Search found 25 matches

by halfgaar
Wed Jun 28, 2017 2:57 am
Forum: Software & Applications
Topic: Security: CVE-2017-1000364 - privilege escalation
Replies: 7
Views: 1101

Re: Security: CVE-2017-1000364 - privilege escalation

Thanks, I'll give it a go. However, this should not be necessary. From a user's perspective, this is a bug (which you don't see until it's too late). As a user, I expect my system to be secure when my computer says it's up-to-date. Now hopefully this is fixed in Mint 18, but if there will be a point...
by halfgaar
Tue Jun 27, 2017 3:07 pm
Forum: Software & Applications
Topic: Security: CVE-2017-1000364 - privilege escalation
Replies: 7
Views: 1101

Re: Security: CVE-2017-1000364 - privilege escalation

To continue, on my Mint 17.0 laptop, I was able to get the latest 3.13 kernel by installing 'linux-generic'. This forced the removal of 'linux-kernel-generic', which was responsible for selecting the 'recommended' kernel (which was never changed over the course of 3 years). Not only is this a trick ...
by halfgaar
Tue Jun 27, 2017 2:45 pm
Forum: Software & Applications
Topic: Security: CVE-2017-1000364 - privilege escalation
Replies: 7
Views: 1101

Re: Security: CVE-2017-1000364 - privilege escalation

I'm actually more confused now. I have another Mint 17 PC, 17.3. It has kernel 3.19.0-32 (as opposed to 3.13). It did show an update for 3.13 (marked 'low urgency btw'): update-manager.png But I'm still stuck with an old 3.19 version from 2016: $ ls -lh /boot/ total 43M -rw-r--r-- 1 root root 1,3M O...
by halfgaar
Tue Jun 27, 2017 11:39 am
Forum: Software & Applications
Topic: Security: CVE-2017-1000364 - privilege escalation
Replies: 7
Views: 1101

Security: CVE-2017-1000364 - privilege escalation

CVE-2017-1000364 is a vulnerability that enables privilege escalation. Linux mint's security policy does not apply updates to this. In wake of recent events (boot sector ransomware), this does not seem like a good policy. Currently, Windows is still the primary target of these kinds of malware, but...
by halfgaar
Wed Apr 26, 2017 10:55 am
Forum: Software & Applications
Topic: Chromium updates again on Linux Mind (KDE) 17
Replies: 1
Views: 162

Chromium updates again on Linux Mind (KDE) 17

Hi,

I'm surprised I can't seem to find anything about it, but my Linux Mint 17 suddenly received Chromium updates again (version 58 now)? It was stuck at version 53, because Ubuntu 14 multiverse stopped updating it, or something?

Are updates now part of Mint 17 again, or was this a one-shot?
by halfgaar
Fri Feb 24, 2017 5:30 pm
Forum: KDE
Topic: [CLOSED] strange behavior of "save file" dialog
Replies: 13
Views: 1787

Re: [CLOSED] strange behavior of "save file" dialog

NietGiftig wrote: I joined this forum to thank you for this post.
Thanks, have a beer on me :D
This is actually me having that beer :) :

Image
by halfgaar
Thu Feb 23, 2017 10:50 am
Forum: KDE
Topic: [CLOSED] strange behavior of "save file" dialog
Replies: 13
Views: 1787

Re: [CLOSED] strange behavior of "save file" dialog

I found the problem. It's the GTK3 theme Oxygen. I installed mint-themes-gtk3 and selected Mint-X as my GTK3 theme in (settings->application appearance). Now it's fixed.
by halfgaar
Mon Feb 13, 2017 3:43 pm
Forum: KDE
Topic: [CLOSED] strange behavior of "save file" dialog
Replies: 13
Views: 1787

Re: [CLOSED] strange behavior of "save file" dialog

This thread alludes to a problem that three of my Linux Mint KDE 17 PCs have, but no real solution. I was wondering of people have more info. At some point a couple of months ago, on my three Linux Mint KDE 17 PCs, the Firefox file picker broke. It doesn't respond to some clicks, and other clicks tu...
by halfgaar
Mon Jul 13, 2015 2:50 am
Forum: Other topics
Topic: Login window - one textbox security risk?
Replies: 12
Views: 972

Re: Login window - one textbox security risk?

When you set your password, the e-cryptfs key is 'wrapped' using your password. If you change your password with the appropriate tools, it re-wraps. If you change your password on the command line using 'passwd', it doesn't, and upon reboot, is unable to decrypt your home. So no, you can't decrypt a...
by halfgaar
Sun Jul 12, 2015 6:41 am
Forum: Other topics
Topic: Login window - one textbox security risk?
Replies: 12
Views: 972

Re: Login window - one textbox security risk?

Be sure the auth channel doesn't then end up in the default syslog, or anything. I don't know if it does, but check it.
by halfgaar
Sun Jul 12, 2015 4:14 am
Forum: Other topics
Topic: Login window - one textbox security risk?
Replies: 12
Views: 972

Re: Login window - one textbox security risk?

I was able to login into launchpad now and reported the bug.
by halfgaar
Sun Jul 12, 2015 3:14 am
Forum: Other topics
Topic: Login window - one textbox security risk?
Replies: 12
Views: 972

Re: Login window - one textbox security risk?

I think it can all be mitigated by at least not re-asking the username upon typo. Windows does this too. It keeps asking you for your password when you type it wrong, and if you want another user, you have to click 'other user'. I think I will report this as a bug then. It's not even just for parano...
by halfgaar
Fri Jul 10, 2015 3:24 am
Forum: Other topics
Topic: Login window - one textbox security risk?
Replies: 12
Views: 972

Login window - one textbox security risk?

Linux mint has a login manager that has one textbox. First you enter your username, press enter, then your password. You can configure it to remember your username so you don't have to enter it. There are several reasons I think this GUI design is a security problem, especially if you want your encr...
by halfgaar
Sun Mar 22, 2015 5:59 pm
Forum: Installation & Boot
Topic: Reinstall Mint, reuse existing ecryptfs home
Replies: 5
Views: 629

Re: Reinstall Mint, reuse existing ecryptfs home

OK, good to know. I just installed my computer with encrypted home on a seperate partition, ready for future reinstalls.
by halfgaar
Thu Mar 12, 2015 2:17 pm
Forum: Installation & Boot
Topic: Reinstall Mint, reuse existing ecryptfs home
Replies: 5
Views: 629

Re: Reinstall Mint, reuse existing ecryptfs home

And that would indeed also work with ecryptfs?
by halfgaar
Thu Mar 12, 2015 1:38 pm
Forum: Installation & Boot
Topic: Reinstall Mint, reuse existing ecryptfs home
Replies: 5
Views: 629

Reinstall Mint, reuse existing ecryptfs home

When you have your home on a separate partition, in turn encrypted with ecryptfs, how would one go about reinstalling Mint (for an upgrade), retaining your user data. Without encryption, having home on a separate partition makes it easy. But with encryption, does it handle the already existing home ...
by halfgaar
Fri Feb 07, 2014 4:07 am
Forum: Hardware Support
Topic: [HOWTO] ATI hybrid graphics with open source radeon driver
Replies: 4
Views: 10970

Re: [HOWTO] ATI hybrid graphics with open source radeon driv

I was reading up on Radeon power management. I enabled it by adding radeon.dpm=1 as kernel boot parameter in /etc/default/grub. Dmesg says it's enabled, and idle power use is now about 13W (which is about the same as it was with LM 15). It was about 18-19W without dpm. I still have to experiment wit...
by halfgaar
Thu Feb 06, 2014 4:44 pm
Forum: Hardware Support
Topic: Battery life Samsung Series 7 with Olivia
Replies: 8
Views: 1416

Re: Battery life Samsung Series 7 with Olivia

OK, I enabled radeon power management with the kernel param:

Code: Select all

radeon.dpm=1
Idle use is about 13W, but I'm still fiddling with parameters. I've read that the next kernel, 3.12, is actually a lot better than 3.11.
by halfgaar
Thu Feb 06, 2014 4:19 pm
Forum: Hardware Support
Topic: [HOWTO] ATI hybrid graphics with open source radeon driver
Replies: 4
Views: 10970

Re: [HOWTO] ATI hybrid graphics with open source radeon driv

Thanks, I wish I could upvote here :) However, what does one do if you have no vgaswitcheroo? I have a Samsung Series 7 730U (NP730U3E to be exact) with Radeon HD 8730M video, and especially since Mint 16, it's a hot, noisy, coal with short battery life. I wish to turn off the Radeon HD 8730M alltog...
by halfgaar
Thu Feb 06, 2014 4:03 pm
Forum: Hardware Support
Topic: Battery life Samsung Series 7 with Olivia
Replies: 8
Views: 1416

Re: Battery life Samsung Series 7 with Olivia

OK, from what I can gather, you can use fgrlx-pxpress to enable power saving on mux-less systems (where the second chip, the Radeon, is only used to render, not display, and the integrated intel is used for display). However, it doesn't seem to work for me; it just says dpkg --configure went wrong (...

Go to advanced search