Restricting automounting of uncommon filesystems?
by Matthew Garrett
A discussion within Debian again brought up the problem that:
1) Automounting of removable media exposes the kernel to a lot of
untrusted input
2) Kernel upstream are not terribly concerned with ensuring that kernel
filesystems are resilient against deliberately malformed filesystems so
are mostly not proactively looking for bugs there
3) Uncommonly used filesystems are less likely to be tested against
adverse input in the real world and so are more likely to contain
exploitable bugs
There are various cases where people do need to make use of uncommon
filesystems, but the majority of them aren't related to removable media.
udisks2 supports setting the UDISKS_AUTO variable to 0 on devices that
shouldn't be automounted, which means something like:
SUBSYSTEM!="block", GOTO="udisks_insecure_fs_end"
ENV{ID_FS_TYPE}=="hfs", ENV{UDISKS_AUTO}="0"
# repeat as necessary for anything else that shouldn't be automounted
LABEL="udisks_insecure_fs_end"
ought to be enough. So:
a) Does this seem like a good idea?
b) If so, is dealing with it via udev rules the right approach? This way
seems desktop-agnostic
c) Where should it ship, and what should the process be for disabling it
for people who need this functionality?
Long-term I'd love to see more work put into having FUSE support for
these and leaving the in-kernel fs to stuff we know is trustworthy, but
that's rather more work.
9 months
Summary/Minutes from today's FESCo Meeting (2023-07-27)
by Tom Stellard
=====================================
#fedora-meeting-2: FESCO (2023-07-27)
=====================================
Meeting started by tstellar at 17:00:28 UTC. The full logs are available
at
https://meetbot.fedoraproject.org/fedora-meeting-2/2023-07-27/fesco.2023-...
.
Meeting summary
---------------
* init process (tstellar, 17:01:13)
* #3039 RFC: Roadmap for DNF5 in Fedora 39 / invoking the Contingency
Mechanism (tstellar, 17:04:33)
* AGREED: APPROVED(+7,0,-0) The switch to DNF5 will be postponed
(likely to Fedora 41, to be determined by the Change Owners) and
reverted in Rawhide for the time being (i.e. dnf 4 will provide
/usr/bin/dnf again). (tstellar, 17:27:21)
* #3035 Change: Build JDKs once, repack everywhere (tstellar, 17:28:30)
* AGREED: APPROVED(+5,0,-3) (tstellar, 17:43:10)
* Next week's chair (tstellar, 17:45:22)
* ACTION: decathorpe will chair next meeting (tstellar, 17:48:46)
* Open Floor (tstellar, 17:48:56)
* ACTION: nirik will update fesco meeting location in the calendar.
(tstellar, 17:59:50)
Meeting ended at 18:01:04 UTC.
Action Items
------------
* decathorpe will chair next meeting
* nirik will update fesco meeting location in the calendar.
Action Items, by person
-----------------------
* decathorpe
* decathorpe will chair next meeting
* nirik
* nirik will update fesco meeting location in the calendar.
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* tstellar (53)
* decathorpe (37)
* nirik (32)
* mhroncok (29)
* dcantrell (18)
* zodbot (16)
* Eighth_Doctor (14)
* jmracek (12)
* sbueno (5)
* sgallagh (4)
* salimma (1)
* zbyszek (0)
* mhayden (0)
* Conan_Kudo (0)
* Pharaoh_Atem (0)
* Son_Goku (0)
* King_InuYasha (0)
* Sir_Gallantmon (0)
Generated by `MeetBot`_ 0.4
9 months
List of long term FTBFS packages to be retired this week
by Miro Hrončok
Dear maintainers.
Based on the current fail to build from source policy, the following packages
should be retired from Fedora 39 approximately one week before branching.
5 weekly reminders are required, hence the retirement will happen
this week.
Policy:
https://docs.fedoraproject.org/en-US/fesco/Fails_to_build_from_source_Fai...
The packages in rawhide were not successfully built at least since Fedora 36.
This report is based on dist tags.
Packages collected via:
https://github.com/hroncok/fedora-report-ftbfs-retirements/blob/master/ft...
If you see a package that was built, please let me know.
If you see a package that should be exempted from the process,
please let me know and we can work together to get a FESCo approval for that.
If you see a package that can be rebuilt, please do so.
Package (co)maintainers
================================================================================
DecodeIR leamas
apache-commons-fileupload jerboaa, jjelen, mizdebsk, spike
avarice lucilanga
burp cicku, kaptk2
clang12 tstellar
cvise mpolacek
emacs-common-ess alexlan, jamatos
fasttext kenhys
golang-github-burntsushi-xgbutil eclipseo, go-sig
golang-github-chifflier-nfqueue fab, go-sig
golang-github-cupcake-rdb eclipseo, go-sig
golang-github-d5-tengo-2 fab, go-sig
golang-github-docker-slim eclipseo, go-sig
golang-github-facebookarchive-inject agerstmayr, go-sig, mgoodwin, nathans
golang-github-facebookarchive-structtag agerstmayr, go-sig, mgoodwin, nathans
golang-github-facebookgo-clock eclipseo, go-sig
golang-github-facebookgo-ensure dcavalca, go-sig
golang-github-facebookgo-stack dcavalca, go-sig
golang-github-ghemawat-stream eclipseo, go-sig
golang-github-gorp-3 dcavalca, go-sig
golang-github-haproxytech-models bdperkin, go-sig
golang-github-jackc-pgproto3 eclipseo, go-sig
golang-github-jackc-pgservicefile eclipseo, go-sig
golang-github-nkovacs-streamquote eclipseo, go-sig
golang-github-powerman-check eclipseo, go-sig
golang-github-quay-clair-3 eclipseo, go-sig
golang-github-remind101-migrate eclipseo, go-sig
golang-github-vmware-vmw-guestinfo eclipseo, go-sig
golang-github-zmap-zlint eclipseo, go-sig
golang-go4 eclipseo, go-sig, jchaloup
golang-gopkg-retry-1 eclipseo, go-sig
golang-gopkg-seborama-govcr-2 go-sig, qulogic
golang-gopkg-sourcemap-1 eclipseo, go-sig, jchaloup
golang-gvisor eclipseo, elmarco, go-sig
golang-rsc-qr go-sig, qulogic
golang-sigs-k8s-kustomize dcavalca, go-sig
golang-vitess eclipseo, go-sig
hibernate-jpa-2.1-api jjelen
libffi3.1 codonell
libifp konradm
log4c stevetraylen, valtri
mongo-cxx-driver mmuzila, orphan
mspdebug till
multican jnovy
opentracker cicku, lbazan
racket dbenoit
rubygem-rspec-collection_matchers pvalena
serp jjelen
sispmctl jirka, reanimator
spew jonathanspw
usbsoftrock lucilanga
xmpcore jjelen
The following packages require above mentioned packages:
Depending on: golang-github-burntsushi-xgbutil (13)
deepin-api (maintained by: cheeselee, deepinde-sig, felixonmars, go-sig, zsun)
deepin-api-5.5.25-2.fc38.src requires golang(github.com/BurntSushi/xgbutil)
deepin-daemon (maintained by: cheeselee, deepinde-sig, go-sig, zsun)
deepin-daemon-5.14.44-3.fc38.src requires
golang(github.com/BurntSushi/xgbutil),
golang(github.com/linuxdeepin/dde-api/dxinput)
deepin-daemon-5.14.44-3.fc38.x86_64 requires deepin-session-ui
deepin-control-center (maintained by: cheeselee, deepinde-sig, zsun)
deepin-control-center-5.5.77-3.fc39.i686 requires deepin-api, deepin-daemon,
startdde
deepin-control-center-5.5.77-3.fc39.x86_64 requires deepin-api,
deepin-daemon, startdde
deepin-control-center-5.5.77-3.fc39.src requires deepin-dock-devel
deepin-wallpapers (maintained by: cheeselee, deepinde-sig, felixonmars, zsun)
deepin-wallpapers-1.7.7-13.fc39.src requires deepin-api
startdde (maintained by: cheeselee, deepinde-sig, go-sig, zsun)
startdde-5.9.32-3.fc39.src requires
golang(github.com/linuxdeepin/dde-api/dxinput)
startdde-5.9.32-3.fc39.x86_64 requires deepin-daemon
deepin-calendar (maintained by: cheeselee, deepinde-sig, felixonmars, zsun)
deepin-calendar-5.9.1-4.fc39.x86_64 requires deepin-daemon(x86-64)
deepin-launcher (maintained by: cheeselee, deepinde-sig, zsun)
deepin-launcher-5.5.19.1-3.fc39.x86_64 requires deepin-daemon, startdde
deepin-session-ui (maintained by: cheeselee, deepinde-sig, felixonmars, zsun)
deepin-session-ui-5.5.23-3.fc39.x86_64 requires deepin-daemon, startdde
deepin-session-ui-5.5.23-3.fc39.src requires pkgconfig(dde-dock)
deepin-file-manager (maintained by: cheeselee, deepinde-sig, zsun)
deepin-desktop-5.6.4-10.fc39.x86_64 requires deepin-control-center,
deepin-dock, deepin-launcher, deepin-session-ui
deepin-file-manager-5.6.4-10.fc39.src requires deepin-dock-devel
deepin-dock (maintained by: cheeselee, deepinde-sig, felixonmars, zsun)
deepin-dock-5.5.38.1-3.fc39.i686 requires libdccwidgets.so
deepin-dock-5.5.38.1-3.fc39.src requires deepin-control-center-devel
deepin-dock-5.5.38.1-3.fc39.x86_64 requires libdccwidgets.so()(64bit)
deepin-draw (maintained by: cheeselee, deepinde-sig, zsun)
deepin-draw-5.10.6-3.fc39.x86_64 requires deepin-notifications
deepin-editor (maintained by: cheeselee, deepinde-sig, zsun)
deepin-editor-5.10.18-8.fc39.x86_64 requires deepin-notifications
deepin-system-monitor (maintained by: cheeselee, deepinde-sig, zsun)
deepin-system-monitor-5.9.17-4.fc39.src requires deepin-dock-devel
Depending on: golang-github-chifflier-nfqueue (1)
bettercap (maintained by: fab, go-sig)
bettercap-2.32.0-9.fc39.src requires
golang(github.com/chifflier/nfqueue-go/nfqueue)
golang-github-bettercap-devel-2.32.0-9.fc39.noarch requires
golang(github.com/chifflier/nfqueue-go/nfqueue)
Depending on: golang-github-cupcake-rdb (2)
golang-github-siddontang-rdb (maintained by: eclipseo, go-sig)
golang-github-siddontang-rdb-0-0.7.20210111gitfc89ed2.fc39.src requires
golang(github.com/cupcake/rdb), golang(github.com/cupcake/rdb/nopdecoder)
golang-github-siddontang-rdb-devel-0-0.7.20210111gitfc89ed2.fc39.noarch
requires golang(github.com/cupcake/rdb), golang(github.com/cupcake/rdb/nopdecoder)
golang-github-ledisdb (maintained by: eclipseo, go-sig)
golang-github-ledisdb-0.6-9.20210112gitd35789e.fc39.src requires
golang(github.com/siddontang/rdb)
golang-github-ledisdb-devel-0.6-9.20210112gitd35789e.fc39.noarch requires
golang(github.com/siddontang/rdb)
Depending on: golang-github-facebookarchive-structtag (1)
golang-github-facebookarchive-inject (maintained by: agerstmayr, go-sig,
mgoodwin, nathans)
golang-github-facebookarchive-inject-0-0.10.20190326gitf23751c.fc36.src
requires golang(github.com/facebookgo/structtag)
golang-github-facebookarchive-inject-devel-0-0.10.20190326gitf23751c.fc36.noarch
requires golang(github.com/facebookgo/structtag)
Depending on: golang-github-facebookgo-clock (2)
golang-github-lestrrat-apache-logformat (maintained by: bdperkin, go-sig)
golang-github-lestrrat-apache-logformat-2.0.6-7.fc39.src requires
golang(github.com/facebookgo/clock)
golang-github-haproxytech-dataplaneapi (maintained by: bdperkin, go-sig)
golang-github-haproxytech-dataplaneapi-2.4.4-9.fc39.src requires
golang(github.com/lestrrat-go/apache-logformat)
golang-github-haproxytech-dataplaneapi-devel-2.4.4-9.fc39.noarch requires
golang(github.com/lestrrat-go/apache-logformat)
Depending on: golang-github-facebookgo-ensure (1)
golang-github-facebookincubator-dhcplb (maintained by: dcavalca, go-sig)
golang-github-facebookincubator-dhcplb-0-0.8.20210706git2e66b27.fc39.src
requires golang(github.com/facebookgo/ensure)
Depending on: golang-github-facebookgo-stack (2)
golang-github-facebookgo-ensure (maintained by: dcavalca, go-sig)
golang-github-facebookgo-ensure-0-0.3.20210705git63f1cf6.fc36.src requires
golang(github.com/facebookgo/stack)
golang-github-facebookgo-ensure-devel-0-0.3.20210705git63f1cf6.fc36.noarch
requires golang(github.com/facebookgo/stack)
golang-github-facebookincubator-dhcplb (maintained by: dcavalca, go-sig)
golang-github-facebookincubator-dhcplb-0-0.8.20210706git2e66b27.fc39.src
requires golang(github.com/facebookgo/ensure)
Depending on: golang-github-ghemawat-stream (1)
golang-github-cockroachdb-pebble (maintained by: eclipseo, go-sig)
golang-github-cockroachdb-pebble-0-0.13.20210108git48f5530.fc39.src requires
golang(github.com/ghemawat/stream)
Depending on: golang-github-jackc-pgproto3 (5)
golang-github-jackc-pgconn (maintained by: eclipseo, go-sig)
golang-github-jackc-pgconn-1.8.0-7.fc39.src requires
golang(github.com/jackc/pgproto3/v2)
golang-github-jackc-pgconn-devel-1.8.0-7.fc39.noarch requires
golang(github.com/jackc/pgproto3/v2)
golang-github-jackc-pgx (maintained by: eclipseo, go-sig)
golang-github-jackc-pgx-4.10.1-7.fc39.src requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgconn/stmtcache),
golang(github.com/jackc/pgproto3/v2), golang(github.com/jackc/pgtype)
golang-github-jackc-pgx-devel-4.10.1-7.fc39.noarch requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgconn/stmtcache),
golang(github.com/jackc/pgproto3/v2), golang(github.com/jackc/pgtype)
golang-github-jackc-pgtype (maintained by: eclipseo, go-sig)
golang-github-jackc-pgtype-1.6.2-7.fc39.src requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgx/v4),
golang(github.com/jackc/pgx/v4/stdlib)
golang-github-jackc-pgtype-devel-1.6.2-7.fc39.noarch requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgx/v4)
golang-github-cockroachdb-cockroach-go (maintained by: go-sig, logic)
golang-github-cockroachdb-cockroach-go-2.1.0-7.fc39.src requires
golang(github.com/jackc/pgx/v4)
golang-github-cockroachdb-cockroach-go-devel-2.1.0-7.fc39.noarch requires
golang(github.com/jackc/pgx/v4)
migrate (maintained by: go-sig, linkdupont)
golang-github-migrate-4-devel-4.16.2-1.fc39.noarch requires
golang(github.com/cockroachdb/cockroach-go/v2/crdb)
migrate-4.16.2-1.fc39.src requires
golang(github.com/cockroachdb/cockroach-go/v2/crdb)
Depending on: golang-github-jackc-pgservicefile (5)
golang-github-jackc-pgconn (maintained by: eclipseo, go-sig)
golang-github-jackc-pgconn-1.8.0-7.fc39.src requires
golang(github.com/jackc/pgservicefile)
golang-github-jackc-pgconn-devel-1.8.0-7.fc39.noarch requires
golang(github.com/jackc/pgservicefile)
golang-github-jackc-pgtype (maintained by: eclipseo, go-sig)
golang-github-jackc-pgtype-1.6.2-7.fc39.src requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgx/v4),
golang(github.com/jackc/pgx/v4/stdlib)
golang-github-jackc-pgtype-devel-1.6.2-7.fc39.noarch requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgx/v4)
golang-github-jackc-pgx (maintained by: eclipseo, go-sig)
golang-github-jackc-pgx-4.10.1-7.fc39.src requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgconn/stmtcache),
golang(github.com/jackc/pgtype)
golang-github-jackc-pgx-devel-4.10.1-7.fc39.noarch requires
golang(github.com/jackc/pgconn), golang(github.com/jackc/pgconn/stmtcache),
golang(github.com/jackc/pgtype)
golang-github-cockroachdb-cockroach-go (maintained by: go-sig, logic)
golang-github-cockroachdb-cockroach-go-2.1.0-7.fc39.src requires
golang(github.com/jackc/pgx/v4)
golang-github-cockroachdb-cockroach-go-devel-2.1.0-7.fc39.noarch requires
golang(github.com/jackc/pgx/v4)
migrate (maintained by: go-sig, linkdupont)
golang-github-migrate-4-devel-4.16.2-1.fc39.noarch requires
golang(github.com/cockroachdb/cockroach-go/v2/crdb)
migrate-4.16.2-1.fc39.src requires
golang(github.com/cockroachdb/cockroach-go/v2/crdb)
Depending on: golang-github-nkovacs-streamquote (2)
golang-github-geertjohan-rice (maintained by: eclipseo, go-sig)
golang-github-geertjohan-rice-1.0.2-11.fc39.src requires
golang(github.com/nkovacs/streamquote)
golang-github-geertjohan-rice-devel-1.0.2-11.fc39.noarch requires
golang(github.com/nkovacs/streamquote)
golang-vitess (maintained by: eclipseo, go-sig)
golang-vitess-11.0.1-1.fc36.src requires
golang(github.com/GeertJohan/go.rice),
golang(github.com/GeertJohan/go.rice/embedded)
golang-vitess-devel-11.0.1-1.fc36.noarch requires
golang(github.com/GeertJohan/go.rice),
golang(github.com/GeertJohan/go.rice/embedded)
Depending on: golang-github-powerman-check (3)
golang-github-jedisct1-hpke-compact (maintained by: eclipseo, go-sig)
golang-github-jedisct1-hpke-compact-0.9.0-5.fc39.src requires
golang(github.com/powerman/check)
dnscrypt-proxy (maintained by: dcavalca, eclipseo, epel-packagers-sig, go-sig)
dnscrypt-proxy-2.1.4-2.fc39.src requires
golang(github.com/jedisct1/go-hpke-compact)
dnscrypt-proxy-gui (maintained by: f1ash, vascom)
dnscrypt-proxy-gui-1.24.18-5.fc39.x86_64 requires dnscrypt-proxy
Depending on: golang-github-quay-clair-3 (1)
reg (maintained by: go-sig, infra-sig, mattia)
reg-0.16.1-12.fc39.src requires golang(github.com/coreos/clair/api/v3/clairpb)
Depending on: golang-github-remind101-migrate (2)
golang-github-quay-clair-3 (maintained by: eclipseo, go-sig)
golang-github-quay-clair-3-3.0.0~pre1-2.fc36.src requires
golang(github.com/remind101/migrate)
golang-github-quay-clair-3-devel-3.0.0~pre1-2.fc36.noarch requires
golang(github.com/remind101/migrate)
reg (maintained by: go-sig, infra-sig, mattia)
reg-0.16.1-12.fc39.src requires golang(github.com/coreos/clair/api/v3/clairpb)
Depending on: golang-github-vmware-vmw-guestinfo (1)
golang-github-vmware-govmomi (maintained by: eclipseo, go-sig)
golang-github-vmware-govmomi-0.24.0-7.fc38.src requires
golang(github.com/vmware/vmw-guestinfo/message),
golang(github.com/vmware/vmw-guestinfo/vmcheck)
golang-github-vmware-govmomi-devel-0.24.0-7.fc38.noarch requires
golang(github.com/vmware/vmw-guestinfo/message),
golang(github.com/vmware/vmw-guestinfo/vmcheck)
Depending on: golang-go4 (3)
golang-github-appc-spec (maintained by: eclipseo, go-sig, jchaloup)
golang-github-appc-spec-0.8.11-18.fc39.src requires golang(go4.org/errorutil)
golang-github-appc-spec-devel-0.8.11-18.fc39.noarch requires
golang(go4.org/errorutil)
golang-github-appc-docker2aci (maintained by: eclipseo, go-sig)
golang-github-appc-docker2aci-0.17.2-13.fc39.src requires
golang(github.com/appc/spec/aci), golang(github.com/appc/spec/pkg/acirenderer),
golang(github.com/appc/spec/schema), golang(github.com/appc/spec/schema/types)
golang-github-appc-docker2aci-devel-0.17.2-13.fc39.noarch requires
golang(github.com/appc/spec/aci), golang(github.com/appc/spec/pkg/acirenderer),
golang(github.com/appc/spec/schema), golang(github.com/appc/spec/schema/types)
golang-github-appc-goaci (maintained by: eclipseo, go-sig)
golang-github-appc-goaci-0.1.1-16.fc39.src requires
golang(github.com/appc/spec/aci), golang(github.com/appc/spec/schema),
golang(github.com/appc/spec/schema/types)
golang-github-appc-goaci-devel-0.1.1-16.fc39.noarch requires
golang(github.com/appc/spec/aci), golang(github.com/appc/spec/schema),
golang(github.com/appc/spec/schema/types)
Depending on: golang-gopkg-retry-1 (2)
snapd (maintained by: bboozzoo, go-sig, ngompa, zyga)
snapd-2.58.3-2.fc39.src requires golang(gopkg.in/retry.v1)
snapd-devel-2.58.3-2.fc39.noarch requires golang(gopkg.in/retry.v1)
plasma-discover (maintained by: kde-sig, rdieter)
plasma-discover-snap-5.27.6-2.fc39.i686 requires snapd
plasma-discover-snap-5.27.6-2.fc39.x86_64 requires snapd
Depending on: golang-gopkg-seborama-govcr-2 (1)
htmltest (maintained by: go-sig, qulogic)
golang-github-wjdp-htmltest-devel-0.17.0-3.fc39.noarch requires
golang(gopkg.in/seborama/govcr.v2)
htmltest-0.17.0-3.fc39.src requires golang(gopkg.in/seborama/govcr.v2)
Depending on: golang-gopkg-sourcemap-1 (7)
golang-github-robertkrimen-otto (maintained by: eclipseo, go-sig, jchaloup)
golang-github-robertkrimen-otto-0-0.20.20210110gitef014fd.fc39.src requires
golang(gopkg.in/sourcemap.v1)
golang-github-robertkrimen-otto-devel-0-0.20.20210110gitef014fd.fc39.noarch
requires golang(gopkg.in/sourcemap.v1)
bettercap (maintained by: fab, go-sig)
bettercap-2.32.0-9.fc39.src requires golang(github.com/bettercap/recording),
golang(github.com/evilsocket/islazy/async),
golang(github.com/evilsocket/islazy/data),
golang(github.com/evilsocket/islazy/fs),
golang(github.com/evilsocket/islazy/log),
golang(github.com/evilsocket/islazy/ops),
golang(github.com/evilsocket/islazy/plugin),
golang(github.com/evilsocket/islazy/str),
golang(github.com/evilsocket/islazy/tui),
golang(github.com/evilsocket/islazy/zip), golang(github.com/robertkrimen/otto)
golang-github-bettercap-devel-2.32.0-9.fc39.noarch requires
golang(github.com/bettercap/recording),
golang(github.com/evilsocket/islazy/async),
golang(github.com/evilsocket/islazy/data),
golang(github.com/evilsocket/islazy/fs),
golang(github.com/evilsocket/islazy/log),
golang(github.com/evilsocket/islazy/ops),
golang(github.com/evilsocket/islazy/plugin),
golang(github.com/evilsocket/islazy/str),
golang(github.com/evilsocket/islazy/tui),
golang(github.com/evilsocket/islazy/zip), golang(github.com/robertkrimen/otto)
golang-github-evilsocket-islazy (maintained by: fab, go-sig)
golang-github-evilsocket-islazy-1.10.6-8.fc39.src requires
golang(github.com/robertkrimen/otto)
golang-github-evilsocket-islazy-devel-1.10.6-8.fc39.noarch requires
golang(github.com/robertkrimen/otto)
golang-github-flynn-json5 (maintained by: eclipseo, go-sig, jchaloup)
golang-github-flynn-json5-0-0.16.20180314git7620272.fc39.src requires
golang(github.com/robertkrimen/otto)
golang-github-bettercap-recording (maintained by: fab, go-sig)
golang-github-bettercap-recording-0-0.9.20200429git3ce1dcf.fc39.src requires
golang(github.com/evilsocket/islazy/fs)
golang-github-bettercap-recording-devel-0-0.9.20200429git3ce1dcf.fc39.noarch
requires golang(github.com/evilsocket/islazy/fs)
shellz (maintained by: fab, go-sig)
golang-github-evilsocket-shellz-devel-1.5.0-11.fc39.noarch requires
golang(github.com/evilsocket/islazy/async),
golang(github.com/evilsocket/islazy/fs),
golang(github.com/evilsocket/islazy/log),
golang(github.com/evilsocket/islazy/plugin),
golang(github.com/evilsocket/islazy/str), golang(github.com/evilsocket/islazy/tui)
shellz-1.5.0-11.fc39.src requires golang(github.com/evilsocket/islazy)
micro (maintained by: eclipseo, go-sig)
micro-2.0.11-6.fc39.src requires golang(github.com/flynn/json5)
Depending on: golang-rsc-qr (7)
golang-github-gokyle-twofactor (maintained by: fale, go-sig)
golang-github-gokyle-twofactor-1.1-4.fc39.src requires golang(rsc.io/qr)
golang-github-gokyle-twofactor-devel-1.1-4.fc39.noarch requires golang(rsc.io/qr)
golang-github-pquerna-otp (maintained by: go-sig, logic)
golang-github-pquerna-otp-1.4.0-3.fc39.src requires
golang(github.com/gokyle/twofactor)
gopass (maintained by: fale, go-sig, laiot)
gopass-1.15.2-2.fc38.src requires golang(github.com/gokyle/twofactor),
golang(github.com/pquerna/otp), golang(github.com/pquerna/otp/hotp),
golang(github.com/pquerna/otp/totp)
golang-github-gopasspw-gopass-devel-1.15.2-2.fc38.noarch requires
golang(github.com/pquerna/otp), golang(github.com/pquerna/otp/hotp),
golang(github.com/pquerna/otp/totp)
golang-github-acme-lego (maintained by: eclipseo, go-sig)
golang-github-acme-lego-4.4.0-8.fc37.src requires
golang(github.com/pquerna/otp/totp)
golang-github-acme-lego-devel-4.4.0-8.fc37.noarch requires
golang(github.com/pquerna/otp/totp)
golang-github-cyberdotgent-route3270 (maintained by: dcavalca, go-sig)
golang-github-cyberdotgent-route3270-0.2-7.fc39.src requires
golang(github.com/pquerna/otp/totp)
golang-github-cyberdotgent-route3270-devel-0.2-7.fc39.noarch requires
golang(github.com/pquerna/otp/totp)
gopass-jsonapi (maintained by: fale, go-sig)
golang-github-gopasspw-gopass-jsonapi-devel-1.15.2-3.fc39.noarch requires
golang(github.com/gopasspw/gopass/pkg/clipboard),
golang(github.com/gopasspw/gopass/pkg/ctxutil),
golang(github.com/gopasspw/gopass/pkg/debug),
golang(github.com/gopasspw/gopass/pkg/fsutil),
golang(github.com/gopasspw/gopass/pkg/gopass),
golang(github.com/gopasspw/gopass/pkg/gopass/api),
golang(github.com/gopasspw/gopass/pkg/gopass/secrets),
golang(github.com/gopasspw/gopass/pkg/otp),
golang(github.com/gopasspw/gopass/pkg/pwgen),
golang(github.com/gopasspw/gopass/pkg/termio), golang(github.com/pquerna/otp),
golang(github.com/pquerna/otp/totp)
gopass-jsonapi-1.15.2-3.fc39.src requires
golang(github.com/gopasspw/gopass/pkg/clipboard),
golang(github.com/gopasspw/gopass/pkg/ctxutil),
golang(github.com/gopasspw/gopass/pkg/debug),
golang(github.com/gopasspw/gopass/pkg/fsutil),
golang(github.com/gopasspw/gopass/pkg/gopass),
golang(github.com/gopasspw/gopass/pkg/gopass/api),
golang(github.com/gopasspw/gopass/pkg/gopass/apimock),
golang(github.com/gopasspw/gopass/pkg/gopass/secrets),
golang(github.com/gopasspw/gopass/pkg/gopass/secrets/secparse),
golang(github.com/gopasspw/gopass/pkg/otp),
golang(github.com/gopasspw/gopass/pkg/pwgen),
golang(github.com/gopasspw/gopass/pkg/termio),
golang(github.com/gopasspw/gopass/tests/gptest),
golang(github.com/pquerna/otp), golang(github.com/pquerna/otp/totp)
gopass-hibp (maintained by: fale, go-sig)
golang-github-gopasspw-gopass-hibp-devel-1.15.2-3.fc39.noarch requires
golang(github.com/gopasspw/gopass/pkg/ctxutil),
golang(github.com/gopasspw/gopass/pkg/debug),
golang(github.com/gopasspw/gopass/pkg/fsutil),
golang(github.com/gopasspw/gopass/pkg/gopass),
golang(github.com/gopasspw/gopass/pkg/gopass/api),
golang(github.com/gopasspw/gopass/pkg/termio)
gopass-hibp-1.15.2-3.fc39.src requires
golang(github.com/gopasspw/gopass/pkg/ctxutil),
golang(github.com/gopasspw/gopass/pkg/debug),
golang(github.com/gopasspw/gopass/pkg/fsutil),
golang(github.com/gopasspw/gopass/pkg/gopass),
golang(github.com/gopasspw/gopass/pkg/gopass/api),
golang(github.com/gopasspw/gopass/pkg/gopass/apimock),
golang(github.com/gopasspw/gopass/pkg/termio),
golang(github.com/gopasspw/gopass/tests/gptest)
Depending on: golang-sigs-k8s-kustomize (5)
golang-k8s-cli-runtime (maintained by: dcavalca, go-sig)
golang-k8s-cli-runtime-1.22.0-7.fc39.src requires
golang(sigs.k8s.io/kustomize/api/konfig),
golang(sigs.k8s.io/kustomize/api/krusty),
golang(sigs.k8s.io/kustomize/kyaml/filesys)
golang-k8s-cli-runtime-devel-1.22.0-7.fc39.noarch requires
golang(sigs.k8s.io/kustomize/api/krusty),
golang(sigs.k8s.io/kustomize/kyaml/filesys)
golang-k8s-kubectl (maintained by: dcavalca, go-sig)
golang-k8s-kubectl-1.22.0-7.fc39.src requires
golang(k8s.io/cli-runtime/pkg/genericclioptions),
golang(k8s.io/cli-runtime/pkg/printers),
golang(k8s.io/cli-runtime/pkg/resource),
golang(sigs.k8s.io/kustomize/kustomize/v4/commands/build),
golang(sigs.k8s.io/kustomize/kyaml/filesys)
golang-k8s-kubectl-devel-1.22.0-7.fc39.noarch requires
golang(k8s.io/cli-runtime/pkg/genericclioptions),
golang(k8s.io/cli-runtime/pkg/printers),
golang(k8s.io/cli-runtime/pkg/resource),
golang(sigs.k8s.io/kustomize/kustomize/v4/commands/build),
golang(sigs.k8s.io/kustomize/kyaml/filesys)
golang-helm-3 (maintained by: dcavalca, go-sig, rathann)
golang-helm-3-3.11.1-3.fc39.src requires
golang(k8s.io/cli-runtime/pkg/genericclioptions),
golang(k8s.io/cli-runtime/pkg/printers),
golang(k8s.io/cli-runtime/pkg/resource), golang(k8s.io/kubectl/pkg/cmd/get),
golang(k8s.io/kubectl/pkg/cmd/testing), golang(k8s.io/kubectl/pkg/cmd/util),
golang(k8s.io/kubectl/pkg/validation)
golang-helm-3-devel-3.11.1-3.fc39.noarch requires
golang(k8s.io/cli-runtime/pkg/genericclioptions),
golang(k8s.io/cli-runtime/pkg/printers),
golang(k8s.io/cli-runtime/pkg/resource), golang(k8s.io/kubectl/pkg/cmd/get),
golang(k8s.io/kubectl/pkg/cmd/util), golang(k8s.io/kubectl/pkg/validation)
golang-k8s-sample-cli-plugin (maintained by: eclipseo, go-sig)
golang-k8s-sample-cli-plugin-1.22.0-9.fc39.src requires
golang(k8s.io/cli-runtime/pkg/genericclioptions)
golang-k8s-sample-cli-plugin-devel-1.22.0-9.fc39.noarch requires
golang(k8s.io/cli-runtime/pkg/genericclioptions)
golang-sigs-k8s-kustomize (maintained by: dcavalca, go-sig)
golang-sigs-k8s-kustomize-4.0.3-2.fc36.src requires
golang(k8s.io/cli-runtime/pkg/genericclioptions)
golang-sigs-k8s-kustomize-devel-4.0.3-2.fc36.noarch requires
golang(k8s.io/cli-runtime/pkg/genericclioptions)
Depending on: mongo-cxx-driver (1)
hydra (maintained by: rcallicotte, rebus)
hydra-9.5-3.fc39.src requires mongodb-devel
Depending on: rubygem-rspec-collection_matchers (1)
rubygem-puppet-lint (maintained by: pvalena)
rubygem-puppet-lint-2.4.2-7.fc39.src requires rubygem(rspec-collection_matchers)
Affected (co)maintainers
agerstmayr: golang-github-facebookarchive-structtag,
golang-github-facebookarchive-inject
alexlan: emacs-common-ess
bboozzoo: golang-gopkg-retry-1
bdperkin: golang-github-haproxytech-models, golang-github-facebookgo-clock
cheeselee: golang-github-burntsushi-xgbutil
cicku: opentracker, burp
codonell: libffi3.1
dbenoit: racket
dcavalca: golang-github-powerman-check, golang-rsc-qr, golang-github-gorp-3,
golang-github-facebookgo-ensure, golang-sigs-k8s-kustomize,
golang-github-facebookgo-stack
deepinde-sig: golang-github-burntsushi-xgbutil
eclipseo: golang-go4, golang-github-quay-clair-3, golang-github-zmap-zlint,
golang-github-jackc-pgproto3, golang-github-cupcake-rdb,
golang-github-remind101-migrate, golang-github-docker-slim,
golang-sigs-k8s-kustomize, golang-github-facebookgo-clock, golang-vitess,
golang-github-burntsushi-xgbutil, golang-github-ghemawat-stream, golang-rsc-qr,
golang-gopkg-sourcemap-1, golang-gopkg-retry-1,
golang-github-jackc-pgservicefile, golang-github-nkovacs-streamquote,
golang-github-powerman-check, golang-github-vmware-vmw-guestinfo, golang-gvisor
elmarco: golang-gvisor
epel-packagers-sig: golang-github-powerman-check
f1ash: golang-github-powerman-check
fab: golang-github-chifflier-nfqueue, golang-github-d5-tengo-2,
golang-gopkg-sourcemap-1
fale: golang-rsc-qr
felixonmars: golang-github-burntsushi-xgbutil
go-sig: golang-go4, golang-github-quay-clair-3, golang-github-zmap-zlint,
golang-gopkg-seborama-govcr-2, golang-github-jackc-pgproto3,
golang-github-cupcake-rdb, golang-github-remind101-migrate,
golang-github-docker-slim, golang-github-gorp-3, golang-sigs-k8s-kustomize,
golang-github-vmware-vmw-guestinfo, golang-github-facebookgo-stack,
golang-vitess, golang-github-haproxytech-models,
golang-github-burntsushi-xgbutil, golang-github-chifflier-nfqueue,
golang-github-ghemawat-stream, golang-github-d5-tengo-2, golang-rsc-qr,
golang-gopkg-retry-1, golang-gopkg-sourcemap-1,
golang-github-facebookarchive-structtag, golang-github-nkovacs-streamquote,
golang-github-powerman-check, golang-gvisor,
golang-github-facebookarchive-inject, golang-github-facebookgo-ensure,
golang-github-jackc-pgservicefile, golang-github-facebookgo-clock
infra-sig: golang-github-remind101-migrate, golang-github-quay-clair-3
jamatos: emacs-common-ess
jchaloup: golang-go4, golang-gopkg-sourcemap-1
jerboaa: apache-commons-fileupload
jirka: sispmctl
jjelen: serp, hibernate-jpa-2.1-api, xmpcore, apache-commons-fileupload
jnovy: multican
jonathanspw: spew
kaptk2: burp
kde-sig: golang-gopkg-retry-1
kenhys: fasttext
konradm: libifp
laiot: golang-rsc-qr
lbazan: opentracker
leamas: DecodeIR
linkdupont: golang-github-jackc-pgproto3, golang-github-jackc-pgservicefile
logic: golang-github-jackc-pgproto3, golang-github-jackc-pgservicefile,
golang-rsc-qr
lucilanga: usbsoftrock, avarice
mattia: golang-github-remind101-migrate, golang-github-quay-clair-3
mgoodwin: golang-github-facebookarchive-structtag,
golang-github-facebookarchive-inject
mizdebsk: apache-commons-fileupload
mmuzila: mongo-cxx-driver
mpolacek: cvise
nathans: golang-github-facebookarchive-structtag,
golang-github-facebookarchive-inject
ngompa: golang-gopkg-retry-1
pvalena: rubygem-rspec-collection_matchers
qulogic: golang-gopkg-seborama-govcr-2, golang-rsc-qr
rathann: golang-sigs-k8s-kustomize
rcallicotte: mongo-cxx-driver
rdieter: golang-gopkg-retry-1
reanimator: sispmctl
rebus: mongo-cxx-driver
spike: apache-commons-fileupload
stevetraylen: log4c
till: mspdebug
tstellar: clang12
valtri: log4c
vascom: golang-github-powerman-check
zsun: golang-github-burntsushi-xgbutil
zyga: golang-gopkg-retry-1
Report finished at 2023-07-31 09:04:42 UTC
9 months
F39 Change Proposal: LibuserDeprecation (System Wide)
by Aoife Moloney
https://fedoraproject.org/wiki/Changes/LibuserDeprecation
This document represents a proposed Change. As part of the Changes
process, proposals are publicly announced in order to receive
community feedback. This proposal will only be implemented if approved
by the Fedora Engineering Steering Committee.
== Summary ==
Libuser is not actively developed. Most of the depending component
have build-time option to work without libuser.
== Owner ==
* Name: [[User:THalman| Tomas Halman]]
* Email: <thalman(a)redhat.com>
== Detailed Description ==
The libuser provides library and command line utilities to manipulate
user and group information. The purpose of the library
is/was to hide the differences between users in LDAP and files in etc
(passwd, groups...). The support for LDAP
is not complete and there is no plan to extend the functionality.
The LDAP integration in Fedora is nowadays done by SSSD.
In the past, the libuser was used by more component including Fedora
installer. Currently the list is short
* usermode (Requires development, it is not complicated but the
dependency is unconditional)
* util-linux (compile time option)
* passwd (I suggest to ship passwd utility from shadow-utils instead
of passwd and drop passwd package as well)
== Feedback ==
== Benefit to Fedora ==
The main benefit is to decrease the maintenance and packaging work on
library that does not bring much value while the functionality is
provided by another components.
== Scope ==
* Proposal owners: Dropping the package, move it to EPEL eventually
* Other developers:
** Update usermode code to make libuser dependency configurable.
** Update usermode packaging to compile it without libuser
** Change packaging of util-linux to compile without libuser dependency
** Change packaging of shadow-utils to provide passwd utility
* Release engineering: [https://pagure.io/releng/issue/11492]
Libuser is part of base image and must be removed. IMO mass rebuild is
not required.
* Policies and guidelines: Since this is about dropping packages
release notes must be updated.
* Trademark approval: N/A (not needed for this Change)
* Alignment with Community Initiatives: N/A
== Upgrade/compatibility impact ==
People who used libuser to manipulate users in LDAP will have to move to SSSD.
== How To Test ==
0. no special hardware needed
1. remove libuser, passwd, install new shadow-utils, usermod and util-linux
2. try to change password of some user
3. try to modify user using usermod
4. expected results: everything works normally
== User Experience ==
This change should not be visible for users.
== Dependencies ==
* usermod (code modification, packaging to drop libuser dependency)
* shadow-utils (packaging to provide passwd utility
* util-linux (packaging to drop libuser dependency)
* passwd (drop package)
== Contingency Plan ==
* Contingency mechanism: Revert the shipped configuration
* Contingency deadline: final development freeze
* Blocks release? No
== Documentation ==
There is no extra documentation for this change except release notes.
== Release Notes ==
--
Aoife Moloney
Product Owner
Community Platform Engineering Team
Red Hat EMEA
Communications House
Cork Road
Waterford
9 months, 1 week
Update on DNF05 in Fedora
by Samantha Bueno
Greetings,
I'm here in my capacity as manager of the DNF team.
Probably everyone who reads this mailing list is aware that DNF05 has been
in development for a while and that we planned to introduce it as the
default (replacing DNF) with the upcoming Fedora 39 release.
I'm sure some of you have also seen the recent FESCo ticket and discussion
concerning its readiness and whether or not to invoke the contingency plan
for shipping DNF05 in F39, since there is still a substantial amount of
functionality lacking.
We've gone ahead and decided not to replace DNF with DNF05 in Fedora 39
and, perhaps notably, Fedora 40 as well. Fedora 41 is the safest option at
the moment.
With a core system component like DNF, it's crucial that we provide a
stable, complete, and thoroughly tested experience to everyone. In its
current state, we would not be able to deliver that. With more time, we'll
be able to regain our footing and do things properly. Furthermore, this
team, which has worked tirelessly over these last several months
especially, will be able to avoid burnout. This was not an easy decision to
make, but it is the best decision for the team, for this project, and for
Fedora.
I want to close on a positive note and commend my team for the incredible
amount of hard work they have poured into this project thus far, as well as
people we've been collaborating with and who have been testing and offering
feedback. We have more test days planned and will continue to operate
transparently as we proceed through development.
Thanks,
--
Samantha N. Bueno (she/hers)
Manager, Linux Engineering
Red Hat, Inc | Boston, MA
9 months, 1 week
Fedora 39 Mass Rebuild
by Samyak Jain
Hi all,
Per the Fedora Linux f39 schedule [1] we started a mass rebuild for
Fedora Linux f39 on 2023-07-19. We did a mass rebuild for Fedora Linux f39
for:
- No default fedora-repos-modular
- GNU Toolchain Update (gcc 13.2, binutils 2.40, glibc 2.38, gdb 13.2)
- Make DNF5 The Default
- Make Toolbx a release-blocking deliverable
- LegacyXorg Driver Removal
- Python3.12
- RPM-4.19
- Perl 5.38
[https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild]
The mass rebuild was done in a side tag (f39-rebuild) and moved over to
f39.
Failures can be seen
at https://kojipkgs.fedoraproject.org/mass-rebuild/f39-failures.html
Things still needing rebuilding
https://kojipkgs.fedoraproject.org/mass-rebuild/f39-need-rebuild.html
21426 builds have been tagged into f39, there are currently 1017 failed builds
that need to be addressed by the package maintainers. FTBFS bugs will be
filed shortly. Please let releng know if you see any bugs in
the reporting. You can contact releng in #fedora-releng on libera.chat,
by dropping an email to our list [2], joining #releng:fedoraproject.org
on Matrix, or filing an issue in pagure [3].
If a build failed due to transitory buildsystem errors like
"OSError: [Errno 28] No space left on device:" or similar reason,
a new rawhide build can be run to clear the package from failed builds.
This email template is also in https://pagure.io/releng if you wish to
propose improvements or changes to it.
Regards,
Samyak Jain
Fedora Release Engineering
[1] https://fedorapeople.org/groups/schedule/f-39/f-39-key-tasks.html
[2] https://lists.fedoraproject.org/admin/lists/rel-eng.lists.fedoraproject.org/
[3] https://pagure.io/releng/
9 months, 1 week
Re: PR #47: binutils: drop gold
by Amit Shah
(I realized I hadn't subscribed to f-devel with this email ID, and this
message didn't make it to devel. Resending.)
On Thu, 2023-06-15 at 13:59 +0200, Amit Shah wrote:
> Hey Nick,
>
> I submitted
>
> https://src.fedoraproject.org/rpms/binutils/pull-request/47
>
> yesterday to not build gold by default.
>
> Creating this thread here to ensure you see this, and also a chance to
> discuss the change via email rather than on the PR.
>
> Cheers,
>
> Amit
9 months, 1 week
NTFS corruption with Fedora 37 and 38
by Michael Schwendt
Trying to figure out what has changed in Fedora land that causes NTFS
corruption for some time. This is with default workstation with GNOME
Shell auto-mounting external storage media when plugging them in.
A ticket in bugzilla suggests there has been a changed from ntfs-3g to ntfs3:
https://bugzilla.redhat.com/2182206
( udisks switched to kernel ntfs3 driver instead of ntfs-3g for mounting ntfs since the kernel 6.2 update )
The current state of development is highly dangerous.
9 months, 1 week
[heads up] upcoming libplist soname bump
by Michel Alexandre Salim
Dear all,
As part of the Fedora Asahi SIG work, libimobiledevice and libplist are
getting updated.
The libplist update introduces an soname bump from 3 to 4:
https://src.fedoraproject.org/rpms/libplist/c/68103e8e4f0783e2bfbd5d54040...
As such, the work is being done in a side tag, f39-build-side-70661
https://koji.fedoraproject.org/koji/builds?inherited=0&tagID=70661&order=...
$ rpmdistro-repoquery fedora rawhide --whatrequires 'libplist-2.0.so.3()(64bit)'
Last metadata expiration check: 0:05:50 ago on Fri Jul 28 21:28:27 2023.
gvfs-afc-0:1.51.1-3.fc39.x86_64
idevicerestore-0:1.0.0-4.fc39.x86_64
ifuse-0:1.1.4-8.fc39.x86_64
kf5-solid-0:5.108.0-1.fc39.x86_64
libgpod-0:0.8.3-46.fc39.x86_64
libimobiledevice-0:1.3.0-9.fc39.x86_64
libimobiledevice-utils-0:1.3.0-9.fc39.x86_64
libplist-devel-0:2.2.0-11.fc39.x86_64
libusbmuxd-0:2.0.2-9.fc39.x86_64
python3-libplist-0:2.2.0-11.fc39.x86_64
upower-0:1.90.2-2.fc39.x86_64
usbmuxd-0:1.1.1-10.fc39.x86_64
$ rpmdistro-repoquery fedora rawhide --whatrequires 'libplist++-2.0.so.3()(64bit)'
Last metadata expiration check: 0:06:02 ago on Fri Jul 28 21:28:27 2023.
libplist-devel-0:2.2.0-11.fc39.x86_64
If any package is not on this list, please build it against the side
tag; we are going to land this next week.
Best regards,
--
Michel Alexandre Salim
identities: https://keyoxide.org/5dce2e7e9c3b1cffd335c1d78b229d2f7ccc04f2
9 months, 1 week