jhx, to linux
@jhx@fosstodon.org avatar

My stack:

side:

side:

...and a little :windows95:

How does yours look like? 😎

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

So, openssh backdoor through a patch applied by some distros to make it work with systemd, which itself is vulnerable because of a compromise of the LZMA / xz code.

Quick test on a 15 machine:

$ xz --version
xz (XZ Utils) 5.2.5
liblzma 5.2.5

$ sudo /usr/bin/ldd /usr/sbin/sshd | grep -ic lzma
0

And of course no systemd to be found.

I am having a bit of fun trying to (ahem) 'improve' the test script posted on some mailing lists, but I think Slackware is not vulnerable.

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

The plan for today...

  • dnsmasq update on the VM server - DONE

  • 10.0 RC4 - VM update

  • Update the house server to Slackware 15 - this one is going to be interesting.

  • Upgrade the VM server to 16GB of RAM.

Decisions, decisions... 🤔

itsfoss, (edited ) to linux
@itsfoss@mastodon.social avatar

Slackware has turned 30 today!! 🎂

Share your experience with Slackware below 🥳🐧

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

So... 🤓

$ uptime ; date ; cat /etc/slackware-version

20:41:16 up 349 days, 44 min, 1 user, load average: 0.05, 0.05, 0.05

Thu Apr 18 20:41:16 CEST 2024

Slackware 14.1

OK, I really need to update this little machine to 15 before the uptime goes to 365 days... 😅

vwbusguy, (edited ) to RedHat
@vwbusguy@mastodon.online avatar

If #RedHat is the #Linux Catholic cathedral, the downstreams of #RHEL are mainline Protestants, #SUSE and #Slackware are branches of Orthodoxy, #Debian and #Arch are Anabaptists and Baptists, and #BSD flavors are atheists. #Christianity #humor #religion

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

I don't know who needs to read this, since there are probably 12 users out there, but a new version of postfix is out for Slackware 15, with a patch for "smtp-smuggling":

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2023&m=slackware-security.405376

https://www.postfix.org/smtp-smuggling.html

Update!

jhx, to debian
@jhx@fosstodon.org avatar

A week on right now.
And all I have to say is: Awesome :kdenew:

Stable, usable and gets out of my way 🙂

Using it daily under and 😎

Can highly recommend it.
In the end: Use whatever gets the job done 😉

linuxuserspace, to linux
@linuxuserspace@mastodon.social avatar

In the early 2000's, distros had avoided packaging because of its closed toolkit roots even though Xfce had been via the GPL since 1999.

was the first major distribution to package Xfce at 3.8 in 2002! followed with Xfce 4.4 in Etch in 2007.

https://www.linuxuserspace.show/408

losttourist, to linux
@losttourist@social.chatty.monster avatar

Thanks to @lproven's great article in The Register celebrating Slackware's 30th birthday (https://www.theregister.com/2023/07/20/slackware_turns_30/), I've been inspired to install it on a very old low-powered netbook I had lying around.

Just like Liam, this is me going back to my roots: Slackware was the very first Linux distro I installed myself. At the time (1996 or 1997) I only had dial-up internet at home, so over the course of a week or so I snuck a bunch of 3½" floppies into work, downloaded the various Slackware 3.1 boot and root disks onto them, and spent the next weekend alternately basking in my skillz and swearing loudly when things didn't actually work.

I got there in the end, though, and I was a Slackware user until the early 2000s when that shiny new-fangled Debian distro caught my eye.

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar
0xDEADBEEF, to random
@0xDEADBEEF@fosstodon.org avatar

Last I tried screwing around with , and on I had a bunch of fun with scripts from sbo and dependency hell – since neither is an official slack package.

How does this fare in 2024 if I were to try to get a headless host for my stuff (qubes-like but I like pain)?

tallship, to foss
@tallship@social.sdf.org avatar

From our friends at - The German fork of !

Boom Shakalaka BOOM! 💥

https://www.suse.com/news/SUSE-Preserves-Choice-in-Enterprise-Linux/

.

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

So, 7.5 has got a patch for libcrypto out:

003: RELIABILITY FIX: May 10, 2024
(All architectures)

A missing bounds check could lead to a crash in libcrypto.

And 15 has got a new package for sg3_utils (1.47), which I did not even know existed... 🤔

"sg3_utils (utilities and test programs for the linux sg driver)
This package contains low level utilities for devices that use a SCSI command set."

All in all a relaxed Saturday.

r1w1s1, to random
@r1w1s1@fosstodon.org avatar

starting use instead sudo.

alias sudo='doas'

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

As a reminder for all of you heads:

Sudo has been updated for all versions of Slackware between 14.0 and 15. Could be a good idea to run 'slackpkg update' ...

http://www.slackware.com/security/viewer.php?l=slackware-security&y=2023&m=slackware-security.479986

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

Tiny tiny bit of progress on the CIS Guide for .

Slowly going through all the wonderful filesystems CIS does NOT want you to use, because reducing the attack surface.

At current speed, expect the finished product sometime on 2098.

Side project: how about a man page web site, but for ? 🤔

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

Finally going home after a whole day of meetings.

I'd like to update my 15 VMs...

I also think I need to double-check my qemu installation, as 7.2.9 seems to be the last 7.x version (I have 7.2.7 installed).

I still have and VMs to update or reinstall.

Thinking about setting up a mirror.

SearxNG is definitely something I need to setup.

Also SNAC2 under Slackware.

grahamperrin, to android
@grahamperrin@bsd.cafe avatar

The Land Before Linux: The Unix desktops • The Register

<https://www.theregister.com/2024/01/27/opinion_column/> @sjvn

❝Today, thanks to Android and ChromeOS, Linux is an important end-user operating system. But, before Linux, there were important Unix desktops, although most of them never made it. …❞

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

peeps!

New Postfix just dropped:

n/postfix-3.8.6-i586-1.txz:
Upgraded. This is a bugfix release.

For more information, see: https://www.postfix.org/announcements/postfix-3.8.6.html

Said Postfix announcement contains interesting bug fixes:

Bugfix (defect introduced: Postfix 2.3, date 20051222)

Bugfix (defect introduced: Postfix 3.1, date: 20151128)

Fixing bugs that are almost 10 and 20 years old is the kind of dedication to the craft that bring to mind XKCD 2347 https://xkcd.com/2347/

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

I have a news alert on Google that is configured to send me an email if someone mentioned or ...

The last two alerts received obviously did not make any sense at all, so either Google Alert is useless (which it has been for a long time, to be honest) or AI sites are increasingly pushing nonsense content down the Googleplex throat. Or both.

Methinks both. AI is going to be the end of the Internet as a useful tool.

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

So SNAC2 compiles perfectly on ('make', and that's it) - now looking at the Administrator manual...

Haydar, to random German
@Haydar@social.tchncs.de avatar

Regarding the / backdoor, quoting the original mail https://seclists.org/oss-sec/2024/q1/268

"Debian and several other distributions patch openssh to support systemd notification, and libsystemd does depend on lzma."

"it is likely the backdoor can only work on glibc based systems."

So, if you are using a non-sytemd distro ( e.g. , , , ) or a non-glibc distro (e.g. ) you are most likely not affected, right?

SinclairSpeccy, to tech

57 years ago on October 20, 1966, Patrick Volkerding was born. Volkerding is best known as the founder and creator of Slackware, one of the earliest Linux distributions.

Slackware, introduced in 1993, quickly gained recognition for its simplicity and adherence to the Unix philosophy. While other Linux distributions embraced modern package management systems, Slackware maintained a more traditional approach

ParadeGrotesque, to random
@ParadeGrotesque@mastodon.sdf.org avatar

Now compiling qemu-7.2.6 on my server.

Let's shutdown the VMs first...

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • kavyap
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • ngwrru68w68
  • cubers
  • thenastyranch
  • Youngstown
  • rosin
  • slotface
  • cisconetworking
  • mdbf
  • ethstaker
  • JUstTest
  • Durango
  • khanakhh
  • GTA5RPClips
  • anitta
  • osvaldo12
  • everett
  • normalnudes
  • tester
  • tacticalgear
  • provamag3
  • modclub
  • Leos
  • lostlight
  • All magazines