Re: [gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2006-12-10 23:59 UTC

[Alec Warner]

Brian Harring wrote:


Hope y'all are checking gentoo-x86/updates/* also for remove/adds for 
renames also; if already tracking that, perhaps noting it in the 
emails would be useful.


~harring


Not yet, although I may tackle it over the coming days.
--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] Re: [gentoo-core] IMPORTANT: CVS/mastermirror downtime

[Mike Doty]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Lance Albertson wrote:
> Folks-
> 
> There's some pretty nasty wind storms ripping through Corvallis, OR
> where a lot of our stuff is at right now. For the most part, our
> machines are on generator power. The exception being (sadly) the two
> most important machines for our development: cvs/svn and the master mirror.
> 
> Both of these machines are in an area with limited UPS power and the way
> things are looking I'm going to have to shutdown both of them at 0430
> UTC. Since the power has been going in/out all night, they may not come
> back online until morning PST (or in about 8+ hours).
> 
> I'm really sorry about this, but we'll just have to deal with it. Lets
> hope this is all we need to do for tonight.
> 
> Cheers-
> 
It's worth a mention that most of our dev boxes are down(or will be
shortly)  this includes, pitr.amd64, dustpuppy.amd64, poseidon.gentoo,
sparc64.gentoo and probably others.  hake and the netwinder need to go
down too, if we can ever find spanky...


- --
===
Mike Doty  kingtaco -at- gentoo.org
Gentoo/AMD64 Strategic Lead
Gentoo Council
Gentoo Developer Relations
Gentoo Recruitment Lead
Gentoo Infrastructure
GPG: E1A5 1C9C 93FE F430 C1D6  F2AF 806B A2E4 19F4 AE05
===
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)

iQCVAwUBRYImPoBrouQZ9K4FAQJOzwP/aDUz/Ag4iPx5dpQBySKsE2V4+8hxOGXz
iBDHTRw3PKuGXVvAhHSmGkRtpj7wtpvmkTs+8DILlaQ77D9qfQyBb0pKNjkcYvMk
xtp9pMVZ99RSNPTY3xLcI/0MwVxB1b/+2WYEQtFqjUUAgYtSc04Ysn5KXoh1wp34
bdLXmvH3p1g=
=VpeU
-END PGP SIGNATURE-
-- 
gentoo-dev@gentoo.org mailing list

[gentoo-dev] IMPORTANT: CVS/mastermirror downtime

[Lance Albertson]

Folks-

There's some pretty nasty wind storms ripping through Corvallis, OR
where a lot of our stuff is at right now. For the most part, our
machines are on generator power. The exception being (sadly) the two
most important machines for our development: cvs/svn and the master mirror.

Both of these machines are in an area with limited UPS power and the way
things are looking I'm going to have to shutdown both of them at 0430
UTC. Since the power has been going in/out all night, they may not come
back online until morning PST (or in about 8+ hours).

I'm really sorry about this, but we'll just have to deal with it. Lets
hope this is all we need to do for tonight.

Cheers-

-- 
Lance Albertson <[EMAIL PROTECTED]>
Gentoo Infrastructure | Operations Manager

---
GPG Public Key:  
Key fingerprint: 0423 92F3 544A 1282 5AB1  4D07 416F A15D 27F4 B742

ramereth/irc.freenode.net



signature.asc
Description: OpenPGP digital signature

Re: [gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2006-12-10 23:59 UTC

[Brian Harring]

On Thu, Dec 14, 2006 at 05:23:13PM -0800, Robin H. Johnson wrote:
> (This is the first-ever report, feedback is appreciated. Thanks to
> antarus for writing the core of the script. It tracks actions on
> ChangeLog files in the CVS history file to see what happens in the tree.
> This email will ideally go out around 01h00 every Monday morning, in
> time for each week's GWN.)

Hope y'all are checking gentoo-x86/updates/* also for remove/adds for 
renames also; if already tracking that, perhaps noting it in the 
emails would be useful.

~harring


pgptHuRDPjIPP.pgp
Description: PGP signature

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2006-12-10 23:59 UTC

[Robin H. Johnson]

(This is the first-ever report, feedback is appreciated. Thanks to
antarus for writing the core of the script. It tracks actions on
ChangeLog files in the CVS history file to see what happens in the tree.
This email will ideally go out around 01h00 every Monday morning, in
time for each week's GWN.)

The attached list notes all of the packages that were added or removed
from the tree, for the week ending 2006-12-10 23h59 UTC.

-- 
Robin Hugh Johnson
E-Mail : [EMAIL PROTECTED]
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85
Removals:
x11-wm/qvwm 2006-12-04 06:40:02 omp
sys-fs/ecryptfs-util2006-12-04 20:21:24 masterdriverz
x11-libs/nucleo 2006-12-05 00:57:47 omp
x11-wm/metisse  2006-12-05 00:59:43 omp
x11-wm/golem2006-12-05 01:02:00 omp
x11-wm/papuawm  2006-12-05 01:03:31 omp
dev-java/datavision-bin 2006-12-05 01:04:56 wltjr
x11-wm/integrity2006-12-05 01:05:02 omp
x11-wm/pawm 2006-12-05 01:06:12 omp
x11-wm/trswm2006-12-05 01:09:00 omp
x11-wm/xpde 2006-12-05 01:10:07 omp
x11-wm/pwm  2006-12-05 01:11:57 omp
x11-wm/wmi  2006-12-05 01:13:23 omp
dev-java/jgoodies-looks-bin 2006-12-06 17:21:37 wltjr
dev-ruby/ruby-zlib  2006-12-07 20:42:47 pclouds
profiles/default-bsd/fbsd   2006-12-09 17:03:37 drizzt
sci-biology/embassy-meme2006-12-10 18:28:59 ribosome
sci-biology/embassy-phylip  2006-12-10 18:33:19 ribosome
sci-biology/cbcanalyzer 2006-12-10 19:04:53 ribosome
sci-misc/chessbrain 2006-12-10 19:30:01 ribosome
dev-python/fxpy 2006-12-10 20:10:09 kloeri

Additions:
x11-misc/gaia   2006-12-04 10:25:46 opfer
sys-fs/ecryptfs-utils   2006-12-04 18:56:27 masterdriverz
media-fonts/adi-dsp-fonts   2006-12-04 20:28:48 vapier
xfce-extra/xfce4-dev-tools  2006-12-05 16:32:05 nichoj
gnustep-apps/projectmanager 2006-12-05 21:43:09 grobian
mail-filter/spamassassin-fuzzyocr   2006-12-05 22:28:42 tomk
sci-electronics/eagle   2006-12-06 02:34:38 nixphoeni
xfce-extra/xfce4-cpu-freq   2006-12-06 03:49:36 nichoj
xfce-extra/xfce4-xfapplet   2006-12-06 04:22:49 nichoj
xfce-extra/xfce4-smartbookmark  2006-12-06 05:22:38 nichoj
dev-cpp/libthrowable2006-12-06 19:06:21 opfer
media-gfx/pydot 2006-12-06 21:39:48 cedk
app-office/tinyerp-server   2006-12-06 21:43:23 cedk
app-office/tinyerp-client   2006-12-06 22:03:10 cedk
profiles/default-linux/ppc  2006-12-07 00:43:06 pylon
xfce-extra/xarchiver2006-12-07 01:15:38 nichoj
media-video/x264-svn-encoder2006-12-07 12:55:05 aballier
dev-java/mx4j-core  2006-12-07 14:39:32 betelgeuse
dev-java/mx4j-tools 2006-12-07 14:44:37 betelgeuse
media-video/qc-usb-messenger2006-12-07 19:30:29 zzam
x11-plugins/tomboy-reminder 2006-12-07 20:43:16 compnerd
app-misc/flasm  2006-12-08 07:51:50 pclouds
mail-client/claws-mail  2006-12-08 11:07:55 genone
dev-lang/io 2006-12-09 02:39:42 araujo
profiles/default-bsd/fbsd   2006-12-09 16:58:50 drizzt
app-editors/tea 2006-12-10 19:35:42 welp


pgp61Hv4Yalnx.pgp
Description: PGP signature

[gentoo-dev] Council meeting log + summary

[Bryan Østergaard]

Here's the log of tonights council meeting.

Issues discussed:
- Removal of icons from http://www.gentoo.org due to possible licensing
  issues. The issue ended up being refered to Trustees who decided to
  remove the icons.
- Status of documentation on Reply-To and SPF. This isn't finished yet
  but is expected do be done soon.
- Status on bugstest / bugs.gentoo.org. There's still a couple minor
  issues that needs to be fixed but Robin Johnson (robbat2) hope we can
  switch over to bugstest 23 dec.
- Short discussion about what's happening in the QA project.

Complete log attached.

Regards,
Bryan Østergaard
20:59 <@robbat2> kloeri, Kugelfang, SpanKY, you here?
20:59 < vapier> moo
20:59 <@FlameBook> kingtaco?
20:59 < vapier> how do you rebind a channel in bx to a window ?
20:59 <@kloeri> yup
21:00 < vapier> ah here we go
21:00 <@FlameBook> somebody knows why kingtaco is not here?
21:00 < vapier> i may pop in and out
21:00 <@wolf31o2|mobile> nope
21:01 <@Kugelfang> heya there
21:02  * Kugelfang is now available, too -)
21:02 <@FlameBook> do we start?
21:02 <@robbat2> just missing kingtaco
21:03 <@FlameBook> yeah pinged him in #-dev
21:03 <@Kugelfang> oh
21:03 <@FlameBook> he was around a few mins ago
21:03 <@Kugelfang> well, he'll pop up eventually i guess :-)
21:04 <@FlameBook> so let's start with an easy one
21:04 -!- mode/#gentoo-council [+m] by FlameBook
21:05 <@FlameBook> did you read my mail about icons we have on the site'
21:05 <@robbat2> what all is on the agenda
21:05 <@FlameBook> ?
21:05 <@wolf31o2|mobile> I did... and I agree that we should probably unlink 
them from the site until it can be cleared up by the trustees
21:06 <@FlameBook> trustees never cleared it up in more than one year
21:07 <@wolf31o2|mobile> until you said something, I'd not heard a thing about 
it
21:07 <@FlameBook> the most clear statement we have is that we're not liable 
unless they demonstrate we broke copyright laws intentionally
21:07 <@robbat2> yes, I saw the email. i don't think trustees are going to help 
- perhaps better to announce that unless the license issues are cleared up, 
they will be going away
21:07 <@wolf31o2|mobile> basically, anything that was tasked to the old 
trustees, the new ones likely know nothing about
21:07 <@FlameBook> wolf31o2|mobile, I mailed last year about that
21:07 <@FlameBook> sigh -_-
21:07 -!- mpagano [EMAIL PROTECTED] has quit [Client Quit]
21:07 <@kloeri> we have new trustees now so I think it'd be worth bringing it 
up with trustees again
21:08 <@wolf31o2|mobile> right
21:08 <@Kugelfang> remove until they have settled?
21:08 <@wolf31o2|mobile> I would say so
21:08 <@Kugelfang> nod
21:08 <@FlameBook> I'd remove them and ask for new artists
21:08 <@kloeri> they may or may not know about it but a reminder certainly 
won't hurt a bit
21:08 <@wolf31o2|mobile> better safe than sorry and all that jazz
21:08 <@FlameBook> it's impossible to clear them up anyway
21:08 <@FlameBook> most of them are copied from Windows software
21:08 <@Kugelfang> vote: remove the icons and let the trustees handle the 
situation afterwards
21:08 <@wolf31o2|mobile> right... unless we simply removed any offending ones
21:08 <@FlameBook> is anybody going to write Microsoft to ask permission to use 
them? :D
21:08 <@wolf31o2|mobile> Kugelfang: yes
21:08 <@Kugelfang> vote: yes
21:08 <@kloeri> yes
21:09 <@robbat2> vote: yes
21:09 <@FlameBook> Kugelfang, yes, although I'd rather take a definitive 
approach
21:09 <@Kugelfang> phone
21:09 <@wolf31o2|mobile> FlameBook: the "definitive" approach is they're being 
removed... if the trustees don't do anything beyond that, they're still removed
21:09 <@robbat2> there's voicemail for kingtaco (thanks to solar), so he should 
be here soon
21:10 <@FlameBook> wolf31o2|mobile, well, if we wait for trustees, we're 
"waiting to clear up"
21:10 <@FlameBook> if we're just scratching them we're "asking new artists to 
contribute a true Gentoo icon set"
21:10 <@robbat2> with all of the license issues clear
21:10 <@FlameBook> right
21:11 <@FlameBook> a new icon set, either original or derived, with a proper 
license
21:11 <@Kugelfang> so your proposal is to remove them permanently?
21:11 <@FlameBook> I'm not sure how much lila is related to gentoo, but it 
might as well be asked to made official
21:11 <@FlameBook> Kugelfang, yes
21:11 <@Kugelfang> i can live with that :-)
21:13 <@Kugelfang> so new vote?
21:13 <@wolf31o2|mobile> on what?
21:13 <@Kugelfang> remove them permanently
21:13 <@FlameBook> The Lila theme is a community project, originally created by 
Daniel G. Taylor and members of the Gentoo Linux community.
21:13 <@FlameBook> http://www.lila-center.info/doku.php?id=about we might as 
well consider the idea of making these the suggested one or something
21:14 -!- mode/#gentoo-council [+o vapier] by ChanServ
21:14 <@wolf31o2|mobile> I would prefer that if we were to have an "official" 
icon theme that it at least attempt to match the other themes we have
21:15 <@FlameBook> wo

[gentoo-dev] Reasoning for unifying libexec and lib/misc directories

[Diego Pettenò]

Upon Danny request, I'll try to summarise here what's going on with  
the /usr/libexec versus /usr/$(get_libdir)/misc thing.


First of all, what is /usr/libexec supposed to contain? Mostly those  
files that are binary executables  (or scripts) that should never be  
ran by users directly, not even root; on FreeBSD it contains also  
most of the daemons that are started by rc.d (their init scripts) and  
by cronjobs.


FHS didn't put /usr/libexec in the standard, it instead talks of an  
appropriate subdirectory of the lib directory, which would be the  
above /usr/$(get_libdir)/misc. What's the problem with that? Well,  
CUPS developers shown me the issue first, as I didn't really know  
before they told me about this.


The /usr/libexec/cups directory is currently used to store cups's  
backends, that might be 64- or 32-bit (for instance Canon Pixma's  
backend, being closed source - most of it at least, and available  
only for x86), native or scripted, and so on... they have to be all  
available at the very same directory.


For most of the things /usr/libexec (or /usr/lib/misc) is used or  
should be used for, the ABI for which the executables are is no more  
a problem than /usr/bin executables are built for, as they are called  
through an exec() call, so there should only be one copy of them, of  
the preferred ABI (or of the chosen ABi by the user).


Having /usr/libexec would decouple us from the ABI concern, as the  
directory does not contain any ABI at all; having /usr/$(get_libdir)/ 
misc would allow multiple copies for those rare (and IMHO misdsigned,  
but that's just IMHO) packages that requires different command sets  
depending on the ABI they are built for); having /usr/lib/misc would  
abide to FHS, and mostly decouple us from the ABI topic too.


Another idea Mike (vapier) suggested is to use /usr/$(get_libdir) but  
symlinking the stuff around, so I suppose something like /usr/lib64/ 
misc/cups and /usr/lib32/misc/cups -> ../../lib64/misc/cups .


If we decide on a single way to handle this, we could clean up the  
current mess of different decisions on different packages, and unify  
all of them under a single hierarchy... whatever that is, and thus  
not have the problem of deciding what to do on every ebuild.


--
gentoo-dev@gentoo.org mailing list

[gentoo-dev] unconditionally depending on sys-apps/hotplug

[Matthias Schwarzott]

Hi fellow devs!

One thing that annoys me since some time are packages pulling in 
sys-apps/hotplug unconditionally.

How should the dependencies on hotplug/hotplug-base and udev be managed:

Some problems with current tree:

The problem with hotplug is, that it breaks in combination with udev-103 in 
several ways.
One known to me is firmware-loading.
Bug https://bugs.gentoo.org/show_bug.cgi?id=147006



Some ebuilds depending on hotplug (incomplete list):

DEPEND="sys-apps/hotplug"
net-wireless/ipw2200-firmware
net-wireless/acx-firmware
net-wireless/atmel-firmware
media-libs/libgphoto2
sys-apps/hal

DEPEND="|| ( sys-fs/udev sys-apps/hotplug )"
./app-emulation/xen-tools

DEPEND="|| ( >=sys-fs/udev-103 sys-apps/hotplug )"
./media-tv/wis-go7007

DEPEND="|| ( >=sys-fs/udev-096 >=sys-apps/hotplug-20040923 )"
net-wireless/zd1211-firmware

DEPEND="udev? ( >=sys-fs/udev-068 ) !udev? ( >=sys-apps/hotplug-20040920 )"
sys-apps/pcmciautils




Some more problems (minor ones, but even more confusing to users):
It installs files not used but confusing users like /etc/hotplug/blacklist.
Bug: http://bugs.gentoo.org/show_bug.cgi?id=130766

It creates empty /usr/lib/hotplug/firmware that is no longer used 
(now: /lib/firmware)
Bug: http://bugs.gentoo.org/show_bug.cgi?id=124427

Matthias

-- 
Matthias Schwarzott
Gentoo Developer
http://www.gentoo.org
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] last rites for app-antivirus/vlnx

[Tavis Ormandy]

On Mon, Dec 11, 2006 at 05:26:01PM +, Tavis Ormandy wrote:
> On Sat, Dec 09, 2006 at 04:01:30PM +0100, Timothy Redaelli wrote:
> > can't fix rpath, application check its checksum
> > 
> 
> This looks like a serious security issue, attempting to scan a file
> named `liblnxfv.so.4` in the cwd will execute arbitrary code (by
> installing a constructor in the dso, for example).
> 
> What was the bug number, we probably need a mask glsa for this issue.
> 
> (the security rpath checks are there for a reason, please dont disable
> them without checking eith security team!)
> 

GLSA 200612-15

Thanks, Tavis.

-- 
-
[EMAIL PROTECTED] | finger me for my pgp key.
---


pgp5Z9sUPlfSI.pgp
Description: PGP signature