Any reason we're using libdv-0.103?
by sean darcy
libdv-0.104 was announced in November, 2004. We're using
0.103. I could hack the spec file from 0.103 to build 0.104,
but I figured I'd better ask if there's a reason to stick
with 0.103.
sean
18 years, 11 months
Standard keytab location
by Rudi Chiarito
Hi,
in the wake of the recent discussion about the location for SSL
certificates, I was wondering about the same regarding Kerberos
keytabs.
The only standard so far is /etc/krb5.keytab. That's the file meant to
contain keys for the local machine. It is readable only by root for
security reasons. Of course this is a problem for server applications
that do not run as root, e.g. httpd. A number of applications provide
means to specify an alternate location for the keytab - quite often
through the KRB5_KTNAME environment variable. The other benefit of
having separate keytab files is that it should reduce risks in case of
a security breach and I think it should make it easier to enforce
policies on keys with the help of SELinux.
Where should these files reside, then? In the application's directory,
when present, such as /etc/httpd/ or /etc/openldap/? Or something like
/etc/httpd/keytab.d? Maybe /etc/keytabs/ or /etc/krb5.keytabs/? The
last two would work for applications that do not use a directory of
their own under /etc.
What should the files be named? Should packages provide RPM ghost files?
Should more than one keytab be supported for a single application? I'm
thinking of Apache vhosts - I don't know yet if mod_auth_kerb will be
able to handle that.
Comments?
--
Rudi
18 years, 11 months
Re: rawhide report: 20050519 changes
by Andrew Overholt
* Justin Conover <justin.conover(a)gmail.com> [2005-05-19 12:52]:
>
> Just curious of the M7 will be released/rebuilt before FC4 is out?
We'd like to have it out, but there are a few issues that we're working out
first. I hope the have everything sorted out today.
Andrew
18 years, 11 months
Re: What happened to pup?
by Damian Christey
> On Fri, 2005-05-20 at 22:11 +0200, Kyrre Ness Sjobak wrote:
> > What happened to pup - the yum GUI frontend that was so much talked
> > about?
> >
> > Its not in FC4-t3...
>
> It's merely set back. I'll send an update out next week
>
> Paul
When last I checked out your cvs all I found was a small test app. Has
development moved elsewhere?
While I'm not suggesting that Pup be abandoned, you and others might be
interested in this project I found: http://yumex.sourceforge.net/
Yumex aims to be a simple GUI to yum, written in Python and GLADE,
develoment is quite active on the branch for FC4:
http://linux.rasmil.dk/cms/modules/news/
At the moment it is quite functional, but could use some UI love in some
areas.
Cheers,
Damian
18 years, 11 months
rpmbuild --sign
by Aph
After the last update of Fedora Core 4 Test 3, I can't sign my RPMS :
[root@local SPECS]# rpmbuild -ba --sign *
(build......)
Génération de la signature: 1005
*** glibc detected *** rpmbuild: double free or corruption (!prev): 0x0a151f70
***
======= Backtrace: =========
/lib/libc.so.6[0x5711e4]
/lib/libc.so.6(__libc_free+0x77)[0x57171f]
/usr/lib/librpmdb-4.4.so[0x130662]
/usr/lib/librpm-4.4.so[0x86133a]
/usr/lib/librpm-4.4.so(rpmAddSignature+0x1ce)[0x86195c]
/usr/lib/librpmbuild-4.4.so(writeRPM+0x9ab)[0xc44ada]
/usr/lib/librpmbuild-4.4.so(packageSources+0x1d2)[0xc45491]
/usr/lib/librpmbuild-4.4.so(buildSpec+0x3dc)[0xc3bf37]
rpmbuild[0x804a794]
rpmbuild[0x804ab64]
rpmbuild[0x804b91c]
/lib/libc.so.6(__libc_start_main+0xc6)[0x522de6]
rpmbuild[0x8049ea1]
======= Memory map: ========
00111000-00218000 r-xp 00000000 03:0a 2454511 /usr/lib/librpmdb-4.4.so
00218000-0021d000 rwxp 00106000 03:0a 2454511 /usr/lib/librpmdb-4.4.so
0021d000-00264000 r-xp 00000000 03:0a 2443563 /usr/lib/libbeecrypt.so.6.4.0
00264000-00267000 rwxp 00046000 03:0a 2443563 /usr/lib/libbeecrypt.so.6.4.0
00267000-0035f000 r-xp 00000000 03:0a 845330 /lib/libcrypto.so.0.9.7f
0035f000-00371000 rwxp 000f8000 03:0a 845330 /lib/libcrypto.so.0.9.7f
00371000-00374000 rwxp 00371000 00:00 0
00374000-00376000 r-xp 00000000 03:0a 845441 /lib/libdl-2.3.5.so
00376000-00377000 r-xp 00001000 03:0a 845441 /lib/libdl-2.3.5.so
00377000-00378000 rwxp 00002000 03:0a 845441 /lib/libdl-2.3.5.so
00378000-0038a000 r-xp 00000000 03:0a 2453932 /usr/lib/libz.so.1.2.2.2
0038a000-0038b000 rwxp 00011000 03:0a 2453932 /usr/lib/libz.so.1.2.2.2
0038b000-003a1000 r-xp 00000000 03:0a
1367064 /usr/lib/libgssapi_krb5.so.2.2
003a1000-003a2000 rwxp 00016000 03:0a
1367064 /usr/lib/libgssapi_krb5.so.2.2
003a2000-00411000 r-xp 00000000 03:0a 1367061 /usr/lib/libkrb5.so.3.2
00411000-00414000 rwxp 0006e000 03:0a 1367061 /usr/lib/libkrb5.so.3.2
00414000-00416000 r-xp 00000000 03:0a 845336 /lib/libcom_err.so.2.1
00416000-00417000 rwxp 00001000 03:0a 845336 /lib/libcom_err.so.2.1
00417000-0041f000 r-xp 00000000 03:0a 845559 /lib/librt-2.3.5.so
0041f000-00420000 r-xp 00007000 03:0a 845559 /lib/librt-2.3.5.so
00420000-00421000 rwxp 00008000 03:0a 845559 /lib/librt-2.3.5.so
00421000-0042b000 rwxp 00421000 00:00 0
0042b000-0043c000 r-xp 00000000 03:0a 2443189 /usr/lib/libbz2.so.1.0.2
0043c000-0043d000 rwxp 00010000 03:0a 2443189 /usr/lib/libbz2.so.1.0.2
0045a000-0045c000 r-xp 00000000 03:0a 2443118 /usr/lib/gconv/ISO8859-15.so
0045c000-0045e000 rwxp 00001000 03:0a 2443118 /usr/lib/gconv/ISO8859-15.so
004be000-004c7000 r-xp 00000000 03:0a 845488 /lib/libnss_files-2.3.5.so
004c7000-004c8000 r-xp 00008000 03:0a 845488 /lib/libnss_files-2.3.5.so
004c8000-004c9000 rwxp 00009000 03:0a 845488 /lib/libnss_files-2.3.5.so
004d0000-004ea000 r-xp 00000000 03:0a 845401 /lib/ld-2.3.5.so
004ea000-004eb000 r-xp 00019000 03:0a 845401 /lib/ld-2.3.5.so
004eb000-004ec000 rwxp 0001a000 03:0a 845401 /lib/ld-2.3.5.so
0050e000-00632000 r-xp 00000000 03:0a 845324 /lib/libc-2.3.5.so
00632000-00634000 r-xp 00124000 03:0a 845324 /lib/libc-2.3.5.so
00634000-00636000 rwxp 00126000 03:0a 845324 /lib/libc-2.3.5.so
00636000-00638000 rwxp 00636000 00:00 0
00694000-0069d000 r-xp 00000000 03:0a
845314 /lib/libgcc_s-4.0.0-20050518.so.1
0069d000-0069e000 rwxp 00009000 03:0a
845314 /lib/libgcc_s-4.0.0-20050518.so.1
0069e000-0077a000 r-xp 00000000 03:0a 2443399 /usr/lib/libstdc++.so.6.0.4
0077a000-0077f000 rwxp 000dc000 03:0a 2443399 /usr/lib/libstdc++.so.6.0.4
0077f000-00784000 rwxp 0077f000 00:00 0
007d6000-007dd000 r-xp 00000000 03:0a 2447186 /usr/lib/libpopt.so.0.0.0
007dd000-007de000 rwxp 00006000 03:0a 2447186 /usr/lib/libpopt.so.0.0.0
0081d000-00875000 r-xp 00000000 03:0a 2447859 /usr/lib/librpm-4.4.so
00875000-00878000 rwxp 00058000 03:0a 2447859 /usr/lib/librpm-4.4.so
00878000-008ab000 rwxp 00878000 00:00 0
008d2000-008e2000 r-xp 00000000 03:0a 845705 /lib/libselinux.so.1
008e2000-008e3000 rwxp 00010000 03:0a 845705 /lib/libselinux.so.1
0090a000-0091c000 r-xp 00000000 03:0a 2443395 /usr/lib/libelf-0.108.so
0091c000-0091d000 rwxp 00012000 03:0a 2443395 /Abandon
[root@local SPECS]#
--
> 2 J'en sais sûrement plus que tu ne crois...sur vous tous...
-+- W in WeC : Shir Rabin Duval -+-
18 years, 11 months
how to tell a socket to route thru a specific interface...
by Philip George
How can I specify that a socket use a specific interface?
If I have a wi-fi connection to one network and a cat5 connection to
another, how can i tell my socket to route through a specific one (and
not even try the other)?
To be clear, I'm talking about an outgoing connection. For example, I
use send() a few lines after what is shown here to send a web request
and recv() to get the requested page. The catch being that I need to
specify that the request be routed through a specific interface, not
just any old interface (assuming that at runtime there are 2 or more
available connections from the computer out to the internet).
I thought it was bind() that did this, but it doesn't seem like that's
what it's doing at all. I have a book that led me to believe bind()
would tell a socket to route through a specific interface (thus BINDing
it to the socket), but I think it's more likely that it's a dns-related
call. unfortunately, the man page is strangely ambiguous about what it
actually does, using the word 'name' a lot, but never actually saying
'hostname'.
In any case, here's the code i've got that isn't working (although I'm
pretty sure the setsockopt() line is okay) :
// setup local address stuff...
struct sockaddr_in LOCaddr;
LOCaddr.sin_family = AF_INET;
LOCaddr.sin_addr.s_addr = inet_addr(local_ip);
// set to true for SO_DONTROUTE...
int val = 1;
// bind to specific interface and then set SO_DONTROUTE...
if (bind(sockethandle, (struct sockaddr *)&LOCaddr,
sizeof(LOCaddr))==0) {
setsockopt(sockethandle, SOL_SOCKET, SO_DONTROUTE, &val, sizeof(val));
}
What do I need to do here instead of bind()?
Thanks.
- Philip
18 years, 11 months
kpartx & dm-multipath kernel module: Where/when should they be called (wrt FC4)?
by Axel Thimm
Hi,
I successfully managed to get multipath support on an EVA 3000
(HSV100). BTW shouldn't the policy for HSV100 be group_by_serial
(former group_by_tur)?
--- multipath.conf~ 2005-04-01 22:56:49.000000000 +0200
+++ multipath.conf 2005-05-20 14:38:14.000000000 +0200
@@ -60,7 +60,7 @@
device {
vendor "HP "
product "HSV100 "
- path_grouping_policy multibus
+ path_grouping_policy group_by_serial
path_checker tur
}
device {
Anyway now I have my /dev/dm-2 block device and I had to get to the
partitions on it. After some search I found that
kpartx -a /dev/dm-2
did the right job and extracted "/dev/dm-2p1" onto /dev/dm-3 (is that
the indented bahaviour? Getting a new device name?).
What I wonder now, is where and how kpartx should be embedded into the
distribution's init scripts. It needs to come before any lvm parts
as this is an lvm partition.
OTOH dm-multipath needs to be modprobed even earlier and currently I'm
using a new interface in the init scripts (/etc/sysconfig/modules)
which is called after lvm setup. :(
Any chance this could still hit FC4? <8-)
Thanks!
--
Axel.Thimm at ATrpms.net
18 years, 11 months
rawhide report: 20050520 changes
by Build System
Updated Packages:
GFS-kernel-2.6.11.6-20050517.141233.FC4.8
-----------------------------------------
* Tue May 17 2005 Chris Feist <cfeist(a)redhat.com>
- Provides GFS-kernel-modules and add ARCH=xen to build.
anaconda-10.2.0.64-1
--------------------
* Thu May 19 2005 Jeremy Katz <katzj(a)redhat.com> - 10.2.0.64-1
- Handle longer arch strings (notting)
- Fix traceback in network screen (#158134)
- Include synaptics for X config (pnasrat)
- Magic boot for mac vs mac64 on disc1/dvd (pnasrat)
- Bump point at which we use graphical stage2 for http/ftp (#157274)
- Use uuid in mdadm.conf, stop using copy of md.h (#136051)
- Support deletion of bootloader entries in text mode (#125358)
- Support RAID /boot on pSeries along with handling of multiple PReP
partitions (Dustin Kirkland)
bzip2-1.0.2-16
--------------
* Thu May 19 2005 Jiri Ryska <jryska(a)redhat.com>
- fixed permission setting for decompressed files #155742
- fixed decompression bomb (DoS) #157548
cman-kernel-2.6.11.4-20050517.141233.FC4.4
------------------------------------------
devhelp-0.10-1
--------------
* Thu May 19 2005 Ray Strode <rstrode(a)redhat.com> 0.10.0-1
- Update to 0.10.0 (bug #157753)
dlm-kernel-2.6.11.4-20050517.141233.FC4.4
-----------------------------------------
dmraid-1.0.0.rc8-FC4_1
----------------------
* Thu May 19 2005 Heinz Mauelshagen <heinzm(a)redhat.com> 1.0.0.rc8-FC4_1
- nv.c: fixed stripe size
- sil.c: avoid incarnation_no in name creation, because the Windows
driver changes it every time
- added --ignorelocking option to avoid taking out locks in early boot
where no read/write access to /var is given
eclipse-bugzilla-1:0.1.0_fc-16
------------------------------
* Wed May 18 2005 Jeff Pound <jpound(a)redhat.com> 0.1.0_fc-16
- Fix bug in query option parser (see comment 1 from bz#151443).
- Parse icons from bugzilla sites (bz#151441).
gcc-4.0.0-7
-----------
* Wed May 18 2005 Jakub Jelinek <jakub(a)redhat.com> 4.0.0-7
- update from CVS
- PRs fortran/20954, libgcj/18220, libgcj/19729, libgcj/21140
- fix IA-64 ICE on sdata/sbss variable references with offsets
(Richard Henderson, #158001, PR target/21632)
- add gjnih and gjnih.1 to gcc-java subpackage
- fix german, spanish, turkish and chinese translations (#157879,
PR translation/21364)
- configure with --enable-libgcj-multifile to avoid make -jN
related multilib failures
gdm-1:2.6.0.8-15
----------------
* Thu May 19 2005 Ray Strode <rstrode(a)redhat.com> 1:2.6.0.8-15
- Take out some syslog spew (bug 157711).
gnbd-kernel-2.6.11.2-20050420.133124.FC4.26
-------------------------------------------
gnome-applets-1:2.10.1-8
------------------------
* Thu May 19 2005 Ray Strode <rstrode(a)redhat.com> 1:2.10.1-8
- Install modemlights gconf schema (bug 157764).
gnome-games-1:2.10.0-4
----------------------
* Thu May 19 2005 Ray Strode <rstrode(a)redhat.com> 1:2.10.0-4
- Change some sounds around
grub-0.95-13
------------
* Thu May 19 2005 Peter Jones <pjones(a)redhat.com> 0.95-13
- Make the spec work with gcc3 and gcc4, so people can test on existing
installations.
- don't treat i2o like a cciss device, since its partition names aren't done
that way. (#158158)
kernel-2.6.11-1.1323_FC4
------------------------
* Thu May 19 2005 Dave Jones <davej(a)redhat.com>
- Fix up missing symbols in ipw2200 driver.
- Reenable debugfs / usbmon. SELinux seems to cope ok now.
(Needs selinux-targeted-policy >= 1.23.16-1)
kudzu-1.1.116.2-2
-----------------
* Thu May 19 2005 Bill Nottingham <notting(a)redhat.com> 1.1.116.2-2
- rebuild against new libpci
logwatch-6.0.1-2
----------------
* Thu May 19 2005 Jiri Ryska <jryska(a)redhat.com> 6.0.1-2
- fixed temp dir creation #155795
ncpfs-2.2.4-8
-------------
* Thu May 19 2005 Jiri Ryska <jryska(a)redhat.com>
- fixed possible buffer overflow CAN-2005-0014
nfs-utils-1.0.7-7
-----------------
* Thu May 19 2005 Steve Dickson <SteveD(a)RedHat.com> 1.0.7-7
- Fixed buffer overflow in rpc.svcgssd (bz 114288)
openssl-0.9.7f-7
----------------
* Thu May 19 2005 Tomas Mraz <tmraz(a)redhat.com> 0.9.7f-7
- fix CAN-2005-0109 - use constant time/memory access mod_exp
so bits of private key aren't leaked by cache eviction (#157631)
- a few more fixes from upstream 0.9.7g
pam_krb5-2.1.7-3
----------------
* Wed May 18 2005 Nalin Dahyabhai <nalin(a)redhat.com> - 2.1.7-3
- rebuild
* Wed May 18 2005 Nalin Dahyabhai <nalin(a)redhat.com> - 2.1.7-2
- rebuild
* Wed May 18 2005 Nalin Dahyabhai <nalin(a)redhat.com> - 2.1.7-1
- update to 2.1.7
- install afs5log and its man page
- fix detection of the realm of foreign cells with newer OpenAFS
- also try AFS principal = afs@REALM for foreign cells in foreign realms
pciutils-2.1.99.test8-10
------------------------
* Thu May 19 2005 Bill Nottingham <notting(a)redhat.com> - 2.1.99.test8-10
- allow 64-bit addresses on x86_64 (#158217, <Matt_Domsch(a)dell.com>)
readahead-1:1.1-1.14
--------------------
* Wed May 18 2005 Bill Nottingham <notting(a)redhat.com>
- new readahead.c from Ziga Mahkovec <ziga.mahkovec(a)klika.si>
- optimizes read access for more throughput
- regenerate file lists (#128444)
- fix lack of newlines (#146744)
- fix lists so that they are architecture-neutral
- move check for > 384MB into the init scripts, not the %post
rhpl-0.165-1
------------
* Thu May 19 2005 Paul Nasrat <pnasrat(a)redhat.com> 0.165-1
- ALPS configuration (#155291)
rpm-4.4.1-19
------------
* Tue May 17 2005 Paul Nasrat <pnasrat(a)redhat.com> - 4.4.1-19
- Check for symlinks in check-files (#108778)
- Move zh_CN (#154623)
- Test fix for signing old rpms (#127113)
selinux-policy-strict-1.23.16-5
-------------------------------
* Thu May 19 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.16-5
- Fix slapd and cups for targeted policy
* Wed May 18 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.16-4
- Add anaconda back in
- Fix for nvidia
- Fixes for acpi
- Fix several ":file read" -> ":file { getattr read }:
selinux-policy-targeted-1.23.16-5
---------------------------------
* Thu May 19 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.16-5
- Fix slapd and cups for targeted policy
* Wed May 18 2005 Dan Walsh <dwalsh(a)redhat.com> 1.23.16-4
- Add anaconda back in
- Fix for nvidia
- Fixes for acpi
- Fix several ":file read" -> ":file { getattr read }:
sysklogd-1.4.1-30
-----------------
* Thu May 19 2005 Jason Vas Dias <jvdias(a)redhat.com> 1.4.1rh-30
- fix bug 158205: fix MARK message generation
Patch contributed by Ray Van Tassle of Motorola
* Mon Mar 28 2005 Jason Vas Dias <jvdias(a)redhat.com> 1.4.1rh-28
- Fix bug 152319: potential ctime() deadlock in domark() when called
- from signal handler
* Fri Jan 14 2005 Jason Vas Dias <jvdias(a)redhat.com> 1.4.1rh-26
- Final fixup of '@host' name checking code: remove possible
- duplicates properly
syslinux-3.08-2
---------------
* Thu May 19 2005 Peter Jones <pjones(a)redhat.com> - 3.08-2
- update to 3.08
xfig-3.2.4-11
-------------
* Thu May 19 2005 Than Ngo <than(a)redhat.com> 3.2.4-11
- apply patch to fix buffer oveeflow #158088
yelp-2.10.0-1
-------------
* Thu May 19 2005 Ray Strode <rstrode(a)redhat.com> 2.10.0-1
- Update to 2.10.0 (bug 157752, 146862).
* Thu May 19 2005 Christopher Aillon <caillon(a)redhat.com> 2.9.3-7
- Depend on mozilla 1.7.8
18 years, 11 months