Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-08 Thread Arttu V.
On 12/8/09, Alan McKinnon wrote: >> Let me emphasise yet again: the way I do things has been successful >> on 2 machines for more than 6 years; it's others who have problems >> doing it their way & regularly seek advice on this list as a result. > > Let me correct you there: > > The experience

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Mon, 7 Dec 2009 17:46:18 -0500, Philip Webb wrote: > >> One of the major deficiencies of Gentoo is > >> that it doesn't provide such a file automatically. > > emerge -p @system > > emerge -p @world > > root:501 ~> emerge -p @system > !!! '@system' is not a valid package atom. > !

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Dale
Alan McKinnon wrote: On Tuesday 08 December 2009 00:46:18 Philip Webb wrote: 091207 Neil Bothwick wrote: On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: I know that from my home-made list of pkgs which I have installed, where they are marked with 'W' & system pkgs with 'S'

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Alan McKinnon
On Tuesday 08 December 2009 00:46:18 Philip Webb wrote: > 091207 Neil Bothwick wrote: > > On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: > >> I know that from my home-made list of pkgs which I have installed, > >> where they are marked with 'W' & system pkgs with 'S'. > >> Yes, I do have to

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Philip Webb
091207 Neil Bothwick wrote: > On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: >> I know that from my home-made list of pkgs which I have installed, >> where they are marked with 'W' & system pkgs with 'S'. >> Yes, I do have to keep it upto-date as I do emerges. >> One of the major deficiencie

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Dale
Neil Bothwick wrote: On Sat, 05 Dec 2009 19:15:29 -0600, Dale wrote: Good catch Volker. I didn't notice that part. He needs to become very familiar with the -1 option but even that is not good in every case. If it is a package that needs to be in world, then that option shouldn't be used e

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Sun, 6 Dec 2009 14:49:44 -0500, Philip Webb wrote: > I know that from my home-made list of pkgs which I have installed, > where they are marked with 'W' & system pkgs with 'S'. > Yes, I do have to keep it upto-date as I do emerges. > One of the major deficiencies of Gentoo is > that it doesn't

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Sat, 05 Dec 2009 19:15:29 -0600, Dale wrote: > >> Good catch Volker. I didn't notice that part. He needs to become > >> very familiar with the -1 option but even that is not good in every > >> case. If it is a package that needs to be in world, then that option > >> shouldn't be used either o

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-07 Thread Neil Bothwick
On Sun, 6 Dec 2009 11:53:41 +0900, daid kahl wrote: > On that note, I'd like to ask a question I was going to post or email > about. Can I comment the world file. More interestingly, is there a > way to pass portage a comment to stick in world above the package? > This would be really damn usefu

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Philip Webb
091206 Alan McKinnon wrote: > On Saturday 05 December 2009 21:09:50 Philip Webb wrote: >> Please read what I said & hopefully think briefly before responding. >> If the pkg is already in 'world', it's 'emerge '; >> if not -- the more frequent case -- , it's 'emerge -1 '. >> That keeps everything in

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Peter Humphrey wrote: > On 5/12/2009, "Philip Webb" wrote: > >Anyway, don't do testing on the machine you use for everyday computing. > >If you want to get into testing, use a dedicated machine for it. > > I've been using a separate partition on an existing machine to

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Peter Humphrey
On Saturday 05 December 2009 16:26:48 I wrote: > * The current test system had a series of KDE-4 problems, which I thought > must have been caused by the patch bug, but simply remerging everything > installed since then hadn't fixed them. Not only has it not fixed the earlier problems - now I hav

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-06 Thread Dale
daid kahl wrote: I could take a whole day typing in exactly what I do, but I assumed the otherwise intelligent subscribers to the list would realise that I add '-1' to those pkgs which are not in 'world'. My 'world' file contains 112 entries, incl 28 'sys' + 35 'kde'. Really, does somethin

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Alan McKinnon
On Saturday 05 December 2009 22:14:48 Volker Armin Hemmann wrote: > And world is important. world is the difference between 'installed > manually' and 'just a dependency'. What you are doing fucks this up. > Result: portage can not figure which package was installed because you > want it and wh

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Alan McKinnon
On Saturday 05 December 2009 21:09:50 Philip Webb wrote: > Please read what I said & hopefully think briefly before responding. > If the pkg is already in 'world', it's 'emerge '; > if not -- the more frequent case -- , it's 'emerge -1 '. > That keeps everything in order (yes, you have to watch wha

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread daid kahl
> I could take a whole day typing in exactly what I do, > but I assumed the otherwise intelligent subscribers to the list > would realise that I add '-1' to those pkgs which are not in 'world'. > My 'world' file contains  112  entries, incl  28  'sys' +  35  'kde'. > > Really, does something like t

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Philip Webb
091205 Dale wrote: > Neil Bothwick wrote: >> He's updating, so packages that need to be in world are already there. > If he is using the command he typed in, his world file is going to be huge. > He is doing the updates individually without a -u or a -1 or anything else. > That means every time he

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Dale
Neil Bothwick wrote: On Sat, 05 Dec 2009 08:10:15 -0600, Dale wrote: Good catch Volker. I didn't notice that part. He needs to become very familiar with the -1 option but even that is not good in every case. If it is a package that needs to be in world, then that option shouldn't be used

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Philip Webb wrote: > 091205 Volker Armin Hemmann wrote: > > On Samstag 05 Dezember 2009, Philip Webb wrote: > >> Also, I never do a bald 'emerge world'. I look thro' the output of > >> 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs > >> which have

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Philip Webb
091205 Volker Armin Hemmann wrote: > On Samstag 05 Dezember 2009, Philip Webb wrote: >> Also, I never do a bald 'emerge world'. I look thro' the output of >> 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which >> have changed, run 'emerge -Dup world' to see what order of emer

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Neil Bothwick
On Sat, 05 Dec 2009 08:10:15 -0600, Dale wrote: > Good catch Volker. I didn't notice that part. He needs to become very > familiar with the -1 option but even that is not good in every case. > If it is a package that needs to be in world, then that option > shouldn't be used either otherwise a

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Peter Humphrey
On 5/12/2009, "Philip Webb" wrote: >Anyway, don't do testing on the machine you use for everyday computing. >If you want to get into testing, use a dedicated machine for it. I've been using a separate partition on an existing machine to run a ~amd64 system for evaluation, and yesterday I got my

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Neil Bothwick wrote: > On Sat, 5 Dec 2009 14:31:16 +0100, Volker Armin Hemmann wrote: > > The easy way to avoid problems are BINPKGs. Use it and a downgrade in > > case of problems only takes seconds. > > Install demerge too and you can roll back to pre-breakage very e

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread daid kahl
>>>  2  pieces of advice to avoid such problems: >>> (1) never use the 'testing' versions of system pkgs; >>> (2) never run 'emerge world' without the '-p' flag. >> I kindly disagree. > >> ~[arch] is testing for Gentoo ebuild.  It's considered stable upstream. >> This was an upstream bug, not a Gen

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Neil Bothwick
On Sat, 5 Dec 2009 14:31:16 +0100, Volker Armin Hemmann wrote: > The easy way to avoid problems are BINPKGs. Use it and a downgrade in > case of problems only takes seconds. Install demerge too and you can roll back to pre-breakage very easily. -- Neil Bothwick Old hitchhikers never die-they

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Dale
Volker Armin Hemmann wrote: On Samstag 05 Dezember 2009, Philip Webb wrote: Also, I never do a bald 'emerge world'. I look thro' the output of 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which have changed, run 'emerge -Dup world' to see what order of emerging is

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-05 Thread Volker Armin Hemmann
On Samstag 05 Dezember 2009, Philip Webb wrote: > > Also, I never do a bald 'emerge world'. I look thro' the output of > 'eix-sync', write -- with a pencil+paper -- a list of installed pkgs which > have changed, run 'emerge -Dup world' to see what order of emerging is > recommended, then indiv

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-04 Thread Dale
Philip Webb wrote: The defective version of 'patch' had got into 'testing', where the only remaining problems are supposed to be in the ebuild; in fact in this case, there was still a serious problem upstream & that version of 'patch' has been re-masked (I believe). Anyway, don't do testing on t

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-04 Thread Philip Webb
091205 daid kahl wrote: >>  2  pieces of advice to avoid such problems: >> (1) never use the 'testing' versions of system pkgs; >> (2) never run 'emerge world' without the '-p' flag. > I kindly disagree. Thanks for the "kindly": I thought I'd walked into a high-school locker room. > ~[arch] is te

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-04 Thread daid kahl
>  2  pieces of advice to avoid such problems: > (1) never use the 'testing' versions of system pkgs; > (2) never run 'emerge world' without the '-p' flag. I kindly disagree. ~[arch] is testing for Gentoo ebuild. It's considered stable upstream. This was an upstream bug, not a Gentoo bug. And,

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Stefan G. Weichinger
Stefan G. Weichinger schrieb: > Seems as if I have to simply manage that to-rebuild-list myself .. my rebuild-list crashed at kde-misc/kdnssd-avahi, interesting on a gnome-system ... k3b depends on kdelibs and I have useflag avahi for that, hmmm ... I removed it from my list and emerge the rest

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Alan McKinnon
On Wednesday 02 December 2009 19:59:35 Stefan G. Weichinger wrote: > Alan McKinnon schrieb: > > Most folk now have to rebuild 70 - 300 packages, I'm stuck with > > potentially 1472 > > I feel with you ... fortunately the cpus should do it on their own, > accompanied by some fans ;-) > > - > > A

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Stefan G. Weichinger
Alan McKinnon schrieb: > Most folk now have to rebuild 70 - 300 packages, I'm stuck with > potentially 1472 I feel with you ... fortunately the cpus should do it on their own, accompanied by some fans ;-) - Any idea how to elegantly split that job into some digestible chunks? The various qlo

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread felix
On Wed, Dec 02, 2009 at 09:48:16AM -0500, Philip Webb wrote: > 2 pieces of advice to avoid such problems: > (1) never use the 'testing' versions of system pkgs; > (2) never run 'emerge world' without the '-p' flag. (0) Never speak on that which you know not. -- ... _._. ._ ._. . _

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Neil Bothwick
On Wed, 2 Dec 2009 09:48:16 -0500, Philip Webb wrote: > 2 pieces of advice to avoid such problems: > (1) never use the 'testing' versions of system pkgs; Then how do they get tested? > (2) never run 'emerge world' without the '-p' flag. What difference does this make? It shows an update for w

[gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Nikos Chantziaras
On 12/02/2009 04:48 PM, Philip Webb wrote: 091202 Nikos Chantziaras wrote: On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given: http://blog.flameeyes.eu/2009/12/01/gentoo-servi

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Volker Armin Hemmann
On Mittwoch 02 Dezember 2009, Neil Bothwick wrote: > On Wed, 02 Dec 2009 15:45:21 +0200, Nikos Chantziaras wrote: > > Yep, this bug was a major annoyance for me too. I emerged patch-2.6 on > > November 15 and since then, being on ~amd64, a *lot* of other packages. > > After downgrading, I needed

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Jesús Guerrero
On Wed, 2 Dec 2009 17:30:37 +0200, Alan McKinnon wrote: > Of course I ran emerge -p. Well actually I run emerge -a but the effect is > the > same - see what's going to be installed before it's installed. Until a > week > ago no-one knew the effects patch-2.6.0 would have so when it appears in >

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Alan McKinnon
On Wednesday 02 December 2009 16:48:16 Philip Webb wrote: > 091202 Nikos Chantziaras wrote: > > On 12/02/2009 12:51 PM, Alan McKinnon wrote: > >> On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: > >>> Everyone should read the following and follow the advice given: > >>> http://blog.fla

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Philip Webb
091202 Nikos Chantziaras wrote: > On 12/02/2009 12:51 PM, Alan McKinnon wrote: >> On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: >>> Everyone should read the following and follow the advice given: >>> http://blog.flameeyes.eu/2009/12/01/gentoo-service-announcement-keep-clear-of-gnu-p

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Kevin O'Gorman
On Wed, Dec 2, 2009 at 5:45 AM, Nikos Chantziaras wrote: > On 12/02/2009 12:51 PM, Alan McKinnon wrote: > >> On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: >> >>> Everyone should read the following and follow the advice given: >>> >>> >>> http://blog.flameeyes.eu/2009/12/01/gentoo-

Re: [gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Neil Bothwick
On Wed, 02 Dec 2009 15:45:21 +0200, Nikos Chantziaras wrote: > Yep, this bug was a major annoyance for me too. I emerged patch-2.6 on > November 15 and since then, being on ~amd64, a *lot* of other packages. > After downgrading, I needed to rebuild about 300 packages, including > all of KDE4

[gentoo-user] Re: Heads up: Your system might be broken and/or insecure due to serious patch-2.6 bug

2009-12-02 Thread Nikos Chantziaras
On 12/02/2009 12:51 PM, Alan McKinnon wrote: On Tuesday 01 December 2009 18:02:48 Nikos Chantziaras wrote: Everyone should read the following and follow the advice given: http://blog.flameeyes.eu/2009/12/01/gentoo-service-announcement-keep-clear- of-gnu-patch-2-6 I emerged patch-2.60 when