Re: Captive portal detection on wired connections - bug or feature?

2015-03-26 Thread Dan Winship
On 03/26/2015 12:53 PM, Adam Williamson wrote:
 You can edit /etc/NetworkManager/conf.d/20-connectivity-fedora.conf 
 to disable it.
 
 It would probably be better (if NM respects it) to add a higher-
 numbered file to override it; that way you aren't changing the 
 contents of a packaged file.

Yes, that will work (although the whole point of putting that file into
a separate package was that you were supposed to be able to uninstall
the package if you didn't want it).

-- Dan

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: FESCO request to revert password confirmation change in F22

2015-03-09 Thread Dan Winship
On 03/06/2015 06:55 PM, Michael Catanzaro wrote:
 Well... yes, I suppose if you've left your computer on and locked, and
 the attacker wants to make sure you do not notice the reboot, or wants
 to get a RAM dump that would be lost when shut down (e.g. for my
 gnome-keyring passwords), then there is some benefit, but to a quite
 limited extent IMO: the attacker is still limited by the speed at which
 PAM and gdm allow you to try logging in. Every guess takes something
 like three seconds. So I think a weak password suffices.

*cough*
https://bugzilla.gnome.org/show_bug.cgi?id=731616
*cough*

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: initscripts

2015-01-23 Thread Dan Winship
On 01/23/2015 10:53 AM, Reindl Harald wrote:
 on servers and static machines you don't need any dynamic network
 configuration

which is why NM in F22 will have a configure-and-quit mode for such
machines

-- Dan

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Comps change proposal: NetworkManager subpackages

2014-06-24 Thread Dan Winship
On 06/20/2014 08:25 PM, Adam Williamson wrote:
 AIUI, the split in NM split off:
 
 * wifi support into NetworkManager-wifi
 * bluetooth (DUN and PAN? didn't one get dropped? i forget) connection
 support into NetworkManager-bluetooth
 * cellular modem support into NetworkManager-wwan
 * Direct-connected, old-school ADSL modems (not the kind that just make
 the connection look like ethernet) into NetworkManager-adsl
 
 I figured that 'typical' client installs of Fedora are likely to still
 want these features.

...

 Note that this patch wouldn't include 'networkmanager-submodules' in any
 of the server package groups.

FYI note that we're about to split out team support into
NetworkManager-team, which would be primarily useful on servers. (Team
support is getting broken out because it depends on external packages;
bridge and bond support will remain in core.)

-- Dan

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Enabling -Werror=format-security by default

2013-11-20 Thread Dan Winship

On 11/20/2013 11:13 AM, Jerry James wrote:

And the very first package I maintain that appears on that list, abe,
is an interesting one.  The game has an internal function,
path_sprintf(), which is static in Game.c.  All callers of that
function are visible in the same file, and all pass constant strings
into the function, which passes those constant strings to sprintf().
The function's purpose is to produce a pathname for a file of interest
to the caller in the game's installed location.  It's too bad that
gcc's analysis cannot span function calls inside a compilation unit.
There really is nothing wrong with this code.


If you change its prototype to:

static void path_sprintf (char *path, char *format, ...) 
__attribute__((__format__(__printf, 2, 3)));


(and update it to use varargs and vsprintf() instead of sprintf())

then the warnings will go away, because gcc will now know that it's a 
function that behaves like printf(), with argument 2 being the format 
string and argument 3 being the ..., and so then it can do the 
-Wformat-security checking at each of the path_sprintf() callpoints. 
(And you also get warnings when the arguments don't match the format 
string, like you would if you were calling sprintf() directly.) (And now 
you can use formats other than a single %d in the future if you want...)


-- Dan

--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct

Re: Fixing proxy support in Fedora (was Re: Orphaning few packages)

2013-06-06 Thread Dan Winship
On 06/06/2013 04:41 PM, David Woodhouse wrote:
 I think the existing libproxy API is sane enough.

It could be better. But pacrunner's D-Bus API looks fine (mostly because
by using D-Bus you get asynchrony and cancellability for free).

It would be nice if it exposed the Method from
CreateProxyConfiguration as a property. Then if it's direct, you know
you don't even have to bother calling, and if it's manual, you know
that once you get the proxy for a particular URI, you don't have to call
again for that URI. (At least, until the next time pacrunner emits
PropertiesChanged.)

-- Dan

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: NetworkManager: do not tend missing hardware

2013-04-25 Thread Dan Winship
On 04/25/2013 10:38 AM, John Reiser wrote:
 When booting a Live spin, how can I tell NetworkManager to avoid any hardware
 that is not present?  There is [and will be] no ISDN, no ADSL, no dialup 
 modem,
 no Bluetooth, no wired ethernet; and I want to reduce RAM usage as much as 
 possible.

Well, if the hardware is not present, then NM avoids it, right?

You can't currently compile out support for any of the base types, if
that's what you mean. There is some infrastructure to make a device type
be a loadable module (which is done for WiMAX for external-dependency
reasons). But it's not clear that you'd actually save any runtime memory
by doing this, since none of the other device types pull in external
libraries, and for the most part, if you don't have a particular kind of
device, then the code in NM to support that device is just not going to
get paged in.

-- Dan

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: default DNS caching name server on Fedora ?

2012-06-21 Thread Dan Winship
On 06/20/2012 07:09 PM, Dan Williams wrote:
 (also, an aside: why the heck do resolvconf and dnssec-trigger require
 an interface name???  DNS information has nothing do with network
 interfaces, despite some DNS info coming from interface-specific sources
 like DHCP...)

resolvconf requires an interface name for the same reason NMDnsManager
does, because it behaves in exactly the same way as NMDnsManager. (It
keeps track of multiple DNS configurations, merges them together into a
single resolv.conf, and lets you add new ones and remove old ones in any
order.) The NM resolvconf plugin is broken in how it uses resolvconf.

-- Dan
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: gsoc - Need a mentor - Integrate Proxy Settings and Network Connections(Locations)

2012-03-20 Thread Dan Winship
I added myself as a mentor

-- Dan

On 03/20/2012 08:58 AM, Buddhike Kurera wrote:
 Hello Folks,
 
 Students are starting inquiring about the GSOC project ideas we listed
 on the wiki[0].
 But unfortunately some idea dont have a primary mentor.
 
 If any one is interested in following idea[1] which is dealing with
 networking, please take it.
 Please treat this request as urgent. The list should be cleared (ideas
 with no mentors) once
 the students application period has started.
 
 More details about mentoring can be found here[2].
 
 Thanks for the support.
 
 [0] https://fedoraproject.org/wiki/Summer_coding_ideas_for_2012
 [1] 
 https://fedoraproject.org/wiki/Summer_coding_ideas_for_2012#Integrate_Proxy_Settings_and_Network_Connections.28Locations.29
 [2] http://www.flossmanuals.net/gsocmentoring/

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Orphaning buoh, libsoup22

2012-03-02 Thread Dan Winship
On 03/02/2012 08:43 AM, Nicola Soranzo wrote:
 Il giorno ven, 02/03/2012 alle 14.41 +0200, Jonathan Dieter ha scritto: 
 I've orphaned buoh and libsoup22 in all active branches of Fedora.  Buoh
 is a GTK online comics reader that I haven't used in forever and
 libsoup22 is a compat version of libsoup required for buoh.  I don't
 think any packages other than buoh require libsoup22, but I could be
 wrong.
 
 libsoup22 is also required by libsyncml .

Because we're shipping a 4-year-old version of libsyncml. If we updated
to 0.4.7 (which is only 3 and a half years old!), it would work with the
newer libsoup.

-- Dan
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Unity For Fedora (As in OpenSUSE or Arch)

2012-02-02 Thread Dan Winship
On 02/01/2012 01:04 PM, Kevin Kofler wrote:
 Matthias Clasen wrote:
 After the fruitless discussion on xdg-list, we decided that the spec was
 not going to help us in implementing the desired user experience.
 
 That's not up to you to decide.

http://aseigo.blogspot.com/2008/12/free-dektop-notifications.html
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel