devel June 2014

devel@lists.fedoraproject.org

224 participants
220 discussions

Expanding the list of "Hardened Packages"
by Dhiru Kholia 22 Jul '14

22 Jul '14

Hi, This proposal was originally at https://fedorahosted.org/fesco/ticket/1104 (mitr asked me to move the discussion to fedora-devel to get more attention and feedback) ... http://fedoraproject.org/wiki/Hardened_Packages page mentions that "FESCo requires some packages to use PIE and relro hardening by default." It would be great if this list could be expanded to include even more packages which are at comparatively more risk of being exploited (locally or remotely). Such packages will typically include various system daemons, network daemons and network enabled applications. Lot of network daemons are already using PIE and RELRO (e.g. httpd, MariaDB). So a natural question is why packages in same "network daemons" class like PostgreSQL, Dovecot and MongoDB aren't being hardened? Some of the ways to implement this proposal are, 1. Hardening flags should be turned on (by default) for all packages which are at comparatively more risk of being exploited or which meet some well-defined criteria (suggestions welcome). "Packaging Guidelines" say that "Other packages may enable the flags at the maintainer's discretion." Thinking from a security perspective, I find "Hardening flags can only be disabled for other packages at the maintainer's discretion provided enough justification is given to FESCo" to be more appropriate. 2. An alternate approach is to come up with an expanded list of packages which should be hardened. Any feedback is welcome! -- Dhiru

39 140

[ACTION REQUIRED] Retiring packages for Fedora 21 v3
by Till Maas 21 Jul '14

21 Jul '14

The following packages are orphaned or did not build for two releases and will be retired when Fedora (F21) is branched, unless someone adopts them. If you know for sure that the package should be retired, please do so now with a proper reason: https://fedoraproject.org/wiki/How_to_remove_a_package_at_end_of_life According to https://fedoraproject.org/wiki/Schedule branching will occur not earlier than 2014-07-08 (this is in *two* weeks). The packages will be retired shortly before. Note: If you received this mail directly you (co)maintain one of the affected packages or a package that depends on one. Package (co)maintainers =========================================================================== NearTree tmatsuu SOAPpy orphan, pingou SteGUI orphan, pingou aeolus-configure orphan, clalance, jeckersb, mmorsi, slinabery ale orphan, silfreed alliance chitlesh, tnorth barry orphan, gnat, vicodan bitbake ixs blktap ke4qqq cbmc orphan, shakthimaan cgnslib orphan, chitlesh clutter-gtkmm orphan, rhl cx18-firmware orphan, athimm dee-qt orphan, jreznik drwright caillon eclipse-cmakeed orphan, swagiaal emacs-common-muse orphan emacs-identica-mode orphan, shakthimaan eqntott orphan, chitlesh espresso-ab orphan, chitlesh fprint_demo orphan, pingou freetalk orphan, rishi fuse-smb szpak g-wrap laxathom gdome2 orphan, sundaram ghc-chalmers-lava2000 orphan, chitlesh ghemical orphan, tolland gnome-shell-theme-elementary orphan, eldermarco gnomeradio orphan, itamarjp, roma guile-lib laxathom ha-jdbc orphan hdrprep orphan, silfreed jbosscache-support orphan, arg jbrout orphan jcharts orphan jdbm orphan jgroups212 orphan, arg kannel thias, cicku, linuxthomass libghemical orphan liboglappth orphan minbar izhar, hicham mopac7 orphan mozilla-firetray hicham mpqc orphan mule orphan nagios-plugins-check_sip orphan nesc orphan, chitlesh netatalk orphan, fkocina netty31 orphan nomnom orphan nvclock orphan obexfs orphan, itamarjp openstack-savanna orphan, matt perl-NOCpulse-SetID orphan perl-NOCpulse-Utils orphan, perl-sig piccolo2d orphan, akurtakov pidgin-rhythmbox orphan, nosnilmot pion-net orphan pp3 mmahut proxyknife rishi python-django-savanna orphan, matt python-savannaclient orphan, jruzicka, matt python-setuptools_trial orphan python-webdav-library orphan raidutils orphan, itamarjp rats smilner, rmonk redet orphan, rishi redet-doc orphan, rishi rinputd orphan savanna-image-elements orphan, jpeeler, matt spacewalk-admin orphan spacewalk-branding orphan tinyca2 orphan umlgraph orphan, fabiand unittest orphan vdradmin-am orphan verbiste icon wacomexpresskeys orphan, arozansk xorg-x11-drv-apm orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-cirrus orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-glint orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-i128 orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-i740 orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-mach64 orphan, glisse, whot xorg-x11-drv-mga orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-neomagic orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-r128 orphan, glisse, whot xorg-x11-drv-rendition orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-s3virge orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-savage orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-siliconmotion orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-sis orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-tdfx orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont xorg-x11-drv-trident orphan, airlied, ajax, alexl, caillon, caolanm, glisse, hadess, johnp, mbarnes, rhughes, rstrode, ssp, whot, xiphmont zikula ke4qqq The following packages require above mentioned packages: Depending on: NearTree rasmol (maintained by: krege) rasmol-2.7.5.2-3.fc21.i686 requires libCNearTree.so.5 rasmol-2.7.5.2-3.fc21.src requires NearTree-devel = 3.1.1-4.fc18 rasmol-gtk-2.7.5.2-3.fc21.i686 requires libCNearTree.so.5 Depending on: SOAPpy python-twisted-web (maintained by: thomasvs, jsteffan, thias) python-twisted-web-12.2.0-4.fc21.i686 requires SOAPpy = 0.11.6-18.fc21 pytrainer (maintained by: bsjones, silfreed) pytrainer-1.9.1-6.fc21.noarch requires SOAPpy = 0.11.6-18.fc21 Depending on: alliance pharosc (maintained by: chitlesh) pharosc-alliance-8.3-9.fc21.noarch requires alliance = 5.0-35.20090901snap.fc18 Depending on: guile-lib coot (maintained by: timfenn) coot-0.7.2-2.fc21.src requires guile-lib = 0.1.6-5.fc18 Depending on: ha-jdbc eucalyptus (maintained by: gholms, agk, arg) eucalyptus-3.3.0-0.5.20130408git32052445.fc20.src requires ha-jdbc = 2.0.16-0.8.rc1.fc21 eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires ha-jdbc = 2.0.16-0.8.rc1.fc21 Depending on: jbosscache-support hibernate3 (maintained by: gil, jhernand, msrb) hibernate3-3.6.10-14.fc21.src requires jbosscache-common-parent = 1.6-8.fc21 hibernate3-jbosscache-3.6.10-14.fc21.noarch requires mvn(org.jboss.cache:jbosscache-core) = ${jbosscache-core-version} hibernate3-ehcache-3.6.10-14.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 jbosscache-core (maintained by: msrb, arg, mizdebsk, msimacek) jbosscache-core-3.2.8-10.fc21.src requires jbosscache-common-parent = 1.6-8.fc21 ehcache-core (maintained by: gil, java-sig) ehcache-core-2.6.7-5.fc21.noarch requires hibernate3 = 3.6.10-14.fc21 ehcache-core-2.6.7-5.fc21.src requires hibernate3 = 3.6.10-14.fc21 eucalyptus (maintained by: gholms, agk, arg) eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires hibernate3 = 3.6.10-14.fc21, hibernate3-ehcache = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21, hibernate3-jbosscache = 3.6.10-14.fc21, hibernate3-proxool = 3.6.10-14.fc21, springframework-context-support = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21 jasperreports (maintained by: gil, java-sig) jasperreports-4.0.2-10.fc21.src requires hibernate3 = 3.6.10-14.fc21 jipijapa (maintained by: gil, java-sig) jipijapa-1.0.0-0.6.CR1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21 oat (maintained by: gwei3) oat-1.6.0-13.fc21.src requires hibernate3 = 3.6.10-14.fc21 oat-appraiser-1.6.0-13.fc21.i686 requires hibernate3 = 3.6.10-14.fc21 oat-client-1.6.0-13.fc21.i686 requires hibernate3 = 3.6.10-14.fc21 picketbox (maintained by: ricardo, goldmann) picketbox-4.0.21-0.1.Beta1.fc21.noarch requires mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final picketbox-4.0.21-0.1.Beta1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21 springframework (maintained by: jhernand, arg, gil, msrb) springframework-3.2.6-3.fc21.src requires mvn(org.hibernate:hibernate-core:3) = 3.6.10.Final, mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final springframework-orm-3.2.6-3.fc21.noarch requires mvn(org.hibernate:hibernate-core:3) = 3.6.10.Final, mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final springframework-context-support-3.2.6-3.fc21.noarch requires mvn(jasperreports:jasperreports) = 4.0.2, mvn(net.sf.ehcache:ehcache-core) = 2.6.7 springframework-webmvc-3.2.6-3.fc21.noarch requires mvn(jasperreports:jasperreports) = 4.0.2 springframework-batch (maintained by: gil, java-sig, msrb) springframework-batch-2.1.9-1.fc21.noarch requires mvn(org.hibernate:hibernate-core:3) = 3.6.10.Final, mvn(org.hibernate:hibernate-entitymanager:3) = 3.6.10.Final springframework-batch-2.1.9-1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21 wildfly (maintained by: goldmann) wildfly-8.1.0-1.fc21.src requires hibernate3 = 3.6.10-14.fc21, hibernate3-entitymanager = 3.6.10-14.fc21 eclipse-jbosstools (maintained by: galileo, goldmann) eclipse-jbosstools-4.1.1-2.fc21.src requires wildfly = 8.1.0-1.fc21 eclipse-jbosstools-as-4.1.1-2.fc21.noarch requires wildfly = 8.1.0-1.fc21 jenkins (maintained by: msrb, java-sig) jenkins-webapp-1.557-14.fc21.noarch requires jenkins-instance-identity = 1.3-4.fc21, jenkins-ssh-cli-auth = 1.2-4.fc21, jenkins-sshd = 1.6-4.fc21, spring-ldap = 1.3.1-9.fc21, springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-batch = 2.1.9-1.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-expression = 3.2.6-3.fc21, springframework-jdbc = 3.2.6-3.fc21, springframework-security = 3.1.6-2.fc21, springframework-tx = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21, springframework-webmvc = 3.2.6-3.fc21 jenkins-core-1.557-14.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE spring-ldap (maintained by: jhernand, gil, msrb) spring-ldap-1.3.1-9.fc21.noarch requires mvn(org.springframework.batch:spring-batch-core) = 2.1.9.RELEASE, mvn(org.springframework.batch:spring-batch-infrastructure) = 2.1.9.RELEASE spring-ldap-1.3.1-9.fc21.src requires mvn(org.springframework.batch:spring-batch-core) = 2.1.9.RELEASE, mvn(org.springframework.batch:spring-batch-infrastructure) = 2.1.9.RELEASE ambari (maintained by: pmackinn, java-sig) ambari-server-1.5.1-2.fc21.noarch requires mvn(org.springframework.ldap:spring-ldap-core) = 1.3.1.RELEASE, mvn(org.springframework.security:spring-security-config) = 3.1.6.RELEASE, mvn(org.springframework.security:spring-security-core) = 3.1.6.RELEASE, mvn(org.springframework.security:spring-security-ldap) = 3.1.6.RELEASE, mvn(org.springframework.security:spring-security-web) = 3.1.6.RELEASE springframework-security (maintained by: gil, java-sig, msrb) springframework-security-3.1.6-2.fc21.noarch requires mvn(org.springframework.ldap:spring-ldap-core) = 1.3.1.RELEASE springframework-security-3.1.6-2.fc21.src requires mvn(org.springframework.ldap:spring-ldap-core) = 1.3.1.RELEASE jenkins-credentials-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek) jenkins-credentials-plugin-1.10-3.fc21.src requires mvn(org.jenkins-ci.main:jenkins-core) = 1.557, mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557 jenkins-instance-identity (maintained by: msrb, java-sig) jenkins-instance-identity-1.3-4.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557 jenkins-mailer-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek) jenkins-mailer-plugin-1.8-2.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557 jenkins-ssh-cli-auth (maintained by: msrb, java-sig, mizdebsk, msimacek) jenkins-ssh-cli-auth-1.2-4.fc21.src requires mvn(org.jenkins-ci.main:jenkins-core) = 1.557 jenkins-ssh-credentials-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek) jenkins-ssh-credentials-plugin-1.6.1-2.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557 jenkins-ssh-slaves-plugin (maintained by: msrb, java-sig, mizdebsk, msimacek) jenkins-ssh-slaves-plugin-1.6-2.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557 jenkins-sshd (maintained by: msrb, java-sig, mizdebsk, msimacek) jenkins-sshd-1.6-4.fc21.src requires mvn(org.jenkins-ci.plugins:plugin:pom:) = 1.557 acegisecurity (maintained by: msrb, java-sig, mizdebsk, msimacek) acegisecurity-1.0.7-3.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-test) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE acegisecurity-1.0.7-3.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-test) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE activemq (maintained by: skottler, arg, java-sig, tdawson) activemq-5.6.0-9.fc21.src requires springframework-jms = 3.2.6-3.fc21 activemq-core-5.6.0-9.fc21.noarch requires mvn(org.springframework:spring-context) = 3.2.6.RELEASE cas-client (maintained by: gil, java-sig) cas-client-3.2.1-5.fc21.noarch requires springframework-beans = 3.2.6-3.fc21 cas-client-3.2.1-5.fc21.src requires springframework = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21 cxf (maintained by: goldmann) cxf-2.7.5-3.fc20.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE cxf-2.7.5-3.fc20.src requires springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-jms = 3.2.6-3.fc21, springframework-tx = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21, springframework-webmvc = 3.2.6-3.fc21 cxf-api-2.7.5-3.fc20.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE cxf-rt-2.7.5-3.fc20.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jms) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE cxf-tools-2.7.5-3.fc20.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE gemini-blueprint (maintained by: gil, java-sig) gemini-blueprint-1.0.2-7.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE gemini-blueprint-1.0.2-7.fc21.src requires springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-context-support = 3.2.6-3.fc21 google-guice (maintained by: mizdebsk, java-sig, msimacek, msrb) google-guice-3.2.2-1.fc21.src requires springframework-beans = 3.2.6-3.fc21 jdbi (maintained by: gil, java-sig) jdbi-2.49-3.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE jdbi-2.49-3.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE jersey (maintained by: gil, java-sig) jersey-1.17.1-11.fc21.src requires springframework = 3.2.6-3.fc21, springframework-aop = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21 jersey-contribs-1.17.1-11.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE jetty (maintained by: mizdebsk, java-sig, kdaniel, msimacek, msrb, overholt) jetty-9.2.1-1.fc21.src requires springframework-beans = 3.2.6-3.fc21 jetty-spring-9.2.1-1.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE jsonic (maintained by: gil, java-sig) jsonic-1.3.0-4.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE jsonic-1.3.0-4.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE liquibase (maintained by: dgoodwin, awood, jmrodri) liquibase-3.1.1-2.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE liquibase-3.1.1-2.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE log4j (maintained by: mizdebsk, devrim, java-sig, msimacek, msrb) log4j-2.0-0.3.rc1.fc21.src requires mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-test) = 3.2.6.RELEASE xbean (maintained by: mizdebsk, java-sig, kdaniel, msimacek, msrb) maven-xbean-plugin-3.17-2.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE xbean-3.17-2.fc21.src requires springframework = 3.2.6-3.fc21, springframework-beans = 3.2.6-3.fc21, springframework-context = 3.2.6-3.fc21, springframework-web = 3.2.6-3.fc21 xbean-spring-3.17-2.fc21.noarch requires mvn(org.springframework:spring-web) = 3.2.6.RELEASE openid4java (maintained by: gil, java-sig, msrb) openid4java-0.9.8-5.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE openid4java-0.9.8-5.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jdbc) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE opensaml-java (maintained by: goldmann) opensaml-java-2.5.3-7.fc21.src requires springframework = 3.2.6-3.fc21 resteasy (maintained by: vakwetu, edewata, goldmann, jhernand, weli) resteasy-3.0.6-2.fc21.noarch requires mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE resteasy-3.0.6-2.fc21.src requires springframework-webmvc = 3.2.6-3.fc21 restlet-jse (maintained by: gil, java-sig) restlet-jse-2.1.4-4.fc21.noarch requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-expression) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE restlet-jse-2.1.4-4.fc21.src requires mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-expression) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE snakeyaml (maintained by: jcapik, java-sig, mizdebsk, mmorsi, msrb) snakeyaml-1.13-3.fc21.src requires mvn(org.springframework:spring-core) = 3.2.6.RELEASE springframework-retry (maintained by: msrb, java-sig, mizdebsk, msimacek) springframework-retry-1.1.0-1.fc21.noarch requires mvn(org.springframework:spring-context) = 3.2.6.RELEASE springframework-retry-1.1.0-1.fc21.src requires mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE springframework-ws (maintained by: gil, java-sig) springframework-ws-2.1.1-3.fc21.noarch requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-beans) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jms) = 3.2.6.RELEASE, mvn(org.springframework:spring-oxm) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE springframework-ws-2.1.1-3.fc21.src requires mvn(org.springframework:spring-aop) = 3.2.6.RELEASE, mvn(org.springframework:spring-context) = 3.2.6.RELEASE, mvn(org.springframework:spring-core) = 3.2.6.RELEASE, mvn(org.springframework:spring-jms) = 3.2.6.RELEASE, mvn(org.springframework:spring-oxm) = 3.2.6.RELEASE, mvn(org.springframework:spring-tx) = 3.2.6.RELEASE, mvn(org.springframework:spring-web) = 3.2.6.RELEASE, mvn(org.springframework:spring-webmvc) = 3.2.6.RELEASE spymemcached (maintained by: gil, java-sig) spymemcached-2.9.1-3.fc21.noarch requires springframework-beans = 3.2.6-3.fc21 spymemcached-2.9.1-3.fc21.src requires springframework-beans = 3.2.6-3.fc21 ironjacamar (maintained by: ricardo, goldmann) ironjacamar-1.1.3-2.fc21.noarch requires picketbox = 4.0.21-0.1.Beta1.fc21 ironjacamar-1.1.3-2.fc21.src requires picketbox = 4.0.21-0.1.Beta1.fc21 jboss-negotiation (maintained by: goldmann) jboss-negotiation-2.2.7-1.Final.fc21.noarch requires mvn(org.picketbox:picketbox) = 4.0.20.Final jboss-negotiation-2.2.7-1.Final.fc21.src requires picketbox = 4.0.21-0.1.Beta1.fc21 jbossws-cxf (maintained by: goldmann) jbossws-cxf-4.2.0-2.fc21.src requires picketbox = 4.0.21-0.1.Beta1.fc21 hibernate (maintained by: gil, java-sig) hibernate-4.3.5-2.fc21.src requires ehcache-core = 2.6.7-5.fc21 hibernate-ehcache-4.3.5-2.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 littleproxy (maintained by: gil, java-sig) littleproxy-0.4-8.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 littleproxy-0.4-8.fc21.src requires ehcache-core = 2.6.7-5.fc21 metrics (maintained by: gil, java-sig) metrics-3.0.1-3.fc21.src requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 metrics-ehcache-3.0.1-3.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 thredds (maintained by: gil, java-sig) netcdf-java-4.3.19-5.fc21.noarch requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 thredds-4.3.19-5.fc21.src requires mvn(net.sf.ehcache:ehcache-core) = 2.6.7 Depending on: jgroups212 eucalyptus (maintained by: gholms, agk, arg) eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires jgroups212 = 2.12.3-8.fc21 Depending on: mule eucalyptus (maintained by: gholms, agk, arg) eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires mule-module-builders = 2.0.2.20080813-11.fc21, mule-module-client = 2.0.2.20080813-11.fc21, mule-module-management = 2.0.2.20080813-11.fc21, mule-module-spring-config = 2.0.2.20080813-11.fc21, mule-module-xml = 2.0.2.20080813-11.fc21, mule-transport-vm = 2.0.2.20080813-11.fc21 Depending on: netty31 eucalyptus (maintained by: gholms, agk, arg) eucalyptus-common-java-3.3.0-0.5.20130408git32052445.fc20.i686 requires netty31 = 3.1.5-8.fc21 Depending on: pion-net fatrat (maintained by: cicku) fatrat-1.2.0-0.20.beta2.fc21.i686 requires libpion-common-4.0.so, libpion-net-4.0.so fatrat-1.2.0-0.20.beta2.fc21.src requires pion-net-devel = 4.0.9-13.fc21 fatrat-subtitlesearch (maintained by: cicku) fatrat-subtitlesearch-1.2.0-0.6.beta1.fc21.i686 requires fatrat(x86-32) = 1:1.2.0-0.20.beta2.fc21 fatrat-subtitlesearch-1.2.0-0.6.beta1.fc21.src requires fatrat-devel = 1:1.2.0-0.20.beta2.fc21 Depending on: python-setuptools_trial python-zfec (maintained by: cicku) python-zfec-1.4.22-6.fc20.src requires python-setuptools_trial = 0.5.12-7.fc21 Depending on: spacewalk-admin spacewalk-backend (maintained by: msuchy) spacewalk-backend-tools-2.0.3-2.fc20.noarch requires spacewalk-admin = 2.1.2-2.fc21, spacewalk-certs-tools = 2.1.6-2.fc21 rhnpush (maintained by: msuchy, mzazrive) rhnpush-5.5.79-1.fc21.noarch requires spacewalk-backend-libs = 2.0.3-2.fc20 rhnpush-5.5.79-1.fc21.src requires spacewalk-backend-libs = 2.0.3-2.fc20 spacewalk-certs-tools (maintained by: msuchy) spacewalk-certs-tools-2.1.6-2.fc21.noarch requires spacewalk-backend-libs = 2.0.3-2.fc20 Depending on: spacewalk-branding spacewalk-setup-jabberd (maintained by: msuchy) spacewalk-setup-jabberd-2.0.1-3.fc21.noarch requires /usr/share/spacewalk Depending on: zikula zikula-module-News (maintained by: ke4qqq) zikula-module-News-2.4.1-9.fc21.noarch requires zikula = 1.2.3-5.fc19 Affected (co)maintainers agk: jbosscache-support, mule, netty31, ha-jdbc, jgroups212 airlied: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga ajax: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga akurtakov: piccolo2d alexl: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga arg: jbosscache-support, mule, netty31, ha-jdbc, jgroups212 arozansk: wacomexpresskeys athimm: cx18-firmware awood: jbosscache-support bsjones: SOAPpy caillon: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, drwright, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga caolanm: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga chitlesh: eqntott, alliance, cgnslib, espresso-ab, ghc-chalmers-lava2000, nesc cicku: kannel, pion-net, python-setuptools_trial clalance: aeolus-configure devrim: jbosscache-support dgoodwin: jbosscache-support edewata: jbosscache-support eldermarco: gnome-shell-theme-elementary fabiand: umlgraph fkocina: netatalk galileo: jbosscache-support gholms: jbosscache-support, mule, netty31, ha-jdbc, jgroups212 gil: jbosscache-support glisse: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-trident, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-tdfx, xorg-x11-drv-neomagic, xorg-x11-drv-r128, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-siliconmotion, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-mach64, xorg-x11-drv-i128, xorg-x11-drv-mga gnat: barry goldmann: jbosscache-support gwei3: jbosscache-support hadess: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga hicham: mozilla-firetray, minbar icon: verbiste itamarjp: gnomeradio, raidutils, obexfs ixs: bitbake izhar: minbar java-sig: jbosscache-support jcapik: jbosscache-support jeckersb: aeolus-configure jhernand: jbosscache-support jmrodri: jbosscache-support johnp: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga jpeeler: savanna-image-elements jreznik: dee-qt jruzicka: python-savannaclient jsteffan: SOAPpy kdaniel: jbosscache-support ke4qqq: zikula, blktap krege: NearTree laxathom: g-wrap, guile-lib linuxthomass: kannel matt: python-django-savanna, python-savannaclient, openstack-savanna, savanna-image-elements mbarnes: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga mizdebsk: jbosscache-support mmahut: pp3 mmorsi: jbosscache-support, aeolus-configure msimacek: jbosscache-support msrb: jbosscache-support msuchy: spacewalk-admin, spacewalk-branding mzazrive: spacewalk-admin nosnilmot: pidgin-rhythmbox overholt: jbosscache-support perl-sig: perl-NOCpulse-Utils pingou: fprint_demo, SteGUI, SOAPpy pmackinn: jbosscache-support rhl: clutter-gtkmm rhughes: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga ricardo: jbosscache-support rishi: freetalk, proxyknife, redet-doc, redet rmonk: rats roma: gnomeradio rstrode: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga shakthimaan: cbmc, emacs-identica-mode silfreed: ale, hdrprep, SOAPpy skottler: jbosscache-support slinabery: aeolus-configure smilner: rats ssp: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga sundaram: gdome2 swagiaal: eclipse-cmakeed szpak: fuse-smb tdawson: jbosscache-support thias: kannel, SOAPpy thomasvs: SOAPpy timfenn: guile-lib tmatsuu: NearTree tnorth: alliance tolland: ghemical vakwetu: jbosscache-support vicodan: barry weli: jbosscache-support whot: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-trident, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-tdfx, xorg-x11-drv-neomagic, xorg-x11-drv-r128, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-siliconmotion, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-mach64, xorg-x11-drv-i128, xorg-x11-drv-mga xiphmont: xorg-x11-drv-glint, xorg-x11-drv-cirrus, xorg-x11-drv-i740, xorg-x11-drv-apm, xorg-x11-drv-neomagic, xorg-x11-drv-siliconmotion, xorg-x11-drv-sis, xorg-x11-drv-s3virge, xorg-x11-drv-tdfx, xorg-x11-drv-savage, xorg-x11-drv-rendition, xorg-x11-drv-trident, xorg-x11-drv-i128, xorg-x11-drv-mga The script creating this output is run and developed by Fedora Release Engineering. Please report issues at its trac instance: https://fedorahosted.org/rel-eng/ The sources of this script can be found at: https://git.fedorahosted.org/cgit/releng/tree/scripts/find_unblocked_orphan… _______________________________________________ devel-announce mailing list devel-announce(a)lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel-announce

9 15

FreeRDP bump in rawhide
by Simone Caronni 18 Jul '14

18 Jul '14

Hello, I'm about to bump FreeRDP in Rawhide to the newly released version 1.2.0 beta 1. This allows us to build Remmina that is currently FTBFS. Of all the packages that are using FreeRDP, only Weston is the one for which I don't have any commit access, so it needs to be rebuilt. I've tested a mock build of it on my system and it builds fine against it (only tested that the package rebuilds fine). The libwinpr subpackage has underwent a major restructuring and now provides its separate set of CMake / include files so it has been changed accordingly, but as far as I know nothing else except FreeRDP itself is using it. Regards, --Simone -- You cannot discover new oceans unless you have the courage to lose sight of the shore (R. W. Emerson). http://xkcd.com/229/ http://negativo17.org/

1 1

Unresponsive maintainer: kanarip
by Juan Orti Alcaine 17 Jul '14

17 Jul '14

Hello, FAS user kanarip is comaintainer of one of my packages, and I receive mail bounces of their email address <kanarip(a)kanarip.com>. It seems like the domain is no longer valid: <kanarip(a)kanarip.com> (expanded from <amavisd-new-owner(a)fedoraproject.org>): Host or domain name not found. Name service error for name=kanarip.com type=A: Host found but no data record of requested type Following the policy, I ask the list if anyone knows how to contact this person. https://fedoraproject.org/wiki/Policy_for_nonresponsive_package_maintainers… -- Juan Orti GPG Key: DEEBD08B - http://jorti.fedorapeople.org/pubkey.asc Blog: https://apuntesderoot.wordpress.com/

8 19

Attention: rpm 4.12-alpha build bug
by Panu Matilainen 16 Jul '14

16 Jul '14

Executive summary: a bug in package generation of rpm 4.12, presumably related to hardlinked files has been spotted. I've untagged 4.12 while we're investigating, some packages might need a rebuild because of this. If you haven't built packages for rawhide today, you can probably stop reading. e2fsprogs-1.42.10-4.fc21 (builder/owner cc'd) is known to be slightly broken because of this and I've untagged that as well, a rebuild will be needed. Other packages (less than two dozen or so) *might* be affected if you've built something for rawhide in the last four hours or so, but the exact issue is not known yet so dont know... The manifests in files missing from package payload, which rpm 4.12 will actually notice during install: [root@localhost rpm]# rpm -Uvh --nodeps --noscripts --root /tmp/testroot ~pmatilai/Downloads/e2fsprogs-1.42.10-4.fc21.x86_64.rpm Preparing... ################################# [100%] Updating / installing... 1:e2fsprogs-1.42.10-4.fc21 ################################# [100%] error: unpacking of archive failed: cpio: Missing file(s) error: e2fsprogs-1.42.10-4.fc21.x86_64: install failed Older rpm versions will merrily install this package, but report breakage on verify: [root@localhost rpm-4.11.x]# ./rpm -Uvh --nodeps --noscripts --root /tmp/testroot ~pmatilai/Downloads/e2fsprogs-1.42.10-4.fc21.x86_64.rpm Preparing... ################################# [100%] Updating / installing... 1:e2fsprogs-1.42.10-4.fc21 ################################# [100%] [root@localhost rpm-4.11.x]# ./rpm -Va --nodeps --root /tmp/testroot/ missing /usr/sbin/e2label missing /usr/sbin/tune2fs [root@localhost rpm-4.11.x]# This is bug in package generation so any thusly affected packages need to be rebuilt. - Panu -

5 6

self-introduction: Jamie Duncan
by Jamie Duncan 15 Jul '14

15 Jul '14

Hi, Everyone. My name is Jamie Duncan. I work in the Strategic Customer team at Red Hat. One of the big things that our more security-minded (and some of the vaguely paranoid) users ask for is an easier way to obfuscate data in an sosreport before they send it out to Red Hat Support. There have been several failed attempts at this over the years, and soscleaner ( https://github.com/jduncan-rva/soscleaner/ ) is another attempt at it. It's written pythong (2.x), and acts as a secondary tool to process sosreports after they have been created. After several talks with the sosreport developers and many talks with customers, this seems to be the work flow that they desire. I've submitted soscleaner to Fedora under https://bugzilla.redhat.com/show_bug.cgi?id=1104746 and am looking for a sponsor. In my spare time I hang out in and around Richmond, VA and spend most of my non-working hours with my wife working on our old 1927 bungalow. Have a good day, everyone. Cheers, Jamie Duncan, RHCE Senior Technical Account Manager Red Hat, Inc. jduncan(a)redhat.com w-804.343.6086 c-804.307.7079 tech support-888.GO.REDHAT

2 4

default local DNS caching name server
by Chuck Anderson 14 Jul '14

14 Jul '14

Back in 2012 there was a discussion about having Fedora default to using a local DNS caching name server [1]: [1] http://comments.gmane.org/gmane.linux.redhat.fedora.devel/166018 I think this needs to be revisited. While DNSSEC support has historically been a driving factor for implementing this, there is an even more fundamental need due to the poor performance of the system in case the first listed nameserver in /etc/resolv.conf fails for some reason. It is shameful that Linux systems and applications in general still, after 20+ years, can't perform adequately after a primary DNS server failure. The stub resolver in glibc which uses /etc/resolv.conf can decide that the first listed nameserver entry is down, but this decision has to be made over and over in every single process on the system that is doing DNS resolution, resulting in repeated long application hangs/delays. We need an independent, system-wide DNS cache, and always point resolv.conf to 127.0.0.1 to solve this fundamental design problem with how name resolution works on a Linux system. Windows has had a default system-wide DNS cache for over a decade. It is about time that Linux catches up. Yesterday, a new version of dnsmasq was released [2] that adds full DNSSEC support and provides an alternative to unbound which dnssec-trigger requires. There has also been great work done to solve the NTP/DNSSEC bootstrap problem [3]. What options are currently available in e.g. NetworkManager for using a local DNS cache and what is the current status of this integration? Is it ready yet for turning on by default in all Fedora products? [2] http://lists.thekelleys.org.uk/pipermail/dnsmasq-discuss/2014q2/008416.html [3] http://comments.gmane.org/gmane.comp.embedded.cerowrt.devel/2244

23 129

[Base] The Base Design WG is looking for a new committee member!
by Phil Knirsch 11 Jul '14

11 Jul '14

Hi everyone. As Bill Nottingham has decided to resign from the committee we now have a free seat that we'd like to fill with another person. In order to fill this seat i'm therefore reaching out here to Fedora development to offer allow any applicant from the community to get in touch with us and let us know you're interested, why you're interested, why you think you'd be a good fit and maybe even the things you'd like to drive or accomplish in the Base Design WG. For more background on what the Base WG does, here our Fedora wiki: https://fedoraproject.org/wiki/Base In order to contact us you can either reply directly to me or join us during our regular meetings each Friday at 15:00 UTC on #fedora-meeting. I strongly suspect next weeks meeting will be canceled due to the US holiday, but after that we'll be doing weekly meetings again. Looking forward to see you there! Thanks & regards, Phil -- Philipp Knirsch | Tel.: +49-711-96437-470 Manager Core Services | Fax.: +49-711-96437-111 Red Hat GmbH | Email: Phil Knirsch <pknirsch(a)redhat.com> Wankelstrasse 5 | Web: http://www.redhat.com/ D-70563 Stuttgart, Germany

4 6

fedora-release-$PRODUCT, /etc/issue, /etc/os-release, Per-Product Configs and more!
by Stephen Gallagher 10 Jul '14

10 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 We're getting down to the wire on Fedora 21 and we need to nail down a few of the low-level release requirements. First of all, I'd like to formally propose that each of the products will have a fedora-release-$PRODUCT (and corresponding generic-release-$PRODUCT) package. This package will meet several needs (with magical hand-waving in this initial email). 1) All Products will add explicit Requires: to the fedora-release-$PRODUCT package so that they may define their minimal operating set properly. The presence or absence of this package on the system will indicate definitively which Product (if any) is operating here. 2) The fedora-release-$PRODUCT package (and possibly %post or systemd snippets therein) will be responsible for the creation and maintenance of /etc/issue, /etc/os-release and /etc/fedora-release-product (note: there is no $ there. That's the literal name. This file will be equivalent to /etc/fedora-release except that it will include the Product name. 3) fedora-release-$PRODUCT will have an explicit Conflict with all other fedora-release-$PRODUCT packages, to ensure that we do not mix-and-match (which is a combinatorial nightmare). Additionally, I am working on a proposal[1] for per-product configs in the Fedora 21 timeframe which is dependent on the above. It should be noted that this is an interim solution only; in Fedora 22 we will be able to vastly simplify this situation with the weak dependency support in RPM 4.12. (I was looking for a link detailing all of these weak deps, but I cannot find one. If you know of such a document, please reply and add it). [1] https://fedoraproject.org/wiki/Per-Product_Configuration_Packaging_Draft -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlOxs4gACgkQeiVVYja6o6MtRACgm+fGmlErdjhBEXgTT+opxcTb y+wAnjyidVGBrDZFrcSd6kcex38Lj0pA =BBo7 -----END PGP SIGNATURE-----

15 44

PostgreSQL systemd config scheme change
by Pavel Raiskup 07 Jul '14

07 Jul '14

Hello all, there is currently not so much things to configure in PostgreSQL from systemd's service point of view (not taking postgresql.conf into account), concretely, we configure PGPORT and PGDATA, from which the later is important (and often re-configured to point e.g. to some dedicated mount point, etc.). That tells systemd's unit file where it should start PostgreSQL server from. What does not seem to be quite 100% OK is that, when user wants to change PGDATA, we instruct him to make a separate service file: $ cat /etc/systemd/system/postgresql.service .include /usr/lib/systemd/system/postgresql.service [Service] Environment=PGDATA=/some/other/place/than/default This works OK -- but the problem is that it is quite too much for just changing one simple directory path. What seems to be better approach is to have real configuration file, such one for which '$ rpm -qc postgresql-server' would not be quiet. Lets say: $ cat /etc/postgresql/postgresql PGDATA=/some/other/place/than/default With some additional packager's work, that allows us to do yet another configuration easily - and that is multiple PostgreSQL running on one single machine (on different ports or IPs). The only thing would be to create yet another file: $ cat /etc/postgresql/postgresql@com_example PGDATA=/some/path/pg/com_example PGPORT=@SOMEPORT@ $ systemctl start postgresql@com_example Would you see something bad on that approach (please, take into account that we would not stop supporting the old way, we just want to make future configuration easier and straight-forward). Pavel

5 9

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

devel June 2014