splash=silent resume=/dev/disk/by-id/scsi-36f402700ce306f0025f130aa16160ea1-part3 mitigations=auto quiet elevator=noop auto auto false true gfxterm 8 false vga=gfx-1024x768x16 grub2 false public false off false Unsolicited incoming network packets are rejected. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed. false block Block %%REJECT%% For computers in your demilitarized zone that are publicly-accessible with limited access to your internal network. Only selected incoming connections are accepted. false dmz ssh DMZ default Unsolicited incoming network packets are dropped. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed. false drop Drop DROP For use on external networks. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. true external ssh External default For use in home areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. false home ssh mdns samba-client dhcpv6-client Home default For use on internal networks. You mostly trust the other computers on the networks to not harm your computer. Only selected incoming connections are accepted. false internal ssh mdns samba-client dhcpv6-client Internal default For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. false public dhcpv6-client Public default All network connections are accepted. false trusted Trusted ACCEPT For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted. false work ssh dhcpv6-client Work default false true true true true false true false true 100 x users true 65533 x nogroup nobody true 51 x postfix true 481 x systemd-network true 499 x messagebus true 485 x video true 492 x cdrom true 491 x dialout true 487 x lp true 65534 x nobody true 493 x audio true 42 x trusted true 477 x nscd true 480 x systemd-coredump true 494 x utmp true 497 x wheel true 5 x tty true 482 x systemd-timesync true 475 x chrony true 496 x kmem true 474 x sshd true 486 x tape true 489 x input true 484 x tftp dnsmasq,tftp true 470 x qemu true 490 x disk true 483 x systemd-journal true 498 ! mail postfix true 71 x ntadmin true 471 x lightdm true 1 x bin daemon true 2 x daemon true 59 x maildrop postfix true 478 x brlapi true 15 x shadow vnc true 473 x tomcat true 476 x scard true 479 x polkitd true 0 x root true 495 x lock true 472 x vnc true 488 x kvm qemu true 62 x man 127.0.0.1 localhost 192.168.11.111 delis delis delis ::1 localhost ipv6-localhost ipv6-loopback fe00::0 ipv6-localnet ff00::0 ipv6-mcastprefix ff02::1 ipv6-allnodes ff02::2 ipv6-allrouters ff02::3 ipv6-allhosts english-us en_US he_IL,en_US gtmuser AUTO true delis 8.8.8.8 8.8.4.4 auto false static em1 yes 192.168.11.1 255.255.255.0 24 auto static em2 192.168.11.111 NetXtreme BCM5720 2-port Gigabit Ethernet PCIe 255.255.255.0 24 auto static lo no 127.0.0.1 255.0.0.0 127.0.0.0 8 nfsroot no false true false em1 ATTR{address} 6c:2b:59:a7:a4:1a em2 ATTR{address} 6c:2b:59:a7:a4:1b true false default - 192.168.11.138 - auto false false false auto

0.opensuse.pool.ntp.org

true false systemd /dev/sda gpt true false true false 263 1 false 8388608 true true btrfs true / uuid 131 2 false 477401972736 true tmp true srv true boot/grub2/x86_64-efi true home true opt true root false var true usr/local true boot/grub2/i386-pc true swap true swap uuid 130 3 false 2148515328 CT_DISK all Order allow,deny # Restrict access to the admin pages... Order allow,deny # Restrict access to configuration files... AuthType Default Require user @SYSTEM Order allow,deny # Restrict access to log files... AuthType Default Require user @SYSTEM Order allow,deny # Set the default printer/job policies... # Job/subscription privacy... JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default # Job-related operations must be done by the owner or an administrator... Order deny,allow Require user @OWNER @SYSTEM Order deny,allow # All administration operations require an administrator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow # All printer operations require a printer operator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow # Only the owner or an administrator can cancel or authenticate a job... Require user @OWNER @SYSTEM Order deny,allow Order deny,allow # Set the authenticated printer/job policies... # Job/subscription privacy... JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default # Job-related operations must be done by the owner or an administrator... AuthType Default Order deny,allow AuthType Default Require user @OWNER @SYSTEM Order deny,allow # All administration operations require an administrator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow # All printer operations require a printer operator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow # Only the owner or an administrator can cancel or authenticate a job... AuthType Default Require user @OWNER @SYSTEM Order deny,allow Order deny,allow # Set the kerberized printer/job policies... # Job/subscription privacy... JobPrivateAccess default JobPrivateValues default SubscriptionPrivateAccess default SubscriptionPrivateValues default # Job-related operations must be done by the owner or an administrator... AuthType Negotiate Order deny,allow AuthType Negotiate Require user @OWNER @SYSTEM Order deny,allow # All administration operations require an administrator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow # All printer operations require a printer operator to authenticate... AuthType Default Require user @SYSTEM Order deny,allow # Only the owner or an administrator can cancel or authenticate a job... AuthType Negotiate Require user @OWNER @SYSTEM Order deny,allow Order deny,allow # The policy below is added by SUSE during build of our cups package. # The policy 'allowallforanybody' is totally open and insecure and therefore # it can only be used within an internal network where only trused users exist # and where the cupsd is not accessible at all from any external host, see # http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings # Have in mind that any user who is allowed to do printer admin tasks # can change the print queues as he likes - e.g. send copies of confidental # print jobs from an internal network to any external destination, see # http://en.opensuse.org/SDB:CUPS_in_a_Nutshell # For documentation regarding 'Managing Operation Policies' see # http://www.cups.org/documentation.php/doc-1.7/policies.html # Allow anybody to access job's private values: JobPrivateAccess all # Make none of the job values to be private: JobPrivateValues none # Allow anybody to access subscription's private values: SubscriptionPrivateAccess all # Make none of the subscription values to be private: SubscriptionPrivateValues none # Allow anybody to do all IPP operations: # Currently the IPP operations Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document # must be additionally exlicitly specified because those IPP operations are not included # in the "All" wildcard value - otherwise cupsd prints error messages of the form # "No limit for Validate-Job defined in policy allowallforanybody and no suitable template found." Order deny,allow Allow from all # Since CUPS > 1.5.4 the "All" wildcard value must be specified separately, # otherwise clients like "lpstat -p" just hang up, # see https://bugzilla.opensuse.org/show_bug.cgi?id=936309 # and https://www.cups.org/str.php?L4659 Order deny,allow Allow from all # Explicitly set the CUPS 'default' policy to be used by default: DefaultPolicy default ]]> false localhost,127.0.0.1 true true 0 true true 0 true true 0 true true 0 graphical ModemManager YaST2-Firstboot YaST2-Second-Stage apparmor auditd klog btrfsmaintenance-refresh chronyd cron cups wickedd-auto4 wickedd-dhcp4 wickedd-dhcp6 wickedd-nanny display-manager getty@tty1 haveged irqbalance iscsi kbdsettings lvm2-monitor mcelog wicked nscd postfix purge-kernels rsyslog smartd sshd iscsid pcscd true zip xdotool wkhtmltopdf tomcat-webapps tomcat-jsvc tomcat-javadoc tomcat-embed tomcat-admin-webapps tomcat snapper setserial rpm-build python3-pyserial python2-pyserial python2-pyOpenSSL python2-httplib2 python-pyOpenSSL-doc openSUSE-release numactl mc lxrandr log4j libtcnative-1-0 libssl45 kexec-tools java-1_8_0-openjdk-devel irqbalance grub2 glibc firewalld ed e2fsprogs cups-pdf chrony chromium build btrfsprogs biosdevname aytests-tests autoyast2 ant NetworkManager apparmor apparmor_opt base basesystem enhanced_base enhanced_base_opt fonts fonts_opt minimal_base print_server x11 x11_enhanced x11_opt x11_yast yast2_basis openSUSE false false UTC Asia/Jerusalem 100 /home -1 true /bin/bash /etc/skel 022 true gtmuser 100 /home/gtmuser false 99999 0 7 /bin/bash 1000 $6$DXdpJ6qd2GG7$T08dLQUpuDg4f.bMGN.fDunTMX9vOs1ULA2deelMd7pPEtrDLUvZNKmFcW4.op.VSs5OzjgtzTdJ/q1F5G5kP/ gtmuser true systemd Core Dumper 480 / false /sbin/nologin 480 !! systemd-coredump true Apache Tomcat 473 /usr/share/tomcat false /bin/sh 471 ! tomcat true bin 1 /bin false /sbin/nologin 1 ! bin true Daemon 2 /sbin false /sbin/nologin 2 ! daemon true User for nscd 477 /run/nscd false /sbin/nologin 476 ! nscd true Chrony Daemon 475 /var/lib/chrony false /bin/false 474 ! chrony true NFS statd daemon 65533 /var/lib/nfs false /sbin/nologin 478 ! statd true root 0 /root false /bin/bash 0 $6$klbLJvgqW2U5$gNTFBbw4h5YZjDEKzsHRNvSg.QAknL4HLr6wq3EZlUEuuKJncAKxRuqekFkV7gc694Qw0f15FRORlmfG9.9NX. root true Manual pages viewer 62 /var/lib/empty false /sbin/nologin 13 ! man true user for VNC 472 /var/lib/empty false /sbin/nologin 470 ! vnc true User for polkitd 479 /var/lib/polkit false /sbin/nologin 477 ! polkitd true Smart Card Reader 476 /var/run/pcscd false /usr/sbin/nologin 475 ! scard true systemd Time Synchronization 482 / false /sbin/nologin 482 !! systemd-timesync true systemd Network Management 481 / false /sbin/nologin 481 !! systemd-network true qemu user 470 / false /sbin/nologin 468 ! qemu true TFTP account 484 /srv/tftpboot false /bin/false 496 ! tftp true User for D-Bus 499 /run/dbus false /usr/bin/false 499 ! messagebus true user for rpcbind 65534 /var/lib/empty false /sbin/nologin 479 ! rpc true dnsmasq 65533 /var/lib/empty false /bin/false 495 ! dnsmasq true SSH daemon 474 /var/lib/sshd false /bin/false 473 ! sshd true Postfix Daemon 51 /var/spool/postfix false /bin/false 51 ! postfix true nobody 65534 /var/lib/nobody false /bin/bash 65534 ! nobody true Mailer daemon 498 /var/spool/clientmqueue false /sbin/nologin 498 ! mail true LightDM daemon 471 /var/lib/lightdm false /bin/false 469 ! lightdm true usbmuxd daemon 65533 /var/lib/usbmuxd false /sbin/nologin 472 ! usbmux true Printing daemon 487 /var/spool/lpd false /sbin/nologin 497 ! lp