Static system level uid/gid's reservations in Fedora/RHEL - how to handle situation?
by Ondřej Vašík
Hello,
at the moment static system level uid/gid's are handled by setup package
and /usr/share/doc/setup-*/uidgid file. There is threshold of system
uid/gid's - it's uid/gid 100. Another way to reserve "static" uid/gid
reservation is http://fedoraproject.org/wiki/PackageUserRegistry ...
usable only for Fedora and only semi-static (as base id could be easily
changed).
As we are running out of the free uid/gid's in uidgid reservation file
(no free gid's in fact at the moment), it has to be solved somehow...
there are quite often requests for uidgid reservations as it increases
security in many cases...
What's the best way to handle that situation? One possibility is to
increase the threshold of system level id's (to 200? 300?), another is
to check current reservation and clean long-term unused reservations (I
doubt there are many such cases, so it's only temporary solution). Other
could be sharing groups (as static uid's are still available), but
that's not always good solution.
Any other idea or some prefered solution?
Greetings,
Ondřej Vašík
15 years
Orphaning planet package
by Richard Dawe
Good afternoon,
I'm the current maintainer of the planet package, but I don't have to
maintain it anymore.
I am there going to orphan the planet packages.
Regards,
--
Richard Dawe [ http://homepages.nildram.co.uk/~phekda/richdawe/ ]
"Whatever you can do, or dream you can, begin it. Boldness has
genius, power, and magic in it." -- Johann Wolfgang von Goethe
15 years
libblkid and BuildRequires: e2fsprogs-devel
by Karel Zak
The libblkid has been moved from e2fsprogs to util-linux-ng.
Please, check your spec files and update BuildRequires:
- BuildRequires: e2fsprogs-devel
+ BuildRequires: libblkid-devel
if the package depends on liblkid.
Karel
--
Karel Zak <kzak(a)redhat.com>
15 years
Looking for a ucspi-ipc style tool in Fedora
by Martin Langhoff
In my neverending quest for the School Server, I am looking for a
'unix socket superserver', something akin to xinetd listening on
oldstyle unix sockets. Connecting to the right socket triggers the
superserver to spawn a (potentially memory-heavy, privileged) process
to handle the connection, with the superserver handling rate limiting,
etc.
xinetd doesn't seem to know how to do this at all. ucspi-unix and its
close cousin ucspi-ipc seem to cover the requirements but are not in
Fedora. Are there alternatives that I am overlooking?
thanks!
m
--
martin.langhoff(a)gmail.com
martin(a)laptop.org -- School Server Architect
- ask interesting questions
- don't get distracted with shiny stuff - working code first
- http://wiki.laptop.org/go/User:Martinlanghoff
15 years
Question about web applications
by Paulo Cavalcanti
Hi,
I submitted ampache (http://ampache.org/) for review, but I was told that it
could not use any external software
bundled in the code. In fact, it uses getid3, a file that seems to come from
horde (horde/Browser.php),
and some others.
According to the weekpedia (http://en.wikipedia.org/wiki/Ampache)
"Ampache has been featured in numerous online blogs and technical articles.
One of the more notable was the O'Reilly book Spidering
Hacks<http://en.wikipedia.org/wiki/Spidering_Hacks>which tested the
security of online applications. Ampache was found to be
immune to standard spidering hacks as described in the O'Reilly article, and
it has continued that trend by focusing on security during its development.
The Code Philosophy <http://ampache.org/wiki/dev:philosophy> listed on
Ampache's wiki specifically lists security as one of those most important
considerations during application development."
Does it make any sense to fiddle something that has always had security as a
prime concern?
Any comment is welcome.
Thanks.
--
Paulo Roma Cavalcanti
LCG - UFRJ
15 years
Re: Action requested: check dist tags and conditionals
by Jeremy Sanders
Bill Nottingham wrote:
> - If you're using open ended conditionals such as:
> %if 0%{?fedora} > 9
> make sure you keep in mind what will happen if %{fedora} isn't defined,
> such as in the case of a derivative distribution.
>
> - If you're building for EPEL from a unified Fedora spec file, and have
> separate %{fedora} and %{rhel} sections, make sure they do the right
> things for any potential new releases, not just %{rhel} = 4 or %{rhel} =
> 5.
Can someone suggest how I should do this? I'm not sure who put this in my
spec file!
# for eggs
%if 0%{?fedora} >= 8
BuildRequires: python-setuptools-devel
%else
BuildRequires: python-setuptools
%endif
Is it safe to drop the conditional now and always expect python-setup-devel
to be there?
Jeremy
--
http://jeremysanders.net/
15 years
F11: install freezes on Thinkpad
by Jos Vos
Hi,
I just did an F11 (final images) install on a ThinkPad T61p, where
F9 and F10 were installing fine.
Last time I looked the progress bar was at about 75%. When I looked
10 minutes later, the screen was black, the system was still on, but
I could only do a hard reset and the install was not completed (at
least my /boot partition did not contain the bootloader as requested).
It was not a power issue or so (system was not running on battery).
Any suggestions?
I still have the partly installed partitions (systems also contains
a working F9 and F10).
--
-- Jos Vos <jos(a)xos.nl>
-- X/OS Experts in Open Systems BV | Phone: +31 20 6938364
-- Amsterdam, The Netherlands | Fax: +31 20 6948204
15 years
KPackageKit fail
by Valent Turkovic
I'm testing Rawhide with latest updates and KPackageKit fails to do
updates, I get this error log:
http://fpaste.org/paste/13851
It is works for you haven't tested it please do, if it works for you
then ignore this message, if not then reply if you need some more
feedback from me and I will open a new bug report then.
Cheers
--
http://kernelreloaded.blog385.com/
linux, blog, anime, spirituality, windsurf, wireless
registered as user #367004 with the Linux Counter, http://counter.li.org.
ICQ: 2125241, Skype: valent.turkovic
15 years
Rawhide moving on to Fedora 12 content
by Jesse Keating
I've made the switch tonight so that rawhide will be Fedora 12 content.
This will cause a huge number of updates, if the compose actually
finishes, and will finish quite late.
For the next few days, attempts to use mirror manager for the Fedora 11
repo will fail. This is something we hope to fix at the Fedora Activity
Day next week.
Thanks for putting up with the delays as we try to get Fedora 11 out the
door!
--
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating
_______________________________________________
Fedora-devel-announce mailing list
Fedora-devel-announce(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-devel-announce
15 years
