Re: Release criterion proposal: "Package sets" (Alpha and Beta)

2015-01-30 Thread Adam Williamson
On Thu, 2015-01-29 at 15:52 -0800, Adam Williamson wrote: > Hum, let me try one more change: if we have official Flavor > netinsts, we don't really need to *require* the generic one to work > for the flavors. KDE is kind of a question, but I think to try and > reduce the workload maybe we shoul

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chris Murphy
On Fri, Jan 30, 2015 at 3:03 PM, Adam Williamson wrote: > On Fri, 2015-01-30 at 14:49 -0700, Chris Murphy wrote: >> >> I just don't see any consideration here except specious statements >> like better security is always a plus. That was the summary extent >> of the entire decision making process.

Fedora 20 updates-testing report

2015-01-30 Thread updates
The following Fedora 20 Security updates need testing: Age URL 119 https://admin.fedoraproject.org/updates/FEDORA-2014-11969/krb5-1.11.5-16.fc20 72 https://admin.fedoraproject.org/updates/FEDORA-2014-15371/rubygem-actionpack-4.0.0-5.fc20 71 https://admin.fedoraproject.org/updates/FEDOR

Fedora 21 updates-testing report

2015-01-30 Thread updates
The following Fedora 21 Security updates need testing: Age URL 72 https://admin.fedoraproject.org/updates/FEDORA-2014-15342/rubygem-actionpack-4.1.5-2.fc21 71 https://admin.fedoraproject.org/updates/FEDORA-2014-15413/rubygem-sprockets-2.12.1-3.fc21 49 https://admin.fedoraproject.org/u

Re: 2015-01-30 Taskotron Downtime

2015-01-30 Thread Tim Flink
On Fri, 30 Jan 2015 14:45:07 -0700 Tim Flink wrote: > Since qadevel needs to be rebuilt, I'm taking this opportunity to move > it out of the cloud infrastructure since that's been on my TODO list > for some time now. > > As part of this, the database host for most of the QA services needs > to b

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Adam Williamson
On Fri, 2015-01-30 at 14:49 -0700, Chris Murphy wrote: > > I just don't see any consideration here except specious statements > like better security is always a plus. That was the summary extent > of the entire decision making process. Well, no, AFAICS there isn't anything like that. It was a f

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chris Murphy
On Fri, Jan 30, 2015 at 2:49 PM, Chris Murphy wrote: > its > devices without passwords are regularly used on public encrypted wifi > and the world is not ending. Oops, that should be non-encrypted. -- Chris Murphy -- test mailing list test@lists.fedoraproject.org To unsubscribe: https://admin

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chris Murphy
On Fri, Jan 30, 2015 at 1:21 PM, Adam Williamson wrote: > On Fri, 2015-01-30 at 12:59 -0700, Chris Murphy wrote: >> What's the actual, real world, >> non-imaginary impetus behind the change? > > It's exactly what all the list posts I pointed you to say it is. Please go find quotes because I just

2015-01-30 Taskotron Downtime

2015-01-30 Thread Tim Flink
Since qadevel needs to be rebuilt, I'm taking this opportunity to move it out of the cloud infrastructure since that's been on my TODO list for some time now. As part of this, the database host for most of the QA services needs to be upgraded. Taskotron (dev, stg and prod) will be going during th

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chris Murphy
On Fri, Jan 30, 2015 at 1:13 PM, Kevin Fenzi wrote: > Just FYI, this will likely be my last post to this thread. > > On Fri, 30 Jan 2015 12:59:12 -0700 > Chris Murphy wrote: >> User who want or need more secure passwords can always opt in without >> affect anyone else. Why is the project's insta

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Adam Williamson
On Fri, 2015-01-30 at 16:08 -0500, Scott Robbins wrote: > On Fri, Jan 30, 2015 at 01:13:47PM -0700, Kevin Fenzi wrote: > > Just FYI, this will likely be my last post to this thread. > > > > I think most people think it's not such a big deal and cannot see > > why you are so stridently affected by

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread John Morris
On Fri, 2015-01-30 at 13:13 -0700, Kevin Fenzi wrote: > Because you cannot just say "This is some decision, I know whatever I > do will have good and bad tradeoffs, therefore, I will just not decide > and expose all the possible choices to the user". Thats just not > tenable. That is exactly wha

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chuck Forsberg WA7KGX
If you like your password you can keep it. Period. Otherwise write it down as in "War Games" -- Chuck Forsberg WA7KGX c...@omen.com www.omen.com Developer of Industrial ZMODEM(Tm) for Embedded Applications Omen Technology Inc "The High Reliability Software" 10255 NW Old

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Scott Robbins
On Fri, Jan 30, 2015 at 12:54:22PM -0800, Rick Stevens wrote: > > If I wanted to be led by the nose, restricted in what I can do and > nannied constantly, I'd use Windows or a freaking Mac. Sheesh! Errm, no, they let you choose the password. Heh, could be a new advertising slogan. YOU choose

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Shawn Starr
On Friday, January 30, 2015 04:08:19 PM Scott Robbins wrote: > On Fri, Jan 30, 2015 at 01:13:47PM -0700, Kevin Fenzi wrote: > > Just FYI, this will likely be my last post to this thread. > > > > I think most people think it's not such a big deal and cannot see why > > you are so stridently affecte

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Scott Robbins
On Fri, Jan 30, 2015 at 01:13:47PM -0700, Kevin Fenzi wrote: > Just FYI, this will likely be my last post to this thread. > > I think most people think it's not such a big deal and cannot see why > you are so stridently affected by it. With all due respect, I think that several others, includin

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Rick Stevens
On 01/30/2015 12:21 PM, Adam Williamson wrote: On Fri, 2015-01-30 at 12:59 -0700, Chris Murphy wrote: What's the actual, real world, non-imaginary impetus behind the change? It's exactly what all the list posts I pointed you to say it is. I don't know how to stop the conspiracy virus which cau

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Adam Williamson
On Fri, 2015-01-30 at 12:59 -0700, Chris Murphy wrote: > What's the actual, real world, > non-imaginary impetus behind the change? It's exactly what all the list posts I pointed you to say it is. I don't know how to stop the conspiracy virus which causes people to leap to the conclusion that the

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Kevin Fenzi
Just FYI, this will likely be my last post to this thread. On Fri, 30 Jan 2015 12:59:12 -0700 Chris Murphy wrote: > ATMs have rate and retry limits, among other mechanisms, to permit a 4 > digit numeric PIN being adequately secure. Does Fedora have limits on > rate and retries? If not, why not?

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Adam Williamson
On Fri, 2015-01-30 at 08:05 -0600, Chris Adams wrote: > > This change was _announced_ here, not discussed (and some responses > make it sound like it is not open to discussion). There was no real > justification for the change in the announcement, except for a vague > "better security" bit. T

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chris Murphy
On Fri, Jan 30, 2015 at 9:54 AM, Kevin Fenzi wrote: > On Fri, 30 Jan 2015 22:11:12 +0530 > Sudhir Khanger wrote: > >> On Thursday, January 29, 2015 01:30:11 PM David Lehman wrote: >> > Pick a single "strong" password that you can remember and use it >> > for all of them. Pretty easy, really. >> >

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Sudhir Khanger
On Friday, January 30, 2015 09:54:00 AM Kevin Fenzi wrote: > IMHO, this isn't so big a deal. I'll have to change my throw away > instance test password from 'abc123' to something like 'tacosyum99' > Shrug. I agree. It is surely not a big deal but the logic behind it is a little weak and paternal

Re: criterion update: add "switch user" to Shutdown, reboot, logout

2015-01-30 Thread Matthias Clasen
On Fri, 2015-01-30 at 09:37 -0600, Michael Catanzaro wrote: > On Fri, Jan 30, 2015 at 6:50 AM, Kamil Paral > wrote: > > I proposed this criterion because history shows that the approach > > you mention (let's fix it with updates) didn't really work, at least > > for GNOME. So I'm trying something

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Kevin Fenzi
On Fri, 30 Jan 2015 22:11:12 +0530 Sudhir Khanger wrote: > On Thursday, January 29, 2015 01:30:11 PM David Lehman wrote: > > Pick a single "strong" password that you can remember and use it > > for all of them. Pretty easy, really. > > It's not my memory but its my fingers. I will have to enter

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Sudhir Khanger
On Thursday, January 29, 2015 01:30:11 PM David Lehman wrote: > Pick a single "strong" password that you can remember and use it for all > of them. Pretty easy, really. It's not my memory but its my fingers. I will have to enter a long password over and over again for no real reasons. -- Regar

Unexpected qadevel outage

2015-01-30 Thread Tim Flink
I'm not sure what happened but the machine hosting qadevel became unresponsive sometime in the last 12 hours and is not recoverable. I'm going to be rebuilding the host today but until I'm done, phabricator and the other services on qadevel will not be available. I'll update this thread as I make

Re: Heads up - Anaconda 22.17 will enforce 'good' passwords

2015-01-30 Thread Chris Adams
Once upon a time, Adam Williamson said: > There's no policy (AFAIK) on what is and is not a Change. FESCo has > the power to effectively declare something to be a Change (and thus > subject to review and so forth) if it decides to do so, but there's > nothing beyond that. And as I said to other

Re: criterion update: add "switch user" to Shutdown, reboot, logout

2015-01-30 Thread Kamil Paral
> At the same time, our blocker criteria are generally interpreted to apply to > common bugs. If user switching is broken for one guy with an obscure setup, > that shouldn't be a blocker. Yes, that's how release criteria usually work. It needs to be a general problem affecting everybody or a larg

rawhide report: 20150130 changes

2015-01-30 Thread Fedora Rawhide Report
Compose started at Fri Jan 30 05:15:07 UTC 2015 Broken deps for i386 -- [Sprog] Sprog-0.14-27.fc20.noarch requires perl(:MODULE_COMPAT_5.18.0) [aeskulap] aeskulap-0.2.2-0.19beta1.fc22.i686 requires libofstd.so.3.6 aesku