Re: Donate 1 minute of your time to test upgrades from F41 to F42

2025-03-17 Thread Steve Grubb
not install the best update candidate for package hyperscan-5.4.1-6.fc41.x86_64 Everything else is multimedia related. -Steve -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject

Re: F42 Change Proposal: RPM Support For Systemd Sysusers.d (system-wide)

2025-01-14 Thread Steve Grubb
igger for such a change. > > This is separate topic. Anyway, based on what Steve wrote, the patch > cannot be removed. Right. But I see a possible minimal patch to fix it. https://github.com/shadow-maint/shadow/blob/master/lib/audit_help.c#L59 This ^^^ function logs all audit events, I

Re: F42 Change Proposal: RPM Support For Systemd Sysusers.d (system-wide)

2025-01-10 Thread Steve Grubb
On Friday, January 10, 2025 10:20:07 AM EST Zbigniew Jędrzejewski-Szmek wrote: > On Thu, Jan 02, 2025 at 01:08:38PM -0500, Steve Grubb wrote: > > > * Verify that audit events exist for user and group creation: > > > >ausearch --start recent -i -m >

Re: F42 Change Proposal: RPM Support For Systemd Sysusers.d (system-wide)

2025-01-02 Thread Steve Grubb
On Thursday, January 2, 2025 5:17:06 PM EST Björn Persson wrote: > Steve Grubb wrote: > > * Remove the package and verify audit events exist for account and group > > deletion (see above ausearch command). > > I was under the impression that it's common practice to

Re: F42 Change Proposal: RPM Support For Systemd Sysusers.d (system-wide)

2025-01-02 Thread Steve Grubb
gt; check that the output looks reasonable. > * Verify that you can install the package and installed files have > correct ownership. * Verify that audit events exist for user and group creation: ausearch --start recent -i -m 'ADD_USER,USER_MGMT,USER_CHAUTHTOK,ROLE_ASSIGN,ROL

Re: rawhide and f41 build errors.

2024-11-11 Thread Steve Dickson
Never mind... export LC_ALL="C.UTF-8" took care of the failure... steved. On 11/11/24 1:02 PM, Steve Dickson wrote: On 11/10/24 11:56 AM, Kevin Fenzi wrote: On Sat, Nov 09, 2024 at 12:07:09PM -0600, Steve Dickson wrote: Hello, Out of the blue rawhide scratch builds [1] are n

Re: rawhide and f41 build errors.

2024-11-11 Thread Steve Dickson
On 11/10/24 11:56 AM, Kevin Fenzi wrote: On Sat, Nov 09, 2024 at 12:07:09PM -0600, Steve Dickson wrote: Hello, Out of the blue rawhide scratch builds [1] are now failing and f41 builds [2] are failing but f40 builds [3] are succeeding and they are all the same code! Late Oct I made a

rawhide and f41 build errors.

2024-11-09 Thread Steve Dickson
Hello, Out of the blue rawhide scratch builds [1] are now failing and f41 builds [2] are failing but f40 builds [3] are succeeding and they are all the same code! Late Oct I made a release so their repo heads are all the same. Does anybody know what has changed in the building process? Or bette

Lxqt-wallet 4.0 breaks ABI compabitility

2024-11-06 Thread Steve Cossette
Hello Everyone! I just pushed to rawhide an update for lxqt-wallet 4.0 that breaks abi compatibility with items that use it. In this case though, the packages depending on it have also been rebuilt for it. But as it is tradition (And directed in Fedora's rules), I am posting in the devel mailing

Re: default `kernel.yama.ptrace_scope = 0` revisited. update to >=1 ?

2024-08-14 Thread Steve Grubb
support this conjecture , that this was "good advice" based on the understanding at the time. > it'd be helpful if the 'password manager' types engage in some dialog > _first_ ... > > in any case, it's 'flagged' here, so I can at

Re: default `kernel.yama.ptrace_scope = 0` revisited. update to >=1 ?

2024-08-14 Thread Steve Grubb
ementation -- and explaining. for a client adding 1pass to their > RH/Fedora desktop mix, that results unfortunately in support calls. Propose it as a system wide change. I'd give it a +1. (Its what I made RHEL do for security lockdowns.) -Steve > >> It'd be much cleaner if R

Re: default `kernel.yama.ptrace_scope = 0` revisited. update to >=1 ?

2024-08-14 Thread Steve Grubb
leaves > deployments to RH/Fedora + 1password users in a pickle -- which vendor's > guidance do you believe/trust? What *I* control, *I* can change. But it's > an uphill push to say "Ignore Redhat" or "Ignore 1password" to others. Changing one setting isn&#

Re: default `kernel.yama.ptrace_scope = 0` revisited. update to >=1 ?

2024-08-14 Thread Steve Grubb
Hello, Not really here to defend the current setting. But I have run with it set to 1 for several years and have not noticed any real issues. -Steve On Monday, August 12, 2024 10:27:18 AM EDT pgnd wrote: > in > > distro > Name: Fedora Lin

Re: RPM build warning

2024-07-23 Thread Steve Dickson
On 7/23/24 5:04 PM, Elliott Sales de Andrade wrote: On Tue, Jul 23, 2024 at 4:56 PM Steve Dickson wrote: On 7/23/24 4:36 PM, Zbigniew Jędrzejewski-Szmek wrote: On Tue, Jul 23, 2024 at 04:31:31PM -0400, Steve Dickson wrote: Hello I've got the following warning RPM build war

Re: RPM build warning

2024-07-23 Thread Steve Dickson
On 7/23/24 4:36 PM, Zbigniew Jędrzejewski-Szmek wrote: On Tue, Jul 23, 2024 at 04:31:31PM -0400, Steve Dickson wrote: Hello I've got the following warning RPM build warnings: source_date_epoch_from_changelog set but %changelog is missing The spec file definitely has a %chan

RPM build warning

2024-07-23 Thread Steve Dickson
Hello I've got the following warning RPM build warnings: source_date_epoch_from_changelog set but %changelog is missing The spec file definitely has a %changelog section. What is it the warning about? tia, steved. -- ___ devel mailing list -- d

Re: scratch build error.

2024-06-29 Thread Steve Dickson
avoid the need to call pkg-config. See the pkg-config man page for more details. error: Bad exit status from /var/tmp/rpm-tmp.ercgmY (%build)     Bad exit status from /var/tmp/rpm-tmp.ercgmY (%build) RPM build errors: Child return code was: 1 On 6/29/24 19:48, Steve Dickson wrote: Hello, My

scratch build error.

2024-06-29 Thread Steve Dickson
Hello, My apologies if this has been already discussed, I don't follow this email list as closely as I should so please point to the previous discussion, if there is one. I'm getting the following rawhide scratch build error [1] which appears to be a mock build error [2] that is not part of the

Multiple account problem

2024-04-19 Thread Steve Grubb
systemd --user. Should "su -" also start it's own systemd instance since things seemingly can't function without it? By extension, what does this mean for sudo? Why do 2 instances of keyboxd for that acct get started? (Should the second one have gracefully exited?) Or is this expec

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-12 Thread Steve Cossette
What about simply blocking access to the git repos/koji/bodhi for those without 2fa? On Fri, Apr 12, 2024 at 12:05 PM Kevin Fenzi wrote: > On Thu, Apr 11, 2024 at 05:49:27PM -0700, Adam Williamson wrote: > > On Fri, 2024-04-12 at 00:09 +, Gary Buhrmaster wrote: > > > > > > What is the best w

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-05 Thread Steve Cossette
We didnt withdraw it because, well to be completely honest, we are afraid that, if we do that, in the eyes of the community at least, we will abandon the idea completely and any subsequent effort would be undermined as a result. It’s kindof a case of « damned if you do and damned if you don’t »…

Re: What we mean when we talk about "supply chains" [was Re: Three steps we could take to make supply chain attacks a bit harder]

2024-04-04 Thread Steve Grubb
tasks such as software development, testing, quality assurance, responding to bug reports, documentation, and support. IOW, it is a process. It is the community that carries out the process. -Steve -- ___ devel mailing list -- devel@lists.fedoraproj

Re: Switching XZ for ZSTD?

2024-04-04 Thread Steve Cossette
I have definitely not read 75% of the comments and articles about the xz issues but I understand the general reason why this happened. Issue here is, let's say we do switch to an alternative, whatever it is. Who's to say that one doesn't have the same basic issue? Same with any other project in FO

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Steve Cossette
s iOS" fights. On Thu, Apr 4, 2024 at 8:34 AM Steve Cossette wrote: > Problem with extensions is, while they are *technically* supported by > gnome, they can break with any update (It has happened to me in the past). > Heck, it kinda reminds me of hacks people use to get around the j

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-04 Thread Steve Cossette
Problem with extensions is, while they are *technically* supported by gnome, they can break with any update (It has happened to me in the past). Heck, it kinda reminds me of hacks people use to get around the junk people put in Windows 10/11... On Thu, Apr 4, 2024 at 8:09 AM Leslie Satenstein via

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Steve Cossette
ubuntu is Ubuntu. (Though, I don't know about 'Kedora' as it has absolutely no meaning XD) Though I feel like we should really only go this route if the other ideas get completely exhausted... Steve On Wed, Apr 3, 2024 at 12:22 PM Michael Catanzaro wrote: > > > On Tue,

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Steve Cossette
Putting aside that i heard from Neal Gompa that anaconda cannot accommodate a « multi-flavor » media, can you imagine how big that iso would be? Forget 4gb, it’d probably be closer to 20gb! On Wed, Apr 3, 2024 at 09:49 Leslie Satenstein via devel < devel@lists.fedoraproject.org> wrote: > Perhaps

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-03 Thread Steve Cossette
It is not an april fools joke. On Wed, Apr 3, 2024 at 04:37 Peter Boy wrote: > > > > Am 02.04.2024 um 22:06 schrieb Steve Cossette : > > > > ... The overall spirit of the CP is that we think KDE, and to some > extent the other spins too, need a bit mor

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Steve Cossette
Sorry, that's pretty much how things are right now, is that what you were trying to demonstrate? I'm not really following. Personally, if we were to promote both KDE and Gnome on the website, I'd make it dead simple. I really suck at making graphics so I'll try to put it in text: I imagine a pag

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Steve Cossette
Fenzi wrote: > On Tue, Apr 02, 2024 at 04:06:45PM -0400, Steve Cossette wrote: > > Alright, so a substantial amount of information changed since the > original > > submission of the change proposal. We aren't necessarily thinking of > > demoting Gnome. The overall spir

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Steve Cossette
Oooo I could go for some Yak meat! On Tue, Apr 2, 2024 at 5:32 PM Adam Williamson wrote: > On Tue, 2024-04-02 at 17:37 -0300, Sergio Belkin wrote: > > > > I am a happy KDE user, since the good old days of version 1.0. I > celebrate > > this decision! My recognition goes to the enormous and susta

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Steve Cossette
3:58 PM Steven A. Falco wrote: > On 4/2/24 03:50 PM, Steve Cossette wrote: > > Well, we did submit this yesterday around 2:30-3:00PM EST, guessing it > was a bit too late. > > > > But the proposal is 1000% serious. > > I'm glad to hear you say that, as I

Re: Self Introduction: Matthew Kosarek

2024-04-02 Thread Steve Cossette
Hello Matthew, and welcome to Fedora! You'll find alot of good people in here eager to help you. Feel free to also drop in on matrix for a more real-time conversation! On Tue, Apr 2, 2024 at 3:44 PM Matthew Kosarek via devel < devel@lists.fedoraproject.org> wrote: > Hello all, > > My name is Mat

Re: Three steps we could take to make supply chain attacks a bit harder

2024-04-02 Thread Steve Cossette
I personally would very much agree with enforcing the use of 2fa on the Fedora Account System. Maybe take that opportunity to make it a bit more user friendly? (Such as the fkinit prompt requiring the 2fa code being added at the end of your password -- to be clear I think the 2fa code should be sep

Re: F42 Change Proposal: Fedora Plasma Workstation (System-Wide)

2024-04-02 Thread Steve Cossette
Well, we did submit this yesterday around 2:30-3:00PM EST, guessing it was a bit too late. But the proposal is 1000% serious. On Tue, Apr 2, 2024 at 3:46 PM Jonathan Wakely wrote: > On Tue, 2 Apr 2024 at 19:44, Richard Hughes wrote: > > > > On Tue, 2 Apr 2024 at 10:40, Aoife Moloney wrote: >

Re: rpmbuild problem with rust code

2024-02-26 Thread Steve Grubb
ode. > > > > Is there a way to tell rpmbuild not to worry about this? > > The solution should be simple - remove stray +x permissions from all *.rs > files. Thanks. That did it. -Steve -- ___ devel mailing list -- devel@lists.fedora

rpmbuild problem with rust code

2024-02-26 Thread Steve Grubb
e first line because it's vendored code. Is there a way to tell rpmbuild not to worry about this? -Steve -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-08 Thread Steve Cossette
I On Thu, Feb 8, 2024 at 9:51 PM Sérgio Basto wrote: > On Thu, 2024-02-08 at 20:43 +0100, Fabio Valentini wrote: > > On Thu, Feb 8, 2024 at 12:33 PM Sérgio Basto > > wrote: > > > > > > On Wed, 2024-02-07 at 16:03 +0100, Marc Deop i Argemí wrote: > > > > We are not banning nor deleting anything.

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-07 Thread Steve Cossette
On 2024-02-06 8:20 a.m., Roberto Ragusa wrote: On 2/3/24 22:11, pgnd wrote: Is there a way to see what gaps remain, which ones are being worked on, and which ones will be declared "not a gap - won't fix"? I have a list of things I'm tracking. I've been reluctant to publish it because people

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-07 Thread Steve Cossette
On 2024-02-07 7:21 a.m., Peter Boy wrote: I don't really want to get involved in this discussion. I don't use KDE, I don't even use Fedora Desktop anymore. But there is one argument resp. strategy that triggers me: Am 07.02.2024 um 10:44 schrieb Michel Lind : - KDE SIG likely also want peop

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-07 Thread Steve Cossette
That’s just kmail though. I have a similar issue, but kmail is just plain broken in plasma 6 right now. On Tue, Feb 6, 2024 at 11:08 PM Garry T. Williams wrote: > On Tuesday, 30 January 2024 08:07:25 EST Richard W.M. Jones wrote: > > On Tue, Jan 30, 2024 at 12:47:44PM +, Sérgio Basto wrote:

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-03 Thread Steve Cossette
On 2024-02-03 9:01 a.m., Björn Persson wrote: Neal Gompa wrote: It's extremely obvious that people want to use it. It's extremely obvious that *some* people want to use Wayland. It's equally obvious that some other people want to use X. It's also obvious that certain people want to make *everyb

Re: Self Introduction: Leo Sandoval

2024-02-01 Thread Steve Cossette
Welcome to Fedora! Drop by matrix, we don't bite (hard)! Le jeu. 1 févr. 2024, à 19 h 48, Leo Sandoval a écrit : > Dear Fedora Community! > > My name is Leonardo Sandoval, a software developer living in Guadalajara, > Mexico. I have been in the industry since 2006, most of the time close to > t

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-01 Thread Steve Cossette
On 2024-02-01 11:21 a.m., Roberto Ragusa wrote: On 2/1/24 14:29, Steve Cossette wrote: And yes, that /is/ the whole point: We want to foster the use of Wayland, to increase it's adoption, to force people using it to hit snags along the road and fill tickets so those issues can be

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-01 Thread Steve Cossette
On 2024-02-01 10:27 a.m., Peter Boy wrote: Sorry, a bit off-topic here, but nevertheless: Am 01.02.2024 um 15:14 schrieb Steve Cossette : Hello Pgnd, I honestly do appreciate your point of view. Especially from a business owner standpoint. I do manage small business servers, and I feel

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-01 Thread Steve Cossette
On 2024-01-30 8:04 a.m., Germano Massullo wrote: What does it mean that FESCo is applying an injunction? -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Condu

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-01 Thread Steve Cossette
On 2024-02-01 8:18 a.m., Sérgio Basto wrote: On Thu, 2024-02-01 at 07:08 -0500, Steve Cossette wrote: So, if you all don't mind, I'd like to steer this discussion in a slightly different way: What is the definition of a Fedora Change Proposal? Proposal was not accepted by many memb

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-02-01 Thread Steve Cossette
So, if you all don't mind, I'd like to steer this discussion in a slightly different way: What *is* the definition of a Fedora Change Proposal? I was under the impression it was an announcement of intent by the maintainers of a specific subset of the fedora project to "change" something. Once sai

Re: just to let you know FESCo agreed to a preliminary injunction while we consider this issue

2024-01-30 Thread Steve Cossette
sts.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue That about sums it up, yes. By the way, my name is Steve Cossette and I'm also one of the members of the KDE SiG. If the packages are accepted under the sole condition that it does

Re: Lost KDC for FEDORAPROJECT.ORG realm

2024-01-23 Thread Steve Dickson
On 1/23/24 10:13 AM, Miro Hrončok wrote: On 23. 01. 24 16:08, Steve Dickson wrote: Hello, I had to change my /etc/krb5.conf do to some realm changes... and now when I to a kinit to FEDORAPROJECT.ORG  it hangs for a while then errors with kinit: Cannot contact any KDC for realm

Re: Lost KDC for FEDORAPROJECT.ORG realm

2024-01-23 Thread Steve Dickson
On 1/23/24 10:08 AM, Steve Dickson wrote: Hello, I had to change my /etc/krb5.conf do to some realm changes... and now when I to a kinit to FEDORAPROJECT.ORG  it hangs for a while then errors with kinit: Cannot contact any KDC for realm 'FEDORAPROJECT.ORG' while getting initial c

Lost KDC for FEDORAPROJECT.ORG realm

2024-01-23 Thread Steve Dickson
Hello, I had to change my /etc/krb5.conf do to some realm changes... and now when I to a kinit to FEDORAPROJECT.ORG it hangs for a while then errors with kinit: Cannot contact any KDC for realm 'FEDORAPROJECT.ORG' while getting initial credentials My question is, what has to be in the /etc/k

auditd systemd preset

2024-01-15 Thread Steve Grubb
ystem-preset/90-default.preset and it seems to work as expected. Would this update require just a FESCO ticket asking for the preset or does this need both a FESCO ticket and a self-contained change notice? Thanks, -Steve -- ___ devel mailing list --

Re: libcap-ng upcoming change

2023-12-18 Thread Steve Grubb
On Monday, December 18, 2023 1:40:55 PM EST Tomasz Kłoczko wrote: > On Mon, 18 Dec 2023 at 18:18, Steve Grubb wrote: > > Hello, > > > > I wanted to ask about the right tactic to make a change in Fedora 40. > > Libcap- > > ng is ready for a new release. I want t

libcap-ng upcoming change

2023-12-18 Thread Steve Grubb
_apply function declaration. This was to increase visibility to anyone doing builds. So, what should I do to remove the patch? Do I push the new release into rawhide without the patch or does this need to go through the Fedora Change Process? And if so, self-contained or system wide?

Re: Help packaging PyTorch dependencies for Fedora

2023-12-11 Thread Steve Grubb
On Monday, December 11, 2023 4:59:45 AM EST Tim Flink wrote: > On 12/8/23 08:34, Steve Grubb wrote: > > On Friday, December 8, 2023 12:41:59 AM EST Jun Aruga (he / him) wrote: > > > >> Congratulations for the PyTorch package! > >> https://src.fedoraproject.org/r

Re: goal: booting with an empty /etc

2023-12-08 Thread Steve Grubb
On Friday, December 8, 2023 11:57:55 AM EST Adam Williamson wrote: > On Fri, 2023-12-08 at 11:49 -0500, Steve Grubb wrote: > > On Friday, December 8, 2023 11:23:29 AM EST Zbigniew Jędrzejewski-Szmek > > wrote: > > > > > But yeah, there'll always be a f

Re: goal: booting with an empty /etc

2023-12-08 Thread Steve Grubb
adjusted using the standards. -Steve -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-co

Re: Help packaging PyTorch dependencies for Fedora

2023-12-08 Thread Steve Grubb
itch. This is a positive step and I would love to switch one day. Best Regards, -Steve -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://doc

Re: Ancient compilation flags in my pkg - still needed ?

2023-11-30 Thread Steve Grubb
tream should put all of these in the right places so that you do not pass them this way. -Steve -- ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: htt

Re: xmlParseMemory() and xmlParseMemory gone rawhide?

2023-11-18 Thread Steve Dickson
On 11/18/23 12:39 PM, Dan Horák wrote: On Sat, 18 Nov 2023 12:30:04 -0500 Steve Dickson wrote: Hello, When building an nfs-utils rpm in rawhide I get the following errors: xml.c: In function ‘junction_parse_xml_buf’: xml.c:293:15: error: implicit declaration of function ‘xmlParseMemory

xmlParseMemory() and xmlParseMemory gone rawhide?

2023-11-18 Thread Steve Dickson
Hello, When building an nfs-utils rpm in rawhide I get the following errors: xml.c: In function ‘junction_parse_xml_buf’: xml.c:293:15: error: implicit declaration of function ‘xmlParseMemory’ [-Werror=implicit-function-declaration] 293 | tmp = xmlParseMemory(buf, (int)len); |

Re: DNF5: Checking signatures of packages installed out of a repository?

2023-11-14 Thread Steve Grubb
being enforced, that will get the attention of the security team. And while we are talking update security, minimum hash sizes since last year are SHA384 and signatures being RSA 3072 and higher (this includes secure boot). There is also an expectation of moving away from RSA to quantum resista

Re: FEDORA-2023-ed0c57b4ba — unspecified update for libtirpc — Fedora Updates System

2023-10-25 Thread Steve Dickson
On 10/25/23 12:20 PM, Adam Williamson wrote: On Wed, 2023-10-25 at 12:03 -0400, Steve Dickson wrote: Hello, This update failed [1] due to a system timeout [2] not a test failure... Is there some way to override or wave the failure. Failed tests are automatically retried one time. However

FEDORA-2023-ed0c57b4ba — unspecified update for libtirpc — Fedora Updates System

2023-10-25 Thread Steve Dickson
Hello, This update failed [1] due to a system timeout [2] not a test failure... Is there some way to override or wave the failure. tia, steved. [1] https://bodhi.fedoraproject.org/updates/FEDORA-2023-ed0c57b4ba [2] https://openqa.fedoraproject.org/tests/2225991# __

Re: Manual step in upgrade process for a FSWC

2023-08-31 Thread Steve Grubb
eft it to the admin. Not that you have to do it this way. But I thought I'd mention how we navigated changes in the past. The main thing is we didn't want people getting locked out by an incompatible change in the pam stack. (Especially for remote logins.) -Steve > An automation pro

Re: Fedora CoreOS Meeting Minutes 2023-08-23

2023-08-24 Thread Steve Grubb
for audit logs can avoid installing the audit package. This will need extra eyes - hence it will go through the Change Proposal process to ensure it works well. So, if this is in the context of F40, it may warrant another look at the plans. -Steve __

Re: Dropping of sshd.socket unit

2023-08-04 Thread Steve Grubb
d, it connects via the socket API where the sshd instances is started with the right SE Linux labels. This is a small but important use case. I suppose the fallback would be to go back to using xinetd if this is not fixed in systemd. -Steve ___ deve

Re: Restricting automounting of uncommon filesystems?

2023-07-23 Thread Steve Grubb
gs so they can be fixed: https://github.com/stevegrubb/fsfuzzer It does not support all filesystems, but it is easy to add support through adding the correct mounter to the scrips. It has found *so* *many* filesystem bugs over time. -Steve ___ deve

Re: python3 build failure

2023-07-20 Thread Steve Dickson
On 7/20/23 2:09 PM, Yaakov Selkowitz wrote: On Thu, 2023-07-20 at 13:59 -0400, Steve Dickson wrote: This bz[1] was opened on one of my packages not building on f39. I did a quick rawhide scratch build and sure enough the build fails with [2] The important part is earlier in the log

python3 build failure

2023-07-20 Thread Steve Dickson
Hello, This bz[1] was opened on one of my packages not building on f39. I did a quick rawhide scratch build and sure enough the build fails with [2] Traceback (most recent call last): File "/usr/lib/python3.11/site-packages/mockbuild/trace_decorator.py", line 93, in trace result = func(

Re: Towards enabling rpm sysusers integration

2023-06-28 Thread Steve Grubb
On Wednesday, June 28, 2023 10:15:48 AM EDT Lennart Poettering wrote: > On Di, 27.06.23 12:04, Panu Matilainen (pmati...@redhat.com) wrote: > > On 6/22/23 19:55, Steve Grubb wrote: > > > > https://fedoraproject.org/wiki/Changes/Adopting_sysusers.d_format > > > >

Re: F39 Change Proposal: LibuserDeprecation (System Wide)

2023-06-26 Thread Steve Grubb
nce in functionality between the two > variants of passwd? Yes, there is at least one difference that I know of. The one from passwd is SELinux aware. I think that the threat it is defending against is root being a shared account. You can have web admin, db admin, security officer, and

Re: Changes to build environment

2023-06-22 Thread Steve Grubb
s the new normal. -Steve ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelin

Re: Changes to build environment

2023-06-22 Thread Steve Grubb
On Thursday, June 22, 2023 2:14:22 PM EDT Fabio Valentini wrote: > On Thu, Jun 22, 2023 at 7:57 PM Steve Grubb wrote: > > I have switched to F38 and find a couple items annoying. I have a > > workflow that checks things I develop out of github, rolls it up into > > an rpm, bu

Changes to build environment

2023-06-22 Thread Steve Grubb
, now its gone (problem #1). OK, I use rpmbuild -bc to rebuild it. I cd into the build directory make a change and run make. gcc: fatal error: environment variable 'RPM_ARCH' not defined (problem #2) How do I fix these things? -Steve __

Re: F39 Change Proposal: LibuserDeprecation (System Wide)

2023-06-22 Thread Steve Grubb
at switch. I also have not audited the code in shadow-utils version of passwd where the one we are using now has been audited several times. -Steve > == Feedback == > > > == Benefit to Fedora == > > The main benefit is to decrease the maintenance and packaging work on &

Re: Towards enabling rpm sysusers integration

2023-06-22 Thread Steve Grubb
saw the deprecation email) has 55 places where it sends audit events managing accounts. There is a 10 year old (or more) standard published here: https://github.com/linux-audit/audit-documentation/wiki/SPEC-User-Account-Lifecycle-Events If %pre getent, useradd, and groupadd are being replaced by so

Re: LibreOffice packages

2023-06-05 Thread Steve Grubb
the root of trust? Are they signed by a Fedora key that I already have? How can we verify it's integrity? Once installed, how do I verify it's integrity? How do I check if anything has been modified? Does it integrate well with SE Linux, IMA, fapolicyd, or openscap? O

Re: SecureBoot certificates

2023-05-31 Thread Steve Grubb
On Tuesday, May 30, 2023 10:00:53 PM EDT Chris Murphy wrote: > On Fri, May 26, 2023, at 10:20 AM, Steve Grubb wrote: > > sbattach --detach signature /boot/efi/EFI/BOOT/BOOTX64.EFI > > openssl pkcs7 -inform DER -in signature -text -print_certs > > > shim-certs.txt> &

Re: SecureBoot certificates

2023-05-26 Thread Steve Grubb
On Friday, May 26, 2023 11:18:32 AM EDT Gary Buhrmaster wrote: > On Fri, May 26, 2023 at 2:20 PM Steve Grubb wrote: > > I was poking around a F38 system to look over the Secure Boot > > certificates and found something that may warrant attention. > > I *suspect* this is

SecureBoot certificates

2023-05-26 Thread Steve Grubb
to be compliant with CNSA 1.0 requirements? And if so, that also means moving to SHA-384. Or did I miss some system-upgrade step that updates the bootloader? TBH, I am surprised by this finding. But we're all busy and it *is* working. Best, -Steve ___ de

strange python3 mock error

2023-04-17 Thread Steve Dickson
Hello, I'm getting a very strange mock error [1] on a package [2] that was recently ported to python 3. The package builds fine locally... only fails in a scratch build... and that function that the error is c complaining about does not exist in the package... Not clear what to do... tia! stev

Re: F38 DNF/RPM install errors due to header signatures

2023-04-10 Thread Steve Grubb
allowed as is ECDH P-512, and AES-256. Then in 2025, this all starts again with CNSA 2.0 where there's a transition period to quantum resistant algorithms. The target is everything transitioned by 2030. -Steve ___ devel mailing list -- devel@l

Timeshift on Fedora

2023-04-03 Thread Steve Cossette
Good morning all, I had a strange experience with Timeshift last week. For those that don't know, Timeshift is a software that allows you to make a backup of your system (As a snapshot) and restore it in case you need to. I installed it a couple weeks ago and made a backup. I couldn't make a bt

What happen kup in Fedora 37

2023-03-27 Thread Steve Dickson
Hello, I'm trying to access kernel.org with kup script but it does not seem to be in Fedora 37. The only rpm I can find is kup-0.3.6-11.fc36.rpm. What am I missing?? steved. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send

Re: Strange RPM build warning

2023-02-28 Thread Steve Dickson
On 2/28/23 12:37 PM, Chuck Anderson wrote: February is abbreviated as "Fed" in the first changelog entry: * Tue Fed 28 2023 Steve Dickson 1.2.6-4.rc2 - Updated to latest upstream RC release: rpcbind-1_2_7-rc2 Yup! That was the problem... Thank you for your time!!! steved. On T

Re: Strange RPM build warning

2023-02-28 Thread Steve Dickson
On 2/28/23 12:37 PM, Miro Hrončok wrote: On 28. 02. 23 18:33, Steve Dickson wrote: On 2/28/23 12:12 PM, Miro Hrončok wrote: On 28. 02. 23 17:43, Steve Dickson wrote: Hello, I'm getting this warning RPM build warnings: source_date_epoch_from_changelog set but %changelog is mi

Re: Strange RPM build warning

2023-02-28 Thread Steve Dickson
On 2/28/23 12:12 PM, Miro Hrončok wrote: On 28. 02. 23 17:43, Steve Dickson wrote: Hello, I'm getting this warning RPM build warnings: source_date_epoch_from_changelog set but %changelog is missing But the %changelog is not missing... Any ideas? Could you please share the spec

Strange RPM build warning

2023-02-28 Thread Steve Dickson
Hello, I'm getting this warning RPM build warnings: source_date_epoch_from_changelog set but %changelog is missing But the %changelog is not missing... Any ideas? tia, steved. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscri

Re: Test upgrades from F37 to F38 - it will take you just a minute

2023-02-22 Thread Steve Cossette
I just tried on a second PC, and I see this too on this one: Lmodx86_64 8.7.18-1.fc38 fedora258 k Seems Lmod is of a lower version on Fedora 38 as well, compared to Fedora 37. Le mer. 22 févr. 2023, à 04 h 30, Miroslav Suchý

Re: Test upgrades from F37 to F38 - it will take you just a minute

2023-02-22 Thread Steve Cossette
Same here, lower version numbers for the following packages: Downgrading: fwupd x86_64 1.8.10-1.fc38 fedora 1.8 M fwupd-plugin-flashrom x86_64 1.8.10-1.fc38 fedora 26 k fwupd-plugin-modem-manager x86_64 1.8.10-1.fc38

Re: Proposal: drop delta rpms (for real this time)

2023-02-22 Thread Steve Cossette
Yeah I'd say +1 from here too. Was just wondering about this yesterday. Le mer. 22 févr. 2023, 05 h 52, Kamil Paral a écrit : > On Tue, Feb 21, 2023 at 9:48 PM Matthew Miller > wrote: > >> But, I think it's time to move on. We have ostree and various >> container-delta approaches. We should foc

Re: Self Introduction: Neil Hanlon

2023-01-27 Thread Steve Cossette
Welcome! I'm a newer packager myself, it's a nice thing to know you are contributing to a project such as fedora! Enjoy! Le jeu. 26 janv. 2023, à 16 h 45, Michel Alexandre Salim < mic...@michel-slm.name> a écrit : > Hi Neil, > > On Thu, 2023-01-26 at 16:34 -0500, Neil Hanlon wrote: > > Hi folks!

Re: FESCo wants to know what you use i686 packages for

2023-01-17 Thread Steve Cossette
Same here. To be honest, most older games still use 32-bit binaries (even some more recent ones). That's one of the reasons why Windows will prolly never remove WoW64. Or at least for an extremely long time still. Le lun. 16 janv. 2023, 18 h 13, Arthur Bols a écrit : > On 17/03/2022 10:49, Matyá

Re: static USERMODEHELPER_PATH

2023-01-06 Thread Steve Grubb
Hello, On Friday, January 6, 2023 10:10:21 AM EST Steve Grubb wrote: > One approach to solving this is to use selinux policy. I was informed > overnight that policy 38.2-1 should now enforce kernel transitions to > specific helper applications. So, maybe this is solved well enough? I c

Re: static USERMODEHELPER_PATH

2023-01-06 Thread Steve Grubb
Hello, On Friday, January 6, 2023 9:33:12 AM EST Lennart Poettering wrote: > On Do, 05.01.23 20:17, Steve Grubb (sgr...@redhat.com) wrote: > > I work on RHEL security problems. I have been looking into a number of > > exploits and I think we have a problem that has an easy

Re: static USERMODEHELPER_PATH

2023-01-05 Thread Steve Grubb
Hello, I want to add some missing information... On Thursday, January 5, 2023 8:43:34 PM EST Ian Kent wrote: > On 6/1/23 09:17, Steve Grubb wrote: > > I work on RHEL security problems. I have been looking into a number of > > exploits and I think we have a problem that has an eas

static USERMODEHELPER_PATH

2023-01-05 Thread Steve Grubb
de change? Who could help make this happen if approved? Thanks, -Steve ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org

Re: F38 proposal: Shorter Shutdown Timer (System-Wide Change proposal)

2022-12-23 Thread Steve Grubb
On Friday, December 23, 2022 1:34:48 PM EST Alexander Ploumistos wrote: > On Fri, Dec 23, 2022 at 7:21 PM Steve Grubb wrote: > > This is nice, but all I ever seen is a black screen and a spinning > > circle. No text of any kind. If something were written to the console, > &

  1   2   3   4   5   6   7   >