It would be great if we can kick off the SIG.
1) Which day and time would be good for the meetings in #fedora-meeting
The available times are here: http://fedoraproject.org/wiki/Communicate/FedoraMeetingChannel
2) Let's come up with an initial agenda.
Software Developer, Open Source Grid Development Center (OSGDC)
3760 14th Avenue
Markham, ON L3R3T7
In the light of recent RPM signing intrusions, maybe we should resurrect
the RPM feature where multiple signatures are allowed (i.e. --addsign is
different to --resign)? With this we could then require N good
signatures (and no bad ones) on each package before yum would trust the
What I'm getting at with this is distributed package signing, which
would make the job of breaking the trust much harder for attackers, as
they would have to crack private keys of many people around the world in
order to subvert Fedora packages.
For instance, an attacker being in the position of injecting a bad
package and signing it with Fedora key would still get nowhere, as he'd
need to convince other signatories to sign those packages before them
being any threat to Fedora users. Before signing, signatories could
require that original contributor that built the package for a
particular tag sends a signed e-mail (containing that tag and package
checksums - valid only once) to the signatories, therefore requiring yet
another compromised private key in order to perform an attack.
Signatories could also use alternative build systems with no public
access (e.g. their own, Matt's at Dell etc.) to verify package checksums
before signing, in order to avoid trusting a compromised Fedora build
This would require more distributed resources and would slow the update
process down somewhat, but may avoid single point of intrusion as being
sufficient to break the distro.
Is there any chance of libmozembed being made a separate package? Both
monodevelop and mono-tools can make use of them but it seems a pain to
have to install thunderbird to get them.
Sie können mich aufreizen und wirklich heiß machen!
It's becoming clear to me that I lack the time to maintain all of my
packages, as there are a few outstanding bug reports that I'm just not
getting to. I think it's time to hand off some or all of my packages to
new maintainers. The following is the list of my current packages.
Some of these are really easy, but two of them could be somewhat
challenging. Octave-forge is getting big and ugly, and it really needs
to be split into about 40 subpackages (which could be done
incrementally, rather than all at once). Atlas is more or less working
but it is really outdated, and it would probably require almost starting
from scratch to package the new 3.8.x releases.
I'd like to formally request that this curl change be reverted:
* Mon Aug 11 2008 Tom "spot" Callaway <tcallawa(a)redhat.com> 7.18.2-4
- make miniature library for libcurl.so.3
Due to the fact that it was simply made to accommodate proprietary
software, as described in this blog entry:
There are at least a dozen other proprietary applications that could
"benefit" from making similar changes to other packages, and we
certainly wouldn't make those changes for them. Flash should be no
i have a system with fedora 7 and rhel 5 installed. recently, i changed
the f7 to rawhide. now whenever i boot up, it mounts all the file
systems related to rhel5 along with it and displays on the desktop.
dmesg says /dev/sda1 mounted on /media/_1 and so on. I want to disable
this feature. i don't know if this is anything useful ?? i even don't
know if its a feature or a bug... can any one please help me out with
this thing ? i understand hal is doing this (??), but why ? and even
when i unmount it, the same can still be found in /media. right clicking
on those partitions give me the option of mounting/unmounting them. but
i don't want to let them appear in my rawhide systems totally. anyone
else has this experience on rawhide??how do i disable it ??
thanks in advance.
I have a strange problem with the 2.6.26 series kernel. 2.6.27-rc1
branch is ok but the same thing happens with 2.6.27.rc2 and the
following. 2.6.25 branch is ok.
I filed a bug report here https://bugzilla.redhat.com/show_bug.cgi?id=458901.
The kernel loads fine until showing "starting udev". then it just
stops and cannot continue. on the 2.6.26 branch i need to keep pressed
atleast one key for it to continue. Then it goes further and
everything freezes when no key is pressed.
2.6.27.rc1 was ok but the same thing showed in 2.6.27.rc2 onwards.
with the lastes kernel-2.6.27-0.287.rc4.git7.fc10 after "startig udev"
I get black and white stripps on my screen and only hardware reset
helps. This makes me think it is something connected with the kernel
modesetting and my radeon gpu. It could also be udev but it is fine
with 2.6.25 and if i keep at least one key pressed then 2.6.26 works
fine. in everycase dmesg shows nothing. What could it be? How can I
see where the problem is?