[Mageia-dev] shadow-utils

2012-02-28 Thread Colin Guthrie
Hi,

Someone needs to update this package - any volunteers? It's quite an
important package so please be careful if you are a novice :D

The latest version (4.1.5) contains a fix for a CVE so I think we should
update it before mga2... only problem is that that the tcb related
patches need rediffed. I didn't look closely, but I suspect this will
take a bit of time and a at least a bit of understanding of the code.
Perhaps it won't be too hard tho'.

I also think we should remove /usr/bin/login from that package (fedora
already do this). We already have /bin/login from util-linux (and also
had this in mga1) so providing two different login implementations from
two different packages but in different paths just seems like a recipe
for problems to me (and certainly will cause problems when we do the
/usr consolidation for mga3).

Any takers? If not, I'll have a look in a week or so.

Col



-- 

Colin Guthrie
colin(at)mageia.org
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/


Re: [Mageia-dev] shadow-utils

2012-02-28 Thread Colin Guthrie
'Twas brillig, and Colin Guthrie at 28/02/12 11:03 did gyre and gimble:
 Hi,
 
 Someone needs to update this package - any volunteers? It's quite an
 important package so please be careful if you are a novice :D
 
 The latest version (4.1.5) contains a fix for a CVE so I think we should
 update it before mga2... only problem is that that the tcb related
 patches need rediffed. I didn't look closely, but I suspect this will
 take a bit of time and a at least a bit of understanding of the code.
 Perhaps it won't be too hard tho'.
 
 I also think we should remove /usr/bin/login from that package (fedora
 already do this). We already have /bin/login from util-linux (and also
 had this in mga1) so providing two different login implementations from
 two different packages but in different paths just seems like a recipe
 for problems to me (and certainly will cause problems when we do the
 /usr consolidation for mga3).
 
 Any takers? If not, I'll have a look in a week or so.

Oh forgot to mention that the current SVN doesn't build due to a source
file mismatch... Updating the spec to  match the binary version (which
is newer) works fine and the patches still apply. It's just the jump up
to 4.1.5 that causes the patches not to apply.

Cheers

Col


-- 

Colin Guthrie
colin(at)mageia.org
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/


Re: [Mageia-dev] shadow-utils

2012-02-28 Thread Colin Guthrie
'Twas brillig, and Colin Guthrie at 28/02/12 11:28 did gyre and gimble:
 'Twas brillig, and Colin Guthrie at 28/02/12 11:03 did gyre and gimble:
 Hi,

 Someone needs to update this package - any volunteers? It's quite an
 important package so please be careful if you are a novice :D

 The latest version (4.1.5) contains a fix for a CVE so I think we should
 update it before mga2... only problem is that that the tcb related
 patches need rediffed. I didn't look closely, but I suspect this will
 take a bit of time and a at least a bit of understanding of the code.
 Perhaps it won't be too hard tho'.

 I also think we should remove /usr/bin/login from that package (fedora
 already do this). We already have /bin/login from util-linux (and also
 had this in mga1) so providing two different login implementations from
 two different packages but in different paths just seems like a recipe
 for problems to me (and certainly will cause problems when we do the
 /usr consolidation for mga3).

 Any takers? If not, I'll have a look in a week or so.
 
 Oh forgot to mention that the current SVN doesn't build due to a source
 file mismatch... Updating the spec to  match the binary version (which
 is newer) works fine and the patches still apply. It's just the jump up
 to 4.1.5 that causes the patches not to apply.

Actually, just looking at things, it seems upstream has included tcb
support... sadly the patch committed upstream is quite different to the
version we have :(

I guess someone will have to do a fair bit of testing before we can use
this.

Might be best to stick with 4.1.4.3 (small update to what we have
currently) but backport the fix for CVE-2005-4890...

Then look at updating after mga2.

Tho' if someone does want to look I wouldn't necessarily be against it.

Col


-- 

Colin Guthrie
colin(at)mageia.org
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/


Re: [Mageia-dev] [soft-commits] [3118] - mark a new release and copy it into tags/1:2-4

2012-02-28 Thread nicolas vigier
On Tue, 28 Feb 2012, r...@mageia.org wrote:

 Revision: 3118
 Author:   kamil
 Date: 2012-02-28 12:57:44 +0100 (Tue, 28 Feb 2012)
 Log Message:
 ---
 - mark a new release and copy it into tags/1:2-4

Version 1:2-4 ? What does this version number mean ?



Re: [Mageia-dev] [soft-commits] [3118] - mark a new release and copy it into tags/1:2-4

2012-02-28 Thread Kamil Rytarowski

On 28.02.2012 14:24, nicolas vigier wrote:

On Tue, 28 Feb 2012, r...@mageia.org wrote:


Revision: 3118
Author:   kamil
Date: 2012-02-28 12:57:44 +0100 (Tue, 28 Feb 2012)
Log Message:
---
- mark a new release and copy it into tags/1:2-4

Version 1:2-4 ? What does this version number mean ?


epoch:version-release
If I am not mistaken there is just version 2 for Mageia 2 and just the 
release is bumping.


Re: [Mageia-dev] [soft-commits] [3118] - mark a new release and copy it into tags/1:2-4

2012-02-28 Thread Pascal Terjan
On Tue, Feb 28, 2012 at 13:31, Kamil Rytarowski n...@gmx.com wrote:
 On 28.02.2012 14:24, nicolas vigier wrote:

 On Tue, 28 Feb 2012, r...@mageia.org wrote:

 Revision: 3118
 Author:   kamil
 Date:     2012-02-28 12:57:44 +0100 (Tue, 28 Feb 2012)
 Log Message:
 ---
 - mark a new release and copy it into tags/1:2-4

 Version 1:2-4 ? What does this version number mean ?

 epoch:version-release
 If I am not mistaken there is just version 2 for Mageia 2 and just the
 release is bumping.

epoch is a rpm concept, used when the software version decreases, it
has no meaning for the software itself


Re: [Mageia-dev] [soft-commits] [3118] - mark a new release and copy it into tags/1:2-4

2012-02-28 Thread Guillaume Rousse

Le 28/02/2012 14:49, Pascal Terjan a écrit :

On Tue, Feb 28, 2012 at 13:31, Kamil Rytarowskin...@gmx.com  wrote:

On 28.02.2012 14:24, nicolas vigier wrote:


On Tue, 28 Feb 2012, r...@mageia.org wrote:


Revision: 3118
Author:   kamil
Date: 2012-02-28 12:57:44 +0100 (Tue, 28 Feb 2012)
Log Message:
---
- mark a new release and copy it into tags/1:2-4


Version 1:2-4 ? What does this version number mean ?


epoch:version-release
If I am not mistaken there is just version 2 for Mageia 2 and just the
release is bumping.


epoch is a rpm concept, used when the software version decreases, it
has no meaning for the software itself

And release also. A software has just a version number.
--
BOFH excuse #395:

Redundant ACLs.


Re: [Mageia-dev] Faster GNOME package submission

2012-02-28 Thread Olav Vitters
On Wed, Feb 22, 2012 at 05:23:27PM +0100, Olav Vitters wrote:
 Anyway, I've just tried this with a few packages. In future, I might
 automatically even do:
   mgarepo ci -m new version
   mgarepo submit
 But I want to first do more testing, plus add SHA256 verification (what
 GNOME uses and advises).

I've hooked up mga-gnome against the ftp-release-list emails[1].
Whenever a tarball is placed upon ftp.gnome.org, the script will run
and:
- determine the package name
  Note: Currently aborts if there are multiple possible packages.. e.g.
  gtk+ tarball has gtk+2.0 and gtk+3.0 packages. Something to fix in a
  future version.
- validate version change
  to preventing go from stable-unstable
- increase version, reset release
- download tarball
- verify SHA256 hash and that patches still apply
- commit changes
- submit build

Note that I just run this on my own machine. It requires manual work
whenever I reboot (ssh public key), so not 100% reliable (on purpose).

It'll submit stuff often before I'd have time to look at any build
errors, so please look at any build error submitted be me :)


[1] http://mail.gnome.org/archives/ftp-release-list/
-- 
Regards,
Olav


Re: [Mageia-dev] shadow-utils

2012-02-28 Thread Guillaume Rousse

Le 28/02/2012 12:03, Colin Guthrie a écrit :

(and certainly will cause problems when we do the
/usr consolidation for mga3).

Sure. Let's do it right now, we'll have less problems later :)
--
BOFH excuse #101:

Collapsed Backbone


Re: [Mageia-dev] GNOME-shell/mutter 3.3.90 memory usage

2012-02-28 Thread Olav Vitters
On Mon, Feb 27, 2012 at 09:19:40AM +0100, Olav Vitters wrote:
 I'm seeing huge memory usage by gnome-shell/mutter 3.3.90 over time.
 Restarting it avoids OOM issues. I wasn't sure if it was a local problem
 or not, but saw one confirmation.

Upstream suggested to apply a patch.

| https://bugzilla.gnome.org/show_bug.cgi?id=642652
|   gnome-shell | general | 3.2.x
| 
| --- Comment #139 from Jasper St. Pierre jstpie...@mecheye.net 2012-02-28 
04:27:28 UTC ---
| (In reply to comment #137)
|  Seeins also high memory usage with 3.3.90 (growing to 1.3GB within 12 hours 
or
|  so). Doing nothing special and no extensions installed.
| 
| This is entirely my fault.
| 
http://git.gnome.org/browse/gnome-shell/commit/?id=d2aab9d6a620f561e71a884ff5c44ec0bb654f9a
| should fix it.

gnome-shell-3.3.90-2.mga2 is building at the moment with this patch included.

-- 
Regards,
Olav


Re: [Mageia-dev] GNOME-shell/mutter 3.3.90 memory usage

2012-02-28 Thread Colin Guthrie
'Twas brillig, and Olav Vitters at 28/02/12 16:12 did gyre and gimble:
 On Mon, Feb 27, 2012 at 09:19:40AM +0100, Olav Vitters wrote:
 I'm seeing huge memory usage by gnome-shell/mutter 3.3.90 over time.
 Restarting it avoids OOM issues. I wasn't sure if it was a local problem
 or not, but saw one confirmation.
 
 Upstream suggested to apply a patch.
 
 | https://bugzilla.gnome.org/show_bug.cgi?id=642652
 |   gnome-shell | general | 3.2.x
 | 
 | --- Comment #139 from Jasper St. Pierre jstpie...@mecheye.net 2012-02-28 
 04:27:28 UTC ---
 | (In reply to comment #137)
 |  Seeins also high memory usage with 3.3.90 (growing to 1.3GB within 12 
 hours or
 |  so). Doing nothing special and no extensions installed.
 | 
 | This is entirely my fault.
 | 
 http://git.gnome.org/browse/gnome-shell/commit/?id=d2aab9d6a620f561e71a884ff5c44ec0bb654f9a
 | should fix it.
 
 gnome-shell-3.3.90-2.mga2 is building at the moment with this patch included.

Kick ass!

Col


-- 

Colin Guthrie
colin(at)mageia.org
http://colin.guthr.ie/

Day Job:
  Tribalogic Limited http://www.tribalogic.net/
Open Source:
  Mageia Contributor http://www.mageia.org/
  PulseAudio Hacker http://www.pulseaudio.org/
  Trac Hacker http://trac.edgewall.org/


Re: [Mageia-dev] [changelog] [RPM] cauldron core/release meta-task-2-30.mga2

2012-02-28 Thread Thierry Vignaud
On 28 February 2012 18:56, wally buildsystem-dae...@mageia.org wrote:
 wally wally 1:2-30.mga2:
 + Revision: 215849
 - install lxdm (not gdm) when choosing xfce

This would better be done in task-xfce IMHO


Re: [Mageia-dev] [changelog] [RPM] cauldron core/release meta-task-2-30.mga2

2012-02-28 Thread Manuel Hiebel
Le mardi 28 février 2012 à 20:05 +0100, Thierry Vignaud a écrit :
 On 28 February 2012 18:56, wally buildsystem-dae...@mageia.org wrote:
  wally wally 1:2-30.mga2:
  + Revision: 215849
  - install lxdm (not gdm) when choosing xfce
 
 This would better be done in task-xfce IMHO

But if it's an suggests instead of a requires in the spec, lxdm will not
be in the isos :þ



Re: [Mageia-dev] [changelog] [RPM] cauldron core/release evolution-3.3.90-2.mga2

2012-02-28 Thread Olav Vitters
On Tue, Feb 28, 2012 at 09:19:46PM +0100, mitya wrote:
 mitya mitya 3.3.90-2.mga2:
 + Revision: 215887
 - bump release
 - Fix GNOME bug #669294 (will be merged upstream in 3.3.91+)

If you forget to increase the release, you can do something like:
SILENT: bump release

anything with SILENT on the line is hidden.

and no need to mention you're bumping the release; if you didn't, the
buildsystem wouldn't allow you to submit

-- 
Regards,
Olav


Re: [Mageia-dev] [changelog] [RPM] cauldron core/release evolution-3.3.90-2.mga2

2012-02-28 Thread Maarten Vanraes
Op woensdag 29 februari 2012 00:10:47 schreef Olav Vitters:
 On Tue, Feb 28, 2012 at 09:19:46PM +0100, mitya wrote:
  mitya mitya 3.3.90-2.mga2:
  + Revision: 215887
  - bump release
  - Fix GNOME bug #669294 (will be merged upstream in 3.3.91+)
 
 If you forget to increase the release, you can do something like:
 SILENT: bump release
 
 anything with SILENT on the line is hidden.
 
 and no need to mention you're bumping the release; if you didn't, the
 buildsystem wouldn't allow you to submit

and you can also modify the svn commit log so that future changelog entries 
will look good


Re: [Mageia-dev] [changelog] [RPM] cauldron core/release meta-task-2-30.mga2

2012-02-28 Thread You-Cheng Hsieh
2012/2/29 Manuel Hiebel man...@hiebel.eu:
 Le mardi 28 février 2012 à 20:05 +0100, Thierry Vignaud a écrit :
 On 28 February 2012 18:56, wally buildsystem-dae...@mageia.org wrote:
  wally wally 1:2-30.mga2:
  + Revision: 215849
  - install lxdm (not gdm) when choosing xfce

 This would better be done in task-xfce IMHO

 But if it's an suggests instead of a requires in the spec, lxdm will not
 be in the isos :þ

Wait, really?
I mean the suggested rpms will not be in the ISOs.

Thanks for the info.


Re: [Mageia-dev] [changelog] [RPM] cauldron core/release libchamplain-0.12.1-3.mga2

2012-02-28 Thread Dimitri Jakov
 On Thu, Feb 23, 2012 at 11:24:22PM +0100, mitya wrote:
  mitya mitya 0.12.1-3.mga2:
  + Revision: 213565
  - Fix build (see GNOME bug #669378)
 
 Cool! Couldn't figure out where the bug was (cogl, vala, libchamplain,
 etc), so nice to see it is magically resolved :)
 

Magician speaking. :)

In fact, I just wanted to update my system to latest Cauldron, and
decided to fix it myself :) Feel free to contact me if you face any
problems with Vala/GObjectIntrospection/GJS/etc.

Mitya



Re: [Mageia-dev] [changelog] [RPM] cauldron core/release evolution-3.3.90-2.mga2

2012-02-28 Thread Dimitri Jakov
Yep guys, just forgotten to bump release stupidly (twice! :) Promise
that won't happen anymore :)

Mitya



Re: [Mageia-dev] [changelog] [RPM] cauldron core/release evolution-3.3.90-2.mga2

2012-02-28 Thread Jani Välimaa
2012/2/28 mitya buildsystem-dae...@mageia.org:
 Name        : evolution                    Relocations: (not relocatable)
 Version     : 3.3.90                            Vendor: Mageia.Org
 Release     : 2.mga2                        Build Date: Tue Feb 28 21:07:48 
 2012
 Install Date: (not installed)               Build Host: ecosse.mageia.org
 Group       : Networking/Mail               Source RPM: (none)
 Size        : 12733997                         License: LGPLv2+
 Signature   : (none)
 Packager    : mitya mitya
 URL         : http://www.gnome.org/projects/evolution/
 Summary     : Integrated GNOME mail client, calendar and address book
 Description :
 Evolution is the GNOME mailer, calendar, contact manager and
 communications tool.  The tools which make up Evolution will
 be tightly integrated with one another and act as a seamless
 personal information-management tool.

 mitya mitya 3.3.90-2.mga2:
 + Revision: 215887
 - bump release
 - Fix GNOME bug #669294 (will be merged upstream in 3.3.91+)

Aand the bug was about what? Please include short (oneliner)
description about the bug next time.