Re: "make distcheck" is exploitable: get a fixed automake

2012-07-13 Thread Richard W.M. Jones
On Fri, Jul 13, 2012 at 03:34:53PM +0200, Jim Meyering wrote: > It's fixed in the latest, automake-12.2 I think you mean 1.12.2 :-) > http://bugzilla.redhat.com/CVE-2012-3386 > http://savannah.gnu.org/forum/forum.php?forum_id=7294 However I don't think I see any fixed Fedora builds (1.12

Schedule for Monday's FESCo meeting (2012-07-16)

2012-07-13 Thread Bill Nottingham
Following is the list of topics that will be discussed in the FESCo meeting Monday at 17:00UTC (1:00pm EDT) in #fedora-meeting on irc.freenode.net. Links to all tickets below can be found at: https://fedorahosted.org/fesco/report/9 = Followups = - none at this time - = New business = #topic #

Re: [HEADS-UP] Rawhide: /tmp is now on tmpfs

2012-07-13 Thread Reindl Harald
Am 12.07.2012 21:54, schrieb Harald Hoyer: > Again.. tmpfs is restricted to half the RAM size by default. You can't > store 8-9GB of trash.. only 2GB, which might land on swap over time. is it limited to half the RAM or 2 GB? on my machine half the RAM is 8 GB what about a application storing 4

Re: [HEADS-UP] Rawhide: /tmp is now on tmpfs

2012-07-13 Thread Brian Wheeler
On 07/13/2012 10:14 AM, Dennis Jacobfeuerborn wrote: On 07/13/2012 09:14 AM, Roberto Ragusa wrote: On 07/12/2012 09:54 PM, Harald Hoyer wrote: Again.. tmpfs is restricted to half the RAM size by default. You can't store 8-9GB of trash.. only 2GB, which might land on swap over time. As I have

Re: [HEADS-UP] Rawhide: /tmp is now on tmpfs

2012-07-13 Thread Dennis Jacobfeuerborn
On 07/13/2012 09:14 AM, Roberto Ragusa wrote: > On 07/12/2012 09:54 PM, Harald Hoyer wrote: > >> Again.. tmpfs is restricted to half the RAM size by default. You can't >> store 8-9GB of trash.. only 2GB, which might land on swap over time. > > As I have already pointed out some time ago, isn't a

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread David Levine
Roman wrote: > It is possible it can break many scripts even in rpm's > scriptlets, but as I already said, it's because bad > habits. So the main gain will be the people will learn how > is the globbing in bash and in the whole environment > working. Please don't. If an author or maintainer want

"make distcheck" is exploitable: get a fixed automake

2012-07-13 Thread Jim Meyering
If you run "make distcheck" (the rule generated by automake), be sure that it is safe. Until a few days ago, running that rule in a directory readable by others would put you at risk from a local attacker. It can be exploited reliably. It's fixed in the latest, automake-12.2 http://bugzilla.

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Björn Persson
Roman Rakus wrote: > By default, the nullglob is turned off. And it tends people to use bad > habits in shell scripting. What habits exactly, and why are those habits bad? > In my POV the nullglob could be turned on by default. However, i would > like to hear opinions from others. Changing a p

Re: Updates: karma and timeouts

2012-07-13 Thread Darryl L. Pierce
On Fri, Jul 13, 2012 at 08:37:19AM +0200, Jan Kratochvil wrote: > On Thu, 12 Jul 2012 15:09:05 +0200, Darryl L. Pierce wrote: > > I think if those packages are languishing, it's like > > the packager was already notified and chose not to push. > > Package goes into testing with the goal to get int

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Bryn M. Reeves
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/13/2012 01:31 PM, Bryn M. Reeves wrote: > I wouldn't back this change either but that's not the behaviour of > nullglob. If nothing matches the glob the word remains unchanged > (i.e. *.foo -> *.foo): Eh, nevermind.. not enough coffee. Bryn.

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Bryn M. Reeves
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/13/2012 01:06 PM, Scott Schmit wrote: > On Fri, Jul 13, 2012 at 01:56:29PM +0200, Roman Rakus wrote: >> Hi, I have a question about nullglob bash's shell option. I want >> to hear opinions. The behavior is nicely described in bash >> reference ma

Re: Orphaning packages

2012-07-13 Thread Luis Enrique Bazán De León
I take dejango-recaptcha and gnome-rdp, sorry answer to late 2012/7/13 Patrick Uiterwijk > I have taken tcptrack > Op 12 jul. 2012 19:08 schreef "Jitesh Shah" het > volgende: > > django-recaptcha >> gnome-rdp >> libdwarf >> tcptrack >> >> Jitesh >> -- >> devel mailing list >> devel@lists.fedora

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Roman Rakus
On 07/13/2012 02:19 PM, Tomas Mraz wrote: This could cause serious surprising breakages of scripts with strange consequences. I'm strictly against this change. If something at all should be changed in this regard to break bad habits then it should be the failglob option although I am not convince

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Tomas Mraz
On Fri, 2012-07-13 at 13:56 +0200, Roman Rakus wrote: > Hi, > I have a question about nullglob bash's shell option. I want to hear > opinions. > The behavior is nicely described in bash reference manual [1] > By default, the nullglob is turned off. And it tends people to use bad > habits in shel

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Roman Rakus
On 07/13/2012 02:06 PM, Scott Schmit wrote: So ls *.foo should list the entire directory if no files match *.foo? It's a bad habit for me to expect ls *.foo to return nothing in this case? You're going to need to convince me. And if there are directories ending with .foo? Hopefully you are not u

Re: Set bash's shell option nullglob by default?

2012-07-13 Thread Scott Schmit
On Fri, Jul 13, 2012 at 01:56:29PM +0200, Roman Rakus wrote: > Hi, > I have a question about nullglob bash's shell option. I want to hear > opinions. > The behavior is nicely described in bash reference manual [1] > By default, the nullglob is turned off. And it tends people to use > bad habits in

Set bash's shell option nullglob by default?

2012-07-13 Thread Roman Rakus
Hi, I have a question about nullglob bash's shell option. I want to hear opinions. The behavior is nicely described in bash reference manual [1] By default, the nullglob is turned off. And it tends people to use bad habits in shell scripting. In my POV the nullglob could be turned on by default

Re: Orphaning packages

2012-07-13 Thread Patrick Uiterwijk
I have taken tcptrack Op 12 jul. 2012 19:08 schreef "Jitesh Shah" het volgende: > django-recaptcha > gnome-rdp > libdwarf > tcptrack > > Jitesh > -- > devel mailing list > devel@lists.fedoraproject.org > https://admin.fedoraproject.org/mailman/listinfo/devel -- devel mailing list devel@lists.fed

Re: Orphaning packages

2012-07-13 Thread Matthias Runge
On 07/12/2012 07:08 PM, Jitesh Shah wrote: django-recaptcha gnome-rdp In fact, these package have already been taken by somebody without announcement here. -- Matthias Runge -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/de

Re: Orphaning packages

2012-07-13 Thread Tom Hughes
On 12/07/12 18:08, Jitesh Shah wrote: libdwarf I've taken this. Tom -- Tom Hughes (t...@compton.nu) http://compton.nu/ -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel

Re: [HEADS-UP] Rawhide: /tmp is now on tmpfs

2012-07-13 Thread Roberto Ragusa
On 07/12/2012 09:54 PM, Harald Hoyer wrote: > Again.. tmpfs is restricted to half the RAM size by default. You can't > store 8-9GB of trash.. only 2GB, which might land on swap over time. As I have already pointed out some time ago, isn't a bizarre situation that as an application developer I can