Re: HEADS UP: dhcp will ship bunded bind libraries

2019-03-12 Thread Tomas Hozza
lution). > Can someone explain that topic a bit? > > kloczek > ISC DHCP uses BIND libraries e.g. to support Dynamic DNS updates on authoritative DNS server when assigning leases to hosts. I don't think that glibc resolver would be anyhow useful i

Orphaned python-adns

2018-12-06 Thread Tomas Hozza
can be retired or please consider maintaining python-adns as well. Regards, Tomas -- Tomas Hozza Associate Manager, Software Engineering - EMEA ENG Core Services PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com ___ devel

Re: F26 Self Contained Change: BIND version 9.11

2016-10-11 Thread Tomas Hozza
On 10/09/2016 09:58 PM, Peter Robinson wrote: > On Mon, Oct 3, 2016 at 11:18 AM, Jan Kurik <jku...@redhat.com> wrote: > > = Proposed Self Contained Change: BIND version 9.11 = > > https://fedoraproject.org/wiki/Changes/BIND_9.11 > > > > Change owner(s): > &

Re: Bind update (CVE-2016-2776)?

2016-09-29 Thread Tomas Hozza
On 09/29/2016 10:36 AM, Igor Gnatenko wrote: > On Thu, Sep 29, 2016 at 10:08 AM, Tomas Hozza <tho...@redhat.com> wrote: > > On 09/29/2016 06:19 AM, Bojan Smojver wrote: > >> Could someone with sufficient access please spin up an update of bind > >> for F-24 and o

Re: Bind update (CVE-2016-2776)?

2016-09-29 Thread Tomas Hozza
he updates shortly. The problem with Fedora is that we can not prepare the update in advance as for RHEL, because everything (git repos, update system, etc.) is public. Regards, Tomas -- Tomas Hozza Associate Manager, Software Engineering - EMEA ENG Mainstream RHEL PGP: 1D9F3C2D UTC+2

Re: How to fix broken dependency in orphaned package that FTBFS in F24

2016-04-11 Thread Tomas Hozza
On 07.04.2016 15:50, James Hogarth wrote: > > > On 7 April 2016 at 14:26, Tomas Hozza <tho...@redhat.com > <mailto:tho...@redhat.com>> wrote: > > Hi all. > > We pushed an update for log4cplus in F24+ [1]. It is a rebase and one of > the depend

How to fix broken dependency in orphaned package that FTBFS in F24

2016-04-07 Thread Tomas Hozza
[1] https://bodhi.fedoraproject.org/updates/FEDORA-2016-53b6df64eb Regards, -- Tomas Hozza Senior Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 12:23, Lennart Poettering wrote: > On Mon, 07.12.15 10:48, Tomas Hozza (tho...@redhat.com) wrote: > >> On 04.12.2015 15:57, Lennart Poettering wrote: >>> On Tue, 01.12.15 11:15, Tomas Hozza (tho...@redhat.com) wrote: >>> >>>> You are not

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
't want to be picked on. This is completely out of context. Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 15:15, Richard Hughes wrote: > On 7 December 2015 at 14:04, Tomas Hozza <tho...@redhat.com> wrote: >> I took this conversation as a mean for improvement. > > When an email is titled "F24 System Wide Change" I think a lot of > people (like me) we

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 15:00, Matthew Miller wrote: > On Mon, Dec 07, 2015 at 02:59:18PM +0100, Tomas Hozza wrote: > >> I agree with Lennart. Whether or not this is expected to work with > >> DNSSEC is of academic interest given that people will expect it to work > >> with

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
On 07.12.2015 16:44, Andrew Lutomirski wrote: > > On Dec 7, 2015 1:49 AM, "Tomas Hozza" <tho...@redhat.com > <mailto:tho...@redhat.com>> wrote: > > > > On 04.12.2015 15:57, Lennart Poettering wrote: > > > On Tue, 01.12.15 11:15, Tomas Hozza

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-07 Thread Tomas Hozza
t; Florian > -- > devel mailing list > devel@lists.fedoraproject.org > http://lists.fedoraproject.org/admin/lists/devel@lists.fedoraproject.org > -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc.

Re: F24 System Wide Change: Layered Docker Image Build Service

2015-12-04 Thread Tomas Hozza
On 03.12.2015 15:40, Adam Miller wrote: > On Thu, Dec 3, 2015 at 8:12 AM, Tomas Hozza <tho...@redhat.com> wrote: > > On 03.12.2015 14:54, Jan Kurik wrote: > >> On Thu, Dec 3, 2015 at 2:38 PM, Tomas Hozza <tho...@redhat.com> wrote: > >>> On 03.12.2015

Re: F24 System Wide Change: Layered Docker Image Build Service

2015-12-03 Thread Tomas Hozza
Crane > * * Docker Registry > > == Scope == > For the Scope of this Change please check > https://fedoraproject.org/wiki/Changes/Layered_Docker_Image_Build_Service#Scope > Hi. The "Ongoing Work Tracking" link does not work. How is this different from the proposal

Re: F24 System Wide Change: Layered Docker Image Build Service

2015-12-03 Thread Tomas Hozza
On 03.12.2015 14:54, Jan Kurik wrote: > On Thu, Dec 3, 2015 at 2:38 PM, Tomas Hozza <tho...@redhat.com> wrote: >> On 03.12.2015 11:40, Jan Kurik wrote: >>> = Proposed System Wide Change: Layered Docker Image Build Service = >>> https

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-02 Thread Tomas Hozza
by libvirt). I'll review the change wiki in this regard. > * howto get domainname set automatically from dhcp As discussed in the Bug, this is not going to work and it is expected not to. Setting search domains from DHCP is a security issue. Tomas > -- > devel mailing list > devel@li

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-01 Thread Tomas Hozza
gt; > = Default Local DNS Resolver = > > https://fedoraproject.org/wiki/Changes/Default_Local_DNS_Resolver > > > > Change owner(s): > > * P J P > > * Pavel Šimerda > > * Tomas Hozza > > * Petr Špaček > > > > Plain DNS protocol is insecu

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-01 Thread Tomas Hozza
On 01.12.2015 16:06, Björn Persson wrote: > Tomas Hozza <tho...@redhat.com> wrote: > > - dnssec-trigger does not do the Captive Portal detection and handling and > > we rather rely on NM for the detection and on Gnome Shell for the Portal > > login > > Can

Re: F24 System Wide Change: Default Local DNS Resolver

2015-12-01 Thread Tomas Hozza
On 01.12.2015 13:28, Tomas Mraz wrote: > On Út, 2015-12-01 at 11:15 +0100, Tomas Hozza wrote: > > You are not mistaken. > > > > This is the third time, because previously we rather moved the change to the > > next Fedora to bring better user experience. Every time there

Summary/Minutes from today's FESCo Meeting (2015-11-25)

2015-11-26 Thread Tomas Hozza
On 25.11.2015 10:03, Tomas Hozza wrote: > Following is the list of topics that will be discussed in the FESCo > meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. > > To convert UTC to your local time, take a look at > http://fedoraproject.org/wiki/UTCH

Schedule for Wednesday's FESCo Meeting (2015-11-25)

2015-11-25 Thread Tomas Hozza
at the end of the meeting, during the open floor topic. Note that added topics may be deferred until the following meeting. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D UTC+1 (CET) Red Hat Inc. http://cz.redhat.com -- devel mailing list

Re: Fedora IPv6 testing and improvements - request for ideas

2015-11-04 Thread Tomas Hozza
would be IPv6 only - as long > > as there is no IPv4-only user who cares - it's correct way. > > Whether a package is IPv6 only and whether a package works with > ipv6.disabled=1 are two distinct things that need to be tested > separately. On the other IPv6 only packages

Summary of Thursday's call between GNOME and NM devels and Default DNS resolver change owners

2015-07-17 Thread Tomas Hozza
/Default_Local_DNS_Resolver [2] https://www.piratepad.ca/p/default-dns-resolver-f23 [3] https://bluejeans.com/s/8pTY/ Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

Re: Summary/Minutes from today's FESCo Meeting (2015-07-01)

2015-07-07 Thread Tomas Hozza
On 02.07.2015 17:56, Chris Murphy wrote: On Thu, Jul 2, 2015 at 9:45 AM, Stephen Gallagher sgall...@redhat.com wrote: On Thu, 2015-07-02 at 10:33 -0500, Michael Catanzaro wrote: On Thu, 2015-07-02 at 09:55 +0200, Tomas Hozza wrote: * AGREED: Netizen is not approved as spin. We approve

Summary/Minutes from today's FESCo Meeting (2015-07-01)

2015-07-02 Thread Tomas Hozza
) * plautrba (4) * jkurik (4) * mfabian (2) * maxamillion (2) * pravins (2) * mitr (1) * jkurik_mtg (1) * hguemar (0) * rishi (0) * nirik (0) * dgilmore (0) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot On 30.06.2015 12:02, Tomas Hozza wrote: Following is the list

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:46, Stef Walter wrote: On 30.06.2015 11:24, Tomas Hozza wrote: On 26.06.2015 17:13, Matthias Clasen wrote: On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: Hey, I was out for a week, so this may be a bit of a late reply. As Michael and Bastien already stated, all

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:58, Stef Walter wrote: On 30.06.2015 13:53, Bastien Nocera wrote: - Original Message - On 30.06.2015 11:24, Tomas Hozza wrote: snip It means that the site of your bank you are on may not be provided the actual host you should be connected to, but instead by some

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 13:53, Bastien Nocera wrote: - Original Message - On 30.06.2015 11:24, Tomas Hozza wrote: snip It means that the site of your bank you are on may not be provided the actual host you should be connected to, but instead by some attacker's. The insecure mode means

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 14:11, Bastien Nocera wrote: - Original Message - On 30.06.2015 13:53, Bastien Nocera wrote: - Original Message - On 30.06.2015 11:24, Tomas Hozza wrote: snip It means that the site of your bank you are on may not be provided the actual host you should

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 14:37, Bastien Nocera wrote: - Original Message - snip No, it is not. It is opt-in now, we want it by default. Please read the change. Thank you. I don't see any options about it in GNOME's Network panel. I'm not interested in integration as an after-thought.

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 16:07, Michael Catanzaro wrote: On Tue, 2015-06-30 at 11:24 +0200, Tomas Hozza wrote: The thing is that some information are unrelated to NM. There is no reason to push all information back to NetworkManager, since its role is explicitly defined - manage network connections

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 30.06.2015 16:07, Michael Catanzaro wrote: On Tue, 2015-06-30 at 14:23 +0200, Tomas Hozza wrote: Except that this is exactly what we DON'T want to do. DNSSEC is an extension of DNS and it can be used even without the need for the whole Internet to be signed. We want to use it even

Re: DNSSEC/unbound - boingboing.net failures

2015-06-30 Thread Tomas Hozza
email. Thanks in advance. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http

Schedule for Wednesday's FESCo Meeting (2015-07-01)

2015-06-30 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-07-01 18:00 UTC' Links to all tickets

Re: dnssec-trigger + GNOME + NetworkManager integration

2015-06-30 Thread Tomas Hozza
On 26.06.2015 17:13, Matthias Clasen wrote: On Tue, 2015-06-23 at 18:43 +0200, Tomas Hozza wrote: Hey, I was out for a week, so this may be a bit of a late reply. As Michael and Bastien already stated, all the GNOME networking UI relies on information gotten from NetworkManager, and we'd

Re: Schedule for Wednesday's FESCo Meeting (2015-06-24)

2015-06-24 Thread Tomas Hozza
://wiki.debian.org/MeetBot On 23.06.2015 17:43, Tomas Hozza wrote: Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto

Schedule for Wednesday's FESCo Meeting (2015-06-24)

2015-06-23 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-06-24 18:00 UTC' Links to all tickets

dnssec-trigger + GNOME + NetworkManager integration

2015-06-23 Thread Tomas Hozza
specific solutions and pieces we can start working on. Thanks. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-18 Thread Tomas Hozza
love to see more will for cooperation from GNOME people, so we can converge to the working and well integrated solution. Vague claims that something is missing or something needs to be done, without clear reasoning is not helping anyone. Cheers -- Tomas Hozza Software Engineer - EMEA ENG Developer

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
On 17.06.2015 16:22, Paul Wouters wrote: On Wed, 17 Jun 2015, Tomas Hozza wrote: While I don't actually care, this might well be a sticking point for many people since their DNS information is going to an untrusted (to them) DNS server. Yeah, I tend to trust Fedora, but not everyone

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
of concept of how to do client side DNSSEC validation properly. Tomas Paul -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
On 12.06.2015 18:58, Dan Williams wrote: On Fri, 2015-06-12 at 10:58 +0200, Tomas Hozza wrote: On 11.06.2015 22:48, Dan Williams wrote: On Tue, 2015-06-09 at 12:30 -0400, Matthew Miller wrote: On Tue, Jun 09, 2015 at 11:34:39AM -0400, Paul Wouters wrote: decision needs to then be made

Re: Packaging Guidelines for Applications using Git Submodules

2015-06-17 Thread Tomas Hozza
guidelines to include some note on git submodules. If you have some proposed draft of the change (e.g. describing the current approach used in other packages) I think it is a good idea to include it. [1] https://fedorahosted.org/fpc/ Regards, Tomas -- Tomas Hozza Software Engineer - EMEA ENG

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
done only by the dnssec-trigger based on the information passed by VPN to the NM. Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
it will clean up after itself and return back the system to the original state. Of course you can remove it if you wish :) All these sub-problems (including VPN handling an so on) are solved by dnssec-trigger with tweaks by Tomas Hozza and Pavel Simerda. HERE we need to coordinate with other

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-17 Thread Tomas Hozza
a design for this which integrates better with GNOME Shell and the existing network icon there. I hope too. Regards, Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-12 Thread Tomas Hozza
to contact some GNOME guys and ask them for help. Thank you for your comments! Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

Re: New ABRT CLI

2015-06-03 Thread Tomas Hozza
-2.5.1-3.fc22.1.x86_64 So this needs to be installed without the --disablerepo=* argument. Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-02 Thread Tomas Hozza
On 06/02/2015 06:44 PM, Paul Wouters wrote: On Tue, 2 Jun 2015, David Howells wrote: Install a local DNS resolver trusted for the DNSSEC validation running on 127.0.0.1:53. This must be the only name server entry in /etc/resolv.conf. The automatic name server entries received via

Re: F23 System Wide Change: Default Local DNS Resolver

2015-06-01 Thread Tomas Hozza
On 06/01/2015 03:32 PM, Matthew Miller wrote: On Mon, Jun 01, 2015 at 08:03:27AM -0400, Jan Kurik wrote: People use Fedora on portable/mobile devices which are connected to diverse networks as and when required. The automatic DNS configurations provided by these networks are never

Deprecation of ISC's DLV registry

2015-05-20 Thread Tomas Hozza
that use ISC's DLV in their default configuration in Fedora. If you are aware of any other component, please file a bug and add it to the tracking bug: https://bugzilla.redhat.com/show_bug.cgi?id=1223360 Thanks! Regards, Tomas -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience

Re: Schedule for Wednesday's FESCo Meeting (2015-03-11)

2015-03-11 Thread Tomas Hozza
On 03/10/2015 04:06 PM, Tomas Hozza wrote: Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d

Schedule for Wednesday's FESCo Meeting (2015-03-11)

2015-03-10 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2015-03-11 18:00 UTC' Links to all tickets

Re: FESCo elections are open

2015-02-02 Thread Tomas Hozza
On 02/01/2015 10:39 AM, Alec Leamas wrote: On 30/01/15 16:10, Kevin Fenzi wrote: On Fri, 30 Jan 2015 15:58:00 +0100 Alec Leamas leamas.a...@gmail.com wrote: There were not really any questions directly related to products. Perhaps some could be added next time? In any case, I am in

Re: F22 System Wide Change: Enable Polyinstantiated /tmp and /var/tmp directories by default

2015-01-20 Thread Tomas Hozza
you think this? I don't see any reason why the new tmp-inst directories can not be on tmpfs... Incidentally, why /tmp-inst but /var/tmp/tmp-inst? Why not /tmp/tmp-inst for /tmp or /var/tmp-inst for /var/tmp? Shouldn't the naming be consistent? Tom Regards, -- Tomas Hozza Software Engineer

Re: F22 System Wide Change: Default Local DNS Resolver

2015-01-19 Thread Tomas Hozza
tons of hackish options. From this point of view, the choice is pretty clear I think. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

Re: F22 System Wide Change: Default Local DNS Resolver

2015-01-19 Thread Tomas Hozza
contributions in testing the setup. Hopefully you recognize some of the improvements done based on your reports. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel

Re: Bodhi policy for pushing updates to stable

2015-01-16 Thread Tomas Hozza
On 01/15/2015 05:15 PM, Luke Macken wrote: On Thu, Jan 15, 2015 at 10:19:19AM +0100, Tomas Hozza wrote: Hi all. When upgrading F20 to F21 using FedUp, some users had a problem with some packages not being upgraded (e.g. [1]). The problem was caused by broken update path F20 - F21

BIND 9.10 in rawhide

2015-01-15 Thread Tomas Hozza
Hi all. I updated BIND to the latest stable 9.10 version in rawhide, as discussed here [1]. Feel free to try it out. [1] https://fedoraproject.org/wiki/Changes/BIND_9.10 Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc

Bodhi policy for pushing updates to stable

2015-01-15 Thread Tomas Hozza
be. However I think such task should be automated. Would it be possible to enforce such a thing for updates in bodhi? [1] https://bugzilla.redhat.com/show_bug.cgi?id=1176403 Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com

Re: Schedule for Wednesday's FESCo Meeting (2014-12-10)

2014-12-10 Thread Tomas Hozza
On 12/09/2014 07:22 PM, Tomas Hozza wrote: Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d

Schedule for Wednesday's FESCo Meeting (2014-12-10)

2014-12-09 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '2014-12-10 18:00 UTC' Links to all tickets

Re: Abotu setting 'PermitRootLogin=no' in sshd_config

2014-11-21 Thread Tomas Hozza
On 11/21/2014 09:04 AM, P J P wrote: On Friday, 21 November 2014 1:24 PM, Florian Weimer wrote: On 11/21/2014 08:34 AM, Jan Kratochvil wrote: Almost all of my Fedora installations are test VMs where any security is irrelevant. Okay. But does enabling root login offer any significant

Re: Summary/Minutes from today's FESCo Meeting (2014-11-19)

2014-11-20 Thread Tomas Hozza
On 11/20/2014 08:05 AM, Till Maas wrote: On Wed, Nov 19, 2014 at 03:06:11PM -0500, Tomas Mraz wrote: * #1368 How to deal with F21 broken dependencies (t8m, 19:08:56) * AGREED: FESCo agrees to dropping the packages with broken dependencies listed in #1368 from both F21 and rawhide

Re: Idea: Ability to define dependencies between coprs (correctly)

2014-10-09 Thread Tomas Hozza
problems. However in thins case it might be worth deciding if such .repo should be named in a way to express it contains also a bundle of dependent repos. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http

Re: Idea: Ability to define dependencies between coprs (correctly)

2014-10-08 Thread Tomas Hozza
will be installed/enabled as dependencies, so the user is kind of informed what extra repos will be installed and enabled. gets changed (on the server's side). Let's discuss this a bit, I'm eager to hear your opinions. Cheers, Honza -- Tomas Hozza Software Engineer - EMEA ENG

planned bind-pkcs11 changes in F20+

2014-09-25 Thread Tomas Hozza
break someone's setup, please let me know so we can work on some solution. Otherwise I'll do the changes some day next week. Thank you. Regards, - -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -BEGIN

Re: planned bind-pkcs11 changes in F20+

2014-09-25 Thread Tomas Hozza
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/25/2014 05:18 PM, Paul Wouters wrote: On Thu, 25 Sep 2014, Tomas Hozza wrote: I would like to inform everyone about changes I plan to do in Fedora 20+ due to Bug 1097752 (Support for native PKCS#11 interface - needed by FreeIPA

Re: F22 Self Contained Change: BIND version 9.10

2014-09-16 Thread Tomas Hozza
On 09/16/2014 01:34 PM, Jaroslav Reznik wrote: = Proposed Self Contained Change: BIND version 9.10 = https://fedoraproject.org/wiki/Changes/BIND_9.10 Change owner(s): Tomas Hozza tho...@redhat.com BIND (Berkeley Internet Name Domain) version 9.10 is the latest stable major update

Summary/Minutes from today's FESCo Meeting (2014-08-20)

2014-08-20 Thread Tomas Hozza
=== #fedora-meeting: FESCO (2014-08-20) === Meeting started by thozza at 17:04:28 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-08-20/fesco.2014-08-20-17.04.log.html . Meeting summary

Schedule for Wednesday's FESCo Meeting (2014-08-20)

2014-08-19 Thread Tomas Hozza
Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 17:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '-MM-DD 17:00 UTC' Links to all tickets

Re: Schedule for Wednesday's FESCo Meeting (2014-08-20)

2014-08-19 Thread Tomas Hozza
On Tue 19 Aug 2014 01:40:55 PM CEST, Stephen Gallagher wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/19/2014 04:14 AM, Tomas Hozza wrote: Following is the list of topics that will be discussed in the FESCo meeting Wednesday at 17:00UTC in #fedora-meeting on irc.freenode.net

BIND 9.10.1 beta with seccomp functionality

2014-08-19 Thread Tomas Hozza
. There's very little he can do.” Thank you. Regards, - -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -BEGIN PGP SIGNATURE- Version: GnuPG v1 iQEcBAEBAgAGBQJT82i/AAoJEMWIetUdnzwtooYH

Re: BIND 9.10.1 beta with seccomp functionality

2014-08-19 Thread Tomas Hozza
On Tue 19 Aug 2014 05:12:31 PM CEST, Chris Adams wrote: Once upon a time, Tomas Hozza tho...@redhat.com said: That's where seccomp kicks in, it acts as a 2nd wall of defence. In case of a security hole being present in the server process, it goes further than a chroot, it prevents the attacker

Retiring bind10 in F21+

2014-08-18 Thread Tomas Hozza
-project-renamed-bundy/ [2] https://bugzilla.redhat.com/show_bug.cgi?id=1130617 Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

Re: Non-responsive maintainer: Deji Akingunola (fas: deji)

2014-07-28 Thread Tomas Hozza
one branch: (Note that many of them have co-maintainers, so do check with them to see if any of them would like to become the new point of contact): atlas Taken by fkluknav Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc

Re: Attempting to contact unresponsive maintainer - jkoncick

2014-07-07 Thread Tomas Hozza
and finished today. I think it is OK if you remove his acls right away. Regards, -- Tomas Hozza Software Engineer - EMEA ENG Developer Experience PGP: 1D9F3C2D Red Hat Inc. http://cz.redhat.com -- devel mailing list devel@lists.fedoraproject.org https

FESCo candidature announcement

2014-07-04 Thread Tomas Hozza
and proper understanding. I think all important changes should be thoroughly discussed and not made silently. Have you any questions, feel free to ping me on IRC (#fedora-devel) or drop an email. Tomas [1] https://fedoraproject.org/wiki/Development/SteeringCommittee/Nominations#Candidates -- Tomas

Split of bind-chroot package in Fedora rawhide branch

2013-12-18 Thread Tomas Hozza
'/var/named/chroot_sdb'. Regards, Tomas Hozza ___ devel-announce mailing list devel-annou...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel-announce -- devel mailing list devel@lists.fedoraproject.org https

Re: PSA: If you are C/C++ developer, use cppcheck

2013-12-17 Thread Tomas Hozza
to open-source projects for free [1]. I think some projects are already using it (at least Squid). So if upstream projects are interested, they can sign up for free. [1] https://scan.coverity.com/ Regards, Tomas Hozza -- devel mailing list devel@lists.fedoraproject.org https

Unresponsive maintainers of dependent packages

2013-12-09 Thread Tomas Hozza
these packages to be deprecated in rawhide, or what can I do with them? I don't want to take maintenance of those packages. Dependent packages I have problem with are: - obexfs - obexftp - libopensync-plugin-irmc Thanks in advance for any help/opinion. Regards, Tomas Hozza [1] https

Heads up - updating openobex in rawhide to 1.7.1 - API change

2013-09-11 Thread Tomas Hozza
/ If someone thinks we should not rebase openobex to the latest version and has a good reason for it, feel free to replay to this email. Thanks! Regards, Tomas Hozza -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code