Re: Silly request of the day:
by Malita, Florin
On Mon, 2005-10-17 at 13:10 -0400, Stephen J. Smoogen wrote:
> With authconfig possibly getting a rewrite.. how about renaming it to
> system-config-authorization ?
You mean system-config-authentication, right?
18 years, 6 months
FC-devel install
by Florian La Roche
Current FC-devel tree via kickstart stops at
kickstart.py:655 due to missing _().
Maybe the following would fix it:
--- kickstart.py
+++ kickstart.py
@@ -28,6 +28,7 @@ import urlgrabber.grabber as grabber
import lvm
from pykickstart.parser import *
from pykickstart.data import *
+from rhpl.translate import _
import logging
log = logging.getLogger("anaconda")
greetings,
Florian La Roche
18 years, 6 months
rawhide report: 20051017 changes
by Build System
Updated Packages:
kernel-2.6.13-1.1615_FC5
------------------------
* Sun Oct 16 2005 Dave Jones <davej(a)redhat.com>
- Enable ACPI EC Burst.
- Change printk level of an ACPI message.
- Stop IDE claiming legacy ports before libata in combined mode.
net-tools-1.60-57
-----------------
* Sat Oct 15 2005 Radek Vokal <rvokal(a)redhat.com> 1.60-57
- add note to hostname man page about gethostbyname() (#166581)
- don't ship any rarp man page (#170537)
slang-1.4.9-21
--------------
system-config-soundcard-1.2.12-6
--------------------------------
* Sun Oct 16 2005 Martin Stransky <stransky(a)redhat.com> 1.2.12-6
- new pam file (#170648 – pam_stack is deprecated)
18 years, 6 months
Buildsys needs kicking
by Nicolas Mailhot
[nim@rousalka FC-3]$ plague-client list
Traceback (most recent call last):
File "/usr/bin/plague-client", line 421, in ?
list_jobs(server, sys.argv[2:])
File "/usr/bin/plague-client", line 171, in list_jobs
(e, msg, jobs) = server.list_jobs(query_args)
File "/usr/lib64/python2.4/xmlrpclib.py", line 1096, in __call__
return self.__send(self.__name, args)
File "/usr/lib64/python2.4/xmlrpclib.py", line 1383, in __request
verbose=self.__verbose
File "/usr/lib64/python2.4/xmlrpclib.py", line 1147, in request
return self._parse_response(h.getfile(), sock)
File "/usr/lib64/python2.4/xmlrpclib.py", line 1286, in
_parse_response
return u.close()
File "/usr/lib64/python2.4/xmlrpclib.py", line 744, in close
raise Fault(**self._stack[0])
xmlrpclib.Fault: <Fault 1: '_sqlite.OperationalError:database is
locked'>
[nim@rousalka FC-3]$ date
dim oct 16 22:34:22 CEST 2005
--
Nicolas Mailhot
18 years, 6 months
rawhide report: 20051016 changes
by Build System
Updated Packages:
SysVinit-2.85-42
----------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> - 2.85-42
- Fix patch
beecrypt-4.1.2-9
----------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- Use -with-cplusplus=no. The libs still require libstdc++, so
this needs further cleanup.
cdparanoia-alpha9.8-26
----------------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- make sure shared libs are linked against respective other libs
checkpolicy-1.27.9-2
--------------------
* Sat Oct 15 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.9-2
- Rebuild to get latest libsepol
cups-1:1.1.23-23
----------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- link libcupsimage.so against libcups
dmraid-1.0.0.rc8-FC4_6
----------------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- add -lselinux -lsepol for new device-mapper deps
doxygen-1:1.4.5-1
-----------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- 1.4.5
esound-1:0.2.36-2
-----------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- link shared libs against all dependent libs
gnome-screensaver-0.0.16-1
--------------------------
* Sun Oct 16 2005 Matthias Clasen <mclasen(a)redhat.com> 0.0.16-1
- Update to 0.0.16
* Fri Oct 14 2005 Matthias Clasen <mclasen(a)redhat.com> 0.0.15-2
- Don't use pam_stack (#170703)
* Thu Oct 06 2005 Matthias Clasen <mclasen(a)redhat.com> 0.0.15-1
- Update to 0.0.15
howl-0.9.8-4
------------
* Sun Oct 16 2005 Florian La Roche <laroche(a)redhat.com>
- link shared lib against -lpthread
- exit 0 for postun
* Wed Mar 02 2005 Alex Larsson <alexl(a)redhat.com> 0.9.8-3
- Rebuild
* Mon Dec 20 2004 Daniel Reed <djr(a)redhat.com> 0.9.8-2
- fix pkgconfig include directory
kernel-2.6.13-1.1611_FC5
------------------------
* Sat Oct 15 2005 Dave Jones <davej(a)redhat.com>
- 2.6.14-rc4-git4
lftp-3.3.1-1
------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- 3.3.1
libavc1394-0.4.1-9
------------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- make sure librom1394 is linked to libraw1394 and also
libavc1394 is linked to librom1394 (also bz 156938)
libc-client-2002e-11
--------------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- fix to rebuild at least, seems the way to specify the
include dir is a bit broken
* Wed Mar 02 2005 Joe Orton <jorton(a)redhat.com> 2002e-10
- rebuild
libcroco-0.6.0-6
----------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- link shared lib against -lglib-2.0 and -lxml2
libsemanage-1.3.18-1
--------------------
* Sat Oct 15 2005 Dan Walsh <dwalsh(a)redhat.com> 1.3.18-1
- Update from NSA
* Merged bugfix patch from Ivan Gyurdiev.
* Merged seuser database patch from Ivan Gyurdiev.
Merged direct user/port databases to the handle from Ivan Gyurdiev.
* Removed obsolete include/semanage/commit_api.h (leftover).
Merged seuser record patch from Ivan Gyurdiev.
* Merged boolean and interface databases from Ivan Gyurdiev.
libsepol-1.9.18-1
-----------------
* Sat Oct 15 2005 Dan Walsh <dwalsh(a)redhat.com> 1.9.18-1
- Upgrade to latest from NSA
* Merged conditional expression mapping fix in the module linking
code from Joshua Brindle.
libsilc-0:0.9.12-12
-------------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- link against dependent libs
logrotate-3.7.2-7
-----------------
* Sat Oct 15 2005 Peter Vrabec <pvrabec(a)redhat.com> 3.7.2-7
- fix_free_segfaults (#170904)
lvm2-2.01.14-3
--------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- add -lselinux -lsepol to the static linking -ldevice-mapper requires it
memtest86+-1.65-2
-----------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- make sure 32bit glibc-devel is installed (#170614)
policycoreutils-1.27.12-1
-------------------------
* Sat Oct 15 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.12-1
- Update to match NSA
* Merged non-PAM Makefile support for newrole and run_init from Timothy Wood.
sane-backends-1.0.16-2
----------------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- rebuild
slang-1.4.9-20
--------------
* Sun Oct 16 2005 Florian La Roche <laroche(a)redhat.com>
- add exec perms to shared libs
unixODBC-2.2.11-4
-----------------
* Sun Oct 16 2005 Florian La Roche <laroche(a)redhat.com>
- link against dependent libs
- fix some bugs to resolve unknown symbols ;-(
utempter-0.5.5-7
----------------
* Sun Oct 16 2005 Florian La Roche <laroche(a)redhat.com>
- install shared lib with execute perms
wget-1.10.2-1
-------------
* Sat Oct 15 2005 Florian La Roche <laroche(a)redhat.com>
- 1.10.2
Broken deps for s390x
----------------------------------------------------------
slang - 1.4.9-20.s390 requires ld.so.1(GLIBC_PRIVATE)
slang - 1.4.9-20.s390x requires ld64.so.1(GLIBC_PRIVATE)(64bit)
Broken deps for ppc64
----------------------------------------------------------
slang - 1.4.9-20.ppc64 requires ld64.so.1(GLIBC_PRIVATE)(64bit)
Broken deps for ppc
----------------------------------------------------------
slang - 1.4.9-20.ppc requires ld.so.1(GLIBC_PRIVATE)
Broken deps for ia64
----------------------------------------------------------
slang - 1.4.9-20.ia64 requires ld-linux-ia64.so.2(GLIBC_PRIVATE)(64bit)
Broken deps for s390
----------------------------------------------------------
slang - 1.4.9-20.s390 requires ld.so.1(GLIBC_PRIVATE)
Broken deps for i386
----------------------------------------------------------
slang - 1.4.9-20.i386 requires ld-linux.so.2(GLIBC_PRIVATE)
Broken deps for x86_64
----------------------------------------------------------
slang - 1.4.9-20.x86_64 requires ld-linux-x86-64.so.2(GLIBC_PRIVATE)(64bit)
slang - 1.4.9-20.i386 requires ld-linux.so.2(GLIBC_PRIVATE)
18 years, 6 months
sysvinit replacement?
by Shane Stixrud
Is there any plan to replace sysvinit with a system like SMF (Service
Management Framework) in Solaris? Perhaps it is even possible to take SMF
as is and integrate it into fedora without building our own or resurrecting
DMD (http://directory.fsf.org/GNU/DMD.html) from the grave?
Cheers,
Shane
18 years, 6 months
rawhide report: 20051015 changes
by Build System
Updated Packages:
SysVinit-2.85-41
----------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> - 2.85-41
- replace load_policy with selinux_init_load_policy
- add getseuserbyname to sulogin
anaconda-10.3.0.32-1
--------------------
* Fri Oct 14 2005 Jeremy Katz <katzj(a)redhat.com> - 10.3.0.32-1
- fix typo causing traceback (pnasrat)
- Create character device nodes to fix synaptics (clumens)
anthy-7015-1
------------
* Fri Oct 14 2005 Akira TAGOH <tagoh(a)redhat.com> - 7015-1
- New upstream snapshot release.
authconfig-5.0.2-1
------------------
* Fri Oct 14 2005 Tomas Mraz <tmraz(a)redhat.com> - 5.0.2-1
- authinfo-tui.py is now symlink
- reword the CA certificate message (#154317)
- use include instead of pam_stack in pam config
- don't break yp.conf with multiple domains (#127306)
bison-2.1-1
-----------
* Fri Oct 14 2005 Roland McGrath <roland(a)redhat.com> - 2.1-1
- New upstream version 2.1
- New subpackage bison-runtime for i18n support files used by parsers.
checkpolicy-1.27.9-1
--------------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.9-1
- Latest upgrade from NSA
* Merged support for require blocks inside conditionals from
Joshua Brindle (Tresys).
gdm-1:2.8.0.4-4
---------------
* Thu Oct 13 2005 Dan Walsh <dwalsh(a)redhat.com> 1:2.8.0.4-4
- Change to use getseuserbyname
hplip-0.9.6-3
-------------
* Fri Oct 14 2005 Tim Waugh <twaugh(a)redhat.com> 0.9.6-3
- Don't install desktop file (bug #170762).
- Quieten the hpssd daemon at startup (bug #170762).
kernel-2.6.13-1.1605_FC5
------------------------
* Fri Oct 14 2005 Dave Jones <davej(a)redhat.com>
- 2.6.14-rc4-git3
libselinux-1.27.9-2
-------------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.9-2
- Tell init to reexec itself in post script
* Fri Oct 07 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.9-1
- Update to latest from NSA
* Changed selinux_mkload_policy to try downgrading the
latest policy version available to the kernel-supported version.
* Changed selinux_mkload_policy to fall back to the maximum
policy version supported by libsepol if the kernel policy version
falls outside of the supported range.
libsemanage-1.3.14-1
--------------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> 1.3.14-1
- Update from NSA
* Updated to use get interfaces for hidden sepol_module_package type.
* Changed semanage_expand_sandbox and semanage_install_active
to generate/install the latest policy version supported by libsepol
by default (unless overridden by semanage.conf), since libselinux
will now downgrade automatically for load_policy.
* Merged new callback-based error reporting system and ongoing
database work from Ivan Gyurdiev.
libsepol-1.9.17-2
-----------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> 1.9.17-2
- Tell init to reexec itself in post script
* Mon Oct 10 2005 Dan Walsh <dwalsh(a)redhat.com> 1.9.17-1
- Upgrade to latest from NSA
* Hid sepol_module_package type definition, and added get interfaces.
* Merged new callback-based error reporting system from Ivan
Gyurdiev.
* Merged support for require blocks inside conditionals from
Joshua Brindle (Tresys).
libsetrans-0.1.7-2
------------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> 0.1.7-2
- Change SystemHigh to match the higher level of Categories.
mozplugger-1.7.3-1
------------------
* Fri Oct 14 2005 Florian La Roche <laroche(a)redhat.com>
- update to 1.7.3
openoffice.org-1:2.0.0-3.1.2
----------------------------
* Fri Oct 14 2005 Caolan McNamara <caolanm(a)redhat.com> - 1:2.0.0-3.1
- release candidate 3
- alias en_US thesasurus for other en varients
- can crash on empty thesasurus rh#170091#/ooo#55603#
- drop thesaruses not in new format
policycoreutils-1.27.11-1
-------------------------
* Fri Oct 14 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.11-1
- Update to match NSA
* Updated semodule_expand to use get interfaces for hidden sepol_module_package type.
* Merged newrole and run_init pam config patches from Dan Walsh (Red Hat).
* Merged fixfiles patch from Dan Walsh (Red Hat).
* Updated semodule for removal of semanage_strerror.
rsh-0.17-31
-----------
* Thu Oct 13 2005 Karel Zak <kzak(a)redhat.com> 0.17-31
- rewrite rexecd PAM_conversation()
squid-7:2.5.STABLE11-4
----------------------
* Fri Oct 14 2005 Martin Stransky <stransky(a)redhat.com> 7:2.5.STABLE11-4
- enabled support for large files (#167503)
system-config-securitylevel-1.6.5-1
-----------------------------------
* Fri Oct 14 2005 Chris Lumens <clumens(a)redhat.com> 1.6.5-1
- Remove the SELinux policy type combo box if there's only one policy
installed.
- Use a new pam configuration (#170644).
- Don't pop up relabel warning during firstboot if the user did something
like disabled->enabled->disabled before clicking next (#170549, #170550).
texinfo-4.8-7
-------------
* Fri Oct 14 2005 Tim Waugh <twaugh(a)redhat.com> 4.8-7
- Apply patch to fix CAN-2005-3011 (bug #169585).
vixie-cron-4:4.1-39.FC5
-----------------------
* Fri Oct 14 2005 Jason Vas Dias <jvdias(a)redhat.com> - 4.1-39-FC5
- fix bug 170830: the last PAM change disabled all cron jobs.
backing out the new PAM configuration file until I've had a
chance to test it with replacement of pam_stack.so.
vlock-1.3-22
------------
* Fri Oct 14 2005 Karel Zak <kzak(a)redhat.com> 1.3-22
- fix #170488 - add screen(1) warning
- compilation warnings cleanup
18 years, 6 months
Supporting XvMC (and XvMCW)
by Philip Prindeville
Apologies if this has already been discussed and I missed it... I've
only been on the list a couple of months... and a quick search of
old messages didn't turn anything up.
Could the X driver installation process write out the contents of
/etc/X11/XvMCConfig based on the driver module that has
been selected for the xorg.conf file?
For instance, if you've selected the via drivers (in xorg 6.8.99.900
and later, for instance), then /etc/X11/XvMCConfig should contain:
libviaXvMC.so
or:
libviaXvMCPro.so
If you're using the NVidia drivers (from NVidia, and not the GPL "nv"
drivers instead) you'd have:
libXVMCNVIDIA.so
for instance. Other cards might not offer support. I believe the Savage
cards do.
Does this sound feasible?
-Philip
18 years, 6 months
Re: Bringing syslog-ng into the fold [FC6 ?]
by Elliot Lee
On Fri, 2005-10-14 Seth Vidal wrote:
> okay I'm confused. Why isn't using syslog-ng a slam-dunk.
>
> 1. we don't break compatibility for the api - which means not modifying
> lots of difficult programs
> 2. it makes it easier for this to trickle into rhel
> 3. it's a known value in that it's used in large-scale and small-scale
> operations all over the place.
> 4. it's an immediate win over syslog in that it is:
> a. more feature-full
> b. actually maintained
Because syslog-ng isn't the Right Solution(tm) for the general problem of
event logging. For example, not breaking the API means there is no way to
log anything more structured than a text string, which makes analyzing the
logged events a lot more difficult.
My thinking was that if we're going to switch, let's switch to the Right
Solution(tm). Of course, the Right Solution(tm) may not exist or be usable
at this point. If syslog-ng is a drop-in replacement for the present
syslogd (including configuration files and applications), then you're
right and I'm being a stick in the mind. :) However, having to do a
migration to syslog-ng that is not pain-free for sysadmins might not make
sense if something even better is be out there.
Best,
-- Elliot
18 years, 6 months
Deprecating pam_stack.so
by Tomas Mraz
Linux-PAM 0.78 and later contains include directive which obsoletes
using the pam_stack module. This module is rather a hack as it requires
access to pam library internals for its operation and will never be
accepted to upstream.
The include directive implementation is much cleaner although its
semantics are subtly different. The include works as a real include so
the base file and the included one are processed as if they were first
flattened into one file. The pam_stack module however works as if the
pam was recursively called again with the stacked service.
Arguably the pam_stack model is little bit more "user friendly" as
"sufficient" entries in the stacked service don't bypass modules in the
primary service which came after the pam_stack module. This means that
all existing configuration files for services cannot be blindly modified
but they have to be carefully examinated and modified with the above in
mind.
The pam_stack module probably won't be removed too soon because it would
break upgrades with modified pam configs however I'll probably add some
deprecation message in the system log when it will be used.
Also big warning for people which modify the /etc/pam.d/system-auth file
by hand - never remove the "auth required pam_deny.so" as it will make
some pamified services open to anyone (depending on preceding modules in
the system-auth and the pam config which includes it).
--
Tomas Mraz <tmraz(a)redhat.com>
18 years, 6 months