Re: Reverting back to the previous Chromium version

2025-04-11 Thread Christian Britz
You could grab the .deb files from snapshot.debian.org Am 12.04.25 um 06:12 schrieb local10: Hi, Is there an easy way to revert back to the previous version of Chromium? I'm running Debian 12 Bookworm. I tried the following but it didn't work: # aptitude install chromium=135.0.7049.52-1~deb1

Re: Limiting attack surface for Debian sshd

2025-04-11 Thread tomas
On Sat, Apr 12, 2025 at 01:32:06PM +0800, jeremy ardley wrote: > > On 12/4/25 13:24, to...@tuxteam.de wrote: > > So, share your wisdom with us: what makes ssh less secure than > > "a VPN"? > > > It's quite simple. If you have a VPN exposed to the internet and an ssh > service then you have two a

Re: Limiting attack surface for Debian sshd

2025-04-11 Thread jeremy ardley
On 12/4/25 13:24, to...@tuxteam.de wrote: So, share your wisdom with us: what makes ssh less secure than "a VPN"? It's quite simple. If you have a VPN exposed to the internet and an ssh service then you have two attack surfaces in parallel. Breach either one and you breach the system If

Re: Limiting attack surface for Debian sshd

2025-04-11 Thread tomas
On Fri, Apr 11, 2025 at 07:59:40PM +, Andy Smith wrote: > Hi, > > On Fri, Apr 11, 2025 at 08:12:14PM +0200, Marc SCHAEFER wrote: > > systemd dependancies that are activated on a Debian system imply a lot > > of library injections into sshd, much more than the stock OpenBSD ssh. [...] > > Wha

Re: Ethernet interfaces ignoring 'Connect Automatically' setting on Debian 12 (Bookworm)

2025-04-11 Thread jeremy ardley
On 12/4/25 11:27, Max Nikulin wrote: I had both running without conflicts on my old laptop with Ubuntu-20.04 LTS focal. I hope, Debian does not differ in this case. Just set what devices each daemon should ignore. Ethernet and WiFi were under control of NetworkManager (to have tray indicato

Reverting back to the previous Chromium version

2025-04-11 Thread local10
Hi, Is there an easy way to revert back to the previous version of Chromium? I'm running Debian 12 Bookworm. I tried the following but it didn't work:  # aptitude install chromium=135.0.7049.52-1~deb12u1 Unable to find a version "135.0.7049.52-1~deb12u1" for the package "chromium" Unable to app

Re: Ethernet interfaces ignoring 'Connect Automatically' setting on Debian 12 (Bookworm)

2025-04-11 Thread Max Nikulin
On 12/04/2025 09:58, jeremy ardley wrote: The thing to remember is you can't have NetworkManager and systemd- networkd running at the same time. I had both running without conflicts on my old laptop with Ubuntu-20.04 LTS focal. I hope, Debian does not differ in this case. Just set what device

Re: DHCP and static addresses, nothing to do with Re: Who:Bookwormv.Trixie

2025-04-11 Thread David Wright
On Fri 11 Apr 2025 at 05:45:47 (-0400), Dan Purgert wrote: > On Apr 10, 2025, David Wright wrote: > > > > On Thu 03 Apr 2025 at 06:55:10 (-0400), Greg Wooledge wrote: > > > Or you use mdns, which is the standard way of dealing with dynamic > > > resources on an unmanaged network. > > > > The resou

Re: Ethernet interfaces ignoring 'Connect Automatically' setting on Debian 12 (Bookworm)

2025-04-11 Thread jeremy ardley
On 12/4/25 08:16, coffeeforblood.pardon...@slmail.me wrote: The short version is that if the behavior with "Connect Automatically" and "Make available to other users"  is down to NetworkManager, then I sympathize with the suggestions to migrate from it to systemd-networkd. If someone could po

Re: VSFTPD fails to upload files

2025-04-11 Thread Timothy M Butterworth
On Fri, Apr 11, 2025 at 8:36 PM Zube wrote: > > All, > > > > When I try to upload a file to my VSFTPD server I receive the following > > error messages. > > > > Status: Starting upload of /srv/tftp/c2950-i6k2l2q4-mz.121-22.EA13.bin > > Command: PASV > > Response: 227 Entering Passive Mode (127,0,

Re: atftpd permission denied

2025-04-11 Thread Michael Stone
On Fri, Apr 11, 2025 at 05:49:28PM -0400, Timothy M Butterworth wrote: Do you know if there is a setting in VSFTPD to upload files? /etc/vsftpd.conf: write_enable=YES

Re: VSFTPD fails to upload files

2025-04-11 Thread Fred
On 4/11/25 16:21, Timothy M Butterworth wrote: All, When I try to upload a file to my VSFTPD server I receive the following error messages. Status: Starting upload of /srv/tftp/c2950-i6k2l2q4-mz.121-22.EA13.bin Command: PASV Response: 227 Entering Passive Mode (127,0,0,1,250,228). Command: ST

Re: Ethernet interfaces ignoring 'Connect Automatically' setting on Debian 12 (Bookworm)

2025-04-11 Thread coffeeforblood . pardon117
Thank you for the continued responses. I performed some very basic testing using a Debian 12.8.0 Live CD. The results were confusing and highlighted some issues with the creation of network profiles in general, at least from my point of view. The short version is that if the behavior with "Con

VSFTPD fails to upload files

2025-04-11 Thread Timothy M Butterworth
All, When I try to upload a file to my VSFTPD server I receive the following error messages. Status: Starting upload of /srv/tftp/c2950-i6k2l2q4-mz.121-22.EA13.bin Command: PASV Response: 227 Entering Passive Mode (127,0,0,1,250,228). Command: STOR c2950-i6k2l2q4-mz.121-22.EA13.bin Response: 550

Re: atftpd permission denied

2025-04-11 Thread Timothy M Butterworth
On Fri, Apr 11, 2025 at 11:30 AM Michael Stone wrote: > On Thu, Apr 10, 2025 at 06:11:31PM -0400, Timothy M Butterworth wrote: > >I am having problems writing to atftpd. I keep getting a permission denied > >error. > > It sounds like you've worked around this, but I'll note for future > searchers

Re: Limiting attack surface for Debian sshd

2025-04-11 Thread Andy Smith
Hi, On Fri, Apr 11, 2025 at 08:12:14PM +0200, Marc SCHAEFER wrote: > systemd dependancies that are activated on a Debian system imply a lot > of library injections into sshd, much more than the stock OpenBSD ssh. > > To avoid this, there seem to be two approaches: > >- remove those dependanc

Re: Limiting attack surface for Debian sshd

2025-04-11 Thread Michael Stone
On Fri, Apr 11, 2025 at 08:12:14PM +0200, Marc SCHAEFER wrote: To solve this, I could use a Bastion host with a limited, non Debian, OS, or I could recompile the OpenSSH package on Debian with options disabled. I'd suggest just backporting the currrent version from sid rather than trying to mo

Re: virt-manager with SSH and 2FA with TOTP?

2025-04-11 Thread Andreas Haumer
Hi! Am 11.04.25 um 20:47 schrieb john doe: On 4/11/25 14:26, Andreas Haumer wrote: So, finally, my question: Did anyone on this list manage to use virt-manager to connect to a VM console using SSH with 2FA? The Libvirt mailing list comes to mind! ;^) Good point! :-)) I actually first tr

Limiting attack surface for Debian sshd

2025-04-11 Thread Marc SCHAEFER
Hello, systemd dependancies that are activated on a Debian system imply a lot of library injections into sshd, much more than the stock OpenBSD ssh. To avoid this, there seem to be two approaches: - remove those dependancies (see below) - confine the impact of those dependancies, as propo

Re: virt-manager with SSH and 2FA with TOTP?

2025-04-11 Thread john doe
On 4/11/25 14:26, Andreas Haumer wrote: So, finally, my question: Did anyone on this list manage to use virt-manager to connect to a VM console using SSH with 2FA? The Libvirt mailing list comes to mind! ;^) -- John Doe

Re: Limiting attack surface for Debian sshd

2025-04-11 Thread Dan Ritter
Marc SCHAEFER wrote: > > To avoid this, there seem to be two approaches: > >- remove those dependancies (see below) > >- confine the impact of those dependancies, as proposed > by some developpers, in having those dependancies confined > (not examined here) > > To solve this,

Re: atftpd permission denied

2025-04-11 Thread Timothy M Butterworth
On Fri, Apr 11, 2025 at 11:30 AM Michael Stone wrote: > On Thu, Apr 10, 2025 at 06:11:31PM -0400, Timothy M Butterworth wrote: > >I am having problems writing to atftpd. I keep getting a permission denied > >error. > > It sounds like you've worked around this, but I'll note for future > searchers

Re: atftpd permission denied

2025-04-11 Thread Michael Stone
On Thu, Apr 10, 2025 at 06:11:31PM -0400, Timothy M Butterworth wrote: I am having problems writing to atftpd. I keep getting a permission denied error. It sounds like you've worked around this, but I'll note for future searchers that the reason for this is that atftpd is configured with Dyna

Re: Debian

2025-04-11 Thread Michael Stone
On Fri, Apr 11, 2025 at 03:27:10PM +, Andy Smith wrote: However, the release you're running (Debian 6 squeeze) went into limited lTS in 2014 and complete end of life in 2016. Packages for it don't exist any more on the regular Debian mirrors and would have to be obtained from archive.debian.n

Re: debian-user-digest Digest V2025 #289

2025-04-11 Thread Phillip Dreizen
unsubscribe On Fri, Apr 11, 2025, at 3:09 AM, debian-user-digest-requ...@lists.debian.org wrote: > Attachments: > * Email.eml > * Email.eml > * Email.eml > * Email.eml > * Email.eml > * Email.eml

Re: Debian

2025-04-11 Thread Andy Smith
Hi, On Fri, Apr 11, 2025 at 04:50:01PM +0200, Rafał Grzywacz wrote: > Hello, I'm using a netgear readynas duo v2 nas server running linux debian > squeeze 6.0.3, when I try to install packages is E:... e.g. > # sudo apt-get install curl > E: Could not perform immediate configuration on 'libc6'. Pl

Re: Printing Problem with CUPS

2025-04-11 Thread Jeffrey Walton
On Fri, Apr 11, 2025 at 8:28 AM Greg Wooledge wrote: > > On Fri, Apr 11, 2025 at 14:16:17 +0200, Christoph Pleger wrote: > > I have edited the source code of cups a little to get a some more > > more detailed information about the problem (the actual code > > only gives a meaningless message “The

Debian

2025-04-11 Thread Rafał Grzywacz
Hello, I'm using a netgear readynas duo v2 nas server running linux debian squeeze 6.0.3, when I try to install packages is E:... e.g. # sudo apt-get install curl E: Could not perform immediate configuration on 'libc6'. Please see man 5 apt.conf under APT::Immediate-Configure for details. (2). Unf

Re: Printing Problem with CUPS

2025-04-11 Thread Christoph Pleger
> So, to add to the list of things that you can check: > > * Broken permissions (added or missing setuid or setgid) on any of >the CUPS binaries. > > * Invalid UID or GID of a named system account under which any of these >programs is executed, or a missing system account entry. A comp

Re: Printing Problem with CUPS

2025-04-11 Thread Greg Wooledge
On Fri, Apr 11, 2025 at 14:41:04 +0200, Hans wrote: > Without any checks, my first thing would be, to check in both computers if > any > of the executables related to cups might have different rights settings. > > Especially the executable, which creates the file in /tmp. A file which is > crea

virt-manager with SSH and 2FA with TOTP?

2025-04-11 Thread Andreas Haumer
Hi! (This might not be a Debian specific question, but at least the systems in question are running Debian, so I hope it's OK to ask here on this list. Please give me a hint if you know a better place to ask) In our network we have several Debian systems working as VM host running QEMU+KVM based

Re: Printing Problem with CUPS

2025-04-11 Thread Hans
Without any checks, my first thing would be, to check in both computers if any of the executables related to cups might have different rights settings. Especially the executable, which creates the file in /tmp. A file which is created mostly gets the ownership and posessions of the creatorbinary

Printing Problem with CUPS

2025-04-11 Thread Christoph Pleger
Hello, I have a strange problem with CUPS and hope that someone can help me with the solution. "Strange", in this case, means that I have two machines, both running Debian 12 and the corresponding versions of cups and cups-browsed. On one of these machines, I can print as any user, while on the o

Re: Printing Problem with CUPS

2025-04-11 Thread Greg Wooledge
On Fri, Apr 11, 2025 at 14:16:17 +0200, Christoph Pleger wrote: > I have edited the source code of cups a little to get a some more > more detailed information about the problem (the actual code > only gives a meaningless message “The print file cannot be opened: > Permission denied") and then foun

Re: map mainboard sata connector to device name

2025-04-11 Thread Andy Smith
Hi, On Thu, Apr 10, 2025 at 05:42:43AM +0200, Petric Frank wrote: > Am Donnerstag, 10. April 2025, 00:13:10 CEST schrieb Andy Smith: > > You have yet to explain why block device serial numbers > > (/dev/disk/by-id/) and filesystem UUIDs (/dev/disk/by-uuid/) are not > > sufficient for your use case

Re: atftpd permission denied

2025-04-11 Thread Dan Ritter
Timothy M Butterworth wrote: > On Thu, Apr 10, 2025 at 7:14 PM Dan Ritter wrote: > > > Timothy M Butterworth wrote: > > > All, > > > > > > I am having problems writing to atftpd. I keep getting a permission > > denied > > > error. > > > > > > Switch#$.SED.bin tftp:// > > 169.254.180.65/c3550-ips

Re: DHCP and static addresses, nothing to do with Re: Who:Bookwormv.Trixie

2025-04-11 Thread Dan Purgert
On Apr 10, 2025, David Wright wrote: > > > On Thu 03 Apr 2025 at 06:55:10 (-0400), Greg Wooledge wrote: > > Or you use mdns, which is the standard way of dealing with dynamic > > resources on an unmanaged network. > > The resources stay fixed during their lifetime, and any changes that > occur are

Re: hardware check

2025-04-11 Thread jeremy ardley
On 11/4/25 16:05, didier gaumet wrote: These solutions (Windows Remote Desktop, Anydesk, Teamviewer) have the great advantage of not needing a non-technical user setting up anything technical (IP address, firewall, whatever...) Ironically, these tools are favoured by scammers to take over

Re: hardware check

2025-04-11 Thread didier gaumet
Le 11/04/2025 à 10:05, didier gaumet a écrit : [...] When you have access to his PC, you can inquire about software and hardware issues [...] ...investigate... Lousy Speaking Didier

Re: hardware check

2025-04-11 Thread Alexander V. Makartsev
On 11.04.2025 12:22, Michel Verdier wrote: On 2025-04-10, David Christensen wrote: Answering the above questions should facilitate obtaining trouble-shooting advice via this mailing list. I am not asking help to solve his problem - and obviously I would be on the wrong mailing list :). I am se

Re: hardware check

2025-04-11 Thread didier gaumet
Le 10/04/2025 à 09:14, Michel Verdier a écrit : A poor friend of mine is stucked on w$ and his computer has problems. I have no access to his system. Do you know a way to check his hardware, programs such as clamav, smartmontools or memtest, either running on w$ or from a live system? But it has

Re: hardware check

2025-04-11 Thread Michel Verdier
On 2025-04-10, David Christensen wrote: > Answering the above questions should facilitate obtaining trouble-shooting > advice via this mailing list. I am not asking help to solve his problem - and obviously I would be on the wrong mailing list :). I am searching tools suitable for a very basic us

Re: atftpd permission denied

2025-04-11 Thread Lee
On Thu, Apr 10, 2025 at 10:12 PM Timothy M Butterworth wrote: > > On Thu, Apr 10, 2025 at 7:14 PM Dan Ritter wrote: >> >> Timothy M Butterworth wrote: >> > All, >> > >> > I am having problems writing to atftpd. I keep getting a permission denied >> > error. >> > <.. snip ..>> >> TFTP is of very l