Re: F21 System Wide Change: Workstation: Disable firewall

On Apr 15, 2014 1:02 PM, "Jaroslav Reznik" wrote: > > = Proposed System Wide Change: Workstation: Disable firewall = > https://fedoraproject.org/wiki/Changes/Workstation_Disable_Firewall > > Change owner(s): Matthias Clasen > > The firewalld service will not be enabled by default in the workstati

Re: F21 System Wide Change: Workstation: Disable firewall

> On 17 Apr 2014, at 2:26, Thomas Woerner wrote: > >> On 04/16/2014 06:43 PM, Tomasz Torcz wrote: >> On Wed, Apr 16, 2014 at 12:32:02PM -0400, Simo Sorce wrote: > I think what you are describing could be probably realized with SELinux > today, just with a special setroubleshoot frontend

Re: F21 System Wide Change: Workstation: Disable firewall

> On 18 Apr 2014, at 7:37, Mattia Verga wrote: > > +1 > > Can't UPnP be used also for opening ports in iptables firewall (maybe > developing some tools for that)? Upnp is almost always abused. Please don't use it. > > Il 15/04/2014 15:42, Simone Caronni ha scritto: >>> On 15 April 2014 1

Re: F21 System Wide Change: Workstation: Disable firewall

+1 Can't UPnP be used also for opening ports in iptables firewall (maybe developing some tools for that)? Il 15/04/2014 15:42, Simone Caronni ha scritto: On 15 April 2014 14:35, Christopher > wrote: Whoa, the fact that the Firewall is on by default in Fedora (

Re: F21 System Wide Change: Workstation: Disable firewall

2014-04-17 23:51 GMT+02:00 Chuck Anderson : > > To be perfectly clear, vast majority of network applications work > perfectly > > fine. Network *servers* need manual intervention. > > Not just servers. Clients that do broadcast or multicast discovery of > other systems acting as servers can also

Re: F21 System Wide Change: Workstation: Disable firewall

On Thu, Apr 17, 2014 at 11:42:30PM +0200, Miloslav Trmač wrote: > Hello, > 2014-04-16 14:28 GMT+02:00 Josh Boyer : > > > For a quick summary: > > > > 1) With a firewall enabled, network services don't work without manual > > intervention. > > > > To be perfectly clear, vast majority of network ap

Re: F21 Self Contained Change: Remote Journal Logging

2014-04-17 23:34 GMT+02:00 Zbigniew Jędrzejewski-Szmek : > On Thu, Apr 17, 2014 at 10:17:28PM +0200, Miloslav Trmač wrote: > > 2014-04-16 19:08 GMT+02:00 Chris Adams : > > > > > It would be good if systemd could > > > use or extend an existing logging protocol, rather than invent yet > > > another

Re: F21 Self Contained Change: Remote Journal Logging

On Thu, Apr 17, 2014 at 10:12:24PM +0200, Miloslav Trmač wrote: > Hello, > 2014-04-16 15:04 GMT+02:00 Zbigniew Jędrzejewski-Szmek : > > > I'll reconsider using SASL instead. I have the HTTPS-transport version > > almost ready, so for now I'll go with that, to have a working > > solution. There's s

Re: F21 System Wide Change: Workstation: Disable firewall

Hello, 2014-04-15 16:28 GMT+02:00 Christian Schaller : > - Original Message - > > From: "Reindl Harald" > > To: devel@lists.fedoraproject.org > > Sent: Tuesday, April 15, 2014 11:40:20 AM > > Subject: Re: F21 System Wide Change: Workstation: Disable firewall > > > > > > Am 15.04.2014 11:3

Re: F21 System Wide Change: Workstation: Disable firewall

Hello, 2014-04-15 11:01 GMT+02:00 Jaroslav Reznik : > = Proposed System Wide Change: Workstation: Disable firewall = > https://fedoraproject.org/wiki/Changes/Workstation_Disable_Firewall > > == Detailed Description == > The current level of integration into the desktop and applications does not >

[perl-Cpanel-JSON-XS] Update to 3.0102

commit 2ae1fcb26cb2f79f9edee422d088163effcf8e69 Author: Paul Howarth Date: Thu Apr 17 22:42:15 2014 +0100 Update to 3.0102 - New upstream release 3.0102 - Added PERL_NO_GET_CONTEXT for better performance on threaded Perls - MANIFEST: added t/96_interop.t - Documen

Re: F21 System Wide Change: Workstation: Disable firewall

Hello, 2014-04-16 14:28 GMT+02:00 Josh Boyer : > For a quick summary: > > 1) With a firewall enabled, network services don't work without manual > intervention. > To be perfectly clear, vast majority of network applications work perfectly fine. Network *servers* need manual intervention. 2) Wit

Re: F21 Self Contained Change: Remote Journal Logging

On Thu, Apr 17, 2014 at 10:17:28PM +0200, Miloslav Trmač wrote: > 2014-04-16 19:08 GMT+02:00 Chris Adams : > > > It would be good if systemd could > > use or extend an existing logging protocol, rather than invent yet > > another method. > > > > Yes. Going by the feature page and from what I can

Re: F21 System Wide Change: Workstation: Disable firewall

2014-04-16 1:28 GMT+02:00 Simo Sorce : > if the users wants more flexibility then they would create new > zones (like home, work, cafe, library, etc..) perhaps by cloning > existing ones and then tweak the list of applications allowed to serve > content in those zones. > It would be better if the

Re: F21 System Wide Change: Workstation: Disable firewall

2014-04-15 22:49 GMT+02:00 Matthias Clasen : (firewalld features) > So, what you have currently is a raw bit of infrastructure that is > directly exposed to the end user, without any design or integration. > That's *precisely* what the underlying infrastructure should do, isn't it? It's up to the

Re: F21 System Wide Change: Workstation: Disable firewall

2014-04-15 18:13 GMT+02:00 Andrew Lutomirski : > > Example: user installs software X... but oops, they didn't realize it > > was going to listen on port Y but that's okay, because no firewall > > rule has been enabled to allow traffic on port Y, so the user is > > secure. > > This sounds like

Re: F21 System Wide Change: Workstation: Disable firewall

Hello, Just some clarifications so that we are all on the same page; those don't significantly affect the larger discussion though... 2014-04-15 17:40 GMT+02:00 Andrew Lutomirski : > Can someone explain what threat is effectively mitigated by a firewall > on a workstation machine? Here are some

Re: F21 System Wide Change: Workstation: Disable firewall

2014-04-15 15:59 GMT+02:00 Michael Catanzaro : > On Tue, 2014-04-15 at 14:35 +0200, Zbigniew Jędrzejewski-Szmek wrote: > > What needs to be done to improve the firewall integration? > > > > Zbyszek > > The rule in the Workstation technical spec is: "A firewall in its > default configuration may no

Re: F21 System Wide Change: Smaller Cloud Image Footprint

2014-04-17 22:27 GMT+02:00 Miloslav Trmač : > 2014-04-17 21:54 GMT+02:00 Matthew Miller : > > On Thu, Apr 17, 2014 at 09:47:21PM +0200, Miloslav Trmač wrote: >> > > (NetworkManager and initscripts) and one that's available but not >> used by >> > > default anywhere (systemd-networkd). This would s

Re: F21 System Wide Change: Smaller Cloud Image Footprint

2014-04-17 21:54 GMT+02:00 Matthew Miller : > On Thu, Apr 17, 2014 at 09:47:21PM +0200, Miloslav Trmač wrote: > > > (NetworkManager and initscripts) and one that's available but not used > by > > > default anywhere (systemd-networkd). This would simply swap the status > of > > > systemd-networkd a

Re: F21 Self Contained Change: Remote Journal Logging

2014-04-16 19:08 GMT+02:00 Chris Adams : > It would be good if systemd could > use or extend an existing logging protocol, rather than invent yet > another method. > Yes. Going by the feature page and from what I can see from journal-remote.c, because Transfer-Encoding: chunked does not require

Re: F21 Self Contained Change: Remote Journal Logging

Hello, 2014-04-16 15:04 GMT+02:00 Zbigniew Jędrzejewski-Szmek : > I'll reconsider using SASL instead. I have the HTTPS-transport version > almost ready, so for now I'll go with that, to have a working > solution. There's still some other questions, mostly related to how > the data should be stored

Re: F21 System Wide Change: Smaller Cloud Image Footprint

On Thu, Apr 17, 2014 at 09:47:21PM +0200, Miloslav Trmač wrote: > > (NetworkManager and initscripts) and one that's available but not used by > > default anywhere (systemd-networkd). This would simply swap the status of > > systemd-networkd and initscripts. > Is NetworkManager already at the *100%

Re: F21 System Wide Change: Smaller Cloud Image Footprint

2014-04-17 1:42 GMT+02:00 Matthew Miller : > On Thu, Apr 17, 2014 at 01:24:50AM +0200, Miloslav Trmač wrote: > > I don't think we can, or should, have three separate network > configuration > > systems in Fedora at the same time. We already know how long and painful > > I think we'd stay at two,

Re: libreoffice broken again in updates-testing

On Sex, 2014-04-18 at 01:55 +0800, Mathieu Bridon wrote: > On Thu, 2014-04-17 at 16:24 +0200, Reindl Harald wrote: > > and before you tell me now about outdated mirrors - no, see repo-file below > > what you are installing *now* don't matter, *now* 4.2.3.3-4 is in the repo > > starting with tuesda

Re: F21 System Wide Change: Workstation: Disable firewall

On Thu, 2014-04-17 at 12:26 -0400, Paul Wouters wrote: > For DNS issues we have similar issues. A sane default seems to be that > if you plugin a cable or you enter wifi WPA(2) details, you are > trusting the network you are connecting to per default. (with NM > override options for corner cases li

Re: F21 System Wide Change: SCL

On 04/17/2014 05:40 PM, Toshio Kuratomi wrote: On Thu, Apr 17, 2014 at 04:35:25PM +0200, Miloslav Trmač wrote: 2014-04-14 14:13 GMT+02:00 Jaroslav Reznik : 2. Upload packages into git - specific branch based on Fedora version and name of collection. For stable repo we must be abl

Re: libreoffice broken again in updates-testing

On Thu, 2014-04-17 at 16:24 +0200, Reindl Harald wrote: > and before you tell me now about outdated mirrors - no, see repo-file below > what you are installing *now* don't matter, *now* 4.2.3.3-4 is in the repo > starting with tuesday evening until today the broken one was > > to make it short: i

Re: F21 System Wide Change: SCL

On 04/16/2014 07:36 PM, Dennis Gilmore wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 14 Apr 2014 14:13:24 +0200 Jaroslav Reznik wrote: = Proposed System Wide Change: SCL = https://fedoraproject.org/wiki/Changes/SCL Change owner(s): Marcela Mašláňová SCL - Software Collection

Re: F21 Self Contained Change: Playground repository

On 04/17/2014 06:14 PM, Kevin Fenzi wrote: On Thu, 17 Apr 2014 09:03:20 +0200 Marcela Mašláňová wrote: On 04/15/2014 05:58 PM, Kevin Fenzi wrote: ...snip... Packages for the repository are built in COPR. The COPR owner can propose the repository as a whole for inclusion into the Playground

Re: F21 System Wide Change: Workstation: Disable firewall

Am 17.04.2014 18:26, schrieb Paul Wouters: > On Thu, 17 Apr 2014, Daniel J Walsh wrote: > >> Didn't mean to accuse you of saying that. I do like the idea of asking >> if you are on a "trusted" network. > > For DNS issues we have similar issues. A sane default seems to be that > if you plugin a c

Re: F21 System Wide Change: Workstation: Disable firewall

On Thu, 17 Apr 2014, Daniel J Walsh wrote: Didn't mean to accuse you of saying that. I do like the idea of asking if you are on a "trusted" network. For DNS issues we have similar issues. A sane default seems to be that if you plugin a cable or you enter wifi WPA(2) details, you are trusting

Broken dependencies: perl-Catalyst-Controller-HTML-FormFu

perl-Catalyst-Controller-HTML-FormFu has broken dependencies in the rawhide tree: On x86_64: perl-Catalyst-Controller-HTML-FormFu-0.09004-4.fc20.noarch requires perl(HTML::FormFu::MultiForm) On i386: perl-Catalyst-Controller-HTML-FormFu-0.09004-4.fc20.noarch requires perl(HTML:

Broken dependencies: perl-GnuPG-Interface

perl-GnuPG-Interface has broken dependencies in the rawhide tree: On x86_64: perl-GnuPG-Interface-0.50-1.fc21.noarch requires perl(MooX::late) On i386: perl-GnuPG-Interface-0.50-1.fc21.noarch requires perl(MooX::late) On armhfp: perl-GnuPG-Interface-0.50-1.fc21.noarch requ

Broken dependencies: mojomojo

mojomojo has broken dependencies in the rawhide tree: On x86_64: mojomojo-1.10-1.fc20.noarch requires perl(HTML::FormFu::Element::reCAPTCHA) On i386: mojomojo-1.10-1.fc20.noarch requires perl(HTML::FormFu::Element::reCAPTCHA) On armhfp: mojomojo-1.10-1.fc20.noarch requir

Broken dependencies: perl-Language-Expr

perl-Language-Expr has broken dependencies in the rawhide tree: On x86_64: perl-Language-Expr-0.19-4.fc19.noarch requires perl(:MODULE_COMPAT_5.16.2) On i386: perl-Language-Expr-0.19-4.fc19.noarch requires perl(:MODULE_COMPAT_5.16.2) On armhfp: perl-Language-Expr-0.19-4.

Re: F21 Self Contained Change: Playground repository

On Thu, 17 Apr 2014 09:03:20 +0200 Marcela Mašláňová wrote: > On 04/15/2014 05:58 PM, Kevin Fenzi wrote: > > ...snip... > > > >> Packages for the repository are built in COPR. The COPR owner can > >> propose the repository as a whole for inclusion into the Playground > >> repository by marking it

Re: F21 System Wide Change: Workstation: Disable firewall

On 04/16/2014 09:32 AM, Simo Sorce wrote: > On Wed, 2014-04-16 at 05:40 -0700, Daniel J Walsh wrote: >> On 04/15/2014 09:31 AM, Simo Sorce wrote: >>> On Tue, 2014-04-15 at 09:13 -0700, Andrew Lutomirski wrote: I keep thinking that, if I had unlimited time, I'd write a totally different k

Re: F21 System Wide Change: SCL

On Thu, Apr 17, 2014 at 04:35:25PM +0200, Miloslav Trmač wrote: > 2014-04-14 14:13 GMT+02:00 Jaroslav Reznik : > > 2. Upload packages into git - specific branch based on Fedora version and > name > of collection. For stable repo we must be able to replicate builds from > git > rep

Re: Documentation and Docstring Format

On Thu, 17 Apr 2014 10:03:24 -0400 (EDT) Kamil Paral wrote: > > > https://pythonhosted.org/an_example_pypi_project/sphinx.html#auto-directives > > > > > > > > > I'm not suggesting that we drop everything and fix all the > > > docstrings right now but I am suggesting that we start following > >

Re: Taskotron and Cloud Image tests

On Thu, Apr 17, 2014 at 02:25:03PM +0200, Vitaly Kuznetsov wrote: > 2mattdm: Matt, I remember you telling me that someone is working on such > uploader. Can you please shed some light on what's the status now and > what can be done in before f21? Yeah. Still manual process. It feels like a very lo

Re: F21 Self Contained Change: Remote Journal Logging

On Thu, Apr 17, 2014 at 07:33:16AM -0400, Martin Langhoff wrote: > On Wed, Apr 16, 2014 at 5:08 PM, Zbigniew Jędrzejewski-Szmek > wrote: > >> So I'll ask you about this other aspect -- what about stateless > >> clients with very limited or no local storage? > > Not supported by this, unfortunately

Re: F21 System Wide Change: SCL

2014-04-14 14:13 GMT+02:00 Jaroslav Reznik : > 2. Upload packages into git - specific branch based on Fedora version and > name > of collection. For stable repo we must be able to replicate builds from git > repo, which Fedora own. > I'm confused; what *precisely* is the layout you are proposing

[perl-MooseX-Types-Stringlike] Created tag perl-MooseX-Types-Stringlike-0.003-1.fc21

The lightweight tag 'perl-MooseX-Types-Stringlike-0.003-1.fc21' was created pointing to: c4c2fde... Update to 0.003 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/list

[perl-MooseX-Types-Stringlike] Created tag perl-MooseX-Types-Stringlike-0.003-1.el7

The lightweight tag 'perl-MooseX-Types-Stringlike-0.003-1.el7' was created pointing to: c4c2fde... Update to 0.003 -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listi

Re: libreoffice broken again in updates-testing

Am 17.04.2014 16:19, schrieb Reindl Harald: > Am 17.04.2014 16:16, schrieb Sérgio Basto: >> I don't broken deps [1] , the important is why you got broken deps >> >> [1] yum --enablerepo=updates-testing update --advisory FEDORA-2014-5062 >> >> I'm installing libreoffice-4.2.3.3-4, and you are ins

Re: libreoffice broken again in updates-testing

Am 17.04.2014 16:16, schrieb Sérgio Basto: > On Qui, 2014-04-17 at 00:48 +0200, Reindl Harald wrote: >> why do whe have that always with libreoffice? >> the broken build hangs around for 30 hours in the repo >> the supposed to fix that one is not pushed >> even with using the koji-repo no way t

Re: libreoffice broken again in updates-testing

On Qui, 2014-04-17 at 00:48 +0200, Reindl Harald wrote: > why do whe have that always with libreoffice? > the broken build hangs around for 30 hours in the repo > the supposed to fix that one is not pushed > even with using the koji-repo no way t osolve that > > https://admin.fedoraproject.org/u

Re: libreoffice broken again in updates-testing

On Qui, 2014-04-17 at 00:48 +0200, Reindl Harald wrote: > why do whe have that always with libreoffice? > the broken build hangs around for 30 hours in the repo > the supposed to fix that one is not pushed > even with using the koji-repo no way t osolve that > > https://admin.fedoraproject.org/up

Re: Documentation and Docstring Format

On Thu, 17 Apr 2014 05:31:30 -0400 (EDT) Josef Skladanka wrote: > > https://pythonhosted.org/an_example_pypi_project/sphinx.html#auto-directives > > > > > > I'm not suggesting that we drop everything and fix all the > > docstrings right now but I am suggesting that we start following > > the sp

[perl-Term-ProgressBar/f20] 2.15 bump

Summary of changes: a05e676... 2.15 bump (*) (*) This commit already existed in another branch; no separate mail sent -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/l

Re: F21 Self Contained Change: Playground repository

On 04/08/2014 08:23 PM, Kevin Fenzi wrote: So, I need to fully read the change before making more comments, but I thought I would mention Chromium since it seems to come up a lot. Yes, it has a number of bundled things that cannot be easily unbundled. And I would expect that every library bun

Re: F21 Self Contained Change: Playground repository

On 04/17/2014 03:03 PM, Florian Weimer wrote: On 04/08/2014 06:17 PM, Jaroslav Reznik wrote: The Playground repository gives contributors a place to host packages that are not up to the standards of the main Fedora repository but may still be useful to other users. For now the Playground reposit

Re: F21 Self Contained Change: Playground repository

On 04/08/2014 06:17 PM, Jaroslav Reznik wrote: The Playground repository gives contributors a place to host packages that are not up to the standards of the main Fedora repository but may still be useful to other users. For now the Playground repository contains both packages that are destined fo

Re: F21 Self Contained Change: Playground repository

On 04/17/2014 02:34 PM, Josh Boyer wrote: On Thu, Apr 17, 2014 at 3:03 AM, Marcela Mašláňová wrote: On 04/15/2014 05:58 PM, Kevin Fenzi wrote: ...snip... Packages for the repository are built in COPR. The COPR owner can propose the repository as a whole for inclusion into the Playground rep

Re: F21 Self Contained Change: Playground repository

On Thu, Apr 17, 2014 at 3:03 AM, Marcela Mašláňová wrote: > On 04/15/2014 05:58 PM, Kevin Fenzi wrote: >> >> ...snip... >> >>> Packages for the repository are built in COPR. The COPR owner can >>> propose the repository as a whole for inclusion into the Playground >>> repository by marking it as s

Re: F21 Self Contained Change: Remote Journal Logging

On Wed, Apr 16, 2014 at 5:08 PM, Zbigniew Jędrzejewski-Szmek wrote: >> So I'll ask you about this other aspect -- what about stateless >> clients with very limited or no local storage? > Not supported by this, unfortunately. There needs to be at least > temporary storage in tmpfs for this scheme t

Re: F21 System Wide Change: Ruby193 in SCL

This is a great change that actually allows other teams that heavily relies on Fedoras to put their software "on hold" for two Fedora releases. Fedora is really a fast moving target and the same for Ruby. Catching up costs lot of effort. This gives us usually "one extra" release to put things on h

Re: F21 System Wide Change: Ruby193 in SCL

> Stupid question: what in rails depends on v8 exactly? Not sure if this has been answered already, but it's the asset pipeline precompilation, a build requirement. -- Later, Lukas "lzap" Zapletal irc: lzap #theforeman -- devel mailing list devel@lists.fedoraproject.org https://admin.fedorap

Re: F21 System Wide Change: Workstation: Disable firewall

On 04/16/2014 01:11 AM, William Brown wrote: On Tue, 2014-04-15 at 13:49 -0700, Matthias Clasen wrote: On Tue, 2014-04-15 at 20:41 +0200, Thomas Woerner wrote: What you need is clearly different "zones" that the user can configure and associate to networks, with the default being that you t

Re: libreoffice broken again in updates-testing

On Thu, Apr 17, 2014 at 10:39 AM, Reindl Harald wrote: > > > Am 17.04.2014 09:50, schrieb David Tardon: >> On Thu, Apr 17, 2014 at 12:48:47AM +0200, Reindl Harald wrote: >>> why do whe have that always with libreoffice? >> >> I will send a note to the editors of Oxford English Dictionary that >> "

Re: libreoffice broken again in updates-testing

Am 17.04.2014 09:50, schrieb David Tardon: > On Thu, Apr 17, 2014 at 12:48:47AM +0200, Reindl Harald wrote: >> why do whe have that always with libreoffice? > > I will send a note to the editors of Oxford English Dictionary that > "always" has been redefined to mean "in less than 10 % of cases".

Re: libreoffice broken again in updates-testing

On Thu, Apr 17, 2014 at 12:48:47AM +0200, Reindl Harald wrote: > why do whe have that always with libreoffice? I will send a note to the editors of Oxford English Dictionary that "always" has been redefined to mean "in less than 10 % of cases". If I count correctly, we have issued 26 updates for F

Re: F21 Self Contained Change: Playground repository

On 04/15/2014 05:58 PM, Kevin Fenzi wrote: ...snip... Packages for the repository are built in COPR. The COPR owner can propose the repository as a whole for inclusion into the Playground repository by marking it as such in COPR. Repositories/packages successfully built and satisfying the Playg