Schedule for Tuesday's FESCo Meeting (2022-02-01)
by Tom Stellard
Following is the list of topics that will be discussed in the
FESCo meeting Tuesday at 18:00UTC in #fedora-meeting on
irc.libera.chat.
To convert UTC to your local time, take a look at
http://fedoraproject.org/wiki/UTCHowto
or run:
date -d '2022-02-01 18:00 UTC'
Links to all issues to be discussed can be found at:
https://pagure.io/fesco/report/meeting_agenda
= Discussed and Voted in the Ticket =
#2737 F36 Change: Ibus-table cangjie default for zh_HK
https://pagure.io/fesco/issue/2737
APPROVED (+6,0,-0)
#2736 F36 Change: Malayalam Default Fonts Update
https://pagure.io/fesco/issue/2736
APPROVED (+5,0,-0)
#2735 F36 Change: New requirements for akmods binary kernel modules for Silverblue / Kinoite support
https://pagure.io/fesco/issue/2735
APPROVED (+4,0,-0)
#2733 F36 Change: Django 4.0
https://pagure.io/fesco/issue/2733
APPROVED (+3,0,-0)
#2722 Nonresponsive maintainer: xgl-maint - xgl-maint
https://pagure.io/fesco/issue/2722
APPROVED
#2719 Nonresponsive maintainer: Brian Pepple bpepple
https://pagure.io/fesco/issue/2719
APPROVED
#2716 F36 Change: Keylime subpackaging and agent alternatives
https://pagure.io/fesco/issue/2716
APPROVED (+5,0,-0)
= Discussed and Voted in the previous meeting =
#2732 F36 Change: No ifcfg by default
https://pagure.io/fesco/issue/2732
APPROVED (+8,0,-0)
#2721 F37 Change: DIGLIM
https://pagure.io/fesco/issue/2721
Deferred to F37 (+8, 0, -0)
#2711 F37 Change: Enable fs-verity in RPM
https://pagure.io/fesco/issue/2711
Deferred to F37 (+9, 0, -0)
= New business =
#2741 Change proposal: Authselect: Move State Files to /etc
https://pagure.io/fesco/issue/2741
= Open Floor =
For more complete details, please visit each individual
issue. The report of the agenda items can be found at
https://pagure.io/fesco/report/meeting_agenda
If you would like to add something to this agenda, you can
reply to this e-mail, file a new issue at
https://pagure.io/fesco, e-mail me directly, or bring it
up at the end of the meeting, during the open floor topic. Note
that added topics may be deferred until the following meeting.
2 years, 4 months
Fwd: conditional require (RPM dependency solving puzzle)
by przemek klosowski
>>>>>
>>>>> rpm -q -conflicts kicad-6.0.1-4.fc35.x86_64.rpm
>>>>> kicad-doc < 1:6.0.1-4.fc35
>>>> ...
>>>>
>>>> When I add the '--best --allowerasing' flags, then I get the
>>>> desired result:
>>>>
>>>> # dnf update kicad-6.0.1-4.fc35.x86_64.rpm --best --allowerasing
>>>> Last metadata expiration check: 0:43:04 ago on Mon 31 Jan 2022
>>>> 05:06:19 PM EST.
>>>> Dependencies resolved.
>>>> ============================================================================================
>>>>
>>>> Package Architecture Version Repository
>>>> Size
>>>> ============================================================================================
>>>>
>>>> Upgrading:
>>>> kicad x86_64 1:6.0.1-4.fc35
>>>> @commandline 90 M
>>>> Removing dependent packages:
>>>> kicad-doc noarch 1:5.1.12-1.fc35
>>>> @updates 111 M
Thanks to Steven, Stephen and Miro for finding this solution. Still,
having to add flags and deleting the existing doc package is not
completely gruntling---it works, but it's not automatic and, for the
future, I am curious if there's another way.
Sorry for flogging this fine stallion, but I believe that 'dnf update
kicad kicad-doc' would have worked (I did check that updating kicad-doc
followed by updating kicad works). Isn't there some combination of
Required/Obsoletes/Conflicts/??? to coax dnf to upgrade both packages
instead of deleting kicad-doc?
2 years, 4 months
CVE-2021-4034: why is pkexec still a thing?
by Adam Williamson
Hi folks!
For anyone who hasn't seen it yet - there's quite a kerfuffle today
about a major security issue in polkit:
https://arstechnica.com/information-technology/2022/01/a-bug-lurking-for-...
turns out that ever since it was invented, `pkexec` has had a bug
allowing for local root privilege escalation. Which is...bad.
The issue and some of the comments around it prompted me to wonder -
why is `pkexec` still a thing? Particularly, why is it still a thing we
are shipping by default in just about every Fedora install?
My best recollection is that pkexec was kinda a kludge to allow us to
get rid of consolehelper: some apps weren't getting rewritten to the
Right Way of doing things under policykit, they still just wanted to
have the entire app run as root, and pkexec was a way to make that
happen.
But that was then, and this is now. Does anything in Workstation use
pkexec? Does anything in KDE use it? I'm pretty sure (at least I really
hope!) nothing in Server uses it. I don't think any of our
documentation recommends its use for interactive execution of things as
root (these days we tend to just specify `sudo` for that and assume the
install has an admin user).
Should we just split it out of the polkit package into a subpackage and
stop shipping the subpackage on those editions/spins at least? If
there's anything in other desktops still using it, it can grow a
dependency on the subpackage...
Am I forgetting some other reason we still need it?
--
Adam Williamson
Fedora QA
IRC: adamw | Twitter: adamw_ha
https://www.happyassassin.net
2 years, 4 months
Announcing LLVM Snapshot Packages for Fedora Linux
by Konrad Kleine
Dear Fedora packagers, developers and users,
we have some good news for you:
We are beginning to build nightly snapshot packages of LLVM for the latest
versions of Fedora Linux (currently 34, 35 and rawhide) for a growing list
of
architectures.
You can grab them here:
https://copr.fedorainfracloud.org/coprs/g/fedora-llvm-team/llvm-snapshots/
Feel free to enable the copr repository with
$ dnf copr enable @fedora-llvm-team/llvm-snapshots
and then install the i.e. latest clang with
$ dnf install clang
Beware, that a snapshot release of LLVM is probably more unstable than a
regular release! If you run into a problem, I would kindly ask you to wait
and try it again with the next snapshot.
We hope you enjoy this peek into the next version of LLVM that you can now
try without too much hassle and without compiling it every day on your own.
Regards,
Konrad Kleine
Senior Software Engineer, Platform Tools
Red Hat <https://www.redhat.com>
kkleine(a)redhat.com
M: +49(0)151/21000244
D87A 77F4 2A58 C72D 12A7 203B C0A0 2C32 BCB7 3099
<https://www.redhat.com>
2 years, 4 months
search among all spec files
by Germano Massullo
Good day. I have to search gcc-toolset among all Fedora packages specs
files, in order to read some example of usage.
Is that possible? For example cloning the whole git repository.
Best regards
2 years, 4 months
Odd annobin output during mock build?
by Richard Shaw
I just did a local mock build of the latest version of OpenImageIO which
was just released and saw this on every cpp line:
annobin: /builddir/build/BUILD/oiio-2.3.12.0/src/libutil/errorhandler.cpp:
Warning: -D_GLIBCXX_ASSERTIONS not defined
Is this harmless?
Thanks,
Richard
2 years, 4 months