Re: Fedora 37: Add kernel parameters that help prevent local exploits

2022-05-21 Thread Glorious Hellosway via devel
That will create a very big performance hit, and disabling SMT will half the amount of threads. On the new CPUs with E and P cores, this can significantly decrease performance. ___ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send

Re: F36 mock rebuild failure: cannot open linker script file

2022-05-21 Thread Sam Varshavchik
Zbigniew Jędrzejewski-Szmek writes: The issue is that in %prep, %buildsubdir is not defined, so the definition of %_package_note_file, which uses %buildsubdir, has a different value than in %build and later. Generally the best solution is to move the step that tries to make use of the package no

Re: grub2 BIOS booting iso and code

2022-05-21 Thread Dominik 'Rathann' Mierzejewski
Hello, Thomas. Thanks for your patience. I would've gotten the results sooner, but life got in the way. On Tuesday, 26 April 2022 at 23:18, Thomas Schmitt wrote: > Hi, > If test_oldlayout.iso does not boot, then i am quite clueless. I'm afraid that this is the case. I'll try to re-do the ISO man

Re: Fedora 37: Add kernel parameters that help prevent local exploits

2022-05-21 Thread Demi Marie Obenour
On 5/18/22 23:15, Hellosway Here via devel wrote: > Add `slab_nomerge init_on_alloc=1 init_on_free=1 page_alloc.shuffle=1 pti=on > randomize_kstack_offset=on vsyscall=none ` as default kernel command line > arguments. This can help prevent local exploits by making it harder to > exploit the kern

Re: What happened to umask?

2022-05-21 Thread Demi Marie Obenour
On 5/20/22 21:32, Nico Kadel-Garcia wrote: > On Fri, May 20, 2022 at 9:08 PM Neal Gompa wrote: >> >> On Fri, May 20, 2022 at 8:13 PM Owen Taylor wrote: >>> >>> For years, Red Hat Linux / Fedora systems have had a umask of 0002 for >>> regular users as part of the "user private group" scheme [*].

Re: Fedora 37: Add kernel parameters that help prevent local exploits

2022-05-21 Thread Glorious Hellosway via devel
For `slab_nomerge`, it can lead to very slight increase of kernel memory. `init_on_alloc=1` has a almost no performance impact, it is under 1% and is usually within standard error, but there is bug with zfs that can make zfs slower. `init_on_free=1` can be measured and is around 7-20% under cert

Re: Fedora-Rawhide-20220520.n.0 compose check report

2022-05-21 Thread Adam Williamson
On Fri, 2022-05-20 at 19:34 +, Fedora compose checker wrote: > Missing expected images: > > Minimal raw-xz armhfp > > Compose FAILS proposed Rawhide gating check! > 7 of 43 required tests failed, 9 results missing > openQA tests matching unsatisfied gating requirements shown with **GATING**

Re: F36 mock rebuild failure: cannot open linker script file

2022-05-21 Thread Zbigniew Jędrzejewski-Szmek
On Sat, May 21, 2022 at 08:16:22AM -0400, Sam Varshavchik wrote: > I'm taking a rather boring F35 SRPM and attempting to rebuild it in mock for > F36. > > Its stock configure script, that tries to test-compile conftest.c fails > thusly: > > gcc -O2 -flto=auto -ffat-lto-objects -fexceptions -g -gr

Fedora-Rawhide-20220521.n.0 compose check report

2022-05-21 Thread Fedora compose checker
Missing expected images: Minimal raw-xz armhfp Compose FAILS proposed Rawhide gating check! 4 of 43 required tests failed openQA tests matching unsatisfied gating requirements shown with **GATING** below Failed openQA tests: 42/231 (x86_64), 24/161 (aarch64) New failures (same test not failed

Re: What happened to umask?

2022-05-21 Thread Ron Yorston
Owen, Thanks for explaining the situation with umask. I'd noticed the discrepancy between login/non-login shells and wondered what was going on. >It seems like we need to do one of two things: > > - Go back to the old behavior, maybe by using the usergroups option to >pam_umask and removing the

F36 mock rebuild failure: cannot open linker script file

2022-05-21 Thread Sam Varshavchik
I'm taking a rather boring F35 SRPM and attempting to rebuild it in mock for F36. Its stock configure script, that tries to test-compile conftest.c fails thusly: gcc -O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches - pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_S

Re: F37 proposal: Build all JDKs in Fedora against in-tree libraries and with static stdc++lib (System-Wide Change proposal)

2022-05-21 Thread Vitaly Zaitsev via devel
On 21/05/2022 13:22, Jiri Vanek wrote: shim? Built on Koji from sources as shim-unsigned, then uploaded to Microsoft for signing. This is a special legal case, just like openh264 and Cisco. Both of them built from sources on Fedora infra. -- Sincerely, Vitaly Zaitsev (vit...@easycoding.o

Re: F37 proposal: Build all JDKs in Fedora against in-tree libraries and with static stdc++lib (System-Wide Change proposal)

2022-05-21 Thread Neal Gompa
On Sat, May 21, 2022 at 7:28 AM Jiri Vanek wrote: > > > > On 5/20/22 14:57, Vitaly Zaitsev via devel wrote: > > On 20/05/2022 14:28, Jiri Vanek wrote: > >> wait, what? What do you mean? And waht give you this impression? > > > > https://fedoraproject.org/wiki/MoveFedoraJDKsToBecomePortableJDKs: >

Fedora rawhide compose report: 20220521.n.0 changes

2022-05-21 Thread Fedora Rawhide Report
OLD: Fedora-Rawhide-20220520.n.0 NEW: Fedora-Rawhide-20220521.n.0 = SUMMARY = Added images:0 Dropped images: 0 Added packages: 0 Dropped packages:0 Upgraded packages: 34 Downgraded packages: 0 Size of added packages: 0 B Size of dropped packages:0 B Size

Re: F37 proposal: Build all JDKs in Fedora against in-tree libraries and with static stdc++lib (System-Wide Change proposal)

2022-05-21 Thread Jiri Vanek
On 5/20/22 14:57, Vitaly Zaitsev via devel wrote: On 20/05/2022 14:28, Jiri Vanek wrote: wait, what? What do you mean? And waht give you this impression? https://fedoraproject.org/wiki/MoveFedoraJDKsToBecomePortableJDKs: > Make the normal rpms to not built jdk, but to repack the portable r

Re: F37 proposal: Build all JDKs in Fedora against in-tree libraries and with static stdc++lib (System-Wide Change proposal)

2022-05-21 Thread Jiri Vanek
On 5/20/22 14:57, Vitaly Zaitsev via devel wrote: On 20/05/2022 14:28, Jiri Vanek wrote: wait, what? What do you mean? And waht give you this impression? https://fedoraproject.org/wiki/MoveFedoraJDKsToBecomePortableJDKs: > Make the normal rpms to not built jdk, but to repack the portable r

Re: F37 proposal: Build all JDKs in Fedora against in-tree libraries and with static stdc++lib (System-Wide Change proposal)

2022-05-21 Thread Jiri Vanek
It is not so bad. and I definitely do not feel offended or even close to. Many languages have very interesting words which go far beyond true/false untrue/not false/ correct/incorrect right/left/lie Thus saying many languages can not match to other langunages meaning of simple true/false right

Fedora-Cloud-34-20220521.0 compose check report

2022-05-21 Thread Fedora compose checker
No missing expected images. Soft failed openQA tests: 1/8 (x86_64), 1/8 (aarch64) (Tests completed, but using a workaround for a known bug) Old soft failures (same test soft failed in Fedora-Cloud-34-20220520.0): ID: 1274992 Test: x86_64 Cloud_Base-qcow2-qcow2 cloud_autocloud URL: https://op