Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Andreas Schwab
Jesse Keating jkeat...@redhat.com writes: However, if a user had a local branch of f14 or f14/master they will be left with mismatched .git/config entries. In this case it's easiest to delete the local branch (git branch -d f14) and check it out again. Or git branch --set-upstream.

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Hans de Goede
Hi, On 12/06/2010 06:34 AM, Michał Piotrowski wrote: Hi, W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski mkkp...@gmail.com napisał: [..] What services are installed by default when installong form Live GNOME/KDE/etc and DVD? Ok, let's ask the question differently - what

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
W dniu 6 grudnia 2010 10:43 użytkownik Hans de Goede hdego...@redhat.com napisał: Hi, On 12/06/2010 06:34 AM, Michał Piotrowski wrote: Hi, W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski mkkp...@gmail.com  napisał: [..] What services are installed by default when installong form

rawhide report: 20101206 changes

2010-12-06 Thread Rawhide Report
Compose started at Mon Dec 6 08:15:05 UTC 2010 Broken deps for x86_64 -- balsa-2.4.9-1.fc15.x86_64 requires libesmtp.so.5()(64bit) beagle-0.3.9-19.fc14.x86_64 requires libmono.so.0()(64bit)

Re: Testing Xfce 4.8 pre 2 packages available

2010-12-06 Thread Gilboa Davara
On Mon, 2010-12-06 at 00:01 +0100, Christoph Wickert wrote: Hi there, I have packaged Xfce 4-8 pre 2 for Fedora 14 and Rawhide. You can find the packages at http://repos.fedorapeople.org/repos/cwickert/xfce-4.8/ The repo is far from complete. ATM it is still rsyncing and Fedora 13 is

[perl-Params-Util/f14/master] - Upstream update.

2010-12-06 Thread corsepiu
commit 64bcb782e5e54d2b5c482321c4066d6e6da07393 Author: Ralf Corsépius corse...@fedoraproject.org Date: Mon Dec 6 13:47:35 2010 +0100 - Upstream update. .gitignore|1 + perl-Params-Util.spec | 11 +++ sources |2 +- 3 files changed, 9

[perl-Params-Util/f13/master] - Upstream update.

2010-12-06 Thread corsepiu
commit 05e95199f66309e5115af2f2b55e2ea267b9a06a Author: Ralf Corsépius corse...@fedoraproject.org Date: Mon Dec 6 13:47:47 2010 +0100 - Upstream update. .gitignore|1 + perl-Params-Util.spec | 13 ++--- sources |2 +- 3 files changed, 12

move to libreoffice?

2010-12-06 Thread Neal Becker
Since the fork, I wonder if fedora is going to follow libreoffice? -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: move to libreoffice?

2010-12-06 Thread drago01
On Mon, Dec 6, 2010 at 2:50 PM, Neal Becker ndbeck...@gmail.com wrote: Since the fork, I wonder if fedora is going to follow libreoffice? No it is not going to, it already did (in rawhide). -- devel mailing list devel@lists.fedoraproject.org

Fedora rawhide FTBFS status 2010-12-01 x86_64

2010-12-06 Thread Matt Domsch
Fedora Fails To Build From Source Results for x86_64 using rawhide from 2010-12-01 This is a full rebuild of all 10k packages. Due to the RemoveSUID feature in Fedora 15, mock can no longer use tmpfs buildroots, meaning this run takes 4 days instead of 1. Progress? Full logs at

Fedora rawhide FTBFS status 2010-12-01 i386

2010-12-06 Thread Matt Domsch
Fedora Fails To Build From Source Results for i386 using rawhide from 2010-12-01 This is a full rebuild of all 10k packages. Due to the RemoveSUID feature in Fedora 15, mock can no longer use tmpfs buildroots, meaning this run takes 4 days instead of 1. Progress? Full logs at

Firewall

2010-12-06 Thread Matt McCutchen
On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: On most desktop systems firewall is not needed. Many users do not even know how to configure it. In fact I disable it in most of my systems, because there is no real use for it. So I asked a simple question whether there is a need to

Re: old_testing_critpath notifications

2010-12-06 Thread Adam Williamson
On Sun, 2010-12-05 at 09:41 -0600, Bruno Wolff III wrote: On Thu, Dec 02, 2010 at 11:48:13 -0800, Adam Williamson awill...@redhat.com wrote: I think it'd probably fit better in the preamble before step 1. Perhaps after the paragraph 'As a Contributor, you should...' we add a paragraph

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Kevin Fenzi
On Mon, 6 Dec 2010 06:34:45 +0100 Michał Piotrowski mkkp...@gmail.com wrote: Hi, W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski mkkp...@gmail.com napisał: [..] What services are installed by default when installong form Live GNOME/KDE/etc and DVD? Ok, let's ask the question

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Bill Nottingham
Kevin Fenzi (ke...@scrye.com) said: IMO ssh can be off by default and should be started only if user tries to connect over port 22. If systemd will allow us to do that, sure. What's the point here? For example, this doesn't cut down on the number of listening ports, obviously, nor on the

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi ke...@scrye.com napisał: On Mon, 6 Dec 2010 06:34:45 +0100 Michał Piotrowski mkkp...@gmail.com wrote: Hi, W dniu 3 grudnia 2010 09:14 użytkownik Michał Piotrowski mkkp...@gmail.com napisał: [..] What services are installed by default

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/6 Bill Nottingham nott...@redhat.com: Kevin Fenzi (ke...@scrye.com) said: IMO ssh can be off by default and should be started only if user tries to connect over port 22. If systemd will allow us to do that, sure. What's the point here? For example, this doesn't cut down on the

[perl-Class-InsideOut] - Remove BR: perl. - Add BR: perl(Class::ISA) (Fix FTBS).

2010-12-06 Thread corsepiu
commit 6baa11d39bd5bd51d72c783464bd64df0fe8ae2d Author: Ralf Corsépius corse...@fedoraproject.org Date: Mon Dec 6 18:24:04 2010 +0100 - Remove BR: perl. - Add BR: perl(Class::ISA) (Fix FTBS). perl-Class-InsideOut.spec |9 +++-- 1 files changed, 7 insertions(+), 2 deletions(-)

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Kevin Fenzi
On Mon, 6 Dec 2010 18:17:51 +0100 Michał Piotrowski mkkp...@gmail.com wrote: W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi ke...@scrye.com napisał: ...snip... What are you trying to do? I'm trying to convert sysvinit scripts to systemd services (as many as possible) If you're

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
W dniu 6 grudnia 2010 18:43 użytkownik Kevin Fenzi ke...@scrye.com napisał: On Mon, 6 Dec 2010 18:17:51 +0100 Michał Piotrowski mkkp...@gmail.com wrote: W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi ke...@scrye.com napisał: ...snip... What are you trying to do? I'm trying to

Re: old_testing_critpath notifications

2010-12-06 Thread Bruno Wolff III
On Mon, Dec 06, 2010 at 08:57:42 -0800, Adam Williamson awill...@redhat.com wrote: practically speaking that would change very little, because we're not blocked on getting moderator approval at present. Thankfully a lot of people are taking up the moderator duties, so anyone who actually

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: On most desktop systems firewall is not needed. Many users do not even know how to configure it. In fact I disable it in most of my systems, because there is no real

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Richard W.M. Jones píše v Po 06. 12. 2010 v 18:04 +: On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: On most desktop systems firewall is not needed. Many users do not even know how to configure it. In fact I

[perl-Package-Stash-XS] Created tag perl-Package-Stash-XS-0.17-2.fc14

2010-12-06 Thread Paul Howarth
The lightweight tag 'perl-Package-Stash-XS-0.17-2.fc14' was created pointing to: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org

[perl-Package-Stash-XS/f13/master] Initial import of perl-Package-Stash-XS-0.17-2

2010-12-06 Thread Paul Howarth
Summary of changes: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org

[perl-Package-Stash-XS/el5/master] Initial import of perl-Package-Stash-XS-0.17-2

2010-12-06 Thread Paul Howarth
Summary of changes: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org

[perl-Package-Stash-XS/el4/master] Initial import of perl-Package-Stash-XS-0.17-2

2010-12-06 Thread Paul Howarth
Summary of changes: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org

[perl-Package-Stash-XS] Created tag perl-Package-Stash-XS-0.17-2.el4

2010-12-06 Thread Paul Howarth
The lightweight tag 'perl-Package-Stash-XS-0.17-2.el4' was created pointing to: 4f3db6b... Initial import of perl-Package-Stash-XS-0.17-2 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Bill Nottingham
Michał Piotrowski (mkkp...@gmail.com) said: If systemd will allow us to do that, sure. What's the point here? For example, this doesn't cut down on the number of listening ports, obviously, nor on the requirements for root passwords and potential root login. And if it's started in

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 10:07 AM, Miloslav Trmač wrote: Richard W.M. Jones píše v Po 06. 12. 2010 v 18:04 +: On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: On most desktop systems firewall is not needed. Many users do not

Re: Firewall

2010-12-06 Thread Daniel P. Berrange
On Mon, Dec 06, 2010 at 11:00:53AM -0800, Jesse Keating wrote: On 12/06/2010 10:07 AM, Miloslav Trmač wrote: Richard W.M. Jones píše v Po 06. 12. 2010 v 18:04 +: On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote:

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:09 AM, Miloslav Trmač wrote: Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: Right, I always struggle with this. If you allow services that bind to a port once enabled to have the port open, then what good does it do to have the port closed? I really wonder what real

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to localhost, or a UNIX domain socket but for some reason screwed up their service's config opened it to the world. I could buy this if we actually alerted

Re: Firewall

2010-12-06 Thread Matthew Miller
On Mon, Dec 06, 2010 at 08:09:29PM +0100, Miloslav Trmač wrote: I can see the following primary reasons to have a firewall: * Enforcing a sysadmin-set (system-wide or site-wide) policy. No, you will not run any bittorrent client on the company's computer.

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/6 Bill Nottingham nott...@redhat.com: Michał Piotrowski (mkkp...@gmail.com) said: If systemd will allow us to do that, sure. What's the point here? For example, this doesn't cut down on the number of listening ports, obviously, nor on the requirements for root passwords and

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:20 AM, Matthew Miller wrote: Installing a firewall by default contributes to defense in depth at relatively little cost. I think that's discounting the user cost, of having something actively getting in your way of accomplishing tasks, and we have no real good way of helping

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:15 PM, Jesse Keating wrote: On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to localhost, or a UNIX domain socket but for some reason screwed up their service's config opened it to the world.

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:27 AM, Phil Knirsch wrote: On 12/06/2010 08:15 PM, Jesse Keating wrote: On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to localhost, or a UNIX domain socket but for some reason screwed up

Re: Firewall

2010-12-06 Thread Michał Piotrowski
2010/12/6 Jesse Keating jkeat...@redhat.com: On 12/06/2010 11:20 AM, Matthew Miller wrote: Installing a firewall by default contributes to defense in depth at relatively little cost. I think that's discounting the user cost, of having something actively getting in your way of accomplishing

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Miloslav Trmač
Michał Piotrowski píše v Po 06. 12. 2010 v 20:22 +0100: 2010/12/6 Bill Nottingham nott...@redhat.com: Does openssh stands out something special between other demons? Actually, it does - for remote installations (sometimes the only option) ssh needs to be running after installation so that the

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Jesse Keating píše v Po 06. 12. 2010 v 11:14 -0800: On 12/06/2010 11:09 AM, Miloslav Trmač wrote: Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: Right, I always struggle with this. If you allow services that bind to a port once enabled to have the port open, then what good does it do

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 20:34 +0100, Miloslav Trmač wrote: It's not, but we don't really have personal installs; any system can be a desktop, a server, or both at the same time. Agreed - I think the case being described by Jesse, though, is the livecd case. That's what the 'personal install'

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/03/2010 09:33 PM, Garrett Holmstrom wrote: On 12/3/2010 18:34, Jesse Keating wrote: The original thought was to have top level branches that are named after distribution releases, eg f14, f15, el5. Then we would force branches of those branches use a naming structure of f14/topic. The

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 11:15:37AM -0800, Jesse Keating wrote: On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to localhost, or a UNIX domain socket but for some reason screwed up their service's config

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:40 PM, Richard W.M. Jones wrote: On Mon, Dec 06, 2010 at 11:15:37AM -0800, Jesse Keating wrote: On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to localhost, or a UNIX domain socket but for

Re: Firewall

2010-12-06 Thread Michael Cronenworth
Richard W.M. Jones wrote: What we really lack is good visibility for n00bs. Sure you can do 'netstat -anp' to show open ports and (if you're more of an expert than me) look at iptables to see what's wrong, but having nice GUI tools to display this information would be better. Like...

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:34 AM, Miloslav Trmač wrote: Jesse Keating píše v Po 06. 12. 2010 v 11:14 -0800: On 12/06/2010 11:09 AM, Miloslav Trmač wrote: Jesse Keating píše v Po 06. 12. 2010 v 11:00 -0800: Right, I always struggle with this. If you allow services that bind to a port once enabled to

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 02:19 AM, Matej Cepl wrote: Dne 4.12.2010 06:33, Garrett Holmstrom napsal(a): Why tie branch names down to specific releases? While that scheme makes it easy for fedpkg to guess what release to attempt to build against when one only cares about one release, it makes little

Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
I wonder why my server rejected my previous email? -- Wiadomość przekazana dalej -- Od: Michał Piotrowski mkkp...@gmail.com Data: 6 grudnia 2010 20:46 Temat: Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 11:48 -0800, Jesse Keating wrote: Bittorrent, network games, zero conf come to mind. Bittorrent won't work through many/most wireless routers unless they are not natted and/or not explicitly configured. what network games? Heck, what network games do we HAVE? what are

Re: Firewall

2010-12-06 Thread Bill Nottingham
Phil Knirsch (pknir...@redhat.com) said: Basically it's a statefull firewall daemon now that allows us to support and implement a lot of those features which have been so critically missing in our old way of doing firewalls (aka static crap) and basically impossible to do there. One

Re: Firewall

2010-12-06 Thread Bill Nottingham
seth vidal (skvi...@fedoraproject.org) said: Bittorrent won't work through many/most wireless routers unless they are not natted and/or not explicitly configured. what network games? Heck, what network games do we HAVE? what are the use cases of zeroconf-enabled apps that we're

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: seth vidal (skvi...@fedoraproject.org) said: Bittorrent won't work through many/most wireless routers unless they are not natted and/or not explicitly configured. what network games? Heck, what network games do we HAVE?

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Bill Nottingham
Michał Piotrowski (mkkp...@gmail.com) said: We are talking here about the case when ssh server is started when user connect to 22 port (or other configured). From my POV everything should work as expected. Right. To do this in systemd implies that you're patching openssh to do socket-based

Re: Firewall

2010-12-06 Thread Dennis Jacobfeuerborn
On 12/06/2010 08:53 PM, Bill Nottingham wrote: Phil Knirsch (pknir...@redhat.com) said: Basically it's a statefull firewall daemon now that allows us to support and implement a lot of those features which have been so critically missing in our old way of doing firewalls (aka static crap) and

Re: Firewall

2010-12-06 Thread Dennis Jacobfeuerborn
On 12/06/2010 08:43 PM, Phil Knirsch wrote: On 12/06/2010 08:40 PM, Richard W.M. Jones wrote: On Mon, Dec 06, 2010 at 11:15:37AM -0800, Jesse Keating wrote: On 12/06/2010 11:05 AM, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to

Re: Firewall

2010-12-06 Thread Tomasz Torcz
On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: seth vidal (skvi...@fedoraproject.org) said: Bittorrent won't work through many/most wireless routers unless they are not natted and/or not explicitly configured.

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:53 PM, Bill Nottingham wrote: Phil Knirsch (pknir...@redhat.com) said: Basically it's a statefull firewall daemon now that allows us to support and implement a lot of those features which have been so critically missing in our old way of doing firewalls (aka static crap) and

Re: Firewall

2010-12-06 Thread Phil Knirsch
On 12/06/2010 08:59 PM, Dennis Jacobfeuerborn wrote: On 12/06/2010 08:53 PM, Bill Nottingham wrote: Phil Knirsch (pknir...@redhat.com) said: Basically it's a statefull firewall daemon now that allows us to support and implement a lot of those features which have been so critically missing in

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/6 Bill Nottingham nott...@redhat.com: Michał Piotrowski (mkkp...@gmail.com) said: We are talking here about the case when ssh server is started when user connect to 22 port (or other configured). From my POV everything should work as expected. Right. To do this in systemd implies

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: seth vidal (skvi...@fedoraproject.org) said: Bittorrent won't work through many/most wireless routers unless they

Re: Firewall

2010-12-06 Thread Matthew Miller
On Mon, Dec 06, 2010 at 08:27:00PM +0100, Phil Knirsch wrote: Basically it's a statefull firewall daemon now that allows us to support and implement a lot of those features which have been so critically Does this *really* need to be implemented as yet another constantly-running daemon?

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 02:31 AM, Kalev Lember wrote: On 12/04/2010 12:19 PM, Matej Cepl wrote: Related issue I have with the Fedora git repositories is that one cannot remove any branch once it is created. After I have created in bitlbee repo two topic branches, only to find out that I cannot remove

Re: Firewall

2010-12-06 Thread Tom Lane
Jesse Keating jkeat...@redhat.com writes: The argument of default firewall or not would probably quiet down quite a bit if we had any sort of decent UI to help users get the firewall out of their way when they're really trying to do something. +1. In today's environment, not having a firewall

Re: Firewall

2010-12-06 Thread nodata
On 06/12/10 21:06, seth vidal wrote: On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: seth vidal (skvi...@fedoraproject.org) said: Bittorrent won't work through

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/04/2010 07:24 AM, Severin Gehwolf wrote: Also we would need to get a new fedpkg into the hands of all the developers that handles the new branchnames. We could do a build that handles both the oldnames and the new and have it out and available for a reasonable period of time

Re: Firewall

2010-12-06 Thread Miloslav Trmač
Tomasz Torcz píše v Po 06. 12. 2010 v 21:01 +0100: Yeah, general discovery. From the top of my head: - Pulseaudio sinks and sources - libvirt instances for virt-manager - VNC desktops for Vinagre - local web pages (think SOHO router config page) for zeroconf enabled Webbrowsers like

q

2010-12-06 Thread Nicolas Mailhot
Le lundi 06 décembre 2010 à 20:09 +0100, Miloslav Trmač a écrit : Are there other reasons? App writers are busy reinventing the wheel, changing the configuration files syntax, and believing they can't do wrong; make sure their mess is blocked at the outbound port before we get rooted. --

[perl-Finance-Quote] fix rawhide build.

2010-12-06 Thread Bill Nottingham
commit 34e0fd76674a96d37e4fc0ea14ee994806cdb53b Author: Bill Nottingham nott...@redhat.com Date: Mon Dec 6 15:41:13 2010 -0500 fix rawhide build. perl-Finance-Quote.spec |6 +- 1 files changed, 5 insertions(+), 1 deletions(-) --- diff --git a/perl-Finance-Quote.spec

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Bruno Wolff III
On Mon, Dec 06, 2010 at 12:33:40 -0800, Jesse Keating jkeat...@redhat.com wrote: On 12/04/2010 09:52 AM, Bruno Wolff III wrote: Is this going to break things for people that having set up origin tracking for multiple releases in the same repo? Can you explain this a bit more please?

Unretired package impressive blocked in buildsys

2010-12-06 Thread Michael J Gruber
Hi there, I took over a retired package (rereview APPROVED, took over package, reassigned bugs, SCM update request processed) but can't seem to fedpkg build it: I get package impressive is blocked for tag dist-f15 (see below). Everything in pkgdb looks OK:

[Test-Announce] Please Help Test 389 Directory Server 1.2.7.2

2010-12-06 Thread Rich Megginson
389-ds-base-1.2.7.2 is now in Testing. This release has some key fixes for bugs in 1.2.7 and 1.2.7.1. Please help us test. The sooner we can get this release tested, the sooner we can push it to Stable and make it generally available. There is also a new 389-admin-1.1.13 package.

Re: Firewall

2010-12-06 Thread Rodd Clarkson
On Tue, Dec 7, 2010 at 5:04 AM, Richard W.M. Jones rjo...@redhat.comwrote: On Mon, Dec 06, 2010 at 11:04:39AM -0500, Matt McCutchen wrote: On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: On most desktop systems firewall is not needed. Many users do not even know how to

Re: Unretired package impressive blocked in buildsys

2010-12-06 Thread Kevin Fenzi
On Mon, 06 Dec 2010 22:04:27 +0100 Michael J Gruber m...@fedoraproject.org wrote: Hi there, I took over a retired package (rereview APPROVED, took over package, reassigned bugs, SCM update request processed) but can't seem to fedpkg build it: I get package impressive is blocked for tag

Re: Firewall

2010-12-06 Thread Richard W.M. Jones
On Mon, Dec 06, 2010 at 03:06:24PM -0500, seth vidal wrote: On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: On Mon, Dec 06, 2010 at 02:56:19PM -0500, seth vidal wrote: On Mon, 2010-12-06 at 14:55 -0500, Bill Nottingham wrote: seth vidal (skvi...@fedoraproject.org) said:

Re: Firewall

2010-12-06 Thread Matej Cepl
Dne 6.12.2010 20:53, seth vidal napsal(a): what are the use cases of zeroconf-enabled apps that we're targetting? * XMPP-over-Zeroconf (Bonjour) * gtkvnc searches for VNC servers * ekiga looks for other clients on LAN * you can go to local ssh servers in .local domain * etc. etc. ...

Re: Firewall

2010-12-06 Thread Matej Cepl
Dne 6.12.2010 21:06, seth vidal napsal(a): I'm confused - are any of the above intended to be used/available by anyone who is NOT experienced enough to know what iptables are and how to manage them? B/c I think it's a bit unlikely. OK, so let's add (just what gets packaged in Fedora): *

Re: Firewall

2010-12-06 Thread Michał Piotrowski
2010/12/6 Matej Cepl mc...@redhat.com: Dne 6.12.2010 21:06, seth vidal napsal(a): [..] I have to admit, I am not completely happy with having no firewall per default, It looks like you do not have to worry about removing iptables from @core :) I think that further discussion on removal it

Re: Firewall

2010-12-06 Thread Adam Jackson
On Mon, 2010-12-06 at 15:06 -0500, seth vidal wrote: On Mon, 2010-12-06 at 21:01 +0100, Tomasz Torcz wrote: Yeah, general discovery. From the top of my head: - Pulseaudio sinks and sources - libvirt instances for virt-manager - VNC desktops for Vinagre - local web pages (think SOHO

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 17:54 -0500, Adam Jackson wrote: And every time I do, I think there's no reason it needs to be this hard. All I want to do is make movies on my hard drive visible to my PS3. Why is this harder than clicking share? All I want to do is plug the NAS drive I just bought

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/06/2010 01:10 AM, Andreas Schwab wrote: Jesse Keating jkeat...@redhat.com writes: However, if a user had a local branch of f14 or f14/master they will be left with mismatched .git/config entries. In this case it's easiest to delete the local branch (git branch -d f14) and check it

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Toshio Kuratomi
On Mon, Dec 06, 2010 at 06:55:20PM +0100, Michał Piotrowski wrote: W dniu 6 grudnia 2010 18:43 użytkownik Kevin Fenzi ke...@scrye.com napisał: On Mon, 6 Dec 2010 18:17:51 +0100 Michał Piotrowski mkkp...@gmail.com wrote: W dniu 6 grudnia 2010 18:01 użytkownik Kevin Fenzi ke...@scrye.com

Re: Firewall

2010-12-06 Thread Orion Poplawski
On 12/06/2010 04:04 PM, seth vidal wrote: On Mon, 2010-12-06 at 17:54 -0500, Adam Jackson wrote: And every time I do, I think there's no reason it needs to be this hard. All I want to do is make movies on my hard drive visible to my PS3. Why is this harder than clicking share? All I want

Re: Request for comment: Potential change to dist-git branch structure

2010-12-06 Thread Jesse Keating
On 12/06/2010 12:44 PM, Bruno Wolff III wrote: On Mon, Dec 06, 2010 at 12:33:40 -0800, Jesse Keating jkeat...@redhat.com wrote: On 12/04/2010 09:52 AM, Bruno Wolff III wrote: Is this going to break things for people that having set up origin tracking for multiple releases in the same repo?

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 11:53 AM, seth vidal wrote: On Mon, 2010-12-06 at 11:48 -0800, Jesse Keating wrote: Bittorrent, network games, zero conf come to mind. Bittorrent won't work through many/most wireless routers unless they are not natted and/or not explicitly configured. Actually bittorrents

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 12:18 PM, Tom Lane wrote: Jesse Keating jkeat...@redhat.com writes: The argument of default firewall or not would probably quiet down quite a bit if we had any sort of decent UI to help users get the firewall out of their way when they're really trying to do something. +1. In

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/7 Toshio Kuratomi a.bad...@gmail.com: On Mon, Dec 06, 2010 at 06:55:20PM +0100, Michał Piotrowski wrote: W dniu 6 grudnia 2010 18:43 użytkownik Kevin Fenzi ke...@scrye.com napisał: On Mon, 6 Dec 2010 18:17:51 +0100 Michał Piotrowski mkkp...@gmail.com wrote: W dniu 6 grudnia 2010

Re: Firewall

2010-12-06 Thread seth vidal
On Mon, 2010-12-06 at 16:10 -0700, Orion Poplawski wrote: But once we're talking about OVERWHELMINGLY LARGE NUMBER OF SERVER INSTALLS, aren't we also talking about kickstart and other automated management tools with which configuring things away from their default values is a standard and

Re: Firewall

2010-12-06 Thread Stephen John Smoogen
On Mon, Dec 6, 2010 at 16:25, Jesse Keating jkeat...@redhat.com wrote: On 12/06/2010 12:18 PM, Tom Lane wrote: Jesse Keating jkeat...@redhat.com writes: The argument of default firewall or not would probably quiet down quite a bit if we had any sort of decent UI to help users get the firewall

Re: Firewall

2010-12-06 Thread Jesse Keating
On 12/06/2010 03:42 PM, Stephen John Smoogen wrote: Ports that you don't know are open to the network but are somehow available. Let us put this conversation slightly different... how many of us remember password-less package install? It all sounded like a good idea with people who are going

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Matt McCutchen
On Tue, 2010-12-07 at 00:38 +0100, Michał Piotrowski wrote: Cron - but should be activated only when cron files exist It seems to me that the list: - ssh - Dbus - syslog - iptables - ip6tables - auditd - restorecond is an absolute minimum to get working system. I don't agree that ssh

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Michał Piotrowski
2010/12/7 Matt McCutchen m...@mattmccutchen.net: On Tue, 2010-12-07 at 00:38 +0100, Michał Piotrowski wrote: Cron - but should be activated only when cron files exist It seems to me that the list: - ssh - Dbus - syslog - iptables - ip6tables - auditd - restorecond is an absolute

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Toshio Kuratomi
On Tue, Dec 07, 2010 at 12:38:07AM +0100, Michał Piotrowski wrote: 2010/12/7 Toshio Kuratomi a.bad...@gmail.com:  Those might be able to start defining a category of things needed to run a desktop session or something. iptables, no chance to disable this I'd be more inclined to ask

Re: Fedora default services

2010-12-06 Thread Jason L Tibbitts III
MP == Michał Piotrowski mkkp...@gmail.com writes: MP Dear FPC people, could you provide this list in the near future? We haven't even met since it was decided that we were to do this. I imagine it would take a couple of meetings to bang out a list. - J -- devel mailing list

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Matt McCutchen
On Tue, 2010-12-07 at 01:07 +0100, Michał Piotrowski wrote: 2010/12/7 Matt McCutchen m...@mattmccutchen.net: On Tue, 2010-12-07 at 00:38 +0100, Michał Piotrowski wrote: Cron - but should be activated only when cron files exist It seems to me that the list: - ssh - Dbus - syslog -

Re: Fedora as semantic desktop (nautilus and tracker integration) ?

2010-12-06 Thread Adam Williamson
On Sun, 2010-12-05 at 17:04 +0100, valent.turko...@gmail.com wrote: On Sat, Dec 4, 2010 at 11:44 PM, valent.turko...@gmail.com valent.turko...@gmail.com wrote: https://bugzilla.redhat.com/show_bug.cgi?id=501227 I'm writing to devel list just if anybody can say will there be any chance to

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Adam Williamson
On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: There are no stupid questions :) On most desktop systems firewall is not needed. Many users do not even know how to configure it. In fact I disable it in most of my systems, because there is no real use for it. So I asked a simple

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Miloslav Trmač
Adam Williamson píše v Po 06. 12. 2010 v 17:57 -0800: On Mon, 2010-12-06 at 10:54 +0100, Michał Piotrowski wrote: There are no stupid questions :) On most desktop systems firewall is not needed. Many users do not even know how to configure it. In fact I disable it in most of my

Re: Firewall

2010-12-06 Thread Adam Williamson
On Mon, 2010-12-06 at 19:05 +, Daniel P. Berrange wrote: The other benefit would be if the user only intended the service to be accessible to localhost, or a UNIX domain socket but for some reason screwed up their service's config opened it to the world. I use it as a safety net for

Re: Fedora default services (was: Re: F15 Feature - convert as many service init files as possible to the native SystemD services)

2010-12-06 Thread Jesse Keating
On 12/06/2010 05:57 PM, Adam Williamson wrote: On most laptops, however, which are the most common types of system sold today, a firewall is very definitely needed when you're connecting to hotel networks, public wifi access points... Please explain why. What actual service is the firewall

  1   2   >