Cfitsio soname bump

2014-01-08 Thread Sergio Pascual
Hello, I'm going to build new cfitsio 3.360 in Rawhide. This involves a soname bump. You can see the changes here http://heasarc.gsfc.nasa.gov/FTP/software/fitsio/c/docs/changes.txt and more detailed information about the changes here: http://upstream-tracker.org/versions/cfitsio.html The aff

Schedule for Wednesday's FESCo Meeting (2014-01-08)

2014-01-08 Thread Tomas Mraz
Following is the list of topics that will be discussed in the FESCo meeting Wednesday (today) at 18:00UTC in #fedora-meeting on irc.freenode.net. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/UTCHowto or run: date -d '-MM-DD HH:MM UTC' Links to all tick

Re: Source file audit - 2014-01-05

2014-01-08 Thread Simone Caronni
On 7 January 2014 19:31, Toshio Kuratomi wrote: > Looking at the lookaside cache directly, it looks like that file has been > uploaded previously (in lookaside, there's currently two tarballs for > dkms-2.2.0.3.tar.gz with two separate md5sums). > Thanks, who was mantaining it before me uploaded

Fedora 20 for IBM System z 64bit official release

2014-01-08 Thread Dan Horák
Hello everyone, The Fedora 20 GA release for the IBM System z is here. This time again a few weeks later than the primary release mainly because of me being on vacation (again :-)) during the December holidays. The difference to primary Fedora is this time a bit larger than it was in Fedora 19 for

Request to takeover easytag package

2014-01-08 Thread David King
Hi I posted a week ago about the non-responsive easytag package maintainer (thias, Matthias Saou): https://bugzilla.redhat.com/show_bug.cgi?id=1044029 https://lists.fedoraproject.org/pipermail/devel/2014-January/193301.html Based on Peter Lemenkov’s reply, it seems that the maintainer has not

The right way to git clone a subversion repo...

2014-01-08 Thread Darryl L. Pierce
I recently took over package maintenance for Audacity. So the first thing I want to do is clone their development tree, create a branch from the latest release and star tracking patches against it as needed. The Audacity team uses Subversion, while I prefer Git, so I attempted to use Git to clone t

Re: The right way to git clone a subversion repo...

2014-01-08 Thread Dan Horák
On Wed, 8 Jan 2014 08:27:42 -0500 "Darryl L. Pierce" wrote: > I recently took over package maintenance for Audacity. So the first > thing I want to do is clone their development tree, create a branch > from the latest release and star tracking patches against it as > needed. The Audacity team use

Re: The right way to git clone a subversion repo...

2014-01-08 Thread Darryl L. Pierce
On Wed, Jan 08, 2014 at 02:38:14PM +0100, Dan Horák wrote: > in my experience it can take hours to clone large SVN repos (similar > to 13k revisions in audacity), I usually use > git svn clone --stdlayout > but it should be equivalent to your procedure > > somewhere under .git you should see a fi

Review Request 64: Do not display obsolete and deleted updates

2014-01-08 Thread Martin Krizek
--- This is an automatically generated e-mail. To reply, visit: http://reviewboard-tflink.rhcloud.com/r/64/ --- Review request for blockerbugs. Repository: blockerbugs Description -

Re: The right way to git clone a subversion repo...

2014-01-08 Thread Michael Stahl
On 08/01/14 14:27, Darryl L. Pierce wrote: > The problem is that it's been HOURS and Git hasn't finished cloning the > tree. > It's the third step which is taking forever to complete. I left it to > run overnight (10 hours) and it never finished. I paused it, came to > work, resumed it and it's s

Re: The right way to git clone a subversion repo...

2014-01-08 Thread Darryl L. Pierce
On Wed, Jan 08, 2014 at 03:12:08PM +0100, Michael Stahl wrote: > On 08/01/14 14:27, Darryl L. Pierce wrote: > > > The problem is that it's been HOURS and Git hasn't finished cloning the > > tree. > > > It's the third step which is taking forever to complete. I left it to > > run overnight (10 hou

DevConf.cz 2014 schedule is out!

2014-01-08 Thread Jiri Eischmann
Hi, I'd like to announce that the schedule of Developer Conference 2014, which also includes Fedora Day this year, is out: http://devconf.cz/schedule It features around 100 speakers of almost 20 nationalities that will have 68 talks and 30 workshops and labs. What may be especially interesting to

Meeting minutes Env-and-Stacks WG meeting (2014-01-07)

2014-01-08 Thread Marcela Mašláňová
This should be obviously yesterday meeting minutes. On 01/07/2014 03:54 PM, Marcela Mašláňová wrote: #fedora-meeting: env and stacks (2014-01-07) Meeting started by mmaslano at 13:00:41 UTC. The full logs

Re: Grub installation. First potential Fedora killer

2014-01-08 Thread Gene Czarcinski
On 01/07/2014 12:28 PM, Chris Murphy wrote: On Jan 7, 2014, at 12:28 AM, Adam Williamson wrote: I recalled that we'd had some kind of issue with the mkconfig/install ordering before while I was writing the patch, indeed, but I couldn't recall if it was mkconfig sometimes requiring install to ha

File B-Hooks-EndOfScope-0.13.tar.gz uploaded to lookaside cache by pghmcfc

2014-01-08 Thread Paul Howarth
A file has been added to the lookaside cache for perl-B-Hooks-EndOfScope: 6cdaaa88a39054cd13aacad7bd2171da B-Hooks-EndOfScope-0.13.tar.gz -- Fedora Extras Perl SIG http://www.fedoraproject.org/wiki/Extras/SIGs/Perl perl-devel mailing list perl-de...@lists.fedoraproject.org https://admin.fedorapro

Re: Taskotron (was: Re: Unannounced ABI change without soname bump in libevdev-0.6 in Rawhide (and F19 and F20...) breaks GNOME, probably other consumers)

2014-01-08 Thread Tim Flink
On Wed, 8 Jan 2014 02:14:43 -0500 Rahul Sundaram wrote: > Hi > > On Wed, Jan 8, 2014 at 1:58 AM, Adam Williamson wrote: > > > > > Well, we'll want to do all sorts of tests that aren't obviously > > tied to any specific package. The only kinds of tests it would make > > sense to have in packages

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Kai Engert
On Mi, 2013-12-11 at 09:59 -0800, Toshio Kuratomi wrote: > Last night someone asked me about a package that they were working on that > had a pem file in it. Looking closer, it seems that the pem file is > a cacert bundle. Looking around, there's not currently documentation on > what to do with

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Adam Williamson
On Wed, 2014-01-08 at 18:05 +0100, Kai Engert wrote: > On Mi, 2013-12-11 at 09:59 -0800, Toshio Kuratomi wrote: > > Last night someone asked me about a package that they were working on that > > had a pem file in it. Looking closer, it seems that the pem file is > > a cacert bundle. Looking arou

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/08/2014 12:05 PM, Kai Engert wrote: > On Mi, 2013-12-11 at 09:59 -0800, Toshio Kuratomi wrote: >> Last night someone asked me about a package that they were >> working on that had a pem file in it. Looking closer, it seems >> that the pem file i

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Kai Engert
On Mi, 2014-01-08 at 12:32 -0500, Stephen Gallagher wrote: > but what about > package-specific CAs? For example, I have a pattern I was thinking > about adding to the tog-pegasus that causes it to do the following: > > 1. Create an x509v3 certificate and key with the CA extension > 2. Create a ne

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Kai Engert
On Mi, 2014-01-08 at 09:16 -0800, Adam Williamson wrote: > > Packages, that would like to use a default list of CA certificates, > > should be changed to use (consume) the new consolidated data that we > > provide as part of SharedSystemCertificates. > > This could do with some specifics: > > [a

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Adam Williamson
On Wed, 2014-01-08 at 18:56 +0100, Kai Engert wrote: > On Mi, 2014-01-08 at 09:16 -0800, Adam Williamson wrote: > > > Packages, that would like to use a default list of CA certificates, > > > should be changed to use (consume) the new consolidated data that we > > > provide as part of SharedSystem

libev - bundling - "expected"

2014-01-08 Thread Tim St Clair
Greetings folks - It appears that I've run into a conundrum: libev upstream developer(s) actually encourage (re)bundling of libev, see - https://bugzilla.redhat.com/show_bug.cgi?id=1049554 I was wondering if there was president for how to handle *this.  In groking the code, it's not run-time

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/08/2014 12:54 PM, Kai Engert wrote: > On Mi, 2014-01-08 at 12:32 -0500, Stephen Gallagher wrote: >> but what about package-specific CAs? For example, I have a >> pattern I was thinking about adding to the tog-pegasus that >> causes it to do the f

Re: dnf versus yum

2014-01-08 Thread Przemek Klosowski
On 01/05/2014 08:33 PM, Reindl Harald wrote: "yum remove kernel" is a clean and sane way to remove all but not the running kernels "distribute-command.sh 'yum -y remove kernel'" is used here for years on a ton of machines why do you think that a *replacement* should come up not support this? w

Fedora ARM Status Meeting 2014-01-08

2014-01-08 Thread Paul Whalen
Happy New Year! Please join us today (Wednesday, January 8th) at 4PM EST (9PM UTC) for the Fedora ARM status meeting in #fedora-meeting-1 on Freenode. On the agenda so far.. 1) Aarch64 - Status Update - Problem Packages 2) F21 - Hardware Support Goals - Installation Images

Re: dnf versus yum

2014-01-08 Thread Miloslav Trmač
On Wed, Jan 8, 2014 at 7:43 PM, Przemek Klosowski wrote: > Another point: it shouldn't be hardwired into the package manager but > rather result from package properties. I can see several ways to do it: > - an 'essentiality' property in the RPM file > - a yum/dnf configuration file specifying a

Summary/Minutes for today's FESCo Meeting (2014-01-08)

2014-01-08 Thread Tomas Mraz
=== #fedora-meeting: FESCO (2014-01-08) === Meeting started by t8m at 18:01:33 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-01-08/fesco.2014-01-08-18.01.log.html . Meeting summary -

Re: libev - bundling - "expected"

2014-01-08 Thread Adam Williamson
On Wed, 2014-01-08 at 13:09 -0500, Tim St Clair wrote: > Greetings folks - > > It appears that I've run into a conundrum: libev upstream developer(s) > actually encourage (re)bundling of libev, see - > https://bugzilla.redhat.com/show_bug.cgi?id=1049554 > > I was wondering if there was preside

Re: dnf versus yum

2014-01-08 Thread Matthew Miller
On Wed, Jan 08, 2014 at 01:43:01PM -0500, Przemek Klosowski wrote: > >hence that is why whatever calls itself a replacement for yum should *not* > >support destroy the running system without whatever *force switch* > I don't like the weird partial functionality of this feature. It is > apparently u

Re: dnf versus yum

2014-01-08 Thread Bill Nottingham
Matthew Miller (mat...@fedoraproject.org) said: > I'm a little lost in the thread, but do you mean that yum's protected > packages functionality is undocumented? If that is what you mean, check the > man page. It says: > > protected_packages This is a list of packages that yum should > nev

Re: libev - bundling - "expected"

2014-01-08 Thread Tim St Clair
Thanks Adam, that was the reference I was looking for. Cheers, Tim - Original Message - > From: "Adam Williamson" > To: "Development discussions related to Fedora" > > Sent: Wednesday, January 8, 2014 1:39:41 PM > Subject: Re: libev - bundling - "expected" > > On Wed, 2014-01-08 at 1

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Kai Engert
On Mi, 2014-01-08 at 13:38 -0500, Stephen Gallagher wrote: > I don't really see this being more likely than an existing application > just bundling a wrapper script for certificate generation and > 'update-ca-extract' and quietly running that as part of %post. Just as > easy to miss and equally ef

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/08/2014 02:57 PM, Kai Engert wrote: > On Mi, 2014-01-08 at 13:38 -0500, Stephen Gallagher wrote: >> I don't really see this being more likely than an existing >> application just bundling a wrapper script for certificate >> generation and 'update

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Kai Engert
On Mi, 2014-01-08 at 10:03 -0800, Adam Williamson wrote: > > > which one of those 11 files, exactly, should we have packages use when? > > > When I came up against this situation recently I threw a dart and > > > picked /etc/pki/tls/certs/ca-bundle.crt , but I'm hardly certain. > > > > The manual

Re: Non-responsive easytag package maintainer

2014-01-08 Thread Kevin Fenzi
On Wed, 1 Jan 2014 18:09:32 +0400 Peter Lemenkov wrote: > Matthias seems to stop his participation in Fedora ~1 year ago: > > http://koji.fedoraproject.org/koji/tasks?owner=thias&state=all > > Dave, I think you should be granted a primary maintainer status for > EasyTAG. I mailed Matthias toda

Schedule for Thursday's FPC Meeting (2014-01-09 17:00 UTC)

2014-01-08 Thread James Antill
Following is the list of topics that will be discussed in the FPC meeting Thursday at 2014-01-09 17:00 UTC in #fedora-meeting-1 on irc.freenode.net. Local time information (via. rktime): 2014-01-09 09:00 Thu US/Pacific PST 2014-01-09 12:00 Thu US/Eastern EST 2014-01-09 1

Re: Shared System Certificates followup: Packaging Guidelines?

2014-01-08 Thread Adam Williamson
On Wed, 2014-01-08 at 21:05 +0100, Kai Engert wrote: > On Mi, 2014-01-08 at 10:03 -0800, Adam Williamson wrote: > > > > which one of those 11 files, exactly, should we have packages use when? > > > > When I came up against this situation recently I threw a dart and > > > > picked /etc/pki/tls/cert

Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Andrew Lutomirski
/usr/bin/Xorg is, and has been, setuid-root just about forever. I'm wondering whether there's any good reason for it to remain setuid-root. Some arguments for setuid-root: - People who still use startx or similar scripts need it. - It's vaguely useful for testing xorg.conf changes. Some argume

Fedora ARM Status Meeting Minutes 2014-01-08

2014-01-08 Thread Paul Whalen
Thanks to those that were able to join us for the status meeting today, for those unable the minutes are posted below: Minutes: http://meetbot.fedoraproject.org/fedora-meeting-1/2014-01-08/fedora-meeting-1.2014-01-08-21.01.html Minutes (text): http://meetbot.fedoraproject.org/fedora-meeting-1

Re: pacemaker in Fedora and RHEL

2014-01-08 Thread Andrew Beekhof
On 12 Dec 2013, at 2:40 pm, Digimer wrote: > On 11/12/13 06:36, Christopher Meng wrote: >> Hi all, >> >> I wonder if there are some reasonable explanations of package >> "pacemaker" in the repo. >> >> I checked the package and the result returned is: >> >> Fedora: pacemaker-1.1.9-3.fc20 in ra

Re: Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Peter Hutterer
On Wed, Jan 08, 2014 at 01:14:08PM -0800, Andrew Lutomirski wrote: > /usr/bin/Xorg is, and has been, setuid-root just about forever. I'm > wondering whether there's any good reason for it to remain > setuid-root. http://fedoraproject.org/wiki/Changes/XorgWithoutRootRights Cheers, Peter > >

Re: Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Andrew Lutomirski
On Wed, Jan 8, 2014 at 2:58 PM, Peter Hutterer wrote: > On Wed, Jan 08, 2014 at 01:14:08PM -0800, Andrew Lutomirski wrote: >> /usr/bin/Xorg is, and has been, setuid-root just about forever. I'm >> wondering whether there's any good reason for it to remain >> setuid-root. > > http://fedoraproject.

Re: Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Kevin Fenzi
I could have sworn there was a more recent discussion of this, but there is at least this thread from 2009: https://lists.fedoraproject.org/pipermail/devel/2009-August/036086.html Also: http://lwn.net/Articles/546537/ (discussion about the last revoke() discussion on linux-kernel). kevin

Re: Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Andrew Lutomirski
On Wed, Jan 8, 2014 at 3:18 PM, Kevin Fenzi wrote: > I could have sworn there was a more recent discussion of this, but > there is at least this thread from 2009: > > https://lists.fedoraproject.org/pipermail/devel/2009-August/036086.html > > Also: > > http://lwn.net/Articles/546537/ > > (discussi

Re: Source file audit - 2014-01-05

2014-01-08 Thread Kevin Fenzi
On Mon, 6 Jan 2014 14:05:32 -0700 Jerry James wrote: > > jjames:BADSOURCE:networkx_reference.pdf:python-networkx > > jjames:BADSOURCE:networkx_tutorial.pdf:python-networkx > > jjames:BADSOURCE:networkx-documentation.zip:python-networkx > > > I can't reproduce this. A fresh download of these fi

Re: Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Matthew Miller
On Wed, Jan 08, 2014 at 01:14:08PM -0800, Andrew Lutomirski wrote: > /usr/bin/Xorg is, and has been, setuid-root just about forever. I'm > wondering whether there's any good reason for it to remain > setuid-root. [...] > - Xorg is a giant attack surface. Without setuid-root, only users > sitting

Re: Should /usr/bin/Xorg (still) be setuid-root?

2014-01-08 Thread Andrew Lutomirski
On Wed, Jan 8, 2014 at 5:45 PM, Matthew Miller wrote: > On Wed, Jan 08, 2014 at 01:14:08PM -0800, Andrew Lutomirski wrote: >> /usr/bin/Xorg is, and has been, setuid-root just about forever. I'm >> wondering whether there's any good reason for it to remain >> setuid-root. > [...] >> - Xorg is a g

Unannounced soname bump: satyr (libsatyr.so.2 -> libsatyr.so.3) - affects libreport and abrt

2014-01-08 Thread Adam Williamson
The 'satyr' package in Rawhide was bumped from 0.12 to 0.13 yesterday. This bumps the library's soname from libsatyr.so.2 to libsatyr.so.3 . This was not announced on devel@, as it is supposed to be (or the person doing the bump must immediately handle rebuilds of all dependent packages). abrt and

Re: Source file audit - 2014-01-05

2014-01-08 Thread Orion Poplawski
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/06/2014 12:53 PM, Kevin Fenzi wrote: > Happy new year. A great time to clean up sources files. ;) > > Here's attached another run of my sources/patches url checker. > Please fix any packages you are responsible for in rawhide, and > other branc

Re: dnf versus yum

2014-01-08 Thread Toshio Kuratomi
On Wed, Jan 08, 2014 at 02:56:14PM -0500, Bill Nottingham wrote: > Matthew Miller (mat...@fedoraproject.org) said: > > I'm a little lost in the thread, but do you mean that yum's protected > > packages functionality is undocumented? If that is what you mean, check the > > man page. It says: > > >

Re: Fedora 20 release day FedUp bug: post-mortem

2014-01-08 Thread Vratislav Podzimek
On Sun, 2014-01-05 at 01:15 +0100, Kevin Kofler wrote: > Adam Williamson wrote: > > So, um, you think that because we've done three big changes in the past > > that means we won't ever do another again? I'm not quite sure how that > > logic works. > > We've already broken the distro 3 times, that'