= Proposed System Wide Change: Build non-RELRO ELF binaries with
.plt.got isolation =
https://fedoraproject.org/wiki/Changes/.plt.got_Isolation
Owner(s):
* Florian Weimer
Fedora 23 enabled hardening for all packages. However, some ELF
binaries still use lazy binding. This change proposes ad
On 18 June 2018 at 00:49, Tomasz Kłoczko wrote:
> On Sun, 17 Jun 2018 at 23:23, Ian Malone wrote:
> [..]
>> Well, two things:
>>
>> 1. For example, a kiosk mode, where the home directory is wiped each
>> login would be made less secure. The profile for the GUI is set at
>> login, so writing .bash
On Fri, 2018-06-15 at 18:38 -0500, Jason L Tibbitts III wrote:
> evolutionalexl caillon caolanm mbarnes mcrha rhughes
> rstrode ssp tpopela
Hi,
could I ask how evolution had got into the list, please? Having
installed evolution-3.29.2-1.fc29.x86_64 and running:
$ rpm -ql ev
On 18.6.2018 10:28, Milan Crha wrote:
On Fri, 2018-06-15 at 18:38 -0500, Jason L Tibbitts III wrote:
evolutionalexl caillon caolanm mbarnes mcrha rhughes
rstrode ssp tpopela
Hi,
could I ask how evolution had got into the list, please? Having
installed evolution-3.29.2-1.fc2
On 2018-06-16, Jason L Tibbitts III wrote:
> As of Fedora 28, the 'info' package has gained a file trigger
> (%transfiletrigger) which will automatically rebuild the info directory
> node when any file is installed into %_infodir.
What about uninstallation? I've just removed the scriptlets from
t
Hi,
On Mon, 2018-06-18 at 10:46 +0200, Miro Hrončok wrote:
> evolution-tests:
oh, I see, I do not build/install them locally, thus I didn't notice
them in my $PREFIX. I'll update the evolution package spec file.
Thanks and bye,
Milan
___
On Thu, Jun 14, 2018 at 05:16:31PM +0200, Jan Kurik wrote:
> The linker can now put all code and read-only data sections into a
> separate segment with only READ and EXECUTE permissions. All writable
> data can be placed into a separate segment with READ and WRITE
> permissions. This makes progra
On 18.6.2018 11:04, Milan Crha wrote:
Hi,
On Mon, 2018-06-18 at 10:46 +0200, Miro Hrončok wrote:
evolution-tests:
oh, I see, I do not build/install them locally, thus I didn't notice
them in my $PREFIX. I'll update the evolution package spec file.
What Python are those files for act
On Mon, 2018-06-18 at 11:19 +0200, Miro Hrončok wrote:
> What Python are those files for actually? Are they imported or
> executed?
Hi,
I do not speak pythonish, I'm sorry, but from what I recall they had
been added as some sort of unit tests. I think they are meant to be
executed only, bu
On Sun, Jun 17, 2018 at 11:13:39PM +0100, Ian Malone wrote:
> On 16 June 2018 at 13:50, Björn Persson wrote:
> > Tomasz Kłoczko wrote:
> >> On Fri, 15 Jun 2018 at 23:21, Björn Persson wrote:
> >> [..]
> >> > Don't forget that if your proof of concept can be modified to either
> >> > overwrite or
On 18.6.2018 11:45, Milan Crha wrote:
On Mon, 2018-06-18 at 11:19 +0200, Miro Hrončok wrote:
What Python are those files for actually? Are they imported or
executed?
Hi,
I do not speak pythonish, I'm sorry, but from what I recall they had
been added as some sort of unit tests. I think
On 18 June 2018 at 11:27, Zbigniew Jędrzejewski-Szmek wrote:
> On Sun, Jun 17, 2018 at 11:13:39PM +0100, Ian Malone wrote:
>> On 16 June 2018 at 13:50, Björn Persson wrote:
>> > Tomasz Kłoczko wrote:
>> >> On Fri, 15 Jun 2018 at 23:21, Björn Persson wrote:
>> >> [..]
>> >> > Don't forget that if
Just a update,Ended up with a somewhat broken kernel that had performance
issues with the lts patches even after lot of tweaking.Apparently the clear
linux base kernel source tree is stable and working with latest Linux
kernels. Still working on it incase anyone is wondering if this was
abandoned.
Hi all,
we plan to release systemd-239 wednesday-ish and it will be landing in
rawhide. There's a bunch of new functionality, see
https://github.com/systemd/systemd/blob/master/NEWS. As always, the
majority of commits is cleanups and bugfixes and the polishing of
existing functionality. A big new
Dne 18.6.2018 v 14:16 Zbigniew Jędrzejewski-Szmek napsal(a):
> PS. There seems to be a regression in copr with building from src.fp.o
> git. Previously I was able to point copr at the right git URL and it
> would build the package. That fails [3] now with a strange error about
> missing "http://Non
On Mon, 18 Jun 2018 at 12:18, Ian Malone wrote:
[..]
> > Even if .bash_profile is not always read, .bashrc is read every time
> > a shell is started (OK, not "every time", but often enough). So for
> > example if I open a new tab in the terminal, or run some scripting plugin
> > from an editor, et
On Do, 14.06.18 14:20, Chris Murphy (li...@colorremedies.com) wrote:
> The cited BLS spec is the original one, not the more thoroughly
> discussed and thought through variant by Matthew Garrett [1] some
> years ago.
Quite frankly, as one of the authors of the original BLS spec, I can'd
say Matthe
Dne 18.6.2018 v 00:13 Ian Malone napsal(a):
> On 16 June 2018 at 13:50, Björn Persson wrote:
>> Tomasz Kłoczko wrote:
>>> On Fri, 15 Jun 2018 at 23:21, Björn Persson wrote:
>>> [..]
Don't forget that if your proof of concept can be modified to either
overwrite or append to ~/.bashrc,
> "JJ" == Jerry James writes:
JJ> One reason to do this is that the info file does not contain the
JJ> entry, so there is nothing to extract.
Surely it would be better to fix the info file, wouldn't it?
- J<
___
devel mailing list -- devel@lists.
> "AM" == Andrea Musuruane writes:
AM> I think rpmlint should be amended. Now I get "E:
AM> info-files-without-install-info-postun" on F28.
Yes, rpmlint needs to be told to ignore this issue on F28+.
- J<
___
devel mailing list -- devel@lists.fed
> "PP" == Petr Pisar writes:
PP> What about uninstallation?
That is covered by the existing triggers:
%transfiletriggerpostun -n info -- %{_infodir}
[ -f %{_infodir}/dir ] && %{_sbindir}/fix-info-dir --delete %{_infodir}/dir
&>/dev/null
If fix-info-dir is not working as documented (where
On 2018-06-18, Jason L Tibbitts III wrote:
>> "PP" == Petr Pisar writes:
>
>PP> What about uninstallation?
>
> That is covered by the existing triggers:
>
> %transfiletriggerpostun -n info -- %{_infodir}
> [ -f %{_infodir}/dir ] && %{_sbindir}/fix-info-dir --delete %{_infodir}/dir
> &>/dev/n
On Mon, 18 Jun 2018 at 14:58, Vít Ondruch wrote:
[..]
> Forgive my ignorance, but where is the option to install Fedora in Kiosk
> mode? I am asking, because I am not aware about any option like this,
> hence this needs IMO some configuration and if you configure the
> computer to run in Kiosk mod
Hi,
On 14.6.2018 12:06, Jan Kurik wrote:
> = Proposed System Wide Change: Make BootLoaderSpec the default =
> https://fedoraproject.org/wiki/Changes/BootLoaderSpecByDefault
>
>
> Owner(s):
> * Javier Martinez Canillas
> * Peter Jones
>
>
> Use BootLoaderSpec fragment files by default to
Dne 18.6.2018 v 16:30 Tomasz Kłoczko napsal(a):
> On Mon, 18 Jun 2018 at 14:58, Vít Ondruch wrote:
> [..]
>> Forgive my ignorance, but where is the option to install Fedora in Kiosk
>> mode? I am asking, because I am not aware about any option like this,
>> hence this needs IMO some configuratio
Hi,
On 18.6.2018 15:27, Lennart Poettering wrote:
> On Do, 14.06.18 14:20, Chris Murphy (li...@colorremedies.com) wrote:
>
>> The cited BLS spec is the original one, not the more thoroughly
>> discussed and thought through variant by Matthew Garrett [1] some
>> years ago.
>
> Quite frankly, as o
On Thu, Jun 14, 2018 at 12:40:50PM -0700, Adam Williamson wrote:
> On Thu, 2018-06-14 at 15:10 -0400, Matthew Miller wrote:
> > On Thu, Jun 14, 2018 at 11:51:33AM -0700, Adam Williamson wrote:
> > > > ** Have a grubby wrapper for backward compatbility that manipulates BLS
> > > > files.
> > >
> >
On Mon, Jun 18, 2018 at 11:17:50AM -0400, Peter Jones wrote:
> On Thu, Jun 14, 2018 at 12:40:50PM -0700, Adam Williamson wrote:
> > On Thu, 2018-06-14 at 15:10 -0400, Matthew Miller wrote:
> > > On Thu, Jun 14, 2018 at 11:51:33AM -0700, Adam Williamson wrote:
> > > > > ** Have a grubby wrapper for
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
At today's FESCo meeting, we selected a new meeting time to accommodate the
schedules of the newly-elected members. As such, FESCo meetings for the next
cycle will be taking place on Mondays at 1500 UTC (1100 EDT, 1700 CEST).
However, in the interes
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
This message is directed at anyone who maintains a Node.js package in Fedora.
On Friday, FESCo approved the Fedora 29 System-Wide Change to move the default
Node.js interpreter to the 10.x LTS stream. This means that we will need to
ensure that any
On Mon, Jun 18, 2018 at 02:54:07PM +0200, Miroslav Suchý wrote:
> Dne 18.6.2018 v 14:16 Zbigniew Jędrzejewski-Szmek napsal(a):
> > PS. There seems to be a regression in copr with building from src.fp.o
> > git. Previously I was able to point copr at the right git URL and it
> > would build the pack
On Mon, Jun 18, 2018 at 04:48:43PM +0200, Vít Ondruch wrote:
> > https://fedoraproject.org/wiki/Fedora_Kiosk
> It does not look to be maintained ...
It seems to have never been completed. Note the category "Spins in
Development", as well as this bit:
The most recent blog post by the developer
On Mon, Jun 18, 2018 at 7:27 AM, Lennart Poettering
wrote:
> On Do, 14.06.18 14:20, Chris Murphy (li...@colorremedies.com) wrote:
>
>> The cited BLS spec is the original one, not the more thoroughly
>> discussed and thought through variant by Matthew Garrett [1] some
>> years ago.
>
> Quite frankl
On Mon, Jun 18, 2018 at 8:40 AM, Ondřej Lysoněk wrote:
> I also have a question regarding interoperability with distros which do
> not support BLS. Suppose I install Fedora with BLS enabled and then
> beside that install some distro which doesn't support BLS. The second
> distro will probably ins
Also, another question about $BOOT as VFAT, is asking the kdump folks
if they're OK with the proposed change? Because right now kdump
expects to use /boot, which is historically ext4 for a long time now,
for kernel crash files. Or if they're better off writing crash files
somewhere in /var ?
When
Ian Malone wrote:
> 1. For example, a kiosk mode, where the home directory is wiped each
> login would be made less secure. The profile for the GUI is set at
> login, so writing .bash_profile has no effect on the GUI environment,
> but an attacker able to place files where the user has write
> per
Nico Kadel-Garcia wrote:
> On Sat, Jun 16, 2018 at 11:38 AM, Björn Persson wrote:
> > Nico Kadel-Garcia wrote:
> >> On Fri, Jun 15, 2018 at 12:55 PM, Till Maas wrote:
> >> > So the assumption is to have a super sophisticated browser exploit for
> >> > which
> >> > an attacker most likely sp
On Thu, Jun 14, 2018 at 10:20 PM, Chris Murphy wrote:
> On Thu, Jun 14, 2018 at 12:51 PM, Adam Williamson
> wrote:
>> On Thu, 2018-06-14 at 12:06 +0200, Jan Kurik wrote:
>>> == Scope ==
>>> * Proposal owners:
>>> ** Generate BLS snippets at kernel build time and ship in the kernel
>>> packages.
On Mon, Jun 18, 2018 at 03:29:34PM +, Zbigniew Jędrzejewski-Szmek wrote:
> On Mon, Jun 18, 2018 at 11:17:50AM -0400, Peter Jones wrote:
> > On Thu, Jun 14, 2018 at 12:40:50PM -0700, Adam Williamson wrote:
> > > On Thu, 2018-06-14 at 15:10 -0400, Matthew Miller wrote:
> > > > On Thu, Jun 14, 201
> "PP" == Petr Pisar writes:
PP> https://bugzilla.redhat.com/show_bug.cgi?id=1592433
I located the bug, which is that fix-info-dir needs to pass an extra
flag to install-info; otherwise install-info tries to open the info file
to figure out which entries to remove. But of course the info fi
On 2018-06-18 12:39, Chris Murphy wrote:
kdump is
enabled by default on RHEL (and maybe CentOS, not sure).
I can confirm it is on CentOS.
___
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedora
On Mon, Jun 18, 2018 at 11:02 AM, Javier Martinez Canillas
wrote:
> On Thu, Jun 14, 2018 at 10:20 PM, Chris Murphy
> wrote:
>> On Thu, Jun 14, 2018 at 12:51 PM, Adam Williamson
>> wrote:
>>> On Thu, 2018-06-14 at 12:06 +0200, Jan Kurik wrote:
== Scope ==
* Proposal owners:
** Gen
On Mon, Jun 18, 2018 at 12:14 PM, Chris Murphy wrote:
> My summary of the change for most users (x86_64)
> - users will no longer modify /etc/default/grub, they will duplicate
> (?) and modify BLS scripts directly if they need to make permanent
> changes to menu entries
I assumed wrong. I'm see
> "ZJ" == Zbigniew Jędrzejewski-Szmek writes:
ZJ> rpm does not allow reading that file from the tarball, because it
ZJ> wants it to be available for %include when the spec file is parsed.
ZJ> That's why I put the in git directly.
This one of several reasons why using %include in a Fedora spe
On Mon, Jun 18, 2018 at 12:14:31PM -0600, Chris Murphy wrote:
> Thanks for the reply.
>
> I think the proposal title is misleading. The BLS file format is,
> depending on one's point of view, 5% of the spec. A bulk of the
> proposal isn't going to follow the spec at all. And even with regards
> to
On Mon, Jun 18, 2018 at 01:34:53PM -0500, Jason L Tibbitts III wrote:
> > "ZJ" == Zbigniew Jędrzejewski-Szmek writes:
>
> ZJ> rpm does not allow reading that file from the tarball, because it
> ZJ> wants it to be available for %include when the spec file is parsed.
> ZJ> That's why I put the
> "ZJ" == Zbigniew Jędrzejewski-Szmek writes:
ZJ> It's either %include or a fairly big copy&paste. The first solution
ZJ> is awkward, and the second one is ... awkward. But yeah, maybe we
ZJ> should bite the bullet and do the copy&paste. A bit sad.
It shouldn't be that bad. The body of the
On Mon, Jun 18, 2018 at 03:28:17PM -0500, Jason L Tibbitts III wrote:
> > "ZJ" == Zbigniew Jędrzejewski-Szmek writes:
>
> ZJ> It's either %include or a fairly big copy&paste. The first solution
> ZJ> is awkward, and the second one is ... awkward. But yeah, maybe we
> ZJ> should bite the bulle
> "ZJ" == Zbigniew Jędrzejewski-Szmek writes:
ZJ> That's not an attractive option, because there's so many of them.
Ah, so the issue is merely the quantity of scripts. I did check out the
package from git and it doesn't seem all that bad; most of what's there
is (sort of excessively verbose
On Mon, 18 Jun 2018, Lennart Poettering wrote:
> On Do, 14.06.18 14:20, Chris Murphy (li...@colorremedies.com) wrote:
>
> > The cited BLS spec is the original one, [1]
... later: L.P.:
> [reduce] the size of the spec if possible, and drop as many
> bits of it as we can, i.e. the stuff noone imp
> On Jun 18, 2018, at 10:02 AM, Javier Martinez Canillas
> wrote:
>
>> On Thu, Jun 14, 2018 at 10:20 PM, Chris Murphy
>> wrote:
>> On Thu, Jun 14, 2018 at 12:51 PM, Adam Williamson
>> wrote a monolithic config
>
>
>> The cited BLS spec requires $BOOT be VFAT, are we doing that?
>>
>
> Yes for
On 18/06/18 18:15, Peter Jones wrote:
That's true - though we actually shipped nearly all of the code to
implement this stuff f28, minus some parts of the upgrade story and the
anaconda bits to enable it by default. You can go run
grub2-switch-to-blscfg today, and it will work. I hope :)
Unl
Dear all,
You are kindly invited to the meeting:
Modularity Office Hours on 2018-06-19 from 10:00:00 to 11:00:00 US/Eastern
At fedora-modular...@chat.freenode.net
The meeting will be about:
This is where you ask the Fedora Modularity Team questions (and we try to
answer them)!
Join us on
On Mon, Jun 18, 2018 at 11:54 PM, Tom Hughes wrote:
> On 18/06/18 18:15, Peter Jones wrote:
>
>> That's true - though we actually shipped nearly all of the code to
>> implement this stuff f28, minus some parts of the upgrade story and the
>> anaconda bits to enable it by default. You can go run
>
On Mon, Jun 18, 2018 at 3:42 PM, Andrew Lutomirski wrote:
>> On Jun 18, 2018, at 10:02 AM, Javier Martinez Canillas
>> wrote:
>> Yes for EFI systems but no otherwise. On EFI the BLS snippets are in
>> /boot/efi/EFI/fedora/loader/entries and on non-EFI systems are in
>> /boot/loader/entries.
>>
On 18/06/18 23:46, Javier Martinez Canillas wrote:
On Mon, Jun 18, 2018 at 11:54 PM, Tom Hughes wrote:
On 18/06/18 18:15, Peter Jones wrote:
That's true - though we actually shipped nearly all of the code to
implement this stuff f28, minus some parts of the upgrade story and the
anaconda bits
> On Jun 18, 2018, at 3:54 PM, Chris Murphy wrote:
>
> On Mon, Jun 18, 2018 at 3:42 PM, Andrew Lutomirski wrote:
>>> On Jun 18, 2018, at 10:02 AM, Javier Martinez Canillas
>>> wrote:
>
>>> Yes for EFI systems but no otherwise. On EFI the BLS snippets are in
>>> /boot/efi/EFI/fedora/loader/entri
On Mon, Jun 18, 2018 at 3:54 PM, Tom Hughes wrote:
> On 18/06/18 18:15, Peter Jones wrote:
>
>> That's true - though we actually shipped nearly all of the code to
>> implement this stuff f28, minus some parts of the upgrade story and the
>> anaconda bits to enable it by default. You can go run
>>
On 06/18/2018 07:37 PM, Andrew Lutomirski wrote:
>> On Jun 18, 2018, at 3:54 PM, Chris Murphy wrote:
>>
>> On Mon, Jun 18, 2018 at 3:42 PM, Andrew Lutomirski wrote:
>>> As an extra plus, upgrading a kernel doesn’t require mounting the ESP,
>>> which means that the bootloader installation can sync
OLD: Fedora-Rawhide-20180616.n.0
NEW: Fedora-Rawhide-20180617.n.0
= SUMMARY =
Added images:0
Dropped images: 0
Added packages: 2
Dropped packages:1
Upgraded packages: 36
Downgraded packages: 0
Size of added packages: 587.65 KiB
Size of dropped packages:826
Upstream has updated from just BSD to BSD and zlib, reflecting the
origins of the code ported to Rust. More info here:
https://github.com/remram44/adler32-rs/issues/7
Built in rust-adler32-1.0.3-1.fc29
___
devel mailing list -- devel@lists.fedoraproject
libqalculate soname bump is happening with v2.6.0. The following
packages are affected -
plasma-workspace
step
cantor
qalculate-kde
I will rebuild these packages.
Mukundan.
signature.asc
Description: OpenPGP digital signature
___
devel mailing list
Jeff Backus wrote:
> Hmm.. Yes, we've had discussions within the SIG re: window managers that
> support i586/i686, and KDE was on the list of WMs that no longer support
> our target system. Do these patches/hacks only apply to KDE or do they
> apply to Qt in general?
The absolute worst is QtWebEng
Stephen Gallagher wrote:
> * Most FESCo votes will be performed in the tickets. FESCo members will
> have one week[1] from the creation of the ticket to vote. So long as at
> least three members have voted, the majority of votes at the end of that
> week will be counted as the result. If three vote
No missing expected images.
Failed openQA tests: 8/138 (x86_64), 1/2 (arm)
New failures (same test did not fail in Rawhide-20180616.n.0):
ID: 250213 Test: x86_64 Workstation-boot-iso install_default@uefi
URL: https://openqa.fedoraproject.org/tests/250213
ID: 250224 Test: x86_64 KDE-liv
On 06/18/2018 07:05 PM, Kevin Kofler wrote:
> Jeff Backus wrote:
>> Hmm.. Yes, we've had discussions within the SIG re: window managers that
>> support i586/i686, and KDE was on the list of WMs that no longer support
>> our target system. Do these patches/hacks only apply to KDE or do they
>> apply
66 matches
Mail list logo
