[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2008-03-23 23h59 UTC

2008-03-23 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed from the tree, for the week ending 2008-03-23 23h59 UTC. Removals: games-kids/tuxtype2 2008-03-17 03:04:02 mr_bones_ games-fps/quake3-wop2008-03-17 23:23:28 nyhm Additions: dev-p

Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

2008-03-23 Thread Ciaran McCreesh
On Sun, 23 Mar 2008 20:45:24 +0200 "Alon Bar-Lev" <[EMAIL PROTECTED]> wrote: > On 3/23/08, Ciaran McCreesh <[EMAIL PROTECTED]> wrote: > > > Why? A simple USE flag should be enough, if set use caps, if not > > > use current. > > > > > > A user turns the use flag on, the ebuild creates files using

[gentoo-dev] Escaping+Quoting notes for linux-mod.eclass

2008-03-23 Thread Robin H. Johnson
Hi folks, Just a quick note about Escaping+Quoting stuff relevant to the usage of linux-mod.eclass. Up until recently, linux-mod.eclass had a bug where if you passed variables inside the $BUILD_PARAMS variable, AND those inner variables contained spaces, they would not be passed to Make correctly

Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

2008-03-23 Thread Alon Bar-Lev
On 3/23/08, Ciaran McCreesh <[EMAIL PROTECTED]> wrote: > > Why? A simple USE flag should be enough, if set use caps, if not use > > current. > > > A user turns the use flag on, the ebuild creates files using caps > rather than set*id, the package manager merges it by copying the file > and the

Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

2008-03-23 Thread Ciaran McCreesh
On Sun, 23 Mar 2008 20:30:33 +0200 "Alon Bar-Lev" <[EMAIL PROTECTED]> wrote: > > Needs package manager support. Effectively this requires an EAPI > > bump, since ebuilds need to know whether they can rely upon caps > > being preserved across a merge or whether they have to degrade to a > > setuid b

Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

2008-03-23 Thread Alon Bar-Lev
On 3/23/08, Ciaran McCreesh <[EMAIL PROTECTED]> wrote: > On Sun, 23 Mar 2008 20:21:29 +0200 > "Alon Bar-Lev" <[EMAIL PROTECTED]> wrote: > > linux-2.6.24 supports file based capabilities via: > > CONFIG_SECURITY_FILE_CAPABILITIES > > > > > This will provide more secured installation for users wi

Re: [gentoo-dev] [SECURITY] Minimizing the suid usage

2008-03-23 Thread Ciaran McCreesh
On Sun, 23 Mar 2008 20:21:29 +0200 "Alon Bar-Lev" <[EMAIL PROTECTED]> wrote: > linux-2.6.24 supports file based capabilities via: > CONFIG_SECURITY_FILE_CAPABILITIES > > This will provide more secured installation for users with a little > effort, less usage of root user. > > What do you think?

[gentoo-dev] [SECURITY] Minimizing the suid usage

2008-03-23 Thread Alon Bar-Lev
Hello All, linux-2.6.24 supports file based capabilities via: CONFIG_SECURITY_FILE_CAPABILITIES This enables the use of filesystem attributes in order to store per executable capabilities list, more information at [1]. This enables improved security level for people who don't wish to move into S

[gentoo-dev] Again, GSOC Mentor Signup is open, please apply soon.

2008-03-23 Thread Alec Warner
I'm about to start talking to all the mentors about this years GSOC event. If you would like to be a mentor[1] please sign up[2] now. We currently have six mentors who have applied and I have only confirmed four of them. I expect to take on only (number of mentors) / 2 projects, which means only

Re: [gentoo-dev] Why no updates on delay of 2008.0 release

2008-03-23 Thread Ben de Groot
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Richard Freeman wrote: |>> ... I don't think there is any excuse not to update the published |>> release schedule,... | | | |> the update is simple: the untimely and quite unexpected surgical |> "complication" resulting in the death of my mother has

Re: [gentoo-dev] Why no updates on delay of 2008.0 release

2008-03-23 Thread Ciaran McCreesh
On Sun, 23 Mar 2008 08:17:45 -0400 Richard Freeman <[EMAIL PROTECTED]> wrote: > Lesson: Ask nicely before going into attack mode. Don't assume the > worst. Consequently, avoid putting foot in mouth... Lesson: Don't put all your eggs in one basket. -- Ciaran McCreesh signature.asc Descripti

Re: [gentoo-dev] Why no updates on delay of 2008.0 release

2008-03-23 Thread Richard Freeman
Chrissy Fullam wrote: > Somebody else wrote: ... I don't think there is any excuse not to update the published release schedule,... the update is simple: the untimely and quite unexpected surgical "complication" resulting in the death of my mother has set back a number of schedules, Lesso

[gentoo-dev] lastrite: media-sound/opmixer

2008-03-23 Thread Samuli Suominen
# Samuli Suominen <[EMAIL PROTECTED]> (23 Mar 2008) # Last release 1 Jul 2001 with support for OSS and # GTK+-1.2 with GTKMM-1.2. Masked for removal in # 30 days, use one of the many replacements. media-sound/opmixer -- gentoo-dev@lists.gentoo.org mailing list