F23 Self Contained Change: Standardized Passphrase Policy
by Jan Kurik
= Proposed Self Contained Change: Standardized Passphrase Policy =
https://fedoraproject.org/wiki/Changes/Standardized_passphrase_policy
Change owner(s):
* Kevin Fenzi <kevin at scrye dot com>
* David Cantrell <dcantrell at redhat dot com>
* Tomas Mraz <tmraz at redhat dot com>
Currently a number of places ask users to set passphrases/passwords. Some of them enforce some kind of rules for passphrases/passwords, others different rules. This change would create a common base policy for as many of these applications as possible, allowing for local users or products to override this base in cases they need to do so.
== Detailed Description ==
We should have a base passphrase/password policy for applications to use. This allows them all to be consistent and also provide our users with needed security. Additionally, we should make it possible for our users to adjust this base policy as they need depending on their use cases.
The applications involved in this change should be at least:
* anaconda - sets initial root and user passphrases/passwords.
* passwd - command line utility that changes passphrases/passwords.
* initial-setup - sets up users if they were not setup in anaconda.
* libpwquality - doesn't set passwords, but should be used in common for quality checking in a consistent manner.
We should provide a way for users or products to adjust this policy, and also a way to allow overriding it (if the policy allows).
== Scope ==
* Proposal owners: Will work with owners of these components to try and come up with a generic policy for passphrases/passwords and how to implement it, then get FESCo to approve this policy and then implement it.
* Other developers: Will need to adjust applications and config to use a common set of requirements that can be overriden in one place.
* Release engineering: None
* Policies and guidelines: Will need to be approved by FESCo and FPC (not a System Wide Change)
* Trademark approval: N/A (not needed for this Change)
--
Jan Kuřík
8 years, 10 months
Fedora 23 Bugzilla Rawhide rebase
by Jan Kurik
Greetings,
This e-mail is intended to inform you about the upcoming Bugzilla changes
happening 2015-July-14 (Rawhide bug rebase) and what you need to do, if anything.
We will be automatically changing the version for most rawhide bugs to Fedora 23.
This will result in regular bugs reported against rawhide during the Fedora 23
development cycle being changed to version ‘23' instead of their current
assignment, ‘rawhide’. This is to align with the branching of Fedora 23 from
rawhide and to more accurately tell where in the lineage of releases the bug was
last reported.
Note that this procedure does not apply to bugs that are open for the ‘Package
Review’ component or bugs that have the ''FutureFeature'' or ''Tracking'' keywords
set. These will stay open as rawhide bugs indefinitely.
If you do not want your bugs changed to version ‘23‘, add the ''FutureFeature''
keyword. If you need help changing a large amount of bugs manually, we’d be glad
to help.
The process was re-approved by FESCo https://fedorahosted.org/fesco/ticket/1096.
Jan
--
Jan Kuřík
8 years, 10 months
F23 Self Contained Change: Cloud Systemd Networkd
by Jan Kurik
= Proposed Self Contained Change: Cloud Systemd Networkd =
https://fedoraproject.org/wiki/Changes/Cloud_Systemd_Networkd
Change owner(s): Kushal Das <kushaldas at gmail dot com>
We will use systemd-networkd to configure network in Cloud base image.
== Detailed Description ==
systemd-networkd is a system daemon that manages network configurations. It detects and configures network devices as they appear. Cloud base image will use systemd-networkd for its network.
systemd is a default package in Fedora, and we can use its latest feature to control the network configurations. We will remove the hacks we have in the current kickstart file, and use systemd tools for network configuration.
== Scope ==
* Proposal owners: The Cloud base image.
* Other developers: N/A (not a System Wide Change)
* Release engineering: N/A (not a System Wide Change)
* Policies and guidelines: N/A (not a System Wide Change)
* Trademark approval: N/A (not needed for this Change)
--
Jan Kuřík
8 years, 10 months
F23 Self Contained Change: Cloud MOTD
by Jan Kurik
= Proposed Self Contained Change: Cloud MOTD =
https://fedoraproject.org/wiki/Changes/Cloud_MOTD
Change owner(s): Kushal Das <kushaldas at gmail dot com>
After logging in the running Cloud instance, the user should get the pending updates (including security) details as MOTD (message of the day).
== Detailed Description ==
With the help of dnf-automatic package we would want to show all updates including the security updates in the MOTD. Many other major cloud images do the same. The corresponding bug is https://bugzilla.redhat.com/show_bug.cgi?id=995537
== Scope ==
* Proposal owners: To work on implementation of this Change
* Other developers: N/A (not a System Wide Change)
* Release engineering: N/A (not a System Wide Change)
* Policies and guidelines: N/A (not a System Wide Change)
* Trademark approval: N/A (not needed for this Change)
--
Jan Kuřík
8 years, 10 months
exiv2-0.25 coming to rawhide
by Rex Dieter
I plan on updating rawhide to exiv2-0.25 this week, which involves a
library
soname bump, affected packages appended at the end.
I'll take care of necessary rebuilds.
-- Rex
calligra-0:2.9.5-1.fc23.src
darktable-0:1.6.7-1.fc23.src
geeqie-0:1.2-0.3.20141130gita1afabd.fc23.src
gegl-0:0.2.0-24.fc23.src
gegl03-0:0.3.0-3.fc23.src
gipfel-0:0.4.0-6.fc23.src
gnome-color-manager-0:3.16.0-2.fc23.src
gnome-commander-4:1.4.7-1.fc23.src
gpscorrelate-0:1.6.1-15.fc23.src
gthumb-1:3.4.0-2.fc23.src
gwenview-0:15.04.2-1.fc23.src
hugin-0:2014.0.0-6.fc23.src
immix-0:1.3.2-22.fc23.src
kde-runtime-0:15.04.2-1.fc23.src
kf5-kfilemetadata-0:5.9.1-1.fc23.src
kfilemetadata-0:4.14.3-2.fc23.src
kio-extras-0:5.3.1-1.fc23.src
kphotoalbum-0:4.6.1-2.fc23.src
krename-0:4.0.9-13.fc23.src
ksnapshot-0:15.04.2-1.fc23.src
libextractor-0:1.3-4.fc23.src
libgexiv2-0:0.10.3-2.fc23.src
libkexiv2-0:15.04.2-1.fc23.src
luminance-hdr-0:2.3.1-13.fc23.src
merkaartor-0:0.18.1-12.fc23.src
nepomuk-core-0:4.14.3-2.fc23.src
nomacs-0:2.4.4-1.fc23.src
oyranos-0:0.9.5-8.fc23.src
pcmanfm-qt-0:0.9.0-8.fc23.src
pyexiv2-0:0.3.2-15.fc23.src
rawstudio-0:2.1-0.2.20150511git983bda1.fc23.src
sir-0:2.5.1-8.fc23.src
strigi-0:0.7.8-9.fc23.src
ufraw-0:0.21-1.fc23.src
viewnior-0:1.5-1.fc23.src
8 years, 10 months
F23 System Wide Change: Unicode 8.0 support
by Jan Kurik
= Proposed System Wide Change: Unicode 8.0 support =
https://fedoraproject.org/wiki/Changes/Unicode_8.0
Change owner(s):
* Mike Fabian <mfabian At redhat DOT com>
* Pravin Satpute <pravins At fedoraproject DOT org>
* Siddhesh Poyarekar <spoyarek AT redhat DOT com >
Unicode 8.0 got release on 17th June 2015. It includes 41 new emoji characters (including five modifiers for diversity), 5,771 new ideographs for Chinese, Japanese, and Korean, the new Georgian lari currency symbol, and 86 lowercase Cherokee syllables. It also adds letters to existing scripts to support Arwi (the Tamil language written in the Arabic script), the Ik language in Uganda, Kulango in the Côte d’Ivoire, and other languages of Africa. In total, this version adds 7,716 new characters and six new scripts.
== Detailed Description ==
Unicode 8.0 got release on 17th June 2015. It includes 41 new emoji characters (including five modifiers for diversity), 5,771 new ideographs for Chinese, Japanese, and Korean, the new Georgian lari currency symbol, and 86 lowercase Cherokee syllables. It also adds letters to existing scripts to support Arwi (the Tamil language written in the Arabic script), the Ik language in Uganda, Kulango in the Côte d’Ivoire, and other languages of Africa. In total, this version adds 7,716 new characters and six new scripts.
To get support for these characters in Fedora we will need updates to core libraries Glibc and Lib ICU. We are planning to update our core libraries Glibc and Lib ICU with the help of upstream.
== Scope ==
* Proposal owners: Work with upstream and file bugs and provide patches where required.
* Other developers: This change will impact glibc, ICU and all applications that uses
these libraries. Other Developers do not need to make any changes from their end,
but they need to watch how their application behaves with improved localedata. We
need proper testing to see that it does not break any application.
* Release engineering: No work required from Release engineering.
* Policies and guidelines: No, this change does not required any updates to Policies or packaging guideline updates.
* Trademark approval: N/A (not needed for this Change)
--
Jan Kuřík
8 years, 10 months
F23 System Wide Change: Glibc locale subpackaging
by Jan Kurik
= Proposed System Wide Change: Glibc locale subpackaging =
https://fedoraproject.org/wiki/Changes/Glibc_locale_subpackaging
Change owner(s):
* Mike Fabian <mfabian At redhat DOT com>
* Siddhesh Poyarekar <spoyarek AT redhat DOT com>
* Carlos O’Donell <codonell AT redhat DOT com>
This change should make it possible to install or uninstall locales individually.
== Detailed Description ==
Currently the file /usr/lib/locale/locale-archive contains all locales and is thus huge (103MB).
For small systems (and containers) it would be useful to be able to install only a small number of locales.
Recently we made it possible to install a small number of locales by supplying the rpm-macro “_install_langs”, for example
rpm -i -D _install_langs="en:de_DE" glibc-common.rpm
will install all English locales and all German locales which start with “de_DE”,
rpm -i -D _install_langs="en_US.utf8" glibc-common.rpm
will install only the en_US.utf8 locale,
rpm -i -D _install_langs="POSIX" glibc-common.rpm
will install nothing (but the POSIX/C is still available because it is builtin into glibc).
But this approach works only during an Anaconda based install when Anaconda supplies the _install_langs rpm-macro.
When glibc is updated later, the _install_langs macro will not be supplied on the command line during the update and the default value “all” of “_install_langs” from /usr/lib/rpm/macros will be used and all locales come back during an update.
Therefore, this solution is far from perfect.
It should be made possible to install and uninstall locales individually, for example by having a separate package for the locales for each language. Installing such a package would add these locales to locale-archive, uninstalling it would remove them.
Anaconda then needs to be changed to handle such language packages.
== Scope ==
* Proposal owners:
1. Figure out the best approach to to install/uninstall locales
2. Make sure that locales added manually by the user are not destroyed (currently they are lost when glibc is updated)
* Other developers:
Anaconda needs to be made aware of the new approach to handle installation/uninstallation of locales
* Release engineering:
I am not sure whether this has affects release engineering, probably the packages in the install image change when parts are split out of glibc-common.
* Policies and guidelines:
No, this change does not require updates to policies and guidelines.
* Trademark approval: not needed for this Change
--
Jan Kuřík
8 years, 10 months
