rawhide report: 20130412 changes

2013-04-12 Thread Fedora Rawhide Report
Compose started at Fri Apr 12 08:15:37 UTC 2013

Broken deps for x86_64
--
[aeolus-conductor]
aeolus-conductor-0.10.6-2.fc19.noarch requires ruby(abi) = 0:1.9.1
[amide]
amide-1.0.0-4.fc19.x86_64 requires libvolpack.so.1()(64bit)
[clementine]
clementine-1.1.1-1.fc19.x86_64 requires libprotobuf.so.7()(64bit)
clementine-1.1.1-1.fc19.x86_64 requires libimobiledevice.so.3()(64bit)
[connman]
connman-1.5-4.fc19.i686 requires libxtables.so.7
connman-1.5-4.fc19.i686 requires libgnutls.so.26(GNUTLS_1_4)
connman-1.5-4.fc19.i686 requires libgnutls.so.26
connman-1.5-4.fc19.x86_64 requires libxtables.so.7()(64bit)
connman-1.5-4.fc19.x86_64 requires libgnutls.so.26(GNUTLS_1_4)(64bit)
connman-1.5-4.fc19.x86_64 requires libgnutls.so.26()(64bit)
[deltacloud-core]
deltacloud-core-1.0.5-2.fc19.noarch requires ruby(abi) = 0:1.9.1
[dragonegg]
dragonegg-3.1-19.fc19.x86_64 requires gcc = 0:4.7.2-9.fc19
[eg]
eg-1.7.5.2-1.fc20.noarch requires perl(one)
eg-1.7.5.2-1.fc20.noarch requires perl(it)
eg-1.7.5.2-1.fc20.noarch requires perl(an)
[flowcanvas]
flowcanvas-0.7.1-8.fc18.i686 requires libgraph.so.5
flowcanvas-0.7.1-8.fc18.x86_64 requires libgraph.so.5()(64bit)
[gcc-python-plugin]
gcc-python2-debug-plugin-0.11-1.fc19.x86_64 requires gcc = 
0:4.7.2-8.fc19
gcc-python2-plugin-0.11-1.fc19.x86_64 requires gcc = 0:4.7.2-8.fc19
gcc-python3-debug-plugin-0.11-1.fc19.x86_64 requires gcc = 
0:4.7.2-8.fc19
gcc-python3-plugin-0.11-1.fc19.x86_64 requires gcc = 0:4.7.2-8.fc19
[gnome-applets]
1:gnome-applets-3.5.92-3.fc18.x86_64 requires 
libgweather-3.so.1()(64bit)
[gnome-panel]
gnome-panel-3.6.2-6.fc19.x86_64 requires 
libgnome-desktop-3.so.5()(64bit)
gnome-panel-devel-3.6.2-6.fc19.i686 requires libgnome-desktop-3.so.5
gnome-panel-devel-3.6.2-6.fc19.x86_64 requires 
libgnome-desktop-3.so.5()(64bit)
[gnome-pie]
gnome-pie-0.5.3-3.20120826git1b93e1.fc19.x86_64 requires 
libbamf3.so.0()(64bit)
[gnomint]
gnomint-1.2.1-5.fc18.x86_64 requires libgnutls.so.26(GNUTLS_2_8)(64bit)
gnomint-1.2.1-5.fc18.x86_64 requires libgnutls.so.26(GNUTLS_1_4)(64bit)
gnomint-1.2.1-5.fc18.x86_64 requires libgnutls.so.26()(64bit)
[gooddata-cl]
gooddata-cl-1.2.56-2.fc19.noarch requires gdata-java
[kawa]
1:kawa-1.11-5.fc19.x86_64 requires servlet25
[kde-settings]
kde-settings-kdm-19-17.fc20.noarch requires 
/lib/systemd/systemd-multi-seat-x
[libkolab]
php-kolab-0.4.1-3.fc19.x86_64 requires php(zend-abi) = 0:20100525-x86-64
php-kolab-0.4.1-3.fc19.x86_64 requires php(api) = 0:20100412-x86-64
[mapserver]
php-mapserver-6.0.3-9.fc19.x86_64 requires php(zend-abi) = 
0:20100525-x86-64
php-mapserver-6.0.3-9.fc19.x86_64 requires php(api) = 0:20100412-x86-64
[matreshka]
matreshka-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-amf-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-amf-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-amf-mofext-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-amf-mofext-0.3.0-3.fc19.x86_64 requires 
libgnat-4.7.so()(64bit)
matreshka-amf-ocl-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-amf-ocl-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-amf-uml-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-amf-uml-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-amf-utp-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-amf-utp-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-fastcgi-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-fastcgi-0.3.0-3.fc19.i686 requires libgnarl-4.7.so
matreshka-fastcgi-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-fastcgi-0.3.0-3.fc19.x86_64 requires libgnarl-4.7.so()(64bit)
matreshka-sql-core-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-sql-core-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-sql-postgresql-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-sql-postgresql-0.3.0-3.fc19.x86_64 requires 
libgnat-4.7.so()(64bit)
matreshka-sql-sqlite-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-sql-sqlite-0.3.0-3.fc19.x86_64 requires 
libgnat-4.7.so()(64bit)
matreshka-xml-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-xml-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
[mygui]
mygui-3.2.0-4.fc20.i686 requires libCommon.so
mygui-3.2.0-4.fc20.x86_64 requires libCommon.so()(64bit)
mygui-demos-3.2.0-4.fc20.x86_64 requires libCommon.so()(64bit)
mygui-tools-3.2.0-4.fc20.x86_64 requires 

Re: Expanding the list of Hardened Packages

2013-04-12 Thread Josh Bressers
On Thu, Apr 11, 2013 at 12:54 PM, Reindl Harald h.rei...@thelounge.net wrote:

 which is exactly the goal ASLR is desigend for


It's designed to make certain types of attacks more difficult. It
doesn't make them impossible, just much harder.

Here is an example.

When you write a security exploit, you generally have to do things
like call into system libraries to do useful things. Generally you
have a limited amount of room for your exploit's payload, so the
idea is to just leverage what the system can already do. Calling
system() would be an example of this. Now long ago, before things like
ASLR, if you had access to the binary you wanted to attack, you could
inspect the binary to see what the address of system() was. It didn't
change between runs of the binary, so I could hard code that address
into my exploit. With ASLR, every time you run the binary the address
of various system calls is now basically random (it's not exactly, but
that's an exercise for the reader to figure out). If your payload
needs to call system(), you need a way to figure out what that address
is before you can use it, the added step should make it more difficult
to exploit a problem. The technology isn't fool proof of course, but
that's a topic for another day.

Thanks.

-- 
JB
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

F-19 Branched report: 20130412 changes

2013-04-12 Thread Fedora Branched Report
Compose started at Fri Apr 12 09:15:15 UTC 2013

Broken deps for x86_64
--
[aeolus-conductor]
aeolus-conductor-0.10.6-2.fc19.noarch requires ruby(abi) = 0:1.9.1
[alexandria]
alexandria-0.6.9-4.fc19.noarch requires ruby(abi) = 0:1.9.1
[amide]
amide-1.0.0-4.fc19.x86_64 requires libvolpack.so.1()(64bit)
[clementine]
clementine-1.1.1-1.fc19.x86_64 requires libprotobuf.so.7()(64bit)
clementine-1.1.1-1.fc19.x86_64 requires libimobiledevice.so.3()(64bit)
[connman]
connman-1.5-4.fc19.i686 requires libxtables.so.7
connman-1.5-4.fc19.i686 requires libgnutls.so.26(GNUTLS_1_4)
connman-1.5-4.fc19.i686 requires libgnutls.so.26
connman-1.5-4.fc19.x86_64 requires libxtables.so.7()(64bit)
connman-1.5-4.fc19.x86_64 requires libgnutls.so.26(GNUTLS_1_4)(64bit)
connman-1.5-4.fc19.x86_64 requires libgnutls.so.26()(64bit)
[deltacloud-core]
deltacloud-core-1.0.5-2.fc19.noarch requires ruby(abi) = 0:1.9.1
[denemo]
denemo-0.9.4-0.fc18.x86_64 requires libgtksourceview-3.0.so.0()(64bit)
[dragonegg]
dragonegg-3.1-19.fc19.x86_64 requires gcc = 0:4.7.2-9.fc19
[eruby]
eruby-1.0.5-19.fc18.x86_64 requires libruby.so.1.9()(64bit)
eruby-libs-1.0.5-19.fc18.i686 requires ruby(abi) = 0:1.9.0
eruby-libs-1.0.5-19.fc18.i686 requires libruby.so.1.9
eruby-libs-1.0.5-19.fc18.x86_64 requires ruby(abi) = 0:1.9.0
eruby-libs-1.0.5-19.fc18.x86_64 requires libruby.so.1.9()(64bit)
[fawkes]
fawkes-firevision-0.5.0-5.fc19.i686 requires libjpeg.so.8(LIBJPEG_8.0)
fawkes-firevision-0.5.0-5.fc19.i686 requires libjpeg.so.8
fawkes-firevision-0.5.0-5.fc19.x86_64 requires 
libjpeg.so.8(LIBJPEG_8.0)(64bit)
fawkes-firevision-0.5.0-5.fc19.x86_64 requires libjpeg.so.8()(64bit)
fawkes-guis-0.5.0-5.fc19.i686 requires libgraph.so.5
fawkes-guis-0.5.0-5.fc19.x86_64 requires libgraph.so.5()(64bit)
fawkes-plugin-clips-0.5.0-5.fc19.i686 requires libclipsmm.so.2
fawkes-plugin-clips-0.5.0-5.fc19.x86_64 requires 
libclipsmm.so.2()(64bit)
fawkes-plugin-player-0.5.0-5.fc19.x86_64 requires 
libgeos-3.3.6.so()(64bit)
fawkes-plugin-player-0.5.0-5.fc19.x86_64 requires 
libboost_thread-mt.so.1.50.0()(64bit)
fawkes-plugin-player-0.5.0-5.fc19.x86_64 requires 
libboost_system-mt.so.1.50.0()(64bit)
fawkes-plugin-player-0.5.0-5.fc19.x86_64 requires 
libboost_signals-mt.so.1.50.0()(64bit)
fawkes-plugin-tabletop-objects-0.5.0-5.fc19.x86_64 requires 
libboost_thread-mt.so.1.50.0()(64bit)
fawkes-plugin-tabletop-objects-0.5.0-5.fc19.x86_64 requires 
libboost_system-mt.so.1.50.0()(64bit)
[flowcanvas]
flowcanvas-0.7.1-8.fc18.i686 requires libgraph.so.5
flowcanvas-0.7.1-8.fc18.x86_64 requires libgraph.so.5()(64bit)
[gcc-python-plugin]
gcc-python2-debug-plugin-0.11-1.fc19.x86_64 requires gcc = 
0:4.7.2-8.fc19
gcc-python2-plugin-0.11-1.fc19.x86_64 requires gcc = 0:4.7.2-8.fc19
gcc-python3-debug-plugin-0.11-1.fc19.x86_64 requires gcc = 
0:4.7.2-8.fc19
gcc-python3-plugin-0.11-1.fc19.x86_64 requires gcc = 0:4.7.2-8.fc19
[gdcm]
gdcm-2.0.18-6.fc18.i686 requires libpoppler.so.26
gdcm-2.0.18-6.fc18.x86_64 requires libpoppler.so.26()(64bit)
[gearbox]
gearbox-10.11-3.fc19.i686 requires libIceUtil.so.35b
gearbox-10.11-3.fc19.x86_64 requires libIceUtil.so.35b()(64bit)
[gnome-applets]
1:gnome-applets-3.5.92-3.fc18.x86_64 requires 
libgweather-3.so.1()(64bit)
[gnome-panel]
gnome-panel-3.6.2-6.fc19.x86_64 requires 
libgnome-desktop-3.so.5()(64bit)
gnome-panel-devel-3.6.2-6.fc19.i686 requires libgnome-desktop-3.so.5
gnome-panel-devel-3.6.2-6.fc19.x86_64 requires 
libgnome-desktop-3.so.5()(64bit)
[gnome-pie]
gnome-pie-0.5.3-3.20120826git1b93e1.fc19.x86_64 requires 
libbamf3.so.0()(64bit)
[gnomint]
gnomint-1.2.1-5.fc18.x86_64 requires libgnutls.so.26(GNUTLS_2_8)(64bit)
gnomint-1.2.1-5.fc18.x86_64 requires libgnutls.so.26(GNUTLS_1_4)(64bit)
gnomint-1.2.1-5.fc18.x86_64 requires libgnutls.so.26()(64bit)
[gooddata-cl]
gooddata-cl-1.2.56-2.fc19.noarch requires gdata-java
[gorm]
gorm-1.2.18-1.fc19.i686 requires libgnustep-gui.so.0.22
gorm-1.2.18-1.fc19.x86_64 requires libgnustep-gui.so.0.22()(64bit)
[kawa]
1:kawa-1.11-5.fc19.x86_64 requires servlet25
[libkolab]
php-kolab-0.4.1-3.fc19.x86_64 requires php(zend-abi) = 0:20100525-x86-64
php-kolab-0.4.1-3.fc19.x86_64 requires php(api) = 0:20100412-x86-64
[matreshka]
matreshka-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-amf-0.3.0-3.fc19.i686 requires libgnat-4.7.so
matreshka-amf-0.3.0-3.fc19.x86_64 requires libgnat-4.7.so()(64bit)
matreshka-amf-mofext-0.3.0-3.fc19.i686 

Re: Expanding the list of Hardened Packages

2013-04-12 Thread Miloslav Trmač
On Thu, Apr 11, 2013 at 7:19 PM, Richard W.M. Jones rjo...@redhat.comwrote:

 On Thu, Apr 11, 2013 at 05:19:46PM +0200, Miloslav Trmač wrote:
  With the current setup, we get mutating ASLR when compiled as PIE,

 Surely ... you get mutating ASLR only when compiled as PIE
 *and* the server process restarts itself between each connection or at
 least on a regular basis (ie. it's a forking or pre-forking server, or
 the server is started on each connection by inetd/systemd)?

Yes - actually you need an execve(); merely forking does not change address
space layout.
Mirek
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Expanding the list of Hardened Packages

2013-04-12 Thread Reindl Harald


Am 12.04.2013 13:44, schrieb Josh Bressers:
 On Thu, Apr 11, 2013 at 12:54 PM, Reindl Harald h.rei...@thelounge.net 
 wrote:

 which is exactly the goal ASLR is desigend for

 
 It's designed to make certain types of attacks more difficult. It
 doesn't make them impossible, just much harder.
 
 Here is an example.
 
 When you write a security exploit, you generally have to do things
 like call into system libraries to do useful things. Generally you
 have a limited amount of room for your exploit's payload, so the
 idea is to just leverage what the system can already do. Calling
 system() would be an example of this. Now long ago, before things like
 ASLR, if you had access to the binary you wanted to attack, you could
 inspect the binary to see what the address of system() was. It didn't
 change between runs of the binary, so I could hard code that address
 into my exploit. With ASLR, every time you run the binary the address
 of various system calls is now basically random (it's not exactly, but
 that's an exercise for the reader to figure out). If your payload
 needs to call system(), you need a way to figure out what that address
 is before you can use it, the added step should make it more difficult
 to exploit a problem. The technology isn't fool proof of course, but
 that's a topic for another day.

that is nothing new

that is the reason why any application which get input data
from the internet has to use ASLR and anything which makes
ASLR less effective has to be considered a bug

yes there is performance AND security
but in these days security first

there are so many pieces of software written these days with
no care about performance and mostly security is not the reason
for most developers wasting ressources that there is no excuse

fix the really performance bugs in code but not compensate the
overall situation with prelink and lesser security at all



signature.asc
Description: OpenPGP digital signature
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

libreswan hitting rawhide later today

2013-04-12 Thread Paul Wouters


FYI,

libreswan 3.2 will hit rawhide later today. Everyone who has openswan
installed and who update their system will automatically get migrated
to libreswan.

The configuration of openswan should be fully compatible with libreswan,
but if you run into issues, please hunt me down and complain loudly.

Paul
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Why does _hardened_build use -z, relro and not -z, relro, -z, now ?

2013-04-12 Thread Paul Wouters

On Thu, 11 Apr 2013, Björn Persson wrote:


Paul Wouters wrote:

Why does the _hardened_build macro for the spec file use -z,relro and not 
-z,relro,-z,now ?


Huh? As far as I can see _hardened_build adds -z now, not relro.
-Wl,-z,relro is supposed to be included in LDFLAGS. Or has this changed
recently?


Let me rephrase... Why is _hardened_build not using -z,relro,-z,now ?

Paul
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

any one interested in generating reports for package reviews ?

2013-04-12 Thread Rakesh Pandit
Hi,

During 2010-2011, I used to generate 15 day report for package reviews
and post it[1]. There were yearly report as well[2].

In case anyone is interested in taking it up again, feel free to do
so. Script is available at:
https://fedorahosted.org/triage/browser/scripts/bzReviewReport.py

In case you need my help in fixing anything, let me know.

Regards,

Examples:
[1] http://lists.fedoraproject.org/pipermail/devel/2011-January/147875.html
[2] http://lists.fedoraproject.org/pipermail/devel/2011-January/147730.html

--
Rakesh Pandit
https://fedoraproject.org/wiki/User:Rakesh
freedom, friends, features, first
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

tmpfiles.d packaging guidelines update requested

2013-04-12 Thread Lorenzo Dalrio
Hi,
i have found that code snippets contained in tmpfiles.d packaging
guidelines [1] lead to rpmlint error
E: hardcoded-library-path in %{_prefix}/lib/tmpfiles.d.
Could those snippets be updated to make use of correct macro %{_tmpfilesdir}?

[1] https://fedoraproject.org/wiki/Packaging:Tmpfiles.d
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: tmpfiles.d packaging guidelines update requested

2013-04-12 Thread Lorenzo Dalrio
Credits goes to Tomasz Torcz that pointed me to correct macro in a
package review he is doing for me. :)

2013/4/12 Lorenzo Dalrio lorenzo.dal...@gmail.com:
 Hi,
 i have found that code snippets contained in tmpfiles.d packaging
 guidelines [1] lead to rpmlint error
 E: hardcoded-library-path in %{_prefix}/lib/tmpfiles.d.
 Could those snippets be updated to make use of correct macro %{_tmpfilesdir}?

 [1] https://fedoraproject.org/wiki/Packaging:Tmpfiles.d
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: any one interested in generating reports for package reviews ?

2013-04-12 Thread Rahul Sundaram
On Fri, Apr 12, 2013 at 12:40 PM, Rakesh Pandit rakesh.pan...@gmail.comwrote:

 Hi,

 During 2010-2011, I used to generate 15 day report for package reviews
 and post it[1]. There were yearly report as well[2].

 In case anyone is interested in taking it up again, feel free to do
 so. Script is available at:
 https://fedorahosted.org/triage/browser/scripts/bzReviewReport.py

 In case you need my help in fixing anything, let me know.


Couldn't infrastructure team just automate this?

Rahul
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

New package group request

2013-04-12 Thread Eugene Pivnev

I propose to create QtDesktop group - for qt-only applications.

https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups?rd=PackageMaintainers/CompsXml#New_groups
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Using fedora-packager-setup behind a proxy

2013-04-12 Thread Ravindra Kumar
Hi, 

Has someone used fedora-packager-setup behind a proxy successfully? 

I keep getting network connection failures even after I specify HTTP_PROXY or 
ALL_PROXY env vars. 
Google is also not giving good suggestions. Could you please suggest me any way 
to work around it? 

Thanks, 
Ravindra 
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Using fedora-packager-setup behind a proxy

2013-04-12 Thread Alexey I. Froloff
On Fri, Apr 12, 2013 at 12:42:25PM -0700, Ravindra Kumar wrote:
 I keep getting network connection failures even after I specify
 HTTP_PROXY or ALL_PROXY env vars. 
Shouldn't it be http_proxy and all_proxy, in lower case?

-- 
Regards,--
Sir Raorn.   --- http://thousandsofhate.blogspot.com/


signature.asc
Description: Digital signature
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: any one interested in generating reports for package reviews ?

2013-04-12 Thread Rakesh Pandit
On 12 April 2013 20:55, Rahul Sundaram wrote:
 On Fri, Apr 12, 2013 at 12:40 PM, Rakesh Pandit wrote:

 Hi,

 During 2010-2011, I used to generate 15 day report for package reviews
 and post it[1]. There were yearly report as well[2].

 In case anyone is interested in taking it up again, feel free to do
 so. Script is available at:
 https://fedorahosted.org/triage/browser/scripts/bzReviewReport.py


Correct link to script is:
https://git.fedorahosted.org/cgit/triage.git/tree/scripts/bzReviewReport.py

 In case you need my help in fixing anything, let me know.
[..]
 Couldn't infrastructure team just automate this?

[..]

If infrastructure team agrees to do it, script will need some adjustment.

Regards,

--
Rakesh Pandit
https://fedoraproject.org/wiki/User:Rakesh
freedom, friends, features, first
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Why does _hardened_build use -z, relro and not -z, relro, -z, now ?

2013-04-12 Thread Tomas Mraz
On Fri, 2013-04-12 at 11:02 -0400, Paul Wouters wrote: 
 On Thu, 11 Apr 2013, Björn Persson wrote:
 
  Paul Wouters wrote:
  Why does the _hardened_build macro for the spec file use -z,relro and 
  not -z,relro,-z,now ?
 
  Huh? As far as I can see _hardened_build adds -z now, not relro.
  -Wl,-z,relro is supposed to be included in LDFLAGS. Or has this changed
  recently?
 
 Let me rephrase... Why is _hardened_build not using -z,relro,-z,now ?

Because -Wl,-z,relro is supposed to be included in the default LDFLAGS
for all packages already.

-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
  Turkish proverb

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: any one interested in generating reports for package reviews ?

2013-04-12 Thread Rahul Sundaram
Hi


On Fri, Apr 12, 2013 at 4:00 PM, Rakesh Pandit  wrote:


 [..]
  Couldn't infrastructure team just automate this?
 
 [..]

 If infrastructure team agrees to do it, script will need some adjustment.


Yeah.  Part of the reason I suggested this to you long back was that it
keeps the idea of reviews as part of the conversation for this list but
also because it was a nod of recognition for the reviewers who were often
doing grunt work for which, they were otherwise hardly credited for.  I am
hoping the infrastructure team takes up the job of running this (along with
E-V-R issues and other scripts) on a regular basis so that it isn't
dependent on you or anyone else to do it manually.  Thanks!

Rahul
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: New package group request

2013-04-12 Thread Bill Nottingham
Eugene Pivnev (ti.eug...@gmail.com) said: 
 I propose to create QtDesktop group - for qt-only applications.
 
 https://fedoraproject.org/wiki/How_to_use_and_edit_comps.xml_for_package_groups?rd=PackageMaintainers/CompsXml#New_groups

What is the use case for 'toolkit used' as being used as the primary
key for displaying a list of applications to the user?

Note that most of the desktop environments already have specific groups
for apps native to or curated for those environments.

Bill
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Using fedora-packager-setup behind a proxy

2013-04-12 Thread Toshio Kuratomi
On Fri, Apr 12, 2013 at 11:59:21PM +0400, Alexey I. Froloff wrote:
 On Fri, Apr 12, 2013 at 12:42:25PM -0700, Ravindra Kumar wrote:
  I keep getting network connection failures even after I specify
  HTTP_PROXY or ALL_PROXY env vars. 
 Shouldn't it be http_proxy and all_proxy, in lower case?

I suspect https_proxy is what's needed (although seeing the traceback would
help diagnose :-)

-Toshio


pgp6o53FRygFq.pgp
Description: PGP signature
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Using fedora-packager-setup behind a proxy

2013-04-12 Thread Ravindra Kumar
Thanks Toshio, https_proxy=proxy helped me to go little further. I got a 
different error, here is the traceback:

Traceback (most recent call last):
  File /usr/bin/fedora-packager-setup, line 108, in module
main()
  File /usr/bin/fedora-packager-setup, line 82, in main
fedora_cert.create_user_cert()
  File /usr/lib/python2.7/site-packages/fedora_cert/__init__.py, line 96, in 
create_user_cert
cert = fas.user_gencert()
  File /usr/lib/python2.7/site-packages/fedora/client/fas2.py, line 731, in 
user_gencert
request = self.send_request('user/dogencert', auth=True)
  File /usr/lib/python2.7/site-packages/fedora/client/baseclient.py, line 
344, in send_request
auth_params=auth_params, retries=retries)
  File /usr/lib/python2.7/site-packages/fedora/client/proxyclient.py, line 
394, in send_request
if 'exc' in data:
TypeError: argument of type 'NoneType' is not iterable

I also got a mail from fedoraproject.org that a certificate has been generated 
for me.

FWIW, I get the following traceback if I provide one of all_proxy=proxy or 
http_proxy=proxy or proxy=proxy:

Traceback (most recent call last):
  File /usr/bin/fedora-packager-setup, line 108, in module
main()
  File /usr/bin/fedora-packager-setup, line 82, in main
fedora_cert.create_user_cert()
  File /usr/lib/python2.7/site-packages/fedora_cert/__init__.py, line 96, in 
create_user_cert
cert = fas.user_gencert()
  File /usr/lib/python2.7/site-packages/fedora/client/fas2.py, line 731, in 
user_gencert
request = self.send_request('user/dogencert', auth=True)
  File /usr/lib/python2.7/site-packages/fedora/client/baseclient.py, line 
344, in send_request
auth_params=auth_params, retries=retries)
  File /usr/lib/python2.7/site-packages/fedora/client/proxyclient.py, line 
351, in send_request
verify=not self.insecure,
  File /usr/lib/python2.7/site-packages/requests/api.py, line 98, in post
return request('post', url, data=data, **kwargs)
  File /usr/lib/python2.7/site-packages/requests/safe_mode.py, line 39, in 
wrapped
return function(method, url, **kwargs)
  File /usr/lib/python2.7/site-packages/requests/api.py, line 51, in request
return session.request(method=method, url=url, **kwargs)
  File /usr/lib/python2.7/site-packages/requests/sessions.py, line 241, in 
request
r.send(prefetch=prefetch)
  File /usr/lib/python2.7/site-packages/requests/models.py, line 632, in send
raise ConnectionError(sockerr)
requests.exceptions.ConnectionError: [Errno 101] Network is unreachable

Thanks,
Ravindra

- Original Message -
From: Toshio Kuratomi a.bad...@gmail.com
To: Development discussions related to Fedora devel@lists.fedoraproject.org
Sent: Friday, April 12, 2013 3:01:38 PM
Subject: Re: Using fedora-packager-setup behind a proxy

On Fri, Apr 12, 2013 at 11:59:21PM +0400, Alexey I. Froloff wrote:
 On Fri, Apr 12, 2013 at 12:42:25PM -0700, Ravindra Kumar wrote:
  I keep getting network connection failures even after I specify
  HTTP_PROXY or ALL_PROXY env vars. 
 Shouldn't it be http_proxy and all_proxy, in lower case?

I suspect https_proxy is what's needed (although seeing the traceback would
help diagnose :-)

-Toshio

-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

[Test-Announce] Fedora 19 Alpha Test Compose 6 (TC6) Available Now!

2013-04-12 Thread Andre Robatino
*IMPORTANT*: Same images as with 19 Alpha TC3 through RC2 are over their
size targets (all DVDs and Lives with the exception of Live KDE and Live
SoaS). Also, note that this is the first time a TC follows an RC (namely
RC2). This is due to several new unaddressed blockers. Hopefully, the
next compose will be RC3.

As per the Fedora 19 schedule [1], Fedora 19 Alpha Test Compose 6 (TC6)
is now available for testing. Content information, including changes,
can be found at https://fedorahosted.org/rel-eng/ticket/5545#comment:20
. Please see the following pages for download links (including delta
ISOs) and testing instructions. Normally dl.fedoraproject.org should
provide the fastest download, but download-ib01.fedoraproject.org is
available as a mirror (with an approximately 1 hour lag) in case of
trouble. To use it, just replace dl with download-ib01 in the
download URL.

Installation:

https://fedoraproject.org/wiki/Test_Results:Current_Installation_Test

Base:

https://fedoraproject.org/wiki/Test_Results:Current_Base_Test

Desktop:

https://fedoraproject.org/wiki/Test_Results:Current_Desktop_Test

Ideally, all Alpha priority test cases for Installation [2], Base [3],
and Desktop [4] should pass in order to meet the Alpha Release Criteria
[5]. Help is available on #fedora-qa on irc.freenode.net [6], or on the
test list [7].

Create Fedora 19 Alpha test composes (TC) and release candidates (RC)
https://fedorahosted.org/rel-eng/ticket/5545

Current Blocker and Freeze Exception bugs:
http://qa.fedoraproject.org/blockerbugs/current

[1] http://fedorapeople.org/groups/schedule/f-19/f-19-quality-tasks.html
[2] https://fedoraproject.org/wiki/QA:Installation_validation_testing
[3] https://fedoraproject.org/wiki/QA:Base_validation_testing
[4] https://fedoraproject.org/wiki/QA:Desktop_validation_testing
[5] https://fedoraproject.org/wiki/Fedora_19_Alpha_Release_Criteria
[6] irc://irc.freenode.net/fedora-qa
[7] https://admin.fedoraproject.org/mailman/listinfo/test



signature.asc
Description: OpenPGP digital signature
___
test-announce mailing list
test-annou...@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/test-announce-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Re: Using fedora-packager-setup behind a proxy

2013-04-12 Thread Toshio Kuratomi
On Apr 12, 2013 4:25 PM, Ravindra Kumar ravindraku...@vmware.com wrote:

 Thanks Toshio, https_proxy=proxy helped me to go little further. I
got a different error, here is the traceback:

 Traceback (most recent call last):
   File /usr/bin/fedora-packager-setup, line 108, in module
 main()
   File /usr/bin/fedora-packager-setup, line 82, in main
 fedora_cert.create_user_cert()
   File /usr/lib/python2.7/site-packages/fedora_cert/__init__.py, line
96, in create_user_cert
 cert = fas.user_gencert()
   File /usr/lib/python2.7/site-packages/fedora/client/fas2.py, line
731, in user_gencert
 request = self.send_request('user/dogencert', auth=True)
   File /usr/lib/python2.7/site-packages/fedora/client/baseclient.py,
line 344, in send_request
 auth_params=auth_params, retries=retries)
   File /usr/lib/python2.7/site-packages/fedora/client/proxyclient.py,
line 394, in send_request
 if 'exc' in data:
 TypeError: argument of type 'NoneType' is not iterable

 I also got a mail from fedoraproject.org that a certificate has been
generated for me.


This looks like a bug that we recently closed in python-requests.  See if
there's an update for that package available.

-Toshio

 FWIW, I get the following traceback if I provide one of
all_proxy=proxy or http_proxy=proxy or proxy=proxy:

 Traceback (most recent call last):
   File /usr/bin/fedora-packager-setup, line 108, in module
 main()
   File /usr/bin/fedora-packager-setup, line 82,
 fedora_cert.create_user_cert()
   File /usr/lib/python2.7/site-packages/fedora_cert/__init__.py, line
96, in create_user_cert
 cert = fas.user_gencert()
   File /usr/lib/python2.7/site-packages/fedora/client/fas2.py, line
731, in user_gencert
 request = self.send_request('user/dogencert', auth=True)
   File /usr/lib/python2.7/site-packages/fedora/client/baseclient.py,
line 344, in send_request
 auth_params=auth_params, retries=retries)
   File /usr/lib/python2.7/site-packages/fedora/client/proxyclient.py,
line 351, in send_request
 verify=not self.insecure,
   File /usr/lib/python2.7/site-packages/requests/api.py, line 98, in
post
 return request('post', url, data=data, **kwargs)
   File /usr/lib/python2.7/site-packages/requests/safe_mode.py, line 39,
in wrapped
 return function(method, url, **kwargs)
   File /usr/lib/python2.7/site-packages/requests/api.py, line 51, in
request
 return session.request(method=method, url=url, **kwargs)
   File /usr/lib/python2.7/site-packages/requests/sessions.py, line 241,
in request
 r.send(prefetch=prefetch)
   File /usr/lib/python2.7/site-packages/requests/models.py, line 632,
in send
 raise ConnectionError(sockerr)
 requests.exceptions.ConnectionError: [Errno 101] Network is unreachable

 Thanks,
 Ravindra

 - Original Message -
 From: Toshio Kuratomi a.bad...@gmail.com
 To: Development discussions related to Fedora 
devel@lists.fedoraproject.org
 Sent: Friday, April 12, 2013 3:01:38 PM
 Subject: Re: Using fedora-packager-setup behind a proxy

 On Fri, Apr 12, 2013 at 11:59:21PM +0400, Alexey I. Froloff wrote:
  On Fri, Apr 12, 2013 at 12:42:25PM -0700, Ravindra Kumar wrote:
   I keep getting network connection failures even after I specify
   HTTP_PROXY or ALL_PROXY env vars.
  Shouldn't it be http_proxy and all_proxy, in lower case?

 I suspect https_proxy is what's needed (although seeing the traceback
would
 help diagnose :-)

 -Toshio

 --
 devel mailing list
 devel@lists.fedoraproject.org
 https://admin.fedoraproject.org/mailman/listinfo/devel
 --
 devel mailing list
 devel@lists.fedoraproject.org
 https://admin.fedoraproject.org/mailman/listinfo/devel
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Broken dependencies: perl-Bio-SamTools

2013-04-12 Thread buildsys


perl-Bio-SamTools has broken dependencies in the rawhide tree:
On x86_64:
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires 
perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires perl(Bio::PrimarySeq)
On i386:
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::PrimarySeq)
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Broken dependencies: perl-Math-Clipper

2013-04-12 Thread buildsys


perl-Math-Clipper has broken dependencies in the rawhide tree:
On x86_64:
perl-Math-Clipper-1.17-3.fc19.x86_64 requires 
libpolyclipping.so.5()(64bit)
On i386:
perl-Math-Clipper-1.17-3.fc19.i686 requires libpolyclipping.so.5
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Broken dependencies: perl-Bio-ASN1-EntrezGene

2013-04-12 Thread buildsys


perl-Bio-ASN1-EntrezGene has broken dependencies in the rawhide tree:
On x86_64:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires 
perl(Bio::Index::AbstractSeq)
On i386:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires 
perl(Bio::Index::AbstractSeq)
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Broken dependencies: perl-Bio-SamTools

2013-04-12 Thread buildsys


perl-Bio-SamTools has broken dependencies in the F-19 tree:
On x86_64:
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires 
perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.x86_64 requires perl(Bio::PrimarySeq)
On i386:
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::SeqFeature::Lite)
perl-Bio-SamTools-1.35-2.fc19.i686 requires perl(Bio::PrimarySeq)
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Broken dependencies: perl-Bio-ASN1-EntrezGene

2013-04-12 Thread buildsys


perl-Bio-ASN1-EntrezGene has broken dependencies in the F-19 tree:
On x86_64:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires 
perl(Bio::Index::AbstractSeq)
On i386:
perl-Bio-ASN1-EntrezGene-1.091-17.fc19.noarch requires 
perl(Bio::Index::AbstractSeq)
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel

Broken dependencies: perl-Math-Clipper

2013-04-12 Thread buildsys


perl-Math-Clipper has broken dependencies in the F-19 tree:
On x86_64:
perl-Math-Clipper-1.17-3.fc19.x86_64 requires 
libpolyclipping.so.5()(64bit)
On i386:
perl-Math-Clipper-1.17-3.fc19.i686 requires libpolyclipping.so.5
Please resolve this as soon as possible.


--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/perl-devel