Re: Do you think this is a security risk and if not is it a bad UI decision?

2013-05-10 Thread Marian Ganisin
On Wed, May 08, 2013 at 10:00:50AM +0200, Olav Vitters wrote:
 On Sat, May 04, 2013 at 12:03:39AM -0500, Eric Sandeen wrote:
  Anaconda has a pretty special place in this project.  It is the
  uber-administrator of every new Fedora install.  We would do better
  as a community to hash out major changes before they're made, and
  try to reach some agreement before we implement them.
 
 I've been reading loads and loads of blogs about the Anaconda redesign.
 That was a pretty major change. Something like showing a password is
 terribly minor change when developing.
 
 There was a pretty huge outcry about the Anaconda redesign, despite all
 the blogs. Now there is some small change, and there is a call that
 major changes need to be hashed out.
 
 Seems like nothing they'd do would ever be good enough. Getting
 consensus before most commits sounds like a good way to scare away
 developers.

If they were coding a music player for their own needs, then you would be
right.  However Anaconda is something completely different. I am very sorry to
say it however Anaconda developers are not doing it for their fun. You can not
simply opt out it if you don't like it (unless you try different
distribution/OS, I hope this not a goal of this project), there's no
alternative to use. And that's the difference. Anaconda as well as any other
core component of distribution/OS has to be developed really carefully.

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Anaconda is totally trashing the F18 schedule (was Re: f18: how to install into a LVM partitions (or RAID))

2012-10-31 Thread Marian Ganisin
On Tue, Oct 30, 2012 at 11:45:02AM -0700, Adam Williamson wrote:
 It's worth noting quite a lot of the early issues in this cycle -
 particularly during Alpha - weren't actually much to do with newui; they
 were more to do with changes in dracut which affected anaconda. oldui
 wasn't fixed for that, so if were to try and switch back to oldui at
 this point, we'd have to go through the whole process of adjusting the
 code for the changes to dracut again, quite apart from any other issues.

This temporary step-back can be reverted to pre-dracut era and it would work.

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: [Feature Suggestion] UsrMove continued

2012-10-12 Thread Marian Ganisin
On Wed, Oct 10, 2012 at 03:04:51PM +0200, Michal Schmidt wrote:
 Dne 10.10.2012 14:25, David Howells napsal(a):
 Actually, the UsrMove has mucked up at least one way of doing things: we
 have/had RHEL customer(s) who kept /usr on AFS and were able to boot just
 using the stuff in /bin and /sbin.  This is no longer a viable option with
 Fedora, and presumably RHEL-7.
 
 The initramfs should contain everything necessary to mount / and /usr. 
 Isn't there a dracut module for AFS support? If not, it should be added. 
 Has a bug been reported?

As far as I know initrd doesn't provide sane environment for
troubleshooting possible issues.

Additionally / can be modified by standard fs tools quite surprsingly.
;) It isn't case of initrd. Dracut seems to be good solution for this
case unless something breaks.

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: PyXML package - deprecate it?

2012-03-23 Thread Marian Ganisin
On Tue, Feb 21, 2012 at 06:48:11PM +0100, Roman Rakus wrote:
 Hi all,
 looks like PyXML package is deprecated since python itself provides
 xml mechanisms.
 When you look deeper,
 python's xml provides:
 dom, parsers, sax, etree
 and PyXML provides:
 'dom', 'marshal', 'parsers', 'sax', 'schema', 'utils', 'xpath', 'xslt'
 
 So, PyXML duplicates dom, parsers and sax (and looks like python's
 is in better shape). Is any package using marshall, schema or any
 other not in python itself?
 
 Deprecate PyXML or just remove duplicated parts?

PyXML is not maintained by upstream for many years it should not be used
hence.  Distribution specific PyXML-0.8.4-python2.6.patch included in
srpm is warning of ongoing issues.

Anyway it provides many features which are missing in python stdlib as
far as I know (for example xpath or magnificent HTML-to-DOM reader).

There are alternatives outside of stdlib described here:
http://wiki.python.org/moin/PythonXml

(lxml is my personal favorite, however it is not compatible with PyXML and
it isn't pure python).

I believe PyXML should be kept unchanged (my personal code rely on that
as well) but deprecated and its users should be strongly encouraged to
switch to some alternative if stdlib doesn't satisfy their requirements.

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Adding ~/.local/bin to default PATH

2011-07-28 Thread Marian Ganisin
On Wed, Jul 27, 2011 at 10:36:08AM -0400, Bernd Stramm wrote:
  c) there's a spec about ~/.local/bin already accepted by a friendly
  project
 
 This is STILL a security risk, even if somebody calls it a standard.

This is STILL a claim without any proof, even if somebody repeats it
every time.

Does everybody calling this security risk check periodically his $PATH
for a dot? (what does $PATH contain? don't look at it before answering)
Are you periodically checking your ~/bin (do you know what's inside
without looking there right now)? Are you periodically checking your
~/.bash* startup files for suspicious aliases and functions, includes?

If you are _not_ watching really carefully your $HOME, this will not
bring new security risk for your machine (all are already there). On the
other way if you do so, again this will not bring new security risk to
your machine.

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel


Re: What's this /run directory doing on my system and where does it come from?

2011-04-01 Thread Marian Ganisin
On Fri, Apr 01, 2011 at 05:32:04AM +0200, Ralf Corsepius wrote:
 On 03/31/2011 01:22 PM, Lennart Poettering wrote:
  The system. dracut, systemd, udev, and so on -- which all are components
  of the OS.
 All applications.

Ralf, did anybody already asked you what do you understand under the term
'system'?

Did you answer?

If 'no' is the answer for both questions (otherwise please point me to
correct place), here it is:

What do you understand under the term 'system'?

It looks like your definition of 'system' could really differ from the
common one. Everybody understands init is part of *system*,
everybody understands initrd is part of *system*, everybody
understands udev is part of *system*. Everybody understands directory
used by these parts of system is *system* directory. Why don't you?

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel


non-repsponsive maintainer of conserver

2011-01-25 Thread Marian Ganisin
Hi,
package maintainer of conserver doesn't seem to respond on open issues.
I tried to push him (kindly):
https://bugzilla.redhat.com/show_bug.cgi?id=667118

Unfortunately without response.

Is anyone in contact with this person:

Account Name: jima
Full Name: Patrick Laughton
Email: j...@jima.tk 

-- 
Regards,
Marian

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel