Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Petr Spacek
On 13.12.2016 22:57, Tom Hughes wrote: > On 13/12/16 21:32, Simo Sorce wrote: >> On Tue, 2016-12-13 at 18:52 +, Tom Hughes wrote: >> >>> The main goal of long random passwords after all is about a combination >>> of making them hard to brute force and ensuring that every service has a >>> uniqu

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Scott Schmit
On Tue, Dec 13, 2016 at 05:54:54PM +0100, Florian Weimer wrote: > On 12/13/2016 12:17 PM, Lennart Poettering wrote: > > On Mon, 12.12.16 21:22, Paul Wouters (p...@nohats.ca) wrote: > > > For us (libreswan) it probably makes less sense to restrict address > > > family in the daemon. Our daemon just

Re: F26 System Wide Change: Golang 1.8

2016-12-13 Thread jfilak
I agree with Zbyzsek on this. What about to carry a tiny down-stream patch until this issue is fixed: https://github.com/golang/go/issues/18304 (https://github.com/golang/go/issues/18304) Jakub -- Původní zpráva -- Od: Zbigniew Jędrzejewski-Szmek Komu: Developm

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Ralf Corsepius
On 12/13/2016 07:19 PM, Simo Sorce wrote: On Tue, 2016-12-13 at 14:36 +, Dave Love wrote: Simo Sorce writes: If you really need to automate it because typing a password is too hard: cat ~/.mykrbpassword | kinit myusername It needs to be automated principally because the password is not

Re: F26 System Wide Change: Golang 1.8

2016-12-13 Thread jfilak
Oh drat, I was hoping for a build time configuration option: https://github.com/golang/go/issues/18304 Anyway, the env variable could be exported in the /etc/profile file which is owned by the setup package. However, I don't think it is a good idea to place it there. I would rather export i

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Rahul Sundaram
Hi On Tue, Dec 13, 2016 at 12:00 PM Lennart Poettering > Well, some of them are pretty drastic. For example, I think it would > make a ton of sense to run all daemons where that's possible with > ProtectSystem=strict. This would make the entire directory tree > read-only for them (with the except

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Randy Barlow
On Mon, 2016-12-12 at 14:33 -0700, Kevin Fenzi wrote: > First, I'll note you don't need to get a new ticket every day, you > can > just renew with 'kinit -R'. I am not sure what env kinit needs, but > you > may even be able to do this from a cron job. That will work for 1 > week.  You can even use

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Dec 13, 2016 at 09:10:46PM +0100, Lennart Poettering wrote: > On Tue, 13.12.16 15:02, Przemek Klosowski (przemek.klosow...@nist.gov) wrote: > > > On 12/13/2016 02:51 PM, Lennart Poettering wrote: > > > Yeah, this is really what it boils down to: the goal with the systemd > > > directives i

Re: Two more concrete ideas for what a once-yearly+update schedule would look like

2016-12-13 Thread Matthew Miller
On Fri, Dec 09, 2016 at 12:12:56PM -0800, Adam Williamson wrote: > > What if we combined this time threshold with, also, auto-pushes happen > > only on Monday (or whatever)? > I wouldn't hate it. On a visceral level I've never bought the 'batched > updates' idea at all, but if it only affects autop

Re: Haskell packaging issue: dnf reports "nothing provides ghc()"

2016-12-13 Thread Eric Smith
On Tue, Dec 13, 2016 at 4:38 PM, Orion Poplawski wrote: > Actually, you do need some more BuildRequires: > but I can't reproduce your ghc() issue on EL7 or F25. Thanks for looking at it! With your suggested BuildRequires, scratch builds on Koji succeed for both F24 and F25, but the resulting F2

Re: Gdm set both Desktop and laptop to an X session on Current fedora 25 Workstation.

2016-12-13 Thread Timothy Ward
On Tue, 2016-12-13 at 13:25 -0800, Adam Williamson wrote: > On Wed, 2016-12-14 at 08:20 +1100, Timothy Ward wrote: > > Is there a current problem with gdm setting a X session or Wayland > > session as on login with Gdm setting Gnome or Gnome on Xorg still > > ends > > in an X session. > > > > Conf

Re: Haskell packaging issue: dnf reports "nothing provides ghc()"

2016-12-13 Thread Orion Poplawski
On 12/13/2016 03:52 PM, Eric Smith wrote: > I'm trying to package BNFC, a Haskell program to translate labelled BNF > grammars to lexer and parser specifications for common lexer and parser > generators (Alex, JLex, Flex, Happy, CUP, and Bison). I've tried to follow the > Haskell packaging guidelin

Re: F26 System Wide Change: Enable coredumpctl by default

2016-12-13 Thread Dominik 'Rathann' Mierzejewski
On Monday, 12 December 2016 at 20:54, Nicholas Miell wrote: [...] > systemd-coredump (or, rather, journald) ignores the split between system > accounts and user accounts as configured in /etc/login.defs ("the > authoritative definition of UID/GID space allocation", according to the > Fedora wiki) a

Haskell packaging issue: dnf reports "nothing provides ghc()"

2016-12-13 Thread Eric Smith
I'm trying to package BNFC, a Haskell program to translate labelled BNF grammars to lexer and parser specifications for common lexer and parser generators (Alex, JLex, Flex, Happy, CUP, and Bison). I've tried to follow the Haskell packaging guidelines. My package builds locally, and if I install it

Re: Announcement: Fedora Docker Layered Image Build Service is GO!

2016-12-13 Thread Adam Miller
On Tue, Dec 13, 2016 at 2:52 PM, Igor Gnatenko wrote: > On Tue, Dec 13, 2016 at 8:36 PM, Adam Miller > wrote: >> It is with great pleasure that the Fedora Project Announces the availability >> of the Fedora Docker Layered Image Build Service[0] to the Fedora Contributor >> Community! >> >> With t

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Tom Hughes
On 13/12/16 21:32, Simo Sorce wrote: On Tue, 2016-12-13 at 18:52 +, Tom Hughes wrote: The main goal of long random passwords after all is about a combination of making them hard to brute force and ensuring that every service has a unique password to guard against credential reuse attacks wh

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread David Woodhouse
On Sun, 2016-12-11 at 18:34 -0600, Dennis Gilmore wrote: > All package maintainers will want to make sure they have updated to > the  > following package versions (some may be in testing as of this email): > >  python-cccolutils-1.4-1 >  fedpkg-1.26-2 >  fedora-packager-0.6.0.0-1 >    

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Simo Sorce
On Tue, 2016-12-13 at 18:52 +, Tom Hughes wrote: > On 13/12/16 18:19, Simo Sorce wrote: > > On Tue, 2016-12-13 at 14:36 +, Dave Love wrote: > >> Simo Sorce writes: > >> > >>> If you really need to automate it because typing a password is too hard: > >>> cat ~/.mykrbpassword | kinit myusern

Re: Gdm set both Desktop and laptop to an X session on Current fedora 25 Workstation.

2016-12-13 Thread Adam Williamson
On Wed, 2016-12-14 at 08:20 +1100, Timothy Ward wrote: > Is there a current problem with gdm setting a X session or Wayland > session as on login with Gdm setting Gnome or Gnome on Xorg still ends > in an X session. > > Confirmed from the process list that an X session is set even if Gnome > > i

Gdm set both Desktop and laptop to an X session on Current fedora 25 Workstation.

2016-12-13 Thread Timothy Ward
Is there a current problem with gdm setting a X session or Wayland session as on login with Gdm setting Gnome or Gnome on Xorg still ends in an X session. Confirmed from the process list that an X session is set even if Gnome is selected in gdm.  I am sure I tested after upgrade to F25 and it w

Re: Announcement: Fedora Docker Layered Image Build Service is GO!

2016-12-13 Thread Igor Gnatenko
On Tue, Dec 13, 2016 at 8:36 PM, Adam Miller wrote: > It is with great pleasure that the Fedora Project Announces the availability > of the Fedora Docker Layered Image Build Service[0] to the Fedora Contributor > Community! > > With this announcement we are opening availability of the Docker Layer

Re: Un-retiring QCad

2016-12-13 Thread John Florian
On Tue, 2016-12-13 at 19:45 +0100, Kevin Kofler wrote: Przemek Klosowski wrote: The reason why I'm asking is that I believe that in general FOSS projects should fork as little as possible, and merge as much as possible, to avoid duplication of effort. There are circumstances where the fork is th

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Tom Hughes
On 13/12/16 20:02, Przemek Klosowski wrote: On 12/13/2016 02:51 PM, Lennart Poettering wrote: Yeah, this is really what it boils down to: the goal with the systemd directives is to make things easy to grok and easy to change. I can probably explain to most Linux admins who have administered a cu

Re: Start packaging/maintaining in Fedora

2016-12-13 Thread Przemek Klosowski
On 12/13/2016 03:00 PM, Ms Sanchez wrote: To be honest I looked at wikis and so, but I'm still rather confused, I don't know really where or how to start. Why do I want to start packaging? Well, I want to keep contributing to Fedora but more into development. As I know programming languages

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Lennart Poettering
On Tue, 13.12.16 15:02, Przemek Klosowski (przemek.klosow...@nist.gov) wrote: > On 12/13/2016 02:51 PM, Lennart Poettering wrote: > > Yeah, this is really what it boils down to: the goal with the systemd > > directives is to make things easy to grok and easy to change. I can > > probably explain t

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Przemek Klosowski
On 12/13/2016 02:51 PM, Lennart Poettering wrote: Yeah, this is really what it boils down to: the goal with the systemd directives is to make things easy to grok and easy to change. I can probably explain to most Linux admins who have administered a current Fedora in 5min what ProtectSystem=stric

Re: Start packaging/maintaining in Fedora

2016-12-13 Thread Ms Sanchez
On 12/12/16 13:38, Vít Ondruch wrote: Hi Sylvia, Just wondering, what were the places you were looking at to find the information how to start maintaining package in Fedora. Or what is the reason you want to package something into Fedora. I am asking, since there are various ongoing activ

Re: Packages up for grabs

2016-12-13 Thread Adam Williamson
On Tue, 2016-12-13 at 20:56 +0100, Dan Horák wrote: > On Mon, 12 Dec 2016 15:33:33 -0800 > Adam Williamson wrote: > > > On Mon, 2016-12-12 at 10:22 -0800, Brian C. Lane wrote: > > > In the spirit of the season I'm giving away packages :) > > > > > > I am not using most of these anymore, so I'd l

Re: Packages up for grabs

2016-12-13 Thread Dan Horák
On Mon, 12 Dec 2016 15:33:33 -0800 Adam Williamson wrote: > On Mon, 2016-12-12 at 10:22 -0800, Brian C. Lane wrote: > > In the spirit of the season I'm giving away packages :) > > > > I am not using most of these anymore, so I'd like to send them off > > to a good home: > > > > https://admin.fe

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Lennart Poettering
On Tue, 13.12.16 14:25, Matthew Miller (mat...@fedoraproject.org) wrote: > On Tue, Dec 13, 2016 at 10:42:08AM -0800, Japheth Cleaver wrote: > > >For a less-effort version, we could update > > >https://fedoraproject.org/wiki/Packaging:Systemd and have an (internal) > > >marketing campaign asking pe

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, David Woodhouse wrote: On Mon, 2016-12-12 at 10:53 +0100, Vít Ondruch wrote: 2) I needed to update a certificate every 6 months, now I need to kinit every day. This is regression. How to make it work without kinit at all. I am using SSSD for company kerberos and I don't nee

Re: Packages up for grabs

2016-12-13 Thread Adam Williamson
On Tue, 2016-12-13 at 20:19 +0100, Martin Kolman wrote: > On Mon, 2016-12-12 at 15:34 -0800, Adam Williamson wrote: > > On Mon, 2016-12-12 at 14:35 -0700, Kevin Fenzi wrote: > > > > > > > > > > > > > > And then recently it was ported to use DNF, and so it's now > > > > maintained > > > > again,

Announcement: Fedora Docker Layered Image Build Service is GO!

2016-12-13 Thread Adam Miller
It is with great pleasure that the Fedora Project Announces the availability of the Fedora Docker Layered Image Build Service[0] to the Fedora Contributor Community! With this announcement we are opening availability of the Docker Layered Image Build Service for the Docker Layered Images[1] that t

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Matthew Miller
On Tue, Dec 13, 2016 at 10:42:08AM -0800, Japheth Cleaver wrote: > >For a less-effort version, we could update > >https://fedoraproject.org/wiki/Packaging:Systemd and have an (internal) > >marketing campaign asking people to update their packages (as > >suggested, ideally upstream). > > I'd much r

Re: Packages up for grabs

2016-12-13 Thread Martin Kolman
On Mon, 2016-12-12 at 15:34 -0800, Adam Williamson wrote: > On Mon, 2016-12-12 at 14:35 -0700, Kevin Fenzi wrote: > > > > > > > > > > And then recently it was ported to use DNF, and so it's now > > > maintained > > > again, or it it? > > > > I'll let the folks who worked on that chime in on the

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Tom Hughes
On 13/12/16 18:19, Simo Sorce wrote: On Tue, 2016-12-13 at 14:36 +, Dave Love wrote: Simo Sorce writes: If you really need to automate it because typing a password is too hard: cat ~/.mykrbpassword | kinit myusername It needs to be automated principally because the password is not memor

Re: Packages up for grabs

2016-12-13 Thread Kevin Kofler
Adam Williamson wrote: > AIUI the people who did that work are folks who build a few > different Fedora variants … and Mageia too (Neal Gompa and Angelo Naselli have a Mageia port) … > and don't like how livemedia-creator works. Kevin Kofler __

Re: Un-retiring QCad

2016-12-13 Thread Kevin Kofler
Przemek Klosowski wrote: > The reason why I'm asking is that I believe that in general FOSS > projects should fork as little as possible, and merge as much as > possible, to avoid duplication of effort. There are circumstances where > the fork is the only solution, of course, and I am asking what a

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Japheth Cleaver
On 12/13/2016 7:00 AM, Matthew Miller wrote: On Tue, Dec 13, 2016 at 12:14:44PM +0100, Lennart Poettering wrote: Well, the security policies need to be adapted to the service in question, hence a blanket switch to enable all of them for every service is problematic. Let's say you block gettimeof

Re: F26 System Wide Change: Golang 1.8

2016-12-13 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Dec 13, 2016 at 01:06:29PM -0500, Jakub Cajka wrote: > > can we enable coredumping for Go programs by default - i.e. set GOTRACEBACK= > > crash? > > > > Currently, Go terminate  a process that panic and prints out an error > > message on stderr. > > > > This approach does not provide much

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Simo Sorce
On Tue, 2016-12-13 at 14:35 +, Dave Love wrote: > Simo Sorce writes: > > > On Tue, 2016-12-13 at 10:54 +, Dave Love wrote: > >> Kevin Fenzi writes: > >> > >> > This is included in the fedora-packager-0.6.0 update. > >> > > >> > Make sure your /etc/krb5.conf has the include to include t

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Simo Sorce
On Tue, 2016-12-13 at 14:36 +, Dave Love wrote: > Simo Sorce writes: > > > If you really need to automate it because typing a password is too hard: > > cat ~/.mykrbpassword | kinit myusername > > It needs to be automated principally because the password is not > memorable. I assume infrastr

Re: missing credentials

2016-12-13 Thread Howard Howell
On Tue, 2016-12-13 at 09:44 +0100, Milan Crha wrote: > On Mon, 2016-12-12 at 12:43 -0600, Michael Catanzaro wrote: > > That sounds highly plausible. evolution currently shells out to gpg > > which is pretty fragile, so it's not very surprising that some > > issue > > could cause it to hang forever.

Re: F26 System Wide Change: Golang 1.8

2016-12-13 Thread Jakub Cajka
- Original Message - > From: jfi...@fedoraproject.org > To: jca...@redhat.com > Cc: devel-annou...@lists.fedoraproject.org, "Development discussions related > to Fedora" > > Sent: Tuesday, December 13, 2016 6:17:23 AM > Subject: Re: F26 System Wide Change: Golang 1.8 > > > Jakub, >

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Sérgio Basto
On Ter, 2016-12-13 at 10:37 -0700, Kevin Fenzi wrote: > On Tue, 13 Dec 2016 17:09:19 + > Sérgio Basto wrote: > > > > > On Dom, 2016-12-11 at 18:34 -0600, Dennis Gilmore wrote: > > > > > > > > > Greetings.  > > > > > > As previously announced, releng has made a number of changes as > > > p

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Kevin Fenzi
On Tue, 13 Dec 2016 17:09:19 + Sérgio Basto wrote: > On Dom, 2016-12-11 at 18:34 -0600, Dennis Gilmore wrote: > > > > Greetings.  > > > > As previously announced, releng has made a number of changes as part > > of > > it's 2016 "flag day".  > > > > All package maintainers will want to make

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Kevin Fenzi
On Tue, 13 Dec 2016 10:58:16 + Dave Love wrote: > Kevin Fenzi writes: > > > Ah, the actual package produced is python2-cccolutils (from the > > python-cccolutils package). > > > > python2-cccolutils.x86_64 1.4-1.el6 epel-testing > > Isn't that wrong for EPEL? No. There's nothing saying

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Kevin Fenzi
On Tue, 13 Dec 2016 14:19:50 + Tom Hughes wrote: > On 13/12/16 13:41, Stephen Gallagher wrote: > > On 12/13/2016 03:52 AM, Vít Ondruch wrote: > >> > >> Dne 12.12.2016 v 22:33 Kevin Fenzi napsal(a): > >> > >>> As sgallagh noted downthread, gnome online accounts will hopefully > >>> handle

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Kevin Fenzi
On Tue, 13 Dec 2016 14:36:06 + Dave Love wrote: > Simo Sorce writes: > > > If you really need to automate it because typing a password is too > > hard: cat ~/.mykrbpassword | kinit myusername > > It needs to be automated principally because the password is not > memorable. I assume infr

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Sérgio Basto
On Dom, 2016-12-11 at 18:34 -0600, Dennis Gilmore wrote: > > Greetings.  > > As previously announced, releng has made a number of changes as part > of > it's 2016 "flag day".  > > All package maintainers will want to make sure they have updated to > the  > following package versions (some may be

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Lennart Poettering
On Tue, 13.12.16 10:00, Matthew Miller (mat...@fedoraproject.org) wrote: > On Tue, Dec 13, 2016 at 12:14:44PM +0100, Lennart Poettering wrote: > > Well, the security policies need to be adapted to the service in > > question, hence a blanket switch to enable all of them for every > > service is pr

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Florian Weimer
On 12/13/2016 12:17 PM, Lennart Poettering wrote: On Mon, 12.12.16 21:22, Paul Wouters (p...@nohats.ca) wrote: that's totally possible, and can be functionality-wise entirely equivalent. The only difference is: systemd makes all of this trivially easy to use, by making this a single-line change

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Lennart Poettering
On Tue, 13.12.16 10:52, Przemek Klosowski (przemek.klosow...@nist.gov) wrote: > On 12/12/2016 04:02 PM, Lennart Poettering wrote: > > Hmm, yeah, I should probably blog more about all the nice sandboxing > > features we have now in systemd. There's quite some stuff now we > > should enable wherever

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Stephen Gallagher writes: >> There is actually a Kerberos mechanism for storing credentials even if >> it somewhat defeats the object, particularly on a shared system. It >> would be better if you could forward the GSS identities over ssh, but I

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread David Woodhouse
On Mon, 2016-12-12 at 10:53 +0100, Vít Ondruch wrote: > 2) I needed to update a certificate every 6 months, now I need to kinit > every day. This is regression. How to make it work without kinit at all. > I am using SSSD for company kerberos and I don't need to kinit at all, > how to make this work

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Matthew Miller
On Tue, Dec 13, 2016 at 03:49:45PM +, Zbigniew Jędrzejewski-Szmek wrote: > > For a less-effort version, we could update > > https://fedoraproject.org/wiki/Packaging:Systemd and have an (internal) > > marketing campaign asking people to update their packages (as > > suggested, ideally upstream).

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Przemek Klosowski
On 12/12/2016 04:02 PM, Lennart Poettering wrote: Hmm, yeah, I should probably blog more about all the nice sandboxing features we have now in systemd. There's quite some stuff now we should enable wherever we can. Specifically ProtectSystem=, ProtectHome=, ProtectKernelTunables=, ProtectKernelMo

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Zbigniew Jędrzejewski-Szmek
On Tue, Dec 13, 2016 at 10:00:10AM -0500, Matthew Miller wrote: > On Tue, Dec 13, 2016 at 12:14:44PM +0100, Lennart Poettering wrote: > > Well, the security policies need to be adapted to the service in > > question, hence a blanket switch to enable all of them for every > > service is problematic.

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Matthew Miller
On Tue, Dec 13, 2016 at 12:14:44PM +0100, Lennart Poettering wrote: > Well, the security policies need to be adapted to the service in > question, hence a blanket switch to enable all of them for every > service is problematic. Let's say you block gettimeofday() > system-wide, but then run an NTP s

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Stephen Gallagher
On 12/13/2016 09:36 AM, Dave Love wrote: > Simo Sorce writes: > >> If you really need to automate it because typing a password is too hard: >> cat ~/.mykrbpassword | kinit myusername > > It needs to be automated principally because the password is not > memorable. I assume infrastructure people

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Simo Sorce writes: > If you really need to automate it because typing a password is too hard: > cat ~/.mykrbpassword | kinit myusername It needs to be automated principally because the password is not memorable. I assume infrastructure people would rather we don't use the least secure credentia

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Simo Sorce writes: > On Tue, 2016-12-13 at 10:54 +, Dave Love wrote: >> Kevin Fenzi writes: >> >> > This is included in the fedora-packager-0.6.0 update. >> > >> > Make sure your /etc/krb5.conf has the include to include them >> > from /etc/krb5.conf.d/ though >> >> That will break Heimda

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Tom Hughes
On 13/12/16 13:41, Stephen Gallagher wrote: On 12/13/2016 03:52 AM, Vít Ondruch wrote: Dne 12.12.2016 v 22:33 Kevin Fenzi napsal(a): As sgallagh noted downthread, gnome online accounts will hopefully handle this for you soon as soon as that one bug is fixed. That should be fixed prior such

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Vít Ondruch
Dne 13.12.2016 v 14:41 Stephen Gallagher napsal(a): > On 12/13/2016 03:52 AM, Vít Ondruch wrote: >> >> Dne 12.12.2016 v 22:33 Kevin Fenzi napsal(a): >>> On Mon, 12 Dec 2016 10:53:39 +0100 >>> Vít Ondruch wrote: >>> So several questions: > ... >>> First, I'll note you don't need to get a new

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Stephen Gallagher
On 12/13/2016 03:52 AM, Vít Ondruch wrote: > > > Dne 12.12.2016 v 22:33 Kevin Fenzi napsal(a): >> On Mon, 12 Dec 2016 10:53:39 +0100 >> Vít Ondruch wrote: >> >>> So several questions: ... >> >> First, I'll note you don't need to get a new ticket every day, you can >> just renew with 'kinit -R'.

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread David Woodhouse
On Mon, 2016-12-12 at 02:36 +0100, Igor Gnatenko wrote: > It shows a little error icon in the Domain box, as if to indicate > > that FEDORAPROJECT.ORG is an invalid domain (but unhelpfully without > > any actual tooltip or error message). Is there a known problem here? > > yes, and even patch avai

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dan Horák
On Tue, 13 Dec 2016 12:51:02 +0200 Alexander Bokovoy wrote: > On ti, 13 joulu 2016, Dan Horák wrote: > >On Tue, 13 Dec 2016 12:29:57 +0200 > >Alexander Bokovoy wrote: > > > >> On ti, 13 joulu 2016, Daniel P. Berrange wrote: > >> >On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote:

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Simo Sorce
On Tue, 2016-12-13 at 10:57 +, Dave Love wrote: > Christopher writes: > > > Better yet, save your password in gnome-keyring: > > keyring set login fedora > > And retrieve it for kinit: > > keyring get login fedora | kinit usern...@fedoraproject.org > > None of this is any good if you're not

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Simo Sorce
On Tue, 2016-12-13 at 10:54 +, Dave Love wrote: > Kevin Fenzi writes: > > > This is included in the fedora-packager-0.6.0 update. > > > > Make sure your /etc/krb5.conf has the include to include them > > from /etc/krb5.conf.d/ though > > That will break Heimdal, for people who use that. He

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Jonathan Wakely
On 13/12/16 09:52 +0100, Vít Ondruch wrote: Dne 12.12.2016 v 22:33 Kevin Fenzi napsal(a): First, I'll note you don't need to get a new ticket every day, you can just renew with 'kinit -R'. Not sure what is the difference here, may be you want to explain. 'kinit -R' doesn't need a password, i

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Lennart Poettering
On Mon, 12.12.16 21:22, Paul Wouters (p...@nohats.ca) wrote: > > that's totally possible, and can be functionality-wise entirely > > equivalent. The only difference is: systemd makes all of this > > trivially easy to use, by making this a single-line change in a unit > > file without involving C h

Re: CVE-2016-8655, systemd, and Fedora

2016-12-13 Thread Lennart Poettering
On Tue, 13.12.16 01:56, Rahul Sundaram (methe...@gmail.com) wrote: > Hi > > On Mon, Dec 12, 2016 at 4:03 PM Lennart Poettering > > Hmm, yeah, I should probably blog more about all the nice sandboxing > > > features we have now in systemd. > > > It would be useful if we can set these type of op

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Petr Mensik writes: > Sure, I am really missing this information written on the wiki page. The > secret is, they are in the DNS record. If you try > $ host -t URI _kerberos.fedoraproject.org Thanks. I forget about DNS records because I've been not trusting them forever. However, I only know

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Kevin Fenzi writes: > fedora-packager-0.6.0 includes: > > /etc/krb5.conf.d/fedoraproject_org > and > /etc/krb5.conf.d/stg_fedoraproject_org > > which contain: > > [realms] > FEDORAPROJECT.ORG = { > kdc = https://id.fedoraproject.org/KdcProxy > } > [domain_realm] > .fedoraproject.org =

adelton pushed to perl-TeX-Hyphen (master). "1404061 - Rebase to upstream version 1.18."

2016-12-13 Thread notifications
From cd06ce3f73863eacb0cf6b76260ed9ee605f6006 Mon Sep 17 00:00:00 2001 From: Jan Pazdziora Date: Tue, 13 Dec 2016 12:02:40 +0100 Subject: 1404061 - Rebase to upstream version 1.18. --- perl-TeX-Hyphen.spec | 5 - sources | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-)

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Kevin Fenzi writes: > Ah, the actual package produced is python2-cccolutils (from the > python-cccolutils package). > > python2-cccolutils.x86_64 1.4-1.el6 epel-testing Isn't that wrong for EPEL? ___ devel mailing list -- devel@lists.fedoraproject.org

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Christopher writes: > Better yet, save your password in gnome-keyring: > keyring set login fedora > And retrieve it for kinit: > keyring get login fedora | kinit usern...@fedoraproject.org None of this is any good if you're not using a desktop system, is it? I'm probably not the only one who doe

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dave Love
Kevin Fenzi writes: > This is included in the fedora-packager-0.6.0 update. > > Make sure your /etc/krb5.conf has the include to include them > from /etc/krb5.conf.d/ though That will break Heimdal, for people who use that. ___ devel mailing list -- d

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Dan Horák wrote: On Tue, 13 Dec 2016 12:29:57 +0200 Alexander Bokovoy wrote: On ti, 13 joulu 2016, Daniel P. Berrange wrote: >On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote: >> On ti, 13 joulu 2016, Alexander Bokovoy wrote: >> > On ti, 13 joulu 2016, Ví

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Dan Horák
On Tue, 13 Dec 2016 12:29:57 +0200 Alexander Bokovoy wrote: > On ti, 13 joulu 2016, Daniel P. Berrange wrote: > >On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote: > >> On ti, 13 joulu 2016, Alexander Bokovoy wrote: > >> > On ti, 13 joulu 2016, Vít Ondruch wrote: > >> > > > >> > >

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Daniel P. Berrange wrote: On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote: On ti, 13 joulu 2016, Alexander Bokovoy wrote: > On ti, 13 joulu 2016, Vít Ondruch wrote: > > > > > > Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): > > > On 12/12/2016 04:53 A

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Daniel P. Berrange
On Tue, Dec 13, 2016 at 12:19:45PM +0200, Alexander Bokovoy wrote: > On ti, 13 joulu 2016, Alexander Bokovoy wrote: > > On ti, 13 joulu 2016, Vít Ondruch wrote: > > > > > > > > > Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): > > > > On 12/12/2016 04:53 AM, Vít Ondruch wrote: > > > > > So se

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Alexander Bokovoy wrote: On ti, 13 joulu 2016, Vít Ondruch wrote: Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): On 12/12/2016 04:53 AM, Vít Ondruch wrote: So several questions: 1) When I have 2 domains I login to with kerberos, how to really make it work. I don't

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Paul Howarth
On 2016-12-12 17:05, Kevin Fenzi wrote: On Mon, 12 Dec 2016 12:32:33 + Paul Howarth wrote: There's an extra "A" in there. oops. so there is. :) Sorry about that. Anyway, it's not working for me and it's a different error than others are seeing: ...snip... I tried logging into FAS a

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Vít Ondruch
Dne 12.12.2016 v 22:33 Kevin Fenzi napsal(a): > On Mon, 12 Dec 2016 10:53:39 +0100 > Vít Ondruch wrote: > >> So several questions: >> >> 1) When I have 2 domains I login to with kerberos, how to really make >> it work. I don't want to kswitch all the time. I am using Kerberos to >> authenticate

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Alexander Bokovoy
On ti, 13 joulu 2016, Vít Ondruch wrote: Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): On 12/12/2016 04:53 AM, Vít Ondruch wrote: So several questions: 1) When I have 2 domains I login to with kerberos, how to really make it work. I don't want to kswitch all the time. I am using Kerber

Re: missing credentials

2016-12-13 Thread Milan Crha
On Mon, 2016-12-12 at 12:43 -0600, Michael Catanzaro wrote: > That sounds highly plausible. evolution currently shells out to gpg > which is pretty fragile, so it's not very surprising that some issue > could cause it to hang forever. It needs to be rewritten to use > GPGME. Hi, I looked o

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Vít Ondruch
Dne 12.12.2016 v 20:54 Christopher napsal(a): > On Mon, Dec 12, 2016 at 10:03 AM Stephen Gallagher > mailto:sgall...@redhat.com>> wrote: > > > > 2) I needed to update a certificate every 6 months, now I need > to kinit > > every day. This is regression. How to make it work without kin

Re: Packagers - Flag day 2016 Important changes

2016-12-13 Thread Vít Ondruch
Dne 12.12.2016 v 16:02 Stephen Gallagher napsal(a): > On 12/12/2016 04:53 AM, Vít Ondruch wrote: >> So several questions: >> >> 1) When I have 2 domains I login to with kerberos, how to really make it >> work. I don't want to kswitch all the time. I am using Kerberos to >> authenticate my email c

Re: FESCo and Council elections - December 2016/January 2017

2016-12-13 Thread Jan Kurik
The elections to FESCo and Fedora Council moved from its Nomination period to the Campaign period. I am happy to see so many candidates who would like to contribute to Fedora and get even more responsibilities as members of FESCo and/or Council. Let me summarize the list of candidates who applied