Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Andreas Schwab
Jesse Keating writes: > However, if a user had a local > branch of f14 or f14/master they will be left with mismatched > .git/config entries. In this case it's easiest to delete the local > branch (git branch -d f14) and check it out again. Or git branch --set-upstream. Andreas. -- Andreas S

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Hans de Goede
Hi, On 12/06/2010 06:34 AM, Michał Piotrowski wrote: > Hi, > > W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski > napisał: > [..] >> What services are installed by default when installong form Live >> GNOME/KDE/etc and DVD? > > Ok, let's ask the question differently - what services shoul

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
W dniu 6 grudnia 2010 10:43 użytkownik Hans de Goede napisał: > Hi, > > On 12/06/2010 06:34 AM, Michał Piotrowski wrote: >> Hi, >> >> W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski >>  napisał: >> [..] >>> What services are installed by default when installong form Live >>> GNOME/KDE/et

rawhide report: 20101206 changes

2010-12-06 Thread Rawhide Report
Compose started at Mon Dec 6 08:15:05 UTC 2010 Broken deps for x86_64 -- balsa-2.4.9-1.fc15.x86_64 requires libesmtp.so.5()(64bit) beagle-0.3.9-19.fc14.x86_64 requires libmono.so.0()(64bit) beagle-0.3.9-19.fc14.x86_64

Re: Testing Xfce 4.8 pre 2 packages available

2010-12-06 Thread Gilboa Davara
On Mon, 2010-12-06 at 00:01 +0100, Christoph Wickert wrote: > Hi there, > > I have packaged Xfce 4-8 pre 2 for Fedora 14 and Rawhide. You can find > the packages at > > http://repos.fedorapeople.org/repos/cwickert/xfce-4.8/ > > The repo is far from complete. ATM it is still rsyncing and Fedora

[perl-Params-Util/f14/master] - Upstream update.

2010-12-06 Thread corsepiu
commit 64bcb782e5e54d2b5c482321c4066d6e6da07393 Author: Ralf Corsépius Date: Mon Dec 6 13:47:35 2010 +0100 - Upstream update. .gitignore|1 + perl-Params-Util.spec | 11 +++ sources |2 +- 3 files changed, 9 insertions(+), 5 deletions(-) --- dif

[perl-Params-Util/f13/master] - Upstream update.

2010-12-06 Thread corsepiu
commit 05e95199f66309e5115af2f2b55e2ea267b9a06a Author: Ralf Corsépius Date: Mon Dec 6 13:47:47 2010 +0100 - Upstream update. .gitignore|1 + perl-Params-Util.spec | 13 ++--- sources |2 +- 3 files changed, 12 insertions(+), 4 deletions(-) ---

move to libreoffice?

2010-12-06 Thread Neal Becker
Since the fork, I wonder if fedora is going to follow libreoffice? -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: move to libreoffice?

2010-12-06 Thread drago01
On Mon, Dec 6, 2010 at 2:50 PM, Neal Becker wrote: > Since the fork, I wonder if fedora is going to follow libreoffice? No it is not "going to", it already did (in rawhide). -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Fedora rawhide FTBFS status 2010-12-01 x86_64

2010-12-06 Thread Matt Domsch
Fedora Fails To Build From Source Results for x86_64 using rawhide from 2010-12-01 This is a full rebuild of all >10k packages. Due to the RemoveSUID feature in Fedora 15, mock can no longer use tmpfs buildroots, meaning this run takes 4 days instead of <1. Progress? Full logs at http://linux.d

Fedora rawhide FTBFS status 2010-12-01 i386

2010-12-06 Thread Matt Domsch
Fedora Fails To Build From Source Results for i386 using rawhide from 2010-12-01 This is a full rebuild of all >10k packages. Due to the RemoveSUID feature in Fedora 15, mock can no longer use tmpfs buildroots, meaning this run takes 4 days instead of <1. Progress? Full logs at http://linux.del

Firewall

2010-12-06 Thread Matt McCutchen
On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: > On most desktop systems firewall is not needed. Many users do not even > know how to configure it. In fact I disable it in most of my systems, > because there is no real use for it. So I asked a simple question > whether there is a need

Re: old_testing_critpath notifications

2010-12-06 Thread Adam Williamson
On Sun, 2010-12-05 at 09:41 -0600, Bruno Wolff III wrote: > On Thu, Dec 02, 2010 at 11:48:13 -0800, > Adam Williamson wrote: > > > > I think it'd probably fit better in the preamble before step 1. Perhaps > > after the paragraph 'As a Contributor, you should...' we add a paragraph > > explainin

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Kevin Fenzi
On Mon, 6 Dec 2010 06:34:45 +0100 Michał Piotrowski wrote: > Hi, > > W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski > napisał: > [..] > > What services are installed by default when installong form Live > > GNOME/KDE/etc and DVD? > > Ok, let's ask the question differently - what serv

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Bill Nottingham
Kevin Fenzi (ke...@scrye.com) said: > > IMO ssh can be off by default and should be started only if user tries > > to connect over port 22. > > If systemd will allow us to do that, sure. What's the point here? For example, this doesn't cut down on the number of listening ports, obviously, nor o

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi napisał: > On Mon, 6 Dec 2010 06:34:45 +0100 > Michał Piotrowski wrote: > >> Hi, >> >> W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski >> napisał: >> [..] >> > What services are installed by default when installong form Live >> > GNOME/

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/6 Bill Nottingham : > Kevin Fenzi (ke...@scrye.com) said: >> > IMO ssh can be off by default and should be started only if user tries >> > to connect over port 22. >> >> If systemd will allow us to do that, sure. > > What's the point here? For example, this doesn't cut down on the number >

[perl-Class-InsideOut] - Remove BR: perl. - Add BR: perl(Class::ISA) (Fix FTBS).

2010-12-06 Thread corsepiu
commit 6baa11d39bd5bd51d72c783464bd64df0fe8ae2d Author: Ralf Corsépius Date: Mon Dec 6 18:24:04 2010 +0100 - Remove BR: perl. - Add BR: perl(Class::ISA) (Fix FTBS). perl-Class-InsideOut.spec |9 +++-- 1 files changed, 7 insertions(+), 2 deletions(-) --- diff --git a/perl-Class

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Kevin Fenzi
On Mon, 6 Dec 2010 18:17:51 +0100 Michał Piotrowski wrote: > W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi > napisał: ...snip... > > What are you trying to do? > > I'm trying to convert sysvinit scripts to systemd services (as many > as possible) If you're trying to determine what units

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
W dniu 6 grudnia 2010 18:43 użytkownik Kevin Fenzi napisał: > On Mon, 6 Dec 2010 18:17:51 +0100 > Michał Piotrowski wrote: > >> W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi >> napisał: > > ...snip... > >> > What are you trying to do? >> >> I'm trying to convert sysvinit scripts to systemd

Re: old_testing_critpath notifications

2010-12-06 Thread Bruno Wolff III
On Mon, Dec 06, 2010 at 08:57:42 -0800, Adam Williamson wrote: > > practically speaking that would change very little, because we're not > blocked on getting moderator approval at present. Thankfully a lot of > people are taking up the moderator duties, so anyone who actually > applies to be a

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: > On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: > > On most desktop systems firewall is not needed. Many users do not even > > know how to configure it. In fact I disable it in most of my systems, > > because there is no

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Richard W.M. Jones píše v Po 06. 12. 2010 v 18:04 +: > On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: > > On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: > > > On most desktop systems firewall is not needed. Many users do not even > > > know how to configure it. In

[perl-Package-Stash-XS] Created tag perl-Package-Stash-XS-0.17-2.fc14

2010-12-06 Thread Paul Howarth
The lightweight tag 'perl-Package-Stash-XS-0.17-2.fc14' was created pointing to: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedorapr

[perl-Package-Stash-XS/f13/master] Initial import of perl-Package-Stash-XS-0.17-2

2010-12-06 Thread Paul Howarth
Summary of changes: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org http

[perl-Package-Stash-XS] Created tag perl-Package-Stash-XS-0.17-2.fc13

2010-12-06 Thread Paul Howarth
The lightweight tag 'perl-Package-Stash-XS-0.17-2.fc13' was created pointing to: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedorapr

[perl-Package-Stash-XS/el5/master] Initial import of perl-Package-Stash-XS-0.17-2

2010-12-06 Thread Paul Howarth
Summary of changes: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org http

[perl-Package-Stash-XS/el4/master] Initial import of perl-Package-Stash-XS-0.17-2

2010-12-06 Thread Paul Howarth
Summary of changes: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org http

[perl-Package-Stash-XS] Created tag perl-Package-Stash-XS-0.17-2.el4

2010-12-06 Thread Paul Howarth
The lightweight tag 'perl-Package-Stash-XS-0.17-2.el4' was created pointing to: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedorapro

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Bill Nottingham
Michał Piotrowski (mkkp...@gmail.com) said: > >> If systemd will allow us to do that, sure. > > > > What's the point here? For example, this doesn't cut down on the number > > of listening ports, obviously, nor on the requirements for root passwords > > and potential root login. And if it's starte

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 10:07 AM, Miloslav Trmač wrote: > Richard W.M. Jones píše v Po 06. 12. 2010 v 18:04 +: >> On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: >>> On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: On most desktop systems firewall is not needed. Many user

Re: Firewall

2010-12-06 Thread Daniel P. Berrange
On Mon, Dec 06, 2010 at 11:00:53AM -0800, Jesse Keating wrote: > On 12/06/2010 10:07 AM, Miloslav Trmač wrote: > > Richard W.M. Jones píše v Po 06. 12. 2010 v 18:04 +: > >> On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: > >>> On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: > Right, I always struggle with this. If you allow services that bind to > a port once enabled to have the port open, then what good does it do to > have the port closed? > > I really wonder what real purpose a firewall serves on these machines.

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:09 AM, Miloslav Trmač wrote: > Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: >> Right, I always struggle with this. If you allow services that bind to >> a port once enabled to have the port open, then what good does it do to >> have the port closed? >> >> I really wonder wh

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: > The other benefit would be if the user only intended the > service to be accessible to localhost, or a UNIX domain > socket but for some reason screwed up their service's > config & opened it to the world. > I could buy this if we actually alert

Re: Firewall

2010-12-06 Thread Matthew Miller
On Mon, Dec 06, 2010 at 08:09:29PM +0100, Miloslav Trmač wrote: > I can see the following primary reasons to have a firewall: > * Enforcing a sysadmin-set (system-wide or site-wide) policy. > "No, you will not run any bittorrent client on the company's > computer". >

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/6 Bill Nottingham : > Michał Piotrowski (mkkp...@gmail.com) said: >> >> If systemd will allow us to do that, sure. >> > >> > What's the point here? For example, this doesn't cut down on the number >> > of listening ports, obviously, nor on the requirements for root passwords >> > and potent

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:20 AM, Matthew Miller wrote: > Installing a firewall by default contributes to defense in depth > at relatively little cost. > I think that's discounting the user cost, of having something actively getting in your way of accomplishing tasks, and we have no real good way of helpin

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:15 PM, Jesse Keating wrote: > On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: >> The other benefit would be if the user only intended the >> service to be accessible to localhost, or a UNIX domain >> socket but for some reason screwed up their service's >> config& opened it to t

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:27 AM, Phil Knirsch wrote: > On 12/06/2010 08:15 PM, Jesse Keating wrote: >> On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: >>> The other benefit would be if the user only intended the >>> service to be accessible to localhost, or a UNIX domain >>> socket but for some reason scr

Re: Firewall

2010-12-06 Thread Michał Piotrowski
2010/12/6 Jesse Keating : > On 12/06/2010 11:20 AM, Matthew Miller wrote: >> Installing a firewall by default contributes to defense in depth >> at relatively little cost. >> > > I think that's discounting the user cost, of having something actively > getting in your way of accomplishing tasks, and

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Miloslav Trmač
Michał Piotrowski píše v Po 06. 12. 2010 v 20:22 +0100: > 2010/12/6 Bill Nottingham : > Does openssh stands out something special between other demons? Actually, it does - for remote installations (sometimes the only option) ssh needs to be running after installation so that the system administrato

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Jesse Keating píše v Po 06. 12. 2010 v 11:14 -0800: > On 12/06/2010 11:09 AM, Miloslav Trmač wrote: > > Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: > >> Right, I always struggle with this. If you allow services that bind to > >> a port once enabled to have the port open, then what good doe

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 20:34 +0100, Miloslav Trmač wrote: > It's not, but we don't really have "personal installs"; any system can > be a desktop, a server, or both at the same time. Agreed - I think the case being described by Jesse, though, is the livecd case. That's what the 'personal install'

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/03/2010 09:33 PM, Garrett Holmstrom wrote: > On 12/3/2010 18:34, Jesse Keating wrote: >> The original thought was to have top level branches that are named after >> distribution releases, eg "f14", "f15", "el5". Then we would force >> branches of those branches use a naming structure of "f14

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 11:15:37AM -0800, Jesse Keating wrote: > On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: > > The other benefit would be if the user only intended the > > service to be accessible to localhost, or a UNIX domain > > socket but for some reason screwed up their service's > > c

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:40 PM, Richard W.M. Jones wrote: > On Mon, Dec 06, 2010 at 11:15:37AM -0800, Jesse Keating wrote: >> On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: >>> The other benefit would be if the user only intended the >>> service to be accessible to localhost, or a UNIX domain >>> socket

Re: Firewall

2010-12-06 Thread Michael Cronenworth
Richard W.M. Jones wrote: > What we really lack is good visibility for n00bs. Sure you can do > 'netstat -anp' to show open ports and (if you're more of an expert > than me) look at iptables to see what's wrong, but having nice GUI > tools to display this information would be better. Like... ipts

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:34 AM, Miloslav Trmač wrote: > Jesse Keating píše v Po 06. 12. 2010 v 11:14 -0800: >> On 12/06/2010 11:09 AM, Miloslav Trmač wrote: >>> Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: Right, I always struggle with this. If you allow services that bind to a port once

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 02:19 AM, Matej Cepl wrote: > Dne 4.12.2010 06:33, Garrett Holmstrom napsal(a): >> Why tie branch names down to specific releases? While that scheme makes >> it easy for fedpkg to guess what release to attempt to build against >> when one only cares about one release, it makes litt

Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
I wonder why my server rejected my previous email? -- Wiadomość przekazana dalej -- Od: Michał Piotrowski Data: 6 grudnia 2010 20:46 Temat: Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services) Do: Devel

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 11:48 -0800, Jesse Keating wrote: > Bittorrent, network games, zero conf come to mind. > Bittorrent won't work through many/most wireless routers unless they are not natted and/or not explicitly configured. what network games? Heck, what network games do we HAVE? what are

Re: Firewall

2010-12-06 Thread Bill Nottingham
Phil Knirsch (pknir...@redhat.com) said: > Basically it's a statefull firewall daemon now that allows us to support > and implement a lot of those features which have been so critically > missing in our old way of doing firewalls (aka static crap) and > basically impossible to do there. One exa

Re: Firewall

2010-12-06 Thread Bill Nottingham
seth vidal (skvi...@fedoraproject.org) said: > Bittorrent won't work through many/most wireless routers unless they are > not natted and/or not explicitly configured. > > what network games? > Heck, what network games do we HAVE? > > what are the use cases of zeroconf-enabled apps that we're tar

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: > seth vidal (skvi...@fedoraproject.org) said: > > Bittorrent won't work through many/most wireless routers unless they are > > not natted and/or not explicitly configured. > > > > what network games? > > Heck, what network games do we HAV

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Bill Nottingham
Michał Piotrowski (mkkp...@gmail.com) said: > We are talking here about the case when ssh server is started when > user connect to 22 port (or other configured). From my POV everything > should work as expected. Right. To do this in systemd implies that you're patching openssh to do socket-based

Re: Firewall

2010-12-06 Thread Dennis Jacobfeuerborn
On 12/06/2010 08:53 PM, Bill Nottingham wrote: > Phil Knirsch (pknir...@redhat.com) said: >> Basically it's a statefull firewall daemon now that allows us to support >> and implement a lot of those features which have been so critically >> missing in our old way of doing firewalls (aka static crap)

Re: Firewall

2010-12-06 Thread Dennis Jacobfeuerborn
On 12/06/2010 08:43 PM, Phil Knirsch wrote: > On 12/06/2010 08:40 PM, Richard W.M. Jones wrote: >> On Mon, Dec 06, 2010 at 11:15:37AM -0800, Jesse Keating wrote: >>> On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be ac

Re: Firewall

2010-12-06 Thread Tomasz Torcz
On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: > On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: > > seth vidal (skvi...@fedoraproject.org) said: > > > Bittorrent won't work through many/most wireless routers unless they are > > > not natted and/or not explicitly configured.

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:53 PM, Bill Nottingham wrote: > Phil Knirsch (pknir...@redhat.com) said: >> Basically it's a statefull firewall daemon now that allows us to support >> and implement a lot of those features which have been so critically >> missing in our old way of doing firewalls (aka static crap)

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:59 PM, Dennis Jacobfeuerborn wrote: > On 12/06/2010 08:53 PM, Bill Nottingham wrote: >> Phil Knirsch (pknir...@redhat.com) said: >>> Basically it's a statefull firewall daemon now that allows us to support >>> and implement a lot of those features which have been so critically >>>

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/6 Bill Nottingham : > Michał Piotrowski (mkkp...@gmail.com) said: >> We are talking here about the case when ssh server is started when >> user connect to 22 port (or other configured). From my POV everything >> should work as expected. > > Right. To do this in systemd implies that you're p

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: > On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: > > On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: > > > seth vidal (skvi...@fedoraproject.org) said: > > > > Bittorrent won't work through many/most wireless routers unl

Re: Firewall

2010-12-06 Thread Matthew Miller
On Mon, Dec 06, 2010 at 08:27:00PM +0100, Phil Knirsch wrote: > Basically it's a statefull firewall daemon now that allows us to support > and implement a lot of those features which have been so critically Does this *really* need to be implemented as yet another constantly-running daemon? Becau

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 02:31 AM, Kalev Lember wrote: > On 12/04/2010 12:19 PM, Matej Cepl wrote: >> Related issue I have with the Fedora git repositories is that one cannot >> remove any branch once it is created. After I have created in bitlbee >> repo two topic branches, only to find out that I cannot rem

Re: Firewall

2010-12-06 Thread Tom Lane
Jesse Keating writes: > The argument of default firewall or not would probably quiet down quite > a bit if we had any sort of decent UI to help users get the firewall out > of their way when they're really trying to do something. +1. In today's environment, not having a firewall by default is an

Re: Firewall

2010-12-06 Thread nodata
On 06/12/10 21:06, seth vidal wrote: > On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: >> On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: >>> On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: seth vidal (skvi...@fedoraproject.org) said: > Bittorrent won't work th

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 07:24 AM, Severin Gehwolf wrote: >> Also we would need to get a new fedpkg into the hands of all the >> > developers that handles the new branchnames. We could do a build >> > that >> > handles both the oldnames and the new and have it out and available >> > for >> > a reasonable per

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Tomasz Torcz píše v Po 06. 12. 2010 v 21:01 +0100: > Yeah, general discovery. From the top of my head: > - Pulseaudio sinks and sources > - libvirt instances for virt-manager > - VNC desktops for Vinagre > - local web pages (think SOHO router config page) for zeroconf > enabled Webbrowsers lik

q

2010-12-06 Thread Nicolas Mailhot
Le lundi 06 décembre 2010 à 20:09 +0100, Miloslav Trmač a écrit : > Are there other reasons? App writers are busy reinventing the wheel, changing the configuration files syntax, and believing they can't do wrong; make sure their mess is blocked at the outbound port before we get rooted. -- Nico

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 09:52 AM, Bruno Wolff III wrote: > On Fri, Dec 03, 2010 at 16:34:05 -0800, > Jesse Keating wrote: >> "f14/user/fred/topic/mybranch" or other such craziness. When I went to >> test this, I realized that git won't allow you to have both "f14" and >> "f14/topic" as branches, because

[perl-Finance-Quote] fix rawhide build.

2010-12-06 Thread Bill Nottingham
commit 34e0fd76674a96d37e4fc0ea14ee994806cdb53b Author: Bill Nottingham Date: Mon Dec 6 15:41:13 2010 -0500 fix rawhide build. perl-Finance-Quote.spec |6 +- 1 files changed, 5 insertions(+), 1 deletions(-) --- diff --git a/perl-Finance-Quote.spec b/perl-Finance-Quote.spec index 8

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Bruno Wolff III
On Mon, Dec 06, 2010 at 12:33:40 -0800, Jesse Keating wrote: > On 12/04/2010 09:52 AM, Bruno Wolff III wrote: > > > > Is this going to break things for people that having set up origin tracking > > for multiple releases in the same repo? > > Can you explain this a bit more please? I currently

Unretired package "impressive" blocked in buildsys

2010-12-06 Thread Michael J Gruber
Hi there, I took over a retired package (rereview APPROVED, took over package, reassigned bugs, SCM update request processed) but can't seem to "fedpkg build" it: I get "package impressive is blocked for tag dist-f15" (see below). Everything in pkgdb looks OK: https://admin.fedoraproject.org/pkg

[Test-Announce] Please Help Test 389 Directory Server 1.2.7.2

2010-12-06 Thread Rich Megginson
389-ds-base-1.2.7.2 is now in Testing. This release has some key fixes for bugs in 1.2.7 and 1.2.7.1. Please help us test. The sooner we can get this release tested, the sooner we can push it to Stable and make it generally available. There is also a new 389-admin-1.1.13 package. Installatio

Re: Firewall

2010-12-06 Thread Rodd Clarkson
On Tue, Dec 7, 2010 at 5:04 AM, Richard W.M. Jones wrote: > On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: > > On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: > > > On most desktop systems firewall is not needed. Many users do not even > > > know how to configure it. I

Re: Unretired package "impressive" blocked in buildsys

2010-12-06 Thread Kevin Fenzi
On Mon, 06 Dec 2010 22:04:27 +0100 Michael J Gruber wrote: > Hi there, > > I took over a retired package (rereview APPROVED, took over package, > reassigned bugs, SCM update request processed) but can't seem to > "fedpkg build" it: I get "package impressive is blocked for tag > dist-f15" (see be

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 03:08:46PM -0500, Matthew Miller wrote: > On Mon, Dec 06, 2010 at 08:27:00PM +0100, Phil Knirsch wrote: > > Basically it's a statefull firewall daemon now that allows us to support > > and implement a lot of those features which have been so critically > > Does this *real

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 03:06:24PM -0500, seth vidal wrote: > On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: > > On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: > > > On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: > > > > seth vidal (skvi...@fedoraproject.org) said:

Re: Firewall

2010-12-06 Thread Matej Cepl
Dne 6.12.2010 20:53, seth vidal napsal(a): > what are the use cases of zeroconf-enabled apps that we're targetting? * XMPP-over-Zeroconf (Bonjour) * gtkvnc searches for VNC servers * ekiga looks for other clients on LAN * you can go to local ssh servers in .local domain * etc. etc. ... partia

Re: Firewall

2010-12-06 Thread Matej Cepl
Dne 6.12.2010 21:06, seth vidal napsal(a): > I'm confused - are any of the above intended to be used/available by > anyone who is NOT experienced enough to know what iptables are and how > to manage them? B/c I think it's a bit unlikely. OK, so let's add (just what gets packaged in Fedora): * Em

Re: Firewall

2010-12-06 Thread Michał Piotrowski
2010/12/6 Matej Cepl : > Dne 6.12.2010 21:06, seth vidal napsal(a): [..] > I have to admit, I am not completely happy with having no firewall per > default, It looks like you do not have to worry about removing iptables from @core :) I think that further discussion on removal it from core is poin

Re: Firewall

2010-12-06 Thread Adam Jackson
On Mon, 2010-12-06 at 15:06 -0500, seth vidal wrote: > On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: > > Yeah, general discovery. From the top of my head: > > - Pulseaudio sinks and sources > > - libvirt instances for virt-manager > > - VNC desktops for Vinagre > > - local web pages (t

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 17:54 -0500, Adam Jackson wrote: > And every time I do, I think "there's no reason it needs to be this > hard". All I want to do is make movies on my hard drive visible to my > PS3. Why is this harder than clicking "share"? All I want to do is > plug the NAS drive I just b

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/06/2010 01:10 AM, Andreas Schwab wrote: > Jesse Keating writes: > >> However, if a user had a local >> branch of f14 or f14/master they will be left with mismatched >> .git/config entries. In this case it's easiest to delete the local >> branch (git branch -d f14) and check it out again. >

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Toshio Kuratomi
On Mon, Dec 06, 2010 at 06:55:20PM +0100, Michał Piotrowski wrote: > W dniu 6 grudnia 2010 18:43 użytkownik Kevin Fenzi napisał: > > On Mon, 6 Dec 2010 18:17:51 +0100 > > Michał Piotrowski wrote: > > > >> W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi > >> napisał: > > > > ...snip... > > > >

Re: Firewall

2010-12-06 Thread Orion Poplawski
On 12/06/2010 04:04 PM, seth vidal wrote: > On Mon, 2010-12-06 at 17:54 -0500, Adam Jackson wrote: > >> And every time I do, I think "there's no reason it needs to be this >> hard". All I want to do is make movies on my hard drive visible to my >> PS3. Why is this harder than clicking "share"? A

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/06/2010 12:44 PM, Bruno Wolff III wrote: > On Mon, Dec 06, 2010 at 12:33:40 -0800, > Jesse Keating wrote: >> On 12/04/2010 09:52 AM, Bruno Wolff III wrote: >>> >>> Is this going to break things for people that having set up origin tracking >>> for multiple releases in the same repo? >> >>

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:53 AM, seth vidal wrote: > On Mon, 2010-12-06 at 11:48 -0800, Jesse Keating wrote: >> Bittorrent, network games, zero conf come to mind. >> > > Bittorrent won't work through many/most wireless routers unless they are > not natted and/or not explicitly configured. Actually bittorr

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 12:18 PM, Tom Lane wrote: > Jesse Keating writes: >> The argument of default firewall or not would probably quiet down quite >> a bit if we had any sort of decent UI to help users get the firewall out >> of their way when they're really trying to do something. > > +1. In today's en

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/7 Toshio Kuratomi : > On Mon, Dec 06, 2010 at 06:55:20PM +0100, Michał Piotrowski wrote: >> W dniu 6 grudnia 2010 18:43 użytkownik Kevin Fenzi napisał: >> > On Mon, 6 Dec 2010 18:17:51 +0100 >> > Michał Piotrowski wrote: >> > >> >> W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi >> >>

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 16:10 -0700, Orion Poplawski wrote: > But once we're talking about OVERWHELMINGLY LARGE NUMBER OF SERVER INSTALLS, > aren't we also talking about kickstart and other automated management tools > with which configuring things away from their default values is a standard > a

Re: Firewall

2010-12-06 Thread Stephen John Smoogen
On Mon, Dec 6, 2010 at 16:25, Jesse Keating wrote: > On 12/06/2010 12:18 PM, Tom Lane wrote: >> Jesse Keating writes: >>> The argument of default firewall or not would probably quiet down quite >>> a bit if we had any sort of decent UI to help users get the firewall out >>> of their way when they

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 03:42 PM, Stephen John Smoogen wrote: > Ports that you don't know are open to the network but are somehow available. > > Let us put this conversation slightly different... how many of us > remember password-less package install? It all sounded like a good > idea with people who are g

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Matt McCutchen
On Tue, 2010-12-07 at 00:38 +0100, Michał Piotrowski wrote: > Cron - but should be activated only when cron files exist > > It seems to me that the list: > - ssh > - Dbus > - syslog > - iptables > - ip6tables > - auditd > - restorecond > is an absolute minimum to get "working system". I don't agr

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/7 Matt McCutchen : > On Tue, 2010-12-07 at 00:38 +0100, Michał Piotrowski wrote: >> Cron - but should be activated only when cron files exist >> >> It seems to me that the list: >> - ssh >> - Dbus >> - syslog >> - iptables >> - ip6tables >> - auditd >> - restorecond >> is an absolute minimu

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Toshio Kuratomi
On Tue, Dec 07, 2010 at 12:38:07AM +0100, Michał Piotrowski wrote: > 2010/12/7 Toshio Kuratomi : > >  Those might be > > able to start defining a category of "things needed to run a desktop > > session" or something. > > > > iptables, > > no chance to disable this > I'd be more inclined to ask wh

Re: Fedora default services

2010-12-06 Thread Jason L Tibbitts III
> "MP" == Michał Piotrowski writes: MP> Dear FPC people, could you provide this list in the near future? We haven't even met since it was decided that we were to do this. I imagine it would take a couple of meetings to bang out a list. - J< -- devel mailing list devel@lists.fedoraproject

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Matt McCutchen
On Tue, 2010-12-07 at 01:07 +0100, Michał Piotrowski wrote: > 2010/12/7 Matt McCutchen : > > On Tue, 2010-12-07 at 00:38 +0100, Michał Piotrowski wrote: > >> Cron - but should be activated only when cron files exist > >> > >> It seems to me that the list: > >> - ssh > >> - Dbus > >> - syslog > >> -

Re: Fedora as semantic desktop (nautilus and tracker integration) ?

2010-12-06 Thread Adam Williamson
On Sun, 2010-12-05 at 17:04 +0100, valent.turko...@gmail.com wrote: > On Sat, Dec 4, 2010 at 11:44 PM, valent.turko...@gmail.com > wrote: > > https://bugzilla.redhat.com/show_bug.cgi?id=501227 > > > > I'm writing to devel list just if anybody can say will there be any > > chance to get nautilus an

  1   2   >