Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Mattia Verga via devel
Il 24/06/24 03:42, Kevin Fenzi ha scritto: > You can enroll as many tokens as you like, so you can enroll one in a > backup device or system in case you loose your primary token. You only > need any one otp to login. Things like keepassxc and bitwarden allow you > to setup OTPs these days. > > kev

Re: [Node.js] Stepping down as Node.js Maintainer in Fedora

2024-06-24 Thread Jan Staněk
Hi Stephen! Stephen Gallagher writes: > Just a reminder that I will be orphaning the nodejsXX packages in a > little over a week. As of yet, no one has requested access to take it > over. If anyone is going to do so, I encourage you to do it soon if > you would like my help coming up to speed. U

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Miroslav Suchý
Dne 24. 06. 24 v 9:48 dop. Mattia Verga via devel napsal(a): IMO, having the token stored in your password manager means going from 2FA to 1FA effectively ;-) if someone gets access to your password manager vault, all accounts will be compromised. Only if you use the same password manager for b

Re: [Node.js] Stepping down as Node.js Maintainer in Fedora

2024-06-24 Thread Emmanuel Seyman
* Jan Staněk [24/06/2024 03:06] : > > > Right now I see no way on Pagure to request ownership/co-maintenance > (maybe I'm just blind). Anyway, feel free to add me to maintainers > and/or transfer the ownership. Unless things have changed, Pagure does not allow transfer of ownership. Once Stephen

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Alexander Bokovoy
On Няд, 23 чэр 2024, Neal Gompa wrote: On Sun, Jun 23, 2024 at 11:59 AM Miroslav Suchý wrote: Dne 23. 06. 24 v 11:50 dop. Leigh Scott napsal(a): it has made kerberos login much harder Can you elaborate? I use Kerberos login without a problem. I'm considering ditching provenpackager rights

Re: Building upstream kernel with Fedora config

2024-06-24 Thread Thorsten Leemhuis
On 07.06.24 08:04, Thorsten Leemhuis wrote: > On 06.06.24 17:47, Justin Forbes wrote: >> On Thu, Jun 6, 2024 at 9:19 AM Thorsten Leemhuis >> wrote: >>> On 04.06.24 18:12, Mikhail Gavrilov wrote: >>> Instruction [1] about building upstream kernel should be updated, >>> I'd tend to disagree. I

Fedora rawhide compose report: 20240624.n.0 changes

2024-06-24 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20240623.n.0 NEW: Fedora-Rawhide-20240624.n.0 = SUMMARY = Added images:0 Dropped images: 0 Added packages: 2 Dropped packages:1 Upgraded packages: 39 Downgraded packages: 0 Size of added packages: 218.80 KiB Size of dropped packages

Re: Orphaned packages looking for new maintainers

2024-06-24 Thread Hans de Goede
Hi, On 6/14/24 9:43 PM, maxw...@gtmx.me wrote: > Report started at 2024-06-14 19:04:03 UTC > > The following packages are orphaned and will be retired when they > are orphaned for six weeks, unless someone adopts them. If you know for sure > that the package should be retired, please do so now wi

Re: [Node.js] Stepping down as Node.js Maintainer in Fedora

2024-06-24 Thread Sandro
On 24-06-2024 10:45, Emmanuel Seyman wrote: * Jan Staněk [24/06/2024 03:06] : Right now I see no way on Pagure to request ownership/co-maintenance (maybe I'm just blind). Anyway, feel free to add me to maintainers and/or transfer the ownership. Unless things have changed, Pagure does not all

Re: [Node.js] Stepping down as Node.js Maintainer in Fedora

2024-06-24 Thread Miro Hrončok
On 24. 06. 24 10:45, Emmanuel Seyman wrote: * Jan Staněk [24/06/2024 03:06] : Right now I see no way on Pagure to request ownership/co-maintenance (maybe I'm just blind). Anyway, feel free to add me to maintainers and/or transfer the ownership. Unless things have changed, Pagure does not all

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-24 Thread Vít Ondruch
Dne 21. 06. 24 v 18:27 Stephen Smoogen napsal(a): On Fri, 21 Jun 2024 at 07:27, Vít Ondruch wrote: So what is the reason to not treat x86_64_v2 as different arch then x86_64_v{1,3}. Why we keep having this discussion instead of fire one more build? Users would need to choose v1 / v2 / v3 ISO b

F41 Change Proposal: acpica-tools: Deprecate Big Endian Support (System-Wide)

2024-06-24 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/Acpica-tools_Deprecate-Big_Endian_Support Discussion Thread - https://discussion.fedoraproject.org/t/f41-change-proposal-acpica-tools-deprecate-big-endian-support-system-wide/123164 This document represents a proposed Change. As part of the Changes pr

F41 Change Proposal: Enabling composefs by default for Atomic Desktops, CoreOS and IoT (Self-Contained)

2024-06-24 Thread Aoife Moloney
Wiki - https://fedoraproject.org/wiki/Changes/ComposefsAtomicCoreOSIoT Discussion Thread - https://discussion.fedoraproject.org/t/f41-change-proposal-enabling-composefs-by-default-for-atomic-desktops-coreos-and-iot-self-contained/123166 This is a proposed Change for Fedora Linux. This document rep

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Guinevere Larsen
On 6/24/24 5:08 AM, Miroslav Suchý wrote: Dne 24. 06. 24 v 9:48 dop. Mattia Verga via devel napsal(a): IMO, having the token stored in your password manager means going from 2FA to 1FA effectively ;-) if someone gets access to your password manager vault, all accounts will be compromised. Onl

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 03:42, Kevin Fenzi wrote: You can enroll as many tokens as you like, so you can enroll one in a backup device or system in case you loose your primary token. Backup codes must be generated when the user enables 2FA. They can later use these one-time codes to log in if they lose a

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 10:45, Alexander Bokovoy wrote: Can you point me to a discussion where it says it is impossible to implement that in GOA? FAS (kinit) should request the OTP code in a separate prompt. If kinit asks for a password and OTP codes in separate prompts, GOA will be able to parse it, s

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Alexander Bokovoy
On Пан, 24 чэр 2024, Vitaly Zaitsev via devel wrote: On 24/06/2024 10:45, Alexander Bokovoy wrote: Can you point me to a discussion where it says it is impossible to implement that in GOA? FAS (kinit) should request the OTP code in a separate prompt. This is not how it works in Kerberos. FAS

Uptodate builds for F40 FedoraMediaWriter and KDE LiveISOs ?

2024-06-24 Thread Arnie T via devel
Hello, I'm setting up some F40 boxes for a client. Their Dev-box requirement is to install & use *current* stable release versions of F40 & KDE. For running OS and any tools etc. I installed Fedora Media Writer from distro repos. When you exec FMW to write to a usb key the built-in downloadab

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Michael J Gruber
Guinevere Larsen venit, vidit, dixit 2024-06-24 13:53:37: > On 6/24/24 5:08 AM, Miroslav Suchý wrote: > > Dne 24. 06. 24 v 9:48 dop. Mattia Verga via devel napsal(a): > >> IMO, having the token stored in your password manager means going > >> from 2FA to 1FA effectively ;-) if someone gets access

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 9:28 AM Michael J Gruber wrote: > > Guinevere Larsen venit, vidit, dixit 2024-06-24 13:53:37: > > On 6/24/24 5:08 AM, Miroslav Suchý wrote: > > > Dne 24. 06. 24 v 9:48 dop. Mattia Verga via devel napsal(a): > > >> IMO, having the token stored in your password manager means

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kilian Hanich via devel
Am 24.06.24 um 09:48 schrieb Mattia Verga via devel: That said, even if the token is stored in the password manager, it is not cushy to be used with kerberos. I have been using 2FA for over a year now and I get used to, but it's clumsy to use it in Fedora infrastructure. I'd really like if we can

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kilian Hanich via devel
Am 24.06.24 um 13:53 schrieb Guinevere Larsen: On 6/24/24 5:08 AM, Miroslav Suchý wrote: Dne 24. 06. 24 v 9:48 dop. Mattia Verga via devel napsal(a): IMO, having the token stored in your password manager means going from 2FA to 1FA effectively ;-) if someone gets access to your password manager

Re: Uptodate builds for F40 FedoraMediaWriter and KDE LiveISOs ?

2024-06-24 Thread Peter Boy
> Am 24.06.2024 um 15:02 schrieb Arnie T via devel > : > > Hello, > > I'm setting up some F40 boxes for a client. > > Their Dev-box requirement is to install & use *current* stable release > versions of F40 & KDE. For running OS and any tools etc. > > I installed Fedora Media Writer from d

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Mattia Verga via devel
Il 17/06/24 22:20, Zbigniew Jędrzejewski-Szmek ha scritto: > Proven packagers, > > we changed [2,3] the FESCo policy document [1] for provenpackagers to say: > > "Provenpackagers SHOULD have two-factor-authentication (2FA) enabled for > their FAS accounts." > > This is not enforced or checked, but

Re: [Node.js] Stepping down as Node.js Maintainer in Fedora

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 4:07 AM Jan Staněk wrote: > > Hi Stephen! > > Stephen Gallagher writes: > > Just a reminder that I will be orphaning the nodejsXX packages in a > > little over a week. As of yet, no one has requested access to take it > > over. If anyone is going to do so, I encourage you

Re: [Node.js] Stepping down as Node.js Maintainer in Fedora

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 10:40 AM Stephen Gallagher wrote: > > On Mon, Jun 24, 2024 at 4:07 AM Jan Staněk wrote: > > > > Hi Stephen! > > > > Stephen Gallagher writes: > > > Just a reminder that I will be orphaning the nodejsXX packages in a > > > little over a week. As of yet, no one has requeste

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 15:27, Michael J Gruber wrote: Or else, all cloneable OTP apps would need to be disallowed as 2nd factors, and only physical tokens should count. FIDO2 is even worse than OTP since most (or even all) implementations are proprietary (for example, Android requires proprietary GMS t

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Chris Adams
Once upon a time, Stephen Gallagher said: > Remember that security is a spectrum, not an end-state. Every person > and environment makes a choice between how much security and how much > convenience is appropriate. If you want perfect security, you can > unplug your PC, fill it with concrete and d

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Stephen Smoogen
On Mon, 24 Jun 2024 at 10:39, Mattia Verga via devel wrote: > > Il 17/06/24 22:20, Zbigniew Jędrzejewski-Szmek ha scritto: > > Proven packagers, > > > > we changed [2,3] the FESCo policy document [1] for provenpackagers to say: > > > > "Provenpackagers SHOULD have two-factor-authentication (2FA) e

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Mattia Verga via devel
Il 24/06/24 16:54, Stephen Smoogen ha scritto: > The corner case which makes this ineffective is > ... Sure, system security is affected by user actions too, but considering that the alternative is to have the vast majority of users will continue ignoring 2FA because it is not handy, using some

Re: Uptodate builds for F40 FedoraMediaWriter and KDE LiveISOs ?

2024-06-24 Thread Arnie T via devel
> I think, you should download from > > https://fedoraproject.org/spins/kde/ > > and use FMW with the downloaded image or use balenaEtcher to write to the USB > stick > > > > > -- > Peter Boy > https://fedoraproject.org/wiki/User:Pboy > p...@fedoraproject.org Right. From that page I downl

java-*-openjdk-portable and the FTBFS policy

2024-06-24 Thread Miro Hrončok
Hello, I am about to send a reminder about Rawhide packages that were not successfully built on a supported Fedora release / fail top build for 2+ releases. Amongst the list of the packages, I see: java-1.8.0-openjdk-portable-1:1.8.0.412.b06-1.fc38.src java-11-openjdk-portable-1:11.0.

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread DJ Delorie
Kilian Hanich via devel writes: > One could argue that the "password manager file" is the "something you > have" thing. No, one cannot. The three factors in security are: 1. Something you know, which means other people do NOT know it. It exists in your brain and nowhere else. 2. Something

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Guinevere Larsen
On 6/24/24 10:27 AM, Michael J Gruber wrote: Guinevere Larsen venit, vidit, dixit 2024-06-24 13:53:37: On 6/24/24 5:08 AM, Miroslav Suchý wrote: Dne 24. 06. 24 v 9:48 dop. Mattia Verga via devel napsal(a): IMO, having the token stored in your password manager means going from 2FA to 1FA effect

Re: Uptodate builds for F40 FedoraMediaWriter and KDE LiveISOs ?

2024-06-24 Thread Kevin Fenzi
On Mon, Jun 24, 2024 at 03:23:43PM GMT, Arnie T via devel wrote: > > I think, you should download from > > > > https://fedoraproject.org/spins/kde/ > > > > and use FMW with the downloaded image or use balenaEtcher to write to the > > USB stick > > > > > > > > > > -- > > Peter Boy > > https:/

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kilian Hanich via devel
Am 24.06.24 um 17:51 schrieb DJ Delorie: Kilian Hanich via devel writes: One could argue that the "password manager file" is the "something you have" thing. No, one cannot. The three factors in security are: 1. Something you know, which means other people do NOT know it. It exists in y

Re: Uptodate builds for F40 FedoraMediaWriter and KDE LiveISOs ?

2024-06-24 Thread Peter Boy
> Am 24.06.2024 um 17:23 schrieb Arnie T via devel > : > >> I think, you should download from >> >> https://fedoraproject.org/spins/kde/ >> >> and use FMW with the downloaded image or use balenaEtcher to write to the >> USB stick >> >> >> >> >> -- >> Peter Boy >> https://fedoraproject.or

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread DJ Delorie
Kilian Hanich writes: > So, if we really don't count the password manager file because it can be > copied easily, one also cannot count the ones from from apps since they > can also be easily replicated. I agree. Hence "grudgingly accepted". -- ___ dev

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kevin Fenzi
On Mon, Jun 24, 2024 at 02:39:13PM GMT, Mattia Verga via devel wrote: > > Perhaps it's a stupid idea, but we already have ssh public keys stored > in fas, would it be possible for fkinit to use the private key as second > factor? That way, on a system which is considered secure (it has the > pr

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Leigh Scott
> I personally don't see why entering a otp once a week is such a > burden... but it does seem to be. ;( > > kevin It isn't just once. 1. kerberos 2. Web login on infra, bugzilla, bodhi, devel list and accounts If you do nightly shutdown you would need to enter it many times per week. --

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Dan Horák
On Mon, 24 Jun 2024 16:53:22 - "Leigh Scott" wrote: > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > kevin > > It isn't just once. > > 1. kerberos > 2. Web login on infra, bugzilla, bodhi, devel list and accounts > >

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Mattia Verga via devel
Messaggio originale 24/06/24 18:21, Kevin Fenzi ha scritto: > > I personally don't see why entering a otp once a week is such a > burden... but it does seem to be. ;( > Once a week? When I get a kerberos ticket with fkinit it expires after 24h. Is there a setting to cha

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Mattia Verga via devel
Messaggio originale 24/06/24 18:53, Leigh Scott ha scritto: > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > kevin > > It isn't just once. > > 1. kerberos > 2. Web login on infra, bugzilla, bodhi

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Dan Horák
On Mon, 24 Jun 2024 17:11:07 + Mattia Verga via devel wrote: > > Messaggio originale > 24/06/24 18:21, Kevin Fenzi ha scritto: > > > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > Once a week? Wh

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kevin Fenzi
On Mon, Jun 24, 2024 at 04:53:22PM GMT, Leigh Scott wrote: > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > kevin > > It isn't just once. > > 1. kerberos > 2. Web login on infra, bugzilla, bodhi, devel list and accounts > >

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Alexander Bokovoy
On Пан, 24 чэр 2024, Kevin Fenzi wrote: On Mon, Jun 24, 2024 at 02:39:13PM GMT, Mattia Verga via devel wrote: Perhaps it's a stupid idea, but we already have ssh public keys stored in fas, would it be possible for fkinit to use the private key as second factor? That way, on a system which is co

Re: java-*-openjdk-portable and the FTBFS policy

2024-06-24 Thread Jiri Vanek
hi! Yes, there is upcoming release in 17july, and in this release will be all built on f39. If there would be any intermittent release it would be already on f39 anyway. I do not have strong preference on exclude/rebuild. I was going by moreover middle path - to keep building on oldest supporte

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Alexander Bokovoy
On Пан, 24 чэр 2024, Leigh Scott wrote: I personally don't see why entering a otp once a week is such a burden... but it does seem to be. ;( kevin It isn't just once. 1. kerberos 2. Web login on infra, bugzilla, bodhi, devel list and accounts If you do nightly shutdown you would need to en

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 12:54 PM Leigh Scott wrote: > > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > kevin > > It isn't just once. > > 1. kerberos > 2. Web login on infra, bugzilla, bodhi, devel list and accounts Not really a

Re: java-*-openjdk-portable and the FTBFS policy

2024-06-24 Thread Miro Hrončok
On 24. 06. 24 19:16, Jiri Vanek wrote: hi! Yes,  there is upcoming release in 17july, and in this release will be all built on f39. If there would be any intermittent release it would be already on f39 anyway. I do not have strong preference on exclude/rebuild. I was going by moreover middl

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Daniel P . Berrangé
On Mon, Jun 24, 2024 at 05:11:07PM +, Mattia Verga via devel wrote: > > Messaggio originale > 24/06/24 18:21, Kevin Fenzi ha scritto: > > > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > Once a wee

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 1:11 PM Mattia Verga via devel wrote: > > > Messaggio originale > 24/06/24 18:21, Kevin Fenzi ha scritto: > > > > > I personally don't see why entering a otp once a week is such a > > burden... but it does seem to be. ;( > > > > Once a week? When I get

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Miro Hrončok
On 24. 06. 24 19:13, Kevin Fenzi wrote: tickets are valid for 24hours and can be renewed for 1 week. (Either via gnome online accounts or just 'kinit -R') How do I do that? $ fkinit ... all good ... later: $ klist Ticket cache: KCM:1000:. Default principal: churchy...@fedoraproject.org

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 1:30 PM Daniel P. Berrangé wrote: > > On Mon, Jun 24, 2024 at 05:11:07PM +, Mattia Verga via devel wrote: > > > > Messaggio originale > > 24/06/24 18:21, Kevin Fenzi ha scritto: > > > > > > > > I personally don't see why entering a otp once a week is

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Daniel P . Berrangé
On Mon, Jun 24, 2024 at 01:33:52PM -0400, Stephen Gallagher wrote: > On Mon, Jun 24, 2024 at 1:30 PM Daniel P. Berrangé > wrote: > > > > On Mon, Jun 24, 2024 at 05:11:07PM +, Mattia Verga via devel wrote: > > > > > > Messaggio originale > > > 24/06/24 18:21, Kevin Fenzi ha

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Stephen Gallagher
On Mon, Jun 24, 2024 at 1:30 PM Miro Hrončok wrote: > > On 24. 06. 24 19:13, Kevin Fenzi wrote: > > tickets are valid for 24hours and can be renewed for 1 week. (Either via > > gnome online accounts or just 'kinit -R') > > How do I do that? > > $ fkinit > ... all good ... > > later: > > $ klist >

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Matthew Miller
On Mon, Jun 24, 2024 at 03:41:19PM +0200, Kilian Hanich via devel wrote: > 1. You need to buy one (and not loose them). Sure, they aren't overly > expensive, but it's also not free. If we decide that this is a good idea, we might be able to get funding to distribute these to all proven packagers (

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Alexander Bokovoy
On Пан, 24 чэр 2024, Matthew Miller wrote: On Mon, Jun 24, 2024 at 03:41:19PM +0200, Kilian Hanich via devel wrote: 1. You need to buy one (and not loose them). Sure, they aren't overly expensive, but it's also not free. If we decide that this is a good idea, we might be able to get funding to

Re: Guidance on individual packages requiring x86_64-v2 baseline ?

2024-06-24 Thread Peter Robinson
On Mon, 24 Jun 2024 at 11:21, Vít Ondruch wrote: > > > Dne 21. 06. 24 v 18:27 Stephen Smoogen napsal(a): > > On Fri, 21 Jun 2024 at 07:27, Vít Ondruch wrote: > >> So what is the reason to not treat x86_64_v2 as different arch then > >> x86_64_v{1,3}. Why we keep having this discussion instead of

Re: java-*-openjdk-portable and the FTBFS policy

2024-06-24 Thread Jiri Vanek
Cool. TYVM! On Mon, 24 Jun 2024 at 19:27, Miro Hrončok wrote: > On 24. 06. 24 19:16, Jiri Vanek wrote: > > hi! > > > > Yes, there is upcoming release in 17july, and in this release will be > all > > built on f39. > > > > If there would be any intermittent release it would be already on f39 > an

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Tom Hughes via devel
On 24/06/2024 18:26, Stephen Gallagher wrote: Not really an issue if you have GSSAPI set up on your system. Such as by installing fedora-chromium-config-gssapi (for Chrome/Chromium users) or by using Firefox which is set up for GSSAPI out-of-the-box. I've never seen Firefox use my kerberos tic

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kevin Fenzi
On Mon, Jun 24, 2024 at 09:02:05PM GMT, Alexander Bokovoy wrote: > > BTW, the cheapest and verified to work with Fedora USB token I was able > to find is T2F2-NFC-Slim from Token2.eu: > https://www.token2.eu/shop/product/token2-t2f2-nfc-slim-fido2-u2f-and-totp-security-key > > The company actuall

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Leon Fauster via devel
Am 24.06.24 um 20:14 schrieb Tom Hughes via devel: On 24/06/2024 18:26, Stephen Gallagher wrote: Not really an issue if you have GSSAPI set up on your system. Such as by installing fedora-chromium-config-gssapi (for Chrome/Chromium users) or by using Firefox which is set up for GSSAPI out-of-th

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Kevin Fenzi
On Mon, Jun 24, 2024 at 09:09:58PM GMT, Leon Fauster via devel wrote: > Am 24.06.24 um 20:14 schrieb Tom Hughes via devel: > > On 24/06/2024 18:26, Stephen Gallagher wrote: > > > > > Not really an issue if you have GSSAPI set up on your system. Such as > > > by installing fedora-chromium-config-gs

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Otto Liljalaakso
24. kesäkuuta 2024 19.21.02 GMT+03:00 DJ Delorie kirjoitti: >Kilian Hanich writes: >> So, if we really don't count the password manager file because it can be >> copied easily, one also cannot count the ones from from apps since they >> can also be easily replicated. > >I agree. Hence "grudgin

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Vitaly Zaitsev via devel
On 24/06/2024 19:47, Matthew Miller wrote: If we decide that this is a good idea, we might be able to get funding to distribute these to all proven packagers (and perhaps more). Even to those countries that the US does not like? :-) -- Sincerely, Vitaly Zaitsev (vit...@easycoding.org) -- ___

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Simo Sorce
On Mon, 2024-06-24 at 21:09 +0200, Leon Fauster via devel wrote: > Am 24.06.24 um 20:14 schrieb Tom Hughes via devel: > > On 24/06/2024 18:26, Stephen Gallagher wrote: > > > > > Not really an issue if you have GSSAPI set up on your system. Such as > > > by installing fedora-chromium-config-gssapi

Reverse dependency query

2024-06-24 Thread Jerry James
I want to see what packages depend on antlr4. $ fedrq wr antlr4 antlr4-maven-plugin-4.10.1-15.fc41.noarch azure-cli-2.61.0-2.fc41.src coq-8.18.0-7.fc41.src golang-github-google-cel-0.12.4-7.fc40.src And repoquery agrees: $ dnf --repo=rawhide --repo=rawhide-source repoquery --whatrequires antlr4

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Gary Buhrmaster
On Mon, Jun 24, 2024 at 6:02 PM Alexander Bokovoy wrote: > BTW, the cheapest and verified to work with Fedora USB token I was able > to find is T2F2-NFC-Slim from Token2.eu: > https://www.token2.eu/shop/product/token2-t2f2-nfc-slim-fido2-u2f-and-totp-security-key When I was looking for "cheap",

Re: Reverse dependency query

2024-06-24 Thread Fabio Valentini
On Mon, Jun 24, 2024 at 10:48 PM Jerry James wrote: > > I want to see what packages depend on antlr4. > > $ fedrq wr antlr4 > antlr4-maven-plugin-4.10.1-15.fc41.noarch > azure-cli-2.61.0-2.fc41.src > coq-8.18.0-7.fc41.src > golang-github-google-cel-0.12.4-7.fc40.src > > And repoquery agrees: > > $

Re: Reverse dependency query

2024-06-24 Thread Miro Hrončok
On 24. 06. 24 23:00, Fabio Valentini wrote: On Mon, Jun 24, 2024 at 10:48 PM Jerry James wrote: I want to see what packages depend on antlr4. $ fedrq wr antlr4 antlr4-maven-plugin-4.10.1-15.fc41.noarch azure-cli-2.61.0-2.fc41.src coq-8.18.0-7.fc41.src golang-github-google-cel-0.12.4-7.fc40.sr

Re: Reverse dependency query

2024-06-24 Thread Jerry James
On Mon, Jun 24, 2024 at 3:01 PM Fabio Valentini wrote: > It looks like the problem is actually on the sympy side, not with your query. > > The latest "sympy.src" package does not have a dependency on antlr4: > https://koji.fedoraproject.org/koji/rpminfo?rpmID=38863151 So ...`%ifarch %{java_arches

Re: Reverse dependency query

2024-06-24 Thread Jerry James
On Mon, Jun 24, 2024 at 3:19 PM Miro Hrončok wrote: > This seems like the traditional "the SRPM was built on i686" problem. If I click through to the buildSRPMFromSCM task, I arrive here: https://koji.fedoraproject.org/koji/taskinfo?taskID=118928877 which says that task was executed on buildvm-

Re: 2FA policy for provenpackagers is now active

2024-06-24 Thread Gary Buhrmaster
On Mon, Jun 24, 2024 at 5:48 PM Matthew Miller wrote: > > If we decide that this is a good idea, we might be able to get funding to > distribute these to all proven packagers (and perhaps more). > FD: I am *strongly* in favor of FIDO2 support. As I recall from a previous query, there are (aroun

Re: Reverse dependency query

2024-06-24 Thread Fabio Valentini
On Mon, Jun 24, 2024 at 11:28 PM Jerry James wrote: > > On Mon, Jun 24, 2024 at 3:19 PM Miro Hrončok wrote: > > This seems like the traditional "the SRPM was built on i686" problem. > > If I click through to the buildSRPMFromSCM task, I arrive here: > > https://koji.fedoraproject.org/koji/taskinf

Re: Reverse dependency query

2024-06-24 Thread Miro Hrončok
On 24. 06. 24 23:27, Jerry James wrote: On Mon, Jun 24, 2024 at 3:19 PM Miro Hrončok wrote: This seems like the traditional "the SRPM was built on i686" problem. If I click through to the buildSRPMFromSCM task, I arrive here: https://koji.fedoraproject.org/koji/taskinfo?taskID=118928877 whi

Re: Reverse dependency query

2024-06-24 Thread Jerry James
On Mon, Jun 24, 2024 at 3:43 PM Miro Hrončok wrote: > Yes. Except I don't know if it's truly random. In that case, given the ongoing effort to build fewer packages for i386, we ought to exclude i386 when choosing an SRPM to promote (unless it is the ONLY architecture for which the package is buil

Following up on: Three steps we could take to make supply chain attacks a bit harder

2024-06-24 Thread Gordon Messmer
Now that I've packaged the GEF gdb extension (package "gdb-gef" in Rawhide) which provides the "got-audit" command, I wanted to ask again whether there's interest in monitoring critical packages for signs of GOT tampering. The "got-audit" gdb command examines a running process to print a list

Re: Following up on: Three steps we could take to make supply chain attacks a bit harder

2024-06-24 Thread Alexander Bokovoy
On Пан, 24 чэр 2024, Gordon Messmer wrote: Now that I've packaged the GEF gdb extension (package "gdb-gef" in Rawhide) which provides the "got-audit" command, I wanted to ask again whether there's interest in monitoring critical packages for signs of GOT tampering. The "got-audit" gdb command