Re: HEADS UP: dhcp will ship bunded bind libraries

2019-03-12 Thread Tomas Hozza
; safe DNS resolution). > Can someone explain that topic a bit? > > kloczek > ISC DHCP uses BIND libraries e.g. to support Dynamic DNS updates on authoritative DNS server when assigning leases to hosts. I don't think that glibc resolver woul

Orphaned python-adns

2018-12-06 Thread Tomas Hozza
ython-adns can be retired or please consider maintaining python-adns as well. Regards, Tomas -- Tomas Hozza Associate Manager, Software Engineering - EMEA ENG Core Services PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com ___

Re: F26 Self Contained Change: BIND version 9.11

2016-10-11 Thread Tomas Hozza
On 10/09/2016 09:58 PM, Peter Robinson wrote: > On Mon, Oct 3, 2016 at 11:18 AM, Jan Kurik wrote: > > = Proposed Self Contained Change: BIND version 9.11 = > > https://fedoraproject.org/wiki/Changes/BIND_9.11 > > > > Change owner(s): > > * Tomas Hozza &

Re: Bind update (CVE-2016-2776)?

2016-09-29 Thread Tomas Hozza
On 09/29/2016 10:36 AM, Igor Gnatenko wrote: > On Thu, Sep 29, 2016 at 10:08 AM, Tomas Hozza wrote: > > On 09/29/2016 06:19 AM, Bojan Smojver wrote: > >> Could someone with sufficient access please spin up an update of bind > >> for F-24 and other flavours of Fedora. T

Re: Bind update (CVE-2016-2776)?

2016-09-29 Thread Tomas Hozza
ing the updates shortly. The problem with Fedora is that we can not prepare the update in advance as for RHEL, because everything (git repos, update system, etc.) is public. Regards, Tomas -- Tomas Hozza Associate Manager, Software Engineering - EMEA ENG Mainstream RHEL PGP: 1D9F3C2D U

Re: How to fix broken dependency in orphaned package that FTBFS in F24

2016-04-11 Thread Tomas Hozza
On 07.04.2016 15:50, James Hogarth wrote: > > > On 7 April 2016 at 14:26, Tomas Hozza <mailto:tho...@redhat.com>> wrote: > > Hi all. > > We pushed an update for log4cplus in F24+ [1]. It is a rebase and one of > the dependent packages is "p

How to fix broken dependency in orphaned package that FTBFS in F24

2016-04-07 Thread Tomas Hozza
ned. [1] https://bodhi.fedoraproject.org/updates/FEDORA-2016-53b6df64eb Regards, -- Tomas Hozza Senior Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org http://lists.fedorapr

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 16:44, Andrew Lutomirski wrote: > > On Dec 7, 2015 1:49 AM, "Tomas Hozza" <mailto:tho...@redhat.com>> wrote: > > > > On 04.12.2015 15:57, Lennart Poettering wrote: > > > On Tue, 01.12.15 11:15, Tomas Hozza (tho...@redha

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 15:15, Richard Hughes wrote: > On 7 December 2015 at 14:04, Tomas Hozza wrote: >> I took this conversation as a mean for improvement. > > When an email is titled "F24 System Wide Change" I think a lot of > people (like me) were under the impression

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 15:00, Matthew Miller wrote: > On Mon, Dec 07, 2015 at 02:59:18PM +0100, Tomas Hozza wrote: > >> I agree with Lennart. Whether or not this is expected to work with > >> DNSSEC is of academic interest given that people will expect it to work > >> with _t

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
to devel list that I don't want to be picked on. This is completely out of context. Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 12:23, Lennart Poettering wrote: > On Mon, 07.12.15 10:48, Tomas Hozza (tho...@redhat.com) wrote: > >> On 04.12.2015 15:57, Lennart Poettering wrote: >>> On Tue, 01.12.15 11:15, Tomas Hozza (tho...@redhat.com) wrote: >>> >>>> You are not

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 04.12.2015 15:57, Lennart Poettering wrote: > On Tue, 01.12.15 11:15, Tomas Hozza (tho...@redhat.com) wrote: > >> You are not mistaken. >> >> This is the third time, because previously we rather moved the change to the >> next Fedora to bring better user ex

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
t; Florian > -- > devel mailing list > devel@lists.fedoraproject.org > http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org > -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc.

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
en this is simply hijacking of domain name space, which is not owned by them. It is expected, that these "clever ideas" will not work with DNSSEC. Tomas > Dan > -- > devel mailing list > devel@lists.fedoraproject.org > http://lists.fedoraproject.org/admin/lists/devel@lists

Re: F24 System Wide Change: Layered Docker Image Build Service

2015-12-04 Thread Tomas Hozza
On 03.12.2015 15:40, Adam Miller wrote: > On Thu, Dec 3, 2015 at 8:12 AM, Tomas Hozza wrote: > > On 03.12.2015 14:54, Jan Kurik wrote: > >> On Thu, Dec 3, 2015 at 2:38 PM, Tomas Hozza wrote: > >>> On 03.12.2015 11:40, Jan Kurik wrote: > >>>> = Prop

Re: F24 System Wide Change: Layered Docker Image Build Service

2015-12-03 Thread Tomas Hozza
On 03.12.2015 14:54, Jan Kurik wrote: > On Thu, Dec 3, 2015 at 2:38 PM, Tomas Hozza wrote: >> On 03.12.2015 11:40, Jan Kurik wrote: >>> = Proposed System Wide Change: Layered Docker Image Build Service = >>> https://fedoraproject.org/wiki/Changes/Layered_Docker_Image_B

Re: F24 System Wide Change: Layered Docker Image Build Service

2015-12-03 Thread Tomas Hozza
Crane > * * Docker Registry > > == Scope == > For the Scope of this Change please check > https://fedoraproject.org/wiki/Changes/Layered_Docker_Image_Build_Service#Scope > Hi. The "Ongoing Work Tracking" link does not work. How is this different from the proposal

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-02 Thread Tomas Hozza
em (e.g. the ones started by libvirt). I'll review the change wiki in this regard. > * howto get domainname set automatically from dhcp As discussed in the Bug, this is not going to work and it is expected not to. Setting search domains from DHCP is a security issue. Tomas > -- > de

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-01 Thread Tomas Hozza
On 01.12.2015 16:06, Björn Persson wrote: > Tomas Hozza wrote: > > - dnssec-trigger does not do the Captive Portal detection and handling and > > we rather rely on NM for the detection and on Gnome Shell for the Portal > > login > > Can I assume that users of non-

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-01 Thread Tomas Hozza
On 01.12.2015 13:28, Tomas Mraz wrote: > On Út, 2015-12-01 at 11:15 +0100, Tomas Hozza wrote: > > You are not mistaken. > > > > This is the third time, because previously we rather moved the change to the > > next Fedora to bring better user experience. Every time there

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-01 Thread Tomas Hozza
a): > > = Default Local DNS Resolver = > > https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver > > > > Change owner(s): > > * P J P > > * Pavel Šimerda > > * Tomas Hozza > > * Petr Špaček > > > > Plain DNS protocol is insecu

Summary/Minutes from today's FESCo Meeting (2015-11-25)

2015-11-26 Thread Tomas Hozza
On 25.11.2015 10:03, Tomas Hozza wrote: > Following is the list of topics that will be discussed in the FESCo > meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/UTCH

Schedule for Wednesday's FESCo Meeting (2015-11-25)

2015-11-25 Thread Tomas Hozza
g it up at the end of the meeting, during the open floor topic. Note that added topics may be deferred until the following meeting. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com -- devel ma

Re: Fedora IPv6 testing and improvements - request for ideas

2015-11-04 Thread Tomas Hozza
only - as long > > as there is no IPv4-only user who cares - it's correct way. > > Whether a package is IPv6 only and whether a package works with > ipv6.disabled=1 are two distinct things that need to be tested > separately. On the other IPv6 only packages are a very rar

Summary of Thursday's call between GNOME and NM devels and Default DNS resolver change owners

2015-07-17 Thread Tomas Hozza
; [1] https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver [2] https://www.piratepad.ca/p/default-dns-resolver-f23 [3] https://bluejeans.com/s/8pTY/ Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc.

Re: Summary/Minutes from today's FESCo Meeting (2015-07-01)

2015-07-07 Thread Tomas Hozza
On 02.07.2015 17:56, Chris Murphy wrote: > On Thu, Jul 2, 2015 at 9:45 AM, Stephen Gallagher wrote: >> On Thu, 2015-07-02 at 10:33 -0500, Michael Catanzaro wrote: >>> On Thu, 2015-07-02 at 09:55 +0200, Tomas Hozza wrote: >>>> * AGREED: Netizen is not approved

Summary/Minutes from today's FESCo Meeting (2015-07-01)

2015-07-02 Thread Tomas Hozza
mgrepl (5) * plautrba (4) * jkurik (4) * mfabian (2) * maxamillion (2) * pravins (2) * mitr (1) * jkurik_mtg (1) * hguemar (0) * rishi (0) * nirik (0) * dgilmore (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot On 30.06.2015 12:02, Tomas Hozza wrote: > Following i

Re: DNSSEC/unbound -> boingboing.net failures

2015-06-30 Thread Tomas Hozza
gainst dnssec-trigger. It will be better for getting additional information. Also please see the reply by Paul Wouters to your previous email. Thanks in advance. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- deve

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 16:07, Michael Catanzaro wrote: > On Tue, 2015-06-30 at 11:24 +0200, Tomas Hozza wrote: >> The thing is that some information are unrelated to NM. There is no >> reason to push all information back to NetworkManager, since its role >> is >> explicit

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 16:07, Michael Catanzaro wrote: > On Tue, 2015-06-30 at 14:23 +0200, Tomas Hozza wrote: >> Except that this is exactly what we DON'T want to do. DNSSEC is an >> extension of DNS and it can be used even without the need for the >> whole >> Internet

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 14:37, Bastien Nocera wrote: > > > - Original Message - > >> No, it is not. It is opt-in now, we want it by default. Please read the >> change. Thank you. > > I don't see any options about it in GNOME's Network panel. I'm not interested > in integration as an after-thoug

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 14:11, Bastien Nocera wrote: > > > - Original Message - >> On 30.06.2015 13:53, Bastien Nocera wrote: >>> >>> >>> - Original Message - >>>> On 30.06.2015 11:24, Tomas Hozza wrote: >>> >>>&

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:53, Bastien Nocera wrote: > > > - Original Message - >> On 30.06.2015 11:24, Tomas Hozza wrote: > >>> It means that the site of your bank you are on may not be provided the >>> actual host you should be connected to, but instead by so

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:58, Stef Walter wrote: > On 30.06.2015 13:53, Bastien Nocera wrote: >> >> >> - Original Message - >>> On 30.06.2015 11:24, Tomas Hozza wrote: >> >>>> It means that the site of your bank you are on may not be provided the

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:46, Stef Walter wrote: > On 30.06.2015 11:24, Tomas Hozza wrote: >> On 26.06.2015 17:13, Matthias Clasen wrote: >>> On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: >>> >>> Hey, I was out for a week, so this may be a bit of a late r

Schedule for Wednesday's FESCo Meeting (2015-07-01)

2015-06-30 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-07-01 18:00 UTC' Links to all tickets belo

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 26.06.2015 17:13, Matthias Clasen wrote: > On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: > > Hey, I was out for a week, so this may be a bit of a late reply. > > As Michael and Bastien already stated, all the GNOME networking UI > relies on information gotten from N

Re: Schedule for Wednesday's FESCo Meeting (2015-06-24)

2015-06-24 Thread Tomas Hozza
://wiki.debian.org/MeetBot On 23.06.2015 17:43, Tomas Hozza wrote: > Following is the list of topics that will be discussed in the FESCo > meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. > > To convert UTC to your local time, take a look at > http://fedoraproject.or

dnssec-trigger + GNOME + NetworkManager integration

2015-06-23 Thread Tomas Hozza
nssec-trigger/#screenshots I'm all for simple and clean integration. Let's identify specific solutions and pieces we can start working on. Thanks. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.co

Schedule for Wednesday's FESCo Meeting (2015-06-24)

2015-06-23 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-06-24 18:00 UTC' Links to all tickets belo

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-18 Thread Tomas Hozza
specific. I would love to see more will for cooperation from GNOME people, so we can converge to the working and well integrated solution. Vague claims that something is missing or something needs to be done, without clear reasoning is not helping anyone. Cheers -- Tomas Hozza Software Enginee

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
On 17.06.2015 16:22, Paul Wouters wrote: > On Wed, 17 Jun 2015, Tomas Hozza wrote: > > >> While I don't actually care, this might well be a sticking point for > >> many people since their DNS information is going to an untrusted (to > >> them) DNS server.

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
On 12.06.2015 18:58, Dan Williams wrote: > On Fri, 2015-06-12 at 10:58 +0200, Tomas Hozza wrote: >> On 11.06.2015 22:48, Dan Williams wrote: >>> On Tue, 2015-06-09 at 12:30 -0400, Matthew Miller wrote: >>>> On Tue, Jun 09, 2015 at 11:34:39AM -0400, Paul Wouters wrote

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
thing as NM and even replace it in some environments (e.g. systemd-networkd) I don't think it makes sense to implement the same thing in each and every of these. I changed my mind and think that having one component implementing the functionality and communicating with the network configur

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
I think that if our > users have to learn what that means and understand all that in order to > be secure (or just to browse the web at _any_ level), we're not > succeeding. > > I hope we can get a design for this which integrates better with GNOME > Shell and the existing network

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
an do that! If user wants to use broken nameservers, they can switch the dnssec-trigger to "hotspot sign-on" mode. I agree that this is completely not intuitive and should be rather named "insecure mode". Practically this means that the DHCP provided resolvers are placed

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
d work properly (since forward zones are configured properly), this should be ideally done only by the dnssec-trigger based on the information passed by VPN to the NM. Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.re

Re: Packaging Guidelines for Applications using Git Submodules

2015-06-17 Thread Tomas Hozza
o rebuild the source tarball is a valid solution. You may want to file a FPC ticket [1] describing the situation, so that FPC may potentially change the Packaging guidelines to include some note on git submodules. If you have some proposed draft of the change (e.g. describing the current approach u

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-12 Thread Tomas Hozza
on to do the DNSSEC validation. Since using such data we are able to build the chain of trust and verify that the Answer is correct, there is no point in distinguishing if network provided resolver is trusted or not... it is not. This is the reason we do the validation locally. > Dan > I wo

Re: New ABRT CLI

2015-06-02 Thread Tomas Hozza
08:02:55 2015. Error: nothing provides python-argcomplete needed by abrt-cli-ng-2.5.1-3.fc22.1.x86_64 So this needs to be installed without the "--disablerepo=*" argument. Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc.

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-02 Thread Tomas Hozza
On 06/02/2015 06:44 PM, Paul Wouters wrote: > On Tue, 2 Jun 2015, David Howells wrote: > >>> Install a local DNS resolver trusted for the DNSSEC validation >>> running on >>> 127.0.0.1:53. This must be the only name server entry in >>> /etc/resolv.conf. >>> >>> The automatic name server entries rec

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-01 Thread Tomas Hozza
On 06/01/2015 03:32 PM, Matthew Miller wrote: > On Mon, Jun 01, 2015 at 08:03:27AM -0400, Jan Kurik wrote: >> People use Fedora on portable/mobile devices which are connected to >> diverse networks as and when required. The automatic DNS >> configurations provided by these networks are never tru

Deprecation of ISC's DLV registry

2015-05-20 Thread Tomas Hozza
d servers that use ISC's DLV in their default configuration in Fedora. If you are aware of any other component, please file a bug and add it to the tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1223360 Thanks! Regards, Tomas -- Tomas Hozza Software Engineer - EMEA ENG Devel

Re: Schedule for Wednesday's FESCo Meeting (2015-03-11)

2015-03-11 Thread Tomas Hozza
On 03/10/2015 04:06 PM, Tomas Hozza wrote: > Following is the list of topics that will be discussed in the FESCo > meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/UTCH

Schedule for Wednesday's FESCo Meeting (2015-03-11)

2015-03-10 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-03-11 18:00 UTC' Links to all tickets belo

Re: FESCo elections are open

2015-02-02 Thread Tomas Hozza
On 02/01/2015 10:39 AM, Alec Leamas wrote: > On 30/01/15 16:10, Kevin Fenzi wrote: > > On Fri, 30 Jan 2015 15:58:00 +0100 > > Alec Leamas wrote: > > > There were not really any questions directly related to products. > > Perhaps some could be added next time? > > > > In any case, I am in the Serve

Re: F22 System Wide Change: Enable Polyinstantiated /tmp and /var/tmp directories by default

2015-01-20 Thread Tomas Hozza
subdirectory of /tmp-inst which will > be a > real directory? > Why do you think this? I don't see any reason why the new tmp-inst directories can not be on tmpfs... > Incidentally, why /tmp-inst but /var/tmp/tmp-inst? Why not /tmp/tmp-inst for > /tmp or /var/tmp-inst for /va

Re: F22 System Wide Change: Default Local DNS Resolver

2015-01-19 Thread Tomas Hozza
t; issues that I have. I think that awareness of these issues is low, and > that it should be brought to light. I hope that more thorough testing > is carried out in a wider set of environments to eventually get this to > a point where it's a seamless change to enable this service.

Re: F22 System Wide Change: Default Local DNS Resolver

2015-01-19 Thread Tomas Hozza
NS authoritative server, DHCPv4/DHCPv6 server, TFTP server) and has tons of hackish options. From this point of view, the choice is pretty clear I think. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://

Re: Bodhi policy for pushing updates to stable

2015-01-16 Thread Tomas Hozza
On 01/15/2015 05:15 PM, Luke Macken wrote: > On Thu, Jan 15, 2015 at 10:19:19AM +0100, Tomas Hozza wrote: > > Hi all. > > > > When upgrading F20 to F21 using FedUp, some users had a problem > > with some packages not being upgraded (e.g. [1]). The problem was > >

BIND 9.10 in rawhide

2015-01-15 Thread Tomas Hozza
Hi all. I updated BIND to the latest stable 9.10 version in rawhide, as discussed here [1]. Feel free to try it out. [1] https://fedoraproject.org/wiki/Changes/BIND_9.10 Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc

Bodhi policy for pushing updates to stable

2015-01-15 Thread Tomas Hozza
y should be. However I think such task should be automated. Would it be possible to enforce such a thing for updates in bodhi? [1] https://bugzilla.redhat.com/show_bug.cgi?id=1176403 Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat I

Re: Schedule for Wednesday's FESCo Meeting (2014-12-10)

2014-12-10 Thread Tomas Hozza
On 12/09/2014 07:22 PM, Tomas Hozza wrote: > Following is the list of topics that will be discussed in the FESCo > meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/UTCH

Schedule for Wednesday's FESCo Meeting (2014-12-10)

2014-12-09 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2014-12-10 18:00 UTC' Links to all tickets belo

Re: Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-21 Thread Tomas Hozza
On 11/21/2014 09:04 AM, P J P wrote: >> On Friday, 21 November 2014 1:24 PM, Florian Weimer wrote: > >>> On 11/21/2014 08:34 AM, Jan Kratochvil wrote: >>> Almost all of my Fedora installations are test VMs where >>> any security is irrelevant. > >Okay. But does enabling root login offer any s

Re: Summary/Minutes from today's FESCo Meeting (2014-11-19)

2014-11-20 Thread Tomas Hozza
On 11/20/2014 08:05 AM, Till Maas wrote: > On Wed, Nov 19, 2014 at 03:06:11PM -0500, Tomas Mraz wrote: > > > * #1368 How to deal with F21 broken dependencies (t8m, 19:08:56) > > * AGREED: FESCo agrees to dropping the packages with broken > > dependencies listed in #1368 from both F21 and raw

Re: Idea: Ability to define dependencies between coprs (correctly)

2014-10-09 Thread Tomas Hozza
similar repos enabled) or we would have to > call > them differently. Just quick test does not show any issues with more repos > with > the same name. > > Honza Different repos inside a single repo file will be still shown as different repos when installing a packages fr

Re: Idea: Ability to define dependencies between coprs (correctly)

2014-10-08 Thread Tomas Hozza
repos without explicit user > approval. I'm not sure whether this is a problem or not, though. Well, dnf/yum should show you what will be installed/enabled as dependencies, so the user is kind of informed what extra repos will be installed and enabled. > > > gets changed (on

Re: planned bind-pkcs11 changes in F20+

2014-09-25 Thread Tomas Hozza
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/25/2014 05:18 PM, Paul Wouters wrote: > On Thu, 25 Sep 2014, Tomas Hozza wrote: > > > I would like to inform everyone about changes I plan to do > > in Fedora 20+ due to Bug 1097752 (Support for native PKCS#11 > > inter

planned bind-pkcs11 changes in F20+

2014-09-25 Thread Tomas Hozza
nges could break someone's setup, please let me know so we can work on some solution. Otherwise I'll do the changes some day next week. Thank you. Regards, - -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.r

Re: F22 Self Contained Change: BIND version 9.10

2014-09-16 Thread Tomas Hozza
On 09/16/2014 01:34 PM, Jaroslav Reznik wrote: > = Proposed Self Contained Change: BIND version 9.10 = > https://fedoraproject.org/wiki/Changes/BIND_9.10 > > Change owner(s): Tomas Hozza > > BIND (Berkeley Internet Name Domain) version 9.10 is the latest stable major >

Summary/Minutes from today's FESCo Meeting (2014-08-20)

2014-08-20 Thread Tomas Hozza
=== #fedora-meeting: FESCO (2014-08-20) === Meeting started by thozza at 17:04:28 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-08-20/fesco.2014-08-20-17.04.log.html . Meeting summary ---

Re: BIND 9.10.1 beta with seccomp functionality

2014-08-19 Thread Tomas Hozza
On Tue 19 Aug 2014 05:12:31 PM CEST, Chris Adams wrote: > Once upon a time, Tomas Hozza said: >> That's where seccomp kicks in, it acts as a 2nd wall of defence. In case >> of a security hole being present in the server process, it goes further >> than a chroot, it

BIND 9.10.1 beta with seccomp functionality

2014-08-19 Thread Tomas Hozza
rexecuting his code, as his "playing field" is significantly reduced. There's very little he can do.” Thank you. Regards, - -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -BEGIN PGP

Re: Schedule for Wednesday's FESCo Meeting (2014-08-20)

2014-08-19 Thread Tomas Hozza
On Tue 19 Aug 2014 01:40:55 PM CEST, Stephen Gallagher wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On 08/19/2014 04:14 AM, Tomas Hozza wrote: >> Following is the list of topics that will be discussed in the >> FESCo meeting Wednesday at 17:00U

Schedule for Wednesday's FESCo Meeting (2014-08-20)

2014-08-19 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 17:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '-MM-DD 17:00 UTC' Links to all tickets belo

Retiring bind10 in F21+

2014-08-18 Thread Tomas Hozza
e-1-2-project-renamed-bundy/ [2] https://bugzilla.redhat.com/show_bug.cgi?id=1130617 Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org

Re: Non-responsive maintainer: Deji Akingunola (fas: deji)

2014-07-28 Thread Tomas Hozza
with the pkgdb2 api > to do this, then I was traveling, etc. > > It's now been done. > > The following packages are looking for a new point of contact on at > least one branch: > > (Note that many of them have co-maintainers, so do check with them to > see if

Re: Attempting to contact unresponsive maintainer - jkoncick

2014-07-07 Thread Tomas Hozza
ll need to find new point of contacts, etc. > > Thanks, > > kevin Hi Jaromir was an intern at Red Hat and finished today. I think it is OK if you remove his acls right away. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc.

FESCo candidature announcement

2014-07-04 Thread Tomas Hozza
or research and proper understanding. I think all important changes should be thoroughly discussed and not made silently. Have you any questions, feel free to ping me on IRC (#fedora-devel) or drop an email. Tomas [1] https://fedoraproject.org/wiki/Development/SteeringCommittee/Nominations#Candid

Split of bind-chroot package in Fedora rawhide branch

2013-12-18 Thread Tomas Hozza
b now uses its own chroot path '/var/named/chroot_sdb'. Regards, Tomas Hozza ___ devel-announce mailing list devel-annou...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel-announce -- devel mailing

Re: PSA: If you are C/C++ developer, use cppcheck

2013-12-17 Thread Tomas Hozza
find issues with possible security impact. Also Coverity offers their tool to open-source projects for free [1]. I think some projects are already using it (at least Squid). So if upstream projects are interested, they can sign up for free. [1] https://scan.coverity.com/ Regards, Tomas Hozza -

Unresponsive maintainers of dependent packages

2013-12-09 Thread Tomas Hozza
oken. Can I ask these packages to be deprecated in rawhide, or what can I do with them? I don't want to take maintenance of those packages. Dependent packages I have problem with are: - obexfs - obexftp - libopensync-plugin-irmc Thanks in advance for any help/opinion. Regards, To

Heads up - updating openobex in rawhide to 1.7.1 - API change

2013-09-11 Thread Tomas Hozza
ple.org/openobex-1.7.1-rebuilds_results/results_syncevolution/ If someone thinks we should not rebase openobex to the latest version and has a good reason for it, feel free to replay to this email. Thanks! Regards, Tomas Hozza -- devel mailing list devel@lists.fedoraproject.org https://admin.fedorapr