:04, andre_deb...@numericable.fr a écrit :
> Je ne peux plus me connecter à la page iDRAC KVM
> de mon serveur, sans la moindre indication de Firefox,
> alors qu'avec Google-Chrome, ça connecte parfaitement.




signature.asc
Description: OpenPGP digital signature

Re: Firefox-Esr version 52.3.0

[andre_debian]

On Thursday 10 August 2017 18:43:53 MERLIN Philippe wrote:
> La dernière mise à jour de Firefox-Esr Sur Sid AMD64 a 
> été pour moi  catastrophique et j'ai du revenir à la version 
> antérieure  la 52.2 pour avoir un fonctionnement correct, 
> es ce que vous avez eu le  même problème avec cette 
> version de Firefox-Esr.  Philippe Merlin

Quel problème précis as tu avec la nouvelle version ESR ?

Je constate quelquesoit la nouvelle version de Firefox
ESR ou pas, une dictature des connexions toujours plus grande,
que je n'ai pas avec Google-Chrome.
Les sites non https semblent bannis.

Je ne peux plus me connecter à la page iDRAC KVM
de mon serveur, sans la moindre indication de Firefox,
alors qu'avec Google-Chrome, ça connecte parfaitement.

André

Re: busqueda en postfix

[Felix Perez]

El 10 de agosto de 2017, 12:42, Esteban Monge
 escribió:
> cat /var/log/mail | grep "loquevayaabuscar" > /archivosalida.txt
>
> Sería algo así, cambia las rutas según corresponda

Un vistazo rápido al manual y no veo que haya algo desde postfix.
http://www.postfix.org/postfix-manuals.html

>
> On August 10, 2017 10:45:29 AM CST, l...@ida.cu wrote:
>>>
>>>
>>>  Buenas
>>>
>>>  mira el archivo de  log /var/log/mail.log*
>>>  ahi se guarda el log de postfix
>>>  si tenes una configuración estándar.
>>>
>>>  saludos
>>>  --
>>>
>>>  Matias Mucciolo
>>>
>>>  Area de Infraestructura.
>>>  Piedras 737 C.A.B.A
>>>  SUTEBA
>>>
>>>  On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:

  buenos días a todos

  Es de Postfix

  Necesito buscar por consola con un comando  los ultimos correos
 enviados
  y
  recibidos por usura...@correo.com.

  Lo que me interesa es el día y la hora, no es necesario el contenido
 del
  mensaje ni  aquien se le envia o recibe.

  Me pueden ayudar es una unrgencia

  Atte y agradecido es un apuro grande
>>>
>>>
>>>
>>>
>>
>> Si pero lo necesito sacar para un fichero esa informaci'on por un comando
>> no se si es GREP pero no se como usarlo
>>
>> Me pueden ayudar ???
>>
>>
>
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity.



-- 
usuario linux  #274354
normas de la lista:  http://wiki.debian.org/es/NormasLista
como hacer preguntas inteligentes:
http://www.sindominio.net/ayuda/preguntas-inteligentes.html

Re: busqueda en postfix

[Matias Mucciolo]

algo parecido a ese comando

primero haces un cat y grepeas la direccion que queres
miras el queue ID.. por ejemplo 34C1D4CECE9B

Y si es el que te interesa por hora/fecha
podes hacer:

cat /var/log/mail.log | grep 34C1D4CECE9B > /tmp/mai-id-34C1D4CECE9B.txt

y en ese archivo(/tmp/mai-id-34C1D4CECE9B.txt) te queda la "transacción" de ese 
correo.

saludos
Matias


On Thursday 10 August 2017 10:42:34 Esteban Monge wrote:
> cat /var/log/mail | grep "loquevayaabuscar" > /archivosalida.txt
> 
> Sería algo así, cambia las rutas según corresponda 
> 
> On August 10, 2017 10:45:29 AM CST, l...@ida.cu wrote:
> >>
> >> Buenas
> >>
> >> mira el archivo de  log /var/log/mail.log*
> >> ahi se guarda el log de postfix
> >> si tenes una configuración estándar.
> >>
> >> saludos
> >> --
> >>
> >> Matias Mucciolo
> >>
> >> Area de Infraestructura.
> >> Piedras 737 C.A.B.A
> >> SUTEBA
> >>
> >> On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
> >>> buenos días a todos
> >>>
> >>> Es de Postfix
> >>>
> >>> Necesito buscar por consola con un comando  los ultimos correos
> >enviados
> >>> y
> >>> recibidos por usura...@correo.com.
> >>>
> >>> Lo que me interesa es el día y la hora, no es necesario el contenido
> >del
> >>> mensaje ni  aquien se le envia o recibe.
> >>>
> >>> Me pueden ayudar es una unrgencia
> >>>
> >>> Atte y agradecido es un apuro grande
> >>>
> >>>
> >>
> >
> >Si pero lo necesito sacar para un fichero esa informaci'on por un
> >comando
> >no se si es GREP pero no se como usarlo
> >
> >Me pueden ayudar ???
> 
> -- 
> Sent from my Android device with K-9 Mail. Please excuse my brevity.

Firefox-Esr version 52.3.0

[MERLIN Philippe]

Bonjour,
La dernière mise à jour de Firefox-Esr Sur Sid AMD64 a 
été pour moi  
catastrophique et j'ai du revenir à la version antérieure 
la 52.2 pour avoir 
un fonctionnement correct, es ce que vous avez eu le 
même problème avec cette 
version de Firefox-Esr.
Philippe Merlin

Re: busqueda en postfix

[Esteban Monge]

cat /var/log/mail | grep "loquevayaabuscar" > /archivosalida.txt

Sería algo así, cambia las rutas según corresponda 

On August 10, 2017 10:45:29 AM CST, l...@ida.cu wrote:
>>
>> Buenas
>>
>> mira el archivo de  log /var/log/mail.log*
>> ahi se guarda el log de postfix
>> si tenes una configuración estándar.
>>
>> saludos
>> --
>>
>> Matias Mucciolo
>>
>> Area de Infraestructura.
>> Piedras 737 C.A.B.A
>> SUTEBA
>>
>> On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
>>> buenos días a todos
>>>
>>> Es de Postfix
>>>
>>> Necesito buscar por consola con un comando  los ultimos correos
>enviados
>>> y
>>> recibidos por usura...@correo.com.
>>>
>>> Lo que me interesa es el día y la hora, no es necesario el contenido
>del
>>> mensaje ni  aquien se le envia o recibe.
>>>
>>> Me pueden ayudar es una unrgencia
>>>
>>> Atte y agradecido es un apuro grande
>>>
>>>
>>
>
>Si pero lo necesito sacar para un fichero esa informaci'on por un
>comando
>no se si es GREP pero no se como usarlo
>
>Me pueden ayudar ???

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Re: busqueda en postfix

[Dixan Rivas]

Esto es más de filtrar con grep el mail.log no algo específico de postfix.

Saludos

El 10 ago. 2017 17:38, "Matias Mucciolo"  escribió:



On Thursday 10 August 2017 13:30:45 Cristian Mitchell wrote:
> El 10 de agosto de 2017, 13:20, Matias Mucciolo
> escribió:
>
> >
> > Buenas
> >
> > mira el archivo de  log /var/log/mail.log*
> > ahi se guarda el log de postfix
> > si tenes una configuración estándar.
> >
> > saludos
> > --
> >
> > Matias Mucciolo
> >
> > Area de Infraestructura.
> > Piedras 737 C.A.B.A
> > SUTEBA
> >
> > On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
> > > buenos días a todos
> > >
> > > Es de Postfix
> > >
> > > Necesito buscar por consola con un comando  los ultimos correos
enviados
> > y
> > > recibidos por usura...@correo.com.
> > >
> > > Lo que me interesa es el día y la hora, no es necesario el contenido
del
> > > mensaje ni  aquien se le envia o recibe.
> > >
> > > Me pueden ayudar es una unrgencia
> > >
> > > Atte y agradecido es un apuro grande
> > >
> > >
> >
> >
> postcat
>

no postcat no es para eso...
postcat te muestra el contenido de un correo si esta "todavia" en cola.

saludos.

Re: busqueda en postfix

[luis]

>
> Buenas
>
> mira el archivo de  log /var/log/mail.log*
> ahi se guarda el log de postfix
> si tenes una configuración estándar.
>
> saludos
> --
>
> Matias Mucciolo
>
> Area de Infraestructura.
> Piedras 737 C.A.B.A
> SUTEBA
>
> On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
>> buenos días a todos
>>
>> Es de Postfix
>>
>> Necesito buscar por consola con un comando  los ultimos correos enviados
>> y
>> recibidos por usura...@correo.com.
>>
>> Lo que me interesa es el día y la hora, no es necesario el contenido del
>> mensaje ni  aquien se le envia o recibe.
>>
>> Me pueden ayudar es una unrgencia
>>
>> Atte y agradecido es un apuro grande
>>
>>
>

Si pero lo necesito sacar para un fichero esa informaci'on por un comando
no se si es GREP pero no se como usarlo

Me pueden ayudar ???

Re: busqueda en postfix

[Matias Mucciolo]

On Thursday 10 August 2017 13:30:45 Cristian Mitchell wrote:
> El 10 de agosto de 2017, 13:20, Matias Mucciolo
> escribió:
> 
> >
> > Buenas
> >
> > mira el archivo de  log /var/log/mail.log*
> > ahi se guarda el log de postfix
> > si tenes una configuración estándar.
> >
> > saludos
> > --
> >
> > Matias Mucciolo
> >
> > Area de Infraestructura.
> > Piedras 737 C.A.B.A
> > SUTEBA
> >
> > On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
> > > buenos días a todos
> > >
> > > Es de Postfix
> > >
> > > Necesito buscar por consola con un comando  los ultimos correos enviados
> > y
> > > recibidos por usura...@correo.com.
> > >
> > > Lo que me interesa es el día y la hora, no es necesario el contenido del
> > > mensaje ni  aquien se le envia o recibe.
> > >
> > > Me pueden ayudar es una unrgencia
> > >
> > > Atte y agradecido es un apuro grande
> > >
> > >
> >
> >
> postcat
> 

no postcat no es para eso...
postcat te muestra el contenido de un correo si esta "todavia" en cola.

saludos.

debian 9.1 dpkg error when installing xemacs and erlang

[Rémy Noulin]

On a freshly installed debian 9.1, apt-get fails to install xemacs due to
some compilation related to erlang, here is the interesting part of log:

Compiling /usr/share/xemacs21/site-lisp/erlang/erldoc.el...
While compiling toplevel forms in file
/usr/share/xemacs21/site-lisp/erlang/erldoc.el:
  !! File error (("Cannot open load file" "cl-lib"))
>>Error occurred processing erldoc.el: Cannot open load file: cl-lib

Compiling /usr/share/xemacs21/site-lisp/erlang/path.el...
Wrote /usr/share/xemacs21/site-lisp/erlang/path.elc
Done
ERROR: install script from erlang-mode package failed
dpkg: error processing package xemacs21-mule (--configure):
 subprocess installed post-installation script returned error exit status 1
dpkg: dependency problems prevent configuration of xemacs21:
 xemacs21 depends on xemacs21-mule (>= 21.4.24-4) | xemacs21-mule-canna-wnn
(>= 21.4.24-4) | xemacs21-nomule (>= 21.4.24-4); however:
  Package xemacs21-mule is not configured yet.
  Package xemacs21-mule-canna-wnn is not installed.
  Package xemacs21-nomule is not installed.

dpkg: error processing package xemacs21 (--configure):
 dependency problems - leaving unconfigured
Errors were encountered while processing:
 xemacs21-mule
 xemacs21
E: Sub-process /usr/bin/dpkg returned an error code (1)


Cheers
Remy

Re: busqueda en postfix

[Cristian Mitchell]

El 10 de agosto de 2017, 13:20, Matias Mucciolo
escribió:

>
> Buenas
>
> mira el archivo de  log /var/log/mail.log*
> ahi se guarda el log de postfix
> si tenes una configuración estándar.
>
> saludos
> --
>
> Matias Mucciolo
>
> Area de Infraestructura.
> Piedras 737 C.A.B.A
> SUTEBA
>
> On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
> > buenos días a todos
> >
> > Es de Postfix
> >
> > Necesito buscar por consola con un comando  los ultimos correos enviados
> y
> > recibidos por usura...@correo.com.
> >
> > Lo que me interesa es el día y la hora, no es necesario el contenido del
> > mensaje ni  aquien se le envia o recibe.
> >
> > Me pueden ayudar es una unrgencia
> >
> > Atte y agradecido es un apuro grande
> >
> >
>
>
postcat



-- 
MrIX
Linux user number 412793.
http://counter.li.org/

las grandes obras,
las sueñan los santos locos,
las realizan los luchadores natos,
las aprovechan los felices cuerdo,
y las critican los inútiles crónicos,

Re: Thunderbird almost unusable after upgrade

[Gene Heskett]

On Thursday 10 August 2017 11:08:44 Joe wrote:

> On Thu, 10 Aug 2017 10:24:43 -0400
>
> Jape Person  wrote:
> > After this upgrade
> >
> > thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
> >
> > Thunderbird in Cinnamon DE is almost completely useless because
> > portions of its windows / text / toolbars don't repaint until the
> > window is resized. Is anyone else seeing this?
> >
> > Using different desktop themes or logging in as a different user
> > results in same behavior.
> >
> > I'm curious to know whether this is being seen in different desktop
> > environments, too.
>
> Not only that, but not just Thunderbird, Firefox also trashed.
>
> New update today OK.
>
> Never just have one mail client or one browser installed, at least not
> in Sid...

Despite a mozilla-flash update this AM, firefox is still DIW, will not 
play a video, not even the commercial in front of it. Using chromium for 
my default browser now.

Do I detect an effort to kill mozilla/firefox?  It has not worked for any 
videos but you-tubes in 6 months. And for the last several weeks, not 
even there, as the debian version has no html5 support according the 
window the video is supposed to play in.

Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Genes Web page 

Re: busqueda en postfix

[Matias Mucciolo]

Buenas 

mira el archivo de  log /var/log/mail.log*
ahi se guarda el log de postfix
si tenes una configuración estándar.

saludos
-- 

Matias Mucciolo

Area de Infraestructura.
Piedras 737 C.A.B.A 
SUTEBA 

On Thursday 10 August 2017 12:21:22 l...@ida.cu wrote:
> buenos días a todos
> 
> Es de Postfix
> 
> Necesito buscar por consola con un comando  los ultimos correos enviados y
> recibidos por usura...@correo.com.
> 
> Lo que me interesa es el día y la hora, no es necesario el contenido del
> mensaje ni  aquien se le envia o recibe.
> 
> Me pueden ayudar es una unrgencia
> 
> Atte y agradecido es un apuro grande
> 
>

busqueda en postfix

[luis]

buenos días a todos

Es de Postfix

Necesito buscar por consola con un comando  los ultimos correos enviados y
recibidos por usura...@correo.com.

Lo que me interesa es el día y la hora, no es necesario el contenido del
mensaje ni  aquien se le envia o recibe.

Me pueden ayudar es una unrgencia

Atte y agradecido es un apuro grande

Re: Help with USB audio card

[Curt]

On 2017-08-10, Rodolfo Medina  wrote:
>>
>> Perhaps comment out the following line in '/etc/modprobe.d/alsa-base.conf':
>>
>>  # Keep snd-usb-audio from beeing  loaded as first soundcard
>>  options snd-usb-audio index=-2
>
>
> No  '/etc/modprobe.d/alsa-base.conf' on my PC...  /etc/modprobe.d is empty.
> There's /usr/share/alsa.conf, but it doesn't contain any occurrence of `usb'.

https://wiki.debian.org/ALSA

?

/etc/modprobe.d/sound 


  options snd-usb-audio index=0
  options snd_hda_codec_hdmi(or whatever it's called)=1
  options snd(etc...)=2

There's a plethora of info on sound card ordering, but much of it is
obsolete I'm afraid.

Whether making the usb dongle the default card by creating a ~.asoundrc file:

pcm.!default {
type hw
card 2
}

ctl.!default {
type hw
card 2
} 

would work or not I dunno. I read that for the Lenovo to get an external
usb sound card working the card must be indexed as card 0 (numero uno).


> Thanks,
>
> Rodolfo
>
>


-- 
"Until the Lion learns to write, tales of the hunt shall always glorify the 
Hunter."
— African proverb

Re: Thunderbird almost unusable after upgrade

[Cindy-Sue Causey]

On 8/10/17, Joe  wrote:
> On Thu, 10 Aug 2017 10:24:43 -0400
> Jape Person  wrote:
>
>> After this upgrade
>>
>> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
>>
>> Thunderbird in Cinnamon DE is almost completely useless because
>> portions of its windows / text / toolbars don't repaint until the
>> window is resized. Is anyone else seeing this?
>>
>> Using different desktop themes or logging in as a different user
>> results in same behavior.
>>
>> I'm curious to know whether this is being seen in different desktop
>> environments, too.
>>
>
> Not only that, but not just Thunderbird, Firefox also trashed.
>
> New update today OK.


Coincidentally I had just seen this in my inbox earlier:

[SECURITY] [DSA 3928-1] firefox-esr security update; Moritz
Muehlenhoff; 2017.08.10
https://lists.debian.org/debian-security-announce/2017/msg00190.html

I'm only seeing Jessie and Stretch get a mention. I'm current and
haven't seen anything about a new update in Buster.


> Never just have one mail client or one browser installed, at least not
> in Sid...

I resemble that fact. If you lose your primary, how are you ever going
to track down a backup when the primary breaks. Never mind, am
smacking my head as fast as I wrote that. Via terminal command line,
one could:

[your-CHOICE-of-package-manager] search web browser

And then install... via that same terminal command line interface.

But if you were in an emergency situation of need, that's when an
immediately accessible secondary browser would matter. *been there,
done that (on dialup)* :)

Cindy :)
-- 
Cindy-Sue Causey
Talking Rock, Pickens County, Georgia, USA

* runs with duct tape *

Re: Help with USB audio card

[Rodolfo Medina]

Curt  writes:

> On 2017-08-10, Rodolfo Medina  wrote:
>>>
>>> This makes no sense BTW. Unmuted everything? You're *recording*, so what
>>> you want to do in alsamixer is to select your external usb audio card
>>> (F6), display its capture device(s) (F5), and toggle on the input
>>> channel of your choice (space bar).
>>>
>>> But I assume you have arrived at this crucial result in one way or another.
>>
>>
>> I did.  Besides, the USB card does not even work with headphones: when
>> headphones are plugged into it, no sound is heard from them.
>
> Try making the USB audio dongle the first sound card (0).
>
> I'm not certain how to do that.
>
> Perhaps comment out the following line in '/etc/modprobe.d/alsa-base.conf':
>
>  # Keep snd-usb-audio from beeing  loaded as first soundcard
>  options snd-usb-audio index=-2


No  '/etc/modprobe.d/alsa-base.conf' on my PC...  /etc/modprobe.d is empty.
There's /usr/share/alsa.conf, but it doesn't contain any occurrence of `usb'.

Thanks,

Rodolfo

Re: Thunderbird almost unusable after upgrade

[Joe]

On Thu, 10 Aug 2017 10:24:43 -0400
Jape Person  wrote:

> After this upgrade
> 
> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
> 
> Thunderbird in Cinnamon DE is almost completely useless because
> portions of its windows / text / toolbars don't repaint until the
> window is resized. Is anyone else seeing this?
> 
> Using different desktop themes or logging in as a different user
> results in same behavior.
> 
> I'm curious to know whether this is being seen in different desktop 
> environments, too.
> 

Not only that, but not just Thunderbird, Firefox also trashed.

New update today OK.

Never just have one mail client or one browser installed, at least not
in Sid...

-- 
Joe 

Re: Help with USB audio card

[Curt]

On 2017-08-10, Rodolfo Medina  wrote:
>>
>> This makes no sense BTW. Unmuted everything? You're *recording*, so what
>> you want to do in alsamixer is to select your external usb audio card
>> (F6), display its capture device(s) (F5), and toggle on the input
>> channel of your choice (space bar).
>>
>> But I assume you have arrived at this crucial result in one way or another.
>
>
> I did.  Besides, the USB card does not even work with headphones: when
> headphones are plugged into it, no sound is heard from them.

Try making the USB audio dongle the first sound card (0).

I'm not certain how to do that.

Perhaps comment out the following line in '/etc/modprobe.d/alsa-base.conf':

 # Keep snd-usb-audio from beeing  loaded as first soundcard
 options snd-usb-audio index=-2


> Rodolfo
>
>


-- 
"Until the Lion learns to write, tales of the hunt shall always glorify the 
Hunter."
— African proverb

Re: Thunderbird almost unusable after upgrade

[Sven Joachim]

On 2017-08-10 10:24 -0400, Jape Person wrote:

> After this upgrade
>
> thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)
>
> Thunderbird in Cinnamon DE is almost completely useless because
> portions of its windows / text / toolbars don't repaint until the
> window is resized. Is anyone else seeing this?

Yes, see https://bugs.debian.org/871629.

> Using different desktop themes or logging in as a different user
> results in same behavior.
>
> I'm curious to know whether this is being seen in different desktop
> environments, too.

This is independent of the desktop environment.

Cheers,
   Sven

Re: When did Debian decide to enable PIE by default?

[慕 冬亮]

On 08/09/2017 10:48 AM, Gene Heskett wrote:
> On Wednesday 09 August 2017 10:31:48 Thomas Schmitt wrote:
>
>> Hi,
>>
>> 慕 冬亮  wrote:
>>> When does Debian Team, or Security Team decide to enable PIE by
>>> default?
>> I guess it was one year ago. At least that's the dates one can see on
>>https://wiki.debian.org/Hardening/PIEByDefaultTransition
>>
> Interesting Thomas, but what the heck is PIE?  I know about PAE, but PIE?
> Whats it do?  Searching the above wiki returned only this thread.
Please take a look at the following URL:

https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_PIE_.28gcc.2Fg.2B-.2B-_-fPIE_-pie.29

It is a security feature which combines with ASLR to do full address 
space randomization.
> Thanks, you too.
>> Have a nice day :)
>>
>> Thomas
>
> Cheers, Gene Heskett

-- 

---
My best regards to you.

  No System Is Safe!
  Dongliang Mu

Thunderbird almost unusable after upgrade

[Jape Person]

After this upgrade

thunderbird:amd64 (1:52.2.1-4, 1:52.2.1-4+b1)

Thunderbird in Cinnamon DE is almost completely useless because portions 
of its windows / text / toolbars don't repaint until the window is 
resized. Is anyone else seeing this?


Using different desktop themes or logging in as a different user results 
in same behavior.


I'm curious to know whether this is being seen in different desktop 
environments, too.


JP

Re: Hibernate in stretch

[solitone]

On Saturday, 29 July 2017 18:40:58 CEST solitone wrote:
> From what I gather, the patch was included in kernel version 4.8-rc2:
> 
> $ git describe bafb2f7d4755bf1571bd5e9a03b97f3fc4fe69ae
> v4.8-rc2-641-gbafb2f7d4755
> 
> The kernel shipped with Stretch is version 4.9.30:
> 
> $ uname -v
> #1 SMP Debian 4.9.30-2+deb9u2 (2017-06-26)
> 
> but we still experience the bug. This is because, if I understand it right,
> the commit containing this patch was reverted in the production kernel:
> 
> commit 0ee72d8f9b8e17b8e4ccfebc7a25cbc2d395cd6a
> Author: Greg Kroah-Hartman 
> Date:   Wed Apr 12 15:49:39 2017 +0200
> 
> Revert "drm/i915/execlists: Reset RING registers upon resume"
> 
> This reverts commit f2a0409a08502d64fbe3990354dff5902b08d2fb which is
> commit bafb2f7d4755bf1571bd5e9a03b97f3fc4fe69ae upstream.
> 
> It was reported to have problems.
> 
> I therefore wonder whether this means this bug is still there in the
> production kernel, even in versions greater than 4.9.x.

Yes, that patch ended up in v4.9.9 [1]. Then some problems were reported, and 
it was reverted in v4.9.23 with commit 
0ee72d8f9b8e17b8e4ccfebc7a25cbc2d395cd6a [2].

I have just installed kernel version 4.11.6, from stretch-backports:

~$ uname -a
Linux alan 4.11.0-0.bpo.1-amd64 #1 SMP Debian 4.11.6-1~bpo9+1 (2017-07-09) 
x86_64 GNU/Linux

With that kernel hibernate seems to work, but I need further testing. I would 
suggest you to test that kernel version as well, and post your findings here.

[1] https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9
[2] https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.23



-- 
⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁Sent from my brain using neurons fueled by glucose.
⢿⡄⠘⠷⠚⠋⠀ 
⠈⠳⣄

Re: Btrs vs ext4. Which one is more reliable?

[Dan Ritter]

On Thu, Aug 10, 2017 at 08:44:33AM -0500, David Wright wrote:
> On Thu 10 Aug 2017 at 07:04:09 (-0400), Dan Ritter wrote:
> > On Wed, Aug 09, 2017 at 09:46:09PM -0400, David Niklas wrote:
> > > On Sat, 29 Jul 2017 04:59:40 +
> > > Andy Smith  wrote:
> > > 
> > > Also, my use case is at home where the power can and *does* fail. I also
> > > find myself using the latest kernel and oftentimes an experimental driver
> > > for my AMD graphics card, hence my need for a *very* stable fs over
> > > sudden unmount.
> > 
> > Buy a cheap UPS with a USB or serial connection to your
> > computer. Even if it only supplies power for 2 minutes, that's
> > enough time for the computer to receive the power outage signal
> > and do an orderly shutdown.
> 
> Two minutes barely covers the timeouts that can often occur when
> shutting down systemd; the commonest timeout period here seems
> to be 90 seconds. I wouldn't mind reducing them if that's possible.
> Processes got just a few seconds with sysvinit before they were
> killed.

I wouldn't know; I only run systemd on throwaway test systems.

I assure you that my Debian, stretch, sysvinit firewall can shutdown
and reboot to full networking in less than 30 seconds. There's nothing
exciting going on in the hardware -- AMD Kabini (low cost, low energy,
low performance) CPU and a small cheap SSD.

30 seconds is an important target, because it's a default
timeout for lots of protocols. 

-dsr-

Re: Btrs vs ext4. Which one is more reliable?

[Dejan Jocic]

On 10-08-17, David Wright wrote:
> On Thu 10 Aug 2017 at 07:04:09 (-0400), Dan Ritter wrote:
> > On Wed, Aug 09, 2017 at 09:46:09PM -0400, David Niklas wrote:
> > > On Sat, 29 Jul 2017 04:59:40 +
> > > Andy Smith  wrote:
> > > 
> > > Also, my use case is at home where the power can and *does* fail. I also
> > > find myself using the latest kernel and oftentimes an experimental driver
> > > for my AMD graphics card, hence my need for a *very* stable fs over
> > > sudden unmount.
> > 
> > Buy a cheap UPS with a USB or serial connection to your
> > computer. Even if it only supplies power for 2 minutes, that's
> > enough time for the computer to receive the power outage signal
> > and do an orderly shutdown.
> 
> Two minutes barely covers the timeouts that can often occur when
> shutting down systemd; the commonest timeout period here seems
> to be 90 seconds. I wouldn't mind reducing them if that's possible.
> Processes got just a few seconds with sysvinit before they were
> killed.
> 

Yes, those 90 sec waiting for nothing is one of the most annoying
"features" of systemd that I would love to get rid of. And most annoying
aspect of it is that problem is rarely constant. It can exist in one
release in systemd, vanish in other, and then come back again in next
release. And it can occur once in every 10 shutdowns/reboots, or not
occur once in every 10 shutdowns/reboots.

Re: screenlock lock trops bien - stretch-

[Gabriel Santonja]

Bonjour

> light-locker
ok merci je creuse de ce coté

> Une question, quand un probleme de ce genre se présente, le signalez vous
en tant que bug a une mailing list particuliere
Non mais des fois cela me demange (pas trops longtemps je suis un peu
flemmard) . il faudrait verifier que cela n'a pas déja ete signalé et le
faire mais c'est peut etre une fonctionnalité de light-locker

Le 10 août 2017 à 13:56, Nicolas Chedaille  a écrit :

> Hola a tous!
>
> C'est mon premier message depuis longtemps mais je reviens avec envie dans
> l'univers de Debian avec un grand D ;)
>
> J'ai eu exactement le meme symptome avec XFCE sur une fresh install de
> stretch. Suite au lock de l'ecran impossible de se reconnecter sans
> repasser par la console.
>
> En passant a gnome aucune probleme. J'ai testé sur une fresh install de
> jessie avec XFCE et pas de probleme non plus. Pas eu le temps de chercher
> une solution que vous l'avez déjà trouvée et partagée :)
>
> Une question, quand un probleme de ce genre se présente, le signalez vous
> en tant que bug a une mailing list particuliere ?
>
> -- niko
>
>
>
>
> > On 10 Aug 2017, at 11:14, Jacques  wrote:
> >
> >> Le 09/08/2017 à 11:56, Gabriel Santonja a écrit :
> >> Bonjour,
> >> Je viens de migrer sur stretch a partir de jessie.
> >> Je tourne sur LXDE et quand je locke le pc avec  screenlock impossible
> de
> >> sortir de l'ecran noir
> >> le seul moyen de revenir sur la session est de repasser sur tty1 (ctrl -
> >> alt - f1) qui est maintenant l ecran de login gdm3.
> >>
> >> Auriez vous une idée je seche ...
> >> Merci
> >>
> >
> > Bonjour,
> >
> > Je rencontre le même problème que toi en utilisant XFCE après une
> > migration jessie--> strech
> >
> > Lors de la migration j'avais constaté le remplacement de xscreensaver
> > par light-locker. Ne trouvant pas de solution , j'ai donc désinstallé
> > light-locker et réinstallé xscreensaver et j'ai retrouvé un
> > fonctionnement normal lock/unlock sans devoir faire de gymnastique des
> > doigts
> >
> > Jacques
> >
>
>

Re: Debian 9.1 amd64 Xfce panel clock broken

[Charlie Kravetz]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On Wed, 9 Aug 2017 22:48:37 -0700
David Christensen  wrote:

>On 08/09/17 21:47, Charlie Kravetz wrote:
>> 
>> It almost sounds like the panel is too long for the monitor. The clock
>> is disappearing off the end of the panel. Is the clock the last thing
>> in panel? Try moving it to the other of the panel, and see if it still
>> disappears.  
>
>Clock is neither the first nor last item in the panel.
>
>
>Clock works fine on Xfce on Debian Wheezy, Debian Jesse, FreeBSD 11.0, 
>and possibly others.
>
>
>I'm looking for an error message from Xfce panel, or a way to obtain 
>error/ debug messages.
>
>
>David
>

The only way I know to do that, if nothing shows up in
~/.xsession-errors, is to run debug.

https://docs.xfce.org/xfce/xfce4-panel/debugging


- -- 
Charlie Kravetz
Linux Registered User Number 425914
[http://linuxcounter.net/user/425914.html]
Never let anyone steal your DREAM.   [http://keepingdreams.com]
-BEGIN PGP SIGNATURE-

iQEzBAEBCAAdFiEEG5QK93YKrQMH22ZTiq6LjqbJ0IAFAlmMZQEACgkQiq6LjqbJ
0IAEHwf9Fmts6Pu8dGu+8Hk1uBeDK8TCb08Imf0ZadNEXzMPTDv61Bj22+QL7fQl
qndLXFTctZ2n610ZVEzUhZT5Ss3c5m/nauGrBY+ymhpOs7VG8AO76bOgohsx7ptB
dt0VLZ8EzBCP5s3rvLIZdgfNNJSoz/L3IGm/mJXPjai3sXtAkSh3bvldMQsYpHPv
09pEISqz/EzlQhYMZo6HdOrRloQ+692pHvMoNLgMaCB22vAZZ/AD426ODrwbIZWx
YC18ukMcPazk4LiHhcv2PPvAi1qumz/f/xEfw/g53Br+M6K4kSOnndqZ8Klfc7Hh
nDE68LObxRPbgQ0ZwA1QL4uE8a5PkQ==
=SLQ/
-END PGP SIGNATURE-

Re: Btrs vs ext4. Which one is more reliable?

[David Wright]

On Thu 10 Aug 2017 at 07:04:09 (-0400), Dan Ritter wrote:
> On Wed, Aug 09, 2017 at 09:46:09PM -0400, David Niklas wrote:
> > On Sat, 29 Jul 2017 04:59:40 +
> > Andy Smith  wrote:
> > 
> > Also, my use case is at home where the power can and *does* fail. I also
> > find myself using the latest kernel and oftentimes an experimental driver
> > for my AMD graphics card, hence my need for a *very* stable fs over
> > sudden unmount.
> 
> Buy a cheap UPS with a USB or serial connection to your
> computer. Even if it only supplies power for 2 minutes, that's
> enough time for the computer to receive the power outage signal
> and do an orderly shutdown.

Two minutes barely covers the timeouts that can often occur when
shutting down systemd; the commonest timeout period here seems
to be 90 seconds. I wouldn't mind reducing them if that's possible.
Processes got just a few seconds with sysvinit before they were
killed.

> Useful packages:
> 
> apcupsd
> nut
> 
> Cyberpower's UPS systems have Linux support but not Debian
> packages; it takes about 10 minutes to download their scripts
> and figure out configuration.

Cheers,
David.

Re: Help with USB audio card

[Rodolfo Medina]

Curt  writes:

> On 2017-08-07, Rodolfo Medina  wrote:
>>
>> Besides, I ran alsamixer, selected the USB card and unmuted everything.  But
>> then, when I try to record, no sound is recorded.  I do:
>>
>
> This makes no sense BTW. Unmuted everything? You're *recording*, so what
> you want to do in alsamixer is to select your external usb audio card
> (F6), display its capture device(s) (F5), and toggle on the input
> channel of your choice (space bar).
>
> But I assume you have arrived at this crucial result in one way or another.


I did.  Besides, the USB card does not even work with headphones: when
headphones are plugged into it, no sound is heard from them.

Rodolfo

Re: no non-free firmware on lapton, no Ethernet, related?

[Emanuel Berg]

Dejan Jocic wrote:

> Also, you mentioned that you need your
> ethernet to work, these b43 packages are for
> Broadcom wireless cards.

Yes, that is what I meant in my OP, the lacking
firmware for wireless should not influence
Ethernet not working, right?

Anyway, to manually install it seems
unnecessary complicated, so I think I'll try
the ISO with the non-free firmware included.

> Whatever that you choose to do, do not forget
> to check your /etc/apt/sources.list file and
> add contrib and non-free after main wherever
> it is needed, something like this:
>
> deb http://deb.debian.org/debian/ jessie main
> contrib non-free

Yes, with Internet working it'll be no problems
setting up the system.

-- 
underground experts united
http://user.it.uu.se/~embe8573

Re: screenlock lock trops bien - stretch-

[Nicolas Chedaille]

Hola a tous!

C'est mon premier message depuis longtemps mais je reviens avec envie dans 
l'univers de Debian avec un grand D ;)

J'ai eu exactement le meme symptome avec XFCE sur une fresh install de stretch. 
Suite au lock de l'ecran impossible de se reconnecter sans repasser par la 
console.

En passant a gnome aucune probleme. J'ai testé sur une fresh install de jessie 
avec XFCE et pas de probleme non plus. Pas eu le temps de chercher une solution 
que vous l'avez déjà trouvée et partagée :)

Une question, quand un probleme de ce genre se présente, le signalez vous en 
tant que bug a une mailing list particuliere ?

-- niko




> On 10 Aug 2017, at 11:14, Jacques  wrote:
> 
>> Le 09/08/2017 à 11:56, Gabriel Santonja a écrit :
>> Bonjour,
>> Je viens de migrer sur stretch a partir de jessie.
>> Je tourne sur LXDE et quand je locke le pc avec  screenlock impossible de
>> sortir de l'ecran noir
>> le seul moyen de revenir sur la session est de repasser sur tty1 (ctrl -
>> alt - f1) qui est maintenant l ecran de login gdm3.
>> 
>> Auriez vous une idée je seche ...
>> Merci
>> 
> 
> Bonjour,
> 
> Je rencontre le même problème que toi en utilisant XFCE après une
> migration jessie--> strech
> 
> Lors de la migration j'avais constaté le remplacement de xscreensaver
> par light-locker. Ne trouvant pas de solution , j'ai donc désinstallé
> light-locker et réinstallé xscreensaver et j'ai retrouvé un
> fonctionnement normal lock/unlock sans devoir faire de gymnastique des
> doigts
> 
> Jacques
> 

Re: Help with USB audio card

[Curt]

On 2017-08-07, Rodolfo Medina  wrote:
>
> Besides, I ran alsamixer, selected the USB card and unmuted everything.  But
> then, when I try to record, no sound is recorded.  I do:
>

This makes no sense BTW. Unmuted everything? You're *recording*, so what
you want to do in alsamixer is to select your external usb audio card
(F6), display its capture device(s) (F5), and toggle on the input
channel of your choice (space bar).

But I assume you have arrived at this crucial result in one way or another.


-- 
"Until the Lion learns to write, tales of the hunt shall always glorify the 
Hunter."
— African proverb

Re: Btrs vs ext4. Which one is more reliable?

[Dan Ritter]

On Wed, Aug 09, 2017 at 09:46:09PM -0400, David Niklas wrote:
> On Sat, 29 Jul 2017 04:59:40 +
> Andy Smith  wrote:
> 
> Also, my use case is at home where the power can and *does* fail. I also
> find myself using the latest kernel and oftentimes an experimental driver
> for my AMD graphics card, hence my need for a *very* stable fs over
> sudden unmount.

Buy a cheap UPS with a USB or serial connection to your
computer. Even if it only supplies power for 2 minutes, that's
enough time for the computer to receive the power outage signal
and do an orderly shutdown.

Useful packages:

apcupsd
nut

Cyberpower's UPS systems have Linux support but not Debian
packages; it takes about 10 minutes to download their scripts
and figure out configuration.

-dsr-

Re: no non-free firmware on lapton, no Ethernet, related?

[Dejan Jocic]

On 10-08-17, Emanuel Berg wrote:
> Dejan Jocic wrote:
> 
> > Also, once, for reason unknown to me,
> > firmware from usb did not work, but installer
> > with firmware on it did. Could be that it was
> > USB fault, though not sure about it.
> > Was using that USB without problem
> > after that.
> 
> What should I do with the installer?
> 
> Do you mean this file:
> 
> https://packages.debian.org/jessie/all/firmware-b43-installer/download
> 
> ?
> 
> -- 
> underground experts united
> http://user.it.uu.se/~embe8573
> 

No, I meant downloading installer with firmware included, like for
example this one for Jessie:

https://cdimage.debian.org/cdimage/unofficial/non-free/images-including-firmware/archive/8.9.0+nonfree/multi-arch/iso-cd/

and this one for Stretch

https://cdimage.debian.org/cdimage/unofficial/non-free/images-including-firmware/9.1.0+nonfree/multi-arch/iso-cd/

Those are multiarch net install CDs that will work both for 32-bit and
64-bit PCs. You just need to choose your arch when you boot into
installer. But, if you do not want to download and use those and that
downloaded firmware did not work for you, you can download just those
packages that you need and install them with dpkg. But you will have to
do same with dependencies of those packages. Also, you mentioned that
you need your ethernet to work, these b43 packages are for Broadcom
wireless cards. 

Whatever that you choose to do, do not forget to check your
/etc/apt/sources.list file and add contrib and non-free after main
wherever it is needed, something like this:

deb http://deb.debian.org/debian/ jessie main contrib non-free

Hope that this helps.

Re: modifying debian installer image

[Fourhundred Thecat]

> On 2017-08-09 21:16, Brian wrote:
> 
> Not quite an answer to your question, but you could explore the
> suggestion in
> 
>  https://lists.debian.org/debian-user/2017/07/msg00321.html
> 
>   If you want something more complicated, like not installing systemd at
>   all, you'll have to pass --include and --exclude options to debootstrap
>   using the base-installer/includes and base-installer/excludes preseed
>   options; something like:
> 
>   base-installer/includes=sysvinit-core base-installer/excludes=systemd-sysv
> 
>   but that's totally untested.
> 
> I think this can be preseeded.
> 

thanks, but unfortunately that does not work. I have added these to my
preseeding file:

  d-i base-installer/includes sysvinit-core
  d-i base-installer/excludes systemd systemd-sysv

but systemd still is installed, and sysvinit-core is not installed

Re: How to get sha256 digest for jessie, without a dist-upgrade?

[Lck Ras]

On 08/10/2017 06:08 PM, Neo wrote:
> Hi folks
> 
> How to get sha256 digest for jessie, without a dist-upgrade?
>

I'd use sha256sum, but if you must use openssl, the version in
jessie-security has sha256.

> $ openssl version
> OpenSSL 1.0.1t  3 May 2016> $ echo test | sha256sum
> f2ca1bb6c7e907d06dafe4687e579fce76b37e4e93b7605022da52e6ccc26fd2  -
> $ echo test | openssl dgst -sha256
> (stdin)= f2ca1bb6c7e907d06dafe4687e579fce76b37e4e93b7605022da52e6ccc26fd2

Even though sha256 is not listed in the openssl output, it works if it
pass it to the command. try 'openssl list-message-digest-algorithms |
grep SHA256'. I'd think that 1.0.2 supports it, since 1.0.1 does.

Re: no non-free firmware on lapton, no Ethernet, related?

[Emanuel Berg]

Dejan Jocic wrote:

> Also, once, for reason unknown to me,
> firmware from usb did not work, but installer
> with firmware on it did. Could be that it was
> USB fault, though not sure about it.
> Was using that USB without problem
> after that.

What should I do with the installer?

Do you mean this file:

https://packages.debian.org/jessie/all/firmware-b43-installer/download

?

-- 
underground experts united
http://user.it.uu.se/~embe8573

invoke-rc.d fails to restart?

[Harald Dunkel]

Hi folks,

I have the impression that sometimes invoke-rc.d fails to
restart services with children, e.g. zabbix-agent, sssd or 
opensmtpd. The service and its children are stopped, but 
not started again. Looking at "simple" services (without 
children) there is no such problem.

It appears to be hard to reproduce, but has anybody made
a similar observation?


Regards
Harri

Re: How to get sha256 digest for jessie, without a dist-upgrade?

[Reco]

Hi.

On Thu, Aug 10, 2017 at 11:08:41AM +0200, Neo wrote:
> Hi folks
> 
> How to get sha256 digest for jessie, without a dist-upgrade?

By using sha256sum from coreutils. Why would you ever need openssl for
that?

Reco

How to get sha256 digest for jessie, without a dist-upgrade?

[Neo]

Hi folks

How to get sha256 digest for jessie, without a dist-upgrade?

stretch:

openssl version
OpenSSL 1.1.0f  25 May 2017

Message Digest commands (see the `dgst' command for more details)
blake2b512blake2s256gost  md4
md5   rmd160sha1  sha224
sha256sha384sha512

jessie:

openssl version
OpenSSL 1.0.2l  25 May 2017

Message Digest commands (see the `dgst' command for more details)
md4   md5   rmd160sha
sha1

Thank you

Tom

Re: screenlock lock trops bien - stretch-

[Jacques]

Le 09/08/2017 à 11:56, Gabriel Santonja a écrit :
> Bonjour,
> Je viens de migrer sur stretch a partir de jessie.
> Je tourne sur LXDE et quand je locke le pc avec  screenlock impossible de
> sortir de l'ecran noir
> le seul moyen de revenir sur la session est de repasser sur tty1 (ctrl -
> alt - f1) qui est maintenant l ecran de login gdm3.
> 
> Auriez vous une idée je seche ...
> Merci
> 

Bonjour,

Je rencontre le même problème que toi en utilisant XFCE après une
migration jessie--> strech

Lors de la migration j'avais constaté le remplacement de xscreensaver
par light-locker. Ne trouvant pas de solution , j'ai donc désinstallé
light-locker et réinstallé xscreensaver et j'ai retrouvé un
fonctionnement normal lock/unlock sans devoir faire de gymnastique des
doigts

Jacques

Re: Les cyber menaces basculent vers Linux et les serveurs Web

[maderios]

On 08/09/2017 11:08 PM, Jonathan bartoua Schneider wrote:
SELinux est quand même super contraignant, c'est facile quand on fait du 
Apache ou un soft packagé les règles viennent avec. Quand tu mets en 
prod ton application tu passes du temps au premier setup et à chaque 
montée de version. Généralement on le met pas sur les équipements 
backend (ie. qui ne sont pas exposés en direct).


On a suffisamment de couches de sécurité entre le monde extérieur et ces 
machines (firewall, WAF, IPS, ...)


J'ai utilisé pendant plus d'un an fedora avec selinux installé par 
défaut, je n'ai pas constaté de contraintes vraiment gênantes, même en 
installant des programmes compilés maison. Le problème n'est pas selinux 
lui-même mais la mauvaise gestion de selinux par des distributions, dont 
debian.


--
Maderios

Re: Connexion console KVM devenue impossible : résolue mais...

[Eric Degenetais]

>>Comment se fait-il que maintenant >>Java exige un certificat ?

>Résolu mais, en installant Java version >6 (la dernière étant la 8).

>Depuis la version 7, Java a durcit les connexions à certificat.

>Ça devient la dictature :-)

Ça devient la protection contre les injections de codes. RSA est, comme
l'indique le message, une signature faible.
Casser le thermomètre n'empêche pas la surchauffe.
Si une fonctionnalité tierce utilise une sécurité faible on peut être
obligé de contourner, mais il faut rendre à César ce qui appartient à
César, le coupable du problème c'est le package mal protégé, pas la JVM qui
vérifie la validité du package.

Re: Aarzel niet om een gesprek te starten met me Lisa

[richard l]

Hoi als goed xxx



Verzonden vanaf mijn Samsung Galaxy-smartphone.
 Oorspronkelijk bericht 
Van: Lisa Songnan 
Datum: 07-08-2017 18:26 (GMT+01:00)
Aan: debian-user@lists.debian.org
Onderwerp: Aarzel niet om een gesprek te starten met me Lisa



Ik bijt niet. Tenzij, als je vraag, dan wel...
http://bit.ly/2vEHPr7

Re: ipv6 - nom de domaine sur site mutualisé inaccessible - comment contourner avec linux unbound - google dns - opendns - configuration

[Pierre L.]

Ok donc effectivement, ca réduit bien les pistes...

T'es directement branché au net via ta box ? Ou un petit routeur
"personnalisable" s'interpose entre ?
-> à voir un éventuel paramétrage dans la box (option rare à ma
connaissance) et/ou dans le routeur perso, un filtrage par parefeu qui
bloquerait cette IP en destination.
Exemple un routeur sous OpenWRT, DD-WRT, Tomato... des petits firmwares
très sympas dans lesquels ont peu paramétrer ce type de filtrage (dans
quel cas t'embistrouillerait !)



Le 09/08/2017 à 15:51, G2PC a écrit :
> Oui, mes 3 pc + téléphone n'ont pas accès.
>
> C'est pour cela que je pense à un filtrage volontaire.




signature.asc
Description: OpenPGP digital signature

Re: Les cyber menaces basculent vers Linux et les serveurs Web

[Pierre L.]

Les poux !!!
Prépare ton peigne fin et tes produits anti-poux, sinon tondeuse sans
sabot (équivalent formatage...) !

:p


Le 10/08/2017 à 09:14, Txo a écrit :
> Il ne faut pas désespérer, ça va être bientôt la rentrée… Ils nous
> emmerderont avec la rentrée.




signature.asc
Description: OpenPGP digital signature

Re: Laser Printer recommendation...

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Aug 09, 2017 at 10:12:50PM -0400, David Niklas wrote:
> On Tue, 8 Aug 2017 20:00:29 +0100
> Brian  wrote:
> > On Tue 08 Aug 2017 at 13:01:30 -0500, Doug wrote:
> > 
> > > It always amazes me that people who get a driver made specifically
> > > for a device, a driver that has significantly more capability than
> > > one that came with their Linux os,
> > > would refuse to use it. It hasn't cost them anything, just as the
> > > Linux os hasn't cost them anything, so it is FREE. (Don't tell me
> > > they paid for it with the printer--they
> > > couldn't have bought the printer without subsidizing the driver, so
> > > essentially it is free.)  Same goes for video drivers. It's like
> > > trying to swim with one hand tied behind your back.  
> > 
> > It's strange, isn't it, that some people do not want to knuckle under
> > and do what they are told is best for them. The same people want some
> > control over the goods they own and the services they use. Wierdos.
> > 
> > Ignore them and join the hive.
> > 
> 
> Well, on top of being able to use a pretested and know good
> non-proprietary driver there are other reasons
> 
> https://www.eff.org/deeplinks/2017/06/printer-tracking-dots-back-news
> 
> Not to mention that some people think that proprietary drivers utilize
> more ink than their FLOSS counterparts, and if Amazon reviews is any
> indication, then manufacturers *do* want you to use more ink and newer
> printers *do* use more ink. The question is, do manufacturers use
> drivers, firmware, or both to achieve this end?

Having watched this train wreck that car manufacturers (especially, but
not only, the German ones) are having with their emmission controls, I'd
say that the whole system is set up for that, and that it would take a
saint at every strategic place in a company for a manufacturer not to
fall into such shenanigans.

Your Samsung TV phones home. Your Microsoft developer tools generate
code that phones home (not to you, the developer, but to Microsoft;
caught red-handed, they just said "Ooops" and "fixed" that). Why
shouldn't your printer spill more ink^H^H^H effort on the page?
Especially when it can be argued that "under special circumstances,
it might possibly look better"?

Enjoy the ride while it lasts ;-D

- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlmMFW4ACgkQBcgs9XrR2kY0nQCfV5fbjlC6za3X3sxIvK4iehk2
6CAAn0vM8GCvGfcoKpe4thYSm1UDqNnG
=d1h+
-END PGP SIGNATURE-

Re: When did Debian decide to enable PIE by default?

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Aug 09, 2017 at 08:22:58PM -0400, Gene Heskett wrote:
> On Wednesday 09 August 2017 10:52:26 慕 冬亮 wrote:
> 
> > On 08/09/2017 10:48 AM, Gene Heskett wrote:
> > > On Wednesday 09 August 2017 10:31:48 Thomas Schmitt wrote:
> > >> Hi,
> > >>
> > >> 慕 冬亮  wrote:
> > >>> When does Debian Team, or Security Team decide to enable PIE by
> > >>> default?
> > >>
> > >> I guess it was one year ago. At least that's the dates one can see
> > >> on https://wiki.debian.org/Hardening/PIEByDefaultTransition
> > >
> > > Interesting Thomas, but what the heck is PIE?  I know about PAE, but
> > > PIE? Whats it do?  Searching the above wiki returned only this
> > > thread.
> >
> > Please take a look at the following URL:
> >
> > https://wiki.debian.org/Hardening#DEB_BUILD_HARDENING_PIE_.28gcc.2Fg.2
> >B-.2B-_-fPIE_-pie.29
> >
> Aha, another name for PIC, which I've only been writing code that uses it 
> for 32 years. Also known as PCR, for Program Counter Relative.  Such 
> code can be loaded into memory and executed without any patching.

Not exactly. PIC is "position independent code". Shared libraries have
been compiled like that for a long time since (especially under 32 bits)
you never knew where was a hole in memory to mmap the library in.

PIE is "position independent executable": it's about using PIC in the
Executable -- since that's the first to map in, the whole (well, nearly)
address space is available, and there's no need to generate PIC. Since
(under Intel) PIC is a tad slower than non-PIC, well...

But thanks PIE you can map the executable itself into a random address
(ASLR), which makes it more difficult for an attacker to find useful
"tools" in the executable image.

> > It is a security feature which combines with ASLR to do full address
> > space randomization.

Yes.

Cheers
- -- tomás
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlmMEqkACgkQBcgs9XrR2kasngCeI49Xp+FPFo34Uy7FXvro2Vzq
+VMAn1QCl0A+qu/5PK9hua7Hp8q8ZJP7
=KyAN
-END PGP SIGNATURE-

Re: When did Debian decide to enable PIE by default?

[tomas]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Wed, Aug 09, 2017 at 02:49:06PM +, 慕 冬亮 wrote:
> 
> 
> On 08/09/2017 10:31 AM, Thomas Schmitt wrote:
> > Hi,
> >
> > 慕 冬亮  wrote:
> >> When does Debian Team, or Security Team decide to enable PIE by default?
> > I guess it was one year ago. At least that's the dates one can see on
> >https://wiki.debian.org/Hardening/PIEByDefaultTransition
> Such a good news for me, a student learning information security. 
> However, I have a doubt, why does Debian enable PIE by default, other 
> than stack protector and FORTIFY_SOURCE that are already enabled by 
> default in the Ubuntu distribution?
> 
> I think stack protector(FORTIFY_SOURCE) has less overhead than PIE.

As far as I understand, stack protection and/or FORTIFY_SOURCE are
about protecting from buffer overflows. Stack protection sounds
pretty generic, in the case of FORTIFY_SOURCE, it's the compiler
doing extra compile-time checks (when possible) and inserting extra
run-time check code.

PIE isn't a security measure in itself -- it just allows such code
to be dynamically mapped at any address. But it enables address space
layout randomisation [1], which isn't a security measure in itself
either, but a *mitigation* technique: if an attacker has already
managed to take control of your program counter (e.g. by rewriting
a return address... possibly via a stack overflow, see above), you
make his/her life harder by not putting (potentially useful) code
at a place (s)he knows how to find.

It's like putting a chair in a dark room. Of course you should
try to make your door and lock as secure as possible. But just
in case...

>   No System Is Safe!

exactly :-)

Cheers
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.12 (GNU/Linux)

iEYEARECAAYFAlmMERMACgkQBcgs9XrR2kantACfXjHdLt0pWUu3sV6sui/8SB4F
J7UAnR0WzXmHw2WETK9UddYeHTjmc1u/
=MhEm
-END PGP SIGNATURE-

Re: Les cyber menaces basculent vers Linux et les serveurs Web

[Txo]

Le 09/08/2017 à 23:59, Ph. Gras a écrit :
> Salut,
> 
>> 
> 
> l'hiver, ils nous emmerdent avec la grippe et l'été avec les virus
> informatiques.
> 
> Je hais la modernité.
> 
Il ne faut pas désespérer, ça va être bientôt la rentrée… Ils nous
emmerderont avec la rentrée.


-- 
-- Dominique Marin http://txodom.free.fr  --
 « Si tu ne participes pas à la lutte,
 tu participeras à la défaite »
--   Brecht   --

Re: When did Debian decide to enable PIE by default?

[Joe]

On Wed, 9 Aug 2017 20:45:06 -0400
Gene Heskett  wrote:


> >  
> It is NOT a new invention by any means. Motorola's micro-processor in
> the first TRS-80 Color Computer, the MC6809E in the early 1980's was
> built with that in mind.  And I've been writing assembly code that
> used it ever since.
> 
> So its only new to the wintel scene. :)  I assume moto's patents had
> to expire before anybody else could use it.

And it wasn't new to microprocessors. The DG Nova was using it rather
earlier, and I assume the PDPs had it. And so on...

http://users.rcn.com/crfriend/museum/doco/DG/Nova/base-instr.html

-- 
Joe