July 2010 - triage - Fedora Mailing-Lists

[Bug 459530] Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Jan Kaluža <jkaluza(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed In Version| |mailman-2.1.13-4.fc14 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Jan Kaluža <jkaluza(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |CLOSED Resolution| |RAWHIDE --- Comment #19 from Jan Kaluža <jkaluza(a)redhat.com> 2010-07-13 06:12:04 EDT --- This issue should be fixed in rawhide in mailman-2.1.13-4.fc14 as I've described in Comment #18. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 --- Comment #18 from Jan Kaluža <jkaluza(a)redhat.com> 2010-07-13 02:34:26 EDT --- There is no active proposal yet, I wanted to start with public bug first. I was thinking about this bug more and after discussion on #fedora-devel I think another solution would be to have Mailman preconfigured for httpd (which is also the current state, because it installs httpd config file and "Require:" httpd, so it would be logical to set that directory owner to "apache" group). However, there's no mention that packages should be preconfigured only for httpd anywhere. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Ondrej Vasik <ovasik(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flag|needinfo?(hpa(a)zytor.com) | -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Tomas Hoger <thoger(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|security | --- Comment #17 from Tomas Hoger <thoger(a)redhat.com> 2010-07-12 10:19:25 EDT --- (In reply to comment #14) > I'm not sure if I understand it well, but can't it be fixed by changing > "private" directory owner to http server and change mode to o-x? Yes, this approach should be mentioned above, with possible issues pointed out. (In reply to comment #16) > I plan to add new group (probably "www-data", because that's what Debian uses) > which should be used by all web-servers in Fedora. Is there any active proposal to switch all web servers in Fedora to use single common non-privileged user? > However, It would be easier to achieve it if we make this bug public. Do you > agree with it? Agree this is better made public for further discussion. Issue is already public via upstream bug report. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Ondrej Vasik <ovasik(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords|Security | Summary|Security: Mailman private |Mailman private archives |archives are available to |are available to all local |all local users |users -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Security: Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Jan Kaluža <jkaluza(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flag| |needinfo?(hpa(a)zytor.com) --- Comment #16 from Jan Kaluža <jkaluza(a)redhat.com> 2010-07-12 08:28:31 EDT --- I plan to add new group (probably "www-data", because that's what Debian uses) which should be used by all web-servers in Fedora. However, It would be easier to achieve it if we make this bug public. Do you agree with it? -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 459530] Security: Mailman private archives are available to all local users

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=459530 Jan Kaluža <jkaluza(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |613607 -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 9 months

1
0
0 / 0

[Bug 246325] need LANGUAGE settings for translation fallbacks

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=246325 Bill Nottingham <notting(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |caillon(a)redhat.com, | |notting(a)redhat.com Component|distribution |iso-codes AssignedTo|notting(a)redhat.com |caillon(a)redhat.com QAContact|notting(a)redhat.com |extras-qa(a)fedoraproject.org --- Comment #18 from Bill Nottingham <notting(a)redhat.com> 2010-07-09 14:01:00 EDT --- This is something that spreads deeper than just a few packages, unfortunately. What we ask when installing is what *language* you want, not *where* you are. Given that, there's no way to specifically pick what the proper fallback would be. Even if you're operating on the language + timezone to attempt to auto-determine the country, and therefore the fallback language list, you can't do it reliably. French + CET could land you in France, Switzerland, Belgium, or even Algeria, all of which would have vastly different lists of fallback languages. In any case, the first step would be to generate these lists for a particular country. Assigning to iso-codes, although I can see it ending up in glibc-common somewhere. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 10 months

1
0
0 / 0

[Bug 246325] need LANGUAGE settings for translation fallbacks

by Red Hat Bugzilla

Please do not reply directly to this email. All additional comments should be made in the comments box of this bug. https://bugzilla.redhat.com/show_bug.cgi?id=246325 Ondrej Vasik <ovasik(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jkeating(a)redhat.com Component|basesystem |distribution AssignedTo|ovasik(a)redhat.com |notting(a)redhat.com QAContact|extras-qa(a)fedoraproject.org |notting(a)redhat.com --- Comment #17 from Ondrej Vasik <ovasik(a)redhat.com> 2010-07-09 10:16:05 EDT --- Basesystem is definitely wrong. I'm not sure what is the right component - as this is more RFE than bug report. Reassigning to distribution. If you find something better, feel free to reassign it there. -- Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

13 years, 10 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

triage July 2010