Re: umask - default user settings?

2024-07-15 Thread Hans
> The door is closed by default in bookworm. User home directories are > created with 0700 mode, see /usr/share/doc/adduser/README.gz and > /usr/share/doc/adduser/NEWS.Debian.gz As a result, it is necessary to > set ACLs e.g. to run unprivileged LXC containers. That is not the point. The point us,

Re: systemd-cryptsetup

2024-07-15 Thread Michel Verdier
On 2024-07-14, Erwan David wrote: > I have a "full" disk encryption as made by the installer, thus mounted in the > initramfs, so it may be a little different If "full disk" include /boot you should be ask for password by grub. Else it is initramfs and you should be ask by cryptsetup (package cry

Re: systemd-cryptsetup

2024-07-15 Thread Nicolas George
Lists (12024-07-14): > When I researched the problem I encountered some posts stating that systemd > had its own implementation for cryptsetup This is not true. systemd-cryptsetup uses libcryptsetup, it is mostly only glue. > > Why the *&^%#@! it is necessary to have this borg-like behaviour of

Re: systemd-cryptsetup

2024-07-15 Thread Lists
Hi Nicolas, Thanks for the explanation. For the most part I understand your point of view. As a matter of fact I am not even opposed to systemd as such [1], but over the years I have had my share of problems that in the end proved to be caused by some transition to systemd. This has made me a

Re: umask - default user settings?

2024-07-15 Thread Greg Wooledge
On Mon, Jul 15, 2024 at 09:04:54 +0200, Hans wrote: > Also, when some other applicatiions are setting correct rights. > Some do, some don't. File bug reports against the ones which don't.

Help installing gdb package using apt

2024-07-15 Thread Demetrius Stanton
Hi! My name is Demetrius Stanton. It was suggested that I reach out for a problem I'm experiencing trying to install gdb on my system. I'm willing to submit whatever information is necessary to try and get this issue resolved. I recently encountered a weird error, and I can't seem to find a fix o

Re: umask - default user settings?

2024-07-15 Thread Eduardo M KALINOWSKI
On 14/07/2024 14:09, Hans wrote: Dear list, I am wondering, why on a multiuser system like debian the rights for a normal user are "rw- r-- r--", (owner: user and ownergroup: usergroup) Of course there is a reason for this, but it is not understandable for me. First two are clear: rw for myse

Re: umask - default user settings?

2024-07-15 Thread Lists
On 2024-07-15 14:30, Eduardo M KALINOWSKI wrote: I'm not sure if the Debian default should be changed, though. One thing to consider is that in modern software development practices the idea of secure/private by default is getting more and more important and implemented. It is good practice

Re: umask - default user settings?

2024-07-15 Thread Greg Wooledge
If people on this mailing list are so concerned about other people's umasks, then I would suggest a great starting point would be to start by making it POSSIBLE for other people to set their umasks the way they want. If you use a Desktop Environment, go to your DE's support mailing list, and ask t

purely local DNS

2024-07-15 Thread Adam Weremczuk
What I need to configure for my Debian 12 VM: - no public or LAN DNS whatsoever - ability to fetch a single MX record for a single domain I don't think I can add MX to /etc/hosts which only works for A records. I'm after a similarly simple, "one liner" solution. --- Adam

Re: purely local DNS

2024-07-15 Thread Jeff Pang
Given you want to send mail to foo.com whose mx record is mail.foo.com whose IP is 1.2.3.4 Then write this entry in hosts file: 1.2.3.4 foo.com Which should work for sending mail. Regards On 2024-07-15 21:00, Adam Weremczuk wrote: What I need to configure for my Debian 12 VM: - no public

Re: Help installing gdb package using apt

2024-07-15 Thread The Wanderer
On 2024-07-15 at 07:42, Demetrius Stanton wrote: > Hi! > > My name is Demetrius Stanton. It was suggested that I reach out for a > problem I'm experiencing trying to install gdb on my system. I'm willing to > submit whatever information is necessary to try and get this issue > resolved. > > I re

Re: purely local DNS

2024-07-15 Thread Greg Wooledge
On Mon, Jul 15, 2024 at 14:00:03 +0100, Adam Weremczuk wrote: > What I need to configure for my Debian 12 VM: > - no public or LAN DNS whatsoever > - ability to fetch a single MX record for a single domain > > I don't think I can add MX to /etc/hosts which only works for A records. > > I'm after

Re: purely local DNS

2024-07-15 Thread Adam Weremczuk
It doesn't work. mail.example.com record doesn't exist to start with. Even if I add: 1.2.3.4 example.com 5.6.7.8 mail.example.com to /etc/hosts I get: 0A032940922 657 Mon Jul 15 14:40:01 user1@mymachine (Host or domain name not found. Name service error for name=example.com type=MX: Ho

Re: purely local DNS

2024-07-15 Thread Adam Weremczuk
I want to achieve the first objective and the values are static. I just hoped there is a one liner hack (like A records in /etc/hosts) to achieve this vs reconfiguring my MTA. On 15/07/2024 14:33, Greg Wooledge wrote: On Mon, Jul 15, 2024 at 14:00:03 +0100, Adam Weremczuk wrote: What I need

Re: purely local DNS

2024-07-15 Thread Jeff Pang
I didn’t test it but no MX was found then local MTA should try A record for delivery. As a proof that safe-mail.net has no mx but A record only. Regards On 2024-07-15 21:45, Adam Weremczuk wrote: It doesn't work. mail.example.com record doesn't exist to start with. Even if I add: 1.2.3.4

Re: purely local DNS

2024-07-15 Thread Jeff Pang
I get: 0A032940922 657 Mon Jul 15 14:40:01 user1@mymachine (Host or domain name not found. Name service error for name=example.com type=MX: Host not found, try again) Any SMTP client which does not fall back to the A record when no MX records exists is fundamentally broken. -- Je

Re: purely local DNS

2024-07-15 Thread Greg Wooledge
On Mon, Jul 15, 2024 at 14:49:21 +0100, Adam Weremczuk wrote: > I want to achieve the first objective and the values are static. > I just hoped there is a one liner hack (like A records in /etc/hosts) to > achieve this vs reconfiguring my MTA. Routing Internet email in the absence of functioning D

Re: purely local DNS

2024-07-15 Thread Adam Weremczuk
I'm using Postfix and this all that was needed: /etc/hosts 1.2.3.4 example.com /etc/postfix/main.cf disable_dns_lookups = yes smtp_host_lookup = native

Re: Help installing gdb package using apt

2024-07-15 Thread Pranjal Singh
Hi Demetrius, On 15/07/24 17:12, Demetrius Stanton wrote: [...] I recently encountered a weird error, and I can't seem to find a fix online. When I run the command ` sudo apt update && sudo apt install gdb -y `, I receive an 404 error stating failed to fetch https://deb.debian.org/debian/pool

Re: Problem with conda

2024-07-15 Thread Stephen P. Molnar
On 07/14/2024 08:57 AM, Stephen P. Molnar wrote: On 07/14/2024 07:15 AM, Stephen P. Molnar wrote: On 07/14/2024 01:28 AM, Brad Rogers wrote: On Sat, 13 Jul 2024 15:31:59 -0400 "Stephen P. Molnar" wrote: Hello Stephen, I downloaded a new copy of Miniconda3-latest-Linux-x89_64.s You s

Re: purely local DNS

2024-07-15 Thread Todd Zullinger
Adam Weremczuk wrote: > I'm using Postfix and this all that was needed: > > /etc/hosts > 1.2.3.4 example.com > > /etc/postfix/main.cf > disable_dns_lookups = yes > smtp_host_lookup = native It's probably worth noting that `disable_dns_lookups` has been deprecated for a long time. The post

Re: Help installing gdb package using apt

2024-07-15 Thread Lee
On Mon, Jul 15, 2024 at 11:07 AM Demetrius Stanton wrote: > > Hi! > > My name is Demetrius Stanton. It was suggested that I reach out for a problem > I'm experiencing trying to install gdb on my system. I'm willing to submit > whatever information is necessary to try and get this issue resolved.

Re: umask - default user settings?

2024-07-15 Thread Franco Martelli
On 14/07/24 at 20:44, to...@tuxteam.de wrote: so they aren't children of the GNOME top-level process, and don't inherit the umask or environment from the session. I'm totally willing to believe that KDE is different, but it's not clear whether "Lists" has tried this and failed, or simp

Re: purely local DNS

2024-07-15 Thread Andy Smith
Hi, On Mon, Jul 15, 2024 at 09:55:06PM +0800, Jeff Pang wrote: > > > > > I get: > > > > 0A032940922 657 Mon Jul 15 14:40:01 user1@mymachine > > (Host or domain name not found. Name service error for name=example.com > > type=MX: Host not found, try again) > > Any SMTP client which does no

Re: umask - default user settings?

2024-07-15 Thread Jeffrey Walton
On Mon, Jul 15, 2024 at 12:06 PM Eduardo M KALINOWSKI wrote: > > On 14/07/2024 14:09, Hans wrote: > > Dear list, > > > > I am wondering, why on a multiuser system like debian the rights for a > > normal > > user are "rw- r-- r--", (owner: user and ownergroup: usergroup) > > > > Of course there is

Re: Help installing gdb package using apt

2024-07-15 Thread Tom Dial
Hi Demetrius. See the embedded observations below. On 7/15/24 05:42, Demetrius Stanton wrote: Hi! My name is Demetrius Stanton. It was suggested that I reach out for a problem I'm experiencing trying to install gdb on my system. I'm willing to submit whatever information is necessary to tr

Re: purely local DNS

2024-07-15 Thread Max Nikulin
On 15/07/2024 20:00, Adam Weremczuk wrote: - ability to fetch a single MX record for a single domain I assume that you are not trying to achieve "smart host" configuration for sending mail. Perhaps you can run a dedicated dnsmasq instance with no upstream DNS servers. Option that might help

Re: umask - default user settings?

2024-07-15 Thread Max Nikulin
On 15/07/2024 01:10, Greg Wooledge wrote: On Sun, Jul 14, 2024 at 19:57:45 +0200, to...@tuxteam.de wrote: The place to do this is the X session [1]; system-wide in /etc/X11/Xsession.d/... and for each user in ~/.xsessionrc. Does that work in KDE? First of all, it is up to display manager to

Re: umask - default user settings?

2024-07-15 Thread Max Nikulin
On 15/07/2024 20:03, Greg Wooledge wrote: If you use a Desktop Environment, go to your DE's support mailing list, and ask them how to set your umask so that it works as expected in all of your programs. (I am not convinced that default umask should be changed) systemd.exec(5) UMask= Contro

Re: umask - default user settings?

2024-07-15 Thread Greg Wooledge
On Tue, Jul 16, 2024 at 08:02:45 +0700, Max Nikulin wrote: > (I am not convinced that default umask should be changed) Neither am I. But more to the point, it appears that the default umask literally *cannot* be changed in any kind of universal way. There are, like, half a dozen different places

Re: Help installing gdb package using apt

2024-07-15 Thread Demetrius Stanton
Hello everyone, Thank you so much for your assistance on this matter. The solution was found. Updating the sources list to include: deb http://deb.debian.org/debian/ bookworm main non-free-firmware deb-src http://deb.debian.org/debian/ bookworm main non-free-firmware deb http://security.debian.or

Re: umask - default user settings?

2024-07-15 Thread Jeffrey Walton
On Mon, Jul 15, 2024 at 9:34 PM Greg Wooledge wrote: > > On Tue, Jul 16, 2024 at 08:02:45 +0700, Max Nikulin wrote: > [...] > > systemd.exec(5) > > > > > UMask= > > > Controls the file mode creation mask. Takes an access mode in octal > > > notation. See umask(2) for details. Defaults to 0022 for

Re: umask - default user settings?

2024-07-15 Thread Max Nikulin
On 16/07/2024 08:34, Greg Wooledge wrote: On Tue, Jul 16, 2024 at 08:02:45 +0700, Max Nikulin wrote: systemd.exec(5) UMask= [...] [5] refers to . I do not have systemd-homed running (minimal KDE). I have no idea concerning default Gnome installation. My ex

Re: umask - default user settings?

2024-07-15 Thread Greg Wooledge
On Tue, Jul 16, 2024 at 09:58:20 +0700, Max Nikulin wrote: > I have naively tried > > cat ~/.config/systemd/user/service.d/umask.conf > [Service] > UMask=0007 > > From xterm and konsole: > > umask > 0007 OK. Let's follow this path a bit. I googled "how to create a systemd user service" and go

Bug Report

2024-07-15 Thread Richard Bostrom
Bug in my opinion. /etc/resolv.conf does not block out pornography Yours sincerely Richardh Bostrom Sent with [Proton Mail](https://proton.me/) secure email.