Request to take over orphaned python-mutagen

2014-12-09 Thread Michele Baldessari
Hi all, as per [1], I'd like to take over the orphaned python-mutagen package. Let me know if there are any objections. Cheers, Michele [1] https://fedoraproject.org/wiki/Orphaned_package_that_need_new_maintainers#Claiming_Ownership_of_an_Orphaned_Package_Procedure -- Michele Baldessari

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Nikos Mavrogiannopoulos
On Tue, 2014-12-09 at 17:29 +1030, William B wrote: I just happened to look at the firewalld default settings, and I was not amused when I noticed this: http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml port protocol=udp port=1025-65535/ port

Re: [Test-Announce] Fedora 22 nightly compose 2014-12-08 nominated for testing

2014-12-09 Thread Vít Ondruch
Dne 9.12.2014 v 04:06 Adam Williamson napsal(a): Just to recap, the idea here is that we try to get good coverage on the testing as early as possible, with the goal of giving the developers - especially the anaconda developers - longer to work on the critical issues. The earlier we identify

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 10:08 schrieb Nikos Mavrogiannopoulos: On Tue, 2014-12-09 at 17:29 +1030, William B wrote: I just happened to look at the firewalld default settings, and I was not amused when I noticed this: http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml port

Re: Best way to use zram in Fedora 21?

2014-12-09 Thread Karel Zak
On Mon, Dec 08, 2014 at 11:55:07AM +0100, Dan Horák wrote: On Mon, 8 Dec 2014 11:36:47 +0100 Karel Zak k...@redhat.com wrote: BTW, util-linux v2.26 (f22) is going to contain new command zramctl(8) Karel $ zramctl --help Usage: lt-zramctl [options] device lt-zramctl

Re: Best way to use zram in Fedora 21?

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 11:24 schrieb Karel Zak: On Mon, Dec 08, 2014 at 11:55:07AM +0100, Dan Horák wrote: On Mon, 8 Dec 2014 11:36:47 +0100 Karel Zak k...@redhat.com wrote: BTW, util-linux v2.26 (f22) is going to contain new command zramctl(8) $ zramctl --help Usage: lt-zramctl [options]

Re: Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Am Mon, 08 Dec 2014 23:31:42 + schrieb devel-requ...@lists.fedoraproject.org: Message: 7 Date: Mon, 08 Dec 2014 23:54:30 +0100 From: Alec Leamas leamas.a...@gmail.com To: Development discussions related to Fedora devel@lists.fedoraproject.org

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - As one who maintains a remix for journalists, I expect the default for a workstation should be that you mus* explicitly know what you are doing to open a port, and enable or start a service - the default release should have a minimum attack surface by design.

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - sudo firewall-cmd --set-default-zone=FedoraServer That will limit it to SSH, DHCPv6 and cockpit Or use default zone Public, which swaps cockpit out and adds mDNS Or if you're Reindl Harald-level paranoid (no offense intended, Harald but

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Michael Catanzaro
On Mon, 2014-12-08 at 16:30 +0100, Kevin Kofler wrote: Bastien Nocera wrote: If this had been discussed on this list, as it is supposed to, the objections would have come in much earlier. If you're interested in Workstation-specific features, you need to subscribe to

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Stephen Gallagher wrote: Also, while I think it's been unclear in this thread, the main reason that the firewall GUI was taken out was because the Workstation guys want to design a more user-understandable one and include that directly (if I am remembering

Re: Allow internet/network access based on binary -- ask user for permission if a binary wants to connect to the internet

2014-12-09 Thread Bastien Nocera
- Original Message - I only want certain binaries to be allowed network access. For example, I want to allow the below binaries access to the internet: /usr/lib64/firefox/firefox /usr/lib/virtualbox/VirtualBox /bin/yum (it seems to be done via python like /usr/bin/python

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Michael Catanzaro
On Mon, 2014-12-08 at 10:49 -0500, Bastien Nocera wrote: If Reindl, Kevin or Tomas want to disagree with that, I'll give you a little exercise: Having just installed and updated my Fedora 20, I want to share a video in my home directory using UPnP/DLNA to my TV, using rygel for example.

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Gerd Hoffmann
Hi, I also thought that the whole points of having Zones etc, was so that we could pick a different zone per network connection, /me too. so if I'm in the office or at home I can say use this zone, if I'm at a coffee shop I can pick a different one etc. Or was this consider too

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Matthew Miller
On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote: Why we can't have something like this? And if you don't want a popup asking, have something in the NetworkManager applet menu, where people can easily find the switch without having to search for it? A [x] allow sharing checkbox?

Re: Product defaults to wide-open firewall

2014-12-09 Thread Rave it
Am Tue, 09 Dec 2014 12:00:01 + schrieb devel-requ...@lists.fedoraproject.org: Message: 7 Date: Tue, 9 Dec 2014 05:54:46 -0500 (EST) From: Bastien Nocera bnoc...@redhat.com To: Development discussions related to Fedora devel@lists.fedoraproject.org Subject: Re: Product defaults to

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Solomon Peachy
On Tue, Dec 09, 2014 at 12:35:23PM +0100, Michael Catanzaro wrote: We are concerned with practical security -- keeping the user safe by anticipating the user's typical response to situations. But if you think the firewall configuration GUI in F20 existed for any purpose other than to

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Ian Malone
On 9 December 2014 at 11:35, Michael Catanzaro mcatanz...@gnome.org wrote: On Mon, 2014-12-08 at 10:49 -0500, Bastien Nocera wrote: If Reindl, Kevin or Tomas want to disagree with that, I'll give you a little exercise: Having just installed and updated my Fedora 20, I want to share a video

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Michael Catanzaro
On Tue, 2014-12-09 at 03:34 +0100, Kevin Kofler wrote: Because Fedora is aggressively marketing a Product with a major security vulnerability as its primary Product. To the extent that this is any argument at all: neither Ubuntu nor Debian enables a firewall. signature.asc Description: This

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread William B
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 09 Dec 2014 10:08:06 +0100 Nikos Mavrogiannopoulos n...@redhat.com wrote: On Tue, 2014-12-09 at 17:29 +1030, William B wrote: I just happened to look at the firewalld default settings, and I was not amused when I noticed this:

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Stephen Gallagher
On Tue, 2014-12-09 at 07:27 +0100, Kevin Kofler wrote: Stephen Gallagher wrote: Also, while I think it's been unclear in this thread, the main reason that the firewall GUI was taken out was because the Workstation guys want to design a more user-understandable one and include that

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Ian Malone
On 8 December 2014 at 15:33, Matthew Miller mat...@fedoraproject.org wrote: On Mon, Dec 08, 2014 at 02:31:58PM +, Ian Malone wrote: There are three products: workstation, server, cloud. Workstation is the one for desktop use. That leaves server to aim for the traditional fedora user base,

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - On 9 December 2014 at 11:35, Michael Catanzaro mcatanz...@gnome.org wrote: On Mon, 2014-12-08 at 10:49 -0500, Bastien Nocera wrote: If Reindl, Kevin or Tomas want to disagree with that, I'll give you a little exercise: Having just installed and updated my

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote: Why we can't have something like this? And if you don't want a popup asking, have something in the NetworkManager applet menu, where people can easily find the switch without having to search for

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 14:16 schrieb Bastien Nocera: On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote: Why we can't have something like this? And if you don't want a popup asking, have something in the NetworkManager applet menu, where people can easily find the switch without having

[PkgDB] psabata:perl-asa watchcommits set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: watchcommits of package: perl-asa from: Approved to: Approved on branch: epel7 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-asa -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel

[PkgDB] psabata:perl-asa approveacls set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: approveacls of package: perl-asa from: Approved to: Approved on branch: el6 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-asa -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel

[PkgDB] psabata:perl-asa commit set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: commit of package: perl-asa from: Approved to: Approved on branch: epel7 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-asa -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing

[PkgDB] psabata:perl-asa watchbugzilla set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: watchbugzilla of package: perl-asa from: Approved to: Approved on branch: epel7 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-asa -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 09 Dec 2014 10:08:06 +0100 Nikos Mavrogiannopoulos n...@redhat.com wrote: On Tue, 2014-12-09 at 17:29 +1030, William B wrote: I just happened to look at the firewalld default settings, and I

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 14:23 schrieb Bastien Nocera: [1]: I haven't seen anything but arm-flailing on that issue. If somebody wants to go into details about what a server running inside the user's session would be able to do that a client wouldn't be able to, feel free. you realize the difference

[PkgDB] psabata:perl-Cache-FastMmap watchcommits set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: watchcommits of package: perl-Cache-FastMmap from: Approved to: Approved on branch: el5 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Cache-FastMmap -- Fedora Extras Perl SIG

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Am 09.12.2014 um 14:16 schrieb Bastien Nocera: On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote: Why we can't have something like this? And if you don't want a popup asking, have something in the NetworkManager applet menu, where people can

[PkgDB] psabata:perl-Catalyst-Plugin-SubRequest commit set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: commit of package: perl-Catalyst-Plugin-SubRequest from: Approved to: Approved on branch: el6 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Catalyst-Plugin-SubRequest -- Fedora Extras Perl SIG

[PkgDB] psabata:perl-Catalyst-Plugin-Session-Store-FastMmap set point of contact to: psabata

2014-12-09 Thread pkgdb
user: psabata changed point of contact of package: perl-Catalyst-Plugin-Session-Store-FastMmap from: orphan to: psabata on branch: el6 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Catalyst-Plugin-Session-Store-FastMmap -- Fedora Extras Perl SIG

[PkgDB] psabata:perl-Catalyst-Plugin-Session-State-Cookie set point of contact to: psabata

2014-12-09 Thread pkgdb
user: psabata changed point of contact of package: perl-Catalyst-Plugin-Session-State-Cookie from: orphan to: psabata on branch: el6 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Catalyst-Plugin-Session-State-Cookie -- Fedora Extras Perl SIG

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Am 09.12.2014 um 14:23 schrieb Bastien Nocera: [1]: I haven't seen anything but arm-flailing on that issue. If somebody wants to go into details about what a server running inside the user's session would be able to do that a client wouldn't be able to,

[PkgDB] psabata:perl-Catalyst-View-TT set point of contact to: psabata

2014-12-09 Thread pkgdb
user: psabata changed point of contact of package: perl-Catalyst-View-TT from: orphan to: psabata on branch: el6 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Catalyst-View-TT -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl

Re: Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Am Tue, 09 Dec 2014 12:00:01 + schrieb devel-requ...@lists.fedoraproject.org: Message: 7 Date: Tue, 9 Dec 2014 05:54:46 -0500 (EST) From: Bastien Nocera bnoc...@redhat.com To: Development discussions related to Fedora

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Michael Catanzaro
On Mon, 2014-12-08 at 16:41 +0100, Kevin Kofler wrote: So you rather implement the type of OS that just always assumes Yes without even asking? Because that's what the current firewall rules do (between quotes because it can hardly be called a firewall in that state). How's that more

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Michael Catanzaro
On Mon, 2014-12-08 at 18:56 -0800, M. Edward (Ed) Borasky wrote: is Workstation the only Fedora-branded release with those ports open? Yes signature.asc Description: This is a digitally signed message part -- devel mailing list devel@lists.fedoraproject.org

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 14:32 schrieb Bastien Nocera: Am 09.12.2014 um 14:23 schrieb Bastien Nocera: [1]: I haven't seen anything but arm-flailing on that issue. If somebody wants to go into details about what a server running inside the user's session would be able to do that a client wouldn't be

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Matthew Miller
On Tue, Dec 09, 2014 at 01:11:33PM +, Ian Malone wrote: have a proposal for a new spin focused on privacy and security — the Netizen Spin. (If you're interested, I think that could use additional contributors.) I was under the impression spins were to be phased out. I could be wrong,

[PkgDB] psabata:perl-App-Daemon watchcommits set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: watchcommits of package: perl-App-Daemon from: Approved to: Approved on branch: el5 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-App-Daemon -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl

[PkgDB] psabata:perl-App-Daemon commit set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: commit of package: perl-App-Daemon from: Approved to: Approved on branch: el5 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-App-Daemon -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl

[PkgDB] psabata:perl-App-Daemon watchbugzilla set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: watchbugzilla of package: perl-App-Daemon from: Approved to: Approved on branch: el5 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-App-Daemon -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Matthew Miller
On Tue, Dec 09, 2014 at 02:41:08PM +0100, Michael Catanzaro wrote: is Workstation the only Fedora-branded release with those ports open? Yes Well, no. Fedora Cloud doesn't include any iptables rules by default. (The assumption is that it'll be run in a cloud environment with security groups at

[PkgDB] psabata:perl-Cache watchcommits set to Approved

2014-12-09 Thread pkgdb
user: psabata set for psabata acl: watchcommits of package: perl-Cache from: Approved to: Approved on branch: el5 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Cache -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Richard Hughes
On 9 December 2014 at 13:39, Michael Catanzaro mcatanz...@gnome.org wrote: So your challenge is to find an alternative default that supports it. I'd go even further. I don't think the people writing the vast number of lengthy posts on this thread actually want to *use* workstation, with the

[PkgDB] psabata:perl-Gearman-Client-Async set point of contact to: psabata

2014-12-09 Thread pkgdb
user: psabata changed point of contact of package: perl-Gearman-Client-Async from: orphan to: psabata on branch: el5 To make changes to this package see: https://admin.fedoraproject.org/pkgdb/package/perl-Gearman-Client-Async -- Fedora Extras Perl SIG

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Michael Catanzaro
On Mon, 2014-12-08 at 17:08 -0430, Robert Marcano wrote: Adding to that, this decision bring me memories to the awful old case when someone decided that the install anything from the repositories was permitted to any user on the system by default, that was reverted with an update because

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Robert Marcano
On 12/09/2014 08:53 AM, Reindl Harald wrote: Am 09.12.2014 um 14:16 schrieb Bastien Nocera: On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote: Why we can't have something like this? And if you don't want a popup asking, have something in the NetworkManager applet menu, where

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Robert Marcano
On 12/09/2014 09:20 AM, Michael Catanzaro wrote: On Mon, 2014-12-08 at 17:08 -0430, Robert Marcano wrote: Adding to that, this decision bring me memories to the awful old case when someone decided that the install anything from the repositories was permitted to any user on the system by

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Am 09.12.2014 um 14:32 schrieb Bastien Nocera: Am 09.12.2014 um 14:23 schrieb Bastien Nocera: [1]: I haven't seen anything but arm-flailing on that issue. If somebody wants to go into details about what a server running inside the user's session would

rawhide report: 20141209 changes

2014-12-09 Thread Fedora Rawhide Report
Compose started at Tue Dec 9 05:15:02 UTC 2014 Broken deps for i386 -- [3Depict] 3Depict-0.0.16-3.fc22.i686 requires libmgl.so.7.2.0 [Sprog] Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0) [bibletime]

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Stephen Gallagher
On Tue, 2014-12-09 at 14:41 +0100, Michael Catanzaro wrote: On Mon, 2014-12-08 at 18:56 -0800, M. Edward (Ed) Borasky wrote: is Workstation the only Fedora-branded release with those ports open? Yes No, actually. The Fedora Cloud ships with no firewall at all (but that's because it's

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Robert Marcano
On 12/09/2014 09:27 AM, Robert Marcano wrote: What I see frequently are applications that are installed from outside the Fedora repositories, that can be forced to behave like Fedora packaging rules, with secure defaults before sharing, being installed and the user that don't know much about

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Brian Wheeler
On 12/09/2014 08:50 AM, Richard Hughes wrote: On 9 December 2014 at 13:39, Michael Catanzaro mcatanz...@gnome.org wrote: So your challenge is to find an alternative default that supports it. I'd go even further. I don't think the people writing

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Stephen Gallagher
On Tue, 2014-12-09 at 08:23 -0500, Bastien Nocera wrote: - Original Message - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 09 Dec 2014 10:08:06 +0100 Nikos Mavrogiannopoulos n...@redhat.com wrote: On Tue, 2014-12-09 at 17:29 +1030, William B wrote: I

Re: Allow internet/network access based on binary -- ask user for permission if a binary wants to connect to the internet

2014-12-09 Thread Daniel J Walsh
You can do this with SELinux and confined users somewhat. YOU basically could setup a user as xguest with no network access and then write policy to transition to certain domains that can use the internet. No ability to prompt the user though. This will get you most of the way you want to go,

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Christian Schaller
- Original Message - From: Robert Marcano rob...@marcanoonline.com To: Development discussions related to Fedora devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 8:57:51 AM Subject: Re: Workstation Product defaults to wide-open firewall On 12/09/2014 08:53 AM,

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Christian Schaller
- Original Message - From: Brian Wheeler bdwhe...@indiana.edu To: devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 9:18:47 AM Subject: Re: Workstation Product defaults to wide-open firewall On 12/09/2014 08:50 AM, Richard Hughes wrote: On 9 December 2014 at

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 15:57 schrieb Christian Schaller: Well I think it is hard for anyone to guess what would be reasonable defaults for you specifically, any default is by its nature just targeting an generic person, which might or might not be a lot like you. But if you are aware and understand

Announcing Fedora 21!

2014-12-09 Thread Matthew Miller
Fedora 21 Release Announcement == http://fedoramagazine.org/announcing-fedora-21/ The Fedora Project is pleased to announce the release of Fedora 21, ready to run on your desktops, servers, and in the cloud. Fedora 21 is a game-changer for the Fedora Project, and we

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Thomas Woerner
On 12/09/2014 03:57 PM, Christian Schaller wrote: - Original Message - From: Brian Wheeler bdwhe...@indiana.edu To: devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 9:18:47 AM Subject: Re: Workstation Product defaults to wide-open firewall On 12/09/2014 08:50 AM,

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - On Mon, 8 Dec 2014 05:45:56 -0500 (EST) Bastien Nocera bnoc...@redhat.com wrote: No, because that'd be awful UI. Is it really so awful to ask a user: Do you want to expose Eclipse to the network ? (of course worded in a better way than my poor English

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - On 12/09/2014 08:50 AM, Richard Hughes wrote: On 9 December 2014 at 13:39, Michael Catanzaro mcatanz...@gnome.org wrote: So your challenge is to find an alternative default that supports it. I'd go even further. I don't think the people writing the

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - Hi, I also thought that the whole points of having Zones etc, was so that we could pick a different zone per network connection, /me too. so if I'm in the office or at home I can say use this zone, if I'm at a coffee shop I can pick a different

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Gerd Hoffmann
On Di, 2014-12-09 at 08:16 -0500, Bastien Nocera wrote: - Original Message - On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote: Why we can't have something like this? And if you don't want a popup asking, have something in the NetworkManager applet menu, where

Re: Allow internet/network access based on binary -- ask user for permission if a binary wants to connect to the internet

2014-12-09 Thread Bastien Nocera
- Original Message - You can do this with SELinux and confined users somewhat. YOU basically could setup a user as xguest with no network access and then write policy to transition to certain domains that can use the internet. No ability to prompt the user though. This will

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Simo Sorce
On Tue, 9 Dec 2014 10:09:07 -0500 (EST) Bastien Nocera bnoc...@redhat.com wrote: - Original Message - On Mon, 8 Dec 2014 05:45:56 -0500 (EST) Bastien Nocera bnoc...@redhat.com wrote: No, because that'd be awful UI. Is it really so awful to ask a user: Do you want to

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Simo Sorce
On Mon, 8 Dec 2014 05:45:56 -0500 (EST) Bastien Nocera bnoc...@redhat.com wrote: No, because that'd be awful UI. Is it really so awful to ask a user: Do you want to expose Eclipse to the network ? (of course worded in a better way than my poor English skills can do). I think users can

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Christian Schaller
- Original Message - From: Gerd Hoffmann kra...@redhat.com To: Development discussions related to Fedora devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 10:22:01 AM Subject: Re: Workstation Product defaults to wide-open firewall On Di, 2014-12-09 at 08:16 -0500,

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Bastien Nocera
- Original Message - On Tue, 9 Dec 2014 10:09:07 -0500 (EST) Bastien Nocera bnoc...@redhat.com wrote: - Original Message - On Mon, 8 Dec 2014 05:45:56 -0500 (EST) Bastien Nocera bnoc...@redhat.com wrote: No, because that'd be awful UI. Is it

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Robert Marcano
On 12/09/2014 11:01 AM, Christian Schaller wrote: - Original Message - From: Gerd Hoffmann kra...@redhat.com To: Development discussions related to Fedora devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 10:22:01 AM Subject: Re: Workstation Product defaults to wide-open

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Christian Schaller
- Original Message - From: Reindl Harald h.rei...@thelounge.net To: devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 10:04:46 AM Subject: Re: Workstation Product defaults to wide-open firewall Am 09.12.2014 um 15:57 schrieb Christian Schaller: Well I think it is

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Reindl Harald
Am 09.12.2014 um 16:40 schrieb Christian Schaller: - Original Message - From: Reindl Harald h.rei...@thelounge.net To: devel@lists.fedoraproject.org Sent: Tuesday, December 9, 2014 10:04:46 AM Subject: Re: Workstation Product defaults to wide-open firewall Am 09.12.2014 um 15:57

[Bug 1163236] perl-Git-CPAN-Patch-2.0.3 is available

2014-12-09 Thread bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1163236 Petr Šabata psab...@redhat.com changed: What|Removed |Added Depends On||1172210 Referenced

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Brian Wheeler
On 12/09/2014 10:11 AM, Bastien Nocera wrote: The defaults for the various products are "packaged" by zones. You just need to change the firewalld zone to get whatever is the default on the server side. Ok, so it's another item on my list of

Re: Announcing Fedora 21!

2014-12-09 Thread Reindl Harald
thanks! seeding the torrent images from now on via qbittorrent-nox http://torrent.fedoraproject.org/torrents/Fedora-Server-DVD-x86_64-21.torrent http://torrent.fedoraproject.org/torrents/Fedora-Server-DVD-i386-21.torrent

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Gerd Hoffmann
Hi, Side Note: For the latter we need to cleanup the zones though. There are *way* to many to choose from, and the names suck big time. WTF is a Fedora$product zone? And wasn't that discussed before on this list? Why do we *still* have this

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Przemek Klosowski
On 12/08/2014 06:41 PM, Reindl Harald wrote: the security community is usually very clear: * forbid as much as you can by default * allow only what *really* is needed to get the work done ...and this is the tricky part---you want tightly defined functionality, and other people want to install

Fedora ARM AArch64 Status Meeting Minutes 2014-12-09

2014-12-09 Thread Paul Whalen
== #fedora-meeting-2: Fedora ARM AArch64 Status Meeting == Meeting started by pwhalen at 15:02:22 UTC. The full logs are available at

Re: Request to take over orphaned python-mutagen

2014-12-09 Thread Gerald B. Cox
That's a good thing. Looking forward to seeing the new version made available which now supports Python3. Thanks Michele! On Tue, Dec 9, 2014 at 1:21 AM, Michele Baldessari mich...@acksyn.org wrote: Hi all, as per [1], I'd like to take over the orphaned python-mutagen package. Let me know

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Richard Hughes
On 9 December 2014 at 14:18, Brian Wheeler bdwhe...@indiana.edu wrote: I also expect things to work with the minimum amount of fuss. So do I! I'm a developer, which spin do I use so that the firewall doesn't get in my way? We can't develop a *product* based around what you specifically want, not

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Chris Murphy
On Mon, Dec 8, 2014 at 11:59 PM, William B will...@firstyear.id.au wrote: The true crux of this issue is the over complexity that firewalld has brought to fedora, and the fact that a quality UI for managing it does not exist yet. OSX solves this issue by having an on or off button, and a

Poll: How users use DNF

2014-12-09 Thread Radek Holy
Dear users of YUM and DNF, I'm writing to you regarding a request for your feedback. I would be very grateful if you could send me a brief description of how you use YUM or DNF currently or how would you like to use it. I am particularly interested in the occurrences of dnf/yum install calls

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Orion Poplawski
On 12/09/2014 10:27 AM, Chris Murphy wrote: On Mon, Dec 8, 2014 at 11:59 PM, William B will...@firstyear.id.au wrote: The true crux of this issue is the over complexity that firewalld has brought to fedora, and the fact that a quality UI for managing it does not exist yet. OSX solves

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Chris Murphy
On Tue, Dec 9, 2014 at 2:08 AM, Nikos Mavrogiannopoulos n...@redhat.com wrote: On Tue, 2014-12-09 at 17:29 +1030, William B wrote: I just happened to look at the firewalld default settings, and I was not amused when I noticed this:

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Stephen John Smoogen
On 9 December 2014 at 10:27, Chris Murphy li...@colorremedies.com wrote: On Mon, Dec 8, 2014 at 11:59 PM, William B will...@firstyear.id.au wrote: The true crux of this issue is the over complexity that firewalld has brought to fedora, and the fact that a quality UI for managing it does not

Agenda for Env-and-Stacks WG meeting (2014-12-10)

2014-12-09 Thread Honza Horak
WG meeting will be at 12:00 UTC (07:00 EST, 13:00 Brno, 7:00 Boston, 21:00 Tokyo, 22:00 Brisbane) in #fedora-meeting on Freenode. = Topics = * Follow-ups * languages repositories * SCLs * Chairman for next meeting * Open Floor -- devel mailing list devel@lists.fedoraproject.org

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Alec Leamas
On 09/12/14 18:39, Stephen John Smoogen wrote: On 9 December 2014 at 10:27, Chris Murphy li...@colorremedies.com [cut] OS X's firewall is disabled by default. Where's the outcry? It was a long time ago and it basically caused it to have extra configurations before it could be 'ok'd'

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Brian Wheeler
On 12/09/2014 11:46 AM, Richard Hughes wrote: I don't think it makes much sense for people to stamp their feet saying "BUT I LIKED THE OLD WAY OF DOING THINGS" when the people leading the workstation product have identified that the old way of doing things

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Stephen John Smoogen
On 9 December 2014 at 10:46, Alec Leamas leamas.a...@gmail.com wrote: On 09/12/14 18:39, Stephen John Smoogen wrote: On 9 December 2014 at 10:27, Chris Murphy li...@colorremedies.com [cut] OS X's firewall is disabled by default. Where's the outcry? It was a long time ago and it

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Alec Leamas
On 09/12/14 18:53, Stephen John Smoogen wrote: In the end, this is a tempest in a teapot. The release is out and it is done. I don't like it, but my yelling and screaming and spitting in an autistic rage did not fix it so its time to move on so that is what I am going to do. Amen --alec --

Re: [Test-Announce] Fedora 22 nightly compose 2014-12-08 nominated for testing

2014-12-09 Thread Adam Williamson
On Mon, 2014-12-08 at 19:06 -0800, Adam Williamson wrote: Hi, folks. So after this morning's meeting, I worked today to implement nightly build support in the mediawiki template magic and in relval. We don't yet have the bits to listen out for composes, create the results pages when anaconda

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Dan Williams
On Tue, 2014-12-09 at 10:19 -0500, Bastien Nocera wrote: - Original Message - Hi, I also thought that the whole points of having Zones etc, was so that we could pick a different zone per network connection, /me too. so if I'm in the office or at home I can say

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Pete Travis
On Dec 9, 2014 10:54 AM, Stephen John Smoogen smo...@gmail.com wrote: On 9 December 2014 at 10:46, Alec Leamas leamas.a...@gmail.com wrote: On 09/12/14 18:39, Stephen John Smoogen wrote: On 9 December 2014 at 10:27, Chris Murphy li...@colorremedies.com [cut] OS X's firewall is

Re: Workstation Product defaults to wide-open firewall

2014-12-09 Thread Kevin Kofler
Richard Hughes wrote: So do I! I'm a developer, which spin do I use so that the firewall doesn't get in my way? We can't develop a *product* based around what you specifically want, not me, nor anyone else on this list. If you're a developer, surely you know what a port is and can make a few

Re: Tick-tock release cadence?

2014-12-09 Thread Michael DePaulo
On Mon, Dec 8, 2014 at 2:18 PM, Brendan Conoboy b...@redhat.com wrote: On 12/04/2014 06:39 AM, Matthew Miller wrote: What do you think? Would this help towards the goals listed above? Would it help _other_ things? What downsides would it bring? It sounds a lot like releasing a new compose

  1   2   3   4   5   6   7   8   9   10   >