[gentoo-dev] Lastrite: 4suite, amara and testoob (mostly for security)

2012-05-16 Thread Samuli Suominen
# Samuli Suominen ssuomi...@gentoo.org (16 May 2012) # Internal copy of vulnerable dev-libs/expat wrt #250930, # CVE-2009-{3720,3560} and CVE-2012-{0876,1147,1148}. # # Fails to compile wrt bug #368089 # Bad migration away from dev-python/pyxml wrt #367745 # # Removal in 30 days.

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Fabio Erculiani
I implemented this feature in Entropy long time ago (2009 iirc) and enabled it by default as well. We never had a single issue. Users seem quite happy about it. So yeah, go for it! -- Fabio Erculiani

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Andreas K. Huettel
make.conf(5) man page: This causes the CONFIG_PROTECT behavior to be skipped for files that have not been modified since they were installed. +1 very good idea The best thing about it is not having to worry about missing an important change in a file I DO change, due to all the noise

Re: [gentoo-dev] RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Dirkjan Ochtman
On Wed, May 16, 2012 at 12:24 AM, Zac Medico zmed...@gentoo.org wrote:  This causes the CONFIG_PROTECT behavior to be skipped for files that  have not been modified since they were installed. Yes, please! Cheers, Dirkjan

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Eray Aslan
On 2012-05-16 12:13 PM, Andreas K. Huettel wrote: make.conf(5) man page: This causes the CONFIG_PROTECT behavior to be skipped for files that have not been modified since they were installed. +1 very good idea Hmm, does that mean that when a default changes in (or some new setting is

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Fabian Groffen
On 16-05-2012 12:36:03 +0300, Eray Aslan wrote: On 2012-05-16 12:13 PM, Andreas K. Huettel wrote: make.conf(5) man page: This causes the CONFIG_PROTECT behavior to be skipped for files that have not been modified since they were installed. +1 very good idea Hmm, does that mean

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Pacho Ramos
El mié, 16-05-2012 a las 11:42 +0200, Fabian Groffen escribió: On 16-05-2012 12:36:03 +0300, Eray Aslan wrote: On 2012-05-16 12:13 PM, Andreas K. Huettel wrote: make.conf(5) man page: This causes the CONFIG_PROTECT behavior to be skipped for files that have not been modified since

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Fabio Erculiani
On Wed, May 16, 2012 at 11:36 AM, Eray Aslan e...@gentoo.org wrote: On 2012-05-16 12:13 PM, Andreas K. Huettel wrote: make.conf(5) man page:   This causes the CONFIG_PROTECT behavior to be skipped for files that   have not been modified since they were installed. +1 very good idea Hmm,

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Eray Aslan
On 2012-05-16 12:56 PM, Fabio Erculiani wrote: Generally, several PMS (I think apt does it as well) make this assumption: if config file C owned by package P has never been modified, meaning that md5 or whatever is the same, the old C of P was fine, so is the new C. Yep, and I always thought

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Fabian Groffen
On 16-05-2012 11:48:20 +0200, Pacho Ramos wrote: El mié, 16-05-2012 a las 11:42 +0200, Fabian Groffen escribió: On 16-05-2012 12:36:03 +0300, Eray Aslan wrote: On 2012-05-16 12:13 PM, Andreas K. Huettel wrote: make.conf(5) man page: This causes the CONFIG_PROTECT behavior to be

Re: [gentoo-dev] Re: RFC: Enable FEATURES=config-protect-if-modified by default?

2012-05-16 Thread Rich Freeman
On Wed, May 16, 2012 at 5:02 AM, Fabio Erculiani lx...@gentoo.org wrote: I implemented this feature in Entropy long time ago (2009 iirc) and enabled it by default as well. We never had a single issue. Users seem quite happy about it. This is also the default behavior with the cfg-update

[gentoo-dev] Re: [gentoo-dev-announce] Lastrite: 4suite, amara and testoob (mostly for security)

2012-05-16 Thread Sebastian Pipping
On 05/16/2012 10:40 AM, Samuli Suominen wrote: # Samuli Suominen ssuomi...@gentoo.org (16 May 2012) # Internal copy of vulnerable dev-libs/expat wrt #250930, # CVE-2009-{3720,3560} and CVE-2012-{0876,1147,1148}. # # Fails to compile wrt bug #368089 # Bad migration away from dev-python/pyxml

Re: [gentoo-dev] Re: [gentoo-dev-announce] Lastrite: 4suite, amara and testoob (mostly for security)

2012-05-16 Thread Samuli Suominen
On 05/16/2012 10:31 PM, Sebastian Pipping wrote: On 05/16/2012 10:40 AM, Samuli Suominen wrote: # Samuli Suominenssuomi...@gentoo.org (16 May 2012) # Internal copy of vulnerable dev-libs/expat wrt #250930, # CVE-2009-{3720,3560} and CVE-2012-{0876,1147,1148}. # # Fails to compile wrt bug

Re: [gentoo-dev] Re: RFC: Add new remote-id types in metadata.dtd

2012-05-16 Thread Kent Fredric
On 13 May 2012 07:43, Torsten Veller t...@gentoo.org wrote: * Corentin Chary corentin.ch...@gmail.com: On Sat, Apr 21, 2012 at 03:33:18PM +1200, Kent Fredric wrote:                                     { term: { status:latest} },                                     { term: {

Re: [gentoo-dev] Re: RFC: Add new remote-id types in metadata.dtd

2012-05-16 Thread Kent Fredric
On 13 May 2012 07:43, Torsten Veller t...@gentoo.org wrote: * Corentin Chary corentin.ch...@gmail.com: On Sat, Apr 21, 2012 at 03:33:18PM +1200, Kent Fredric wrote:                                     { term: { status:latest} },                                     { term: {

[gentoo-dev] last rites: games-arcade/ssc

2012-05-16 Thread Michael Sterrett
# Michael Sterrett mr_bon...@gentoo.org (16 May 2012) # doesn't work with latest ode and last release in 2003. # Masked for removal on 20120615 games-arcade/ssc

[gentoo-dev] Re: Tightly-coupled core distro [was: Council meeting summary for 3 April 2012]

2012-05-16 Thread Steven J Long
Greg KH wrote: Steven J Long wrote: And that is what we were discussing: possible future coupling between the two, which is much easier to do when the sources are part of the same package. .. OFC you could just assure us that udev will never rely on systemd as a design decision. I can

[gentoo-dev] Re: Tightly-coupled core distro [was: Council meeting summary for 3 April 2012]

2012-05-16 Thread Steven J Long
Alec Warner wrote: Fabio Erculiani lx...@gentoo.org wrote: I think expressing my own opinion about Lennart-made software is my right, after all. Firstly, it's almost impossible nowadays to avoid including avahi, systemd and pulseaudio into a desktop distro so, there is no real choice. This

[gentoo-dev] Re: Stability of /sys api

2012-05-16 Thread Steven J Long
William Hubbs wrote: I'm wondering the same thing since once busybox 1.20.0 hits stable you will be able to have a separate /usr without an initramfs quite easily if that's what you want to do. When you emerge this version of busybox with the sep-usr use flag, you get a binary in / called