Re: Change of cronie and crontabs CIS compliance

2023-12-10 Thread Arthur G
Generally, CIS Benchmarks are only prescriptive and getting near/total compliance with the benchmark is mainly for those who have host fleets under some SCAP compliance regime. Nonetheless, picking on the low hanging fruit such as cron compliance isn't going to drastically improve the security post

Re: Inactive packages removed from packager group

2023-11-19 Thread Arthur G
I recall a number of years back a proposed gcc upgrade broke many builds. This required most maintainers to log in and refactor their source code against the new gcc (and new gcc options). I hadn't logged into Fedora for years however I did do my due diligence and rather quickly logged in and fixe

Re: OpenSSH 8.7p1 in rawhide

2021-10-12 Thread Arthur G
Hi Dimitry, Just came across a situation where I can't limit SFTP max connections on a per user (not per IP) basis without resorting to using wrappers. Not sure if the old SCP actually logs in (sorry haven't checked) but the SFTP that I use (latest RHEL7) doesn't honour limits.conf (maxlogins or n

Re: F35 Change: Use yescrypt as default hashing method for shadow passwords (System-Wide Change proposal)

2021-06-08 Thread Arthur G
+1 ...and many thanks for providing a very comprehensive rationale. On Tue, 8 Jun 2021 at 21:47, Zbigniew Jędrzejewski-Szmek wrote: > On Mon, Jun 07, 2021 at 02:59:54PM -0400, Ben Cotton wrote: > > == Feedback == > +1 > > > == Benefit to Fedora == > > == Dependencies == > > * anaconda: https://g

Re: F35 Change: "Fedora Linux" in /etc/os-release

2021-03-11 Thread Arthur G
I much prefer simple things, and referring to the distribution as "Fedora" does it for me on a few levels. FNU? Perhaps in the future the Linux kernel may fall out of favour for something else, hey why not just cut to the eventual chase and call it systemd-fedora. On Thu, 11 Mar 2021 at 22:21, Al

Re: Fedora 33 network configuration (ifcfg*) migration guide available?

2021-02-01 Thread Arthur G
Thanks also for the nmcli tip, it got me out of a pickle today with RedHat 8. From what I've experienced so far it's well implemented. On Mon, 1 Feb 2021 at 08:42, Kevin Kofler via devel < devel@lists.fedoraproject.org> wrote: > Dominik 'Rathann' Mierzejewski wrote: > > You can use crudini to man

Re: Fedora 33 network configuration (ifcfg*) migration guide available?

2021-01-27 Thread Arthur G
Too bad NetworkManager persists with the old MS-DOS "INI" file format for it's configuration files. At least network-scripts was bash script friendly. On Mon, 25 Jan 2021 at 20:53, Peter Boy wrote: > With Fedora 33 network configuration is by default persisted in > /etc/NetworkManager/system-con

Re: Fedora 34 Change proposal: Remove and deprecate nscd in favour of sssd and systemd-resolved (Self-Contained Change)

2020-11-07 Thread Arthur G
"Is there a concern or known issue that will cause systemd-resolved to not work in your setup?" I have a ton of experience with sssd and before that samba winbind so know the benefits and limitations of this software stack well. I'm new to systemd-resolved but have been reading the lively Fedora th

Re: Fedora 34 Change proposal: Remove and deprecate nscd in favour of sssd and systemd-resolved (Self-Contained Change)

2020-11-05 Thread Arthur G
"the system administrator will need to install and configure sssd to replace it after the update. Even when this is not done, the only visible affect will be slower resolution of named service queries due to a missing cache." I use nscd on a few application servers that point to unreliable DNS ser

Re: Proposed F19 Feature: Replace MySQL with MariaDB

2013-01-23 Thread Arthur G
It would nice for MariaDB to obsolete MySQL and have an emulation switch that allows it to masquerade as a MySQL installation as well as operate in native mode. This will provide backwards compatability for systems that use products that want to see a MySQL installation. This will also provide a fr

Re: Name that Tree!

2010-02-17 Thread Arthur G
Thanks Dave, Here's one borrowed from the music industry. mastering (or starting with R - remastering) I've used this concept successfully for commercial orgs during their release finalizing stages. Arthur. On 18 February 2010 10:19, David wrote: > On 15 February 2010 11:19, Ar

Re: Name that Tree!

2010-02-14 Thread Arthur G
rolling - as in the song - rolling, rolling, rolling, rawhide! On 15 February 2010 11:06, Mike Chambers wrote: > On Mon, 2010-02-15 at 09:37 +1000, Peter Hutterer wrote: > > Of course, if wanna keep the "gold" name for the official release path, > could rename other and use below.. > > bronze -