lavaeolus

since it seems that I was part of this discussion and therefore somewhat guilty of causing this confusion: mandriva uses backports to patch security issues, that arise in later versions of firefox, therefore the mandriva-firefox should be secure, it was just a combination of misleading information on the firefox-site (claiming you should update to 1.5.0.4, because elder versions are insecure, but not exactly stating which versions are affected by which bugs, maybe they just want all users to download the new version :D ) and no information on the mandriva site about their patch-policy/backports and so on if you have the latest firefox-patches from mandriva you should be fairly secure after all, the only real visible improvement in firefox 1.5 over 1.0.x is the clear private data menu, which can be included in 1.0.x via addons a check on the suse security announcements shows that Suse 10 does use the same firefox version as mandriva 2006 (both use 1.0.8 at the moment)

for my powernowd works far better then cpudyn, despite I'm using an Intel-CPU do you now your cpu-temperature, there are tools like gKrellm that can show you at which temperature your cpu works, with acpitools you can check at which temperature your fan starts to work (it should show your actual cpu-temp too) btw the mouse-problem you mentioned: I had a similar problem on three different notebooks with windows, it seems not to be a linux-specific-problem, but the touchpad and your mouse use different protocolls and speed-settings, I experienced just the opposite, when I plugged in my mouse it worked at normal speed but the touchpad was slow

they improved a bit more than that, first of all they install the up-1GB-kernel by default (its the only chance to get suspend-to-disk working on my notebook), and first-time ever I have hardware-3D-acceleration on an ATI radeon mobility with native 1400x1050 resolution (HAPPY :D :D ), but now for the bad: suspend-to-ram still does not work (ok can live with that) and my sleep-button does not work anymore, which still works great in mandy 2006, seems best solution for me would be x.org 7.1 on my actual 2006 off topic: one nice feature with the live-install is the possibility to add your bootloader where YOU want, ubuntu just installs it into the mbr, where I DON'T want it

it depends on whether you can live with the free ati-drivers that are already part of x.org or if you want the commercial ones, for the free drivers you just have to install the x.org-packages, if you configured your graphical environment during installation then they should be already there, now you can try either the driver "radeon" or "radeon (fglrx)" both worked for me on a radeon 9000 pro, you can choose them either from the console with XFdrake or from within the graphical environment from the Mandriva Control Center for the commercial ones I can't tell you exactly since I never used them

ok, at least then it seems it's not a general hardware-incompatibility problem but related to mandriva maybe kubuntu works because it uses a newer kernel version, have you tried the new mandriva 2007 live-cd ?, while it's alpha, it works reasonably well on my notebook and it uses the same kernel-generation as ubuntu, would be interesting if this works, maybe the kernel in mandriva 2006 is just a bit to old

Notebook-support might improve, since it seems that laptop(aka multimedia)-kernel gets officially supported in mandriva 2007 (hope it will be installed as standard on notebooks) see: http://qa.mandriva.com/twiki/bin/view/Main/DistroChangelog the wishes about design and "include this or that application by default" are somewhat problematic to address imho, since everybody has a different opinion on which design is best, which application is the right (there are no rights and wrongs, just the application suits you or it doesn't, but that varies from user to user) for my part I can live with galaxy as it is, if the technical part gets correctly done, which is much more important imho OpenOffice is best installed from OOo (it's rpm-based now, it works, and you always get the newest stable version ahead of any distro :D , btw I like OOo's Icons much more than those in Mandriva at the moment, but thats just a matter of taste) what should be done though is not to install to much by default (although there are people out there who think otherwise) one thing I hate (but not only with mandriva) are those somewhat grazy dependencies, you just can't uninstall mandriva's firefox, if you're using gnome and evolution (I prefer to use the official firefox) offtopic: @arctic sorry for losing the penguins, they looked much nicer :D

Hope dies last ! at least they (mandriva)are still alive, and that's a little of a wonder

maybe your notebook is one of those with a not standard-compliant acpi-implementation do you have a directory /proc/acpi; is something in there ? maybe upgrading the bios ? a try with the ubuntu-live-cd would be worth a shot, if it works, then it's a mandriva problem (solution: throw the mandriva-cd out of the window ), if it doesn't it's a general problem (solution: throw the notebook out of the window , no not really, but I just don't like manufacturers that ignore standards)

Definitely of interest for Notebook-users: laptop-(aka multimedia)-kernel is now officially supported this is nice to hear, since this kernel was the only way to get suspend working on many notebooks for some time so all notebook-users that are interested in Mandriva should give it a test

I know the site, and I once found a statement about the backporting thing, but don't ask me where it is now, seems to be hidden very well yes a FAQ or something like this directly on the front security page would be well on the other hand Novell seems to be as uninformative on this, but I had only a quick look at their Suse security page security advisories are advertised here in the forum look here: https://mandrivausers.org/index.php?showforum=33

I think that shows exactly their problem, they should be more offensive about their product, its inner workings and so on, then all this half-information would be no problem but this is a problem with many linux-companies ubuntu shows it, you just need to be loud enough and you will get the media P.S. I love both mandriva and ubuntu, just in case someone might ask :D

I know about these security annoncements, but the ones concerning firefox date from 24th of april, now you go to the mozilla-site and read in an announcement from 1st june that this version is outdated, so what should you think ? on the mandriva security announcement you don't read anything about backports

I think they should follow the lines of red hat and fedora, build a stable business-oriented suite on top of a totally free community-product, not this half-thing they have at the moment sometimes I have the impression they want to please everyone, but that does not work and in the end rejects more people than it attracts

they had a nice service some time ago, you could order an update-cd, with all patches up to the time of the creation of the cd if you had a registered prosuite-pack you even got update cds automatically twice during its lifecycle it is nothing compared to regular online-updating, but for someone with a slow internet-connection it was definitely nice

<Ironic>Maybe, but there is an other company around, that insists that its software is secure and it is definitely not :P </Ironic> my experience showed me not to be to trustfull anyway as I already said: paranoia is a lifestyle maybe mandriva should be a bit more informative about all this (upgrading, patches, patch-policy), this is one of their biggest problems imho, they don't communicate enough with their users but after all a quick look at suse's security site showed, they are at 1.0.8 too

ok, maybe I'm just a bit TOO paranoid, but iphitus point is definitely valid btw: paranoia is not an illnes it's a lifestyle :D

Firefox 1.0 is no longer supported and the last update, Firefox 1.0.8, is affected by several vulnerabilities fixed in newer versions of the program. All users are urged to upgrade to the newest version of Firefox. the above is c & p from http://www.mozilla.org/projects/security/k...#firefox1.5.0.4 so I have reason to believe that 1.0.8 has some holes by now

Mandriva's firefox is at 1.0.8 at the moment, that's around april, 1.5.0.4 came out on June 1st, so at least mandriva's firefox is definitely behind I don't need the usability improvements (they are not so big after all), but I would still be happy to see a new version from mandrivas firefox with the security patches from 1.5.0.4 if its possible, otherwise they should consider a full upgrade to 1.5.0.4 if backporting is impossible, same goes for thunderbird the openoffice issue imho is not that big problem, since OOo.org 2.0 now uses rpms, even the menu entries get generated (I have a vanilla OOo 2.0.2 running on my Mandy 2006, works without probs), btw I like the Icons that come with the official OOo-package ;) I can live with KDE 3.4 and gnome 2.10 (at least mandy-kde was bug-fixed lately), but I can also understand people who want a newer version mcc should definitely overhauled, it is basically a great tool, but the idea with tabs mentioned earlier sounds great, the text-based interface of mcc needs definitely a new design, I would like that mcc could be used from CLI with ALL functions (would be nice on a server without X), a clear split into a backend, a CLI- and X-frontend would be appreciated, so you don't need any X-related stuff to be installed (I know that it is splitted into different packages, but the splitting seems to be somewhat inconsistent). etc-update should be installed by default, keeps your /etc clean when you update packages and does warn you if some of your configuration files would get altered newer kernels are definitely welcomed I think mandriva should focus on its strengths and make them near-to-perfect: MCC, msec and urpmi

is ACPI enabled on your Notebook ? look in MCC / System services, there should be two entrys ACPI and ACPID, both should be activated at startup look in MCC / Package Management if you have these rpm-packages installed: acpi acpid cpufreq powernowd acpitool (not absolutely necessary, but very informative) klaptop (should give you a battery-monitor in KDE, it can be enabled in the KDE-Controlcenter, there you can enable some ACPI-settings too) make sure that apm is uninstalled or at least not activated at startup if ACPI is working, since both might interfere more info can be found in the following threads: https://mandrivausers.org/index.php?showtopic=32777 and https://mandrivausers.org/index.php?showtopic=29653

If you buy a Lenovo, you should only buy one of the Thinkpad-line, they are still built under the IBM-specifications, their other models seem to have some serious quality problems, at least lately I hear more and more complaints about declining quality And yes the Linux-Story seemed to be a bit media-hyped I had no problems with hp omnibooks so far (but make sure to buy their business-line, no pavillions) toshiba and acer have good quality too, at least I had never any problems with them

I would not use rsa-keys with ssh, better use dsa-keys > ssh-keygen -d will generate a 1024-bit dsa-key for bastille not anymore included in mandriva: it seems that at least some parts went into msec, if you have direct root-login disabled in msec then you will find a file in /etc called Bastille-no-login, this is one of the remnants of mechanisms that went from bastille into msec but yes it would be nice to have a complete bastille-suite delivered with mandriva, since originally bastille was mainly developed with red hat and mandrake in mind, hey Bastille is after all french btw I found some info on their site that they are working on updates for mandriva 2006

some updates: since I forgot some things on my original post here they are: acpitool is a nice console tool, it gives you detailed information about the acpi-related stuff on your system, nicest thing is, it can show you if your batteries are still up to their full design capacity or on the way to death, and specially for toshiba-users it has the nice option to force the cpu-fan on or off (although I haven't the chance to test this, no toshiba on hand, sorry) for omnibook users there is a tool called komnibook, but it works only with a kernel that has the omnibook-kernel-module enabled (afaik the multimedia-kernel has it enabled), but tests on two omnibooks were without success, since the tool seems not to work with kernel 2.6 Direct Rendering (Hardware-3D) problems with SXGA+ (1400x1050): maybe your Direct Rendering (Hardware-3D) won't work with 1400x1050, you may get it working by reducing the resolution to 1280x1024 (not through grandr or krandr, but by telling XFdrake (or YAST; or whatelse) your monitor does only 1280x1024, but be warned, your screen will look ugly with 1280 scaled up to 1400, so this is only an option if you really need Hardware-3D, and sometimes XFdrake refuses to use these settings, since it insist on your 1400-Display) this Hardware-3D problem is not madriva-specific, had this on several suses and ubuntus too, and if you have xinerama enabled Hardware-3D will get disabled (this is not only the case on Notebooks) hot-swapping once it worked, but now pulling out my hot-swap media-bay locks my system entirely (think this occured first when the kernel was changed to 2.6 and udev was used, but I'm not entirely sure) if you have an IBM Thinkpad, you may be lucky; just be sure that ultrabayd is enabled as a service on startup (you can check/enable this in MCC/System Services), ultrabayd is part of the tpctl-package, so check if it is installed on your thinkpad (it should be) you may try to unregister your media-bay/corresponding IDE-interface with hdparm, but this may or may not work (for me it did not :wacko: ) this is again not mandriva-specific, tested it on suse 9.3 and ubuntu 6.06, all the same, for ubuntu there is a utility called hotswap (there is even a GUI-interface), but it seems that it tries nothing else than what I tried through hdparm (btw, it did not work for me, and it seems that the basic-tool is not maintained anymore) I tried this with kernels up to 2.6.15 (the one in ubuntu), since the IDE-part seems to be a work in progress at the moment, tests with newer kernels may give different results there is another thinkpad specific tool called apmiser, don't know what it does, but seems to do some energy-saving if you're on batteries, just like the laptop-mode-tools an update to multimedia-buttons: even with acme not all of your buttons may work (I have four on my omnibook, those for browser and email work, the other two, which were for HP-specific tools don't) this maybe a bit offtopic, but the volume, mute and email-button (for chat-button I don't know, don't use it) on my logitech mx-610 all work without any configuration needed :D one last note: do not use too many tools in parallel, e. g. cpudyn AND powernowd (mandriva lets you install both, while ubuntu wisely uninstalls one of them), some tools may interfere with each other, especially be cautious with all those energy-saving tools, sometimes I have the impression they are not more than placebo

I am not very familiar with quake 4, but does it have a configuration file (like the .ini files in UT 2003), maybe there you can modify the path ?

mandrake 10.1 is not supported anymore, you won't get any new security upgrades for it, therefore as scarecrow already said you should consider an upgrade

maybe you have your mandriva-box configured to use zeroconf (its a bit like apple's rendevouz), it always reverts back to a standard resolv.conf to disable zeroconf, look in the MCC, system services; if the services mDNSresponder and nifd are running/enabled at startup then disable them the opera-rpm from opera.com does generate a menu-entry (it's been doing it since at least Opera 5) btw, sometimes you have to tell windows the adress of your nameserver too ;) maybe some information about your network-setup would help: are you on a dialup-connection or through a router ? fixed IP or DHCP ? do you have an internal DNS; maybe your router ?