Re: What drives RPM Provides for shared libraries?

2010-12-21 Thread Nicholas Miell
On 12/21/2010 09:43 PM, Nicholas Miell wrote: > > ld.so isn't happy with that (lookups aren't based on filenames, so > symlinks won't do anything and it will never find the library). > > You need to create an empty shared library with the > libmysqlclient_r.so.16 SONAME that has a DT_AUXILIARY en

Re: What drives RPM Provides for shared libraries?

2010-12-21 Thread Panu Matilainen
On Tue, 21 Dec 2010, Tom Lane wrote: > I'm fooling around with trying to update mysql from 5.1.x to 5.5.x. > One of the things that's happened in that transition is that they've > dropped the separate "libmysqlclient_r.so" library --- presumably > everything in regular "libmysqlclient.so" is now t

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Dick Tayter
2010/12/21 Miloslav Trmač: > If an attacker were controlling a process running with uid 0 and no > capabilities at all, and /bin/sh were 0555, nothing prevents the > attacker from chmod()ing /bin/sh to 0755 and overwriting it. This makes > any attempts to change the file permissions rather pointl

Re: What drives RPM Provides for shared libraries?

2010-12-21 Thread Nicholas Miell
On 12/21/2010 07:42 PM, Matt McCutchen wrote: > On Tue, 2010-12-21 at 22:10 -0500, Tom Lane wrote: >> I'm fooling around with trying to update mysql from 5.1.x to 5.5.x. >> One of the things that's happened in that transition is that they've >> dropped the separate "libmysqlclient_r.so" library ---

Re: What drives RPM Provides for shared libraries?

2010-12-21 Thread Matt McCutchen
On Tue, 2010-12-21 at 22:10 -0500, Tom Lane wrote: > I'm fooling around with trying to update mysql from 5.1.x to 5.5.x. > One of the things that's happened in that transition is that they've > dropped the separate "libmysqlclient_r.so" library --- presumably > everything in regular "libmysqlclient

What drives RPM Provides for shared libraries?

2010-12-21 Thread Tom Lane
I'm fooling around with trying to update mysql from 5.1.x to 5.5.x. One of the things that's happened in that transition is that they've dropped the separate "libmysqlclient_r.so" library --- presumably everything in regular "libmysqlclient.so" is now thread-safe. Upstream's idea of maintaining ABI

Outage: blogs.fedoraproject.org - 2010-12-21 00:00 UTC

2010-12-21 Thread Ricky Zhou
Outage: blogs.fedoraproject.org - 2010-12-21 00:00 UTC There will be an outage starting at 2010-12-21 00:00 UTC. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2010-12-21 00:00 UTC' Reason for outage: We are preemptivel

Re: Package-specific test case and critical path test case project: drafts for review

2010-12-21 Thread James Laska
On Tue, 2010-12-21 at 15:53 -0700, Kevin Fenzi wrote: > On Tue, 21 Dec 2010 17:11:15 + > Adam Williamson wrote: > > > Hi, everyone. So, in the recent debate about the update process it > > again became clear that we were lacking a good process for providing > > package-specific test instructi

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Miloslav Trmač
i.g...@comcast.net píše v Út 21. 12. 2010 v 18:52 -0500: > On Tue, Dec 21, 2010 at 10:37:44PM +0100, Miloslav Trmač wrote devel: > > Colin Walters píše v Út 21. 12. 2010 v 11:47 -0500: > > > "But they still have uid 0, which typical system installation allows > > > root to do things. For example, /

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread i . grok
On Tue, Dec 21, 2010 at 10:37:44PM +0100, Miloslav Trmač wrote devel: > Colin Walters píše v Út 21. 12. 2010 v 11:47 -0500: > > "But they still have uid 0, which typical system installation allows > > root to do things. For example, /bin/sh is 0755 and /bin is also 0755 > > perms. A disarmed root p

[perl-PAR-Dist] Update to 0.47.

2010-12-21 Thread Steven Pritchard
commit 9f9c3e915a9da01156907bc8234c8ec385d27eb3 Author: Steven Pritchard Date: Tue Dec 21 17:14:29 2010 -0600 Update to 0.47. .gitignore |1 + perl-PAR-Dist.spec |7 +-- sources|2 +- 3 files changed, 7 insertions(+), 3 deletions(-) --- diff --git a/.gi

Re: Package-specific test case and critical path test case project: drafts for review

2010-12-21 Thread James Laska
Thanks Adam for getting the ball rolling on this topic. On Tue, 2010-12-21 at 17:11 +, Adam Williamson wrote: > Hi, everyone. So, in the recent debate about the update process it again > became clear that we were lacking a good process for providing > package-specific test instructions, and p

Re: Package-specific test case and critical path test case project: drafts for review

2010-12-21 Thread Kevin Fenzi
On Tue, 21 Dec 2010 17:11:15 + Adam Williamson wrote: > Hi, everyone. So, in the recent debate about the update process it > again became clear that we were lacking a good process for providing > package-specific test instructions, and particularly specific > instructions for testing critical

Plan for tomorrow's FESCo meeting (2010-12-22)

2010-12-21 Thread Kevin Fenzi
Following is the list of topics that will be discussed in the FESCo meeting tomorrow at 17:30UTC (12:30pm EDT) in #fedora-meeting on irc.freenode.net. Note that we may not have quorum, so may adjourn early. Links to all tickets below can be found at: https://fedorahosted.org/fesco/report/9 = Fo

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Colin Walters
2010/12/21 Miloslav Trmač : > If an attacker were controlling a process running with uid 0 and no > capabilities at all, and /bin/sh were 0555, nothing prevents the > attacker from chmod()ing /bin/sh to 0755 and overwriting it.  This makes > any attempts to change the file permissions rather point

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Miloslav Trmač
Colin Walters píše v Út 21. 12. 2010 v 11:47 -0500: > "But they still have uid 0, which typical system installation allows > root to do things. For example, /bin/sh is 0755 and /bin is also 0755 > perms. A disarmed root process can still trojan a system. But what if > we got rid of all the read/wri

Update of gitolite (ACL system) on pkgs.fedoraproject.org

2010-12-21 Thread Jesse Keating
I've just updated the gitolite package on pkgs.fedoraproject.org. This package is what does ACL enforcement. This update brings us upstream support for the configuration we're using, and better error reporting when trying to clone a repo that doesn't exist yet. It also enables https authenticate

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/21/2010 03:50 PM, Colin Walters wrote: > On Tue, Dec 21, 2010 at 3:21 PM, Daniel J Walsh wrote: >> >> File capabilities just limit the number of capabilities an application >> starts with. setuid app means an app starts with all 32, a couple of

[perl-Scope-Upper] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 45d6665a07f1f08bffc5543d47b3897899e7d82c Author: Marcela Mašláňová Date: Tue Dec 21 22:08:33 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-Scope-Upper.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-Scope-Upper.spe

File PAR-Dist-0.47.tar.gz uploaded to lookaside cache by steve

2010-12-21 Thread Steven Pritchard
A file has been added to the lookaside cache for perl-PAR-Dist: ea5fd9791e40f7c2524a45139bea23a2 PAR-Dist-0.47.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/lis

[perl-Scope-Guard] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 3b1390c4db7a9bc92911a0c29a76842451564f74 Author: Marcela Mašláňová Date: Tue Dec 21 22:03:20 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-Scope-Guard.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-Scope-Guard.spe

[perl-Scalar-Properties] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 6b3a891a433319a5f44cf107ffd082c2aa1257fd Author: Marcela Mašláňová Date: Tue Dec 21 21:52:57 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-Scalar-Properties.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-Scalar-Pr

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Colin Walters
On Tue, Dec 21, 2010 at 3:21 PM, Daniel J Walsh wrote: > > File capabilities just limit the number of capabilities an application > starts with.  setuid app means an app starts with all 32, a couple of > new ones, capabilities.  Then it is up to the app developer to drop the > capabilities when th

Broken dependencies: perl-AnyEvent

2010-12-21 Thread buildsys
perl-AnyEvent has broken dependencies in the epel-6 tree: On x86_64: perl-AnyEvent-5.27-1.el6.noarch requires perl(Event::Lib) perl-AnyEvent-5.27-1.el6.noarch requires perl(IO::Async::Handle) On i386: perl-AnyEvent-5.27-1.el6.noarch requires perl(Event::Lib) perl-A

[perl-RT-Client-REST] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 0e5a4363fed58304b04274bfe6142bd18a83fa7b Author: Marcela Mašláňová Date: Tue Dec 21 21:34:05 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-RT-Client-REST.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-RT-Client-RE

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/21/2010 11:47 AM, Colin Walters wrote: > Pardon the thread necromancy, > > So recently I had cause to look at > http://fedoraproject.org/wiki/Features/RemoveSETUID > again (I was investigating the X server permissions for an unrelated reason). >

Re: Building Gimp 2.7.2 problem

2010-12-21 Thread Luya Tshimbalanga
On 21/12/10 04:53 AM, Jeffrey Ollie wrote: > On Mon, Dec 20, 2010 at 2:45 PM, Luya Tshimbalanga > wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> Hello, >> I attempt to build gimp 2.7.2 for my repos.fedorapeople.org using koji >> scratch but got result: >> >> tions -Winit-self -Wp

Re: [packager interface suggestion] Adding packages to buildroot directly from updates-testing

2010-12-21 Thread Andreas Bierfert
On Mon, 2010-12-20 at 16:01 -0500, Tom Callaway wrote: > I think a simpler idea is a minimal webapp (and perhaps a CLI interface) > that lets you login with your FAS account and request an override on a > built package that you have permissions for (and at the same time, > choose how long the overr

[perl-DateTime] Update DateTime to 0.66. Update DateTime::TimeZone to 1.26. Update URL for FAQ in description. BR Cl

2010-12-21 Thread Steven Pritchard
commit e6a81aa80c449f4901e4345a00047604b29c6e85 Author: Steven Pritchard Date: Tue Dec 21 11:32:08 2010 -0600 Update DateTime to 0.66. Update DateTime::TimeZone to 1.26. Update URL for FAQ in description. BR Class::Load and parent. .gitignore |3 +++ perl-DateTime.

[perl-POE-Component-SimpleDBI] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit df7e5e561e2b3e6fde9f05e1ea913e58dfbdd1b7 Author: Marcela Mašláňová Date: Tue Dec 21 18:27:22 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-SimpleDBI.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-POE

[perl-POE-Filter-Transparent-SMTP] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 68175badc31fed92ff27f99c259639b9e0e28df3 Author: Marcela Mašláňová Date: Tue Dec 21 18:53:20 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Filter-Transparent-SMTP.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl

Re: [packager interface suggestion] Adding packages to buildroot directly from updates-testing

2010-12-21 Thread Matt McCutchen
On Tue, 2010-12-21 at 16:45 +, Adam Williamson wrote: > On Tue, 2010-12-21 at 11:24 -0500, Matt McCutchen wrote: > > On Tue, 2010-12-21 at 16:15 +, Adam Williamson wrote: > > > it would seem to make more sense, to me, to configure bodhi to re-try > > > the build, with updates-testing repo e

Maven 3 - mvn3-local to replace mvn-jpp command

2010-12-21 Thread Stanislav Ochotnicky
Hi everyone, I decided to post this to devel instead of java-devel, because I think this might be of interest to bigger audience. Today I built new version of maven package (beware, not maven2, but maven). This package contains apache-maven-3.0.0 with our custom resolver similar to mvn-jpp[1]. I

Package-specific test case and critical path test case project: drafts for review

2010-12-21 Thread Adam Williamson
Hi, everyone. So, in the recent debate about the update process it again became clear that we were lacking a good process for providing package-specific test instructions, and particularly specific instructions for testing critical path functions. I've been working on a process for this, and now h

[perl-POE-Component-Pluggable] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit bdd4c24d46a816fb362dbd153215c3cf4a2bf090 Author: Marcela Mašláňová Date: Tue Dec 21 17:58:40 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-Pluggable.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-POE

[perl-POE-Component-Log4perl] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit ec9d443bb1a9236a6d8f242962458c5fe4ac2bf5 Author: Marcela Mašláňová Date: Tue Dec 21 17:52:58 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-Log4perl.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-POE-

Re: [packager interface suggestion] Adding packages to buildroot directly from updates-testing

2010-12-21 Thread Kevin Fenzi
On Mon, 20 Dec 2010 21:55:47 +0100 Henrik Nordström wrote: > fre 2010-12-17 klockan 11:22 +0100 skrev Michael Schwendt: > > > +1 to some way of automating koji buildroot overrides (perhaps based > > on FAS group membership such as provenpackagers) in order to remove > > the releng bottleneck. >

[perl-POE-Component-JobQueue] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 61eeec9c82de6562e878454cfea098a620fc86f6 Author: Marcela Mašláňová Date: Tue Dec 21 17:47:16 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-JobQueue.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-POE-

Re: RemoveSETUID feature (Was: Summary/Minutes from today's FESCo meeting (2010-10-26) NEW TIME!)

2010-12-21 Thread Colin Walters
Pardon the thread necromancy, So recently I had cause to look at http://fedoraproject.org/wiki/Features/RemoveSETUID again (I was investigating the X server permissions for an unrelated reason). Now, that page links to http://people.redhat.com/sgrubb/libcap-ng/index.html which attempts to explai

Re: [packager interface suggestion] Adding packages to buildroot directly from updates-testing

2010-12-21 Thread Adam Williamson
On Tue, 2010-12-21 at 11:24 -0500, Matt McCutchen wrote: > On Tue, 2010-12-21 at 16:15 +, Adam Williamson wrote: > > On Mon, 2010-12-20 at 22:57 +0100, Henrik Nordström wrote: > > > > > * implemented by "only" a change in yum dependency resolution to use > > > fallback repositories (i.e. updat

[perl-POE-Component-Client-SMTP] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit b7b60e8cd175487ed22e96f645c3dd9aa08425c2 Author: Marcela Mašláňová Date: Tue Dec 21 17:41:52 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-Client-SMTP.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-P

[perl-POE-Component-Client-LDAP] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit 3fd7f7ee4196024b93a13e6ac6d6ad2db8744824 Author: Marcela Mašláňová Date: Tue Dec 21 17:36:06 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-Client-LDAP.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-P

KDE-SIG meeting report (51/2010)

2010-12-21 Thread Rex Dieter
This is a report of the weekly KDE-SIG-Meeting with a summary of the topics that were discussed. If you want to add a comment please reply to this email or add it to the related meeting page. = Weekly KDE Summary = Week: 51/2010 Time: 2010-12-21 15:00 UTC Meeting page: https://fedoraproject.o

[perl-POE-Component-Client-Keepalive] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit cd5768e2a8c12f19f0fd66f8c45a0d5905f576a7 Author: Marcela Mašláňová Date: Tue Dec 21 17:28:42 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-Client-Keepalive.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/p

Re: [packager interface suggestion] Adding packages to buildroot directly from updates-testing

2010-12-21 Thread Matt McCutchen
On Tue, 2010-12-21 at 16:15 +, Adam Williamson wrote: > On Mon, 2010-12-20 at 22:57 +0100, Henrik Nordström wrote: > > > * implemented by "only" a change in yum dependency resolution to use > > fallback repositories (i.e. updates-testing). > > I don't think that would be a good change, as it'

[perl-POE-Component-Client-HTTP] - 661697 rebuild for fixing problems with vendorach/lib

2010-12-21 Thread Marcela Mašláňová
commit b44861ae6247e11022680375121359570311e038 Author: Marcela Mašláňová Date: Tue Dec 21 17:20:00 2010 +0100 - 661697 rebuild for fixing problems with vendorach/lib perl-POE-Component-Client-HTTP.spec |5 - 1 files changed, 4 insertions(+), 1 deletions(-) --- diff --git a/perl-P

Re: [packager interface suggestion] Adding packages to buildroot directly from updates-testing

2010-12-21 Thread Adam Williamson
On Mon, 2010-12-20 at 22:57 +0100, Henrik Nordström wrote: > * implemented by "only" a change in yum dependency resolution to use > fallback repositories (i.e. updates-testing). I don't think that would be a good change, as it's changing the generic functionality of a tool for one specific use ca

Re: Building Gimp 2.7.2 problem

2010-12-21 Thread Jeffrey Ollie
On Mon, Dec 20, 2010 at 2:45 PM, Luya Tshimbalanga wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Hello, > I attempt to build gimp 2.7.2 for my repos.fedorapeople.org using koji > scratch but got result: > > tions -Winit-self -Wpointer-arith -Wold-style-definition > -Wmissing-forma