[arch-general] Question regarding cmake

2017-10-10 Thread Valo 
Hello everybody,

I noticed that extra/cmake depends on core or extra packages exception
made for community/rhash.

I was trying to use build.opensuse.org to build a package but was unable
to use cmake due to the fact that it depends on a package in community
which is not included in build.opensuse.org

My question is: is it fine for an extra package to depend on a package
found in community?

I tried to search for policies but didn't find anything.

It would be really helpful if rhash could be brought in extra or, if not
strictly needed by cmake, to be made an optdep for it.

I checked on debian.packages.org, they have 3.9.3-1 as the latest
version of cmake which don't depend on rhash, I can't say anything for
version 3.9.4 currently in extra.

I'm saying it would be useful as cmake is used by many project ad being
able to use it on opensuse build service would enable more packages to
be built there for Arch.

Thanks,

-- 

sValo
--
PGP ID 0x06DD1631
--
www.eigenlab.org
--
www.exploitpisa.org
--
"It must be inconvenient to be made of flesh," said the Scarecrow
thoughtfully, "for you must sleep, and eat and drink. However, you  
have
brains, and it is worth a lot of bother to be able to think properly."
[The Wonderful Wizard of Oz]
--
Please avoid sending me Word or PowerPoint attachments,it is a secret
proprietary format, so it is hard for me to read. If you send me plain
text, HTML, PDF, or ODF then I will read it without any problem.
See http://www.gnu.org/philosophy/no-word-attachments.html

Thanks




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] Question regarding cmake

2017-10-10 Thread Jelle van der Waa 
On 10/10/17 at 02:45pm, Valo wrote:
> Hello everybody,
> 
> I noticed that extra/cmake depends on core or extra packages exception
> made for community/rhash.
> 
> I was trying to use build.opensuse.org to build a package but was unable
> to use cmake due to the fact that it depends on a package in community
> which is not included in build.opensuse.org
> 
> My question is: is it fine for an extra package to depend on a package
> found in community?

That would be a lot better.

> I tried to search for policies but didn't find anything.

Only unwritten rules I believe.

> I'm saying it would be useful as cmake is used by many project ad being
> able to use it on opensuse build service would enable more packages to
> be built there for Arch.

To be honest, this is also a bit silly of OBS (also filtering a lot of
"license" issue packages) and I believe you can actually enable the
community repo on it.

-- 
Jelle van der Waa


signature.asc
Description: PGP signature

Re: [arch-general] Question regarding cmake

2017-10-10 Thread Valo 
Hello,


On 10/10/2017 02:50 PM, Jelle van der Waa wrote:
> To be honest, this is also a bit silly of OBS (also filtering a lot of
> "license" issue packages) and I believe you can actually enable the
> community repo on it.
Thanks, as I started to experiment with OBS only in the last days I
didn't notice that I could add additional paths under di repository and
it actually turned out there is an Arch:Community repo.
I just couldn't find at the beginning and found only resources stating
community packages weren't available.

Thanks and sorry for the noise

-- 

sValo
--
PGP ID 0x06DD1631
--
www.eigenlab.org
--
www.exploitpisa.org
--
"It must be inconvenient to be made of flesh," said the Scarecrow
thoughtfully, "for you must sleep, and eat and drink. However, you  
have
brains, and it is worth a lot of bother to be able to think properly."
[The Wonderful Wizard of Oz]
--
Please avoid sending me Word or PowerPoint attachments,it is a secret
proprietary format, so it is hard for me to read. If you send me plain
text, HTML, PDF, or ODF then I will read it without any problem.
See http://www.gnu.org/philosophy/no-word-attachments.html

Thanks




signature.asc
Description: OpenPGP digital signature

Re: [arch-general] gnucash [aur]->[community]?

2017-10-10 Thread Antonio Rojas 
El Tue, 10 Oct 2017 15:49:27 -0400, Ido Rosen escribió:

> Gnucash has 44 votes on AUR.  It's useful (and very old, stable)
> accounting/bookkeeping software.  Would any TUs be willing to migrate it
> from AUR to [community]?
> 
> https://aur.archlinux.org/packages/gnucash/

Not until it is ported away from webkitgtk, which is why it was dropped in the 
first place

Re: [arch-general] gnucash [aur]->[community]?

2017-10-10 Thread Eric Blau 
On Tue, Oct 10, 2017 at 3:57 PM, Morten Linderud  wrote:
> On Tue, Oct 10, 2017 at 03:49:27PM -0400, Ido Rosen wrote:
>> Gnucash has 44 votes on AUR.  It's useful (and very old, stable)
>> accounting/bookkeeping software.  Would any TUs be willing to migrate it
>> from AUR to [community]?
>>
>> https://aur.archlinux.org/packages/gnucash/
>
> It was moved from [extra] on the 30th of june because it still depends on
> webkitgtk2, which is flawed and has multiple security issues.
>

While it is true that webkitgtk2 has security vulnerabilities and
should not be used for web browsing, web apps, etc., gnucash merely
uses it to generate reports based on your own data. As such, it's
likely not vulnerable to the same security issues as other web
applications based on it.

I know the developers are in the process of migrating away from it,
but until that time, I think it should be supported and not dropped
for the above reason.

Regards,
Eric

Re: [arch-general] gnucash [aur]->[community]?

2017-10-10 Thread Morten Linderud 
On Tue, Oct 10, 2017 at 04:34:35PM -0400, Eric Blau wrote:
> On Tue, Oct 10, 2017 at 3:57 PM, Morten Linderud  wrote:
> > On Tue, Oct 10, 2017 at 03:49:27PM -0400, Ido Rosen wrote:
> >> Gnucash has 44 votes on AUR.  It's useful (and very old, stable)
> >> accounting/bookkeeping software.  Would any TUs be willing to migrate it
> >> from AUR to [community]?
> >>
> >> https://aur.archlinux.org/packages/gnucash/
> >
> > It was moved from [extra] on the 30th of june because it still depends on
> > webkitgtk2, which is flawed and has multiple security issues.
> >
> 
> While it is true that webkitgtk2 has security vulnerabilities and
> should not be used for web browsing, web apps, etc., gnucash merely
> uses it to generate reports based on your own data. As such, it's
> likely not vulnerable to the same security issues as other web
> applications based on it.
> 
> I know the developers are in the process of migrating away from it,
> but until that time, I think it should be supported and not dropped
> for the above reason.
> 

webkitgtk2 would have do be added back to the repos for this to happen, and that
won't happen. It was a big deal to remove it in the first place.

https://www.archlinux.org/todo/phasing-out-webkitgtk2/
-- 
Morten Linderud

PGP: 9C02FF419FECBE16


signature.asc
Description: PGP signature

[arch-general] gnucash [aur]->[community]?

2017-10-10 Thread Ido Rosen 
Gnucash has 44 votes on AUR.  It's useful (and very old, stable)
accounting/bookkeeping software.  Would any TUs be willing to migrate it
from AUR to [community]?

https://aur.archlinux.org/packages/gnucash/

Re: [arch-general] gnucash [aur]->[community]?

2017-10-10 Thread Morten Linderud 
On Tue, Oct 10, 2017 at 03:49:27PM -0400, Ido Rosen wrote:
> Gnucash has 44 votes on AUR.  It's useful (and very old, stable)
> accounting/bookkeeping software.  Would any TUs be willing to migrate it
> from AUR to [community]?
> 
> https://aur.archlinux.org/packages/gnucash/

It was moved from [extra] on the 30th of june because it still depends on
webkitgtk2, which is flawed and has multiple security issues.

-- 
Morten Linderud

PGP: 9C02FF419FECBE16


signature.asc
Description: PGP signature

Re: [arch-general] gnucash [aur]->[community]?

2017-10-10 Thread Eric Blau 
On Tue, Oct 10, 2017 at 4:45 PM, Morten Linderud  wrote:
> On Tue, Oct 10, 2017 at 04:34:35PM -0400, Eric Blau wrote:
>>
>> While it is true that webkitgtk2 has security vulnerabilities and
>> should not be used for web browsing, web apps, etc., gnucash merely
>> uses it to generate reports based on your own data. As such, it's
>> likely not vulnerable to the same security issues as other web
>> applications based on it.
>>
>> I know the developers are in the process of migrating away from it,
>> but until that time, I think it should be supported and not dropped
>> for the above reason.
>>
>
> webkitgtk2 would have do be added back to the repos for this to happen, and 
> that
> won't happen. It was a big deal to remove it in the first place.
>
> https://www.archlinux.org/todo/phasing-out-webkitgtk2/

OK, thanks for the response. It's a shame that gnucash is lumped with
other packages with real attacks possible against them, but I
understand why it had to be done. Hopefully gnucash can migrate off
webkitgtk2 quickly and make it back in to the repos.

-Eric

Re: [arch-general] firejail and network

2017-10-10 Thread NTS 
Dear Shridhar,

It's a known bug in firejail that has apparently been fixed upstream.
Once Arch's maintainer does a pull you may be fine:

  https://github.com/netblue30/firejail/issues/1591#issuecomment-334749301

So, it is not you :-)

Have a nice day/night,

NTS


On 10 October 2017 at 03:33, Iván Ruvalcaba via arch-general
 wrote:
> https://wiki.archlinux.org/index.php/Firejail#Using_Firejail_by_default
> Fingerprint: 49AA 091A CBF9 632E BD99 9BF2 32D9 E18C 3D99 B685
>
> Keybase: https://ivanruvalcaba.keybase.pub/
>
> El lun, 9 de oct 2017 a las 8:03 , Herminio Hernandez, Jr. via arch-general
>  escribió:
>>
>> Do you just run 'firejail firefox' from the terminal? Do have any custom
>> settings?
>>
>> On Mon, Oct 9, 2017 at 5:47 PM, Shridhar Daithankar <
>> ghodech...@ghodechhap.net> wrote:
>>
>>>  Hello,
>>>
>>>  For some time, chromium, firefox and qupzilla are unable to reach
>>> network/
>>>  internet/dns, if started from firejail.
>>>
>>>  When started normally, all of these can reach the network as expected.
>>> So
>>>  the
>>>  internet link is not the problem.
>>>
>>>  Has anybody experienced this? Any pointers to debug?
>>>
>>>  Thanks.
>>>  --
>>>  Regards
>>>   Shridhar
>>>
>

Re: [arch-general] firejail and network

2017-10-10 Thread Shridhar Daithankar 
On Tuesday 10 October 2017 6:33:25 AM IST Herminio Hernandez, Jr. via arch-
general wrote:
> Do you just run 'firejail firefox' from the terminal? Do have any custom
> settings?

yes, just 'firejail firefox', no customizations either.

Thanks.
-- 
Regards
 Shridhar

Re: [arch-general] firejail and network

2017-10-10 Thread Shridhar Daithankar 
On Tuesday 10 October 2017 11:33:25 AM IST NTS wrote:
> Dear Shridhar,
> 
> It's a known bug in firejail that has apparently been fixed upstream.
> Once Arch's maintainer does a pull you may be fine:
> 
>   https://github.com/netblue30/firejail/issues/1591#issuecomment-334749301
> 
> So, it is not you :-)

Oh yes, I am using systemd resolver as well. 

Thank you :) 
-- 
Regards
 Shridhar