Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Demi Marie Obenour
On 7/24/23 15:11, Eric Sandeen wrote: > On 7/23/23 7:22 PM, Steve Grubb wrote: >> On Saturday, July 22, 2023 2:01:34 AM EDT Matthew Garrett wrote: >>> A discussion within Debian again brought up the problem that: >>> >>> 1) Automounting of removable media exposes the kernel to a lot of >>> untruste

Re: fedora-review workarounds for dnf5

2023-07-24 Thread Michel Alexandre Salim
Hi all, On Mon, Jul 17, 2023 at 10:54:43AM -0600, Jerry James wrote: > Like many of you, I have been quite inconvenienced because of > dnf5-related breakage of fedora-review. I've been monkeying with it > today and finally got a successful run of fedora-review after making > the following changes

Re: Fedora 39 Mass Rebuild

2023-07-24 Thread Sandro
On 24-07-2023 20:30, Samyak Jain wrote: 21426 builds have been tagged into f39, there are currently 1017 failed builds that need to be addressed by the package maintainers. FTBFS bugs will be filed shortly. Will all the Python packages that failed during the Python3.12 mass rebuild and haven't

packager-dashboard not updating koschei build status

2023-07-24 Thread Mikel Olasagasti
Hi all, I've multiple reports of FTBFS in the packager-dashboard, but I can see many of the packages are being built fine in koschei/koji. Is there a known issue on refreshing koschei data? Kind regards, Mikel ___ devel mailing list -- devel@lists.fedo

Re: DNF5-5.0.1 has a stable API

2023-07-24 Thread Jonathan Wright via devel
That would make for somedifficult verbal conversations. What do you propose for the phonetic version? :D On Mon, Jul 24, 2023 at 3:43 PM Chuck Anderson wrote: > On Mon, Jul 24, 2023 at 02:08:25PM -0400, Stephen Smoogen wrote: > > Personally I would have preferred to call this a new tool ver

Re: DNF5-5.0.1 has a stable API

2023-07-24 Thread Chuck Anderson
On Mon, Jul 24, 2023 at 02:08:25PM -0400, Stephen Smoogen wrote: > Personally I would have preferred to call this a new tool versus trying to > use dnf name still. It makes it clearer that the break is going to happen. I propose "qzw". It's so easy to type on a qwerty keyboard layout. ___

Re: Fedora 39 Mass Rebuild

2023-07-24 Thread Alexander Ploumistos
On Mon, Jul 24, 2023 at 10:45 PM Kevin Fenzi wrote: > > Please do bump and rebuild it. It's done: https://koji.fedoraproject.org/koji/taskinfo?taskID=103849749 > Although it would be nice to figure out why it didn't get a > commit/build. Indeed. ___

Re: Fedora 39 Mass Rebuild

2023-07-24 Thread Kevin Fenzi
On Mon, Jul 24, 2023 at 10:13:44PM +0300, Alexander Ploumistos wrote: > Hello, > > On Mon, Jul 24, 2023 at 9:31 PM Samyak Jain wrote: > > > > The mass rebuild was done in a side tag (f39-rebuild) and moved over to > > f39. > > So it's over? Yes. "was done". > > Things still needing rebuilding

Re: Fedora 39 Mass Rebuild

2023-07-24 Thread Alexander Ploumistos
Hello, On Mon, Jul 24, 2023 at 9:31 PM Samyak Jain wrote: > > The mass rebuild was done in a side tag (f39-rebuild) and moved over to > f39. So it's over? > Things still needing rebuilding > https://kojipkgs.fedoraproject.org/mass-rebuild/f39-need-rebuild.html Is it up to the packagers to reb

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Eric Sandeen
On 7/23/23 7:22 PM, Steve Grubb wrote: On Saturday, July 22, 2023 2:01:34 AM EDT Matthew Garrett wrote: A discussion within Debian again brought up the problem that: 1) Automounting of removable media exposes the kernel to a lot of untrusted input 2) Kernel upstream are not terribly concerned w

Re: DNF5-5.0.1 has a stable API

2023-07-24 Thread Kevin Kofler via devel
Frantisek Zatloukal wrote: > On Thu, Jul 20, 2023 at 11:58 AM Peter Robinson > wrote: >> You can evolve APIs with versioning to ensure backwards compatibility >> while also evolving the usecases. > > Well, this is exactly the case, isn't it? You have dnf4/dnf5, all nice and > versioned. It is n

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Eric Sandeen
On 7/24/23 10:00 AM, Daniel P. Berrangé wrote: On Mon, Jul 24, 2023 at 10:08:50AM -0400, Demi Marie Obenour wrote: ... I still believe that mounting should _not_ be automatic, though, because it could have side-effects (such as replaying the FS journal) that might not be wanted. To prevent p

Re: python3-pyside2 and Python 3.12

2023-07-24 Thread Kevin Kofler via devel
Richard Shaw wrote: > Any progress on this? I can submit a BZ ticket for tracking if needed. A pull request would be easier, then I would just have to hit a button. :-) Kevin Kofler ___ devel mailing list -- devel@lists.fedoraproject.org To unsu

Fedora 39 Mass Rebuild

2023-07-24 Thread Samyak Jain
Hi all, Per the Fedora Linux f39 schedule [1] we started a mass rebuild for Fedora Linux f39 on 2023-07-19. We did a mass rebuild for Fedora Linux f39 for: - No default fedora-repos-modular - GNU Toolchain Update (gcc 13.2, binutils 2.40, glibc 2.38, gdb 13.2) - Make DNF5 The Default - Make Toolb

Re: DNF5-5.0.1 has a stable API

2023-07-24 Thread Stephen Smoogen
On Mon, 24 Jul 2023 at 13:10, James Ralston wrote: > On Thu, Jul 20, 2023 at 5:46 AM Miroslav Suchý wrote: > > > Dne 20. 07. 23 v 10:08 Peter Robinson napsal(a): > > > > > So everything has to be rewritten across the entire ecosystem to > > > work with it? Wow, who thinks that's a good idea? It

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Kevin Kofler via devel
Richard W.M. Jones wrote: > A bit in the superblock marks the filesystem as clean or dirty, and > that has nothing to do with whether it is malicious. You mean we cannot rely on https://www.ietf.org/rfc/rfc3514.txt for this? ;-) Kevin Kofler __

Re: Restore access to torrent-file-editor package

2023-07-24 Thread Ivan Romanov via devel
Thanks. Open an issue https://pagure.io/packager-sponsors/issue/581. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/

Re: DNF5-5.0.1 has a stable API

2023-07-24 Thread Frantisek Zatloukal
On Thu, Jul 20, 2023 at 11:58 AM Peter Robinson wrote: > On Thu, Jul 20, 2023 at 10:46 AM Miroslav Suchý wrote: > > "Only dead projects has stable API" > > You can evolve APIs with versioning to ensure backwards compatibility > while also evolving the usecases. > Well, this is exactly the case,

Re: DNF5-5.0.1 has a stable API

2023-07-24 Thread James Ralston
On Thu, Jul 20, 2023 at 5:46 AM Miroslav Suchý wrote: > Dne 20. 07. 23 v 10:08 Peter Robinson napsal(a): > > > So everything has to be rewritten across the entire ecosystem to > > work with it? Wow, who thinks that's a good idea? It took the > > ecosystem long enough to migrate from the yum "API"

Re: Potential changes to systemd RPM macros

2023-07-24 Thread Kevin Fenzi
On Mon, Jul 24, 2023 at 06:45:12AM -0700, Andrea Bolognani wrote: > On Thu, Jul 20, 2023 at 02:01:37PM -0700, Kevin Fenzi wrote: > > On Thu, Jul 20, 2023 at 07:40:08AM -0700, Andrea Bolognani wrote: > > > The problem is that Fedora 39 and RHEL 9.3 are fast approaching and, > > > if we don't do anyt

Re: Restore access to torrent-file-editor package

2023-07-24 Thread Kevin Fenzi
On Mon, Jul 24, 2023 at 02:22:48PM -, Ivan Romanov via devel wrote: > Thanks. So how to restore myself to packager group? https://docs.fedoraproject.org/en-US/fesco/Policy_for_inactive_packagers/#returning kevin signature.asc Description: PGP signature __

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Richard W.M. Jones
On Mon, Jul 24, 2023 at 12:08:00PM -0400, Solomon Peachy wrote: > On Mon, Jul 24, 2023 at 04:51:38PM +0100, Richard W.M. Jones wrote: > > You don't actually need to do any of this if you're using libguestfs, > > because the worst that can happen is the filesystem will pwn the > > kernel inside the

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Solomon Peachy via devel
On Mon, Jul 24, 2023 at 04:51:38PM +0100, Richard W.M. Jones wrote: > You don't actually need to do any of this if you're using libguestfs, > because the worst that can happen is the filesystem will pwn the > kernel inside the KVM appliance (which is just a userspace process, so > you can kill it).

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Leon Fauster via devel
Am 23.07.23 um 09:35 schrieb Vitaly Zaitsev via devel: On 22/07/2023 08:01, Matthew Garrett wrote: 1) Automounting of removable media exposes the kernel to a lot of untrusted input Disable automatic mount by default. Problem solved. We use a whitelist approach here based on usbguard daemon

Re: Orphaned packages looking for new maintainers

2023-07-24 Thread stan via devel
On Mon, 24 Jul 2023 15:38:03 - "Julio Faracco" wrote: > I also need access to the packager group to claim maintainership. > Who could provide it to me? > I will probably take twincam. I'm not a packager, but these are some links to official information on how to become a Fedora packager. h

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Richard W.M. Jones
On Mon, Jul 24, 2023 at 11:45:26AM -0400, Solomon Peachy via devel wrote: > On Mon, Jul 24, 2023 at 04:00:21PM +0100, Daniel P. Berrangé wrote: > > If I acquire a new USB flash stick I've never plugged in before, I > > don't want it auto-mounting before I can wipe & reformat it. > > Honestly, what

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Solomon Peachy via devel
On Mon, Jul 24, 2023 at 04:00:21PM +0100, Daniel P. Berrangé wrote: > If I have a USB flash stick I plug in every day, it shouldn't ask me > about that after the first time I use it. Based on this "threat model" all an attacker has to do then is snag/modify/replace your existing drive and then th

Re: Orphaned packages looking for new maintainers

2023-07-24 Thread Julio Faracco
Hi Folks, I also need access to the packager group to claim maintainership. Who could provide it to me? I will probably take twincam. Thanks again. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Daniel P . Berrangé
On Mon, Jul 24, 2023 at 10:08:50AM -0400, Demi Marie Obenour wrote: > On 7/24/23 08:47, Richard W.M. Jones wrote: > > On Sun, Jul 23, 2023 at 11:18:45PM -0400, Demi Marie Obenour wrote: > >> On 7/23/23 12:10, Solomon Peachy via devel wrote: > >>> On Sun, Jul 23, 2023 at 11:25:12AM -0400, Neal Gompa

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Richard W.M. Jones
On Mon, Jul 24, 2023 at 10:08:50AM -0400, Demi Marie Obenour wrote: > I saw that libguestfs has a guestmount(1) tool, and I think this could be > a potential solution. An exploit against the kernel FS driver would only > grant access to a KVM guest, and the QEMU process can be tightly sandboxed >

Re: Potential changes to systemd RPM macros

2023-07-24 Thread Andrea Bolognani
On Fri, Jul 21, 2023 at 08:20:21AM +, Zbigniew Jędrzejewski-Szmek wrote: > On Thu, Jul 20, 2023 at 07:40:08AM -0700, Andrea Bolognani wrote: > > Now, since this is clearly not a libvirt-specific issue, I believe > > this approach should be adopted across Fedora by way of these macros > > (or co

Re: Restore access to torrent-file-editor package

2023-07-24 Thread Ivan Romanov via devel
Thanks. So how to restore myself to packager group? ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-c

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Michael Catanzaro
On Mon, Jul 24 2023 at 10:08:50 AM -0400, Demi Marie Obenour wrote: I saw that libguestfs has a guestmount(1) tool, and I think this could be a potential solution. An exploit against the kernel FS driver would only grant access to a KVM guest, and the QEMU process can be tightly sandboxed by

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Michael Catanzaro
On Sun, Jul 23 2023 at 11:18:45 PM -0400, Demi Marie Obenour wrote: Then the mount needs to be done in a sandbox, such as a KVM guest or sandboxed userspace process. Hmmm... I don't think traditional sandboxing accomplishes anything here, because we're trying to protect against kernel bugs, n

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Demi Marie Obenour
On 7/24/23 08:47, Richard W.M. Jones wrote: > On Sun, Jul 23, 2023 at 11:18:45PM -0400, Demi Marie Obenour wrote: >> On 7/23/23 12:10, Solomon Peachy via devel wrote: >>> On Sun, Jul 23, 2023 at 11:25:12AM -0400, Neal Gompa wrote: > If the system administrator wants to mount $UNCOMMONFS, they s

Re: python3-pyside2 and Python 3.12

2023-07-24 Thread Richard Shaw
On Thu, Jul 13, 2023 at 5:10 PM Kevin Kofler via devel < devel@lists.fedoraproject.org> wrote: > Richard Shaw wrote: > > # FIXME This patch is completely meaningless in the context of C++. > > # It is a workaround for a pyside2 build failure with Qt 5.15.9, > > # pyside2 5.15.9, clang 16.0.1 -- th

Re: Potential changes to systemd RPM macros

2023-07-24 Thread Andrea Bolognani
On Thu, Jul 20, 2023 at 02:01:37PM -0700, Kevin Fenzi wrote: > On Thu, Jul 20, 2023 at 07:40:08AM -0700, Andrea Bolognani wrote: > > The problem is that Fedora 39 and RHEL 9.3 are fast approaching and, > > if we don't do anything about this issue before then, a subset of > > libvirt users will see

Re: Restore access to torrent-file-editor package

2023-07-24 Thread Tom Hughes via devel
On 24/07/2023 14:40, Leigh Scott wrote: You probably got removed for inactivity, see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/UG3UOKBVJLUWZYEHWL52KPMITPEPEBNF/ Looks like it: https://pagure.io/find-inactive-packagers/issue/36 Tom -- Tom Hughes (t...

Restore access to torrent-file-editor package

2023-07-24 Thread Ivan Romanov via devel
Hello I'm maintainer of torrent-file-editor package in Fedora and author of torrent-file-editor application. My FAS is ivanromanov. Some weeks ago I updated app and wanted to update my package in Fedora but can't do this. Seems now I haven't access to my package. I opened package on https://package

Re: Restore access to torrent-file-editor package

2023-07-24 Thread Leigh Scott
You probably got removed for inactivity, see https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/UG3UOKBVJLUWZYEHWL52KPMITPEPEBNF/ ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to dev

Re: Restore access to torrent-file-editor package

2023-07-24 Thread Jonathan Wright via devel
I picked up the package back in December of '22 when it was orphaned. Ref https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/W5YHD4JSFGJQBZEUWS5KYFJHJSIWPZCD/ I'm happy to re-add you so I've added you back as an admin :) On Mon, Jul 24, 2023 at 8:31 AM Ivan Romano

Restore access to torrent-file-editor package

2023-07-24 Thread Ivan Romanov via devel
Hello I'm maintainer of torrent-file-editor package in Fedora and author of torrent-file-editor application. My FAS is ivanromanov. Some weeks ago I updated app and wanted to update my package in Fedora but can't do this. Seems now I haven't access to my package. I opened package on https://package

Re: Restricting automounting of uncommon filesystems?

2023-07-24 Thread Richard W.M. Jones
On Sun, Jul 23, 2023 at 11:18:45PM -0400, Demi Marie Obenour wrote: > On 7/23/23 12:10, Solomon Peachy via devel wrote: > > On Sun, Jul 23, 2023 at 11:25:12AM -0400, Neal Gompa wrote: > >>> If the system administrator wants to mount $UNCOMMONFS, they should be > >>> able to do so without hassle, bu

Fedora rawhide compose report: 20230724.n.0 changes

2023-07-24 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20230723.n.0 NEW: Fedora-Rawhide-20230724.n.0 = SUMMARY = Added images:3 Dropped images: 3 Added packages: 13 Dropped packages:0 Upgraded packages: 45 Downgraded packages: 1 Size of added packages: 6.32 MiB Size of dropped packages:0 B

Re: Towards enabling rpm sysusers integration

2023-07-24 Thread Florian Festi
On 6/29/23 09:55, Panu Matilainen wrote: > The rpm integration doesn't technically require systemd-sysusers, we can > write a script that calls useradd/groupadd instead. So for us it becomes > a choice between writing that script or adding audit support to > systemd-sysusers. Writing a script based

Re: Several questionable packages installed on fresh system

2023-07-24 Thread Vít Ondruch
Dne 20. 07. 23 v 19:10 Paul Howarth napsal(a): On Thu, 13 Jul 2023 14:10:37 +0200 Vít Ondruch wrote: Dne 10. 07. 23 v 10:38 Vít Ondruch napsal(a): Hi, libtomcrypt So this is the dependency chain: libtomcrypt <= python3-crypto <= python3-beaker <= python3-mako I raised https://bugzill