Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Igor Gnatenko
On Mon, Dec 8, 2014 at 10:58 AM, Andre Robatino wrote: > > Kevin Kofler chello.at> writes: > > > I just happened to look at the firewalld default settings, and I was not > > amused when I noticed this: > > http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml > > > > > >

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Andre Robatino
Igor Gnatenko gmail.com> writes: > you forget about DLNA sharing, and some more GNOME services. I googled for "DLNA sharing" to find out which ports it uses, and it seems that all of those ports are closed. Are there any specific ports you would expect to be open? BTW, I just realized that my r

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Paul Howarth
On Mon, 08 Dec 2014 07:41:52 +0100 Kevin Kofler wrote: > Hi, > > I just happened to look at the firewalld default settings, and I was > not amused when I noticed this: > http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml > > > > > This "firewall" is a joke! ALL highe

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Andre Robatino
Andre Robatino fedoraproject.org> writes: > using. (BTW, Transmission now seems to automatically open an incoming port - > in F20 and below I had to tell Transmission to use a fixed port instead of a > random one, and manually open that port in the firewall.) Forgot to mention that before, I als

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Igor Gnatenko
tcp0 0 127.0.0.1:47147 0.0.0.0:* LISTEN 15610/rygel tcp0 0 192.168.122.1:59505 0.0.0.0:* LISTEN 15610/rygel tcp0 0 0.0.0.0:51413 0.0.0.0:* LISTEN 13331/transmission- tcp0 0 192.168.122.1:530.0.0.0:* LIS

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Ian Malone
On 8 December 2014 at 08:38, Paul Howarth wrote: > On Mon, 08 Dec 2014 07:41:52 +0100 > Kevin Kofler wrote: > >> Hi, >> >> I just happened to look at the firewalld default settings, and I was >> not amused when I noticed this: >> http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorksta

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 07:41 schrieb Kevin Kofler: I just happened to look at the firewalld default settings, and I was not amused when I noticed this: http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml This "firewall" is a joke! ALL higher ports are wide open! serio

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 09:38 schrieb Paul Howarth: FWIW, this is mentioned in the release notes: http://docs.fedoraproject.org/en-US/Fedora/21/html/Release_Notes/sect-Products.html#Products-Workstation 2.3.3. Developer oriented firewall Developers often run test servers that run on high numbered po

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Michael Spahn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We don't need open or preconfigured high ports. What we really need is a user notification with options to allow or deny like we do with SELinux. That would be a appropriate solution for a workstation. On 08.12.2014 10:29, Reindl Harald wrote: >

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > Hi, > > I just happened to look at the firewalld default settings, and I was not > amused when I noticed this: > http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml > > > > > This "firewall" is a joke! ALL higher ports are wide open! >

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > We don't need open or preconfigured high ports. > > What we really need is a user notification with options to allow or > deny like we do with SELinux. > > That would be a appropriate solution for a workstation.

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 10:34 schrieb Michael Spahn: We don't need open or preconfigured high ports. What we really need is a user notification with options to allow or deny like we do with SELinux. That would be a appropriate solution for a workstation. * you know that * i know that * the same app

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 09:38 schrieb Paul Howarth: > > FWIW, this is mentioned in the release notes: > > > > http://docs.fedoraproject.org/en-US/Fedora/21/html/Release_Notes/sect-Products.html#Products-Workstation > > > > 2.3.3. Developer oriented firewall > > > > Deve

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 10:48 schrieb Bastien Nocera: I just happened to look at the firewalld default settings, and I was not amused when I noticed this: http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml This "firewall" is a joke! ALL higher ports are wide open! Ther

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 10:50 schrieb Bastien Nocera: We don't need open or preconfigured high ports. What we really need is a user notification with options to allow or deny like we do with SELinux. That would be a appropriate solution for a workstation. No it wouldn't be, because users don't like

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 10:51 schrieb Bastien Nocera: WTF - "developer oriented firewall" on workstation? i doubt it is smart that by default my running Eclipse accepts incoming connections from the WAN (that i am paied for IT security prevents that but only here) tcp0 0 0.0.0.0:20080

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 10:51 schrieb Bastien Nocera: > >> WTF - "developer oriented firewall" on workstation? > >> > >> i doubt it is smart that by default my running Eclipse > >> accepts incoming connections from the WAN (that i am > >> paied for IT security prevents

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 10:50 schrieb Bastien Nocera: > >> We don't need open or preconfigured high ports. > >> > >> What we really need is a user notification with options to allow or > >> deny like we do with SELinux. > >> > >> That would be a appropriate solution for

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 11:26 schrieb Bastien Nocera: Am 08.12.2014 um 10:51 schrieb Bastien Nocera: WTF - "developer oriented firewall" on workstation? i doubt it is smart that by default my running Eclipse accepts incoming connections from the WAN (that i am paied for IT security prevents that but

Re: Best way to use zram in Fedora 21?

2014-12-08 Thread Karel Zak
On Tue, Nov 25, 2014 at 09:03:20PM +0100, Juan Orti wrote: > Hi, I know how to manually configure the zram, but what's the best way > to do it? > > I've seen the unit zram.service of anaconda-core, and it gets activated > when booting with inst.zram=on, but it looks like very anaconda-centric. >

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Michael Spahn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, I'll understand these aspects. But when I think about Linux, especially about Fedora, I'm thinking about the freedom to make decisions. This means to me, to customize and take advantage of my computer and in this case my operating system. It's

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 11:32 schrieb Bastien Nocera: Am 08.12.2014 um 10:50 schrieb Bastien Nocera: We don't need open or preconfigured high ports. What we really need is a user notification with options to allow or deny like we do with SELinux. That would be a appropriate solution for a workstati

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Well, I'll understand these aspects. > > But when I think about Linux, especially about Fedora, I'm thinking > about the freedom to make decisions. This means to me, to customize > and take advantage of my comput

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 11:45 schrieb Bastien Nocera: Well, I'll understand these aspects. But when I think about Linux, especially about Fedora, I'm thinking about the freedom to make decisions. This means to me, to customize and take advantage of my computer and in this case my operating system. Y

Re: Best way to use zram in Fedora 21?

2014-12-08 Thread Dan Horák
On Mon, 8 Dec 2014 11:36:47 +0100 Karel Zak wrote: > On Tue, Nov 25, 2014 at 09:03:20PM +0100, Juan Orti wrote: > > Hi, I know how to manually configure the zram, but what's the best > > way to do it? > > > > I've seen the unit zram.service of anaconda-core, and it gets > > activated when bootin

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Michael Spahn
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Probably this is not gnomish enough to him. On 08.12.2014 11:48, Reindl Harald wrote: > > Am 08.12.2014 um 11:45 schrieb Bastien Nocera: >>> Well, I'll understand these aspects. >>> >>> But when I think about Linux, especially about Fedora, I'm >>>

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 11:45 schrieb Bastien Nocera: > >> Well, I'll understand these aspects. > >> > >> But when I think about Linux, especially about Fedora, I'm thinking > >> about the freedom to make decisions. This means to me, to customize > >> and take advantage

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
It's not good UI for any OS, not just the ones based on GNOME. - Original Message - > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Probably this is not gnomish enough to him. > > On 08.12.2014 11:48, Reindl Harald wrote: > > > > Am 08.12.2014 um 11:45 schrieb Bastien Nocera: > >>

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 12:22 schrieb Bastien Nocera: Am 08.12.2014 um 11:45 schrieb Bastien Nocera: Well, I'll understand these aspects. But when I think about Linux, especially about Fedora, I'm thinking about the freedom to make decisions. This means to me, to customize and take advantage of my c

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Aleksandar Kurtakov
- Original Message - > From: "Bastien Nocera" > To: "Development discussions related to Fedora" > > Sent: Monday, December 8, 2014 1:22:04 PM > Subject: Re: "Workstation" Product defaults to wide-open firewall > > > > - Original Message - > > > > Am 08.12.2014 um 11:45 schrie

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Alec Leamas
On 08/12/14 12:10, Michael Spahn wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Probably this is not gnomish enough to him. Hm... There's something strange familiar with this discussion... yes, in [1] there are several threads on "Firewall blocking desktop features". I can see both

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > - Original Message - > > From: "Bastien Nocera" > > To: "Development discussions related to Fedora" > > > > Sent: Monday, December 8, 2014 1:22:04 PM > > Subject: Re: "Workstation" Product defaults to wide-open firewall > > > > > > > > - Original Me

rawhide report: 20141208 changes

2014-12-08 Thread Fedora Rawhide Report
Compose started at Mon Dec 8 05:15:03 UTC 2014 Broken deps for i386 -- [3Depict] 3Depict-0.0.16-3.fc22.i686 requires libmgl.so.7.2.0 [Sprog] Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0) [cab] cab-0.1.

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 12:34 schrieb Bastien Nocera: Am 08.12.2014 um 11:45 schrieb Bastien Nocera: Well, I'll understand these aspects. But when I think about Linux, especially about Fedora, I'm thinking about the freedom to make decisions. This means to me, to customize and take advantage of my c

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > > Am 08.12.2014 um 12:34 schrieb Bastien Nocera: > Am 08.12.2014 um 11:45 schrieb Bastien Nocera: > >> Well, I'll understand these aspects. > >> > >> But when I think about Linux, especially about Fedora, I'm thinking > >> about the freedom

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Aleksandar Kurtakov
- Original Message - > From: "Reindl Harald" > To: devel@lists.fedoraproject.org > Sent: Monday, December 8, 2014 1:26:29 PM > Subject: Re: "Workstation" Product defaults to wide-open firewall > > > > Am 08.12.2014 um 12:22 schrieb Bastien Nocera: > >> Am 08.12.2014 um 11:45 schrieb Bas

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 13:02 schrieb Aleksandar Kurtakov: - Original Message - From: "Reindl Harald" To: devel@lists.fedoraproject.org Sent: Monday, December 8, 2014 1:26:29 PM Subject: Re: "Workstation" Product defaults to wide-open firewall Am 08.12.2014 um 12:22 schrieb Bastien Nocera:

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Ian Malone
On 8 December 2014 at 12:02, Aleksandar Kurtakov wrote: > - Original Message - >> From: "Reindl Harald" >> To: devel@lists.fedoraproject.org >> Sent: Monday, December 8, 2014 1:26:29 PM >> Subject: Re: "Workstation" Product defaults to wide-open firewall >> >> >> >> Am 08.12.2014 um 12:22

[POC-change] Fedora packages point of contact updates

2014-12-08 Thread nobody
Change in package status over the last 168 hours 3 packages were orphaned clucene09 [master] was orphaned by robert A C++ port of Lucene https://admin.fedoraproject.org/pkgdb/package/clucene09 libvmime [master] was

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > Well, it's in your hands now, and every application developer's hands, > if RH is going to be turning the default firewall off. Not Red Hat, Fedora. And it's not off by default either. It's disabled for user applications, not root ones. -- devel mailing list deve

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 13:39 schrieb Bastien Nocera: Well, it's in your hands now, and every application developer's hands, if RH is going to be turning the default firewall off. Not Red Hat, Fedora. And it's not off by default either. It's disabled for user applications, not root ones and that is

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 13:39 schrieb Bastien Nocera: > >> Well, it's in your hands now, and every application developer's hands, > >> if RH is going to be turning the default firewall off. > > > > Not Red Hat, Fedora. And it's not off by default either. It's disabled >

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 13:56 schrieb Bastien Nocera: Am 08.12.2014 um 13:39 schrieb Bastien Nocera: Well, it's in your hands now, and every application developer's hands, if RH is going to be turning the default firewall off. Not Red Hat, Fedora. And it's not off by default either. It's disabled fo

Re: non-responsive maintainer - vda - Denys Vlasenko - dvlas...@redhat.com

2014-12-08 Thread Denys Vlasenko
On 12/05/2014 05:43 PM, Orion Poplawski wrote: > Starting the non-reponsive maintainter process for vda - Denys Vlasenko - > dvlas...@redhat.com as he appears to have completely abandoned busybox. > Anyone know him or how to contact? Hi. I'm here. How can I help you? -- devel mailing list devel

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Solomon Peachy
On Mon, Dec 08, 2014 at 07:56:28AM -0500, Bastien Nocera wrote: > Rootkit won't require opened *server* ports. It will contact a command > server through a client port, which requires no special privileges. If > you blocked the firewall for user applications, you just made the > system a pain to

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Matthew Miller
On Mon, Dec 08, 2014 at 12:11:40PM +, Ian Malone wrote: > >> >>> You're free to select another firewall zone > And free to move to another distro of course. Well, or free to select another Fedora offering, or configure you systems to not be Fedora Workstation. The defaults are different in th

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Matthew Miller
On Mon, Dec 08, 2014 at 11:40:30AM +0100, Michael Spahn wrote: > I hope it's not needed to mentions that we are not Ubuntu, Windows or > OSx. We are a free and open Linux distribution and every step in > another direction is an attack against the ideas of free open source > and open mind. Let's pl

Re: Review swap -- Budgie Desktop

2014-12-08 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 08, 2014 at 08:14:36AM +0800, Christopher Meng wrote: > I can help as several months ago the budgie music player was packaged by > myself. At that time the desktop was however unstable. Thanks. The packaging is straightforward, for the most part. The only sticky issue is the inclusion o

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Thomas Woerner
On 12/08/2014 12:51 PM, Bastien Nocera wrote: - Original Message - Am 08.12.2014 um 12:34 schrieb Bastien Nocera: Am 08.12.2014 um 11:45 schrieb Bastien Nocera: Well, I'll understand these aspects. But when I think about Linux, especially about Fedora, I'm thinking about the freed

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Thomas Woerner
On 12/08/2014 10:50 AM, Bastien Nocera wrote: - Original Message - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We don't need open or preconfigured high ports. What we really need is a user notification with options to allow or deny like we do with SELinux. That would be a appropri

File Net-Amazon-S3-0.60.tar.gz uploaded to lookaside cache by ppisar

2014-12-08 Thread Petr Pisar
A file has been added to the lookaside cache for perl-Net-Amazon-S3: 652bfee36dbb2c21e8e5633961db7780 Net-Amazon-S3-0.60.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/m

Re: Review swap -- Budgie Desktop

2014-12-08 Thread Bastien Nocera
It's a sub-module because it's not a library. It won't be a library in the short-term either. - Original Message - > On Mon, Dec 08, 2014 at 08:14:36AM +0800, Christopher Meng wrote: > > I can help as several months ago the budgie music player was packaged by > > myself. At that time the

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > On 12/08/2014 12:51 PM, Bastien Nocera wrote: > This is wrong and you know about that - the firewalld folks have been > urged to use this zone for the Workstation product - it was a > Workstation team decision. What?! We discussed it, and it was deemed acceptable

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Thomas Woerner
On 12/08/2014 03:12 PM, Bastien Nocera wrote: - Original Message - On 12/08/2014 12:51 PM, Bastien Nocera wrote: This is wrong and you know about that - the firewalld folks have been urged to use this zone for the Workstation product - it was a Workstation team decision. What?! We

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Ian Malone
On 8 December 2014 at 13:45, Matthew Miller wrote: > On Mon, Dec 08, 2014 at 12:11:40PM +, Ian Malone wrote: >> >> >>> You're free to select another firewall zone >> And free to move to another distro of course. > > Well, or free to select another Fedora offering, or configure you > systems to

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > On 12/08/2014 03:12 PM, Bastien Nocera wrote: > > > > > > - Original Message - > >> On 12/08/2014 12:51 PM, Bastien Nocera wrote: > > > >> This is wrong and you know about that - the firewalld folks have been > >> urged to use this zone for the Workstation

Re: "Tick-tock" release cadence?

2014-12-08 Thread Adam Jackson
On Thu, 2014-12-04 at 20:01 +0100, Reindl Harald wrote: > Am 04.12.2014 um 19:57 schrieb Adam Jackson: > > I think it's a bit misguided to even think of these things as related. > > "Polish" in an end-user-visible sense is itself a list of tasks and > > criteria that require dedicated attention, pr

[perl-smartmatch/f21] 0.05-TRIAL

2014-12-08 Thread Petr Pisar
commit 4c2b55a59d34410fa3e528d1b8bd8da5be16 Author: Petr Písař Date: Mon Dec 8 15:41:35 2014 +0100 0.05-TRIAL .gitignore |1 + perl-smartmatch.spec | 17 +++-- sources |2 +- 3 files changed, 13 insertions(+), 7 deletions(-) --- diff --git

Re: Review swap -- Budgie Desktop

2014-12-08 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 08, 2014 at 09:08:09AM -0500, Bastien Nocera wrote: > It's a sub-module because it's not a library. I know it does not have a stable api. But could it be compiled as a library? Zbyszek > It won't be a library in the short-term either. -- devel mailing list devel@lists.fedoraproject.

File JSON-MaybeXS-1.003003.tar.gz uploaded to lookaside cache by pghmcfc

2014-12-08 Thread Paul Howarth
A file has been added to the lookaside cache for perl-JSON-MaybeXS: 2780e19be87f56078f990a16361ed51b JSON-MaybeXS-1.003003.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Thomas Woerner
On 12/08/2014 03:45 PM, Bastien Nocera wrote: - Original Message - On 12/08/2014 03:12 PM, Bastien Nocera wrote: - Original Message - On 12/08/2014 12:51 PM, Bastien Nocera wrote: This is wrong and you know about that - the firewalld folks have been urged to use this zon

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 15:45 schrieb Bastien Nocera: On 12/08/2014 12:51 PM, Bastien Nocera wrote: This is wrong and you know about that - the firewalld folks have been urged to use this zone for the Workstation product - it was a Workstation team decision. What?! We discussed it, and it was dee

Are both the audio and jackuser groups necessary?

2014-12-08 Thread Jonathan Underwood
Hi, A perhaps naive question, but is it really necessary to have both the "audio" and "jackuser" groups? Could these not be consolidated moving forward? Cheers, Jonathan. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Con

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > On 12/08/2014 03:45 PM, Bastien Nocera wrote: > > > > > > - Original Message - > >> On 12/08/2014 03:12 PM, Bastien Nocera wrote: > >>> > >>> > >>> - Original Message - > On 12/08/2014 12:51 PM, Bastien Nocera wrote: > >>> > This is wrong

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
You're completely right, I won't follow security experts' ideas on UI, just as I won't follow a UX designers' ideas on security. I was happy to act as the go between to fix a long-standing problem, only to be told 6 month later that they accepted the change because we gave them a choice that was

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Kevin Kofler
Bastien Nocera wrote: > This was discussed, and implemented in the open, and I sent the details of > the feature, and how it would be implemented to the fedora desktop list, > as is customary for Workstation features. That's the problem, you discuss everything in your private playground where you

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Matthew Miller
On Mon, Dec 08, 2014 at 02:31:58PM +, Ian Malone wrote: > There are three products: workstation, server, cloud. Workstation is > the one for desktop use. That leaves server to aim for the traditional > fedora user base, since cloud is (understandably) a very different > thing. So if you want a

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
if your discussions leaded to the decisions also used the quoting style like in that thread only contain "myself said" i guess what went wrong in the first place i am still unsure if that's * intentional to mask communication * just a bad usage of your mail-client in any case it's not the def

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Kevin Kofler
Bastien Nocera wrote: > Yeah, that's so useful. "Oh, you clicked it, it's your fault". That's not > the type of OS I want to help implement, sorry. So you rather implement the type of OS that just always assumes "Yes" without even asking? Because that's what the current "firewall" rules do (betw

Re: non-responsive maintainer - vda - Denys Vlasenko - dvlas...@redhat.com

2014-12-08 Thread Orion Poplawski
On 12/08/2014 06:20 AM, Denys Vlasenko wrote: > On 12/05/2014 05:43 PM, Orion Poplawski wrote: >> Starting the non-reponsive maintainter process for vda - Denys Vlasenko - >> dvlas...@redhat.com as he appears to have completely abandoned busybox. >> Anyone know him or how to contact? > > Hi. I'm

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > if your discussions leaded to the decisions also used the quoting style > like in that thread only contain "myself said" i guess what went wrong > in the first place > > i am still unsure if that's > > * intentional to mask communication > * just a bad usage of you

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > On Mon, Dec 08, 2014 at 02:31:58PM +, Ian Malone wrote: > > There are three products: workstation, server, cloud. Workstation is > > the one for desktop use. That leaves server to aim for the traditional > > fedora user base, since cloud is (understandably) a ve

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Kevin Kofler
Bastien Nocera wrote: > You're free to select another firewall zone. How, when you don't even install the firewall configuration tool by default? Kevin Kofler -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduc

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > Bastien Nocera wrote: > > You're free to select another firewall zone. > > How, when you don't even install the firewall configuration tool by default? Settings -> Network, select your network -> Identity -> Firewall zone -- devel mailing list devel@lists.fedorap

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Kevin Kofler
Bastien Nocera wrote: > Security is about compromises. The net result of the old firewall settings > was people disabling the firewall. And the net result of the new firewall settings is you disabling the firewall for them, and also for all those people out there (like me) who were NOT disabling

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 16:49 schrieb Bastien Nocera: Make sure to note that I'm convinced that the new firewall settings in Fedora Workstation 21 are more secure than what was available in Fedora 20's default settings. If Reindl, Kevin or Tomas want to disagree with that, I'll give you a little exerc

Re: Review swap -- Budgie Desktop

2014-12-08 Thread Bastien Nocera
- Original Message - > On Mon, Dec 08, 2014 at 09:08:09AM -0500, Bastien Nocera wrote: > > It's a sub-module because it's not a library. > I know it does not have a stable api. But could it be compiled > as a library? It could be, as long as it's not installed in a system-wide location.

Re: Review swap -- Budgie Desktop

2014-12-08 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 08, 2014 at 11:01:50AM -0500, Bastien Nocera wrote: > > > - Original Message - > > On Mon, Dec 08, 2014 at 09:08:09AM -0500, Bastien Nocera wrote: > > > It's a sub-module because it's not a library. > > I know it does not have a stable api. But could it be compiled > > as a li

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 16:55 schrieb Bastien Nocera: You're free to select another firewall zone. How, when you don't even install the firewall configuration tool by default? Settings -> Network, select your network -> Identity -> Firewall zone that's possible with one click? fine, then the onl

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > Bastien Nocera wrote: > > Security is about compromises. The net result of the old firewall settings > > was people disabling the firewall. > > And the net result of the new firewall settings is you disabling the > firewall for them, It's not disabled. > and also

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Matthias Clasen
On Mon, 2014-12-08 at 17:08 +0100, Reindl Harald wrote: > Am 08.12.2014 um 16:55 schrieb Bastien Nocera: > >>> You're free to select another firewall zone. > >> > >> How, when you don't even install the firewall configuration tool by > >> default? > > > > Settings -> Network, select your network -

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 17:10 schrieb Bastien Nocera: Security is about compromises. The net result of the old firewall settings was people disabling the firewall. And the net result of the new firewall settings is you disabling the firewall for them, It's not disabled it is practically the only

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 17:10 schrieb Bastien Nocera: There's a few more items that will be opened I'm afraid. And one of the reasons why we block root ports is to avoid regressions like rpcbind listening by default, which was due to a bug in packaging. So what you call "no firewall" would actually hav

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 17:10 schrieb Bastien Nocera: > >>> Security is about compromises. The net result of the old firewall > >>> settings > >>> was people disabling the firewall. > >> > >> And the net result of the new firewall settings is you disabling the > >> fire

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Bastien Nocera
- Original Message - > > Am 08.12.2014 um 17:10 schrieb Bastien Nocera: > > There's a few more items that will be opened I'm afraid. And one of the > > reasons > > why we block root ports is to avoid regressions like rpcbind listening > > by default, which was due to a bug in packaging.

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 17:17 schrieb Bastien Nocera: Am 08.12.2014 um 17:10 schrieb Bastien Nocera: Security is about compromises. The net result of the old firewall settings was people disabling the firewall. And the net result of the new firewall settings is you disabling the firewall for them,

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 17:20 schrieb Bastien Nocera: Am 08.12.2014 um 17:10 schrieb Bastien Nocera: There's a few more items that will be opened I'm afraid. And one of the reasons why we block root ports is to avoid regressions like rpcbind listening by default, which was due to a bug in packaging.

Fedora 22 planning and changes submission deadline

2014-12-08 Thread Jaroslav Reznik
Hi all! Fedora 21 is almost out of the doors (tomorrow!) and it's time to take a look closer on Fedora 22 plans. But before we move on, I'd like to ask you to help us with Fedora 21 retrospective [1]. We'd really like to know what you think went well and what did not. Fedora 22 starts with change

Mate group should require galculator instead of mate-calc

2014-12-08 Thread Igor Gnatenko
Hi, my friend reported to me that mate-calc is deprected. We should use galculator instead. I've checked and found blogpost from one of mate release[0]. Please fix up comps.xml. Couldn't find bugzilla component for this. [0]http://mate-desktop.org/blog/2014-03-17-galculator-is-coming-to-mate/ -

Re: python-dateutil update

2014-12-08 Thread Zbigniew Jędrzejewski-Szmek
On Mon, Dec 08, 2014 at 09:10:59AM -0700, Pete Travis wrote: > On Dec 8, 2014 8:51 AM, "Zbigniew Jędrzejewski-Szmek" > wrote: > > > > On Sun, Dec 07, 2014 at 04:45:12PM -0700, Pete Travis wrote: > > > python-dateutil is old[0]. Fedora is carrying version 1.5, and upstream > > > is up to 2.3 . If

Re: python-dateutil update

2014-12-08 Thread Pierre-Yves Chibon
On Mon, 2014-12-08 at 17:47 +0100, Zbigniew Jędrzejewski-Szmek wrote: > fedocal and python-django-tastypie are the only packages which > explicitly require python-dateutil < 2. If you wish, I can volunteer > file bugs to change the dependency for F21 and rawhide for those two > packages and do it m

Re: Mate group should require galculator instead of mate-calc

2014-12-08 Thread Alexander Ploumistos
I spoke with the MATE team a few weeks ago and they said that for the time being mate-calc will remain the default. Galculator *might* make it to the 1.10 release. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: htt

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread DJ Delorie
> Next time, don't be 6 month late if you're going to be flippant. I, for one, am happy to welcome our new more-reasonable-less-paranoid overlords. I've been disabling my firewall for ages, as my machines are behind an enterprise firewall anyway. -- devel mailing list devel@lists.fedoraproject.

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Reindl Harald
Am 08.12.2014 um 18:33 schrieb DJ Delorie: Next time, don't be 6 month late if you're going to be flippant. I, for one, am happy to welcome our new more-reasonable-less-paranoid overlords. I've been disabling my firewall for ages, as my machines are behind an enterprise firewall anyway that

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread DJ Delorie
> > I, for one, am happy to welcome our new more-reasonable-less-paranoid > > overlords. I've been disabling my firewall for ages, as my machines > > are behind an enterprise firewall anyway > > that don't apply for a notebook, especially not if the enduser is=20 > connected to a public WLAN and

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Sudhir Khanger
On Mon, Dec 8, 2014 at 11:03 PM, DJ Delorie wrote: > I, for one, am happy to welcome our new more-reasonable-less-paranoid > overlords. I've been disabling my firewall for ages, as my machines > are behind an enterprise firewall anyway. So the target audience has shifted from developers to devel

Re: "Tick-tock" release cadence?

2014-12-08 Thread Dennis Gilmore
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 8 Dec 2014 02:29:17 + Peter Robinson wrote: > On Thu, Dec 4, 2014 at 6:42 PM, Matthew Miller > wrote: > > On Thu, Dec 04, 2014 at 11:02:28AM -0600, Bruno Wolff III wrote: > >> >For us, that would mean alternating between concentrating on

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread DJ Delorie
> So the target audience has shifted from developers to developers who > don't understand ports, don't like user prompts and are behind > enterprise firewalls. Certainly not. I've never assumed I was an "average user". There are many different reasons why people might want a more open firewall

Re: "Workstation" Product defaults to wide-open firewall

2014-12-08 Thread Adam Jackson
On Mon, 2014-12-08 at 18:40 +0100, Reindl Harald wrote: > * vulnerable port open Yeah, see, this bit right here is the actual issue. Curiously, AV software on Other Operating Systems has had the ability to delegate this very policy decision to the user session for at least a decade, and yet nobo

Non-fatal error messages in Koji scratch build

2014-12-08 Thread Paul W. Frields
http://paste.fedoraproject.org/157737/18064529 I had a bunch of 'sh: git: command not found' messages in a scratch build I did from an SRPM I uploaded, testing an epel7 build before submitting the real thing. It's been a while -- are these messages expected behavior? -- Paul W. Frields

  1   2   >