Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Nikos Mavrogiannopoulos
On Wed, 2015-03-18 at 11:37 -0700, Moez Roy wrote: > >>> > FULL RELRO > >>> > http://tk-blog.blogspot.co.at/2009/02/relro-not-so-well-known-memory.html > >>> If that's all we got I suggest to remove this flag or (better) provide a > >>> way for applications that use modules to compile themselves, w

Re: FreeRDP downgrade in rawhide and f22 updates-testing

2015-03-19 Thread David Woodhouse
On Wed, 2015-03-18 at 22:07 +0300, Pavel Alexeev wrote: > > > Why you revert it in rawhide too? > > I could help with rebuilding dependencies. Is there other known > troubles except so-name change? It's more *rewriting* dependencies than rebuilding them. Especially guacamole. You ha

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
On Wed, Mar 18, 2015 at 08:42:40PM -0600, Orion Poplawski wrote: > Richard - > >Apparently plplot is shifting to using > https://github.com/Chris00/ocaml-cairo for it ocaml cairo bindings. > It is known by "cairo2" on opam. plplot appears to be the only user > of ocaml-cairo. Do you have any

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Jaroslav Reznik
- Original Message - > On 03/18/2015 12:55 PM, Peter Robinson wrote: > > How are "disabled repositories" going to be approved for inclusion? > > While you likely meant political meaning of "how", I would like share how it > will be done technically. > > Approximately 6 months ago Env&Stac

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Jaroslav Reznik
- Original Message - > On 03/18/2015 05:46 PM, Rahul Sundaram wrote: > > Hi > > > > On Wed, Mar 18, 2015 at 12:21 PM, Mike Pinkerton wrote: > > > > > > What I don't understand is the wisdom of an official Fedora > > "product" endorsing a copr when either the software or packaging (

Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Tomas Mraz
On 19.3.2015 08:16, Nikos Mavrogiannopoulos wrote: On Wed, 2015-03-18 at 11:37 -0700, Moez Roy wrote: FULL RELRO http://tk-blog.blogspot.co.at/2009/02/relro-not-so-well-known-memory.html If that's all we got I suggest to remove this flag or (better) provide a way for applications that use modul

Re: hardening breaks X.org

2015-03-19 Thread Florian Weimer
On 03/02/2015 02:16 AM, David Airlie wrote: > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > Thanks guys, my system is more secure, but I can't run any apps. > > Anyways enough snark from me, the problem seems to be that hardening > makes bind now override RTLD_LAZY

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
On Thu, Mar 19, 2015 at 08:50:49AM +, Richard W.M. Jones wrote: > So I believe in this case, unless anyone objects, we should simply > replace the upstream of the ocaml-cairo package with > https://github.com/Chris00/ocaml-cairo > > I _don't_ think we need to rename the package nor create a ne

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Sergio Pascual
2015-03-18 18:51 GMT+01:00 Ralf Corsepius : > On 03/18/2015 05:46 PM, Rahul Sundaram wrote: > >> Hi >> >> On Wed, Mar 18, 2015 at 12:21 PM, Mike Pinkerton wrote: >> >> >> What I don't understand is the wisdom of an official Fedora >> "product" endorsing a copr when either the software or

F-22 Branched report: 20150319 changes

2015-03-19 Thread Fedora Branched Report
Compose started at Thu Mar 19 07:15:02 UTC 2015 Broken deps for armhfp -- [Sprog] Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0) [aeskulap] aeskulap-0.2.2-0.19beta1.fc22.armv7hl requires libofstd.so.3.6

[Base] Base Design WG agenda meeting 20 March 2015 14:00 UTC on #fedora-meeting

2015-03-19 Thread Harald Hoyer
THIS TIME at 14:00 UTC because of US summer time. Agenda: - Interview candidates for new memberships - Optionally accept new members - Open Floor Please add items by replying to this mail. -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/de

New Article on Future Docker Security.

2015-03-19 Thread Daniel J Walsh
http://opensource.com/business/15/3/docker-security-future -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
Orion, I realize there was not anything actionable in my last emails. Could you take a look at this scratch build: http://koji.fedoraproject.org/koji/taskinfo?taskID=9273794 and check that it's suitable for what you want. If plplot is using ocamlfind, then we may need to change the META file

Re: ocaml cairo

2015-03-19 Thread Orion Poplawski
On 03/19/2015 08:17 AM, Richard W.M. Jones wrote: > > Orion, I realize there was not anything actionable in my last > emails. > > Could you take a look at this scratch build: > > http://koji.fedoraproject.org/koji/taskinfo?taskID=9273794 > > and check that it's suitable for what you want. >

Re: ocaml cairo

2015-03-19 Thread Richard W.M. Jones
On Thu, Mar 19, 2015 at 09:19:49AM -0600, Orion Poplawski wrote: > On 03/19/2015 08:17 AM, Richard W.M. Jones wrote: > > > > Orion, I realize there was not anything actionable in my last > > emails. > > > > Could you take a look at this scratch build: > > > > http://koji.fedoraproject.org/koji

Re: octave-symbolic license change from GPLv2+ to GPLv3+

2015-03-19 Thread Colin Macdonald
On 09/02/15 22:28, Kevin Kofler wrote: > Colin Macdonald wrote: >> I'm the new upstream developer of this. Its a rewrite from scratch. If >> it helps, I'm happy to (help) maintain the Fedora package---unless of >> course we have some policy against that. > > Welcome to Fedora! Your help is of co

Re: hardening breaks X.org

2015-03-19 Thread Adam Jackson
On Thu, 2015-03-19 at 11:36 +0100, Florian Weimer wrote: > On 03/02/2015 02:16 AM, David Airlie wrote: > > So the rebuild to use hardened builds by default in rawhide, broke X.org. > > > > Thanks guys, my system is more secure, but I can't run any apps. > > > > Anyways enough snark from me, the p

Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Adam Jackson
On Thu, 2015-03-12 at 10:41 -0400, Adam Jackson wrote: > We may want to revisit this, honestly. The actual proposal was just to > build executables as PIE, right? Forcing -z now is a bit more than > maybe was expected. I've reopened the ticket and added a patch: https://fedorahosted.org/fesco/

Re: F22 Self Contained Change: Disabled Repositories Support

2015-03-19 Thread Adam Jackson
On Wed, 2015-03-18 at 00:36 +0100, Kevin Kofler wrote: > Richard Hughes wrote: > > Perhaps, when we stop writing low level tools with specific > > latency requirements in interpreted languages... > > +1 > > In fact, IMHO, we should stop writing ANYTHING in interpreted languages. I look forward t

Re: GNOME 3.15.92 megaupdate

2015-03-19 Thread Kalev Lember
On 03/16/2015 01:30 PM, Kalev Lember wrote: > GNOME 3.15.92 release is this week and I'll take care of handling the > megaupdate for F22. It made it to updates-testing now, as of a few moments ago. Testing, bug reports (in bugzilla) and karma (in the ticket below) are all much welcome! https://ad

Heads up: nss-3.18 released: coming to fedora

2015-03-19 Thread Elio Maldonado
nss-3.18 was released. Please see the upstream release notes at https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes Rawhide is now updated and it should start showing up on updates-testing for F-22 and stable branches next week. Elio -- devel mailing list de

Re: Heads up: nss-3.18 released: coming to fedora

2015-03-19 Thread Yaakov Selkowitz
On Thu, 2015-03-19 at 17:41 -0400, Elio Maldonado wrote: > nss-3.18 was released. Please see the upstream release notes at > > https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.18_release_notes > > Rawhide is now updated and it should start showing up on updates-testing for > F

Re: Harden_all_packages_with_position-independent_code + guile modules

2015-03-19 Thread Moez Roy
Here are 2 solutions: - Solution 1: Keeps -z now (Full RELRO) but removes guile: I changed the first 2 lines in the spec file to: %global without dane %global without guile and the latest version builds successfully: https://koji.fedoraproject.org/koji/taskinfo?taskID=9276305