Any chance for a tighter /etc/ structure?
by Pat Riehecky
Please accept my apology for how long this is, in the end it is
effectively a feature request (or perhaps a packing ''issue'')... it
just takes a while to get there.
After installing a typical RHEL/Fedora server a non privileged user has
access to read all sorts of files that, while not terribly dangerous,
they have no need to read and could, under some not at all extraordinary
circumstances, disclose some more sensitive data. I know in a good part
of the server world user's simply are not a valid concern. However, I
would be surprised if any Unix based shop didn't have at least one
server where users could ssh in and put files down.
For example a standard user can read just about everything
in /etc/samba, like the smbusers file which maps unix users to smb
users. The big picture in this file is that it maps root to
Administrator. This is something that we expect, but disclosing it
seems in error. A security minded admin may change the mapping, but,
since there is never a case where a non uid 0 process would need to read
the file (samba runs as root), the permissions may never be tightened
down.
There is also the /etc/samba/smb.conf file which is world readable. A
wealth of information that should never be given to users is in this
file, as an admin I would expect this file to be not world readable by
default. No one needs to read it but me, so I shouldn't share it with
them.
How about /etc/httpd/* I have a personal hosting account at a server
farm where I can read everything in that directory. A quick check of
the /etc/httpd/conf/httpd.conf tells me the name of every site hosted on
this box. /home/37462614 doesn't tell me who this is, but a simple poke
about in apache tells me all sorts of things. Like in this user's home
they have a .ht_passwords file with customer access rights. A file that
I can cat if I want and compromise their privacy. A file I must be able
to cat because of the apache permissions. A file I would never have
found if I hadn't been able to read the httpd.conf file. The httpd.conf
file that as a non-root user, I never have a reason to read.
The /etc/yum files are also world readable, knowing who is and is not a
trusted software provider is just not something non-root users should
need to know.
The SNMP config file (/etc/snmp/snmpd.conf) is world readable by
default. Disclosing this information to a non-administrative user is
not a good idea. Supposing I enable SNMP writes. Giving any user
access to this file after SNMP writes are enabled is rather bad.
Chmoding it root only isn't listed in the documentation. Doesn't it
seem a little strange that this is not automatically handled by the RPM
on installation. Edits to the file will preserve the umask, and
therefore retained. The 99% use case for snmpd is to only allow
administrative users access to this file. The defaults apply to the 1%
case where something else is at work.
I wish to challenge this choice. Not just for SNMP but for every file
and directory in /etc/. I would love for a secure configuration by
default. seLinux is installed by default, the mandatory access control
there is excellent, but there is no reason to have to rely on it when
for 90% of the files in /etc/ a simple chmod will secure the files
reasonably well.
I realize one of the first reactions will be to let seLinux take care of
it. SeLinux is great at this task, but it seems like pushing the burden
entirely into seLinux is hiding the oddity I am pointing out. Suppose I
had /etc/httpd/ recursively set to 2777 by default. This is obviously
bad, but due to seLinux enforcement the apache process would not be able
to modify /etc/httpd/ files, but wouldn't it make more sense to chmod
things differently in the RPM? I realize that write access and random
sticky bits are far greater than just a world read bit, but just because
you can do something with seLinux doesn't mean it is the best way to do
it.
The list of random files in /etc/ could go on for a long while, but I
would ask that a part of the packaging process going forward would be to
evaluate the default permissions on all files packaged in /etc/ and
decide if any of the world bits should be set. Allowing anything on the
system to read files in /etc/ is not a good idea. I know seLinux, when
it is enforcing, prevents a lot of this disclosure, but users are
currently unconfined in the default RHEL5/Fedora9 and many admins (not
myself, but it is still a sizable group) turn off seLinux. In security
classes they stress having many lines of defense, setting good
permissions by default seems a great place to start, just a serious
outlay of work and a large bit of time.
I know confined users is coming, but there are times I must put seLinux
into Permissive mode. And confined users is not here yet. With the
complexity of confining users I would not be the slightest bit shocked
if it took a few more years to happen. Getting /etc/ locked down a bit
tighter will help demonstrate that RHEL/Fedora is not only secure with
seLinux running, but rather that seLinux is an extension of the security
focus you expect to see from an Enterprise Linux provider. That even in
non seLinux environments the system takes precautions about what data
should and should not be given to non-root users.
May I request that a step be added to the packaging process? A step
where the world read bits are evaluated for validity. Obviously
evaluating past packages is a ridiculous idea, but perhaps for the next
release of Fedora any packages that start coming in could have this
request attached to them.
Pat
15 years, 9 months
[Fwd: bugzilla.redhat.com Web UI, Database, XMLRPC Planned Outage | August 2nd, 2008 - 9:00 AM EST - 7:00 PM EST]
by John Poelstra
Reminder: This Weekend
-------- Original Message --------
Subject: bugzilla.redhat.com Web UI, Database, XMLRPC Planned Outage |
August 2nd, 2008 - 9:00 AM EST - 7:00 PM EST
Date: Tue, 29 Jul 2008 00:05:42 -0400
From: Dave Lawrence <dkl(a)redhat.com>
O U T A G E R E Q U E S T F O R M
=====================================
Severity:
Severity Two (High)
Scheduled Date:
August 2nd, 2008
Scheduled Time:
9:00 AM EST - 7:00 PM EST
Estimated Time Required:
10 hours
Performed By:
Red Hat Engineering Operations
People/Groups Impacted:
Users of bugzilla.redhat.com and any services that rely on
bugzilla.redhat.com
Site/Services Affected:
bugzilla.redhat.com Web UI, Database, XMLRPC
Impact:
bugzilla.redhat.com will be unavailable during the posted
time on August 2nd, 2008.
Description:
On August 2nd, bugzilla.redhat.com will go down for an
update to the latest upstream code base. During this time
the web servers will be reinstalled with the latest OS
updates as well as the latest Bugzilla code. Also the
database servers will undergo a data migration to be made
compatible with the latest Bugzilla code. The web UI,
database, and all XMLRPC services will be unavailable during
the migration. Services that rely on bugzilla.redhat.com may
not function properly during this time so please let your
users know about the outage as well.
Also please take time to point your services/scripts at our
test server https://partner-bugzilla.redhat.com to make sure
that they will still work with the new system once it goes
live. Care has been taken to make the new system backwards
compatible as much as possible with the old XMLRPC API but
still confirm that they work properly. If you encounter any
problems, please contact bugzilla-owner redhat com or file a
bug at
https://bugzilla.redhat.com/enter_bug.cgi?product=Bugzilla&version=3.2
Signoff:
kbaker redhat com
_______________________________________________
Fedora-devel-announce mailing list
Fedora-devel-announce(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-announce
15 years, 9 months
Pungi as CD installer build tool
by Martin Langhoff
The OLPC School Server image is a "cli" spin for a server role, and it
is based on F7. Right now the install CDs are created using
livecd-tools, mostly due to hysterical raisins. An old-style text
installer would suit me -- and the task -- a lot better.
What I am looking for then is to be able to build an install ISO that
- fits on CD-sized media (but then, I only have a small set of packages)
- has a text installer that ideally works well on low-end hw, and supports
serial console for headless machines
- has better support for off-the-beaten path arches
- the same CD can be used for installs and upgrades
- the kickstart environment is closer to the env you get when customising
a RH build
- is resilient and produces consistent builds
- extra points if it can build F7 installers from F9 :-)
Looking around, pungi seems to be the right tool for this, but some of
the documentation options are confusing, and it doesn't seem to like
the F7 repos I've thrown at it in my early lukewarm attempts. I am
happy to debug things through (and join the fedora-buildsys-list), but
I would really appreciate some hints as to whether I'm on the right
path, or perhaps I should be using something else.
cheers,
martin
--
martin.langhoff(a)gmail.com
martin(a)laptop.org -- School Server Architect
- ask interesting questions
- don't get distracted with shiny stuff - working code first
- http://wiki.laptop.org/go/User:Martinlanghoff
15 years, 9 months
rawhide report: 20080731 changes
by Fedora compose checker
setting up repos
setting up old repo file:///mnt/koji/mash/rawhide-20080730/development/source/SRPMS
Excluding Packages in global exclude list
Finished
setting up new repo file:///mnt/koji/mash/rawhide-20080731/development/source/SRPMS
Excluding Packages in global exclude list
Finished
performing the diff
New package inadyn-mt
Dynamic DNS Client
New package perl-Filesys-Df
Perl extension for filesystem disk space information
New package pyroom
PyRoom is a full screen text editor and a clone of Writeroom
Updated Packages:
ConsoleKit-0.3.0-1.fc10
-----------------------
* Wed Jul 30 18:00:00 2008 Jon McCann <jmccann(a)redhat.com> - 0.3.0-1
- Update to 0.3.0
MAKEDEV-3.23-5
--------------
* Mon Jun 16 18:00:00 2008 Jesse Keating <jkeating(a)redhat.com> - 3.23-5
- Make sure we have getent installed for our %pre section.
OpenIPMI-2.0.14-2.fc10
----------------------
* Wed Jul 30 18:00:00 2008 Phil Knirsch <pknirsch(a)redhat.com> - 2.0.14-2
- Fixed rpath problem in libOpenIPMIposix.so.0.0.1
PackageKit-0.2.4-1.fc10
-----------------------
* Wed Jul 30 18:00:00 2008 Richard Hughes <rhughes(a)redhat.com> - 0.2.4-1
- New upstream version, only bugfixes.
* Tue Jul 15 18:00:00 2008 Richard Hughes <rhughes(a)redhat.com> - 0.2.3-6
- Silence the output of update-mime-database to fix rh#454782
* Mon Jun 23 18:00:00 2008 Richard Hughes <rhughes(a)redhat.com> - 0.2.3-5.20080618
- Own the /etc/bash_completion.d directory as we don't depend on the
bash-completion package. Fixes rh#450964.
VLGothic-fonts-20080624-1.fc10
------------------------------
* Thu Jul 31 18:00:00 2008 Jens Petersen <petersen(a)redhat.com> - 20080624-1.fc10
- update to 20080624 release
akonadi-1.0.0-3.fc10
--------------------
* Wed Jul 30 18:00:00 2008 Rex Dieter <rdieter(a)fedoraproject.org> 1.0.0-3
- Requires: mysql-server
* Wed Jul 30 18:00:00 2008 Rex Dieter <rdieter(a)fedoraproject.org> 1.0.0-2
- BR: mysql-server
- Requires: qt-mysql
- cleanup spec
anaconda-11.4.1.23-1
--------------------
* Wed Jul 30 18:00:00 2008 Chris Lumens <clumens(a)redhat.com> - 11.4.1.23-1
- Fix mke2fs argument passing (#457285). (clumens)
- Disable logging in the firmware loader, since it clobbers other
log messages. (pjones)
* Wed Jul 30 18:00:00 2008 Chris Lumens <clumens(a)redhat.com> - 11.4.1.22-1
- udevsettle takes forever, so display a waitWindow. (clumens)
- Leave anaconda-runtime around for mk-images run. (dcantrell)
* Tue Jul 29 18:00:00 2008 Jeremy Katz <katzj(a)redhat.com> - 11.4.1.21-1
- Remove an instance of NEEDGR still existing to fix graphical
isolinux (#457144) (katzj)
- use newer mke2fs arguments for different filesystems (sandeen)
- Use attributes to tell us whether filesystems are
bootable (#457037). (clumens)
- Make sure we drag in gzip, used by the image creation stuff. (jkeating)
asterisk-1.6.0-0.21.beta9.fc10
------------------------------
* Wed Jul 30 18:00:00 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.6.0-0.21.beta9
- Replace app_rxfax/app_txfax with app_fax taken from upstream SVN.
bacula-2.2.8-2.fc10
-------------------
* Wed Jul 30 18:00:00 2008 Andreas Thienemann <athienem(a)redhat.com> - 2.2.8-2
- Fixed %{fedora} comparision, making bacula-sqlite build on rawhide
* Fri Jul 25 18:00:00 2008 Jon Ciesla <limb(a)jcomserv.net> - 2.2.8-1
- Update to 2.2.8. BZ 446461.
- Dropped director and storage DB-server hard Reqs. BZ 426788.
- .desktop fixes. BZ 450278, 426789.
- Updated config patch.
- Dropped wxconsole patch, applied upstream.
- Updated pamd patch.
- Dropped ampm patch, applied upstream.
- Dropped maxbyteslist patch, N/A.
- Dropped maxwaittime patch, applied upstream.
- Dropped scheduler-next-hour patch, applied upstream.
- Dropped verify patch, applied upstream.
- Dropped tls-disconnect patch, applied upstream.
- Fix for 426791.
- Introduced patch fuzz workaround, will fix.
* Mon Jul 7 18:00:00 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> - 2.0.3-14
- fix conditional comparison
- fix license tag
banshee-1.2.0-2.1.fc10
----------------------
* Thu Jul 31 18:00:00 2008 Nigel Jones <dev(a)nigelj.com> - 1.2.0-2.1
- ifarching foo broke... now fixed
* Wed Jul 30 18:00:00 2008 Nigel Jones <dev(a)nigelj.com> - 1.2.0-2
- Reenable boo, I can't see why not now...
* Wed Jul 30 18:00:00 2008 Nigel Jones <dev(a)nigelj.com> - 1.2.0-1
- Update to 1.2.0 (new upstream release)
- Refer to: http://banshee-project.org/download/archives/1.2.0/ for more details
callweaver-1.2.0.1-1.1.fc10
---------------------------
* Wed Jul 30 18:00:00 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.2.0.1-1.1
- Package manpage again.
* Wed Jul 30 18:00:00 2008 Jeffrey C. Ollie <jeff(a)ocjtech.us> - 1.2.0.1-1
- Update to release 1.2.0.1
* Mon Feb 18 17:00:00 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 1.2-0.5.rc5.20071230
- Autorebuild for GCC 4.3
checkgmail-1.13-3.svn20080730.fc10
----------------------------------
* Wed Jul 30 18:00:00 2008 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.13-3.svn20080730
- Pull svn snapshot date
* Wed Jul 30 18:00:00 2008 Rahul Sundaram <sundaram(a)fedoraproject.org> - 1.13-3.svn20080630
- Pull svn snapshot to fix auth issue
clive-0.4.20-1.fc10
-------------------
* Wed Jul 30 18:00:00 2008 Nicoleau Fabien <nicoleau.fabien(a)gmail.com> 0.4.20-1
- rebuild for 0.4.20
- licence is now GPLv3+
cyphesis-0.5.16-2.fc10
----------------------
* Wed Jul 30 18:00:00 2008 Wart <wart at kobold.org> 0.5.16-2
- Increase version in Obsoletes: for cyphesis-selinux
deskbar-applet-2.23.5-1.fc10
----------------------------
* Wed Jul 30 18:00:00 2008 Luke Macken <lmacken(a)redhat.com> - 2.23.5-1
- Latest upstream release of the 2.23.x branch
* Thu Jul 17 18:00:00 2008 Luke Macken <lmacken(a)redhat.com> - 2.23.4-1
- Latest upstream release of the 2.23.x branch
dialog-1.1-6.20080727.fc10
--------------------------
* Wed Jul 30 18:00:00 2008 Miroslav Lichvar <mlichvar(a)redhat.com> - 1.1-6.20080727
- update to 1.1-20080727
ecryptfs-utils-53-0.fc10
------------------------
* Wed Jul 30 18:00:00 2008 Eric Sandeen <sandeen(a)redhat.com> 53-0
- New upstream version
- Many new manpages, new ecryptfs-stat util
elice-0.289-1.fc10
------------------
* Wed Jul 30 18:00:00 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 0.289-1
- New upstream release 0.289
emacs-vm-8.0.10.575-1.fc10
--------------------------
* Wed Jul 30 18:00:00 2008 Jonathan G. Underwood <jonathan.underwood(a)gmail.com> - 8.0.10.575-1
- Update to version 8.0.10-575
- Update BuildRoot to preferred mktemp variant
freeradius-2.0.5-2.fc10
-----------------------
* Wed Jul 30 18:00:00 2008 John Dennis <jdennis(a)redhat.com> - 2.0.5-2
- Resolves: bug #453761: FreeRADIUS %post should not include chown -R
specify file attributes for /etc/raddb/ldap.attrmap
fix consistent use of tabs/spaces (rpmlint warning)
gazpacho-0.7.2-3.fc10
---------------------
* Wed Jul 30 18:00:00 2008 Konstantin Ryabitsev <icon(a)fedoraproject.org> - 0.7.2-3
- Small fixes (#440859)
- Include egg-info (#440859)
- Remove X-Fedora from desktop file categories
gdm-2.23.2-1.fc10
-----------------
* Wed Jul 30 18:00:00 2008 Jon McCann <jmccann(a)redhat.com> - 1:2.23.2-1
- Update to 2.23.2
gnome-packagekit-0.2.4-1.fc10
-----------------------------
* Wed Jul 30 18:00:00 2008 Richard Hughes <rhughes(a)redhat.com> - 0.2.4-1
- New upstream version, only bugfixes.
gnome-session-2.23.6-0.2008.07.30.1.fc10
----------------------------------------
* Wed Jul 30 18:00:00 2008 Jon McCann <jmccann(a)redhat.com> - 2.23.6.0.2008.07.30.1
- New snapshot from DBus branch
gstreamer-plugins-good-0.10.8-10.fc10
-------------------------------------
* Wed Jul 30 18:00:00 2008 - Bastien Nocera <bnocera(a)redhat.com> 0.10.8-10
- Build the docs ourselves
gts-0.7.6-11.fc10
-----------------
* Wed Jul 30 18:00:00 2008 Ralf Corsépius <rc040203(a)freenet.de> - 0.7.6-11
- Let *-devel Require: glib2-devel (BZ: 457099).
- Pass LIBS=-lm to %configure (avoid non-weak refs to libm).
- Add gts-0.7.6-hacks.diff (Various configuration fixes).
- Add gts-0.7.6-autotools.diff (regenerate autotool-generated files).
- Add %check.
* Fri May 23 18:00:00 2008 Jon Stanley <jonstanley(a)gmail.com> - 0.7.6-10
- Fix license tag
hedgewars-0.9.6-1.fc10
----------------------
* Wed Jul 30 18:00:00 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 0.9.6-1
- New upstream release 0.9.6
hippo-canvas-0.3.0-2.fc10
-------------------------
* Sun Jul 6 18:00:00 2008 Owen Taylor <otaylor(a)redhat.com> - 0.3.0-2
- Update to 0.3.0 (adds SVG support)
ipsec-tools-0.7.1-2.fc10
------------------------
* Wed Jul 30 18:00:00 2008 Tomas Mraz <tmraz(a)redhat.com> - 0.7.1-2
- Different approach to allow racoon to add loopback SAs for
labeled IPSec (without ISAKMP)
jd-2.0.1-0.1.svn2244_trunk.fc10
-------------------------------
* Thu Jul 31 18:00:00 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp>
- rev. 2244
kde-settings-4.0-25.fc10
------------------------
* Wed Jul 30 18:00:00 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4.0-25
- kcminputrc: [Mouse] cursorTheme=default
kdelibs-4.1.0-3.fc10
--------------------
* Wed Jul 30 18:00:00 2008 Rex Dieter <rdieter(a)fedoraproject.org> 4.1.0-3
- (Build)Requires: soprano(-devel) >= 2.1
libcanberra-0.5-4.fc10
----------------------
libsoup-2.23.1-6.fc10
---------------------
* Wed Jul 30 18:00:00 2008 Matthew Barnes <mbarnes(a)redhat.com> - 2.23.1-6
- Omit unused direct shared library dependencies (RH bug #226046).
lostlabyrinth-3.0.2-1.fc10
--------------------------
* Wed Jul 30 18:00:00 2008 Hans de Goede <j.w.r.degoede(a)hhs.nl> 3.0.2-1
- New upstream release 3.0.2
mkinitrd-6.0.56-1.fc10
----------------------
* Tue Jul 29 18:00:00 2008 Peter Jones <pjones(a)redhat.com> - 6.0.56-1
- Move a bunch of functions to /usr/libexec/initrd-functions so so that
plymouth-populate-initrd can use it instead of duplicating them.
- Change how we're calling plymouth for password UI
mugshot-1.2.2-1.fc10
--------------------
* Wed Jul 30 18:00:00 2008 Owen Taylor <otaylor(a)redhat.com> - 1.2.2-1
- Update to 1.2.2
- Fixes Firefox min version to 3.0.x, #451918 again
- Rebuild against hippo-canvas-0.3
newt-0.52.10-1.fc10
-------------------
* Wed Jul 30 18:00:00 2008 Miroslav Lichvar <mlichvar(a)redhat.com> - 0.52.10-1
- improve --noitem description (#456305)
- add setHeight to Textbox class
- fix fixedheight forms
- free keymap in newtFinished()
- fix memory leak in textbox
- fix valgrind error in checkboxtree
- don't crash when running empty form
- don't crash or hang when form has no focusable elements
- before checkboxtree drawing return first item in GetCurrent()
- redraw textbox in SetText()
- add setColor description to SnackScreen docstring (Greg Swift)
- make sure Widget isn't used directly (Greg Swift) (#452920)
- add Serbian translations (Miloš Komarčević)
- add Balochi translation (Mostafa Daneshvar)
perl-Frontier-RPC-0.07b4-4.fc10
-------------------------------
perl-MailTools-2.04-1.fc10
--------------------------
* Wed Jul 30 18:00:00 2008 Paul Howarth <paul(a)city-fan.org> 2.04-1
- Update to 2.04
pigment-python-0.3.5-1.fc10
---------------------------
* Tue Jul 29 18:00:00 2008 Matthias Saou <http://freshrpms.net/> 0.3.5-1
- Update to 0.3.5.
plymouth-0.5.0-6.fc10
---------------------
* Wed Jul 30 18:00:00 2008 Ray Strode <rstrode(a)redhat.com> - 0.5.0-6
- Add nash requires
qmmp-0.2.0-1.fc10
-----------------
* Wed Jul 30 18:00:00 2008 Karel Volny <kvolny(a)redhat.com> 0.2.0-1
- new version
- updated %description to match upstream
- added BuildRequires: libsndfile-devel wavpack-devel pulseaudio-libs-devel
- added BuildRequires: libmodplug-devel libcurl-devel openssl-devel
- xpm icon is not used anymore (several pngs available)
- created devel subpackage
* Mon May 19 18:00:00 2008 Karel Volny <kvolny(a)redhat.com> 0.1.6-2
- fixed %description not to include patent-encumbered formats (bug #447141)
* Tue May 13 18:00:00 2008 Karel Volny <kvolny(a)redhat.com> 0.1.6-1
- new version
redhat-lsb-3.1-21.fc10
----------------------
* Fri Jul 31 18:00:00 2009 Lawrence Lim <llim(a)redhat.com> - 3.1-21
- remove symlink for mailx (Bug #457241)
* Tue Feb 19 17:00:00 2008 Fedora Release Engineering <rel-eng(a)fedoraproject.org> - 3.1-20
- Autorebuild for GCC 4.3
ruby-mechanize-0.7.7-1.fc10
---------------------------
* Thu Jul 31 18:00:00 2008 Mamoru Tasaka <mtasaka(a)ioa.s.u-tokyo.ac.jp> - 0.7.7-1
- 0.7.7
sbcl-1.0.19-1.fc10
------------------
* Wed Jul 30 18:00:00 2008 Rex Dieter <rdieter(a)fedoraproject.org> - 1.0.19-1
- sbcl-1.0.19
* Thu May 29 18:00:00 2008 Rex Dieter <rdieter(a)fedoraproject.org> - 1.0.17-3
- info removal should be done in %preun (#448933)
- omit ppc only on f9+ (#448734)
selinux-policy-3.5.1-4.fc10
---------------------------
smb4k-0.9.6-1.fc10
------------------
* Wed Jul 30 18:00:00 2008 Marcin Garski <mgarski[AT]post.pl> 0.9.6-1
- Update to 0.9.6
spandsp-0.0.5-0.1.pre4.fc10
---------------------------
splat-1.2.3-1.fc10
------------------
* Wed Jul 30 18:00:00 2008 Steve Conklin <fedora(a)conklinhouse.com> - 1.2.3-1
- New upstream
- added delivery of postdownload script and the new bearing utility
- added man pages for bearing and postdownload
swfdec-0.7.4-1.fc10
-------------------
* Wed Jul 30 18:00:00 2008 Brian Pepple <bpepple(a)fedoraproject.org> - 0.7.4-1
- Update to 0.7.4.
swfdec-gnome-2.23.2-1.fc10
--------------------------
* Wed Jul 30 18:00:00 2008 Brian Pepple <bpepple(a)fedoraproject.org> - 2.23.2-1
- Update to 2.23.2.
- Drop configure patch. Fixed upstream.
swfdec-mozilla-0.7.4-1.fc10
---------------------------
* Wed Jul 30 18:00:00 2008 Brian Pepple <bpepple(a)fedoraproject.org> - 0.7.4-1
- Update to 0.7.4.
xterm-236-1.fc10
----------------
* Wed Jul 30 18:00:00 2008 Miroslav Lichvar <mlichvar(a)redhat.com> 236-1
- update to 236
- enable support for spawn-new-terminal action (#457130)
Summary:
Added Packages: 3
Removed Packages: 0
Modified Packages: 54
Broken deps for i386
----------------------------------------------------------
apt-0.5.15lorg3.94-3.fc9.i386 requires librpmdb-4.4.so
apt-0.5.15lorg3.94-3.fc9.i386 requires librpm-4.4.so
apt-0.5.15lorg3.94-3.fc9.i386 requires librpmio-4.4.so
claws-mail-3.4.0-1.fc10.i386 requires libetpan.so.11
claws-mail-plugins-bogofilter-3.4.0-1.fc10.i386 requires libetpan.so.11
claws-mail-plugins-dillo-3.4.0-1.fc10.i386 requires libetpan.so.11
claws-mail-plugins-pgp-3.4.0-1.fc10.i386 requires libetpan.so.11
claws-mail-plugins-spamassassin-3.4.0-1.fc10.i386 requires libetpan.so.11
fuse-encfs-1.4.2-2.fc10.i386 requires librlog.so.1
gscan2pdf-0.9.24-1.fc10.noarch requires perl(Gtk2::ImageView)
gtkmozembedmm-1.4.2.cvs20060817-20.fc9.i386 requires gecko-libs = 0:1.9
highlight-2.6.11-1.fc10.i386 requires perl(MT)
highlight-2.6.11-1.fc10.i386 requires perl(MT::Template::Context)
highlight-2.6.11-1.fc10.i386 requires perl(MT::Plugin)
highlight-2.6.11-1.fc10.i386 requires perl(MT::WeblogPublisher)
highlight-2.6.11-1.fc10.i386 requires perl(MT::Entry)
maxima-runtime-sbcl-5.15.0-1.fc10.i386 requires sbcl = 0:1.0.17
perl-Catalyst-Devel-1.07-1.fc10.noarch requires perl(Catalyst::Manual) >= 0:5.7000
perl-RPM2-0.67-5.fc9.i386 requires librpmdb-4.4.so
perl-RPM2-0.67-5.fc9.i386 requires librpm-4.4.so
perl-RPM2-0.67-5.fc9.i386 requires librpmio-4.4.so
ruby-rpm-1.2.3-4.fc9.i386 requires librpmdb-4.4.so
ruby-rpm-1.2.3-4.fc9.i386 requires librpmbuild-4.4.so
ruby-rpm-1.2.3-4.fc9.i386 requires librpm-4.4.so
ruby-rpm-1.2.3-4.fc9.i386 requires librpmio-4.4.so
sobby-0.4.4-4.fc10.i386 requires libobby-0.4.so.0
synaptic-0.57.2-16.fc9.i386 requires librpmio-4.4.so
synaptic-0.57.2-16.fc9.i386 requires librpmdb-4.4.so
synaptic-0.57.2-16.fc9.i386 requires librpm-4.4.so
Broken deps for x86_64
----------------------------------------------------------
apt-0.5.15lorg3.94-3.fc9.i386 requires librpmdb-4.4.so
apt-0.5.15lorg3.94-3.fc9.i386 requires librpm-4.4.so
apt-0.5.15lorg3.94-3.fc9.i386 requires librpmio-4.4.so
apt-0.5.15lorg3.94-3.fc9.x86_64 requires librpm-4.4.so()(64bit)
apt-0.5.15lorg3.94-3.fc9.x86_64 requires librpmdb-4.4.so()(64bit)
apt-0.5.15lorg3.94-3.fc9.x86_64 requires librpmio-4.4.so()(64bit)
claws-mail-3.4.0-1.fc10.x86_64 requires libetpan.so.11()(64bit)
claws-mail-plugins-bogofilter-3.4.0-1.fc10.x86_64 requires libetpan.so.11()(64bit)
claws-mail-plugins-dillo-3.4.0-1.fc10.x86_64 requires libetpan.so.11()(64bit)
claws-mail-plugins-pgp-3.4.0-1.fc10.x86_64 requires libetpan.so.11()(64bit)
claws-mail-plugins-spamassassin-3.4.0-1.fc10.x86_64 requires libetpan.so.11()(64bit)
fuse-encfs-1.4.2-2.fc10.i386 requires librlog.so.1
fuse-encfs-1.4.2-2.fc10.x86_64 requires librlog.so.1()(64bit)
gscan2pdf-0.9.24-1.fc10.noarch requires perl(Gtk2::ImageView)
gtkmozembedmm-1.4.2.cvs20060817-20.fc9.i386 requires gecko-libs = 0:1.9
gtkmozembedmm-1.4.2.cvs20060817-20.fc9.x86_64 requires gecko-libs = 0:1.9
highlight-2.6.11-1.fc10.x86_64 requires perl(MT)
highlight-2.6.11-1.fc10.x86_64 requires perl(MT::Template::Context)
highlight-2.6.11-1.fc10.x86_64 requires perl(MT::Plugin)
highlight-2.6.11-1.fc10.x86_64 requires perl(MT::WeblogPublisher)
highlight-2.6.11-1.fc10.x86_64 requires perl(MT::Entry)
maxima-runtime-sbcl-5.15.0-1.fc10.x86_64 requires sbcl = 0:1.0.17
perl-Catalyst-Devel-1.07-1.fc10.noarch requires perl(Catalyst::Manual) >= 0:5.7000
perl-RPM2-0.67-5.fc9.x86_64 requires librpmio-4.4.so()(64bit)
perl-RPM2-0.67-5.fc9.x86_64 requires librpm-4.4.so()(64bit)
perl-RPM2-0.67-5.fc9.x86_64 requires librpmdb-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.x86_64 requires librpmio-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.x86_64 requires librpmbuild-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.x86_64 requires librpm-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.x86_64 requires librpmdb-4.4.so()(64bit)
sobby-0.4.4-4.fc10.x86_64 requires libobby-0.4.so.0()(64bit)
synaptic-0.57.2-16.fc9.x86_64 requires librpmdb-4.4.so()(64bit)
synaptic-0.57.2-16.fc9.x86_64 requires librpmio-4.4.so()(64bit)
synaptic-0.57.2-16.fc9.x86_64 requires librpm-4.4.so()(64bit)
Broken deps for ppc
----------------------------------------------------------
apt-0.5.15lorg3.94-3.fc9.ppc requires librpmdb-4.4.so
apt-0.5.15lorg3.94-3.fc9.ppc requires librpm-4.4.so
apt-0.5.15lorg3.94-3.fc9.ppc requires librpmio-4.4.so
apt-0.5.15lorg3.94-3.fc9.ppc64 requires librpm-4.4.so()(64bit)
apt-0.5.15lorg3.94-3.fc9.ppc64 requires librpmdb-4.4.so()(64bit)
apt-0.5.15lorg3.94-3.fc9.ppc64 requires librpmio-4.4.so()(64bit)
claws-mail-3.4.0-1.fc10.ppc requires libetpan.so.11
claws-mail-plugins-bogofilter-3.4.0-1.fc10.ppc requires libetpan.so.11
claws-mail-plugins-dillo-3.4.0-1.fc10.ppc requires libetpan.so.11
claws-mail-plugins-pgp-3.4.0-1.fc10.ppc requires libetpan.so.11
claws-mail-plugins-spamassassin-3.4.0-1.fc10.ppc requires libetpan.so.11
fuse-encfs-1.4.2-2.fc10.ppc requires librlog.so.1
fuse-encfs-1.4.2-2.fc10.ppc64 requires librlog.so.1()(64bit)
gscan2pdf-0.9.24-1.fc10.noarch requires perl(Gtk2::ImageView)
gtkmozembedmm-1.4.2.cvs20060817-20.fc9.ppc requires gecko-libs = 0:1.9
gtkmozembedmm-1.4.2.cvs20060817-20.fc9.ppc64 requires gecko-libs = 0:1.9
highlight-2.6.11-1.fc10.ppc requires perl(MT)
highlight-2.6.11-1.fc10.ppc requires perl(MT::Template::Context)
highlight-2.6.11-1.fc10.ppc requires perl(MT::Plugin)
highlight-2.6.11-1.fc10.ppc requires perl(MT::WeblogPublisher)
highlight-2.6.11-1.fc10.ppc requires perl(MT::Entry)
perl-Catalyst-Devel-1.07-1.fc10.noarch requires perl(Catalyst::Manual) >= 0:5.7000
perl-RPM2-0.67-5.fc9.ppc requires librpmdb-4.4.so
perl-RPM2-0.67-5.fc9.ppc requires librpm-4.4.so
perl-RPM2-0.67-5.fc9.ppc requires librpmio-4.4.so
ruby-rpm-1.2.3-4.fc9.ppc requires librpmdb-4.4.so
ruby-rpm-1.2.3-4.fc9.ppc requires librpmbuild-4.4.so
ruby-rpm-1.2.3-4.fc9.ppc requires librpm-4.4.so
ruby-rpm-1.2.3-4.fc9.ppc requires librpmio-4.4.so
sobby-0.4.4-4.fc10.ppc requires libobby-0.4.so.0
synaptic-0.57.2-16.fc9.ppc requires librpmio-4.4.so
synaptic-0.57.2-16.fc9.ppc requires librpmdb-4.4.so
synaptic-0.57.2-16.fc9.ppc requires librpm-4.4.so
Broken deps for ppc64
----------------------------------------------------------
apt-0.5.15lorg3.94-3.fc9.ppc64 requires librpm-4.4.so()(64bit)
apt-0.5.15lorg3.94-3.fc9.ppc64 requires librpmdb-4.4.so()(64bit)
apt-0.5.15lorg3.94-3.fc9.ppc64 requires librpmio-4.4.so()(64bit)
claws-mail-3.4.0-1.fc10.ppc64 requires libetpan.so.11()(64bit)
claws-mail-plugins-bogofilter-3.4.0-1.fc10.ppc64 requires libetpan.so.11()(64bit)
claws-mail-plugins-dillo-3.4.0-1.fc10.ppc64 requires libetpan.so.11()(64bit)
claws-mail-plugins-pgp-3.4.0-1.fc10.ppc64 requires libetpan.so.11()(64bit)
claws-mail-plugins-spamassassin-3.4.0-1.fc10.ppc64 requires libetpan.so.11()(64bit)
fuse-encfs-1.4.2-2.fc10.ppc64 requires librlog.so.1()(64bit)
gscan2pdf-0.9.24-1.fc10.noarch requires perl(Gtk2::ImageView)
gspiceui-0.9.65-2.fc10.ppc64 requires gwave
gtkmozembedmm-1.4.2.cvs20060817-20.fc9.ppc64 requires gecko-libs = 0:1.9
highlight-2.6.11-1.fc10.ppc64 requires perl(MT)
highlight-2.6.11-1.fc10.ppc64 requires perl(MT::Template::Context)
highlight-2.6.11-1.fc10.ppc64 requires perl(MT::Plugin)
highlight-2.6.11-1.fc10.ppc64 requires perl(MT::WeblogPublisher)
highlight-2.6.11-1.fc10.ppc64 requires perl(MT::Entry)
livecd-tools-017.1-1.fc9.ppc64 requires yaboot
perl-Catalyst-Devel-1.07-1.fc10.noarch requires perl(Catalyst::Manual) >= 0:5.7000
perl-RPM2-0.67-5.fc9.ppc64 requires librpmio-4.4.so()(64bit)
perl-RPM2-0.67-5.fc9.ppc64 requires librpm-4.4.so()(64bit)
perl-RPM2-0.67-5.fc9.ppc64 requires librpmdb-4.4.so()(64bit)
perl-Test-AutoBuild-darcs-1.2.2-3.fc9.noarch requires darcs >= 0:1.0.0
ruby-rpm-1.2.3-4.fc9.ppc64 requires librpmio-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.ppc64 requires librpmbuild-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.ppc64 requires librpmdb-4.4.so()(64bit)
ruby-rpm-1.2.3-4.fc9.ppc64 requires librpm-4.4.so()(64bit)
sobby-0.4.4-4.fc10.ppc64 requires libobby-0.4.so.0()(64bit)
synaptic-0.57.2-16.fc9.ppc64 requires librpmdb-4.4.so()(64bit)
synaptic-0.57.2-16.fc9.ppc64 requires librpmio-4.4.so()(64bit)
synaptic-0.57.2-16.fc9.ppc64 requires librpm-4.4.so()(64bit)
15 years, 9 months
repoquery question
by Richard Hughes
Anyone got any ideas why this fails (as user and root)?
repoquery --arch=src --whatrequires unique-devel
I want to update the version of unique in fedora rawhide, and need to
know what's building against the old version of the library.
Thanks.
Richard.
15 years, 9 months
Broken dependencies in Fedora 8 - 2008-07-31
by Michael Schwendt
Summary of broken packages (by owner):
berrange AT redhat.com
perl-Test-AutoBuild-darcs-1.2.2-1.fc8.noarch
dcbw AT redhat.com
1:NetworkManager-0.7.0-0.5.svn3030.fc8.i386
dev AT nigelj.com
mediawiki-SpecialInterwiki-0-0.3.20080606svn.fc8.noarch
dwmw2 AT infradead.org
callweaver-zaptel-1.2-0.3.rc4.20070822.i386
callweaver-zaptel-1.2-0.3.rc4.20070822.ppc
callweaver-zaptel-1.2-0.3.rc4.20070822.ppc64
callweaver-zaptel-1.2-0.3.rc4.20070822.x86_64
ebmunson AT us.ibm.com
libhugetlbfs-test-1.1-4.fc8.i386
libhugetlbfs-test-1.1-4.fc8.ppc
libhugetlbfs-test-1.1-4.fc8.ppc64
libhugetlbfs-test-1.1-4.fc8.x86_64
ianweller AT gmail.com
mediawiki-HNP-1.1.2-1.fc8.noarch
mediawiki-ParserFunctions-1.1.1-1.20080520svn35130.fc8.noarch
mediawiki-StubManager-1.2.0-1.fc8.noarch
python-mwlib-0.8.0-2.fc8.i386
python-mwlib-0.8.0-2.fc8.ppc
python-mwlib-0.8.0-2.fc8.ppc64
python-mwlib-0.8.0-2.fc8.x86_64
jeff AT ocjtech.us
asterisk-zaptel-1.4.21.2-1.fc8.i386
asterisk-zaptel-1.4.21.2-1.fc8.ppc
asterisk-zaptel-1.4.21.2-1.fc8.ppc64
asterisk-zaptel-1.4.21.2-1.fc8.x86_64
konrad AT tylerc.org
joda-time-1.5.2-7.tzdata2008d.fc8.noarch
lxtnow AT gmail.com
gspiceui-0.9.65-2.fc8.ppc64
oliver AT linux-kernel.at
syck-php-0.61-2.fc8.i386
syck-php-0.61-2.fc8.ppc
syck-php-0.61-2.fc8.ppc64
syck-php-0.61-2.fc8.x86_64
rmeggins AT redhat.com
idm-console-framework-1.1.1-3.fc8.noarch
======================================================================
Broken packages in fedora-8-i686:
callweaver-zaptel-1.2-0.3.rc4.20070822.i386 requires libpri.so.1.0
libhugetlbfs-test-1.1-4.fc8.i386 requires libhugetlbfs = 0:1.1-4.fc8
syck-php-0.61-2.fc8.i386 requires php = 0:5.2.4
======================================================================
Broken packages in fedora-8-ppc64:
callweaver-zaptel-1.2-0.3.rc4.20070822.ppc64 requires libpri.so.1.0()(64bit)
libhugetlbfs-test-1.1-4.fc8.ppc64 requires libhugetlbfs = 0:1.1-4.fc8
syck-php-0.61-2.fc8.ppc64 requires php = 0:5.2.4
======================================================================
Broken packages in fedora-8-ppc:
callweaver-zaptel-1.2-0.3.rc4.20070822.ppc requires libpri.so.1.0
libhugetlbfs-test-1.1-4.fc8.ppc requires libhugetlbfs = 0:1.1-4.fc8
syck-php-0.61-2.fc8.ppc requires php = 0:5.2.4
======================================================================
Broken packages in fedora-8-x86_64:
1:NetworkManager-0.7.0-0.5.svn3030.fc8.i386 requires NetworkManager-glib = 1:0.7.0-0.5.svn3030.fc8
callweaver-zaptel-1.2-0.3.rc4.20070822.x86_64 requires libpri.so.1.0()(64bit)
libhugetlbfs-test-1.1-4.fc8.x86_64 requires libhugetlbfs = 0:1.1-4.fc8
syck-php-0.61-2.fc8.x86_64 requires php = 0:5.2.4
======================================================================
Broken packages in fedora-updates-8-i686:
asterisk-zaptel-1.4.21.2-1.fc8.i386 requires libpri.so.1.0
python-mwlib-0.8.0-2.fc8.i386 requires tex(latex)
======================================================================
Broken packages in fedora-updates-8-ppc64:
asterisk-zaptel-1.4.21.2-1.fc8.ppc64 requires libpri.so.1.0()(64bit)
gspiceui-0.9.65-2.fc8.ppc64 requires gwave
idm-console-framework-1.1.1-3.fc8.noarch requires java > 0:1.5.0
joda-time-1.5.2-7.tzdata2008d.fc8.noarch requires java > 0:1.5.0
mediawiki-HNP-1.1.2-1.fc8.noarch requires mediawiki >= 0:1.10
mediawiki-ParserFunctions-1.1.1-1.20080520svn35130.fc8.noarch requires mediawiki >= 0:1.10
mediawiki-SpecialInterwiki-0-0.3.20080606svn.fc8.noarch requires mediawiki < 0:1.11
mediawiki-StubManager-1.2.0-1.fc8.noarch requires mediawiki >= 0:1.10
perl-Test-AutoBuild-darcs-1.2.2-1.fc8.noarch requires darcs >= 0:1.0.0
python-mwlib-0.8.0-2.fc8.ppc64 requires tex(latex)
======================================================================
Broken packages in fedora-updates-8-ppc:
asterisk-zaptel-1.4.21.2-1.fc8.ppc requires libpri.so.1.0
idm-console-framework-1.1.1-3.fc8.noarch requires java > 0:1.5.0
joda-time-1.5.2-7.tzdata2008d.fc8.noarch requires java > 0:1.5.0
python-mwlib-0.8.0-2.fc8.ppc requires tex(latex)
======================================================================
Broken packages in fedora-updates-8-x86_64:
asterisk-zaptel-1.4.21.2-1.fc8.x86_64 requires libpri.so.1.0()(64bit)
python-mwlib-0.8.0-2.fc8.x86_64 requires tex(latex)
15 years, 9 months
Looking for someone to pull / manage Games Spin for F-10
by Hans de Goede
Hi All,
I know most of us (fedora-games-list subscribers) have grown from game
packagers to contributors also doing more "serious" Fedora work.
Still Games are fun and having good Games support in Fedora is important and I
know we are all still working hard to keep our game packages in top notch state.
Given that we have all these top notch state game packages its really a shame
that we've not done a Games Spin for F-9, and we might miss the boat for F-10
too. So I'm looking for someone to pull and coordinate the efforts needed to
get a Games Spin for F-10, as always I'm willing to help but:
http://fedoraproject.org/wiki/Features/BetterWebcamSupport
Is taking almost all my time so I have no time to take the lead on this one, so
any takers? The first task would be to fill in the details of:
https://fedoraproject.org/wiki/Features/GamesSpin
And ask for the spin to be approved.
Thanks & Regards,
Hans
15 years, 9 months
heads up: breaking ABI for libunique
by Richard Hughes
Unique in rawhide 1.0.0 breaks ABI with 0.9.4:
* Thu Jul 31 2008 Richard Hughes <rhughes(a)redhat.com> - 1.0.0-1
- Update to latest upstream version
* First stable release
* API is frozen
* D-Bus and socket backends supported
The only thing this affects in rawhide is gnome-packagekit and
gnome-power-manager, which I'll tag and chain build now. I'll update
unique in F9 in a few weeks (if there are no problems in rawhide) as
there are a couple of nice bugfixes.
Richard.
15 years, 9 months
strace trap tool needed?
by Christoph Höger
Hi,
a little tool came up to my mind today: How about the possibility to
strace a given binary upon execution and write the output to some file?
That could be easy to do (I've already roughly written the code down),
so I am not going to make a package of it.
To demonstrate my idea:
if you invoke the script like:
trap-strace /usr/bin/less -o /tmp/less.strace
after invoking less you cat /tmp/less.strace to see what was going on.
Does anyone else need such a tool?
If so, what package could collect it, and what constraints (language,
i/o, etc.) should it comply with?
15 years, 9 months
