rpm5 package verification and md5sum of config files

Package verification by rpm-5.4.10-18 always shows config files as modified (md5sum changed) even though they are not modified. For example: root@pld:~# rpm -q --qf '[%{filemd5s} %{filenames}\n]' systemd-units | grep /etc/systemd/system-preset/default.preset ; md5sum

Re: rpm5 package verification and md5sum of config files

Jeffrey Johnson wrote: The comparison is against the file on disk (and includes check of mtime) md5sum /etc/wgetrc (or whatever digest you are using: the '5' is mostly hysterical these days) Ok, I know that comparison is against the file on disk but that's what it's all about. Why rpm -V

Re: rpm5 package verification and md5sum of config files

Jeffrey Johnson wrote: FYI: the --nomd5 option changed to --nofdigests like 4-5y ago. If there is still legacy compatibility for --nomd5, then its time to rip it out imho: I see no reason to maintain myriad confusing alternative invocations for changes made years ago. What's the difference...

Re: rpm5 package verification and md5sum of config files

Jan Rękorajski wrote: Adam, which bug is fixed by your 1-liner? The original one: rpm shows bad md5 digest of files marked as `%verify(no md5)' (config files) although they are not modified. Second case (--nomd5 shows that all files are modified) was only a proof that there may be a general bug

Re: rpm5 package verification and md5sum of config files

Jan Rękorajski wrote: I'm afraid your patch doesn't work for me, I'm still getting bad md5 for config files: $ rpm -V wget ..5. c /etc/wgetrc Am I missing something? Hmmm, I don't know. Maybe I changed something else during debugging and forgot about it. Give me some time, I will

Re: rpm5 package verification and md5sum of config files

Jan Rękorajski wrote: I'm afraid your patch doesn't work for me, I'm still getting bad md5 for config files: $ rpm -V wget ..5. c /etc/wgetrc Am I missing something? Ok, I made investigation one more time and probably know what happened. The patch I sent is against build/files.c

Re: rpm5 package verification and md5sum of config files

Jan Rękorajski wrote: Quick question, does passing '--nohmacs' option give the same effect as your patch to lib/verify.c? In that case we could just make it default and add '--hmacs' option. No. --nohmacs option disables checking hmac entirely even for truly modified files (with hmac verify

Re: Recommended Ciphersuite

Jan Rękorajski wrote: Our current ciphers list is: ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM instead of putting there random list of ciphers we can achieve the same effect just by disabling the weak ones, like this:

Re: [packages/grep] - move from GREP_OPTIONS environmental variable to alias due to its obsolescence

Elan Ruusamäe wrote: a reference to such obsolescence ? Did you try to run grep 2.21 with GREP_OPTIONS set even once? Please try it and search sources for message you will see, before asking such a question. this definately is not the same thing as it was before! restore previous behaviour

Re: [packages/grep] - move from GREP_OPTIONS environmental variable to alias due to its obsolescence

Jacek Konieczny wrote: Such a shell script for any interactive shell started, just because one or two PLD users have uncommented the /etc/env.d/GREP_OPTIONS we might have wrongly introduced long time ago? There are no difference between putting grep's options into alias and into $GREP_OPTIONS

Re: [packages/sqlite3] drop pointless year macro

glen wrote: commit 9ff1c54dc27e48a465cfd09860bd031e6923c26a Author: Elan Ruusamäe g...@delfi.ee Date: Thu Feb 26 22:08:01 2015 +0200 drop pointless year macro sqlite3.spec | 7 +++ 1 file changed, 3 insertions(+), 4 deletions(-) --- diff --git a/sqlite3.spec b/sqlite3.spec

Re: [packages/ntp] - fix compile error

Elan Ruusamäe wrote: such stdlib changes can be actually written with puts: puts(Unity.XFAILMessage); or sometimes: fputs(Unity.XFAILMessage, stderr); As you wish... ___ pld-devel-en mailing list pld-devel-en@lists.pld-linux.org

Re: [packages/ntp] - fix compile error

Jakub Bogusz wrote: puts adds newline, so puts(str) is equivalent of printf(%s\n, str), but printf(str). You can replace printf(str) with fputs(str, stdout). (fputs doesn't add newline) Everybody will be satisfied with fputs() or there is antoher proposal?

Re: consolekit

Elan Ruusamäe wrote: > Nov 2 20:05:20 rotten-fruit console-kit-daemon[5590]: WARNING: Couldn't > read /proc/24047936/environ: Failed to open file '/proc/24047936/environ': > No such file or directory > > anyone seeing this with non-systemd desktop? > i'm using lightdm for xinit manager Yes,

Re: consolekit

Elan Ruusamäe wrote: > after polkit problem gets solved, i was struggling to with upower package > should i use: > > upower-libs-0.99.3-2 or upower-pm-utils-libs-0.9.23-1 I fork upower-pm-utils package from upower over a year ago because of problems with suspending/hibernating. Dbus methods

Re: consolekit

Elan Ruusamäe wrote: > i would remove that hack, but i don't have anything to test with. don't > know why you couldn't just provide .so.1 for legacy package, as new one > uses .so.3 anyway and can be parallel installed? Ok, I fiexd upower-pm-utils to allow coexistence of upower-libs and

Re: [packages/GeoIP-db-IPASNum] updated to 2016.06.06

glen wrote: > commit dbd877a6d696b54bd4ba3feb7a7c62034235792d > Author: Elan Ruusamäe > Date: Wed Jun 8 01:04:09 2016 +0300 > > updated to 2016.06.06 > > GeoIP-db-IPASNum.spec | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > --- > diff --git

Re: openssl, SSL2, KDE

Elan Ruusamäe wrote: > i don't know, doesn't that make openssl version vulnerable to DROWN attack? If I understood security advisory correctly (http://openssl.org/news/secadv/20160301.txt), there should be no problems with 1.0.2g unless client/server uses SSLv2 or SSLv2 ciphersuites (that are

kwin crashes when calibre is spawned

Under KDE4 on x86-64, when calibre is started, kwin crashes: Program received signal SIGSEGV, Segmentation fault. XVisualIDFromVisual (visual=0x0) at Misc.c:60 60 return visual->visualid; (gdb) bt #0 XVisualIDFromVisual (visual=0x0) at Misc.c:60 #1 0x7faa274daca3 in

ruby-mail conflicts

poldek:/all-avail> freshen ruby-mail Processing dependencies... ruby-mail-2.5.4-3.noarch obsoleted by ruby-mail-2.6.4-1.noarch error: ruby-mail-2.6.4-1.noarch (cap ruby-mail = 2.6.4-1) conflicts with installed ruby-rails-3.2.19-3.noarch (ruby-mail >= 2.6) There are 1 package to install, 1 to

64-bit binaries in /usr/lib

Simple question: why have some packages their arch-dependent executables placed in /usr/lib directory on x86-64 architecture? What principle determines that these binaries are forced to be in /usr/lib instead of /usr/lib64? ___ pld-devel-en mailing list

Re: 64-bit binaries in /usr/lib

Elan Ruusamäe wrote: > every package probably has reason, given examples it would be easier to > explain. $ rpm -qf `find {/usr,}/lib -type f -perm -0100 | xargs file | grep 'ELF 64-bit LSB executable' | cut -f1 -d:` | sort -u ConsoleKit-0.4.6-3.x86_64 cups-filters-1.8.3-3.x86_64

Broken openssl man pages

$ rpm -q openssl-tools openssl-tools-1.0.2n-1.x86_64 $ man 1 openssl-x509 man: /usr/share/man/man1/openssl-x509.1 is self referencing No manual entry for openssl-x509 in section 1 $ man openssl-s_client man: /usr/share/man/man1/openssl-s_client.1 is self referencing No manual entry for

manual pages file names conflict in openssl 1.1 and heimdal 7.5

File names of manual pages for functions in openssl 1.1 conflict with its equivalents in heimdal 7.5. Example: file /usr/share/man/man3/DES_cbc_cksum.3 from install of openssl-devel-1.1.0h-1.x86_64 conflicts with file from package heimdal-devel-7.5.0-2.x86_64 file

Re: manual pages file names conflict in openssl 1.1 and heimdal 7.5

Jan Rękorajski wrote: > That is the right solution in this case. > I added that prefix for DES_* man pages in heimdal. Ok, thanks, but this is not DES_* man pages issue only. I put them only as example. I commited fix for others, too. ___ pld-devel-en

Re: [packages/bind] - compact root.hint with root zone NSes only taken from another source; there is no need for such hu

Arkadiusz Miśkiewicz wrote: > On Monday 23 of July 2018, adwol wrote: > > commit 065091cf865bc6f8b14417f31729c7a77f641b98 > > Author: Adam Osuchowski > > Date: Mon Jul 23 10:39:28 2018 +0200 > > > > - compact root.hint with root zone NS

Re: [packages/rc-scripts] - up to 0.4.17

Arkadiusz Miśkiewicz wrote: > On 04/09/2018 17:33, adwol wrote: > >> @@ -260,7 +252,6 @@ done >> %files >> %defattr(644,root,root,755) >> -%doc ChangeLog >> %doc doc/*.txt doc/template.init >> %doc sysconfig/interfaces/data/chat-ppp* >> %doc sysconfig/interfaces/ifc* > > Where did

Re: openssl 1.1.1 rebuild - need for help

Arkadiusz Miśkiewicz wrote: > openssl 1.1.1 rebuild, if anyone wants to help here is TODO list: > > http://ep09.pld-linux.org/~pldth/qa.php?q=main-ready-test > > Examples on how to fix things are at packages/*/openssl.patch mostly. Also > patches sometimes in debian, archlinux or upstream git of

Re: openssl again makes php5.3 crash

Arkadiusz Miśkiewicz wrote: > I wasn't able to find the cause of this. Compared ext/openssl with 5.4 > (which doesn't segfault) and can't find the problem. > > Even backported ext/openssl from 5.4 to 5.3 still gets me segfaulting > php 5.3. > > So I think the problem is solved outside

samba 4.15.2 symbol version mismatch

Samba 4.15.2-1 from th-test requires SAMBA_4.13.9 symbol root@pldtest1:~# rpm -q samba samba-4.15.2-1.x86_64 root@pldtest1:~# smbd smbd: /usr/lib64/samba/libsamba-security-samba4.so: version `SAMBA_4.13.9' not found (required by /usr/lib64/libsmbldap.so.2) smbd:

xorg-font-font-adobe-75dpi package potential corruption

There is a problem with xorg-font-font-adobe-75dpi package during install: root@pldtest:~# ipoldek install xorg-font-font-adobe-75dpi Loading [pndir]th... Loading [pndir]th... 30648 packages read Processing dependencies... There are 1 package to install: A