Re: [DNG] [OT] Future codename proposal (was: Devuan ASCII 2.0.0 stable)
Irrwahn wrote on 10.06.2018 19:52: > I wonder if someone could sweet-talk the CSBN of the IAU into > creating the precondition for us to dub Devuan 21.0.0 UTF-8. Corr.: Of course that would be Devuan 22.0.0 UTF-8. :-° signature.asc Description: OpenPGP digital signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] DSA Ascii Jun11
Fri, 08 Jun 2018 21:51:39 + [SECURITY] [DSA 4223-1] gnupg1 security update Patched Version: 1.4.21-4+deb9u1 Confirmed: ascii-security Note: Beowulf contains version 1.4.22-4 Fri, 08 Jun 2018 21:51:34 + [SECURITY] [DSA 4222-1] gnupg2 security update Patched Version: 2.1.18-8~deb9u2 Confirmed: ascii-security Fri, 8 Jun 2018 22:24:04 +0200 [SECURITY] [DSA 4221-1] libvncserver security update Patched Version: 0.9.11+dfsg-1+deb9u1 Confirmed: ascii-security Note: Beowulf contains version 0.9.11+dfsg-1 Fri, 08 Jun 2018 09:31:46 + [SECURITY] [DSA 4219-1] jruby security update Patched Version: 1.7.26-1+deb9u1 Confirmed: ascii-security Wed, 06 Jun 2018 18:52:34 + [SECURITY] [DSA 4218-1] memcached security update Patched Version: 1.4.33-1+deb9u1 Confirmed: ascii-security Fri, 8 Jun 2018 20:38:07 +0200 [SECURITY] [DSA 4220-1] firefox-esr security update Patched Version: 52.8.1esr-1~deb9u1 Confirmed: ascii-security ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] DSA Jessie Jun11
Sun, 10 Jun 2018 21:40:43 +0200 [SECURITY] [DSA 4225-1] openjdk-7 security update Patched Version: 7u181-2.6.14-1~deb8u1 Confirmed: jessie-security Fri, 08 Jun 2018 21:51:42 + [SECURITY] [DSA 4224-1] gnupg security update Patched Version: 1.4.18-7+deb8u5 Confirmed: jessie-security Fri, 08 Jun 2018 21:51:34 + [SECURITY] [DSA 4222-1] gnupg2 security update Patched Version: 2.0.26-6+deb8u2 Confirmed: jessie-security Fri, 8 Jun 2018 22:24:04 +0200 [SECURITY] [DSA 4221-1] libvncserver security update Patched Version: 0.9.9+dfsg2-6.1+deb8u3 Confirmed: jessie-security Fri, 08 Jun 2018 09:31:46 + [SECURITY] [DSA 4219-1] jruby security update This message serves as an announcement that security support for jruby in the Devuan oldstable release (devuan jessie) is now discontinued. Users of jruby in Devuan jessie that want security updates are strongly encouraged to upgrade now to the current Devuan stable release (devuan ascii). Wed, 06 Jun 2018 18:52:34 + [SECURITY] [DSA 4218-1] memcached security update Patched Version: 1.4.21-1.1+deb8u2 Confirmed: jessie-security Fri, 8 Jun 2018 20:38:07 +0200 [SECURITY] [DSA 4220-1] firefox-esr security update Patched Version: 52.8.1esr-1~deb8u1 Confirmed: jessie-security ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] DSA Devuan Jun11
[SECURITY] [DSA 4225-1] openjdk-7 security update # apt-cache policy openjdk-7-jdk openjdk-7-jdk: Installed: (none) Candidate: 7u181-2.6.14-1~deb8u1 Version table: 7u181-2.6.14-1~deb8u1 500 500 http://pkgmaster.devuan.org/merged jessie-security/main amd64 Packages 7u111-2.6.7-1~deb8u1 500 500 http://pkgmaster.devuan.org/merged jessie/main amd64 Packages [SECURITY] [DSA 4224-1] gnupg security update # apt-cache policy gnupg gnupg: Installed: 2.2.7-1 Candidate: 2.2.8-1 Version table: 2.2.8-1 500 500 http://pkgmaster.devuan.org/merged ceres/main amd64 Packages *** 2.2.7-1 500 500 http://pkgmaster.devuan.org/merged beowulf/main amd64 Packages 100 /var/lib/dpkg/status 2.1.18-8~deb9u2 500 500 http://pkgmaster.devuan.org/merged ascii-security/main amd64 Packages 2.1.18-8~deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages 1.4.18-7+deb8u5 500 500 http://pkgmaster.devuan.org/merged jessie-security/main amd64 Packages 1.4.18-7+deb8u4 500 500 http://pkgmaster.devuan.org/merged jessie/main amd64 Packages [SECURITY] [DSA 4223-1] gnupg1 security update # apt-cache policy gnupg1 gnupg1: Installed: (none) Candidate: 1.4.22-5 Version table: 1.4.22-5 500 500 http://pkgmaster.devuan.org/merged ceres/main amd64 Packages 1.4.22-4 500 500 http://pkgmaster.devuan.org/merged beowulf/main amd64 Packages 1.4.21-4+deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii-security/main amd64 Packages 1.4.21-4 500 500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages [SECURITY] [DSA 4222-1] gnupg2 security update # apt-cache policy gnupg2 gnupg2: Installed: (none) Candidate: 2.2.8-1 Version table: 2.2.8-1 500 500 http://pkgmaster.devuan.org/merged ceres/main amd64 Packages 2.2.7-1 500 500 http://pkgmaster.devuan.org/merged beowulf/main amd64 Packages 2.1.18-8~deb9u2 500 500 http://pkgmaster.devuan.org/merged ascii-security/main amd64 Packages 2.1.18-8~deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages 2.0.26-6+deb8u2 500 500 http://pkgmaster.devuan.org/merged jessie-security/main amd64 Packages 2.0.26-6+deb8u1 500 500 http://pkgmaster.devuan.org/merged jessie/main amd64 Packages [SECURITY] [DSA 4221-1] libvncserver security update # apt-cache policy libvncserver-dev libvncserver-dev: Installed: (none) Candidate: 0.9.11+dfsg-1.1 Version table: 0.9.11+dfsg-1.1 500 500 http://pkgmaster.devuan.org/merged ceres/main amd64 Packages 0.9.11+dfsg-1+deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii-security/main amd64 Packages 0.9.11+dfsg-1 500 500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages 500 http://pkgmaster.devuan.org/merged beowulf/main amd64 Packages 0.9.9+dfsg2-6.1+deb8u3 500 500 http://pkgmaster.devuan.org/merged jessie-security/main amd64 Packages 0.9.9+dfsg2-6.1+deb8u2 500 500 http://pkgmaster.devuan.org/merged jessie/main amd64 Packages [SECURITY] [DSA 4220-1] firefox-esr security update # apt-cache policy firefox-esr firefox-esr: Installed: (none) Candidate: 52.8.1esr-2 Version table: 52.8.1esr-2 500 500 http://pkgmaster.devuan.org/merged ceres/main amd64 Packages 52.8.1esr-1~deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii-security/main amd64 Packages 52.8.1esr-1~deb8u1 500 500 http://pkgmaster.devuan.org/merged jessie-security/main amd64 Packages 52.8.0esr-1 500 500 http://pkgmaster.devuan.org/merged beowulf/main amd64 Packages 52.8.0esr-1~deb9u1 100 100 http://pkgmaster.devuan.org/merged ascii-proposed-updates/main amd64 Packages 52.8.0esr-1~deb8u1 100 100 http://pkgmaster.devuan.org/merged jessie-proposed-updates/main amd64 Packages 52.6.0esr-1~deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages 52.5.0esr-1~deb8u1 500 500 http://pkgmaster.devuan.org/merged jessie/main amd64 Packages [SECURITY] [DSA 4219-1] jruby security update # apt-cache policy jruby jruby: Installed: (none) Candidate: 9.1.13.0-1 Version table: 9.1.13.0-1 500 500 http://pkgmaster.devuan.org/merged beowulf/main amd64 Packages 500 http://pkgmaster.devuan.org/merged ceres/main amd64 Packages 9.1.13.0-1~bpo9+1 100 100 http://pkgmaster.devuan.org/merged ascii-backports/main amd64 Packages 1.7.26-1+deb9u1 500 500 http://pkgmaster.devuan.org/merged ascii-security/main amd64 Packages 1.7.26-1 500 500 http://pkgmaster.devuan.org/merged ascii/main amd64 Packages 1.5.6-9 500 500 http://pkgmaster.devuan.org/merged jessie/main amd64 Packages [SECURITY] [DSA 4218-1] memcached security update # apt-cache policy memcached mem
Re: [DNG] ascii 2.0 installation confused by mount points
On Mon, Jun 11, 2018 at 07:16:52AM +0200, Didier Kryn wrote: > > If you want to share a partition (say home) between different OSes, > then, of course you have to mention it, but it's not recommendable because > config files of several applications are not backward compatible between > versions. Also private applications using dynamically linked libraries might > not find the proper version of the libraries. But of course, it is > convenient to mount the old home from another disk to copy it to the new one > to start from. I usually share /var/mail between releases. It seems to be compatible between releases (at least it has been for more than a decade), and this keeps mail from getting lost by arriving when the wrong release is in use. -- hendrik ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan ASCII 2.0.0 stable
* On 2018 10 Jun 19:04 -0500, Rick Moen wrote: > Quoting info at smallinnovations dot nl (i...@smallinnovations.nl): > > > Discussion at slashdot is a waste of time nowadays (I do have a 5 digit > > uid from the time ./ had some merits). > > {ahem} FWIW: > > rickmoen (1322) > > Karma: Excellent > > ;-> Well, Nate B. (2907) Karma: Excellent As I dilly dallied around for a few days I ended up with a four digit number. Had I been on the ball, well... I hardly check the site any more. Just looking at it this morning, it's a depressing shell of what it was years ago. R.I.P., Slashdot. - Nate -- "The optimist proclaims that we live in the best of all possible worlds. The pessimist fears this is true." Web: http://www.n0nb.us GPG key: D55A8819 GitHub: N0NB signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan ASCII 2.0.0 stable
On Sun, 10 Jun 2018 at 14:27:21 +0200 Jaromil wrote: > ahoy! > > On Sat, 09 Jun 2018, Irrwahn wrote: > >> Veteran Unix Admins wrote on 09.06.2018 07:05: >>> Dear Init Freedom Lovers >>> >>> Once again the Veteran Unix Admins salute you! >>> >>> We are happy to announce that Devuan GNU+Linux 2.0 ASCII Stable is >>> finally available.[...] >> >> Omedetō gozaimasu, Devuan ASCII! > > to the list of thanks Daniel mentions, I'd like to add you as well > Irrwahn for all the patient help you offered to this release and > together with your also Andreas Messner. Yours is the merit of > Devuan's desktop being less and less entangled by DMs/policykit mess. > > this weekend the news of our release made a splash on community fora, > namely hackernews https://news.ycombinator.com/item?id=17274623 where > our effort was always heavily denigrated and mocked, now starts > emerging some reasonable feedback. And last not least slashdot where > Bruce Perens declared his endorsement for Devuan 8^D > https://linux.slashdot.org/story/18/06/10/0321233/systemd-free-devuan-20-ascii-officially-released It made #4 in the "Most Discussed" list of topics: 440 Telsa Short-Sellers Lose $1 Billion 412 In the Trump Administration, Science Is Unwelcome. So Is Advice. 382 Should Developers Abandon Agile? 265 Systemd-Free Devuan 2.0 'ASCII' Officially Released 243 The World Isn't Prepared for Retirement Just great! Alessandro ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
[DNG] xf86EnableIOPorts: failed to set IOPL for I/O (Operation not permitted).
Приветствую. I have such an error in X.log file, that prevents normal user to run X session: xf86EnableIOPorts: failed to set IOPL for I/O (Operation not permitted) To which group normal users should be added in order to obtain missing permissions? Thanks for any advance. Андрей. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] xf86EnableIOPorts: failed to set IOPL for I/O (Operation not permitted).
On Mon, Jun 11, 2018 at 07:32:58PM +0700, Андрей wrote: > Приветствую. > > > I have such an error in X.log file, that prevents normal user to run X > session: > > xf86EnableIOPorts: failed to set IOPL for I/O (Operation not permitted) > > To which group normal users should be added in order to obtain missing > permissions? Thanks for any advance. > > I assume that's in Devuan ASCII? If this is the case, please read the Release Notes: https://files.devuan.org/devuan_ascii/Release_notes.txt under the section "Starting X from a terminal". HTH KatolaZ -- [ ~.,_ Enzo Nicosia aka KatolaZ - Devuan -- Freaknet Medialab ] [ "+. katolaz [at] freaknet.org --- katolaz [at] yahoo.it ] [ @) http://kalos.mine.nu --- Devuan GNU + Linux User ] [ @@) http://maths.qmul.ac.uk/~vnicosia -- GPG: 0B5F062F ] [ (@@@) Twitter: @KatolaZ - skype: katolaz -- github: KatolaZ ] signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan ASCII 2.0.0 stable
Less than 4 years passed and here we are: 2 stable releases. Keep up with the good work! On Mon, Jun 11, 2018 at 7:26 AM, Nate Bargmann wrote: > * On 2018 10 Jun 19:04 -0500, Rick Moen wrote: > > Quoting info at smallinnovations dot nl (i...@smallinnovations.nl): > > > > > Discussion at slashdot is a waste of time nowadays (I do have a 5 digit > > > uid from the time ./ had some merits). > > > > {ahem} FWIW: > > > > rickmoen (1322) > > > > Karma: Excellent > > > > ;-> > > Well, > > Nate B. (2907) > > Karma: Excellent > > As I dilly dallied around for a few days I ended up with a four digit > number. Had I been on the ball, well... > > I hardly check the site any more. Just looking at it this morning, it's > a depressing shell of what it was years ago. R.I.P., Slashdot. > > - Nate > > -- > > "The optimist proclaims that we live in the best of all > possible worlds. The pessimist fears this is true." > > Web: http://www.n0nb.us GPG key: D55A8819 GitHub: N0NB > > ___ > Dng mailing list > Dng@lists.dyne.org > https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng > > ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan ASCII 2.0.0 stable
On Mon, 11 Jun 2018 05:26:33 -0500, Nate wrote in message <20180611102633.nku36ffn3tfzb...@n0nb.us>: > * On 2018 10 Jun 19:04 -0500, Rick Moen wrote: > > Quoting info at smallinnovations dot nl (i...@smallinnovations.nl): > > > > > Discussion at slashdot is a waste of time nowadays (I do have a 5 > > > digit uid from the time ./ had some merits). > > > > {ahem} FWIW: > > > > rickmoen (1322) > > > > Karma: Excellent > > > > ;-> > > Well, > > Nate B. (2907) > > Karma: Excellent > > As I dilly dallied around for a few days I ended up with a four digit > number. Had I been on the ball, well... ..3 digit karma with some on-the-ball merit: ;o) http://www.groklaw.net/search.php?query=&keyType=phrase&datestart=&dateend=&topic=0&type=all&author=869&mode=search ..most of the time I was too lazy to log in, relying a little too heavily on those 2 annoying dots ID'ing my posts... -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan ASCII 2.0.0 stable
On 2018年6月11日 21:15:43 JST, Alessandro Selli wrote: >On Sun, 10 Jun 2018 at 14:27:21 +0200 >Jaromil wrote: > >> ahoy! >> >> On Sat, 09 Jun 2018, Irrwahn wrote: >> >>> Veteran Unix Admins wrote on 09.06.2018 07:05: Dear Init Freedom Lovers Once again the Veteran Unix Admins salute you! We are happy to announce that Devuan GNU+Linux 2.0 ASCII Stable is finally available.[...] >>> >>> Omedetō gozaimasu, Devuan ASCII! >> >> to the list of thanks Daniel mentions, I'd like to add you as well >> Irrwahn for all the patient help you offered to this release and >> together with your also Andreas Messner. Yours is the merit of >> Devuan's desktop being less and less entangled by DMs/policykit mess. >> >> this weekend the news of our release made a splash on community fora, >> namely hackernews https://news.ycombinator.com/item?id=17274623 where >> our effort was always heavily denigrated and mocked, now starts >> emerging some reasonable feedback. And last not least slashdot where >> Bruce Perens declared his endorsement for Devuan 8^D >> >https://linux.slashdot.org/story/18/06/10/0321233/systemd-free-devuan-20-ascii-officially-released > > It made #4 in the "Most Discussed" list of topics: > >440 Telsa Short-Sellers Lose $1 Billion >412 In the Trump Administration, Science Is Unwelcome. So Is Advice. >382 Should Developers Abandon Agile? >265 Systemd-Free Devuan 2.0 'ASCII' Officially Released >243 The World Isn't Prepared for Retirement > > Just great! > > >Alessandro > >___ >Dng mailing list >Dng@lists.dyne.org >https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng Just to say a big thanks to Dev1 dev for ascii release! keep up this wonderful work. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Runit + vdev in gnuinos jessie
On Mon, 11 Jun 2018 08:16:14 +, aitor_czr wrote in message <2318aeac-debc-a473-b489-50720e72f...@gnuinos.org>: > Hi all, > > You can test runit and vdev downloading the following image: > > http://gnuinos.org/gnuinos%20jessie/ ..I went up a step to http://gnuinos.org/index.php/en/ and found: "100% free operating system (there is not private software included in it).", where you probably meant to say: "100% free operating system (there is no proprietary software included with it)." or somesuch, i.e. s/private/proprietary/ or somesuch. > There are still some bugs pending to be fixed: > > - In live mode, the terminal (sakura in this case) doesn't work (this > is due to vdev and it's not related with runit). It works only for > root. You'll need to shutdown the system by the following way: open > sakura as root (gksudo sakura) and type "runit-init 0" ..if I first go "telinit S", and then go "runit-init S"? Would it work to go from sysv to runinit? (Tech Q) Should it work to go from sysv to runinit? (Policy Q) > - I'm not sure but i think that sudo doesn't work within a virtual > tty. > > - After a hard disk installation, a change is needed in the grub > (sysvinit is also present for now). At grub menu type ‘e’ and append > init=/sbin/runit-init to the kernel line read as follows: > > linux/boot/vmlinuz-3.16.0-4-amd64 > root=UUID=d6ff61e9-ddbc-458a-ad4e-e1664953f69d ro > init=/sbin/runtit-init ..and to switch between vdev and e.g. eudev, a new vdev-install.sh? vdev-0.1.2 can only switch between vdev and udev. > or so... And then, press ctrl+x to boot the modified boot definition. > I'll try to fix this point rebuilding the grub. > > Happy hacking <3 > > Aitor. > > > -- ..med vennlig hilsen = with Kind Regards from Arnt Karlsen ...with a number of polar bear hunters in his ancestry... Scenarios always come in sets of three: best case, worst case, and just in case. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Devuan ASCII 2.0.0 stable
Hello Devuan, I am a sysadmin, mostly deploying debian since many years. I just came across devuan for the first time and I wanted to thank you for the great work! I already switched to devuan on some systems and I very much agree with the idea of init freedom. It makes a lot of sense to me. I could never really understand why debian took another road. Thanks again! Janis, Germany On Sat, 09.06.2018 at 07:05, Veteran Unix Admins writes: > Dear Init Freedom Lovers > > Once again the Veteran Unix Admins salute you! > > We are happy to announce that Devuan GNU+Linux 2.0 ASCII Stable is > finally available. > > Devuan is a GNU+Linux distribution committed to providing a universal, > stable, dependable, free software operating system that uses and > promotes alternatives to systemd and its components. > > Devuan 2.0 ASCII runs on several architectures. Installer CD and DVD > ISOs, as well as desktop-live and minimal-live ISOs, are available for > i386 and amd64. Ready-to-use images can be downloaded for a number of > ARM platforms and SOCs, including Raspberry Pi, BeagleBone, OrangePi, > BananaPi, OLinuXino, Cubieboard, Nokia and Motorola mobile phones, and > several Chromebooks, as well as for Virtualbox/QEMU/Vagrant. > > The Devuan 2.0 ASCII installer ISOs offer a variety of Desktop > Environments including Xfce, KDE, MATE, Cinnamon, LXQt, with others > available post-install. The expert install mode now offers a choice of > either SysVinit or OpenRC as init system. In addition, there are > options for "Console productivity" with hundreds of CLI and TUI utils, > as well as a minimal base system ideal for servers. The minimal-live > image provides a full-featured console-based system with a particular > focus on accessibility. > > The desktop-live images are the recommended option for people wanting > to explore and easily install Devuan 2.0 ASCII Stable, and also for > the press and those interested in reviewing the default Xfce desktop. > > The efforts of Devuan developers are now focused on the third Devuan > release codenamed Beowulf (Planet nr. 38086). Preliminary installer > images should be ready for testing soon. > > We would like to thank the entire Devuan community for the continued > support, feedback, and collaboration. > > ## Download > > Devuan 2.0 ASCII images are available for download at: > http://files.devuan.org/devuan_ascii/ > > and from the ISO mirrors listed at: > http://devuan.org/get-devuan > > The latter URL also includes information about the official Devuan > package repositories. > > ## Release Notes > > Devuan 2.0 Stable Release notes include brief installation and > upgrading instructions, as well information on desktop session > management with the introduction of eudev and elogind, and on the new > mirror network accessible through "deb.devuan.org". > > The Devuan ASCII release notes are available at: > https://files.devuan.org/devuan_ascii/Release_notes.txt > > ## Upgrade > > Direct and easy upgrade paths from Devuan Jessie, Debian Jessie, and > Debian Stretch to Devuan 2.0 ASCII are available. > > Upgrade from Devuan Jessie: > https://devuan.org/os/documentation/dev1fanboy/upgrade-to-ascii > Migrate from Debian Jessie or Stretch: > https://devuan.org/os/documentation/dev1fanboy/migrate-to-ascii > > The following will be enough to upgrade if you are already using > Devuan ASCII Beta or Devuan ASCII RC: > apt-get update && apt-get dist-upgrade > > ## Devuan Derivatives > > Devuan is a reliable base system chosen as a base by many derivative > distributions. We are proud of the growing community of enthusiastic > developers benefiting from Devuan, and would like to acknowledge some > recent efforts based on Devuan ASCII: > > Refracta: an installable live for home computing and rescue tasks > http://sf.net/projects/refracta > > MIYO: featuring an Awesome desktop https://sf.net/projects/miyolinux/ > > FluXuan: built around Fluxbox http://fluxuan.sourceforge.io/ > > Maemo Leste: for mobile phones and tablets, including Nokia N900/N950, > Motorola Droid 4, Allwinner, and more https://maemo-leste.github.io/ > > DecodeOS: to build micro-services on anonymous network clusters over > hidden Tor services https://decodeos.dyne.org/ > > A list with more Devuan derivatives can be found at: > https://devuan.org/os/partners/devuan-distros > > ## Services offering Devuan > > Devuan is a snappy, stable base for virtual server > applications. Several providers offer ready-to-install Devuan images > on their platforms, including: > > Data Center Light: operated by a bunch of cool folks keen to give back > to the Devuan community. They have organised Devuan hackatons and have > had special offers in place on Devuan VMs https://devuanhosting.com > > OpenNebula: which offers Devuan ASCII guest images off their > marketplace and for free http://marketplace.opennebula.org > > ## Contact > > Mailing list: > https://mailinglists.dyne.org/cgi-bin/mailman/lis
Re: [DNG] Devuan ASCII 2.0.0 stable
On 11-06-18 02:02, Rick Moen wrote: > Quoting info at smallinnovations dot nl (i...@smallinnovations.nl): > >> Discussion at slashdot is a waste of time nowadays (I do have a 5 digit >> uid from the time ./ had some merits). > {ahem} FWIW: > > rickmoen (1322) > > Karma: Excellent > > ;-> > > Looking at Bruce's uid I already expected more veterans on this list :D ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Xorg, choosing setuid vs. libpam-elogind and rant about security (was: Re: Jessie -> Ascii upgrade breaks X)
Hi Joel, On Sat, Jun 09, 2018 at 01:52:06PM -1000, Joel Roth wrote: > [...] > I have and use dbus apps on my system, However, as far as > I'm aware, none of these programs has root privileges. > > As the pam/dbus/elogind/polkit mechanism is capable of > handing out root authority, and as all software has bugs, I > think we _can_ anticipate that bugs that create security holes > will be uncovered in this stack. How much scrutiny did the > developers devote? Did anyone ever consider security at > through the whole stack? Probably the developers of each > component do consider security in their own code. I'm not sure but i think there is a miss-understanding here. Neither dbus, elogind or polkit hand out "root" to other processes. dbus is just a rather standarized IPC mechanism to allow for communication between different processes. Also to make system processes (running with root permission) to talk with desktop applications. Of course, depending on the particular dbus interface the system process provides and how it implements it, this might become an attack vector. But in my oppinion this is more an issue of the system process implementation and dbus api interface definition of that service than of dbus it self. polkit is some kind of authority which is used by many system processes to figure out if a particular user or process is allowed to invoke a (in most cases dbus) api of a (maybe system) service. Wether access is granted depends on particular rules and maybe system state - here comes the session management into play. Many of the rules include a "the user must be running an active local session" statement. polkit does not perform any actions, it just veryfies that something can invoke something and reports the result back. polkit can be backed by two different session management systems, either consolekit or logind. But some desktop environments rely on a particular one. elogind itself is one of these session management implementations (providing the logind interface) and it tracks the sessions. In addition it does some things to the cgroups of the user processes and other weird things - its based on systemd-logind. In order to run without root permissions the xorg xserver relies on the session management. I think (not fully sure about this) that the session management services can also prepare permissions of device files, e.g. granting access to drm files for the x-server. That why the non-setuid xserver needs elogind or consolekit to be useable. If these are not to be used, the legacy package with setuid wrapper is needed to run x from console > Will someone who scrutinizes closer have a back door, > is that likely be true for the foreseeable future? > > In a way, running others' code is like driving: putting > oneself in the hands of strangers you've never met and > might not trust for minute in person. Well, you can say this about any software you run which you did not compile by yourself and before that, read and understood its whole source code and all of its dependencies and interactions. cheers Andreas signature.asc Description: PGP signature ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng
Re: [DNG] Runit + vdev in gnuinos jessie
Hi Arnt, On 11/06/18 16:39, Arnt Karlsen wrote: On Mon, 11 Jun 2018 08:16:14 +, aitor_czr wrote in message <2318aeac-debc-a473-b489-50720e72f...@gnuinos.org>: Hi all, You can test runit and vdev downloading the following image: http://gnuinos.org/gnuinos%20jessie/ ..I went up a step to http://gnuinos.org/index.php/en/ and found: "100% free operating system (there is not private software included in it).", where you probably meant to say: "100% free operating system (there is no proprietary software included with it)." or somesuch, i.e. s/private/proprietary/ or somesuch. Yes, you are right. I changed it, thanks. English is not my native language. In spanish we use private as synonimous of propietary (but privative might be a better option in this case). On the other hand, the website of gnuinos needs a deep update. There are still some bugs pending to be fixed: - In live mode, the terminal (sakura in this case) doesn't work (this is due to vdev and it's not related with runit). It works only for root. You'll need to shutdown the system by the following way: open sakura as root (gksudo sakura) and type "runit-init 0" ..if I first go "telinit S", and then go "runit-init S"? Would it work to go from sysv to runinit? (Tech Q) Should it work to go from sysv to runinit? (Policy Q) The best way to switch between sysvinit or runit as default init in the grub is to set the GRUB_CMDLINE_LINUX_DEFAULT system variable in /etc/default/grub. This is: GRUB_CMDLINE_LINUX_DEFAULT="init=/sbint/runit-init" or GRUB_CMDLINE_LINUX_DEFAULT="init=/lib/sysvinit/init" After that, you run update-grub2. Those init alternatives must be included in the variable SUPPORTED_INITS defined in /etc/grub.d/10_linux. For example, i have: SUPPORTED_INITS="runit=/sbin/runit-init sysvinit:/lib/sysvinit/init upstart:/sbin/upstart" I modified the default "mkconfig_other_inits.patch" quilt patch of debian, adding runit instead of systemd. - I'm not sure but i think that sudo doesn't work within a virtual tty. - After a hard disk installation, a change is needed in the grub (sysvinit is also present for now). At grub menu type ‘e’ and append init=/sbin/runit-init to the kernel line read as follows: linux/boot/vmlinuz-3.16.0-4-amd64 root=UUID=d6ff61e9-ddbc-458a-ad4e-e1664953f69d ro init=/sbin/runtit-init ..and to switch between vdev and e.g. eudev, a new vdev-install.sh? vdev-0.1.2 can only switch between vdev and udev. Yes, it will possible to change from vdev to eudev and vice versa. I used a script named "vdev-assistant" in the past (most of the code was taken from the script written by Ralph Ronnquist), but it should be named dev-assistant instead. I'll write about this in more detail, i have no time now. Have a nice day, Aitor. ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng