Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Moez Roy
Here are 2 solutions: - Solution 1: Keeps -z now (Full RELRO) but removes guile: I changed the first 2 lines in the spec file to: %global without dane %global without guile and the latest version builds successfully: https://koji.fedoraproject.org/koji/taskinfo?taskID=9276305

Re: Heads up: nss-3.18 released: coming to fedora

2015-03-19 Thread Yaakov Selkowitz
On Thu, 2015-03-19 at 17:41 -0400, Elio Maldonado wrote: > nss-3.18 was released. Please see the upstream release notes at > > https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes > > Rawhide is now updated and it should start showing up on updates-testing for > F

Heads up: nss-3.18 released: coming to fedora

2015-03-19 Thread Elio Maldonado
nss-3.18 was released. Please see the upstream release notes at https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes Rawhide is now updated and it should start showing up on updates-testing for F-22 and stable branches next week. Elio -- devel mailing list de

Re: GNOME 3.15.92 megaupdate

2015-03-19 Thread Kalev Lember
On 03/16/2015 01:30 PM, Kalev Lember wrote: > GNOME 3.15.92 release is this week and I'll take care of handling the > megaupdate for F22. It made it to updates-testing now, as of a few moments ago. Testing, bug reports (in bugzilla) and karma (in the ticket below) are all much welcome! https://ad

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Adam Jackson
On Wed, 2015-03-18 at 00:36 +0100, Kevin Kofler wrote: > Richard Hughes wrote: > > Perhaps, when we stop writing low level tools with specific > > latency requirements in interpreted languages... > > +1 > > In fact, IMHO, we should stop writing ANYTHING in interpreted languages. I look forward t

Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Adam Jackson
On Thu, 2015-03-12 at 10:41 -0400, Adam Jackson wrote: > We may want to revisit this, honestly. The actual proposal was just to > build executables as PIE, right? Forcing -z now is a bit more than > maybe was expected. I've reopened the ticket and added a patch: https://fedorahosted.org/fesco/

Re: hardening breaks X.org

2015-03-19 Thread Adam Jackson
On Thu, 2015-03-19 at 11:36 +0100, Florian Weimer wrote: > On 03/02/2015 02:16 AM, David Airlie wrote: > > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > > > Thanks guys, my system is more secure, but I can't run any apps. > > > > Anyways enough snark from me, the p

Re: octave-symbolic license change from GPLv2+ to GPLv3+

2015-03-19 Thread Colin Macdonald
On 09/02/15 22:28, Kevin Kofler wrote: > Colin Macdonald wrote: >> I'm the new upstream developer of this. Its a rewrite from scratch. If >> it helps, I'm happy to (help) maintain the Fedora package---unless of >> course we have some policy against that. > > Welcome to Fedora! Your help is of co

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
On Thu, Mar 19, 2015 at 09:19:49AM -0600, Orion Poplawski wrote: > On 03/19/2015 08:17 AM, Richard W.M. Jones wrote: > > > > Orion, I realize there was not anything actionable in my last > > emails. > > > > Could you take a look at this scratch build: > > > > http://koji.fedoraproject.org/koji

Re: ocaml cairo

2015-03-19 Thread Orion Poplawski
On 03/19/2015 08:17 AM, Richard W.M. Jones wrote: > > Orion, I realize there was not anything actionable in my last > emails. > > Could you take a look at this scratch build: > > http://koji.fedoraproject.org/koji/taskinfo?taskID=9273794 > > and check that it's suitable for what you want. >

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
Orion, I realize there was not anything actionable in my last emails. Could you take a look at this scratch build: http://koji.fedoraproject.org/koji/taskinfo?taskID=9273794 and check that it's suitable for what you want. If plplot is using ocamlfind, then we may need to change the META file

New Article on Future Docker Security.

2015-03-19 Thread Daniel J Walsh
http://opensource.com/business/15/3/docker-security-future -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

[Base] Base Design WG agenda meeting 20 March 2015 14:00 UTC on #fedora-meeting

2015-03-19 Thread Harald Hoyer
THIS TIME at 14:00 UTC because of US summer time. Agenda: - Interview candidates for new memberships - Optionally accept new members - Open Floor Please add items by replying to this mail. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/de

F-22 Branched report: 20150319 changes

2015-03-19 Thread Fedora Branched Report
Compose started at Thu Mar 19 07:15:02 UTC 2015 Broken deps for armhfp -- [Sprog] Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0) [aeskulap] aeskulap-0.2.2-0.19beta1.fc22.armv7hl requires libofstd.so.3.6

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Sergio Pascual
2015-03-18 18:51 GMT+01:00 Ralf Corsepius : > On 03/18/2015 05:46 PM, Rahul Sundaram wrote: > >> Hi >> >> On Wed, Mar 18, 2015 at 12:21 PM, Mike Pinkerton wrote: >> >> >> What I don't understand is the wisdom of an official Fedora >> "product" endorsing a copr when either the software or

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
On Thu, Mar 19, 2015 at 08:50:49AM +, Richard W.M. Jones wrote: > So I believe in this case, unless anyone objects, we should simply > replace the upstream of the ocaml-cairo package with > https://github.com/Chris00/ocaml-cairo > > I _don't_ think we need to rename the package nor create a ne

Re: hardening breaks X.org

2015-03-19 Thread Florian Weimer
On 03/02/2015 02:16 AM, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. > > Anyways enough snark from me, the problem seems to be that hardening > makes bind now override RTLD_LAZY

Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Tomas Mraz
On 19.3.2015 08:16, Nikos Mavrogiannopoulos wrote: On Wed, 2015-03-18 at 11:37 -0700, Moez Roy wrote: FULL RELRO http://tk-blog.blogspot.co.at/2009/02/relro-not-so-well-known-memory.html If that's all we got I suggest to remove this flag or (better) provide a way for applications that use modul

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Jaroslav Reznik
- Original Message - > On 03/18/2015 05:46 PM, Rahul Sundaram wrote: > > Hi > > > > On Wed, Mar 18, 2015 at 12:21 PM, Mike Pinkerton wrote: > > > > > > What I don't understand is the wisdom of an official Fedora > > "product" endorsing a copr when either the software or packaging (

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Jaroslav Reznik
- Original Message - > On 03/18/2015 12:55 PM, Peter Robinson wrote: > > How are "disabled repositories" going to be approved for inclusion? > > While you likely meant political meaning of "how", I would like share how it > will be done technically. > > Approximately 6 months ago Env&Stac

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
On Wed, Mar 18, 2015 at 08:42:40PM -0600, Orion Poplawski wrote: > Richard - > >Apparently plplot is shifting to using > https://github.com/Chris00/ocaml-cairo for it ocaml cairo bindings. > It is known by "cairo2" on opam. plplot appears to be the only user > of ocaml-cairo. Do you have any

Re: FreeRDP downgrade in rawhide and f22 updates-testing

2015-03-19 Thread David Woodhouse
On Wed, 2015-03-18 at 22:07 +0300, Pavel Alexeev wrote: > > > Why you revert it in rawhide too? > > I could help with rebuilding dependencies. Is there other known > troubles except so-name change? It's more *rewriting* dependencies than rebuilding them. Especially guacamole. You ha

Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Nikos Mavrogiannopoulos
On Wed, 2015-03-18 at 11:37 -0700, Moez Roy wrote: > >>> > FULL RELRO > >>> > http://tk-blog.blogspot.co.at/2009/02/relro-not-so-well-known-memory.html > >>> If that's all we got I suggest to remove this flag or (better) provide a > >>> way for applications that use modules to compile themselves, w