[Mageia-dev] Potential future problem with kernel provides / synthesis

2012-08-10 Thread Pascal Terjan
Currently the list of provides for kernel packages make lines of 55k
characters in the synthesis

URPM uses a 64k buffer to read lines and will reject longer lines

Next in the list is gcstar with 42727 due to the huge number of perl
modules provided


Re: [Mageia-dev] latest kernels not powering off machines on shutdown

2012-08-10 Thread Digigold

On 08/10/2012 03:27 PM, Christiaan Welvaart wrote:

On Fri, 10 Aug 2012, Pascal Terjan wrote:


How many people expect their machine to power off when they type halt?
How many people will want their machine to not halt and not poweroff?

Said in another way:
- How many people will this change cause problem to?
- How many people will benefit from it?

I would expect the ratio to be about at least 99.9/0.1 which is why I 
hate it.


This change seem to be done without any consideration for users.


So fix it, no change to systemctl is needed AFAICT, just replace the 
symlink with a tool that does "the right thing", probably running 
"poweroff" passing all arguments verbatim. Don't forget to fix the 
manpage as well.



Christiaan


Another possible fix would be to create an alias, maybe add it to 
.bashrc.  Personally I have always just preferred to use the good old 
'init 0' and 'init 6' commands.  No matter what version of whatever 
distro you may be using they always do the same thing.


--


   /"A mind that is stretched by a new experience can never go back
   to its old dimensions."/


 *~Oliver Wendell Holmes, Jr.*



[Mageia-dev] Security updates - help needed!

2012-08-10 Thread David Walser
I've picked off all of the low-hanging fruit, so the remaining packages on this 
list really do need help to get fixed.

. updated initial message below 

There are several packages that need security updates that either have not been 
built yet, or there are some issues that need help and/or input from packagers.

Please help out with these where you can.

I'll try to organize these into categories and give a little info on them so 
it's easy to see if you can and want to help.

Web apps

ocsinventory - Mageia 1 package needs to be updated or patched (patches 
available from MDV)
https://bugs.mageia.org/show_bug.cgi?id=5252
https://bugs.mageia.org/show_bug.cgi?id=2129

mediawiki - versions we have are at or nearing EOL upstream, probably should be 
updated.  Oliver Burger is working on this.
https://bugs.mageia.org/show_bug.cgi?id=3448

drupal - update built, issues found by QA need fixing.  Oliver Burger is 
working on this.
https://bugs.mageia.org/show_bug.cgi?id=5844

GNOME software
--
mono - upstream commit linked
https://bugs.mageia.org/show_bug.cgi?id=6789

libvirt - patch available from RedHat
https://bugs.mageia.org/show_bug.cgi?id=6526

libguestfs - patch available from RedHat
https://bugs.mageia.org/show_bug.cgi?id=6818

gjs - doesn't rebuild against xulrunner in Mageia 1, but doesn't seem to be 
used by anything
https://bugs.mageia.org/show_bug.cgi?id=6382

Games
-
openarena, alienarena - affected by DoS bug in quake3 engine.  Juan Luis 
Baptiste is working on this.
https://bugs.mageia.org/show_bug.cgi?id=5496

Java-related

jruby - fixed upstream in 1.6.5.1
https://bugs.mageia.org/show_bug.cgi?id=6742

poi - In progress by D Morgan.  Additional updates pending.
https://bugs.mageia.org/show_bug.cgi?id=6011

apache-commons-compress - In progress by D Morgan.  Mageia 1 updates pending.
https://bugs.mageia.org/show_bug.cgi?id=6331

apache-commons-daemon - fixed upstream in 1.0.7 (only Mageia 1 is affected)
https://bugs.mageia.org/show_bug.cgi?id=7004

Ruby-related

Several security issues, one possible packaging issue
https://bugs.mageia.org/show_bug.cgi?id=6487

No response has been received from packagers yet

ganglia - patch available from Fedora, we have another bug report saying it 
doesn't start
https://bugs.mageia.org/show_bug.cgi?id=6874

libreoffice - Mageia 1 only, patch available from RedHat
https://bugs.mageia.org/show_bug.cgi?id=6944

stunnel - package has several other issues as well, should probably just be 
updated
https://bugs.mageia.org/show_bug.cgi?id=3951

phpmyadmin - needs updated to 3.5.2.1 and fixed in Cauldron for new apache conf 
layout
https://bugs.mageia.org/show_bug.cgi?id=6905

python-django - issues fixed upstream in 1.3.2.  Philippe Makowski said he'll 
work on this.
https://bugs.mageia.org/show_bug.cgi?id=6986

empathy - XSS issues fixed upstream in 3.2.1 (only Mageia 1 is affected)
https://bugs.mageia.org/show_bug.cgi?id=7008

abrt/libreport/btparser - should probably be upgraded to newer versions 
available from RedHat
https://bugs.mageia.org/show_bug.cgi?id=6523

sos - 62 patches available from Fedora
https://bugs.mageia.org/show_bug.cgi?id=6525

x11-server - upstream diffs linked by RedHat, maybe patches available from 
Ubuntu or Gentoo, plus other security issues fixed by RH/OpenSuSE/Ubuntu
https://bugs.mageia.org/show_bug.cgi?id=6744

In progress (help needed to finish)
---
dhcp - issues fixed upstream in 4.2.4-P1
https://bugs.mageia.org/show_bug.cgi?id=6872

bind - issues fixed upstream in 9.8.3-P2 and 9.9.1-P2
https://bugs.mageia.org/show_bug.cgi?id=6873

xen - doesn't build in Cauldron (incompatible pointer type in i8259.c)
https://bugs.mageia.org/show_bug.cgi?id=6931

gc - links to upstream and Fedora patches available in bug, already fixed in 
Cauldron
https://bugs.mageia.org/show_bug.cgi?id=6652

bip - patch in Mageia 1 didn't fix it according to QA, patch wasn't applied in 
Mageia 2
https://bugs.mageia.org/show_bug.cgi?id=4319

emacs - re-diffing patch for Emacs 23.2 (Mageia 1) is non-trivial
https://bugs.mageia.org/show_bug.cgi?id=6995

psi - fixed in SVN, does not build in Cauldron (can't find qca2-devel even 
though it's installed)
https://bugs.mageia.org/show_bug.cgi?id=7002


Re: [Mageia-dev] latest kernels not powering off machines on shutdown

2012-08-10 Thread Christiaan Welvaart

On Fri, 10 Aug 2012, Pascal Terjan wrote:


On Fri, Aug 10, 2012 at 7:04 PM, Jose Jorge  wrote:

Le 09/08/2012 20:10, Thierry Vignaud a écrit :


I've the impression that for some time, kernels do not power off machines
anymore on shutdown.
The kernel prints "System halted." but the machine remains powered.
I've seen that with VMs and with real PCs.

Does someone else see that?


Yes, and some other distros do the same (at least Slitaz). Before Mageia 2,
there was no interest in having both halt and poweroff doing the same.

Now, we can do "poweroff" to cut the power after stopping the kernel, or
"halt" to keep  the power on.


As I said earlier, if you are looking for these system shutdown commands, 
use:

  systemctl reboot
  systemctl halt
  systemctl poweroff
directly. The "halt, "reboot", and "poweroff" commands are only there for 
backwards compatibility.



How many people expect their machine to power off when they type halt?
How many people will want their machine to not halt and not poweroff?

Said in another way:
- How many people will this change cause problem to?
- How many people will benefit from it?

I would expect the ratio to be about at least 99.9/0.1 which is why I hate it.

This change seem to be done without any consideration for users.


So fix it, no change to systemctl is needed AFAICT, just replace the 
symlink with a tool that does "the right thing", probably running 
"poweroff" passing all arguments verbatim. Don't forget to fix the 
manpage as well.



Christiaan


Re: [Mageia-dev] latest kernels not powering off machines on shutdown

2012-08-10 Thread Pascal Terjan
On Fri, Aug 10, 2012 at 7:04 PM, Jose Jorge  wrote:
> Le 09/08/2012 20:10, Thierry Vignaud a écrit :
>
>> Hi
>>
>> I've the impression that for some time, kernels do not power off machines
>> anymore on shutdown.
>> The kernel prints "System halted." but the machine remains powered.
>> I've seen that with VMs and with real PCs.
>>
>> Does someone else see that?
>
> Yes, and some other distros do the same (at least Slitaz). Before Mageia 2,
> there was no interest in having both halt and poweroff doing the same.
>
> Now, we can do "poweroff" to cut the power after stopping the kernel, or
> "halt" to keep  the power on.

How many people expect their machine to power off when they type halt?
How many people will want their machine to not halt and not poweroff?

Said in another way:
- How many people will this change cause problem to?
- How many people will benefit from it?

I would expect the ratio to be about at least 99.9/0.1 which is why I hate it.

This change seem to be done without any consideration for users.


Re: [Mageia-dev] latest kernels not powering off machines on shutdown

2012-08-10 Thread Jose Jorge

Le 09/08/2012 20:10, Thierry Vignaud a écrit :

Hi

I've the impression that for some time, kernels do not power off machines
anymore on shutdown.
The kernel prints "System halted." but the machine remains powered.
I've seen that with VMs and with real PCs.

Does someone else see that?
Yes, and some other distros do the same (at least Slitaz). Before Mageia 
2, there was no interest in having both halt and poweroff doing the same.


Now, we can do "poweroff" to cut the power after stopping the kernel, or 
"halt" to keep  the power on.


Re: [Mageia-dev] latest kernels not powering off machines on shutdown

2012-08-10 Thread Olivier Blin
Christiaan Welvaart  writes:

> On Thu, 9 Aug 2012, Colin Guthrie wrote:
>
>> 'Twas brillig, and Pascal Terjan at 09/08/12 20:04 did gyre and gimble:
>>> Yes because it totally makes sense to have a command to halt the
>>> operating system but leave the machine using some power for nothing
>>> (and preventing you from powering it on with wol). I am sure someone
>>> believes it can be useful in some strange scenario.
>>
>> It's very useful and it was essential for me during the previous release
>> to debug shutdown logic.
>
> The shutdown command has always been used for this.

But with the previous initscripts/sysvinit, the halt command was
eventually handled by /etc/init.d/halt, which automatically passed the
-p argument to halt.

-- 
Olivier Blin - blino


Re: [Mageia-dev] latest kernels not powering off machines on shutdown

2012-08-10 Thread Christiaan Welvaart

On Thu, 9 Aug 2012, Colin Guthrie wrote:


'Twas brillig, and Pascal Terjan at 09/08/12 20:04 did gyre and gimble:

Yes because it totally makes sense to have a command to halt the
operating system but leave the machine using some power for nothing
(and preventing you from powering it on with wol). I am sure someone
believes it can be useful in some strange scenario.


It's very useful and it was essential for me during the previous release
to debug shutdown logic.


The shutdown command has always been used for this. Apparently you need to 
pass -H to it now, though. To power off aka 'halt' a machine, shutdown -h 
was used and this still works according to the manpage.



Please read the halt manpage (and others):

"These are legacy commands available for compatibility only."

So you arguing its behavior is now "fixed" because it was "broken" does 
not make sense.



Christiaan