RE: retrofitting LUKS encryption on installed system
by J.Witvliet＠mindef.nl
-----Original Message-----
From: users-bounces(a)lists.fedoraproject.org [mailto:users-bounces@lists.fedoraproject.org] On Behalf Of Fred Smith
Sent: Friday, June 28, 2013 3:42 PM
To: users(a)lists.fedoraproject.org
Subject: retrofitting LUKS encryption on installed system
I've got a F19 installation that I'd like to turn into a fully encrypted
system with LUKS.
There are many howtos on the web for encrypting a partition, but they
all show doing it to /home.
-----Original Message-----
No, just re-install.
One partition with /boot and another with an encrypted volume-group, holding /, swap and the rest.
But before embarking on that trip, do you really need full disk encryption?
I mean, the content of /usr is on any fedora-cd ;-) And when up-and-running, everything is unlocked.
The only valid reason I can think about, is that other people have physically access to your machine and could get root-access by booting from cd/dvd, and might alter your system.
It surely works, but at a performance price. And the certainty that you have to enter the LUKS-key each time you boot.
______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het electronisch verzenden van berichten.
This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.
10 years, 11 months
File open/save dialog sort order
by Michael Eager
I reinstalled Fedora 18 with KDE and I notice a change in
the order in which directories and files are displayed.
In some applications, the sort is now case sensitive, so
that all the initial capitals are listed before the initial
lower case names. Previously, the names were sorted without
case sensitivity.
I see this behavior in Firefox, Thunderbird, Acroread and
others. There are other application where the file dialog
sorts files using a case insensitive sort, like Dolphin, k3b,
or kget.
I edited kdeglobals to add "Sort case insensitively=true" to
the [KFileDialog Settings] section. This should be the
default. It did not make any difference.
Any suggestions on how to set the file name sort order?
--
Michael Eager eager(a)eagercon.com
1960 Park Blvd., Palo Alto, CA 94306 650-325-8077
10 years, 11 months
F18 and GoogleEarth
by Ranjan Maitra
So, I decided to try installing GoogleEarth (GE) for the first time
ever. I found the following:
http://fedora18tutorial.blogspot.com/2012/12/how-to-install-google-earth-...
and tried it the following:
% wget -c
http://dl.google.com/dl/earth/client/current/google-earth-stable_current_...
%sudo yum localinstall google-earth-stable_current_x86_64.rpm
But I got the following:
Transaction Check Error:
file /usr/bin from install of google-earth-stable-7.1.1.1871-0.x86_64
conflicts with file from package filesystem-3.1-2.fc18.x86_64
Error Summary
-------------
Any way around it?
Many thanks,
Ranjan
--
Important Notice: This mailbox is ignored: e-mails are set to be
deleted on receipt. For those needing to send personal or professional
e-mail, please use appropriate addresses.
____________________________________________________________
FREE 3D EARTH SCREENSAVER - Watch the Earth right on your desktop!
Check it out at http://www.inbox.com/earth
10 years, 11 months
question: F-19 and CUPS upgrade.
by William Mattison
I see in the Fedora-19 release notes that CUPS will be upgraded to 1.6. The page on that:
http://fedoraproject.org/wiki/Features/CUPS1.6
says this involves using pdf rather than postscript as the baseline document format. While wrestling to get printing working on my system this past spring, the printer's manufacturer (Xerox) told me that my printer was "GDI" based. I don't really know how printers and their drivers work, but I'm guessing that the Linux drivers for this printer are converting psotscript out by LibreOffice, the Linux print command, the browser, etc. to GDI, and sending that GDI to the printer.
My question: Will the coming CUPS upgrade break printing on my system? or has this been properly accounted for in CUPS 1.6?
thanks,
Bill.
10 years, 11 months
What replaces palimpsest?
by Beartooth
A post on a LUG list praises it under that name, which .deb
distros apparently still use; Wikipedia made it clear that .rpm distros
no longer do, alas!, but got me totally confused about what I should tell
yum to install so that I can try it. (I had hoped "yum install
palimpsest" might link to current jargon, but it didn't.)
--
Beartooth Staffwright, Neo-Redneck Not Quite Clueless Power User
Remember I have precious (very precious!) little idea where up is.
10 years, 11 months
F19: DUID for DHCPv6: how determine?
by Nick Urbanik
Dear Team,
I'm investigating IPv6, and wondering how, on Fedora 19, the best way
to determine the appropriate DUID (DHCP unique identifier) to be used
in the host sections, along with fixed-address statements.
If this is documented, please mention where.
--
Nick Urbanik http://nicku.org nicku(a)nicku.org
GPG: 7FFA CDC7 5A77 0558 DC7A 790A 16DF EC5B BB9D 2C24 ID: BB9D2C24
10 years, 11 months
Re: retrofitting LUKS encryption on installed system
by J.Witvliet＠mindef.nl
Top-post cause of BB :-(
Private keys (if stored locally), for outgoing traffic, should reside in the users home-dir.
Passwords should be replaced multi-factor strong auth's: card/token plus PIN.
Any alterations of filesystem beyond /home can be detected+reported.
Full disc encryption on a athom demands some extra patience :-)
----- Oorspronkelijk bericht -----
Van: Bill Davidsen [mailto:davidsen@tmr.com]
Verzonden: Saturday, June 29, 2013 10:07 PM W. Europe Standard Time
Aan: Community support for Fedora users <users(a)lists.fedoraproject.org>
Onderwerp: Re: retrofitting LUKS encryption on installed system
J.Witvliet(a)mindef.nl wrote:
> -----Original Message-----
> From: users-bounces(a)lists.fedoraproject.org [mailto:users-bounces@lists.fedoraproject.org] On Behalf Of Fred Smith
> Sent: Friday, June 28, 2013 3:42 PM
> To: users(a)lists.fedoraproject.org
> Subject: retrofitting LUKS encryption on installed system
>
> I've got a F19 installation that I'd like to turn into a fully encrypted
> system with LUKS.
>
> There are many howtos on the web for encrypting a partition, but they
> all show doing it to /home.
> -----Original Message-----
>
> No, just re-install.
> One partition with /boot and another with an encrypted volume-group, holding /, swap and the rest.
>
> But before embarking on that trip, do you really need full disk encryption?
> I mean, the content of /usr is on any fedora-cd ;-) And when up-and-running, everything is unlocked.
>
> The only valid reason I can think about, is that other people have physically access to your machine and could get root-access by booting from cd/dvd, and might alter your system.
>
If they have secret access they can install evil devices, but if you are
protecting against theft (laptops) or someone with a search warrant (NSA) comes
and takes your drives.
> It surely works, but at a performance price. And the certainty that you have to enter the LUKS-key each time you boot.
>
The only safe place to store password info is in your head. If one other person
has it it's not a secret, so you have to decide if losing the data is worse than
having someone else get it. That's a policy decision, on-technical.
> ______________________________________________________________________
> Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het electronisch verzenden van berichten.
>
> This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.
>
--
Bill Davidsen <davidsen(a)tmr.com>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot
--
users mailing list
users(a)lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
10 years, 11 months
Re: firefox
by Reindl Harald
*please* reply also to the list!
i do *not* see a reason why *one* random domain
like http://cdn.doubleverify.com/ would be
important enough to downgrade amajor browser
to a version with a *lot* of known security bugs
why do you not report the problem to whoever
is using this CDN?
Am 30.06.2013 20:24, schrieb Patrick Dupre:
> Here is what I get with firefox 22:
>
> A script on this page may be busy, or it may have stopped responding. You can stop the script now, or you can continue to see if the script will complete.
>
> Script: http://cdn.doubleverify.com/avs441.js:39
>
>
>>>>
>>>> Am 29.06.2013 18:28, schrieb Patrick Dupre:
>>>>> I am still experiencing toubles with firefox 22 when I browse some web sites
>>>>
>>>> *what* problems
>>>> *what* websites
>>>>
>>>>> I was trying to downgrade to firefox 20, but I cannot find firefox-20.0-5.fc18.x86_64.rpm
>>>>> on http://koji.fedoraproject.org/koji/
>>>>> (firefox-20.0-5.fc18.x86_64.rpm was not found on this server).
>>>>>
>>>>> Where can I get it?
>>>>
>>>> no idea why you insist in FF 20 and not 21 but why do you
>>>> not simply take a non-removed package, they newwer
>>>> builds most likely removed for a reason
>>>
>>> It is the same issue with firefox 21!
>>> 20 is OK
>>
>> *what* issue
>> *what* website
>>
>> hence i am web-developer and i have no idea what a stupid
>> idiot needs to do to break his website for recent browsers
10 years, 11 months
Upgrading to 19 by fedup: bad and good news
by antonio montagnani
Today I issues a fedup-cli network 19 command (
At the end of procedure that ended right when rebooting I get
Bad news:
I get a black window if I login as any user with a fedora logo on the
bottom of screen but I can use tty and then issue a startx
Good news
after issuing startx my old video card (Geforce FX5200) works fine with
Gnome 3.
Why do I have only F18 kernel??
Tnx
--
Antonio M
Skype: amontag52
Linux Fedora F18(Spherical Cow) on Acer 5720
http://lugsaronno.altervista.org
http://www.campingmonterosa.com
10 years, 11 months
