Re: yum-presto occasionally goes into eternal loop looking for deltas

2010-01-08 Thread Seth Vidal
On Thu, 7 Jan 2010, James Antill wrote: On Thu, 2010-01-07 at 21:19 +0200, Jonathan Dieter wrote: On Thu, 2010-01-07 at 20:44 +0200, Pekka Pietikainen wrote: Presto is one of the best things ever, but occasionally it ends up not finding the delta files from any of the mirrors in the mirror

Re: End of days?

2010-01-07 Thread Seth Vidal
On Thu, 7 Jan 2010, Tony Nelson wrote: On 10-01-06 17:54:10, Robert Relyea wrote: On 01/06/2010 01:43 PM, Orion Poplawski wrote: [or...@orca fedora/devel]$ ls */dead.package | wc -l 666 We're ok. The original number may have been 616: http://www.csad.ox.ac.uk/POxy/beast616.htm No,

Re: ABRT considered painful

2010-01-02 Thread Seth Vidal
On Sat, 2 Jan 2010, Jan Kratochvil wrote: On Sat, 02 Jan 2010 13:34:47 +0100, drago01 wrote: On Sat, Jan 2, 2010 at 1:25 PM, Jan Kratochvil jan.kratoch...@redhat.com wrote: On Sat, 02 Jan 2010 11:53:28 +0100, Jiri Moskovcak wrote: the only problem I know about is when some of the enabled

Re: dist-git proof of concept phase 2 ready for testing

2009-12-22 Thread Seth Vidal
On Tue, 22 Dec 2009, Jarod Wilson wrote: On 12/22/09 2:45 AM, Kevin Kofler wrote: Jesse Keating wrote: Nobody should be able to create any branches that do not start with private-. I really don't see the point of this, why can't we just allow any branch name that isn't a reserved name

Re: x86-64 on i386 (was Re: Promoting i386 version over x86_64?)

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Matthew Garrett wrote: On Wed, Dec 16, 2009 at 12:30:11AM +, Paul Jakma wrote: On Tue, 15 Dec 2009, Matthew Garrett wrote: And the remaining 0.1% of the work is probably the other 99.9% of the time. I think you massively underestimate the number of corner cases

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Nathanael D. Noblet wrote: So again today, I see some updates two of which require a full system reboot. nfs-utils and ibus-rawcode. My system seriously needs to be shut down for those to be properly updated? This is what I don't get. nfs-utils never got a system

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Peter Jones wrote: On 12/16/2009 11:43 AM, Seth Vidal wrote: you're an experienced user? You're comfortable knowing what does and what does not require a reboot? Then why are you using PK? Disable pk and do the updates directly via yum. Bam - no more requests to reboot

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Chris Adams wrote: Once upon a time, Seth Vidal skvi...@fedoraproject.org said: we're talking about the experienced user who is comfortable knowing what does and does not need a reboot. It seems though that there is a problem with how the needs a reboot option is set

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Nathanael D. Noblet wrote: Maybe this is a feature that needs to be addressed in the rpm layer or something so that upgrades can have multiple effects with regards to needing a reboot. I'm not sure how PK gets the request to reboot from a package, but I'm wondering

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, nodata wrote: we're talking about the experienced user who is comfortable knowing what does and does not need a reboot. All I'm saying is - we've not taken away any option, the experienced user can do what they want. -sv True, but the default should be sensible.

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Nathanael D. Noblet wrote: seems like a package basically has complex upgrade issues, so we reboot. Are there other tags packages can have other than reboot? Should there be? etc etc.. No. The reason for this is that PKs target audience is not someone like me, and as

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, nodata wrote: Am 2009-12-16 18:21, schrieb Seth Vidal: On Wed, 16 Dec 2009, nodata wrote: we're talking about the experienced user who is comfortable knowing what does and does not need a reboot. All I'm saying is - we've not taken away any option, the experienced

Re: packages requiring me to reboot...

2009-12-16 Thread Seth Vidal
On Wed, 16 Dec 2009, Nathanael D. Noblet wrote: Hands are needed to help advance this. Care to lend one? Yes. I'm attempting to become more involved. I've submitted my first package, and am going through the review process. That doesn't help in this particular case, but I am not

Re: packages requiring me to reboot...

2009-12-15 Thread Seth Vidal
On Tue, 15 Dec 2009, Nathanael D. Noblet wrote: Hello, I feel like there are an increasing number of packages requiring a system reboot. I'm wondering why. The following updates were installed today, and required a full system reboot. I can't seem to find any package in the list that I

Re: packages requiring me to reboot...

2009-12-15 Thread Seth Vidal
On Tue, 15 Dec 2009, Nathanael D. Noblet wrote: On 12/15/2009 09:54 AM, Seth Vidal wrote: Does gdm entirely restart when you logout? I don't believe so. I suspect you get the same result by killing X then going back to that runlevel but for many many many users a reboot is going to be less

Re: packages requiring me to reboot...

2009-12-15 Thread Seth Vidal
On Tue, 15 Dec 2009, Richard Hughes wrote: 2009/12/15 Seth Vidal skvi...@fedoraproject.org: Now, having said that - how would you feel if the updater stopped you before it ran and said you're running an app I'm trying to update, please close the app so I can update it. Would that be a pain

Re: Help wanted with dist-cvs to git conversion

2009-12-11 Thread Seth Vidal
On Fri, 11 Dec 2009, Lubomir Rintel wrote: A big -1 for this. Your A lot is in fact a tiny fraction and for some of us an e-mail address is important mean for identifying an user (Oh, this is John Doe of Canonical, ...). I use mine exclusively and I think referring to the generic address

Re: Help wanted with dist-cvs to git conversion

2009-12-11 Thread Seth Vidal
On Fri, 11 Dec 2009, Mathieu Bridon (bochecha) wrote: On Fri, Dec 11, 2009 at 14:12, Seth Vidal skvi...@fedoraproject.org wrote: On Fri, 11 Dec 2009, Lubomir Rintel wrote: A big -1 for this. Your A lot is in fact a tiny fraction and for some of us an e-mail address is important mean

Re: rawhide and tagging requests

2009-12-10 Thread Seth Vidal
good compose (from 20091203) was before this went in: * Thu Dec 3 2009 Seth Vidal skvidal at fedoraproject.org - 3.2.25-2 - rebuild yum with latest HEAD patch - add rpmdb caching patch james wrote to see if it breaks everyone :) ...and the rpmdb caching patch does touch the area where it's crashing

Re: rawhide and tagging requests

2009-12-10 Thread Seth Vidal
On Thu, 10 Dec 2009, Panu Matilainen wrote: Yup, but this isn't createrepo crashing (the earlier one was): 2009-12-09 20:11:04 mash: createrepo: finished /mnt/koji/mash/rawhide-20091209/development/x86_64/os/ 2009-12-09 20:11:05 mash: Resolving multilib for arch x86_64 using method devel

Re: yum doesn't like installonly_limit=1?

2009-12-10 Thread Seth Vidal
On Thu, 10 Dec 2009, Rajeesh K Nambiar wrote: On 12/10/09, James Antill ja...@fedoraproject.org wrote: On Thu, 2009-12-10 at 18:00 +0530, Rajeesh K Nambiar wrote: I changed the installonly_limit to 1 from the default value 3 in /etc/yum.conf, and yum blows up. # yum search boinc Loaded

Re: Help wanted with dist-cvs to git conversion

2009-12-10 Thread Seth Vidal
On Thu, 10 Dec 2009, Jesse Keating wrote: I'm currently playing with a utility called parsecvs to convert our cvs stuff into git. This utility can also translate the raw usernames that CVS has into more useful names+email addresses that you'd typically get out of git. But to make this

Re: Promoting i386 version over x86_64?

2009-12-09 Thread Seth Vidal
On Wed, 9 Dec 2009, Ralf Corsepius wrote: On 12/09/2009 04:14 PM, James Antill wrote: On Wed, 2009-12-09 at 15:26 +0100, Ralf Corsepius wrote: So, yeh, if _you_ want to support slower machines Well, I do not want to, I can't avoid to ... ... _you_ will have to do the work, you might

Re: yum download estimates and stalls

2009-12-09 Thread Seth Vidal
On Wed, 9 Dec 2009, Richard W.M. Jones wrote: I don't want to make unfair comparisons to the famous bug in Windows Vista[1], but it seems as if when a yum download stalls, then the estimates can start to look a little large: rawhide/primar 20% [- ] 0.0 B/s | 2.5 MB

Re: Promoting i386 version over x86_64?

2009-12-09 Thread Seth Vidal
On Wed, 9 Dec 2009, Ville Skyttä wrote: On Wednesday 09 December 2009, Ralf Corsepius wrote: On 12/08/2009 09:26 PM, Ville Skyttä wrote: These probably aren't things to be generally overly concerned about though, ... try a yum update over GSM or over a modem and you'll very soon

Re: Promoting i386 version over x86_64?

2009-12-09 Thread Seth Vidal
On Wed, 9 Dec 2009, Chris Adams wrote: Once upon a time, Ville Skyttä ville.sky...@iki.fi said: Yeah, I've done that in some setups but I was talking about purifying the _repos_ above; that setting doesn't affect them, e.g. it doesn't make the metadata to be downloaded any smaller. (As

Re: Promoting i386 version over x86_64?

2009-12-09 Thread Seth Vidal
On Wed, 9 Dec 2009, Gregory Maxwell wrote: On Wed, Dec 9, 2009 at 4:51 PM, Seth Vidal skvi...@fedoraproject.org wrote: and then you have to do that as well for updates. :( Not if you don't have a separate updates repo, no? still need an updates-testing. -sv -- fedora-devel-list

Re: Proposed F13 feature: drop separate updates repository

2009-12-03 Thread Seth Vidal
On Thu, 3 Dec 2009, Adam Williamson wrote: On Thu, 2009-12-03 at 00:32 -0500, Seth Vidal wrote: We wouldn't be talking about removing the original GA set - just adding updated pkgs into the path. So you'd still have the number of pkgs -just all in one repo, that you have to download all

Re: Plan for tomorrow's (20091203) FESCo meeting

2009-12-03 Thread Seth Vidal
On Thu, 3 Dec 2009, Bill Nottingham wrote: Following is the list of topics that will be discussed in the FESCo meeting tomorrow at 17:00UTC (noon EST) in #fedora-meeting on irc.freenode.net. This meeting may be cancelled if we cannot reach quorum. FESCo members who cannot make it are

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Paul W. Frields wrote: On Wed, Dec 02, 2009 at 11:09:41AM -0500, Bill Nottingham wrote: we ship. Any new solution would have to preserve this. Might there also be export compliance implications too? A larger isssue is constantly having the repodata for the everything

Re: F12 Yum/package kit bug??

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Nathanael D. Noblet wrote: Over the last few days I have been unable to install updates via the package kit applet that pops up. I get the following output after clicking 'install updates'. Error Type: class 'yum.Errors.RepoError' Error Value: Error getting repository

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Nicolas Mailhot wrote: Since people are posting wishes, here is mine: 1. stop shuffling packages from directory to directory as they get promoted/demoted from release to release we sort of do this now with hardlinks - the problem is when we have to resign the pkgs.

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Peter Jones wrote: (on my on tangent...) On 12/02/2009 12:48 PM, Jesse Keating wrote: I hypothesize that we could place all rpms for a given release in a single directory (seth will hate this as he wants to split them up based on first letter of their name for better

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Peter Jones wrote: On 12/02/2009 03:53 PM, Seth Vidal wrote: On Wed, 2 Dec 2009, Nicolas Mailhot wrote: 3. replace static mirrors with proxy-ing of kojipkgs.fedoraproject.org (make sure it works with web infrastructure instead of fighting it) I don't think that would

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Peter Jones wrote: On 12/02/2009 05:58 PM, Seth Vidal wrote: On Wed, 2 Dec 2009, Peter Jones wrote: On 12/02/2009 03:53 PM, Seth Vidal wrote: On Wed, 2 Dec 2009, Nicolas Mailhot wrote: 3. replace static mirrors with proxy-ing of kojipkgs.fedoraproject.org (make sure

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Wed, 2 Dec 2009, Bruno Wolff III wrote: On Wed, Dec 02, 2009 at 17:58:24 -0500, Seth Vidal skvi...@fedoraproject.org wrote: I tested it on our backend to be sure. getting the complete pkglist goes from taking 5 minutes to take 30s. yes, I said 5 minutes. Have you tried any

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Thu, 3 Dec 2009, Kevin Kofler wrote: Seth Vidal wrote: If you're looking for perfect division, sure - but the reality is this: 19K items in a single dir and ext3 and nfs and many many other things crap themselves returning that list. If you make 36 subdirs (26+10) performance gets

Re: Proposed F13 feature: drop separate updates repository

2009-12-02 Thread Seth Vidal
On Thu, 3 Dec 2009, Ralf Corsepius wrote: On 12/02/2009 07:09 PM, Seth Vidal wrote: the merger of repos is already happening at the yum layer. On the client's side - With a combined Everything+updates, this would happen on the server side. It's one of the aspects which made me said

Re: PackageKit policy: background and plans

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, James Antill wrote: On Mon, 2009-11-23 at 22:32 +, Colin Walters wrote: On Mon, Nov 23, 2009 at 10:02 PM, James Morris jmor...@namei.org wrote: Possibly (it could simply be that an updated policy is weaker for some reason) -- but it doesn't matter, there should be

Re: PolicyKit and syslog

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Matthew Miller wrote: One of the important features of sudo is its ability to log elevated-access actions to syslog. Userhelper similarly logs actions, like so: userhelper[26491]: running '/usr/share/system-config-users/system-config-users ' with root privileges on

Re: PolicyKit and syslog

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Matthias Clasen wrote: On Tue, 2009-11-24 at 11:26 -0500, Matthew Miller wrote: One of the important features of sudo is its ability to log elevated-access actions to syslog. Userhelper similarly logs actions, like so: userhelper[26491]: running

Re: PolicyKit and syslog

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Matthias Clasen wrote: On Tue, 2009-11-24 at 11:48 -0500, Seth Vidal wrote: when the policies are updated it is policy kit that has to be involved. polkitd is running, at least. That might be ok to log, indeed. polkitd need not be running, though. It is activated

Re: Security testing: need for a security policy, and a security-critical package process

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Bill Nottingham wrote: I don't want to ship a desktop that doesn't let the user do useful things. And you can ship a desktop SPIN that way. But the base pkgs should not install with an insecure set of choices. if you want the spin to have a post-scriptlet which allows

Re: tangent: PolicyKit and PAM

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Matthew Miller wrote: On Tue, Nov 24, 2009 at 01:27:40PM -0500, Matthias Clasen wrote: Like I said, this is a tangent, and I'm certainly not expecting anyone to work on this. But it'd be cool if they did. Just as everybody else is struggling to get away from pam's awful

Re: [RFC] unified i386/x86_64 install media.

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Matthew Miller wrote: On Tue, Nov 24, 2009 at 06:17:08PM -0600, Dennis Gilmore wrote: the goal for F-13 is to have unified media, for F-14 and beyond we could look at other options like having a 64 bit kernel and 32 bit userland. i should have stated that a bit more

Re: PackageKit policy: background and plans

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Francis Earl wrote: Would it be possible to do this similarly to Conary... only installing the files (.so's and things in /etc and /usr/share/{icons,sounds,...} etc) required by a given application (binary with .desktop file) ? This would provide similar to package

Re: [RFC] unified i386/x86_64 install media.

2009-11-24 Thread Seth Vidal
On Tue, 24 Nov 2009, Jeff Garzik wrote: On 11/24/2009 09:58 PM, Matthew Miller wrote: On Tue, Nov 24, 2009 at 09:19:22PM -0500, Jeff Garzik wrote: So would this mean one disk with two repositories on it, or is everything mashed together all in one repository? The current x86-64 has both

Re: [RFC] unified i386/x86_64 install media.

2009-11-24 Thread Seth Vidal
On Wed, 25 Nov 2009, Jeff Garzik wrote: On 11/25/2009 01:32 AM, Jesse Keating wrote: On Nov 24, 2009, at 19:30, Jeff Garzik jgar...@pobox.com wrote: On 11/24/2009 09:58 PM, Matthew Miller wrote: On Tue, Nov 24, 2009 at 09:19:22PM -0500, Jeff Garzik wrote: So would this mean one disk with

Re: rawhide report screwing up changelogs (was: Re: rawhide report: 20091123 changes)

2009-11-23 Thread Seth Vidal
On Mon, 23 Nov 2009, Michael Schwendt wrote: On Mon, 23 Nov 2009 15:04:49 +0100, Christoph wrote: Am Montag, den 23.11.2009, 14:56 +0100 schrieb Michael Schwendt: On Mon, 23 Nov 2009 14:39:28 +0100, Christoph wrote: When two builds of the same version are done on the same day, the

Re: Security testing: need for a security policy, and a security-critical package process

2009-11-23 Thread Seth Vidal
On Mon, 23 Nov 2009, Matthias Clasen wrote: On Mon, 2009-11-23 at 14:08 -0800, Adam Williamson wrote: It's not QA's role to define exactly what the security policy should look like or what it should cover, but from the point of view of testing, what we really need are concrete requirements.

Re: PackageKit policy: background and plans

2009-11-23 Thread Seth Vidal
On Mon, 23 Nov 2009, Colin Walters wrote: On Mon, Nov 23, 2009 at 10:02 PM, James Morris jmor...@namei.org wrote: Possibly (it could simply be that an updated policy is weaker for some reason) -- but it doesn't matter, there should be no way to change MAC policy without MAC privilege.

Re: Security testing: need for a security policy, and a security-critical package process

2009-11-23 Thread Seth Vidal
On Mon, 23 Nov 2009, Matthias Clasen wrote: On Mon, 2009-11-23 at 18:31 -0500, Seth Vidal wrote: Otherwise we open ourselves up to a less-secure-by-default posture in an average install. We've been in that position in the past and it is not a favorable place to be. We should just avoid

Re: Security testing: need for a security policy, and a security-critical package process

2009-11-23 Thread Seth Vidal
On Mon, 23 Nov 2009, Matthias Clasen wrote: I don't want to ship a desktop that doesn't let the user do useful things. And you can ship a desktop SPIN that way. But the base pkgs should not install with an insecure set of choices. if you want the spin to have a post-scriptlet which

Re: PackageKit policy: background and plans

2009-11-20 Thread Seth Vidal
On Fri, 20 Nov 2009, Owen Taylor wrote: On Fri, 2009-11-20 at 11:50 -0430, Robert Marcano wrote: On 11/20/2009 10:04 AM, Matthew Garrett wrote: I know basically nobody who, on a generally single user system, explicitly switches to a console to log in as root and perform package installs

Re: PackageKit policy: background and plans

2009-11-20 Thread Seth Vidal
On Fri, 20 Nov 2009, Frank Ch. Eigler wrote: otaylor wrote: This actually is one of the big advantages of PackageKit - because the installation is being done by a daemon rather than a process running in your session, if the X session dies during package installation, you won't be left with

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jon Ciesla wrote: nodata wrote: Am 2009-11-18 18:08, schrieb nodata: Yikes! When was it decided that non-root users get to play root? Ref: https://bugzilla.redhat.com/show_bug.cgi?id=534047 This is horrible! Just to elaborate: A local user is allowed to install

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jon Ciesla wrote: Seth Vidal wrote: On Wed, 18 Nov 2009, Jon Ciesla wrote: nodata wrote: Am 2009-11-18 18:08, schrieb nodata: Yikes! When was it decided that non-root users get to play root? Ref: https://bugzilla.redhat.com/show_bug.cgi?id=534047 This is horrible

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Dennis J. wrote: You have PackageKit installed on servers? really? Why shouldn't he? AFAIK there is nothing in the package warning users not to install this on a server. like I said in another email - I think of installing things on servers as 'barest minimal' and

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, nodata wrote: -sv I do if it's in the default DVD install, or was pulled in in an upgrade. I've never intentionally installed it, and yes I do. Never imagined it would be a problem. I'll remove it. Maybe you and I have a different concept of 'Servers'. But I tend to

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jon Ciesla wrote: Seth Vidal wrote: On Wed, 18 Nov 2009, nodata wrote: -sv I do if it's in the default DVD install, or was pulled in in an upgrade. I've never intentionally installed it, and yes I do. Never imagined it would be a problem. I'll remove it. Maybe

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Konstantin Ryabitsev wrote: 2009/11/18 Jon Ciesla l...@jcomserv.net: A local user is allowed to install software on the machine without being prompted for the root password. This is a recipe for disaster in my opinion. So much for granting shell access on my servers.

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Bruno Wolff III wrote: On Wed, Nov 18, 2009 at 23:18:28 +0530, Rahul Sundaram sunda...@fedoraproject.org wrote: On 11/18/2009 11:19 PM, nodata wrote: Thanks. I have changed the title to: All users get to install software on a machine they do not have the root

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, nodata wrote: Am 2009-11-18 19:18, schrieb Colin Walters: This is a major change. I vote for secure by default. If the admin wishes this surprise-root feature to be enabled he can enable it. I'm not sure how this is 'surprise root'. IT will only allow installs of

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Simo Sorce wrote: On Wed, 2009-11-18 at 13:10 -0500, Seth Vidal wrote: Maybe you have a different concept of security, but I don't want any user on the server installing software, no matter what. right - which is why I wouldn't install PK on a server. yum doesn't

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Dennis J. wrote: In fact I agree with you but this doesn't really address my point. How do you make sure the packages that are part of your minimal list don't introduce such a backdoor with the next update? You check them. That's the best you can do. It's just like

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Konstantin Ryabitsev wrote: 2009/11/18 Casey Dahlin cdah...@redhat.com: On 11/18/2009 01:22 PM, James Antill wrote: 3. Are there any attacks due to disk space used? Eg. If /var is low² I can probably install enough pkgs to make logging stop. I'm betting there's

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Casey Dahlin wrote: On 11/18/2009 02:10 PM, Seth Vidal wrote: On Wed, 18 Nov 2009, Konstantin Ryabitsev wrote: 2009/11/18 Casey Dahlin cdah...@redhat.com: On 11/18/2009 01:22 PM, James Antill wrote: 3. Are there any attacks due to disk space used? Eg. If /var

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Richard Hughes wrote: 2009/11/18 Andrew Haley a...@redhat.com: Is there some way to disable PackageKit but keep setroubleshoot? Just set all the policykit answers to no. You'll find more than just setroubleshoot breaks if you do this. How do you do this? Set the

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
2009/11/18 nodata l...@nodata.co.uk: Am 2009-11-18 20:20, schrieb Richard Hughes: 2009/11/18 Casey Dahlincdah...@redhat.com: By the admin's first opportunity to change the settings the box could already be rooted. I'm not sure how you can root a computer from installing signed content

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, nodata wrote: Am 2009-11-18 21:27, schrieb Seth Vidal: 2009/11/18 nodata l...@nodata.co.uk: Am 2009-11-18 20:20, schrieb Richard Hughes: 2009/11/18 Casey Dahlincdah...@redhat.com: By the admin's first opportunity to change the settings the box could already

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Seth Vidal wrote: 2009/11/18 nodata l...@nodata.co.uk: Am 2009-11-18 20:20, schrieb Richard Hughes: 2009/11/18 Casey Dahlincdah...@redhat.com: By the admin's first opportunity to change the settings the box could already be rooted. I'm not sure how you can root

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Dan Williams wrote: On Wed, 2009-11-18 at 14:29 -0500, Seth Vidal wrote: On Wed, 18 Nov 2009, Richard Hughes wrote: 2009/11/18 Andrew Haley a...@redhat.com: Is there some way to disable PackageKit but keep setroubleshoot? Just set all the policykit answers

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jesse Keating wrote: On Wed, 2009-11-18 at 14:39 -0600, Chris Adams wrote: What would be nice would be a guide of how all this fits together and when to change what (not just documentation of individual options or syntax), but I do also understand that developers don't

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jeff Garzik wrote: On 11/18/2009 01:04 PM, Seth Vidal wrote: On Wed, 18 Nov 2009, Jon Ciesla wrote: Seth Vidal wrote: You have PackageKit installed on servers? really? I do if it's in the default DVD install, or was pulled in in an upgrade. I've never intentionally

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jeff Garzik wrote: On 11/18/2009 01:28 PM, Seth Vidal wrote: I didn't say it did - I said it didn't make sense to have items like PK on servers. Listen to yourself. The above is a blatant admission that it is REALLY EASY for existing users to upgrade themselves

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jeff Garzik wrote: On 11/18/2009 01:23 PM, Seth Vidal wrote: On Wed, 18 Nov 2009, nodata wrote: Am 2009-11-18 19:18, schrieb Colin Walters: This is a major change. I vote for secure by default. If the admin wishes this surprise-root feature to be enabled he can

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Jeff Garzik wrote: On 11/18/2009 04:46 PM, Seth Vidal wrote: Jeff, I think you're misunderstanding, a lot, here. I'm not in favor of user-can-install-pkgs. I'm just explaining why I don't think pk should be on servers. PK will be on F12 servers, because of upgrades

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Richard Hughes wrote: 2009/11/18 Jeff Garzik jgar...@pobox.com: And this enormous security hole of a policy change was done with next to /zero/ communication, making it likely that many admins will not even know they are vulnerable until their kids install a bunch of

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Richard Hughes wrote: 2009/11/18 Eric Christensen e...@christensenplace.us: Has anyone drafted a notice to go out on the Announce List explaining this vulnerability?  If admins don't know to fix/remove PK then they are putting their systems at risk. I'm really bored of

Re: Local users get to play root?

2009-11-18 Thread Seth Vidal
On Wed, 18 Nov 2009, Matthew Miller wrote: On Wed, Nov 18, 2009 at 11:45:14AM -0800, Dan Williams wrote: But that's not right because those files aren't config files. Instead, you drop local authority files in /var/lib/polkit-1/localauthority/ that override those permissions on a

Re: RFC: Btrfs snapshots feature for F13

2009-11-17 Thread Seth Vidal
On Tue, 17 Nov 2009, James Antill wrote: On Tue, 2009-11-17 at 08:10 -0500, Josef Bacik wrote: On Tue, Nov 17, 2009 at 2:48 AM, Jeff Garzik jgar...@pobox.com wrote: As the URL notes under Detailed Description, that is not handled at all. It wraps all file I/O, yum or not, into the

Re: FESCO ticket#270 - preupgrade and F-12

2009-11-12 Thread Seth Vidal
On Thu, 12 Nov 2009, Neal Becker wrote: James Laska wrote: On Thu, 2009-11-12 at 13:00 -0700, Linuxguy123 wrote: On Thu, 2009-11-12 at 14:56 -0500, James Laska wrote: Greetings folks, After careful review by Will Woods around recently discovered problems related to preupgrading to Fedora

odd file requires

2009-11-09 Thread Seth Vidal
Hey folks, I put together this list for things I'd like to work on for f13. It's a list of packages with a file-requires that falls outside of *bin/* and /etc/* and then the provider(s) for those files. http://skvidal.fedorapeople.org/misc/non-primary-file-reqs-and-what-requires-them.txt

Re: odd file requires

2009-11-09 Thread Seth Vidal
On Mon, 9 Nov 2009, Julian Sikorski wrote: W dniu 09.11.2009 17:58, Seth Vidal pisze: Hey folks, I put together this list for things I'd like to work on for f13. It's a list of packages with a file-requires that falls outside of *bin/* and /etc/* and then the provider(s) for those files

Re: yum repolist puzzle

2009-11-07 Thread Seth Vidal
On Sat, 7 Nov 2009, Rahul Sundaram wrote: Hi, yum repolist on the latest rawhide shows fedora and updates repo as having the exact same number of packages which is rather confusing but I suppose it is because they get redirected by mirror manager to point to the same repo. Can we just show

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Richard W.M. Jones wrote: Newly installed Ubuntu 9.10, when you log in over ssh you may see: 34 packages can be updated. 10 updates are security updates. I think this is a nice feature, because many administrators will log in to servers remotely over ssh and never see

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Kevin Kofler wrote: Richard June wrote: It's a good idea for one off jobs where the primary user is also the admin, but not so good for shared systems. Personally I think a better plan would be to display that information *only* if the user is flagged as an administrator,

Re: Ubuntu shows updates / security updates on shell logins

2009-11-04 Thread Seth Vidal
On Wed, 4 Nov 2009, Chris Adams wrote: Once upon a time, Seth Vidal skvi...@fedoraproject.org said: i don't think it is a security risk. Or rather - if it is then the rpmdb should not be readable by non-root users. If knowing installed versions are a security risk, then so is uname -r

Re: Wodim trouble

2009-11-03 Thread Seth Vidal
On Tue, 3 Nov 2009, King InuYasha wrote: GPLv2: End of Section 3, middle of the paragraph right after clause 3c.GPLv3: Explicit separate definition in Section 1. GPLv2 Quote: The source code for a work means the preferred form of the work for making modifications to it. For an executable

Re: Wodim trouble

2009-11-03 Thread Seth Vidal
On Tue, 3 Nov 2009, Kevin Kofler wrote: Joerg Schilling wrote: You seem to miss that the license mkisofs is using is called GPL and not GPL FAQ, so the quoting you mention do not apply. The FAQ is the legal interpretation of the GPL given by the FSF, who are the folks who wrote the

Re: Wodim trouble

2009-11-03 Thread Seth Vidal
On Tue, 3 Nov 2009, Kevin Kofler wrote: Joerg Schilling wrote: Libburn is based on a wrong asumption: libburn only works partly on Linux in non-root mode Actually, burning as non-root works just fine on GNU/Linux. and the vast majority of other OS needs root permissions to burn. Those

Re: Simplify non-responsive maintainers policy Part 2

2009-10-26 Thread Seth Vidal
On Mon, 26 Oct 2009, Adam Williamson wrote: On Fri, 2009-10-23 at 09:28 +0100, Steven Whitehouse wrote: way to deal with this issue, the simplest solution would be to have a word with someone in HC and ask them to add to their standard list of Note for non-RH'ers: HC = Human Capital, what

Re: idea: abrt plugin for yum rpm scriptlets output

2009-10-25 Thread Seth Vidal
On Sun, 25 Oct 2009, Rudolf Kastl wrote: Hello! While doing some tests and installing a large part of the rawhide repository content i see that there are various packages that have a broken %post scriptlet or it is outputting some warnings. maybe it would be an idea for a abrt-yum plugin to

Re: Simplify non-responsive maintainers policy Part 2

2009-10-22 Thread Seth Vidal
On Thu, 22 Oct 2009, Daniel P. Berrange wrote: On Thu, Oct 22, 2009 at 04:42:16PM -0500, Mike McGrath wrote: On Thu, 22 Oct 2009, Chuck Anderson wrote: On Thu, Oct 22, 2009 at 09:43:46AM -0700, Jesse Keating wrote: On Thu, 2009-10-22 at 11:16 +0200, Till Maas wrote: What kind of checks

Re: Simplify non-responsive maintainers policy Part 2

2009-10-22 Thread Seth Vidal
On Thu, 22 Oct 2009, Jesse Keating wrote: On Thu, 2009-10-22 at 18:26 -0400, Seth Vidal wrote: I actually have both. rhel bugs get assigned to svidal at redhat.com fedora bugs go to skvidal at sethdot.org Many people aren't willing to jump through the hoops necessary to manage

Re: Who do I send to get a package removed because of bad language.

2009-10-21 Thread Seth Vidal
On Wed, 21 Oct 2009, Bill Nottingham wrote: Darryl L. Pierce (dpie...@redhat.com) said: You're correct in that removing the KDE group attempts to remove the NetworkManager-gnome rpm. I remembered uninstalling KDE also removed NetworkManager-gnome which borked my laptop until I re-installed

Re: On updates to stable releases

2009-10-21 Thread Seth Vidal
On Wed, 21 Oct 2009, Adam Jackson wrote: I don't really want to revive the thread about automake 1.11, but I do want to point out that it did break actual buildability: http://koji.fedoraproject.org/koji/getfile?taskID=1761549name=build.log Please, people. Don't update things in stable

Re: On updates to stable releases

2009-10-21 Thread Seth Vidal
On Wed, 21 Oct 2009, Adam Jackson wrote: On Wed, 2009-10-21 at 16:30 -0400, Seth Vidal wrote: On Wed, 21 Oct 2009, Adam Jackson wrote: I don't really want to revive the thread about automake 1.11, but I do want to point out that it did break actual buildability: http

Re: Eternal 'good file hashes' list

2009-10-20 Thread Seth Vidal
On Tue, 20 Oct 2009, Ralf Ertzinger wrote: Hi. On Tue, 20 Oct 2009 14:18:03 +0300 (EEST), Panu Matilainen wrote: To make any use of that data you'll obviously need the file names too, so: [pmati...@localhost Packages]$ rpm -qap --qf [%{filedigests} %{filenames}\n] *.rpm |wc 430716

Re: Who do I send to get a package removed because of bad language.

2009-10-19 Thread Seth Vidal
On Mon, 19 Oct 2009, Muayyad AlSadi wrote: https://fedoraproject.org/wiki/Offensive_Packages hahaha! what a bad joke! This thread needs to stop, too. If you wish to continue discussing it - please do so off-list. Thank You, -sv -- fedora-devel-list mailing list

  1   2   3   >