repo-non-oss
Non-OSS Repository
99
/
repo-update
Main Update Repository
99
/
repo-update-non-oss
Update Repository (Non-Oss)
99
/
splash=silent resume=/dev/disk/by-id/ata-SATA_SSD_A45A079C1C8600706471-part1 quiet mitigations=auto
auto
auto
false
true
false
gfxterm
8
vga=gfx-1024x768x16
grub2-efi
false
public
false
off
false
Unsolicited incoming network packets are rejected. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.
false
block
Block
%%REJECT%%
For computers in your demilitarized zone that are publicly-accessible with limited access to your internal network. Only selected incoming connections are accepted.
false
dmz
ssh
DMZ
default
Unsolicited incoming network packets are dropped. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.
false
drop
Drop
DROP
For use on external networks. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.
true
external
ssh
External
default
For use in home areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.
false
home
ssh
mdns
samba-client
dhcpv6-client
Home
default
For use on internal networks. You mostly trust the other computers on the networks to not harm your computer. Only selected incoming connections are accepted.
false
internal
ssh
mdns
samba-client
dhcpv6-client
Internal
default
For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.
false
public
ssh
dhcpv6-client
tigervnc
tigervnc-https
Public
default
All network connections are accepted.
false
trusted
Trusted
ACCEPT
For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.
false
work
ssh
dhcpv6-client
Work
default
false
true
100
x
users
true
1
x
bin
daemon
true
496
x
polkitd
true
491
x
utmp
true
478
x
systemd-network
true
484
x
lp
true
477
x
systemd-timesync
true
468
x
vnc
true
485
x
kvm
true
51
x
postfix
true
65533
x
nogroup
nobody
true
493
x
wheel
true
488
x
dialout
elpos
true
5
x
tty
true
65534
x
nobody
true
2
x
daemon
true
483
x
tape
true
15
x
shadow
vnc
true
498
x
mysql
true
479
x
systemd-journal
true
475
x
pulse
true
471
x
sshd
true
0
x
root
true
487
x
disk
true
474
x
pulse-access
true
490
x
audio
pulse
true
472
x
nscd
true
42
x
trusted
true
59
x
maildrop
postfix
true
495
!
mail
postfix
true
492
x
kmem
true
469
x
lightdm
true
467
x
sddm
true
62
x
man
true
497
x
messagebus
true
480
x
tftp
dnsmasq,tftp
true
499
x
lock
true
486
x
input
true
473
x
chrony
true
489
x
cdrom
true
71
x
ntadmin
true
482
x
video
true
481
x
rtkit
true
476
x
systemd-coredump
true
470
x
avahi
true
494
!
ftp
127.0.0.1
localhost amora-mia
192.168.1.1
amora-mia
::1
localhost ipv6-localhost ipv6-loopback
fe00::0
ipv6-localnet
ff00::0
ipv6-mcastprefix
ff02::1
ipv6-allnodes
ff02::2
ipv6-allrouters
ff02::3
ipv6-allhosts
english-us
en_US
he_IL,en_US
elpos
true
AUTO
true
posadmin
auto
dhcp
eth0
auto
dhcp
0
eth1
auto
dhcp
p8p1
auto
false
true
true
false
false
auto
false
false
false
0.opensuse.pool.ntp.org
true
false
1.opensuse.pool.ntp.org
true
false
2.opensuse.pool.ntp.org
true
false
3.opensuse.pool.ntp.org
true
false
systemd
/dev/sda
msdos
false
false
true
swap
true
swap
uuid
253
1
primary
false
4198498304
true
ext4
true
/
uuid
131
2
primary
false
68719476736
true
vfat
true
/boot/efi
uuid
131
3
primary
false
524288000
CT_DISK
Order allow,deny
# Restrict access to the admin pages...
Order allow,deny
# Restrict access to configuration files...
AuthType Default
Require user @SYSTEM
Order allow,deny
# Restrict access to log files...
AuthType Default
Require user @SYSTEM
Order allow,deny
# Set the default printer/job policies...
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
Order deny,allow
Require user @OWNER @SYSTEM
Order deny,allow
# All administration operations require an administrator to authenticate...
AuthType Default
Require user @SYSTEM
Order deny,allow
# All printer operations require a printer operator to authenticate...
AuthType Default
Require user @SYSTEM
Order deny,allow
# Only the owner or an administrator can cancel or authenticate a job...
Require user @OWNER @SYSTEM
Order deny,allow
Order deny,allow
# Set the authenticated printer/job policies...
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
AuthType Default
Order deny,allow
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
# All administration operations require an administrator to authenticate...
AuthType Default
Require user @SYSTEM
Order deny,allow
# All printer operations require a printer operator to authenticate...
AuthType Default
Require user @SYSTEM
Order deny,allow
# Only the owner or an administrator can cancel or authenticate a job...
AuthType Default
Require user @OWNER @SYSTEM
Order deny,allow
Order deny,allow
# Set the kerberized printer/job policies...
# Job/subscription privacy...
JobPrivateAccess default
JobPrivateValues default
SubscriptionPrivateAccess default
SubscriptionPrivateValues default
# Job-related operations must be done by the owner or an administrator...
AuthType Negotiate
Order deny,allow
AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow
# All administration operations require an administrator to authenticate...
AuthType Default
Require user @SYSTEM
Order deny,allow
# All printer operations require a printer operator to authenticate...
AuthType Default
Require user @SYSTEM
Order deny,allow
# Only the owner or an administrator can cancel or authenticate a job...
AuthType Negotiate
Require user @OWNER @SYSTEM
Order deny,allow
Order deny,allow
# The policy below is added by SUSE during build of our cups package.
# The policy 'allowallforanybody' is totally open and insecure and therefore
# it can only be used within an internal network where only trused users exist
# and where the cupsd is not accessible at all from any external host, see
# http://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings
# Have in mind that any user who is allowed to do printer admin tasks
# can change the print queues as he likes - e.g. send copies of confidental
# print jobs from an internal network to any external destination, see
# http://en.opensuse.org/SDB:CUPS_in_a_Nutshell
# For documentation regarding 'Managing Operation Policies' see
# http://www.cups.org/documentation.php/doc-1.7/policies.html
# Allow anybody to access job's private values:
JobPrivateAccess all
# Make none of the job values to be private:
JobPrivateValues none
# Allow anybody to access subscription's private values:
SubscriptionPrivateAccess all
# Make none of the subscription values to be private:
SubscriptionPrivateValues none
# Allow anybody to do all IPP operations:
# Currently the IPP operations Validate-Job Cancel-Jobs Cancel-My-Jobs Close-Job CUPS-Get-Document
# must be additionally exlicitly specified because those IPP operations are not included
# in the "All" wildcard value - otherwise cupsd prints error messages of the form
# "No limit for Validate-Job defined in policy allowallforanybody and no suitable template found."
Order deny,allow
Allow from all
# Since CUPS > 1.5.4 the "All" wildcard value must be specified separately,
# otherwise clients like "lpstat -p" just hang up,
# see https://bugzilla.opensuse.org/show_bug.cgi?id=936309
# and https://www.cups.org/str.php?L4659
Order deny,allow
Allow from all
# Explicitly set the CUPS 'default' policy to be used by default:
DefaultPolicy default
]]>
false
localhost,127.0.0.1
true
true
0
true
true
0
true
true
0
true
true
0
graphical
ModemManager
NetworkManager
NetworkManager-dispatcher
NetworkManager-wait-online
YaST2-Firstboot
YaST2-Second-Stage
anydesk
apparmor
auditd
avahi-daemon
bluetooth
klog
chronyd
cpupower
cron
cups
display-manager
getty@tty1
haveged
irqbalance
iscsi
kbdsettings
lvm2-monitor
mcelog
msmserver
nscd
postfix
purge-kernels
rsyslog
smartd
sshd
systemd-fsck-root
systemd-timesyncd
iscsid
true
zip
yast2-users
yast2-trans-he
yast2-services-manager
yast2-proxy
yast2-printer
yast2-ntp-client
yast2-nis-client
yast2-network
yast2-installation
yast2-firewall
yast2-country
yast2-bootloader
yast2-add-on
xorg-x11-Xvnc-novnc
vsftpd
spectacle
openssh
openSUSE-release
okular
numactl
mc
libpangox-1_0-0
libigdgmm11
libgtkglext-x11-1_0-0
konsole
knotes
kmail
kexec-tools
jq
irqbalance
intel-media-driver
gwenview5
grub2-x86_64-efi
grub2
glibc
gcc7
firewalld
fetchmsttfonts
eog-plugin-slideshowshuffle
e2fsprogs
dosfstools
culmus-fonts
chrony
biosdevname
autoyast2-installation
autoyast2
SPI-bin
NetworkManager
MozillaFirefox-branding-upstream
MozillaFirefox
apparmor
apparmor_opt
base
basesystem
enhanced_base
enhanced_base_opt
fonts
fonts_opt
kde_plasma
kde_yast
minimal_base
x11
x11_enhanced
x11_opt
x11_yast
yast2_basis
openSUSE
false
false
localtime
Asia/Jerusalem
100
/home
0
true
/bin/bash
/etc/skel
022
true
gtmuser
100
/home/gtmuser
false
99999
0
7
/bin/bash
1000
$6$JrCoSjBFEcPX$/Uoml.tUMZHpKgrLqFtaU9sBqwamdDPZuTxq0YBaShsJ5Yz9B.rSfm9/D51TxUKETCbsUCz0xxG1mM0OdyMuq0
gtmuser
true
elpos
100
/home/elpos
false
99999
0
7
/bin/bash
1001
$6$OEiVNlVfftfpY3TT$T9PnKdHAqCQyeZCfFD2B84.niFjGa/IXDZ/17zHp.PvLUKCffRe2sfxlSf7B5K6Yc0XzygRDstFOXLiRhuwiV0
elpos
true
bin
1
/bin
false
99999
0
7
/sbin/nologin
1
!
bin
true
User for polkitd
496
/var/lib/polkit
false
99999
0
7
/sbin/nologin
498
!
polkitd
true
SDDM daemon
467
/var/lib/sddm
false
99999
0
7
/bin/false
464
!
sddm
true
systemd Network Management
478
/
false
99999
0
7
/sbin/nologin
478
!!
systemd-network
true
dnsmasq
65533
/var/lib/empty
false
99999
0
7
/bin/false
492
!
dnsmasq
true
Printing daemon
484
/var/spool/lpd
false
99999
0
7
/sbin/nologin
494
!
lp
true
Postfix Daemon
51
/var/spool/postfix
false
99999
0
7
/bin/false
51
!
postfix
true
user for VNC
468
/var/lib/empty
false
99999
0
7
/sbin/nologin
465
!
vnc
true
systemd Time Synchronization
477
/
false
99999
0
7
/sbin/nologin
477
!!
systemd-timesync
true
Manual pages viewer
62
/var/lib/empty
false
99999
0
7
/sbin/nologin
13
!
man
true
User for D-Bus
497
/run/dbus
false
99999
0
7
/usr/bin/false
499
!
messagebus
true
nobody
65534
/var/lib/nobody
false
99999
0
7
/bin/bash
65534
!
nobody
true
Daemon
2
/sbin
false
99999
0
7
/sbin/nologin
2
!
daemon
true
TFTP account
480
/srv/tftpboot
false
99999
0
7
/bin/false
493
!
tftp
true
MySQL database admin
498
/var/lib/mysql
false
99999
0
7
/bin/false
60
!
mysql
true
Secure FTP User
65534
/var/lib/empty
false
99999
0
7
/bin/false
473
!
ftpsecure
true
root
0
/root
false
99999
0
7
/bin/bash
0
$6$j.dzp50PGoUn$xhOIjLG2kkx2uxE3IkZjT1zjBY53t2jmtHB63mzL5fQlbO5lAC2wzCTutDFqunyEm3XA/ravM5/LCWY48EMVi/
root
true
SSH daemon
471
/var/lib/sshd
false
99999
0
7
/bin/false
471
!
sshd
true
PulseAudio daemon
475
/var/lib/pulseaudio
false
99999
0
7
/sbin/nologin
475
!
pulse
true
Chrony Daemon
473
/var/lib/chrony
false
99999
0
7
/bin/false
474
!
chrony
true
User for nscd
472
/run/nscd
false
99999
0
7
/sbin/nologin
472
!
nscd
true
RealtimeKit
481
/proc
false
99999
0
7
/bin/false
495
!
rtkit
true
NFS statd daemon
65533
/var/lib/nfs
false
99999
0
7
/sbin/nologin
468
!
statd
true
User for Avahi
470
/run/avahi-daemon
false
99999
0
7
/bin/false
467
!
avahi
true
systemd Core Dumper
476
/
false
99999
0
7
/sbin/nologin
476
!!
systemd-coredump
true
user for rpcbind
65534
/var/lib/empty
false
99999
0
7
/sbin/nologin
470
!
rpc
true
usbmuxd daemon
65533
/var/lib/usbmuxd
false
99999
0
7
/sbin/nologin
469
!
usbmux
true
Mailer daemon
495
/var/spool/clientmqueue
false
99999
0
7
/sbin/nologin
497
!
mail
true
FTP Account
494
/srv/ftp
false
99999
0
7
/sbin/nologin
496
!
ftp
true
LightDM daemon
469
/var/lib/lightdm
false
99999
0
7
/bin/false
466
!
lightdm