Re: Change request: SELinux tweaks.

2008-11-26 Thread Nils Philippsen
On Fri, 2008-11-21 at 16:49 -0500, Luke Macken wrote: On Fri, Nov 21, 2008 at 01:12:13PM -0800, Toshio Kuratomi wrote: Luke Macken wrote: On Fri, Nov 21, 2008 at 02:17:53PM -0600, Mike McGrath wrote: On Fri, 21 Nov 2008, Luke Macken wrote: Attached are some patches that will fix

Ian is vacationing

2008-11-26 Thread Ian Weller
So I'm pretty sure I'm like others, but I'll be on vacation for about a week with my family on Thanksgiving. If my packages need fixed, go ahead and fix 'em ;) -- Ian Weller [EMAIL PROTECTED] http://ianweller.org GnuPG fingerprint: E51E 0517 7A92 70A2 4226 B050 87ED 7C97 EFA8

Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Till Maas
On Wed November 26 2008, Toshio Kuratomi wrote: Till Maas wrote: On Wed November 26 2008, Toshio Kuratomi wrote: To be easy to code, require the token for every request of an authenticated user. If I understand your proposal correctly, a user would need to login again for every link

Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Chuck Anderson
On Wed, Nov 26, 2008 at 04:53:00PM +0100, Till Maas wrote: How big the regression is if users have to log in for every external link they click on, depends on how often this happens. I believe that links to FAS are not exchanged very often, therefore it will not hurt very much. I guess

Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Toshio Kuratomi
Chuck Anderson wrote: On Wed, Nov 26, 2008 at 04:53:00PM +0100, Till Maas wrote: How big the regression is if users have to log in for every external link they click on, depends on how often this happens. I believe that links to FAS are not exchanged very often, therefore it will not hurt

Re: I am Linux Fresher but at the sametime Student of RHCE

2008-11-26 Thread Mike McGrath
On Tue, 25 Nov 2008, Phadke Omkar Ashok wrote: Basic Commands in Linux and the following things Filesystem Structure Basic Partition Structure Types of Installation Kickstart Booting Sequence User Administration SUDO PAM File Permissions Special Permissions

Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Toshio Kuratomi
Till Maas wrote: On Wed November 26 2008, Toshio Kuratomi wrote: Till Maas wrote: On Wed November 26 2008, Toshio Kuratomi wrote: To be easy to code, require the token for every request of an authenticated user. If I understand your proposal correctly, a user would need to login again for

Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Chuck Anderson
On Wed, Nov 26, 2008 at 09:47:06AM -0800, Toshio Kuratomi wrote: Pretty much agreed on this analysis. My one note is that in my usage, at least, I already have to login most of the time when clicking on a link in bugzilla or email due to my session having expired already. Stange. I almost

Outage Notification - Fedorapeople.org 2008-11-30 06:00 UTC - 2008-11-30 18:00 UTC

2008-11-26 Thread Seth Vidal
Outage Notification - 2008-11-30 06:00 UTC There will be an outage starting at 2008-11-30 06:00 UTC, which will last approximately 12 hours. To convert UTC to your local time, take a look at http://fedoraproject.org/wiki/Infrastructure/UTCHowto or run: date -d '2008-11-30 06:00 UTC' Affected

Re: Fixing CSRF exploits in Infrastructure

2008-11-26 Thread Till Maas
On Wed November 26 2008, Toshio Kuratomi wrote: Till Maas wrote: How big the regression is if users have to log in for every external link they click on, depends on how often this happens. I believe that links to FAS are not exchanged very often, therefore it will not hurt very much. I

meeting tomorrow

2008-11-26 Thread Mike McGrath
I won't be able to attend the meeting tomorrow. Many of us in the US will be celebrating thanksgiving. I certainly do not want to stop others from hosting the meeting. If you're around and want to hold a meeting, please do. -Mike ___

Re: meeting tomorrow

2008-11-26 Thread Nigel Jones
I won't be available either. - Nigel On Wed, 2008-11-26 at 22:12 -0600, Mike McGrath wrote: I won't be able to attend the meeting tomorrow. Many of us in the US will be celebrating thanksgiving. I certainly do not want to stop others from hosting the meeting. If you're around and want to