Orphaning some packages

2011-01-05 Thread Pablo Martin-Gomez
Hi all, Because of my studies, I have no more time to devote to packaging, so I'm orphaning the followings: gconf-cleaner - Upstream dead long time ago, 1 bug gnome-specimen - Upstream dead too, no bug qemu-launcher - Another upstream dead, no bug gtkperf - No more upstream, no bug, but still work

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Lennart Poettering
On Tue, 04.01.11 21:31, Matt McCutchen (m...@mattmccutchen.net) wrote: > On Tue, 2011-01-04 at 14:11 +0100, Lennart Poettering wrote: > > Of these being used, dbus is correctly implemented, since it randomizes > > the socket name. Same for gdm. > > The relevant point is not randomness or unguessa

Re: Heads up: OCaml 3.12

2011-01-05 Thread Richard W.M. Jones
On Tue, Jan 04, 2011 at 11:11:40PM +, Richard W.M. Jones wrote: > > https://fedoraproject.org/wiki/Features/OCaml3.12 > > Hopefully most packages will just rebuild. I'd welcome any PPs > who want to help out. Just a note: ocaml < 3.12.0-3 built but had incomplete dependencies. You need to c

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 13:52 +0100, Lennart Poettering wrote: > On Tue, 04.01.11 21:31, Matt McCutchen (m...@mattmccutchen.net) wrote: > > > On Tue, 2011-01-04 at 14:11 +0100, Lennart Poettering wrote: > > > Of these being used, dbus is correctly implemented, since it randomizes > > > the socket na

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Lennart Poettering
On Wed, 05.01.11 09:39, Matt McCutchen (m...@mattmccutchen.net) wrote: > > That's precisely what I want to tell people: don't use the abstract > > socket namespace, unless you really know what you do. The only cases > > where it really makes sense to use it is if you have a privileged > > service

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 16:35 +0100, Lennart Poettering wrote: > On Wed, 05.01.11 09:39, Matt McCutchen (m...@mattmccutchen.net) wrote: > > > > That's precisely what I want to tell people: don't use the abstract > > > socket namespace, unless you really know what you do. The only cases > > > where i

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Adam Jackson
On Wed, 2011-01-05 at 13:52 +0100, Lennart Poettering wrote: > That's precisely what I want to tell people: don't use the abstract > socket namespace, unless you really know what you do. The only cases > where it really makes sense to use it is if you have a privileged > service that i sstarted be

Re: firewalld - A firewall daemon with D-BUS interface providing a dynamic firewall (test version)

2011-01-05 Thread Daniel P. Berrange
On Thu, Dec 23, 2010 at 05:03:56PM +0100, Thomas Woerner wrote: > Hello, > > as discussed some time ago, I worked on the proof of concept > implementation of firewalld. FirewallD is a service daemon with a D-BUS > interface that provides a dynamic managed firewall. > > For more information on f

Re: rawhide report: 20110105 changes

2011-01-05 Thread Richard W.M. Jones
Slowly working my way through these (thanks also Orion Poplawski for doing a couple of builds). Rich. -- Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones libguestfs lets you edit virtual machines. Supports shell scripting, bindings from many languages. http://et.r

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > The deeper problem is that clients authenticate themselves to the > server, but then simply trust that the server is the server they were > hoping for. If you don't have a process tree relationship (like the gdm > +displayfd case) then you h

vala 0.11 broke shotwell build in rawhide

2011-01-05 Thread Siddhesh Poyarekar
Hi, The upstream shotwell does not build with vala 0.11.* since there are a bunch of incompatible changes between vala-0.10.x and 0.11.x. Is there a plan to have a parallel installable vala-0.10.x in rawhide/f15? I can't see any other way to get shotwell built. I tried making changes to shotwell-

Local system security

2011-01-05 Thread Matt McCutchen
An aside: On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > (And of course what we're doing here is protecting against a malicious > attacker who already has enough privileges to run code on your system, > which means you're pretty far into having already lost. Meh.) I've seen this viewpo

Re: [HEADS-UP] MySQL 5.5 coming soon to rawhide

2011-01-05 Thread Jon Ciesla
Tom Lane wrote: > Jon Ciesla writes: > >> Tom Lane wrote: >> >>> I got tired of the amount of visible churn in exported-symbols-you're- >>> not-supposed-to-use. The new release will use a linker --version-script >>> to hide everything except the documented API functions. This might >>> b

Summary/Minutes for today's FESCo meeting (2011-01-05)

2011-01-05 Thread Kevin Fenzi
=== #fedora-meeting: FESCO (2011-01-05) === Meeting started by nirik at 17:30:01 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2011-01-05/fesco.2011-01-05-17.30.log.html Meeting summary -

Re: vala 0.11 broke shotwell build in rawhide

2011-01-05 Thread Peter Robinson
On Wed, Jan 5, 2011 at 6:51 PM, Siddhesh Poyarekar wrote: > Hi, > > The upstream shotwell does not build with vala 0.11.* since there are > a bunch of incompatible changes between vala-0.10.x and 0.11.x. Is > there a plan to have a parallel installable vala-0.10.x in > rawhide/f15? I was looking

Re: firewalld - A firewall daemon with D-BUS interface providing a dynamic firewall (test version)

2011-01-05 Thread Chuck Anderson
On Wed, Jan 05, 2011 at 01:29:51PM +, Daniel P. Berrange wrote: > -p 0x8035 -j I-vnet0-rarp Who still uses RARP? -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Adam Jackson
On Wed, 2011-01-05 at 13:38 -0500, Matt McCutchen wrote: > On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > > The deeper problem is that clients authenticate themselves to the > > server, but then simply trust that the server is the server they were > > hoping for. If you don't have a proc

Proposal to improve the Sponsorship process on Fedora

2011-01-05 Thread Jochen Schmitt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hallo, because I have read, that new contributors should not applies membership on the packagers group and the sponsor should invites them to this group, I have create the following proposal to improve the sponsorship process on Fedora: https://fedo

Re: Local system security

2011-01-05 Thread Adam Jackson
On Wed, 2011-01-05 at 14:10 -0500, Matt McCutchen wrote: > On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > > (And of course what we're doing here is protecting against a malicious > > attacker who already has enough privileges to run code on your system, > > which means you're pretty far i

[Bug 664360] Rebase on upstream version 4.0

2011-01-05 Thread bugzilla
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=664360 --- Comment #4 from Fedora Update System 2011-01-05 16:23:32 EST --- perl-XML-TreeBuilder-4.0-3.fc14 has been pushed to the Fed

[Bug 664360] Rebase on upstream version 4.0

2011-01-05 Thread bugzilla
Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=664360 Fedora Update System changed: What|Removed |Added --

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 15:25 -0500, Adam Jackson wrote: > On Wed, 2011-01-05 at 13:38 -0500, Matt McCutchen wrote: > > The > > more significant DoS condition is another user taking the name you want, > > which can happen in the abstract namespace but not in a directory only > > you can write. > > I

Re: Proposal to improve the Sponsorship process on Fedora

2011-01-05 Thread Jason L Tibbitts III
> "JS" == Jochen Schmitt writes: JS> because I have read, that new contributors should not applies JS> membership on the packagers group and the sponsor should invites JS> them to this group, Well, nobody can apply to the packager group; it is invite-only. There may be a few people in the s

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/05/2011 04:33 PM, Matt McCutchen wrote: > On Wed, 2011-01-05 at 15:25 -0500, Adam Jackson wrote: >> On Wed, 2011-01-05 at 13:38 -0500, Matt McCutchen wrote: >>> The >>> more significant DoS condition is another user taking the name you want, >>>

Re: Local system security

2011-01-05 Thread Gregory Maxwell
On Wed, Jan 5, 2011 at 4:13 PM, Adam Jackson wrote: > But prevention of DoS on the part of local actors is just not a game you > can win.  If nothing else, remember that the way Linux implements > malloc() assumes you have infinite memory, which means you overcommit > resources, which means failur

Re: Local system security

2011-01-05 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/05/2011 04:38 PM, Gregory Maxwell wrote: > On Wed, Jan 5, 2011 at 4:13 PM, Adam Jackson wrote: >> But prevention of DoS on the part of local actors is just not a game you >> can win. If nothing else, remember that the way Linux implements >> ma

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Adam Jackson
On Wed, 2011-01-05 at 16:33 -0500, Matt McCutchen wrote: > On Wed, 2011-01-05 at 15:25 -0500, Adam Jackson wrote: > > I don't have any of those. If the X server is running as root (like in > > the gdm case) then I can put the socket wherever I want. If it's Xvfb, > > then where do I put this dire

Re: Local system security

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 16:13 -0500, Adam Jackson wrote: > On Wed, 2011-01-05 at 14:10 -0500, Matt McCutchen wrote: > > On Wed, 2011-01-05 at 11:12 -0500, Adam Jackson wrote: > > > (And of course what we're doing here is protecting against a malicious > > > attacker who already has enough privileges

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Matt McCutchen
On Wed, 2011-01-05 at 16:37 -0500, Daniel J Walsh wrote: > [XDG_RUNTIME_DIR] does not exist until after the User has logged in. X > starts before > the user logs in. Also multiple users need to be able to talk to same > xserver. On Wed, 2011-01-05 at 16:47 -0500, Adam Jackson wrote: > atropine:

Support for MicroNext MN-WD550M Wireless USB 2.0 Adaptor

2011-01-05 Thread mike cloaked
I was recently testing an f14 install on an old laptop without wifi hardware - so I bought a small usb wifi adapter (MicroNext MN-WD550M Wireless USB 2.0 Adaptor) and this is recognised when plugged in: Bus 001 Device 002: ID 0bda:8171 Realtek Semiconductor Corp. RTL8188SU 802.11n WLAN Adapter How

Re: help with dist-git

2011-01-05 Thread Curtis Doty
Yesterday Roland McGrath said: >> But then that breaks simple things that (mostly) worked with the old >> cvs/Makefile system. >> >>fedpkg prep >>Traceback (most recent call last): >> ... >>git.errors.GitCommandError: 'git config --get branch.resurrect.merge' >> returned exit stat

Re: Support for MicroNext MN-WD550M Wireless USB 2.0 Adaptor

2011-01-05 Thread Richard
On Wed, Jan 05, 2011 at 10:29:44PM +, mike cloaked wrote: > I was recently testing an f14 install on an old laptop without wifi > hardware - so I bought a small usb wifi adapter (MicroNext MN-WD550M > Wireless USB 2.0 Adaptor) and this is recognised when plugged in: > Bus 001 Device 002: ID 0bd

Re: Support for MicroNext MN-WD550M Wireless USB 2.0 Adaptor

2011-01-05 Thread mike cloaked
On Wed, Jan 5, 2011 at 10:51 PM, Richard wrote: > On Wed, Jan 05, 2011 at 10:29:44PM +, mike cloaked wrote: >> I was recently testing an f14 install on an old laptop without wifi >> hardware - so I bought a small usb wifi adapter (MicroNext MN-WD550M >> Wireless USB 2.0 Adaptor) and this is re

Re: Security issues with abstract namespace sockets

2011-01-05 Thread Lennart Poettering
On Wed, 05.01.11 16:47, Adam Jackson (a...@redhat.com) wrote: > On Wed, 2011-01-05 at 16:33 -0500, Matt McCutchen wrote: > > On Wed, 2011-01-05 at 15:25 -0500, Adam Jackson wrote: > > > I don't have any of those. If the X server is running as root (like in > > > the gdm case) then I can put the s

Re: Local system security

2011-01-05 Thread Pete Zaitcev
On Wed, 05 Jan 2011 16:13:25 -0500 Adam Jackson wrote: > But prevention of DoS on the part of local actors is just not a game you > can win. If nothing else, remember that the way Linux implements > malloc() assumes you have infinite memory, which means you overcommit > resources, which means fa

Re: [HEADS-UP] MySQL 5.5 coming soon to rawhide

2011-01-05 Thread Tom Lane
Jon Ciesla writes: > So should simply patching to call mysql_thread_end instead should do the > trick? Right. regards, tom lane -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: vala 0.11 broke shotwell build in rawhide

2011-01-05 Thread Siddhesh Poyarekar
On Wed, Jan 05, 2011 at 07:31:13PM +, Peter Robinson wrote: > Well as vala generates C code the current version should continue to > function until shotwell 0.9.x comes out and adds support for the newer > vala and it can be compiled or a patch appears in head that we can > apply to 0.8.x > >

Re: vala 0.11 broke shotwell build in rawhide

2011-01-05 Thread Siddhesh Poyarekar
On Thu, Jan 06, 2011 at 08:03:20AM +0530, Siddhesh Poyarekar wrote: > On Wed, Jan 05, 2011 at 07:31:13PM +, Peter Robinson wrote: > > Well as vala generates C code the current version should continue to > > function until shotwell 0.9.x comes out and adds support for the newer > > vala and it c