Re: strawman proposal: homed directories for users

2024-10-10 Thread Alexander Bokovoy
On Чцв, 10 кас 2024, Stephen Gallagher wrote: On Thu, Oct 10, 2024 at 5:23 PM Simo Sorce wrote: On Thu, 2024-10-10 at 17:29 +0200, Lennart Poettering wrote: > On Mi, 09.10.24 11:12, Simo Sorce (s...@redhat.com) wrote: > > > > > This was again a reference to the fact that IPA folks aren't willi

[Test Days] Fedora Virt and Upgrade happening NOW!

2024-10-10 Thread Sumantro Mukherjee
Hey Folks, As the GA date comes closer; we are trying to test the last few bits in Fedora. Fedora takes pride in smooth upgrades and to ensure this we host Upgrade Test Day[0]. This time we are hosting it from 2024-10-11 through 2024-10-15. This installment of test day is, however, a bit special,

Fedora eln compose report: 20241011.n.0 changes

2024-10-10 Thread Fedora ELN Report
OLD: Fedora-eln-20241010.n.1 NEW: Fedora-eln-20241011.n.0 = SUMMARY = Added images:0 Dropped images: 0 Added packages: 1 Dropped packages:1 Upgraded packages: 2 Downgraded packages: 0 Size of added packages: 21.05 KiB Size of dropped packages:450.45 KiB

Re: strawman proposal: homed directories for users

2024-10-10 Thread Stephen Gallagher
On Thu, Oct 10, 2024 at 5:23 PM Simo Sorce wrote: > > On Thu, 2024-10-10 at 17:29 +0200, Lennart Poettering wrote: > > On Mi, 09.10.24 11:12, Simo Sorce (s...@redhat.com) wrote: > > > > > > > > > This was again a reference to the fact that IPA folks aren't willing > > to restrict their allocations

A tool to convert Python packages to pyproject RPM macros

2024-10-10 Thread Miro Hrončok
Hello Pythonistas, The old %py3_build and %py3_install macros (201x-era) as documented in [1] use a deprecated feature of setuptools. It is highly recommended to use the current %pyproject macros instead as documented in [2] and [3] sooner than it becomes necessary. To help you convert your

Re: strawman proposal: homed directories for users

2024-10-10 Thread Simo Sorce
On Thu, 2024-10-10 at 17:29 +0200, Lennart Poettering wrote: > On Mi, 09.10.24 11:12, Simo Sorce (s...@redhat.com) wrote: > > > > > This was again a reference to the fact that IPA folks aren't willing > to restrict their allocations to some reasonable UID range, as > mentoined elsewhere in this

Fedora eln compose report: 20241010.n.1 changes

2024-10-10 Thread Fedora ELN Report
OLD: Fedora-eln-20241009.n.0 NEW: Fedora-eln-20241010.n.1 = SUMMARY = Added images:0 Dropped images: 0 Added packages: 13 Dropped packages:1 Upgraded packages: 37 Downgraded packages: 0 Size of added packages: 33.82 MiB Size of dropped packages:671.76 KiB

Re: strawman proposal: homed directories for users

2024-10-10 Thread Lennart Poettering
On Mi, 09.10.24 20:17, Fedora Development ML (devel@lists.fedoraproject.org) wrote: > Am 09.10.24 um 17:12 schrieb Simo Sorce: > > > Hence I am very curious where you think the security issues are? > > Sorry, I did not mean in any way to imply there are open security issue > > with systemd-homed,

Re: strawman proposal: homed directories for users

2024-10-10 Thread Lennart Poettering
On Mi, 09.10.24 11:12, Simo Sorce (s...@redhat.com) wrote: > > I am pretty sure the security model is a lot cleaner than anything the > > sssd/IPA world would do, because we lock disk encryption to user > > provided credentials, FIDO2/PKCS#11 and such, and can suspend the home > > dir's encryption

Re: 0-Day: Fedora needs urgent Firefox update 131.0.2 ( current: 131.0.0 )

2024-10-10 Thread Michael Catanzaro
On Thu, Oct 10 2024 at 11:25:30 AM +02:00:00, Alexander Sosedkin wrote: Don't Panic. https://src.fedoraproject.org/rpms/firefox lists 131.0-2 in all branches, https://koji.fedoraproject.org/koji/packageinfo?packageID=37 lists a dozen of 131.0-2 builds as well. Sent from a $ rpm -q firefox fir

Fedora 41 compose report: 20241010.n.0 changes

2024-10-10 Thread Fedora Branched Report
OLD: Fedora-41-20241009.n.0 NEW: Fedora-41-20241010.n.0 = SUMMARY = Added images:3 Dropped images: 9 Added packages: 4 Dropped packages:10 Upgraded packages: 80 Downgraded packages: 0 Size of added packages: 1.81 MiB Size of dropped packages:18.74 MiB

Re: RFC should authselect require nss_altfiles

2024-10-10 Thread Pavel Březina
On 10/9/24 14:52, Lennart Poettering wrote: On Mi, 09.10.24 12:56, Pavel Březina (pbrez...@redhat.com) wrote: Hi Fedora, nss-altfiles is not currently part of the default installation and can be optionally added to nsswitch.conf via authselect's with-altfiles. This however breaks ostree compos

Fedora rawhide compose report: 20241010.n.0 changes

2024-10-10 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20241009.n.0 NEW: Fedora-Rawhide-20241010.n.0 = SUMMARY = Added images:3 Dropped images: 8 Added packages: 15 Dropped packages:10 Upgraded packages: 356 Downgraded packages: 0 Size of added packages: 4.10 MiB Size of dropped packages

Re: 0-Day: Fedora needs urgent Firefox update 131.0.2 ( current: 131.0.0 )

2024-10-10 Thread Richard W.M. Jones
On Thu, Oct 10, 2024 at 11:25:30AM +0200, Alexander Sosedkin wrote: > On Thu, Oct 10, 2024 at 11:19 AM Marius Schwarz > wrote: > > I checked Koji and there seems no build in process to fix this 0-Day > > exploitation in firefix > > > > https://www.mozilla.org/en-US/security/advisories/mfsa2024-5

[Ghostscript HEADS-UP] Newest version in rawhide 10.04.0 forbids output device setting in input file by default

2024-10-10 Thread Zdenek Dohnal
Hi all, the newest version of Ghostscript arrived into rawhide and there is a change in default behavior of ghostscript. In the past Ghostscript Postscript interpreter allowed setting of output device in the incoming Postscript file, which was one of sources of CVEs in the past. This type of

Re: 0-Day: Fedora needs urgent Firefox update 131.0.2 ( current: 131.0.0 )

2024-10-10 Thread Michael J Gruber
Hi there, Am Do., 10. Okt. 2024 um 11:19 Uhr schrieb Marius Schwarz : > > Hi, > > I checked Koji and there seems no build in process to fix this 0-Day > exploitation in firefix > > https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ > ... They've been built and submitted for stable ye

CANCEL: 0-Day: Fedora needs urgent Firefox update 131.0.2 ( current: 131.0.0 )

2024-10-10 Thread Marius Schwarz
Hi, Sorry, case closed. best regards, Marius Schwarz* * -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/projec

Re: 0-Day: Fedora needs urgent Firefox update 131.0.2 ( current: 131.0.0 )

2024-10-10 Thread Alexander Sosedkin
On Thu, Oct 10, 2024 at 11:19 AM Marius Schwarz wrote: > I checked Koji and there seems no build in process to fix this 0-Day > exploitation in firefix > > https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ > > The "News" about it is already out and exploited: > > Mozilla has revealed

0-Day: Fedora needs urgent Firefox update 131.0.2 ( current: 131.0.0 )

2024-10-10 Thread Marius Schwarz
Hi, I checked Koji and there seems no build in process to fix this 0-Day exploitation in firefix https://www.mozilla.org/en-US/security/advisories/mfsa2024-51/ The "News" about it is already out and exploited: Mozilla has revealed that a critical security flaw impacting Firefox and Firefox