Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-08 Thread Arttu V.
On 12/8/09, Alan McKinnon alan.mckin...@gmail.com wrote: Let me emphasise yet again: the way I do things has been successful on 2 machines for more than 6 years; it's others who have problems doing it their way regularly seek advice on this list as a result. Let me correct you there:

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Sun, 6 Dec 2009 11:53:41 +0900, daid kahl wrote: On that note, I'd like to ask a question I was going to post or email about. Can I comment the world file. More interestingly, is there a way to pass portage a comment to stick in world above the package? This would be really damn useful.

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Sat, 05 Dec 2009 19:15:29 -0600, Dale wrote: Good catch Volker. I didn't notice that part. He needs to become very familiar with the -1 option but even that is not good in every case. If it is a package that needs to be in world, then that option shouldn't be used either otherwise a

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: I know that from my home-made list of pkgs which I have installed, where they are marked with 'W' system pkgs with 'S'. Yes, I do have to keep it upto-date as I do emerges. One of the major deficiencies of Gentoo is that it doesn't

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Dale
Neil Bothwick wrote: On Sat, 05 Dec 2009 19:15:29 -0600, Dale wrote: Good catch Volker. I didn't notice that part. He needs to become very familiar with the -1 option but even that is not good in every case. If it is a package that needs to be in world, then that option shouldn't be used

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Philip Webb
091207 Neil Bothwick wrote: On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: I know that from my home-made list of pkgs which I have installed, where they are marked with 'W' system pkgs with 'S'. Yes, I do have to keep it upto-date as I do emerges. One of the major deficiencies of

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Alan McKinnon
On Tuesday 08 December 2009 00:46:18 Philip Webb wrote: 091207 Neil Bothwick wrote: On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: I know that from my home-made list of pkgs which I have installed, where they are marked with 'W' system pkgs with 'S'. Yes, I do have to keep it

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Dale
Alan McKinnon wrote: On Tuesday 08 December 2009 00:46:18 Philip Webb wrote: 091207 Neil Bothwick wrote: On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: I know that from my home-made list of pkgs which I have installed, where they are marked with 'W' system pkgs with

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Mon, 7 Dec 2009 17:46:18 -0500, Philip Webb wrote: One of the major deficiencies of Gentoo is that it doesn't provide such a file automatically. emerge -p @system emerge -p @world root:501 ~ emerge -p @system !!! '@system' is not a valid package atom. !!! Please

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Dale
daid kahl wrote: I could take a whole day typing in exactly what I do, but I assumed the otherwise intelligent subscribers to the list would realise that I add '-1' to those pkgs which are not in 'world'. My 'world' file contains 112 entries, incl 28 'sys' + 35 'kde'. Really, does

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Peter Humphrey
On Saturday 05 December 2009 16:26:48 I wrote: * The current test system had a series of KDE-4 problems, which I thought must have been caused by the patch bug, but simply remerging everything installed since then hadn't fixed them. Not only has it not fixed the earlier problems - now I have

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Peter Humphrey wrote: On 5/12/2009, Philip Webb purs...@ca.inter.net wrote: Anyway, don't do testing on the machine you use for everyday computing. If you want to get into testing, use a dedicated machine for it. I've been using a separate partition on an

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Philip Webb
091206 Alan McKinnon wrote: On Saturday 05 December 2009 21:09:50 Philip Webb wrote: Please read what I said hopefully think briefly before responding. If the pkg is already in 'world', it's 'emerge pkg'; if not -- the more frequent case -- , it's 'emerge -1 pkg'. That keeps everything in

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Philip Webb wrote: Also, I never do a bald 'emerge world'. I look thro' the output of 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which have changed, run 'emerge -Dup world' to see what order of emerging is recommended, then

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Dale
Volker Armin Hemmann wrote: On Samstag 05 Dezember 2009, Philip Webb wrote: Also, I never do a bald 'emerge world'. I look thro' the output of 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which have changed, run 'emerge -Dup world' to see what order of emerging is

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Neil Bothwick
On Sat, 5 Dec 2009 14:31:16 +0100, Volker Armin Hemmann wrote: The easy way to avoid problems are BINPKGs. Use it and a downgrade in case of problems only takes seconds. Install demerge too and you can roll back to pre-breakage very easily. -- Neil Bothwick Old hitchhikers never die-they

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread daid kahl
 2  pieces of advice to avoid such problems: (1) never use the 'testing' versions of system pkgs; (2) never run 'emerge world' without the '-p' flag. I kindly disagree. ~[arch] is testing for Gentoo ebuild.  It's considered stable upstream. This was an upstream bug, not a Gentoo bug. Yes,

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Neil Bothwick wrote: On Sat, 5 Dec 2009 14:31:16 +0100, Volker Armin Hemmann wrote: The easy way to avoid problems are BINPKGs. Use it and a downgrade in case of problems only takes seconds. Install demerge too and you can roll back to pre-breakage very easily.

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Peter Humphrey
On 5/12/2009, Philip Webb purs...@ca.inter.net wrote: Anyway, don't do testing on the machine you use for everyday computing. If you want to get into testing, use a dedicated machine for it. I've been using a separate partition on an existing machine to run a ~amd64 system for evaluation, and

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Neil Bothwick
On Sat, 05 Dec 2009 08:10:15 -0600, Dale wrote: Good catch Volker. I didn't notice that part. He needs to become very familiar with the -1 option but even that is not good in every case. If it is a package that needs to be in world, then that option shouldn't be used either otherwise a

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Philip Webb
091205 Volker Armin Hemmann wrote: On Samstag 05 Dezember 2009, Philip Webb wrote: Also, I never do a bald 'emerge world'. I look thro' the output of 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which have changed, run 'emerge -Dup world' to see what order of emerging

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Philip Webb wrote: 091205 Volker Armin Hemmann wrote: On Samstag 05 Dezember 2009, Philip Webb wrote: Also, I never do a bald 'emerge world'. I look thro' the output of 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which have changed,

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Dale
Neil Bothwick wrote: On Sat, 05 Dec 2009 08:10:15 -0600, Dale wrote: Good catch Volker. I didn't notice that part. He needs to become very familiar with the -1 option but even that is not good in every case. If it is a package that needs to be in world, then that option shouldn't be used

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Philip Webb
091205 Dale wrote: Neil Bothwick wrote: He's updating, so packages that need to be in world are already there. If he is using the command he typed in, his world file is going to be huge. He is doing the updates individually without a -u or a -1 or anything else. That means every time he

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread daid kahl
I could take a whole day typing in exactly what I do, but I assumed the otherwise intelligent subscribers to the list would realise that I add '-1' to those pkgs which are not in 'world'. My 'world' file contains  112  entries, incl  28  'sys' +  35  'kde'. Really, does something like that

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Alan McKinnon
On Saturday 05 December 2009 21:09:50 Philip Webb wrote: Please read what I said hopefully think briefly before responding. If the pkg is already in 'world', it's 'emerge pkg'; if not -- the more frequent case -- , it's 'emerge -1 pkg'. That keeps everything in order (yes, you have to watch

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Alan McKinnon
On Saturday 05 December 2009 22:14:48 Volker Armin Hemmann wrote: And world is important. world is the difference between 'installed manually' and 'just a dependency'. What you are doing fucks this up. Result: portage can not figure which package was installed because you want it and which

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-04 Thread daid kahl
 2  pieces of advice to avoid such problems: (1) never use the 'testing' versions of system pkgs; (2) never run 'emerge world' without the '-p' flag. I kindly disagree. ~[arch] is testing for Gentoo ebuild. It's considered stable upstream. This was an upstream bug, not a Gentoo bug. And,

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-04 Thread Philip Webb
091205 daid kahl wrote:  2  pieces of advice to avoid such problems: (1) never use the 'testing' versions of system pkgs; (2) never run 'emerge world' without the '-p' flag. I kindly disagree. Thanks for the kindly: I thought I'd walked into a high-school locker room. ~[arch] is testing for

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-04 Thread Dale
Philip Webb wrote: The defective version of 'patch' had got into 'testing', where the only remaining problems are supposed to be in the ebuild; in fact in this case, there was still a serious problem upstream that version of 'patch' has been re-masked (I believe). Anyway, don't do testing on

[gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Nikos Chantziaras
On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given: http://blog.flameeyes.eu/2009/12/01/gentoo-service-announcement-keep-clear- of-gnu-patch-2-6 sigh I emerged patch-2.60

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Neil Bothwick
On Wed, 02 Dec 2009 15:45:21 +0200, Nikos Chantziaras wrote: Yep, this bug was a major annoyance for me too. I emerged patch-2.6 on November 15 and since then, being on ~amd64, a *lot* of other packages. After downgrading, I needed to rebuild about 300 packages, including all of KDE4,

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Kevin O'Gorman
On Wed, Dec 2, 2009 at 5:45 AM, Nikos Chantziaras rea...@arcor.de wrote: On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given:

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Philip Webb
091202 Nikos Chantziaras wrote: On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given: http://blog.flameeyes.eu/2009/12/01/gentoo-service-announcement-keep-clear-of-gnu-patch-2-6

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Alan McKinnon
On Wednesday 02 December 2009 16:48:16 Philip Webb wrote: 091202 Nikos Chantziaras wrote: On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given:

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Jesús Guerrero
On Wed, 2 Dec 2009 17:30:37 +0200, Alan McKinnon alan.mckin...@gmail.com wrote: Of course I ran emerge -p. Well actually I run emerge -a but the effect is the same - see what's going to be installed before it's installed. Until a week ago no-one knew the effects patch-2.6.0 would have so

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Volker Armin Hemmann
On Mittwoch 02 Dezember 2009, Neil Bothwick wrote: On Wed, 02 Dec 2009 15:45:21 +0200, Nikos Chantziaras wrote: Yep, this bug was a major annoyance for me too. I emerged patch-2.6 on November 15 and since then, being on ~amd64, a *lot* of other packages. After downgrading, I needed to

[gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Nikos Chantziaras
On 12/02/2009 04:48 PM, Philip Webb wrote: 091202 Nikos Chantziaras wrote: On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given:

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Neil Bothwick
On Wed, 2 Dec 2009 09:48:16 -0500, Philip Webb wrote: 2 pieces of advice to avoid such problems: (1) never use the 'testing' versions of system pkgs; Then how do they get tested? (2) never run 'emerge world' without the '-p' flag. What difference does this make? It shows an update for

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread felix
On Wed, Dec 02, 2009 at 09:48:16AM -0500, Philip Webb wrote: 2 pieces of advice to avoid such problems: (1) never use the 'testing' versions of system pkgs; (2) never run 'emerge world' without the '-p' flag. (0) Never speak on that which you know not. -- ... _._. ._ ._. .

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Stefan G. Weichinger
Alan McKinnon schrieb: Most folk now have to rebuild 70 - 300 packages, I'm stuck with potentially 1472 sigh I feel with you ... fortunately the cpus should do it on their own, accompanied by some fans ;-) - Any idea how to elegantly split that job into some digestible chunks? The various

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Alan McKinnon
On Wednesday 02 December 2009 19:59:35 Stefan G. Weichinger wrote: Alan McKinnon schrieb: Most folk now have to rebuild 70 - 300 packages, I'm stuck with potentially 1472 sigh I feel with you ... fortunately the cpus should do it on their own, accompanied by some fans ;-) - Any idea

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Stefan G. Weichinger
Stefan G. Weichinger schrieb: Seems as if I have to simply manage that to-rebuild-list myself .. my rebuild-list crashed at kde-misc/kdnssd-avahi, interesting on a gnome-system ... k3b depends on kdelibs and I have useflag avahi for that, hmmm ... I removed it from my list and emerge the