Expanding the list of "Hardened Packages"
by Dhiru Kholia
Hi,
This proposal was originally at https://fedorahosted.org/fesco/ticket/1104
(mitr asked me to move the discussion to fedora-devel to get more
attention and feedback)
...
http://fedoraproject.org/wiki/Hardened_Packages page mentions
that "FESCo requires some packages to use PIE and relro hardening by
default."
It would be great if this list could be expanded to include even more
packages which are at comparatively more risk of being exploited (locally
or remotely).
Such packages will typically include various system daemons, network
daemons and network enabled applications.
Lot of network daemons are already using PIE and RELRO (e.g. httpd,
MariaDB). So a natural question is why packages in same "network
daemons" class like PostgreSQL, Dovecot and MongoDB aren't being
hardened?
Some of the ways to implement this proposal are,
1. Hardening flags should be turned on (by default) for all packages
which are at comparatively more risk of being exploited or which meet
some well-defined criteria (suggestions welcome).
"Packaging Guidelines" say that "Other packages may enable the flags at
the maintainer's discretion."
Thinking from a security perspective, I find "Hardening flags can only
be disabled for other packages at the maintainer's discretion provided
enough justification is given to FESCo" to be more appropriate.
2. An alternate approach is to come up with an expanded list of packages
which should be hardened.
Any feedback is welcome!
--
Dhiru
9 years, 9 months
[ACTION REQUIRED] Retiring packages for Fedora 21 v3
by Till Maas
The following packages are orphaned or did not build for two
releases and will be retired when Fedora (F21) is branched, unless someone
adopts them. If you know for sure that the package should be retired, please do
so now with a proper reason:
https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life
According to https://fedoraproject.org/wiki/Schedule branching will
occur not earlier than 2014-07-08 (this is in *two* weeks). The packages
will be retired shortly before.
Note: If you received this mail directly you (co)maintain one of the affected
packages or a package that depends on one.
Package (co)maintainers
===========================================================================
NearTree tmatsuu
SOAPpy orphan, pingou
SteGUI orphan, pingou
aeolus-configure orphan, clalance, jeckersb, mmorsi,
slinabery
ale orphan, silfreed
alliance chitlesh, tnorth
barry orphan, gnat, vicodan
bitbake ixs
blktap ke4qqq
cbmc orphan, shakthimaan
cgnslib orphan, chitlesh
clutter-gtkmm orphan, rhl
cx18-firmware orphan, athimm
dee-qt orphan, jreznik
drwright caillon
eclipse-cmakeed orphan, swagiaal
emacs-common-muse orphan
emacs-identica-mode orphan, shakthimaan
eqntott orphan, chitlesh
espresso-ab orphan, chitlesh
fprint_demo orphan, pingou
freetalk orphan, rishi
fuse-smb szpak
g-wrap laxathom
gdome2 orphan, sundaram
ghc-chalmers-lava2000 orphan, chitlesh
ghemical orphan, tolland
gnome-shell-theme-elementary orphan, eldermarco
gnomeradio orphan, itamarjp, roma
guile-lib laxathom
ha-jdbc orphan
hdrprep orphan, silfreed
jbosscache-support orphan, arg
jbrout orphan
jcharts orphan
jdbm orphan
jgroups212 orphan, arg
kannel thias, cicku, linuxthomass
libghemical orphan
liboglappth orphan
minbar izhar, hicham
mopac7 orphan
mozilla-firetray hicham
mpqc orphan
mule orphan
nagios-plugins-check_sip orphan
nesc orphan, chitlesh
netatalk orphan, fkocina
netty31 orphan
nomnom orphan
nvclock orphan
obexfs orphan, itamarjp
openstack-savanna orphan, matt
perl-NOCpulse-SetID orphan
perl-NOCpulse-Utils orphan, perl-sig
piccolo2d orphan, akurtakov
pidgin-rhythmbox orphan, nosnilmot
pion-net orphan
pp3 mmahut
proxyknife rishi
python-django-savanna orphan, matt
python-savannaclient orphan, jruzicka, matt
python-setuptools_trial orphan
python-webdav-library orphan
raidutils orphan, itamarjp
rats smilner, rmonk
redet orphan, rishi
redet-doc orphan, rishi
rinputd orphan
savanna-image-elements orphan, jpeeler, matt
spacewalk-admin orphan
spacewalk-branding orphan
tinyca2 orphan
umlgraph orphan, fabiand
unittest orphan
vdradmin-am orphan
verbiste icon
wacomexpresskeys orphan, arozansk
xorg-x11-drv-apm orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-cirrus orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-glint orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-i128 orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-i740 orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-mach64 orphan, glisse, whot
xorg-x11-drv-mga orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-neomagic orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-r128 orphan, glisse, whot
xorg-x11-drv-rendition orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-s3virge orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-savage orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-siliconmotion orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-sis orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-tdfx orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
xorg-x11-drv-trident orphan, airlied, ajax, alexl, caillon,
caolanm, glisse, hadess, johnp, mbarnes,
rhughes, rstrode, ssp, whot, xiphmont
zikula ke4qqq
The following packages require above mentioned packages:
Depending on: NearTree
rasmol (maintained by: krege)
rasmol-2.7.5.2-3.fc21.i686 requires libCNearTree.so.5
rasmol-2.7.5.2-3.fc21.src requires NearTree-devel = 3.1.1-4.fc18
rasmol-gtk-2.7.5.2-3.fc21.i686 requires libCNearTree.so.5
Depending on: SOAPpy
python-twisted-web (maintained by: thomasvs, jsteffan, thias)
python-twisted-web-12.2.0-4.fc21.i686 requires SOAPpy = 0.11.6-18.fc21
pytrainer (maintained by: bsjones, silfreed)
pytrainer-1.9.1-6.fc21.noarch requires SOAPpy = 0.11.6-18.fc21
Depending on: alliance
pharosc (maintained by: chitlesh)
pharosc-alliance-8.3-9.fc21.noarch requires alliance = 5.0-35.20090901snap.fc18
Depending on: guile-lib
coot (maintained by: timfenn)
coot-0.7.2-2.fc21.src requires guile-lib = 0.1.6-5.fc18
Depending on: ha-jdbc
eucalyptus (maintained by: gholms, agk, arg)
eucalyptus-3.3.0-0.5.20130408git32052445.fc20.src requires ha-jdbc = 2.0.16-0.8.rc1.fc21
eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires ha-jdbc = 2.0.16-0.8.rc1.fc21
Depending on: jbosscache-support
hibernate3 (maintained by: gil, jhernand, msrb)
hibernate3-3.6.10-14.fc21.src requires jbosscache-common-parent = 1.6-8.fc21
hibernate3-jbosscache-3.6.10-14.fc21.noarch requires mvn(org.jboss.cache:jbosscache-core) = ${jbosscache-core-version}
hibernate3-ehcache-3.6.10-14.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
jbosscache-core (maintained by: msrb, arg, mizdebsk, msimacek)
jbosscache-core-3.2.8-10.fc21.src requires jbosscache-common-parent = 1.6-8.fc21
ehcache-core (maintained by: gil, java-sig)
ehcache-core-2.6.7-5.fc21.noarch requires hibernate3 = 3.6.10-14.fc21
ehcache-core-2.6.7-5.fc21.src requires hibernate3 = 3.6.10-14.fc21
eucalyptus (maintained by: gholms, agk, arg)
eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires hibernate3 = 3.6.10-14.fc21, hibernate3-ehcache = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21, hibernate3-jbosscache = 3.6.10-14.fc21, hibernate3-proxool = 3.6.10-14.fc21, springframework-context-support = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21
jasperreports (maintained by: gil, java-sig)
jasperreports-4.0.2-10.fc21.src requires hibernate3 = 3.6.10-14.fc21
jipijapa (maintained by: gil, java-sig)
jipijapa-1.0.0-0.6.CR1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21
oat (maintained by: gwei3)
oat-1.6.0-13.fc21.src requires hibernate3 = 3.6.10-14.fc21
oat-appraiser-1.6.0-13.fc21.i686 requires hibernate3 = 3.6.10-14.fc21
oat-client-1.6.0-13.fc21.i686 requires hibernate3 = 3.6.10-14.fc21
picketbox (maintained by: ricardo, goldmann)
picketbox-4.0.21-0.1.Beta1.fc21.noarch requires mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final
picketbox-4.0.21-0.1.Beta1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21
springframework (maintained by: jhernand, arg, gil, msrb)
springframework-3.2.6-3.fc21.src requires mvn(org.hibernate:hibernate-core:3) = 3.6.10.Final, mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final
springframework-orm-3.2.6-3.fc21.noarch requires mvn(org.hibernate:hibernate-core:3) = 3.6.10.Final, mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final
springframework-context-support-3.2.6-3.fc21.noarch requires mvn(jasperreports:jasperreports) = 4.0.2, mvn(net.sf.ehcache:ehcache-core) = 2.6.7
springframework-webmvc-3.2.6-3.fc21.noarch requires mvn(jasperreports:jasperreports) = 4.0.2
springframework-batch (maintained by: gil, java-sig, msrb)
springframework-batch-2.1.9-1.fc21.noarch requires mvn(org.hibernate:hibernate-core:3) = 3.6.10.Final, mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final
springframework-batch-2.1.9-1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21
wildfly (maintained by: goldmann)
wildfly-8.1.0-1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21
eclipse-jbosstools (maintained by: galileo, goldmann)
eclipse-jbosstools-4.1.1-2.fc21.src requires wildfly = 8.1.0-1.fc21
eclipse-jbosstools-as-4.1.1-2.fc21.noarch requires wildfly = 8.1.0-1.fc21
jenkins (maintained by: msrb, java-sig)
jenkins-webapp-1.557-14.fc21.noarch requires jenkins-instance-identity = 1.3-4.fc21, jenkins-ssh-cli-auth = 1.2-4.fc21, jenkins-sshd = 1.6-4.fc21, spring-ldap = 1.3.1-9.fc21, springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-batch = 2.1.9-1.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-expression = 3.2.6-3.fc21, springframework-jdbc = 3.2.6-3.fc21, springframework-security = 3.1.6-2.fc21, springframework-tx = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21, springframework-webmvc = 3.2.6-3.fc21
jenkins-core-1.557-14.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE
spring-ldap (maintained by: jhernand, gil, msrb)
spring-ldap-1.3.1-9.fc21.noarch requires mvn(org.springframework.batch:spring-batch-core) = 2.1.9.RELEASE, mvn(org.springframework.batch:spring-batch-infrastructure) = 2.1.9.RELEASE
spring-ldap-1.3.1-9.fc21.src requires mvn(org.springframework.batch:spring-batch-core) = 2.1.9.RELEASE, mvn(org.springframework.batch:spring-batch-infrastructure) = 2.1.9.RELEASE
ambari (maintained by: pmackinn, java-sig)
ambari-server-1.5.1-2.fc21.noarch requires mvn(org.springframework.ldap:spring-ldap-core) = 1.3.1.RELEASE, mvn(org.springframework.security:spring-security-config) = 3.1.6.RELEASE, mvn(org.springframework.security:spring-security-core) = 3.1.6.RELEASE, mvn(org.springframework.security:spring-security-ldap) = 3.1.6.RELEASE, mvn(org.springframework.security:spring-security-web) = 3.1.6.RELEASE
springframework-security (maintained by: gil, java-sig, msrb)
springframework-security-3.1.6-2.fc21.noarch requires mvn(org.springframework.ldap:spring-ldap-core) = 1.3.1.RELEASE
springframework-security-3.1.6-2.fc21.src requires mvn(org.springframework.ldap:spring-ldap-core) = 1.3.1.RELEASE
jenkins-credentials-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek)
jenkins-credentials-plugin-1.10-3.fc21.src requires mvn(org.jenkins-ci.main:jenkins-core) = 1.557, mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557
jenkins-instance-identity (maintained by: msrb, java-sig)
jenkins-instance-identity-1.3-4.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557
jenkins-mailer-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek)
jenkins-mailer-plugin-1.8-2.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557
jenkins-ssh-cli-auth (maintained by: msrb, java-sig, mizdebsk, msimacek)
jenkins-ssh-cli-auth-1.2-4.fc21.src requires mvn(org.jenkins-ci.main:jenkins-core) = 1.557
jenkins-ssh-credentials-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek)
jenkins-ssh-credentials-plugin-1.6.1-2.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557
jenkins-ssh-slaves-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek)
jenkins-ssh-slaves-plugin-1.6-2.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557
jenkins-sshd (maintained by: msrb, java-sig, mizdebsk, msimacek)
jenkins-sshd-1.6-4.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557
acegisecurity (maintained by: msrb, java-sig, mizdebsk, msimacek)
acegisecurity-1.0.7-3.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-test) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE
acegisecurity-1.0.7-3.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-test) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE
activemq (maintained by: skottler, arg, java-sig, tdawson)
activemq-5.6.0-9.fc21.src requires springframework-jms = 3.2.6-3.fc21
activemq-core-5.6.0-9.fc21.noarch requires mvn(org.springframework:spring-context) = 3.2.6.RELEASE
cas-client (maintained by: gil, java-sig)
cas-client-3.2.1-5.fc21.noarch requires springframework-beans = 3.2.6-3.fc21
cas-client-3.2.1-5.fc21.src requires springframework = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21
cxf (maintained by: goldmann)
cxf-2.7.5-3.fc20.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE
cxf-2.7.5-3.fc20.src requires springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-jms = 3.2.6-3.fc21, springframework-tx = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21, springframework-webmvc = 3.2.6-3.fc21
cxf-api-2.7.5-3.fc20.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE
cxf-rt-2.7.5-3.fc20.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jms) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE
cxf-tools-2.7.5-3.fc20.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE
gemini-blueprint (maintained by: gil, java-sig)
gemini-blueprint-1.0.2-7.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE
gemini-blueprint-1.0.2-7.fc21.src requires springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-context-support = 3.2.6-3.fc21
google-guice (maintained by: mizdebsk, java-sig, msimacek, msrb)
google-guice-3.2.2-1.fc21.src requires springframework-beans = 3.2.6-3.fc21
jdbi (maintained by: gil, java-sig)
jdbi-2.49-3.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE
jdbi-2.49-3.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE
jersey (maintained by: gil, java-sig)
jersey-1.17.1-11.fc21.src requires springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21
jersey-contribs-1.17.1-11.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE
jetty (maintained by: mizdebsk, java-sig, kdaniel, msimacek, msrb, overholt)
jetty-9.2.1-1.fc21.src requires springframework-beans = 3.2.6-3.fc21
jetty-spring-9.2.1-1.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE
jsonic (maintained by: gil, java-sig)
jsonic-1.3.0-4.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE
jsonic-1.3.0-4.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE
liquibase (maintained by: dgoodwin, awood, jmrodri)
liquibase-3.1.1-2.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE
liquibase-3.1.1-2.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE
log4j (maintained by: mizdebsk, devrim, java-sig, msimacek, msrb)
log4j-2.0-0.3.rc1.fc21.src requires mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-test) = 3.2.6.RELEASE
xbean (maintained by: mizdebsk, java-sig, kdaniel, msimacek, msrb)
maven-xbean-plugin-3.17-2.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE
xbean-3.17-2.fc21.src requires springframework = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21
xbean-spring-3.17-2.fc21.noarch requires mvn(org.springframework:spring-web) = 3.2.6.RELEASE
openid4java (maintained by: gil, java-sig, msrb)
openid4java-0.9.8-5.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE
openid4java-0.9.8-5.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE
opensaml-java (maintained by: goldmann)
opensaml-java-2.5.3-7.fc21.src requires springframework = 3.2.6-3.fc21
resteasy (maintained by: vakwetu, edewata, goldmann, jhernand, weli)
resteasy-3.0.6-2.fc21.noarch requires mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE
resteasy-3.0.6-2.fc21.src requires springframework-webmvc = 3.2.6-3.fc21
restlet-jse (maintained by: gil, java-sig)
restlet-jse-2.1.4-4.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-expression) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE
restlet-jse-2.1.4-4.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-expression) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE
snakeyaml (maintained by: jcapik, java-sig, mizdebsk, mmorsi, msrb)
snakeyaml-1.13-3.fc21.src requires mvn(org.springframework:spring-core) = 3.2.6.RELEASE
springframework-retry (maintained by: msrb, java-sig, mizdebsk, msimacek)
springframework-retry-1.1.0-1.fc21.noarch requires mvn(org.springframework:spring-context) = 3.2.6.RELEASE
springframework-retry-1.1.0-1.fc21.src requires mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE
springframework-ws (maintained by: gil, java-sig)
springframework-ws-2.1.1-3.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jms) = 3.2.6.RELEASE, mvn(org.springframework:spring-oxm) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE
springframework-ws-2.1.1-3.fc21.src requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jms) = 3.2.6.RELEASE, mvn(org.springframework:spring-oxm) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE
spymemcached (maintained by: gil, java-sig)
spymemcached-2.9.1-3.fc21.noarch requires springframework-beans = 3.2.6-3.fc21
spymemcached-2.9.1-3.fc21.src requires springframework-beans = 3.2.6-3.fc21
ironjacamar (maintained by: ricardo, goldmann)
ironjacamar-1.1.3-2.fc21.noarch requires picketbox = 4.0.21-0.1.Beta1.fc21
ironjacamar-1.1.3-2.fc21.src requires picketbox = 4.0.21-0.1.Beta1.fc21
jboss-negotiation (maintained by: goldmann)
jboss-negotiation-2.2.7-1.Final.fc21.noarch requires mvn(org.picketbox:picketbox) = 4.0.20.Final
jboss-negotiation-2.2.7-1.Final.fc21.src requires picketbox = 4.0.21-0.1.Beta1.fc21
jbossws-cxf (maintained by: goldmann)
jbossws-cxf-4.2.0-2.fc21.src requires picketbox = 4.0.21-0.1.Beta1.fc21
hibernate (maintained by: gil, java-sig)
hibernate-4.3.5-2.fc21.src requires ehcache-core = 2.6.7-5.fc21
hibernate-ehcache-4.3.5-2.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
littleproxy (maintained by: gil, java-sig)
littleproxy-0.4-8.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
littleproxy-0.4-8.fc21.src requires ehcache-core = 2.6.7-5.fc21
metrics (maintained by: gil, java-sig)
metrics-3.0.1-3.fc21.src requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
metrics-ehcache-3.0.1-3.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
thredds (maintained by: gil, java-sig)
netcdf-java-4.3.19-5.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
thredds-4.3.19-5.fc21.src requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7
Depending on: jgroups212
eucalyptus (maintained by: gholms, agk, arg)
eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires jgroups212 = 2.12.3-8.fc21
Depending on: mule
eucalyptus (maintained by: gholms, agk, arg)
eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires mule-module-builders = 2.0.2.20080813-11.fc21, mule-module-client = 2.0.2.20080813-11.fc21, mule-module-management = 2.0.2.20080813-11.fc21, mule-module-spring-config = 2.0.2.20080813-11.fc21, mule-module-xml = 2.0.2.20080813-11.fc21, mule-transport-vm = 2.0.2.20080813-11.fc21
Depending on: netty31
eucalyptus (maintained by: gholms, agk, arg)
eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires netty31 = 3.1.5-8.fc21
Depending on: pion-net
fatrat (maintained by: cicku)
fatrat-1.2.0-0.20.beta2.fc21.i686 requires libpion-common-4.0.so, libpion-net-4.0.so
fatrat-1.2.0-0.20.beta2.fc21.src requires pion-net-devel = 4.0.9-13.fc21
fatrat-subtitlesearch (maintained by: cicku)
fatrat-subtitlesearch-1.2.0-0.6.beta1.fc21.i686 requires fatrat(x86-32) = 1:1.2.0-0.20.beta2.fc21
fatrat-subtitlesearch-1.2.0-0.6.beta1.fc21.src requires fatrat-devel = 1:1.2.0-0.20.beta2.fc21
Depending on: python-setuptools_trial
python-zfec (maintained by: cicku)
python-zfec-1.4.22-6.fc20.src requires python-setuptools_trial = 0.5.12-7.fc21
Depending on: spacewalk-admin
spacewalk-backend (maintained by: msuchy)
spacewalk-backend-tools-2.0.3-2.fc20.noarch requires spacewalk-admin = 2.1.2-2.fc21, spacewalk-certs-tools = 2.1.6-2.fc21
rhnpush (maintained by: msuchy, mzazrive)
rhnpush-5.5.79-1.fc21.noarch requires spacewalk-backend-libs = 2.0.3-2.fc20
rhnpush-5.5.79-1.fc21.src requires spacewalk-backend-libs = 2.0.3-2.fc20
spacewalk-certs-tools (maintained by: msuchy)
spacewalk-certs-tools-2.1.6-2.fc21.noarch requires spacewalk-backend-libs = 2.0.3-2.fc20
Depending on: spacewalk-branding
spacewalk-setup-jabberd (maintained by: msuchy)
spacewalk-setup-jabberd-2.0.1-3.fc21.noarch requires /usr/share/spacewalk
Depending on: zikula
zikula-module-News (maintained by: ke4qqq)
zikula-module-News-2.4.1-9.fc21.noarch requires zikula = 1.2.3-5.fc19
Affected (co)maintainers
agk: jbosscache-support, mule, netty31, ha-jdbc, jgroups212
airlied: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
ajax: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
akurtakov: piccolo2d
alexl: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
arg: jbosscache-support, mule, netty31, ha-jdbc, jgroups212
arozansk: wacomexpresskeys
athimm: cx18-firmware
awood: jbosscache-support
bsjones: SOAPpy
caillon: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, drwright, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
caolanm: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
chitlesh: eqntott, alliance, cgnslib, espresso-ab, ghc-chalmers-lava2000, nesc
cicku: kannel, pion-net, python-setuptools_trial
clalance: aeolus-configure
devrim: jbosscache-support
dgoodwin: jbosscache-support
edewata: jbosscache-support
eldermarco: gnome-shell-theme-elementary
fabiand: umlgraph
fkocina: netatalk
galileo: jbosscache-support
gholms: jbosscache-support, mule, netty31, ha-jdbc, jgroups212
gil: jbosscache-support
glisse: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-trident, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-tdfx, xorg-x11-drv-neomagic, xorg-x11-drv-r128, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-siliconmotion, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-mach64, xorg-x11-drv-i128, xorg-x11-drv-mga
gnat: barry
goldmann: jbosscache-support
gwei3: jbosscache-support
hadess: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
hicham: mozilla-firetray, minbar
icon: verbiste
itamarjp: gnomeradio, raidutils, obexfs
ixs: bitbake
izhar: minbar
java-sig: jbosscache-support
jcapik: jbosscache-support
jeckersb: aeolus-configure
jhernand: jbosscache-support
jmrodri: jbosscache-support
johnp: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
jpeeler: savanna-image-elements
jreznik: dee-qt
jruzicka: python-savannaclient
jsteffan: SOAPpy
kdaniel: jbosscache-support
ke4qqq: zikula, blktap
krege: NearTree
laxathom: g-wrap, guile-lib
linuxthomass: kannel
matt: python-django-savanna, python-savannaclient, openstack-savanna, savanna-image-elements
mbarnes: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
mizdebsk: jbosscache-support
mmahut: pp3
mmorsi: jbosscache-support, aeolus-configure
msimacek: jbosscache-support
msrb: jbosscache-support
msuchy: spacewalk-admin, spacewalk-branding
mzazrive: spacewalk-admin
nosnilmot: pidgin-rhythmbox
overholt: jbosscache-support
perl-sig: perl-NOCpulse-Utils
pingou: fprint_demo, SteGUI, SOAPpy
pmackinn: jbosscache-support
rhl: clutter-gtkmm
rhughes: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
ricardo: jbosscache-support
rishi: freetalk, proxyknife, redet-doc, redet
rmonk: rats
roma: gnomeradio
rstrode: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
shakthimaan: cbmc, emacs-identica-mode
silfreed: ale, hdrprep, SOAPpy
skottler: jbosscache-support
slinabery: aeolus-configure
smilner: rats
ssp: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
sundaram: gdome2
swagiaal: eclipse-cmakeed
szpak: fuse-smb
tdawson: jbosscache-support
thias: kannel, SOAPpy
thomasvs: SOAPpy
timfenn: guile-lib
tmatsuu: NearTree
tnorth: alliance
tolland: ghemical
vakwetu: jbosscache-support
vicodan: barry
weli: jbosscache-support
whot: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-trident, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-tdfx, xorg-x11-drv-neomagic, xorg-x11-drv-r128, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-siliconmotion, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-mach64, xorg-x11-drv-i128, xorg-x11-drv-mga
xiphmont: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga
The script creating this output is run and developed by Fedora
Release Engineering. Please report issues at its trac instance:
https://fedorahosted.org/rel-eng/
The sources of this script can be found at:
https://git.fedorahosted.org/cgit/releng/tree/scripts/find_unblocked_orph...
_______________________________________________
devel-announce mailing list
devel-announce(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel-announce
9 years, 9 months
FreeRDP bump in rawhide
by Simone Caronni
Hello,
I'm about to bump FreeRDP in Rawhide to the newly released version 1.2.0
beta 1. This allows us to build Remmina that is currently FTBFS.
Of all the packages that are using FreeRDP, only Weston is the one for
which I don't have any commit access, so it needs to be rebuilt. I've
tested a mock build of it on my system and it builds fine against it (only
tested that the package rebuilds fine).
The libwinpr subpackage has underwent a major restructuring and now
provides its separate set of CMake / include files so it has been changed
accordingly, but as far as I know nothing else except FreeRDP itself is
using it.
Regards,
--Simone
--
You cannot discover new oceans unless you have the courage to lose sight of
the shore (R. W. Emerson).
http://xkcd.com/229/
http://negativo17.org/
9 years, 9 months
Attention: rpm 4.12-alpha build bug
by Panu Matilainen
Executive summary: a bug in package generation of rpm 4.12, presumably
related to hardlinked files has been spotted. I've untagged 4.12 while
we're investigating, some packages might need a rebuild because of this.
If you haven't built packages for rawhide today, you can probably stop
reading.
e2fsprogs-1.42.10-4.fc21 (builder/owner cc'd) is known to be slightly
broken because of this and I've untagged that as well, a rebuild will be
needed. Other packages (less than two dozen or so) *might* be affected
if you've built something for rawhide in the last four hours or so, but
the exact issue is not known yet so dont know...
The manifests in files missing from package payload, which rpm 4.12 will
actually notice during install:
[root@localhost rpm]# rpm -Uvh --nodeps --noscripts --root /tmp/testroot
~pmatilai/Downloads/e2fsprogs-1.42.10-4.fc21.x86_64.rpm
Preparing... #################################
[100%]
Updating / installing...
1:e2fsprogs-1.42.10-4.fc21 #################################
[100%]
error: unpacking of archive failed: cpio: Missing file(s)
error: e2fsprogs-1.42.10-4.fc21.x86_64: install failed
Older rpm versions will merrily install this package, but report
breakage on verify:
[root@localhost rpm-4.11.x]# ./rpm -Uvh --nodeps --noscripts --root
/tmp/testroot ~pmatilai/Downloads/e2fsprogs-1.42.10-4.fc21.x86_64.rpm
Preparing... #################################
[100%]
Updating / installing...
1:e2fsprogs-1.42.10-4.fc21 #################################
[100%]
[root@localhost rpm-4.11.x]# ./rpm -Va --nodeps --root /tmp/testroot/
missing /usr/sbin/e2label
missing /usr/sbin/tune2fs
[root@localhost rpm-4.11.x]#
This is bug in package generation so any thusly affected packages need
to be rebuilt.
- Panu -
9 years, 9 months
self-introduction: Jamie Duncan
by Jamie Duncan
Hi, Everyone.
My name is Jamie Duncan. I work in the Strategic Customer team at Red Hat. One of the big things that our more security-minded (and some of the vaguely paranoid) users ask for is an easier way to obfuscate data in an sosreport before they send it out to Red Hat Support.
There have been several failed attempts at this over the years, and soscleaner ( https://github.com/jduncan-rva/soscleaner/ ) is another attempt at it. It's written pythong (2.x), and acts as a secondary tool to process sosreports after they have been created. After several talks with the sosreport developers and many talks with customers, this seems to be the work flow that they desire.
I've submitted soscleaner to Fedora under https://bugzilla.redhat.com/show_bug.cgi?id=1104746 and am looking for a sponsor.
In my spare time I hang out in and around Richmond, VA and spend most of my non-working hours with my wife working on our old 1927 bungalow.
Have a good day, everyone.
Cheers,
Jamie Duncan, RHCE
Senior Technical Account Manager
Red Hat, Inc.
jduncan(a)redhat.com
w-804.343.6086
c-804.307.7079
tech support-888.GO.REDHAT
9 years, 9 months
default local DNS caching name server
by Chuck Anderson
Back in 2012 there was a discussion about having Fedora default to
using a local DNS caching name server [1]:
[1] http://comments.gmane.org/gmane.linux.redhat.fedora.devel/166018
I think this needs to be revisited. While DNSSEC support has
historically been a driving factor for implementing this, there is an
even more fundamental need due to the poor performance of the system
in case the first listed nameserver in /etc/resolv.conf fails for some
reason. It is shameful that Linux systems and applications in general
still, after 20+ years, can't perform adequately after a primary DNS
server failure. The stub resolver in glibc which uses
/etc/resolv.conf can decide that the first listed nameserver entry is
down, but this decision has to be made over and over in every single
process on the system that is doing DNS resolution, resulting in
repeated long application hangs/delays. We need an independent,
system-wide DNS cache, and always point resolv.conf to 127.0.0.1 to
solve this fundamental design problem with how name resolution works
on a Linux system. Windows has had a default system-wide DNS cache
for over a decade. It is about time that Linux catches up.
Yesterday, a new version of dnsmasq was released [2] that adds full
DNSSEC support and provides an alternative to unbound which
dnssec-trigger requires. There has also been great work done to solve
the NTP/DNSSEC bootstrap problem [3]. What options are currently
available in e.g. NetworkManager for using a local DNS cache and what
is the current status of this integration? Is it ready yet for
turning on by default in all Fedora products?
[2] http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2014q2/008416.html
[3] http://comments.gmane.org/gmane.comp.embedded.cerowrt.devel/2244
9 years, 9 months
[Base] The Base Design WG is looking for a new committee member!
by Phil Knirsch
Hi everyone.
As Bill Nottingham has decided to resign from the committee we now have
a free seat that we'd like to fill with another person.
In order to fill this seat i'm therefore reaching out here to Fedora
development to offer allow any applicant from the community to get in
touch with us and let us know you're interested, why you're interested,
why you think you'd be a good fit and maybe even the things you'd like
to drive or accomplish in the Base Design WG.
For more background on what the Base WG does, here our Fedora wiki:
https://fedoraproject.org/wiki/Base
In order to contact us you can either reply directly to me or join us
during our regular meetings each Friday at 15:00 UTC on #fedora-meeting.
I strongly suspect next weeks meeting will be canceled due to the US
holiday, but after that we'll be doing weekly meetings again.
Looking forward to see you there!
Thanks & regards, Phil
--
Philipp Knirsch | Tel.: +49-711-96437-470
Manager Core Services | Fax.: +49-711-96437-111
Red Hat GmbH | Email: Phil Knirsch <pknirsch(a)redhat.com>
Wankelstrasse 5 | Web: http://www.redhat.com/
D-70563 Stuttgart, Germany
9 years, 9 months
fedora-release-$PRODUCT, /etc/issue, /etc/os-release, Per-Product Configs and more!
by Stephen Gallagher
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We're getting down to the wire on Fedora 21 and we need to nail down a
few of the low-level release requirements.
First of all, I'd like to formally propose that each of the products
will have a fedora-release-$PRODUCT (and corresponding
generic-release-$PRODUCT) package. This package will meet several
needs (with magical hand-waving in this initial email).
1) All Products will add explicit Requires: to the
fedora-release-$PRODUCT package so that they may define their minimal
operating set properly. The presence or absence of this package on the
system will indicate definitively which Product (if any) is operating
here.
2) The fedora-release-$PRODUCT package (and possibly %post or systemd
snippets therein) will be responsible for the creation and maintenance
of /etc/issue, /etc/os-release and /etc/fedora-release-product (note:
there is no $ there. That's the literal name. This file will be
equivalent to /etc/fedora-release except that it will include the
Product name.
3) fedora-release-$PRODUCT will have an explicit Conflict with all
other fedora-release-$PRODUCT packages, to ensure that we do not
mix-and-match (which is a combinatorial nightmare).
Additionally, I am working on a proposal[1] for per-product configs in
the Fedora 21 timeframe which is dependent on the above. It should be
noted that this is an interim solution only; in Fedora 22 we will be
able to vastly simplify this situation with the weak dependency
support in RPM 4.12. (I was looking for a link detailing all of these
weak deps, but I cannot find one. If you know of such a document,
please reply and add it).
[1]
https://fedoraproject.org/wiki/Per-Product_Configuration_Packaging_Draft
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iEYEARECAAYFAlOxs4gACgkQeiVVYja6o6MtRACgm+fGmlErdjhBEXgTT+opxcTb
y+wAnjyidVGBrDZFrcSd6kcex38Lj0pA
=BBo7
-----END PGP SIGNATURE-----
9 years, 9 months
PostgreSQL systemd config scheme change
by Pavel Raiskup
Hello all,
there is currently not so much things to configure in PostgreSQL from
systemd's service point of view (not taking postgresql.conf into account),
concretely, we configure PGPORT and PGDATA, from which the later is
important (and often re-configured to point e.g. to some dedicated mount
point, etc.). That tells systemd's unit file where it should start
PostgreSQL server from.
What does not seem to be quite 100% OK is that, when user wants to change
PGDATA, we instruct him to make a separate service file:
$ cat /etc/systemd/system/postgresql.service
.include /usr/lib/systemd/system/postgresql.service
[Service]
Environment=PGDATA=/some/other/place/than/default
This works OK -- but the problem is that it is quite too much for just
changing one simple directory path.
What seems to be better approach is to have real configuration file, such one
for which '$ rpm -qc postgresql-server' would not be quiet. Lets say:
$ cat /etc/postgresql/postgresql
PGDATA=/some/other/place/than/default
With some additional packager's work, that allows us to do yet another
configuration easily - and that is multiple PostgreSQL running on one
single machine (on different ports or IPs). The only thing would be to
create yet another file:
$ cat /etc/postgresql/postgresql@com_example
PGDATA=/some/path/pg/com_example
PGPORT=@SOMEPORT@
$ systemctl start postgresql@com_example
Would you see something bad on that approach (please, take into account that
we would not stop supporting the old way, we just want to make future
configuration easier and straight-forward).
Pavel
9 years, 9 months