Re: thunderbird-24.0.2 reverted - why? (Use the commit log..., Luke)

2013-09-24 Thread Reindl Harald
Am 24.09.2013 10:16, schrieb Michael J Gruber: I can see that thunderbird 24 had been built successfully and then reverted on the fc18 branch (and others). The git commit log and the spec changelog say Revert to 17.0.8 and nothing else. I do understand that more than a successful build

Re: thunderbird-24.0.2 reverted - why? (Use the commit log..., Luke)

2013-09-24 Thread Reindl Harald
Am 24.09.2013 12:29, schrieb Heiko Adams: Am 24.09.2013 11:39, schrieb drago01: What happened here is that 24 caused broken deps so the maintainers probably reverted to get the security fixes out faster while stuff is being sorted out. And yes I agree that commit messages should be more

Re: thunderbird-24.0.2 reverted - why? (Use the commit log..., Luke)

2013-09-24 Thread Reindl Harald
Am 24.09.2013 15:41, schrieb Remi Collet: Le 24/09/2013 12:35, Reindl Harald a écrit : and that is why ist *is wrong* to give negative karma because some extension is not updated - who says that the extension RPM is relevant for all users? I don't agree. Broken dep are not acceptable

Re: thunderbird-24.0.2 reverted - why? (Use the commit log..., Luke)

2013-09-24 Thread Reindl Harald
Am 24.09.2013 16:00, schrieb Jan Horak: We've decided to revert package because it broke dependencies with thunderbird-lightning. Decision to rebase package to 24 was made a bit in a hurry and since we wasn't able to rebase to lightning 2.6 fast enough we decide to use 17.0.9 ESR to keep

hidden GRUB menu - Re: Suspension problem last 2 days

2013-09-22 Thread Reindl Harald
Am 22.09.2013 02:52, schrieb Ed Greshko: On 09/22/13 08:39, Timothy Murphy wrote: Ed Greshko wrote: I've been having a problem on my Thinkpad T61 for the last 2 days. In fact since yum update installed kernel-PAE-3.11.1-200.fc19.i686, though that is probably a coincidence. Would it be

Re: hidden GRUB menu - Re: Suspension problem last 2 days

2013-09-22 Thread Reindl Harald
Am 22.09.2013 17:36, schrieb drago01: On Sun, Sep 22, 2013 at 3:21 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 22.09.2013 02:52, schrieb Ed Greshko: On 09/22/13 08:39, Timothy Murphy wrote: Ed Greshko wrote: I've been having a problem on my Thinkpad T61 for the last 2 days. In fact

Re: hidden GRUB menu - Re: Suspension problem last 2 days

2013-09-22 Thread Reindl Harald
Am 22.09.2013 18:00, schrieb drago01: On Sun, Sep 22, 2013 at 5:41 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 22.09.2013 17:36, schrieb drago01: On Sun, Sep 22, 2013 at 3:21 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 22.09.2013 02:52, schrieb Ed Greshko: On 09/22/13 08:39

Re: hidden GRUB menu - Re: Suspension problem last 2 days

2013-09-22 Thread Reindl Harald
Am 22.09.2013 18:13, schrieb Jan Kratochvil: On Sun, 22 Sep 2013 03:21:32 +0200, Reindl Harald wrote: now we have exactly what i said will happen: users in trouble does not know how to boot the still installed older kernel because they never learned that there are more than one because

Re: hidden GRUB menu - Re: Suspension problem last 2 days

2013-09-22 Thread Reindl Harald
Am 22.09.2013 18:30, schrieb Jan Kratochvil: On Sun, 22 Sep 2013 18:24:45 +0200, Reindl Harald wrote: Am 22.09.2013 18:13, schrieb Jan Kratochvil: My grandfather still believes those are multiple _different_ Fedora installations, each having different games/files. As he has also CentOS

Re: does mc really require perl*?

2013-09-21 Thread Reindl Harald
Am 20.09.2013 21:13, schrieb Jakub Jelinek: On Fri, Sep 20, 2013 at 08:37:50PM +0200, Reindl Harald wrote: well, some people would now say i do the same i can say for sure to some other pakcages on a cloud server where they would disagree and because everybody has different needs keep

Re: does mc really require perl*?

2013-09-20 Thread Reindl Harald
Am 20.09.2013 17:18, schrieb Miloslav Trmač: (IMHO, disk space is cheap enough that just using hard Requires: is rarely wrong enough to worry about it.) no it is *not* in cloud infrastructure where you have 100, 500, 1000 instances and need to reserve 50 or 150 MB more for the base OS because

Re: About F19 Firewall

2013-09-20 Thread Reindl Harald
Am 20.09.2013 15:59, schrieb Thomas Woerner: Multicast DNS is allowed in the internal network(chain IN_internal_allow). I guess IN_internal_allow is meant for some closed group internal network, not sure. ACCEPT udp -- 0.0.0.0/0224.0.0.251 udp dpt:5353

Re: [Maria-developers] Prep for MariaDB 5.5.33a

2013-09-20 Thread Reindl Harald
Am 20.09.2013 03:32, schrieb Daniel Bartholomew: I've begun the prep for the special 5.5.33a release. Draft changelog and release notes are here: https://mariadb.com/kb/en/mariadb-5533a-changelog/ https://mariadb.com/kb/en/mariadb-5533a-release-notes/ As always, fixes, additions, and

packaging guidelines again

2013-09-16 Thread Reindl Harald
i get somehow tired to report bugs for several packages, refresh them at each release because maintainers ignore guidelines all the time some of them responded and fixed their packages some insist to ignore them https://fedoraproject.org/wiki/Packaging:Guidelines?rd=Packaging/Guidelines#PIE If

Re: Full subpackage (-n type) with different version from main package

2013-09-15 Thread Reindl Harald
Am 15.09.2013 19:07, schrieb Richard Shaw: On Sun, Sep 15, 2013 at 11:58 AM, Dridi Boukelmoune dridi.boukelmo...@gmail.com mailto:dridi.boukelmo...@gmail.com wrote: Hi, Have you tried to tweak the %setup macro with the -n option ? Yes, I have to because the source name

Update notice FEDORA-2013-13577 (von updates-testing) is broken, or a bad duplicate, skipping

2013-09-13 Thread Reindl Harald
a few days ago i upgraded to F19 and my cron-script checking for updates as well as yum check-update reports these warnings - unsure where to report a bug because it's not a specific package, so i post it here Update notice FEDORA-2013-13577 (von updates-testing) is broken, or a bad duplicate,

Re: Firewall blocking desktop features

2013-09-12 Thread Reindl Harald
Am 11.09.2013 23:18, schrieb Mateusz Marzantowicz: On 11.09.2013 17:24, Daniel J Walsh wrote: On 09/11/2013 09:18 AM, Reindl Harald wrote: The problem with this solution is potential conflicts in port numbers and pps that just use random ports (Which I think should just not be allowed

Re: Firewall blocking desktop features

2013-09-12 Thread Reindl Harald
Am 12.09.2013 08:25, schrieb Pierre-Yves Chibon: Application should request the ports to be opened and the firewalld layer should then confirm with the user stating which ports and which app requested said ports. The app can't lie if the firewall layer is the one asking for confirmation.

Re: Firewall blocking desktop features

2013-09-11 Thread Reindl Harald
Am 11.09.2013 15:05, schrieb Daniel J Walsh: On 09/11/2013 08:56 AM, Alec Leamas wrote: Although this would work for both our wifes I'd hate it myself. There need to be some way in the interface to understand what's *really* going on here, the ports opened, triggers etc. But not unless

unacceptable maintainer attitudes - Re: *please* unpush firefox-23.0.1-4.fc18 from updates-testing

2013-09-11 Thread Reindl Harald
Am 08.09.2013 19:20, schrieb Michael Schwendt: On Sun, 8 Sep 2013 17:32:55 +0200, Tomasz Torcz wrote: On Sun, Sep 08, 2013 at 12:11:05PM +0200, Reindl Harald wrote: no idea why the FF maintainer does not try to install his own package for days or at least replace it with a clean build

Re: Firewall blocking desktop features

2013-09-11 Thread Reindl Harald
Am 11.09.2013 00:01, schrieb Alec Leamas: On 2013-09-10 23:11, Reindl Harald wrote: Am 10.09.2013 22:58, schrieb Heiko Adams: Am 10.09.2013 22:07, schrieb Peter Oliver: Empathy's People Nearby feature doesn't work out of the box because the required ports are blocked by default

Re: Firewall blocking desktop features

2013-09-11 Thread Reindl Harald
Am 11.09.2013 12:02, schrieb Nicolas Mailhot: Le Mer 11 septembre 2013 11:23, Alec Leamas a écrit : On 2013-09-11 11:11, Heiko Adams wrote: Am 11.09.2013 10:41, schrieb Ankur Sinha: - These software inform and take permission from the user before opening ports in the firewall. IMHO it

Re: Firewall blocking desktop features

2013-09-11 Thread Reindl Harald
Am 10.09.2013 23:38, schrieb Heiko Adams: Am 10.09.2013 23:11, schrieb Reindl Harald: AFAIR the samba client port is also blocked by default which makes it impossible to share files with windows machines what is a samba *client* port? It's port 137 and 138 UDP mhh - and why should i

Re: Firewall blocking desktop features

2013-09-11 Thread Reindl Harald
Am 11.09.2013 04:17, schrieb Ankur Sinha: On Wed, 2013-09-11 at 00:01 +0200, Alec Leamas wrote: Nobody questions this. Thie issue in this thread is if we could find ways to make it simpler to enable these services. Last I checked, the bugs already spoke about giving utilities the ability

Re: Firewall blocking desktop features

2013-09-10 Thread Reindl Harald
Am 10.09.2013 22:58, schrieb Heiko Adams: Am 10.09.2013 22:07, schrieb Peter Oliver: Empathy's People Nearby feature doesn't work out of the box because the required ports are blocked by default by the firewall (https://bugzilla.redhat.com/show_bug.cgi?id=844308). It's a similar story with

Re: Fedora/Redhat and perfect forward secrecy

2013-09-09 Thread Reindl Harald
: Fedora/Redhat and perfect forward secrecy Datum: Mon, 26 Aug 2013 11:07:29 +0200 Von: Florian Weimer fwei...@redhat.com An: Development discussions related to Fedora devel@lists.fedoraproject.org Kopie (CC): Reindl Harald h.rei...@thelounge.net, Mailing-List fedora-users us

Re: Dracut HostOnly or ConfigurationOnly?

2013-09-09 Thread Reindl Harald
Am 09.09.2013 14:11, schrieb Jóhann B. Guðmundsson: On 09/09/2013 11:48 AM, Kamil Paral wrote: On 09/06/2013 10:15 AM, Jiri Eischmann wrote: Can this not be done automatically? If the system fails to boot because of significant hardware changes, it's an obvious option to regenerate

Re: PostgreSQL 9.3 in Fedora 20?

2013-09-09 Thread Reindl Harald
Am 09.09.2013 17:37, schrieb Bruno Wolff III: On Mon, Sep 09, 2013 at 17:19:54 +0200, Michał Piotrowski mkkp...@gmail.com wrote: Hi, I know that currently Fedora 20 is in feature freeze state. But Alpha version is still not released and PosgreSQL developers released new latest and

Re: Dracut HostOnly or ConfigurationOnly?

2013-09-09 Thread Reindl Harald
Am 09.09.2013 18:38, schrieb Jared K. Smith: On Mon, Sep 9, 2013 at 8:19 AM, Reindl Harald h.rei...@thelounge.net mailto:h.rei...@thelounge.net wrote: i think you misread the post - IMHO the intention was that once again a feature with zero benefit was acknowledged without caseful

Re: Fedora/Redhat and perfect forward secrecy

2013-09-09 Thread Reindl Harald
Am 09.09.2013 18:12, schrieb Paul Wouters: On Mon, 9 Sep 2013, Reindl Harald wrote: I don't get it, either google dhe versus ecdhe performance http://vincent.bernat.im/en/blog/2011-ssl-perfect-forward-secrecy.html Let’s focus on the server part. Enabling DHE-RSA-AES128-SHA cipher suite

*please* unpush firefox-23.0.1-4.fc18 from updates-testing

2013-09-08 Thread Reindl Harald
no idea why the FF maintainer does not try to install his own package for days or at least replace it with a clean build https://bugzilla.redhat.com/show_bug.cgi?id=1004062 https://bugzilla.redhat.com/show_bug.cgi?id=1005094 that RPM has a bug at it's own and must not segfault is a different

Re: *please* unpush firefox-23.0.1-4.fc18 from updates-testing

2013-09-08 Thread Reindl Harald
Am 08.09.2013 17:32, schrieb Tomasz Torcz: On Sun, Sep 08, 2013 at 12:11:05PM +0200, Reindl Harald wrote: no idea why the FF maintainer does not try to install his own package for days or at least replace it with a clean build https://bugzilla.redhat.com/show_bug.cgi?id=1004062 https

Re: 19 (Schrödinger’s Cat)

2013-09-06 Thread Reindl Harald
Am 06.09.2013 05:21, schrieb Matthew Garrett: On Fri, Sep 06, 2013 at 12:33:40AM +0200, Reindl Harald wrote: whay is Fedora starting with this crap exatly with the release having a short-minded name with special chars not properly handeled by the whole OS? You're sending email

Re: 19 (Schrödinger’s Cat)

2013-09-06 Thread Reindl Harald
Am 06.09.2013 20:26, schrieb Darryl L. Pierce: On Thu, Sep 05, 2013 at 11:26:39PM +0200, Reindl Harald wrote: Am 05.09.2013 23:11, schrieb Darryl L. Pierce: On Thu, Sep 05, 2013 at 10:11:51PM +0200, Reindl Harald wrote: * there is *nothing* in this configuration referring to the release name

19 (Schrödinger’s Cat)

2013-09-05 Thread Reindl Harald
do we get this annoying wrong display in GRUB fixed inside the F19 lifetime or *at least* if i remove it from /boot/grub2/grub.cfg and have only Fedora (3.10.10-200.fc19.x86_64) get away insist at *every* kernel update add 19 (Schrödinger’s Cat) again? in previous releases nobody and nothing

Re: 19 (Schrödinger’s Cat)

2013-09-05 Thread Reindl Harald
Am 05.09.2013 22:04, schrieb Przemek Klosowski: On 09/05/2013 02:52 PM, Reindl Harald wrote: so, no whatever macro is repsonsible for this exactly at the release with a non well thought release name this happens -why in the world does Fedora again and agin make decisions which

Re: 19 (Schrödinger’s Cat)

2013-09-05 Thread Reindl Harald
Am 05.09.2013 23:11, schrieb Darryl L. Pierce: On Thu, Sep 05, 2013 at 10:11:51PM +0200, Reindl Harald wrote: * there is *nothing* in this configuration referring to the release name /boot/grub2/grub.cfg is generated via the grub2-mkconfig script, which uses settings from /etc/default/grub

Re: 19 (Schrödinger’s Cat)

2013-09-05 Thread Reindl Harald
Am 06.09.2013 00:26, schrieb Chris Murphy: On Sep 5, 2013, at 11:26 PM, Reindl Harald h.rei...@thelounge.net wrote: i simply edited /boot/grub2/grub.cfg and after that i expect *nothing* to add the release name *but* a lter kernel updates is adding it again i am using Fedor since Fedora

Re: 19 (Schrödinger’s Cat)

2013-09-05 Thread Reindl Harald
Am 05.09.2013 20:32, schrieb Sérgio Basto: On Qui, 2013-09-05 at 16:35 +0200, Reindl Harald wrote: do we get this annoying wrong display in GRUB fixed inside the F19 lifetime or *at least* if i remove it from /boot/grub2/grub.cfg and have only Fedora (3.10.10-200.fc19.x86_64) get away

MariaDB as a drop-in-replacement - not really

2013-09-02 Thread Reindl Harald
/show_bug.cgi?id=1003410 Original-Nachricht Betreff: Fwd: [Dbmail] MariaDB and dbmail Datum: Sun, 01 Sep 2013 23:37:13 +0200 Von: Reindl Harald h.rei...@thelounge.net An: Mailing-List dbmail dbm...@dbmail.org, Mailing-List mariadb maria-discuss@lists.launchpad.net please can someone

Re: Multiple Loopback Interfaces

2013-08-29 Thread Reindl Harald
Am 29.08.2013 15:53, schrieb Neil Horman: you can use the ip utility to create dummy network devices on top of your loopback device, but the better question is - why? Having multiple clients and servers on a single system doesn't in any way require multiple loopback interfaces. just have

Re: Multiple Loopback Interfaces

2013-08-29 Thread Reindl Harald
Am 29.08.2013 15:38, schrieb John Chludzinski: I need to used multiple loopback addresses (interfaces) for an server application that communicates with multiple clients running on the same machine. Since a loopback interface short circuits the network stack (looping back in the IP layer) it

Re: Multiple Loopback Interfaces

2013-08-29 Thread Reindl Harald
BTW: try to ping 127.0.0.1, 127.0.0.2, 127.0.0.3 here they are pingable as default the instruction below if only needed if the application checks that a configured IP exists via ifconfig or lookalike Am 29.08.2013 15:46, schrieb Reindl Harald: Am 29.08.2013 15:38, schrieb John

Re: Fedora/Redhat and perfect forward secrecy

2013-08-26 Thread Reindl Harald
Am 26.08.2013 11:07, schrieb Florian Weimer: On 08/24/2013 11:38 AM, Reindl Harald wrote: https://bugzilla.redhat.com/show_bug.cgi?id=319901 looks like Redhat based systems are the only remaining which does not support EECDHE which is a shame these days in context of PRISM and more

Re: Fedora/Redhat and perfect forward secrecy

2013-08-26 Thread Reindl Harald
Am 26.08.2013 13:26, schrieb Jan-Frode Myklebust: On Mon, Aug 26, 2013 at 11:07:29AM +0200, Florian Weimer wrote: On 08/24/2013 11:38 AM, Reindl Harald wrote: https://bugzilla.redhat.com/show_bug.cgi?id=319901 looks like Redhat based systems are the only remaining which does not support

Re: Fedora/Redhat and perfect forward secrecy

2013-08-26 Thread Reindl Harald
Am 26.08.2013 16:24, schrieb Chuck Anderson: On Mon, Aug 26, 2013 at 11:17:52AM +0200, Reindl Harald wrote: cause and effect because Fedora does *not* support Ciphers without large performance impacts in reality without ECDHE you have no way go to https://www.ssllabs.com/ssltest/ and look

Re: Changes to make MySQL vs. MariaDB less confusing

2013-08-24 Thread Reindl Harald
Am 23.08.2013 15:06, schrieb Rich Mattes: On Fri, Aug 23, 2013 at 3:40 AM, James Hogarth james.hoga...@gmail.com mailto:james.hoga...@gmail.com wrote: Frankly I'm still of the opinion the Oracle distribution of the MySQL based server should be dropped entirely... If Oracle want

Fedora/Redhat and perfect forward secrecy

2013-08-24 Thread Reindl Harald
https://bugzilla.redhat.com/show_bug.cgi?id=319901 looks like Redhat based systems are the only remaining which does not support EECDHE which is a shame these days in context of PRISM and more and more Ciphers are going to be unuseable (BEAST/CRIME weakness)

Re: bug filed against distribution

2013-08-22 Thread Reindl Harald
Am 23.08.2013 01:50, schrieb Adam Williamson: On Fri, 2013-08-16 at 22:05 +0200, Reindl Harald wrote: since i have enough of bugzilla-mails as response of bugreports containing referecnes to any Fedora version but not the reported i consider this as bug in the distribution itself https

Re: headup : libzip 0.11 in rawhide (and PHP change)

2013-08-21 Thread Reindl Harald
Am 21.08.2013 14:10, schrieb Remi Collet: Le 21/08/2013 09:38, Remi Collet a écrit : Hi. I have updated libzip to 0.11.1 in rawhide. Despite there is no soname change, see: http://upstream-tracker.org/versions/libzip.html So I think it is preferable to rebuild dependent packages to

Re: bug filed against distribution

2013-08-19 Thread Reindl Harald
Am 19.08.2013 16:37, schrieb Kevin Fenzi: On Sat, 17 Aug 2013 20:20:33 +0200 Reindl Harald h.rei...@thelounge.net wrote: because it happens *regulary* and not from time to time and not depending on package/maintainer and that is a wrong behavior which should be made clear insinde

bug filed against distribution

2013-08-17 Thread Reindl Harald
since i have enough of bugzilla-mails as response of bugreports containing referecnes to any Fedora version but not the reported i consider this as bug in the distribution itself https://bugzilla.redhat.com/show_bug.cgi?id=998035 *at least* a we do not fix this in F18 because short explaination

Re: bug filed against distribution

2013-08-17 Thread Reindl Harald
Am 17.08.2013 20:17, schrieb Kevin Fenzi: On Fri, 16 Aug 2013 22:05:57 +0200 Reindl Harald h.rei...@thelounge.net wrote: since i have enough of bugzilla-mails as response of bugreports containing referecnes to any Fedora version but not the reported i consider this as bug

Re: Schedule for Wednesday's FESCo Meeting (2013-08-14)

2013-08-15 Thread Reindl Harald
Am 15.08.2013 15:40, schrieb Paul Wouters: We can't tell people to re-install from scratch every 6 months. What we need is an apt-get dist-upgrade equivalent. *we have* http://fedoraproject.org/wiki/Upgrading_Fedora_using_yum i currently count 450 dist-upgrade this way and the oldest

Re: Schedule for Wednesday's FESCo Meeting (2013-08-14)

2013-08-15 Thread Reindl Harald
Am 15.08.2013 17:17, schrieb Ralf Corsepius: On 08/15/2013 04:36 PM, Paul Wouters wrote: On Thu, 15 Aug 2013, Reindl Harald wrote: Am 15.08.2013 15:40, schrieb Paul Wouters: We can't tell people to re-install from scratch every 6 months. What we need is an apt-get dist-upgrade equivalent

Re: Schedule for Wednesday's FESCo Meeting (2013-08-14)

2013-08-15 Thread Reindl Harald
Am 15.08.2013 18:02, schrieb Ralf Corsepius: On 08/15/2013 05:32 PM, Reindl Harald wrote: Am 15.08.2013 17:17, schrieb Ralf Corsepius: On 08/15/2013 04:36 PM, Paul Wouters wrote: On Thu, 15 Aug 2013, Reindl Harald wrote: Am 15.08.2013 15:40, schrieb Paul Wouters: We can't tell people

Re: Schedule for Wednesday's FESCo Meeting (2013-08-14)

2013-08-15 Thread Reindl Harald
Am 15.08.2013 18:19, schrieb Kaleb KEITHLEY: On 08/15/2013 11:32 AM, Reindl Harald wrote: Am 15.08.2013 15:40, schrieb Paul Wouters: We can't tell people to re-install from scratch every 6 months. What we need is an apt-get dist-upgrade equivalent. *we have* http://fedoraproject.org/wiki

Re: Schedule for Wednesday's FESCo Meeting (2013-08-14)

2013-08-15 Thread Reindl Harald
Am 15.08.2013 22:12, schrieb Jóhann B. Guðmundsson: On 08/15/2013 03:47 PM, Kevin Fenzi wrote: On Thu, 15 Aug 2013 15:36:53 -0400 Jóhann B. Guðmundsson johan...@gmail.com wrote: Interesting since they did not do that when I joined QA what 5 or 6 years ago so again can you refer me to that

Re: /usr/etc?

2013-08-08 Thread Reindl Harald
Am 08.08.2013 10:05, schrieb Ondrej Vasik: I already nuked /usr/etc yesterday - as FHS even disallows it (see http://www.pathname.com/fhs/pub/fhs-2.3.html#USRLOCALLOCALHIERARCHY Rationale note). But I still see /usr/local/etc there - and mentioned as beneficial, so keeping it for now yes

Re: Does your application depend on, or report, free disk space? Re: F20 Self Contained Change: OS Installer Support for LVM Thin Provisioning

2013-08-01 Thread Reindl Harald
Am 31.07.2013 21:24, schrieb Matthew Miller: On Wed, Jul 31, 2013 at 08:18:52PM +0200, Reindl Harald wrote: you are aware how much 10% of 8 TB are? So why *not* keep more logs, at least while nothing else is using it? to save space? there where i use Thin Provisioning are full backups

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-31 Thread Reindl Harald
Am 30.07.2013 11:35, schrieb Ian Malone: This is the price you pay for having updated versions of libraries with security fixes and functionality, and it's why Linux distributions use open source (and one reason non OS software is tricky), provided the library API hasn't changed you just

Re: Does your application depend on, or report, free disk space? Re: F20 Self Contained Change: OS Installer Support for LVM Thin Provisioning

2013-07-31 Thread Reindl Harald
Am 31.07.2013 20:14, schrieb Zbigniew Jędrzejewski-Szmek: journald provides configuration knobs to exactly set the limits. But forcing the admin to always configure this is something that should be avoided, and reasonable values that work OK most of the time should be used. Those defaults

Re: Summary of accepted Fedora 20 Changes - week 30

2013-07-28 Thread Reindl Harald
Am 27.07.2013 21:31, schrieb Michael Scherer: Le samedi 27 juillet 2013 à 12:54 +0200, Reindl Harald a écrit : Am 27.07.2013 12:45, schrieb drago01: On Sat, Jul 27, 2013 at 12:39 PM, Nicolas Mailhot Even if we do that ... for most of those user this mails are mostly noise. Where

Re: Summary of accepted Fedora 20 Changes - week 30

2013-07-27 Thread Reindl Harald
Am 27.07.2013 12:45, schrieb drago01: On Sat, Jul 27, 2013 at 12:39 PM, Nicolas Mailhot Even if we do that ... for most of those user this mails are mostly noise. Where are the facts backing this assertion? Common sense ... so i am maintaing more than 20 fedora machines and i am happy

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-26 Thread Reindl Harald
Am 26.07.2013 00:04, schrieb Eric Smith: On Thu, Jul 25, 2013 at 12:57 PM, Reindl Harald h.rei...@thelounge.net wrote: if that would be the case i would not run Apache 2.4, and Zend Opcache in production on Fdora 17 I wouldn't run *anything* in production on Fedora 17. That's what

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-26 Thread Reindl Harald
Am 26.07.2013 00:48, schrieb Eric Smith: On Thu, Jul 25, 2013 at 4:39 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 26.07.2013 00:22, schrieb Eric Smith: I wouldn't run *anything* in production on Fedora 17. That's what the downstream enterprise distributions are for. We've been

Re: Fedora as an crowd founded project an additional funding source to our sponsor

2013-07-26 Thread Reindl Harald
Am 26.07.2013 15:32, schrieb Jóhann B. Guðmundsson: On 07/26/2013 01:07 PM, Michael Scherer wrote: Working in IT @Red Hat, I concur, and I am pretty sure that no one has all the information to make that estimation. Network, hosting and storage are all under different budgets for different

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-26 Thread Reindl Harald
Am 26.07.2013 14:20, schrieb Mark Bidewell: Honestly, I keep seeing this argument in this thread, but it doesn't square with reality. The concept of an OS and all of its apps as a monolithic distribution with a single release schedule is unique to Linux. Every other major OS (with the

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-25 Thread Reindl Harald
Am 25.07.2013 17:57, schrieb drago01: in theory yes practically a exploit is not that easy like fire a bundle of commands as root like a script So we're talking about limited circumstances where the attacker can modify files and not execute code, or where the attacker is root but not

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-25 Thread Reindl Harald
Am 25.07.2013 19:48, schrieb Lennart Poettering: On Mon, 22.07.13 00:02, Reindl Harald (h.rei...@thelounge.net) wrote: has anybody considered to put the following as default in systemd-units of network services? cross-posting to users-list intented because i think it is a good idea to bring

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-25 Thread Reindl Harald
Am 25.07.2013 20:31, schrieb drago01: On Thu, Jul 25, 2013 at 6:36 PM, Reindl Harald h.rei...@thelounge.net wrote: Am 25.07.2013 17:57, schrieb drago01: in theory yes practically a exploit is not that easy like fire a bundle of commands as root like a script So we're talking about

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-25 Thread Reindl Harald
Am 25.07.2013 20:29, schrieb drago01: I am fine with splitting out the actual enduser apps out, but that's nothing that can happen before we actually have a sane concept of apps. But for the rest we should work on creating one strong unified platform rather than a conglomerate of puzzle

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-25 Thread Reindl Harald
Am 25.07.2013 20:53, schrieb drago01: i saw a lot of (successful) competitors come and go in the past 10 years in case of our business and if we would have followed them bldindly we would have gone down the same way There is a difference between follow blindly and bury your head in the

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-25 Thread Reindl Harald
Am 25.07.2013 21:06, schrieb drago01: On Thu, Jul 25, 2013 at 9:01 PM, Reindl Harald h.rei...@thelounge.net wrote: There might still be bugs in them (and/or in the selinux-policy package). Being more specific would be way more productive. Like my app tries to do X but fails

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-25 Thread Reindl Harald
Am 25.07.2013 21:26, schrieb Miloslav Trmač: On Thu, Jul 25, 2013 at 6:36 PM, Reindl Harald h.rei...@thelounge.net wrote: if you are able to marry pure-ftpd, samba and 250 cms-installations predictable on a machine running also *self developed* managment-software for a complete

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-25 Thread Reindl Harald
Am 25.07.2013 20:51, schrieb drago01: *you* can *not* fix anything in packages Sure I can done that countless times in the past or IOW no idea what that is supposed to mean. it means webinterfaces nobody outside our company will ever be possible to touch or see controlling httpd, dbmail,

Re: F20 System Wide Change: No Default Sendmail

2013-07-24 Thread Reindl Harald
Am 24.07.2013 13:11, schrieb Lennart Poettering: On Mon, 22.07.13 19:33, Reindl Harald (h.rei...@thelounge.net) wrote: Am 22.07.2013 18:29, schrieb Lennart Poettering: If you want to centralize system configuration, rather then services, then go ahead and do, that, but actually centralize

Re: F20 System Wide Change: No Default Sendmail

2013-07-24 Thread Reindl Harald
Am 24.07.2013 15:58, schrieb Zbigniew Jędrzejewski-Szmek: On Wed, Jul 24, 2013 at 02:11:18PM +0200, Nicolas Mailhot wrote: Le Mer 24 juillet 2013 13:11, Lennart Poettering a écrit : The second part of my mail that you conveniently removed actually explains why that doesn't work: because

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-23 Thread Reindl Harald
Am 22.07.2013 18:37, schrieb Miloslav Trmač: On Mon, Jul 22, 2013 at 6:22 PM, Daniel P. Berrange berra...@redhat.com wrote: On Mon, Jul 22, 2013 at 04:53:36PM +0200, Miloslav Trmač wrote: On Mon, Jul 22, 2013 at 12:02 AM, Reindl Harald h.rei...@thelounge.net wrote: has anybody considered

Re: Webapps denying all outside access by default?

2013-07-23 Thread Reindl Harald
Am 22.07.2013 18:10, schrieb Adam Williamson: On Sun, 2013-07-21 at 09:47 -0700, Jared K. Smith wrote: Now I'm curious... do you have a particularly strong reason why web apps should be different than any other network daemon? Not really, it just seemed odd, but after thinking about it a

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-23 Thread Reindl Harald
Am 22.07.2013 18:10, schrieb Nicolas Mailhot: Le Lun 22 juillet 2013 00:02, Reindl Harald a écrit : has anybody considered to put the following as default in systemd-units of network services? cross-posting to users-list intented because i think it is a good idea to bring it to a broader

Re: F20 System Wide Change: No Default Sendmail

2013-07-23 Thread Reindl Harald
Am 22.07.2013 18:29, schrieb Lennart Poettering: If you want to centralize system configuration, rather then services, then go ahead and do, that, but actually centralize *the configuration*, not the service. In particular, because a centralized client-side SMTP service is a really

Re: F20 System Wide Change: No Default Sendmail

2013-07-23 Thread Reindl Harald
Am 22.07.2013 18:51, schrieb Lennart Poettering: On Fri, 19.07.13 14:47, Frank Ch. Eigler (f...@redhat.com) wrote: And it's just not possible to automatically configure e-mail. [...] As for outgoing SMTP, DHCP packets can identify servers; so can DNS heuristics. I have yet to see my

Re: F20 System Wide Change: No Default Sendmail

2013-07-23 Thread Reindl Harald
Am 23.07.2013 16:37, schrieb Matthew Miller: On Mon, Jul 22, 2013 at 07:33:25PM +0200, Reindl Harald wrote: which could be *easy* solved by ask the users SMTP and credentials at the installation, setup /etc/aliases as default forwarding the messages to this address and configure SASL

Re: Why does so much virt stuff depend on glusterfs?

2013-07-23 Thread Reindl Harald
Am 23.07.2013 19:18, schrieb Richard W.M. Jones: On Tue, Jul 23, 2013 at 06:15:32PM +0100, Richard W.M. Jones wrote: However for some reason I can't quite understand, libvirt-daemon depends on 'qemu'. That may be a bug? I meant to write: 'libvirt-daemon-qemu' depends on 'qemu' IMHO it is

Re: EPEL (was Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk))

2013-07-23 Thread Reindl Harald
Am 23.07.2013 19:25, schrieb Jóhann B. Guðmundsson: And fundamentally again I think you are wrong we are better off in the long term standing on our own two feets then working with downstream or be dependant on RH on way or another or some other sponsor. So we are at impasse regarding

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-23 Thread Reindl Harald
Am 23.07.2013 19:35, schrieb Bill Nottingham: Reindl Harald (h.rei...@thelounge.net) said: a httpd running with SElinux disabled or in permissive mode with the 4 lines below even after escalate to root privileges will hardly have a chance to overwrite /usr/sbin/sshd as example

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-23 Thread Reindl Harald
Am 23.07.2013 19:54, schrieb Reindl Harald: 3) ReadOnlyDirectories also needs to be applied across submounts, which introduces complication to the system units depending on the filesystem layout on the administrator-configured machine - having security mechanisms be affected

Re: EPEL (was Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk))

2013-07-23 Thread Reindl Harald
Am 23.07.2013 20:57, schrieb Jóhann B. Guðmundsson: On 07/23/2013 05:33 PM, Reindl Harald wrote: Am 23.07.2013 19:25, schrieb Jóhann B. Guðmundsson: And fundamentally again I think you are wrong we are better off in the long term standing on our own two feets then working with downstream

Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk)

2013-07-23 Thread Reindl Harald
Am 23.07.2013 20:49, schrieb Bruno Wolff III: On Tue, Jul 23, 2013 at 14:38:17 -0400, Matthias Clasen mcla...@redhat.com wrote: PS: Somewhere in this discussion, it was brought up that Fedora infrastructure is not running on Fedora. I find that a really depressing state of affairs.

Re: EPEL (was Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk))

2013-07-23 Thread Reindl Harald
Am 23.07.2013 22:07, schrieb Jóhann B. Guðmundsson: On 07/23/2013 07:11 PM, Reindl Harald wrote: so you have no plan how large the positive impact is but you attack Redhat and employees in a subtle way wherever you can? For the first you do realize that Red Hat is a corporate and my view

Re: EPEL (was Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk))

2013-07-23 Thread Reindl Harald
Am 24.07.2013 00:46, schrieb Jóhann B. Guðmundsson: On 07/23/2013 09:11 PM, Stephen Gallagher wrote: For the record, I'd like you to have a look at basically any community-reported bug in the 'sssd' component of BZ or community-submitted patches on the sssd-devel list. That's a project

Re: EPEL (was Re: RFC: Proposal for a more agile Fedora.next (draft of my Flock talk))

2013-07-23 Thread Reindl Harald
Am 23.07.2013 22:32, schrieb Jóhann B. Guðmundsson: On 07/23/2013 08:26 PM, Reindl Harald wrote: and from here is clear that you *blindly* shoot around at Redhat *blindly and nothing else* This was everything but blindly shot I'm perfectly well aware that he's a Red Hat employee I even

Re: Webapps denying all outside access by default?

2013-07-22 Thread Reindl Harald
Am 21.07.2013 19:39, schrieb drago01: On Sun, Jul 21, 2013 at 6:47 PM, Jared K. Smith jsm...@fedoraproject.org wrote: On Sat, Jul 20, 2013 at 12:53 PM, Adam Williamson awill...@redhat.com wrote: I'm not sure if I'm missing anything here, but is it intended that webapps should not be

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-22 Thread Reindl Harald
Am 22.07.2013 16:37, schrieb Michael Scherer: Le lundi 22 juillet 2013 à 00:02 +0200, Reindl Harald a écrit : has anybody considered to put the following as default in systemd-units of network services? cross-posting to users-list intented because i think it is a good idea to bring

Re: F20 System Wide Change: No Default Sendmail

2013-07-22 Thread Reindl Harald
Am 21.07.2013 21:20, schrieb Matthew Miller: On Sun, Jul 21, 2013 at 04:09:32PM +0200, Reindl Harald wrote: the problem i see is when things like MTA and rsyslog are removed from the defualt install many pakcgers will less care about them in the future nor test how well it works That's

Re: Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-22 Thread Reindl Harald
Am 22.07.2013 16:53, schrieb Miloslav Trmač: On Mon, Jul 22, 2013 at 12:02 AM, Reindl Harald h.rei...@thelounge.net wrote: has anybody considered to put the following as default in systemd-units of network services? cross-posting to users-list intented because i think it is a good idea

Proposal: ReadOnlyDirectories /etc and /usr for network-services

2013-07-22 Thread Reindl Harald
Hi has anybody considered to put the following as default in systemd-units of network services? cross-posting to users-list intented because i think it is a good idea to bring it to a broader userbase! ReadOnlyDirectories=/etc ReadOnlyDirectories=/usr

Re: Webapps denying all outside access by default?

2013-07-21 Thread Reindl Harald
Am 20.07.2013 21:53, schrieb Adam Williamson: I'm not sure if I'm missing anything here, but is it intended that webapps should not be accessible from anywhere but localhost by default? with my web-developer / admin hat on - yes! you do not want to expose unconfigured webapp-packages to the

Re: Webapps denying all outside access by default?

2013-07-21 Thread Reindl Harald
Am 20.07.2013 22:59, schrieb Adam Williamson: You should also be albe to use a reload, not necessarily a restart, to get it working. (Although I've not been trying this with systemd!) 'apachectl reload' didn't seem to do the job. because it does not exist apachectl graceful or systemctl

<    8   9   10   11   12   13   14   15   16   17   >