I just happened to look at the firewalld default settings, and I was not
amused when I noticed this:
> <port protocol="udp" port="1025-65535"/>
> <port protocol="tcp" port="1025-65535"/>
This "firewall" is a joke! ALL higher ports are wide open!
There had been a prior discussion on this list where they wanted to disable
the firewall entirely. We told them that that's a horrible idea (which it
is, of course!). But the result is that they implemented this "solution"
which is almost entirely as bad, and which additionally gives users a false
sense of security, because a "firewall" is "enabled" (for a very twisted
definition of "enabled").
IMHO, this is a major security issue that MUST be fixed. It also shows what
horribly bad an idea per-Product configuration is.
Yet another reason why you should NOT use "--product=workstation" to upgrade
your F20 to F21 (ALWAYS use "--product=nonproduct"). Installing the
"Workstation Product", or upgrading to it, will leave you with a totally
# Fedora Quality Assurance Meeting
# Date: 2014-12-22
# Time: 16:00 UTC
# Location: #fedora-meeting on irc.freenode.net
I'm sorry - I actually meant to send a mail on Friday asking if folks
thought we needed a meeting or not, but I forgot! My bad. So instead
I'll send the announcement just in case. I don't have much in the way
of agenda topics myself, but I'll show up and see if we have enough
interest / attendance to go ahead. If you've got a topic that you
think really needs discussing, please go ahead and throw it in the
pot, either by replying to this mail or at the start of the meeting.
== Proposed Agenda Topics ==
1. Previous meeting follow-up
* adamw to sync with cmurf and look at revising multiboot criteria
2. Nightly testing progress, everyone happy with the approach so far?
3. Open floor
Fedora QA Community Monkey
IRC: adamw | Twitter: AdamW_Fedora | XMPP: adamw AT happyassassin . net
test-announce mailing list
I understand Fedora's position on Chromium BUT not having a 3rd party
available for F21 is not acceptable -
ie. this morning Firefox is not connecting to the internet (yet
thunderbird, dnf, etc is ... - I'm seeing a kernel problem warning
WARNING: CPU 0 PID 1419 at drivers.net.wireless/ath/ath9k.recv
point is, browser choice is important and Chromium on my F20 is working.
Also as developers, we need to work with all browsers.
Even if Fedora does not elect to maintain packages for Chromium, there
should be some effort to work with or encourage a 3rd party or fix
whatever package might be holding up someone else from implementing it
(ie if it's clang compiling or whatever.
I noticed that F21 can potentially download repository metadata 3 times:
1. Yum cache 2. DNF cache 3. PackageKit cache! It really hurts to see
how Fedora ignorance towards different kind of users is being increased
as time passes. If Fedora is an international distro, it should try to
consider condition of different users, not just a portion of them.
Fedora repository metadata format was already hostile, it wastes
bandwidth considerably downloading mostly useless data repeatedly.
Things got worse for DNF as it decides to also always download filelists.
Now, Fedora 21 contains yum, dnf and PackageKit (software center) with
new backend. Surprisingly, PackageKit uses its own separate cache. DNF
refreshes its cache automatically (without user's consent) every 3 hours
by default (according to 'man dnf.conf'). PackageKit also does the same,
but I don't know when it does (also without user's consent).
Now, if you are exclusively a 'yum' user, you'll end up with 3
repository metadata downloads, two of which you are unaware of.
Probably, it is OK for most of you having access to cheap, fast internet
access. But not everybody in the world has such access. It was not long
ago that dial-up internet access was a norm in my area (there are still
some using it!). I'm not using dial-up, but still can't afford such a
waste of bandwidth. I'm using a 'fast' internet access, which is
512Kb/sec, and have 6GiB for 3 months (with free access at nights, which
I use to update/install Fedora packages). As I've described at , DNF
alone can potentially consume all my internet credit very soon; even if
I don't want to use any package manager at all. This will make many
users with conditions like me very angry when they realize that Fedora
has eaten their money silently.
Another side of the story is how Fedora lacks any integration in this
area. There are separate caches. Fedora doesn't tell you that it'll eat
your internet. Also, there is nowhere you can tell Fedora 'Please don't
eat my internet without my permission'. Even there is no single
configuration option for it. You should manually disable automatic
downloading for DNF, and then separately for gnome software using some
obscure gsettings commands you should look for. Well, I've not tried
other desktops, each one might have each own settings for that too!
(though usually such ignorance is the worst in GNOME).
It's so unfortunate to see how Fedora lacks any integration (one of the
main things that a distro is expected to provide) in its package
management software (one of the main distro specific software, where you
fairly expect an integrated experience as an 'internal' software).
As I was expecting, I've already seen how a user in our local community
cried about Fedora 21 consuming his Internet credit the day after the
release. The number of Fedora users around me were already low, and I
expect it to become less if Fedora continues its ignorance trend. I'm
not annoyed that much yet, as I'm just considering switching to a
different DE after suffering GNOMEs decisions for a long time hoping
that 'things will be better soon'; and finding out that my needs are
something that 'THEY see no reasons to support'.
P.S. sorry for the somewhat long email. I'm a little bit angry! :P