Re: F22 System Wide Change: Set sshd(8) PermitRootLogin=no

2015-01-11 Thread Gerd Hoffmann
Hi, > Often not the case in small business or third party hosted > environments. Without remote ssh, box is unmanageable. > > Even if you want to do key-based authentication rather than password, > you still need to use password initially to get the key onto the > remote box. Just curio

Re: F22 System Wide Change: Set sshd(8) PermitRootLogin=no

2015-01-11 Thread Richard W.M. Jones
On Thu, Jan 08, 2015 at 01:34:14PM -0700, Stephen John Smoogen wrote: > We virtualize most of our > servers which ends up with even more weird problems of trying to get > working. Could you expand on these problems you have with virtualized systems? I wrote a tool called virt-rescue which should

Re: A little problem with dnf

2015-01-11 Thread Adrian Soliard
2015-01-11 20:42 GMT-03:00 Igor Gnatenko : > On Mon, Jan 12, 2015 at 2:40 AM, Adrian Soliard > wrote: >> Hi everyone! >>I'm struggling a bit with dnf. It may have advantages, but as an >> end-user, I'm fighting with the list of packages when I press TAB. >> It's complicated, if I forget to ins

Re: A little problem with dnf

2015-01-11 Thread Igor Gnatenko
On Mon, Jan 12, 2015 at 2:40 AM, Adrian Soliard wrote: > Hi everyone! >I'm struggling a bit with dnf. It may have advantages, but as an > end-user, I'm fighting with the list of packages when I press TAB. > It's complicated, if I forget to install a specific package, dnf > wouldn't show it to

A little problem with dnf

2015-01-11 Thread Adrian Soliard
Hi everyone! I'm struggling a bit with dnf. It may have advantages, but as an end-user, I'm fighting with the list of packages when I press TAB. It's complicated, if I forget to install a specific package, dnf wouldn't show it to me, yum do it [1]. I know that dnf is newer, and surely will impr

Re: Fedora tcp_wrappers (missing) support for custom acl scripts, aclexec

2015-01-11 Thread Pasi Kärkkäinen
On Sun, Jan 11, 2015 at 09:29:08PM +0100, Tomasz Torcz wrote: > On Sat, Jan 10, 2015 at 12:16:38AM +0200, Pasi Kärkkäinen wrote: > > Hello, > > > > I recently noticed Debian/Ubuntu has had support for "aclexec" in > > tcp_wrappers via a custom patch since 2006, > > so you can do this in /etc/host

Re: Fedora tcp_wrappers (missing) support for custom acl scripts, aclexec

2015-01-11 Thread Tomasz Torcz
On Sat, Jan 10, 2015 at 12:16:38AM +0200, Pasi Kärkkäinen wrote: > Hello, > > I recently noticed Debian/Ubuntu has had support for "aclexec" in > tcp_wrappers via a custom patch since 2006, > so you can do this in /etc/hosts.allow or hosts.deny: > > > What do people feel about that? I'd like to

Re: Fedora tcp_wrappers (missing) support for custom acl scripts, aclexec

2015-01-11 Thread Pasi Kärkkäinen
Hello, People who have their names in the Fedora tcp_wrappers changelog added to CC list.. Any comments about the below? Obviously aclexec feature would be useful for all services using tcpwrappers/libwrap (ftp,telnet,tftp,ident,nfs, and many others), and thus very nice to have. Thanks, -- P

[Test-Announce] Proposal to CANCEL: 2015-01-12 Fedora QA Meeting

2015-01-11 Thread Adam Williamson
Hi folks! So I don't think we have anything particular to discuss at a meeting tomorrow, thus according to the policy of not wasting people's time with unnecessary meetings, I propose we cancel it. If anyone did have something to discuss, please do reply to this mail! We could possibly move blo

Orphaning pympdtouchgui

2015-01-11 Thread Sven Lankes
Hi, I'm orphaning pympdtouchgui - while it may still work I've never actually used it myself and I do not know of any other user of the package. Additionally it hasn't been touched by $upstream in almost four years. -- sven === jabber/xmpp: s...@lankes.net -- devel mailing list devel@lists.fed

Re: Unpackaged files checking - oddities

2015-01-11 Thread Michael Schwendt
On Sun, 11 Jan 2015 12:32:04 +0100, Thomas Moschny wrote: > 2015-01-10 13:04 GMT+01:00 Michael Schwendt: > > %exclude is global per spec file, or else you would need to %exclude > > a file in _all_ subpackages (in the case when deleting it in %install > > would be more convenient anyway). That wou

Re: Unpackaged files checking - oddities

2015-01-11 Thread Thomas Moschny
2015-01-10 13:04 GMT+01:00 Michael Schwendt : > %exclude is global per spec file, or else you would need to %exclude > a file in _all_ subpackages (in the case when deleting it in %install > would be more convenient anyway). That would cause some pain in some > packages. Is that really true? But

rawhide report: 20150111 changes

2015-01-11 Thread Fedora Rawhide Report
Compose started at Sun Jan 11 05:15:03 UTC 2015 Broken deps for i386 -- [Sprog] Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0) [aeskulap] aeskulap-0.2.2-0.19beta1.fc22.i686 requires libofstd.so.3.6 aesku

Re: Removing (or trying to) BerkeleyDB from Fedora

2015-01-11 Thread Richard W.M. Jones
On Thu, Jan 08, 2015 at 10:10:03AM -0500, David Cantrell wrote: > On Thu, Jan 08, 2015 at 09:32:04AM -0500, Josh Boyer wrote: > > On Thu, Jan 8, 2015 at 9:18 AM, Chris Adams wrote: > > > Once upon a time, Jan Staněk said: > > >> The topic of BerkeleyDB v6 in Fedora was already discussed at this l

Re: F22 System Wide Change: Set sshd(8) PermitRootLogin=no

2015-01-11 Thread Peter Robinson
> The only other approach I could see for the headless > servers would be mandating the enrollment in an identity domain at > installation time (such as to FreeIPA or Active Directory). And in this scenario we should absolutely disable PermitRootLogin. >>> >>> >>> So that