Fedora Weekly News Issue 88

[Thomas Chung]

= Fedora Weekly News Issue 88 =

Welcome to Fedora Weekly News Issue 88[1] for the week of May 13th
through May 19th, 2007. The latest issue can always be found here[2]
and RSS Feed can be found here[3].

[1] http://fedoraproject.org/wiki/FWN/Issue88

[2] http://fedoraproject.org/wiki/FWN/LatestIssue

[3] http://feeds.feedburner.com/fwn

   1. Fedora Weekly News Issue 88
         1. Announcements
               1. Deep Freeze coming for Fedora 7
               2. Announcing fedora-cs-list for Czech and Slovak Fedora users
               3. Fedora Rawhide Live Images (20070517)
         2. Planet Fedora
               1. Summary from the Red Hat Summit
               2. F7 Firstboot and EULA
               3. 'Play Ogg': FSF launches free audio format campaign
         3. Marketing
               1. OLPC on CBS 60 Minutes
         4. Developments
               1. New Suspend Quirks Functionality of F7 Explained
               2. XChat Package Maintenance: First Post-Merge Co-Maintenance?
               3. PowerTOP Release Opens Up New Directions In Power Saving
               4. Massive size increase in some packages
               5. Rawhide Report 17 May 2007:Liberated Fonts, Corrupt Metadata
               6. Making Beagle Optional
               7. Legality of Fedora In Some Jurisdictions Contd.
               8. Making Koji A Complete rpmfind Replacement
         5. Maintainers
               1. Why Not Build For EPEL Too?
               2. Fedora 7 Deep Freeze
               3. Help Wanted: Package Co-maintainers
               4. Improving Fedora Package Documentation
         6. Documentation
               1. Fedora Documentation Steering Committee Meeting
               2. Welcome Wizard
               3. Hardware Solutions Knowledge Base
         7. Infrastructure
               1. Fedora Mirror System
               2. Koji
               3. Proxy Server
         8. Artwork
               1. Ambassador Program Banner
               2. Shutdown and Logout Icons
         9. Security Week
               1. Samba
        10. Security Advisories
               1. Fedora Core 6 Security Advisories
               2. Fedora Core 5 Security Advisories
        11. Events and Meetings
               1. Fedora Release Engineering Meeting 2007-05-14
               2. Fedora French Ambassadors Meeting 2007-05-13
               3. Fedora Engineering Steering Committee 2007-05-10
        12. Feedback

== Announcements ==

In this section, we cover announcements from various projects.

=== Deep Freeze coming for Fedora 7 ===

JesseKeating announces in fedora-maintainers[1],

"We're planning on entering "Deep Freeze" this Thursday.  From that
point on
we'll only be accepting build tag requests for builds that are fixing release
blockers.  See Fedora Release Criteria[2] for current release criteria."

[1] https://www.redhat.com/archives/fedora-maintainers/2007-May/msg00351.html

[2] http://fedoraproject.org/wiki/QA/ReleaseCriteria

=== Announcing fedora-cs-list for Czech and Slovak Fedora users ===

MarekMahut announces in fedora-ambassadors-list[1],

"Let me introduce you our new mailing list [2] for Czech and Slovak
Fedora users. If you are speaking one of those languages, feel free to
join."

[1] https://www.redhat.com/archives/fedora-ambassadors-list/2007-May/msg00104...

[2] http://www.redhat.com/mailman/listinfo/fedora-cs-list

=== Fedora Rawhide Live Images (20070517) ===

JeremyKatz announces in fedora-test-list[1],

"First set of post-merge rawhide live images.  These are based off of
yesterday's rawhide (packages tagged f7-final in koji).

You can get the torrent file from Fedora Project Torrent[2].
Available images are i386, x86_64, i386 KDE and also an x86_64 KDE
image.  Note that the x86_64 images require DVD media, the i386 images
will fit on 700 meg CD media.   Please file any issues against
product Fedora Core, version devel and against the relevant component or
LiveCD if you're unsure."

[1] https://www.redhat.com/archives/fedora-test-list/2007-May/msg00558.html

[2] http://torrent.fedoraproject.org.

== Planet Fedora ==

In this section, we cover a highlight of Planet Fedora - an
aggregation of blogs from world wide Fedora contributors.

http://fedoraproject.org/wiki/Planet

=== Summary from the Red Hat Summit ===

ChristopherBlizzard points out in his blog[1],

"We announced a pile of things at the Red Hat Summit[2]. Lots of
confusing articles have been written. Lots of press releases have been
sent out filled with warnings about forward looking statements. Maybe
you just want the run down on all the things that happened. This is
your simple cheat sheet. Here's the list:.."

[1] http://www.0xdeadbeef.com/weblog/?p=289

[2] http://www.redhat.com/promo/summit/2007/news/

=== F7 Firstboot and EULA ===

MaxSpevack points out in his blog[1],

"In an attempt to have some transparency and no surprises, I've sent
an email[2] to Fedora Advisory Board that details some of the changes
we've made to firstboot and the EULA in Fedora 7. My personal opinion
is that the changes are good for Fedora, and also relatively
innocuous."

[1] http://spevack.livejournal.com/16260.html

[2] https://www.redhat.com/archives/fedora-advisory-board/2007-May/msg00111.html

=== 'Play Ogg': FSF launches free audio format campaign ===

ThomasChung points out in his blog[1]

"The Free Software Foundation (FSF)[2] today launched
Play``Ogg.org[3], a campaign to encourage use of the patent- and
license-free standard Ogg Vorbis as an ethically, legally and
technically superior audio alternative to the proprietary MP3 format."

[1]
http://fedora-tchung.blogspot.com/2007/05/play-ogg-fsf-launches-free-audi...

[2] http://www.fsf.org/news/playogg.html

[3] http://playogg.org/

== Marketing ==

In this section, we cover Fedora Marketing Project.

http://fedoraproject.org/wiki/Marketing

=== OLPC on CBS 60 Minutes ===

ThomasChung reports in fedora-marketing-list[1],

"CBS 60 Minutes[2] will air OLPC[3] story on Sunday, May 20, 2007  (7PM ET/PT)"

"ONE LAPTOP PER CHILD – MIT Prof. Nicholas Negroponte's dream is to
put a laptop computer into the hands of every child as an educational
aid. Lesley Stahl reports on his progress in Cambodia and Brazil.
Catherine Olian is the producer."


[1] https://www.redhat.com/archives/fedora-marketing-list/2007-May/msg00057.html

[2] http://www.cbsnews.com/stories/1998/07/08/60minutes/main13502.shtml

[3] http://fedoraproject.org/wiki/OLPC

UPDATE: The video is now available from CBS News Video archive[1]. You
may need to install Real Player[2].

Here is the transcript for the entire show[3]. You may need to click
on 'Print' button from main page.

[1] http://www.cbsnews.com/sections/i_video/main500251.shtml?id=2830221n

[2] http://www.real.com/linux

[3] http://www.cbsnews.com/stories/2007/05/20/60minutes/printable2830058.shtml

== Developments ==

In this section, we cover the problems/solutions,
people/personalities, and ups/downs of the endless discussions on
Fedora Developments.

http://www.redhat.com/mailman/listinfo/fedora-devel-list

=== New Suspend Quirks Functionality of F7 Explained ===

A "heads up" was announced by RichardHughes with regard to the changes in
power management and HAL for Fedora 7, which would probably affect suspension
[1]. Richard summarised the implications as "Some machines that suspended in
FC6 might not work in F7; Lots of machines that did not suspend in FC6
might work in F7".

[1] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01065.html

These changes are as a result of trying to make suspend and resume Just Work
by using a modular hal-info DMI whitelist which is being updated regularly.

Explaining this on a separate page [2] Richard noted that the ability
to share specific rules for specific hardware allows one user to
figure out the "quirks" and then share the appropriate rule with other users
that have the exact same hardware.

[2] http://people.freedesktop.org/~hughsient/temp/quirk/quirk-intro.html

This page explains how to see what quirks exist for your laptop, and how to
help in creating an fdi file to share with other users.

JefSpaleta wanted to know [3] at what point this had all happened so that he
could investigate the actual effect that it had on his machines.  PeterJones
was able to answer very specifically [4] that the code had entered the tree on
March 13, but had some problems until April 25th (pm-utils-0.99.2-1,
hal-0.5.9-0.git20070304).

[3] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01071.html

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01090.html

In further testing Jef was isolated an unwanted interaction between
NetworkManager and gnome-power-manager which RichardHughes and PeterJones
agreed could be easily eliminated [5].

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01203.html

ThorstenLeemhuis suggested [6] that Richard's webpage for gathering user data
should also ask about the proprietary ATI driver "fglrx" and that it should
solicit information as to whether the user selected a plain vga console or a
framebuffer, both of which suggestions Richard willingly incorporated.

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01123.html

=== XChat Package Maintenance: First Post-Merge Co-Maintenance? ===

A discussion was initiated, by an apparently testy [1] KevinKofler,
around the apparent radio-silence of XChat-maintainer
ChristopherAillon to Kevin's bug reports, which asked for X-Chat to be
kept in sync with upstream.  Kevin was willing to become
co-maintainer, but pointed out [1a] that a lot of good work had
already been done by RemiCollet.  Kevin wondered if the
AWOL-maintainers policy [1b] would be applied post-merge.

[1] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01201.html

[1a] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01208.html

[1b] http://fedoraproject.org/wiki/Extras/Policy/AWOL_Maintainers

A few things transpired from this: first, Chrisopher noted that the upstream Xch
at developers are apparently unresponsive [3] to patches; second, that
Xchat-gnome may have responsive upstream developers [4].

[3] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01204.html

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01210.html

Additionally WarrenTogami noted [5] that there are problems with
XChat's ability to use multilinugal input methods such as SCIM or IM
[6].

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01206.html

[6] http://www.scim-im.org/

A brief exchange over the respective merits of Xchat-gnome [7] versus Xchat [8]
saw both groups of believers unshaken in their faith, although
CallumLerwick revealed himself as an apostate heretic user of Irssi.

[7] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01222.html

[8] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01207.html

The upshot of all this was that RemiCollet expressed interest [9] in
being a co-maintainer and wondered if this could be a paradigm for The
Merge.

[9] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01226.html

=== PowerTOP Release Opens Up New Directions In Power Saving ===

Reporting on his work on decreasing power wastage on laptops,
ArjanvandeVen (ex-Red Hat, now Intel) suggested that we might want to
try [1] his new tool that allows individual analysis of power
consumption.

[1]  https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00796.html

JoshBoyer was excited enough to want to package it [2], but
AdamJackson (ajax) had already done that.

[2] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00799.html

After DominikMierzejewski (Rathann) and "Dragoran" reported a lack of
functional
ity on AMD64 and x86_64 (Intel Core 2 Duo) repectively, JesseBarnes pointed out
[3] that x86_64 tickless support in the kernel is an essential
pre-requisite and this is not yet available in the rawhide kernels,
necessitating a manual patch by anyone interested.

[3]  https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00838.html

DavidTimms wanted to know [4] if it would help in finding out what was
causing disk-accesses.  Arjan replied that this was a frequent request
which he was going to attempt to accomodate in the next version,
possibly using blktrace.  BillNottingham cautioned [5] that blktrace
was not currently shipped in Fedora.

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00811.html

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00932.html

ThorstenLeemhuis followed up [6] on DavidTimms' question with some
general queries about how Fedora, and more specifically
gnome-power-manager, handles spinning down inactive hard-drives.
Thorsten remembered RichardHughes' 2005 attempts to get a patch into
HAL to allow similar functionality to that which WinXP was alleged to
have.

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00818.html

Richard answered [7] that Fedora does not currently spin down drives
by default and that one had to balance a significantly increased
spin-up power drain compared to that saved by spinning down.

[7]  https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00820.html

Thorsten wondered [7a] whether or not the new Robson/TurboMemory and
hybrid drives would change that equation.

[7a] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00822.html

JonathanUnderwood shifted the focus [8] to considering drive
longevity, worrying that attempts to save power by spinning
up-and-down would shorten drive life. Richard agreed, and AndyGreen
provided some figures [9] which suggested that laptop drives (2.5")
could be power spun 6 times per hour, whereas server (3.5") drives
could only do 1 times per hour if one estimated a 5 year lifespan.

[8] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00850.html

[9]  https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00861.html

TomLondon posted some early observations [10], in which PowerTOP
revealed that if Firefox were displaying GMail there were about 60
wakeups-per-second, but that activating the "Gmail Talk" pushed the
rate to 300 wakeups-per-second. NicolasMailhot responded that this was
AJAX at work.

[10] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00826.html

MartinSourada was puzzled [11] by what appeared to be an unnaturally
low power usage of 1.2W reported by PowerTOP, compared to an expected
16W reported by the /proc subsystem.  JonBurgess explained that what
was being reported was "present rate" in milliamperes (e.g. current)
and showed how to calculate the power in Watts from that.  TillMaas
thought [12] that some notebooks actually reported the present rate in
mW instead of mA.

[11] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00831.html

[12] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00835.html

In a discussion of the packaging PatriceDumas suggested that the spec
file be modified to preserve timestamps.  AdamJackson wondered why
[13] and ThorstenLeemhuis answered that it was necessary for multilib
[14] and would make things easier for presto.  MatthiasClasen agreed
with DavidWoodhouse that including timestamps in file identity tests
was not a good idea [15].  MichaelSchwendt and "nodata" thought that
in contrast that it was nice to know when a file was several years old
especially for documentation and scripts [16].  AdamJackson (ajax)
said [17] that it wasn't a multilib package, but "sure why not".

[13] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01011.html

[14] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01017.html

[15]  https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01018.html

[16]  https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01025.html

[17] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01024.html

=== Massive size increase in some packages ===

The eagle eyed OrionPoplawski maintains python-numarray, and in the course of
rebuilding the package from its Fedora Extras 6 version to Fedora 7
spotted [1] that the size had increased by an order of magnitude. He
also noted that a subsequent rebuild now, produced packages of a
normal size. Further investigation revealed by Orion suggested that
this was due to the shared libraries, and a comparison of FE6 to
FE-devel turned up some other candidates which had increased in size
by at least a factor of two.

[1] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01161.html

The first possible culprit was guessed to be debug symbols by
BillNottingham who asked [2] whether debug packages had been turned
off for these builds, but Orion reported that he'd just done a
straightforward rebuild.

[2] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01164.html

Orion posted an objdump [3] which showed that although the
shared-object files appeared to have been stripped, the large one was
possibly including the whole of the libpython shared-object instead of
linking it dynamically at runtime, which might explain the bloat. A
diff of the two objdumps appeared to also show different glibc
versions [4].

[3] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01168.html

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01170.html

One conclusion drawn from this [5] was that all non-arch python
packages built within the timeframe of Dec 8th 2006 to Jan 6th 2007,
(or prior to python-2.5.3-8) should be rebuilt.  Another conclusion
was drawn by AxelThimm, who revisited [6] the mass-rebuild debate
(reported in FWN84 [7],[8]) and argued
that this backed up his viewpoint that mass rebuilds were useful.

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01171.html

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01174.html

[7] http://fedoraproject.org/wiki/FWN/Issue84

[8] http://fedoraproject.org/wiki/FWN/Issue85

=== Rawhide Report 17 May 2007:Liberated Fonts, Corrupt Metadata ===

On Thursday 17th May 2007, the rawhide report [1] listed 5 new
packages: gsm, kde-settings, liberation-fonts, mcpp and
php-pear-HTML-QuickForm-ElementGrid. The Liberation-fonts package is a
result of Red Hat contracting Ascender Corp. to develop replacements
for proprietary Microsoft fonts, including but not limited to Times
New Roman, Arial and Courier New.

[1] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01111.html

[2] http://www.press.redhat.com/2007/05/09/liberation-fonts/

MilesLane was first off the block to report [3] that "yum update" was
not picking up an updated version of control-center, but that it could
be seen to be present at its URL in the repository.  The usual "yum
clean all" had been tried first.  RoddClarkson reported related
problems [4], which indicated to JeremyKatz [5] that the something was
misaligned with the tree.

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01114.html

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01133.html

NicolasMailhot suspected [6] proxies as the problem, but NigelJones
refuted this possibility with some data [7].  MattDomsch suggested
that the frequently-updated content at mirrors.fedoraproject.org was a
better argument to mirrorlist than fedora.redhat.com, but this still
didn't help Miles.

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01118.html

[7] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01121.html

The was identified by BillNottingham [8] as a partially synced tree
(primary.xml.gz was the only thing missing) and BrendanConoboy added
[9] that repomd.xml needed to be regenerated too.

[8] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01146.html

[9] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01150.html

=== Making Beagle Optional ===

In response to frequent bugs in Beagle (a desktop search tool) causing
CPU and memory stress, AlexanderLarsson made it optional [1] in the
default install.  While regretting that this was a regression in terms
of features he pointed out that Beagle was still available for those
who wanted it.  There was a mild amount of satisfaction expressed in
response to the decision.

[1] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00887.html

DavidNielsen thought [2] that Tracker was superior because Beagle
consumed 100% CPU without tweaking.  KevinKofler mentioned that Strigi
would be part of KDE4, which will ship in Fedora 8, and worried about
multiple desktop search daemons.  David pointed out the Xesam Project
[3] from Freedesktop which may
mitigate this, and noted that there was a real need for desktop
improvements using the technology which weren't simply replacements of
the search dialog.

[2] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00914.html

[3] http://www.freedesktop.org/wiki/XesamAbout

In response to Alexander's proposal JesseKeating reported [4] that the
Release Team agreed with this late regression, with the caveat that
Beagle must be in the manifest of the "Fedora" spin of F7 so that
upgraders from FC6 to F7 will not suffer.

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00942.html

A few people were disappointed.  DavidNielsen pointed out [5] that
hard testing and stabilization would ensure that Beagle would return
in F8, and AlexanderLarsson pointed to some specific bugs that those
with an interest in running Beagle on Fedora could help [6] to fix.
JefSpaleta expanded on the
rationale behind why Beagle had to be removed due to failing QA, but
could still be installed from a repository [7].

RahulSundaram and DejiAkingunola [8] re-emphasized that Beagle was
being removed from the default-install, not removed altogether, and
that it is still in the official Fedora repositories for those who
like it.

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00964.html

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01008.html

[7] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01053.html

[8] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01054.html

In response to a suggestion by MatejCepl that Beagle was not greatly
admired due to being built on Mono [9], Alexander hastened to clarify
[10] that this was not the reason and that the problems on display
were going to be faced by any indexer. In fact, Alexander thought that
Mono might have advantages by being (as all managed runtimes are)
harder to crash.  DavidNielsen was largely in agreement with this and
also pointed out that Beagle had excellent documenation [11].

[9] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00992.html

[10] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01007.html

[11] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00992.html

=== Legality of Fedora In Some Jurisdictions Contd. ===

Last week's discussion [1] of the need to be able to show a
"Certificate of Authenticity" to the IP police in some countries,
continued [2] with RalfCorsepius arguing forcefully that it was
necessary to have a specific limitation on what language was
acceptable for software packaged by Fedora.

[1] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00697.html

[2] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00810.html

JoshBoyer thought that Ralf should make a proposal about this to the
Packaging Committee as he is a member, but Ralf thought [3] that
responsibility was split between FESCo and GregDeKoenigsberg.  Josh
pointed out that no rule existed to say that Ralf shouldn't do this,
and that he appeared to have a good
understanding of the issue [4], and that something along these lines
would need to augment the packaging guidelines in the future anyway.

[3] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00908.html

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00924.html

Rahul also agreed with Ralf that bugs should be filed against packages
with non-English licenses [5], but disagreed that non-English licenses
were unreadable. Rahul sought further non-English examples from Ralf.
One that had been previously discussed was "mecab", maintained by
MamoruTasaka.  Mamoru
mentioned [6] that he had sent a translation of a Japanese license for
another package to TomCallaway who had then queried the FSF and was
awaiting a reply from them.  Mamoru had unsuccesfully requested the
developer to use the GPL and had previously followed the same process
[7] of going through TomCallaway and the FSF.

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00906.html

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00910.html

[7] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00913.html

AndrewHaley thought that license translation wasn't the FSF's job, but
Rahul pointed out that they had done so whenever asked in the past
[8].

[8] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00912.html

NicolasMailhot took exception [9] to the idea that English was more
blessed than other languages and an exchange between Rahul and Nicolas
followed which revolved around the US (hence English speaking) nature
of Fedora (via Red Hat), the need to define what is an official
translation, and the cost burden
of producing these translations.

[9] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00915.html

SimoSorce thought [10] that placing the onus on non-English speaking
developers to
provide English translations of their licenses to Fedora was
burdensome.  He also argued [11] that mere translation to English was
not enough, but rephrasing to take account of the local legal context
was essential. At this point the conversation appeared to return to a
familiar place, where Rahul
argued that non-US contributors would need to accept a US legal
framework [12], or else the Fedora Project would have to regretfully
decline their code.

[10] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00926.html

[11] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00943.html

[12] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg00947.html

=== Making Koji A Complete rpmfind Replacement ===

During the blip with syncing rawhide, NicolasMailhot explored one of
Koji's less appreciated abilities.  Koji [1] is a package build system
developed for the Fedora Project , but Nicolas pointed out that with a
little work [2]  it could also fill the functional role that rpmfind
fills on the web, making it easier for users to find specific RPMs.

[1] http://fedoraproject.org/wiki/Koji

[2] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01057.html

Agreeing with Nicolas that adding resolution of dependency links and
display of rpm metadata, NigelJones added [3] that it would be nice to
also see build-requires, so that packagers could contact other
affected maintainers. In response MikeBonnet pointed to where this
information appeared to be already
provided by Koji [4] and asked for some more information. Nicolas
advised looking at rpmfind.net to see what he meant.

[3] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01058.html

[4] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01064.html

An offer of help [5] was received from OliverFalk, who had explored
similar ideas, and JoshBoyer noted that "patches [were] welcome"!

[5] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01059.html

[6] https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01060.html

== Maintainers ==

In this section, we cover Fedora Maintainers, the group of people who
maintain the software packages in Fedora

https://www.redhat.com/mailman/listinfo/fedora-maintainers

=== Why Not Build For EPEL Too? ===

ThorstenLeemhuis sent out a start signal[1] this week to let Fedora
contributors know they can also help out with EPEL, or Extra Packages
for Enterprise Linux. The invitation was made by Thorsten for Fedora
packagers to build their packages for EPEL, which will allow RHEL and
CentOS users (and other RHEL-based distributions) access to the vast
array of packages found in the Fedora repository.

[1] https://www.redhat.com/archives/fedora-maintainers/2007-May/msg00323.html

=== Fedora 7 Deep Freeze ===

This past Thursday, May 17, marked Fedora 7 entering a deep freeze[1].
With this period now in effect, only build tag requests for builds
that fix release blockers will be permitted until the May 31st launch
of Fedora 7.

[1] https://www.redhat.com/archives/fedora-maintainers/2007-May/msg00351.html

=== Help Wanted: Package Co-maintainers ===

JochenSchmitt has put out a request for co-maintainers on a variety of
different packages from blender to luma. If you have some time to help
out another Fedora contributor, check out his message[1] for a list of
packages needing another maintainer.

[1] https://www.redhat.com/archives/fedora-maintainers/2007-May/msg00380.html

=== Improving Fedora Package Documentation ===

JonathanUnderwood has also put out a request, but this time it's for
improving the Fedora packaging documentation[1]. The packaging
documentation is in need of rewriting and then making it known and
easy to find, and Underwood is initiating a movement to fix this area
in despair.

[1] https://www.redhat.com/archives/fedora-maintainers/2007-May/msg00598.html

== Documentation ==

In this section, we cover the Fedora Documentation Project.

http://fedoraproject.org/wiki/DocsProject

=== Fedora Documentation Steering Committee Meeting ===

The FDSCo meeting was rescheduled last week and took place on Tuesday
15th May[1]. The meetings log was posted to the docs-list[2].

[1] https://www.redhat.com/archives/fedora-docs-list/2007-May/msg00061.html

[2] https://www.redhat.com/archives/fedora-docs-list/2007-May/msg00068.html

=== Welcome Wizard ===

The idea of creating a Welcome Wizard was submitted to the
docs-list[1]. Following discussions it was decided that if such an
addition were to be made to Fedora it would be best suited as its own
piece of software, separate from the First Run Wizard[2].

[1] https://www.redhat.com/archives/fedora-docs-list/2007-May/msg00066.html

[2] https://www.redhat.com/archives/fedora-docs-list/2007-May/msg00081.html

=== Hardware Solutions Knowledge Base ===

A long desired addition to the Fedora Project is a community
contributed database of hardware compatibility and solutions. It is
thought that a knowledge base solution would be most appropriate but
the best method for implementation remains undiscovered[1]. Some
people believe that integration with Smolt will be possible to an
extent, helping to automate the creation of much of the content[2].
Anybody interested in seeing this become a reality should post a
message to the docs-list.

[1] https://www.redhat.com/archives/fedora-docs-list/2007-May/msg00072.html

[2] https://www.redhat.com/archives/fedora-docs-list/2007-May/msg00080.html

== Infrastructure ==

In this section, we cover the Fedora Infrastructure Project.

http://fedoraproject.org/wiki/Infrastructure

=== Fedora Mirror System ===

Thanks to MattDomsch for following news contribution[1].

[1] https://www.redhat.com/archives/fedora-news-list/2007-May/msg00012.html

Fedora is fortunate to have nearly 200 volunteer mirror sites globally
which helps distribute CD and DVD images, OS installs and updated
packages to nearly 3 million systems [1].  Managing the list of mirror
sites and their content had been a tedious manual process.  In late
October 2006, the Fedora Infrastructure team recognized the need to
automate managing the mirror list.  In January 2007, MattDomsch
started working on code in earnest with the goal of being in
production by the Fedora 7 release.  With help from the entire
Infrastructure team, especially ToshioKuratomi, MikeMcGrath,
SethVidal, and LukeMacken, that system is now in place.

Mirrormanager[2] is licensed under the MIT/X11 license and is written
using the Turbo``Gears web application framework.  It includes:

 * a database of mirror sites, individual mirror hosts, content
carried such as Core, Extras, EPEL, and soon the Fedora Releases.
Mirrors may choose to carry whichever subsets of the whole tree they
wish.
 * an administration web app for mirror admins to manage detail about
their own site.
 * a web crawler that crawls each mirror site several times a day
updating the database with what they carry
 * the yum mirrorlist handler which tells yum the list of mirrors to try.

With this system in place, users should begin to see faster yum
downloads, from a mirror in your country if possible.  You can see the
whole list of mirrors by country and content[3].

We're always looking for additional mirrors.  If you would like to
provide a public Fedora mirror, please see [4].

Troubles with new system should be reported to
fedora-infrastructure-list redhat com or #fedora-admin on Free``Node.

[1] http://fedoraproject.org/wiki/Statistics

[2] https://hosted.fedoraproject.org/projects/mirrormanager

[3] http://mirrors.fedoraproject.org/publiclist

[4] http://fedoraproject.org/wiki/Infrastructure/Mirroring

=== Koji ===

Koji[1] (buildsystem software) was upgraded this week to a new version
and moved to heavier duty hardware. The upgrade went well, though the
outage lasted longer than initially anticipated. MikeMcGrath has more
here[2].

[1] http://fedoraproject.org/wiki/Koji

[2] https://www.redhat.com/archives/fedora-infrastructure-list/2007-May/msg00...

=== Proxy Server ===

The proxy servers[1] were upgraded[2] this week to RHEL 5. All went
well and no outages were reported.

[1] http://fedoraproject.org/wiki/Infrastructure/Architecture

[2] https://www.redhat.com/archives/fedora-infrastructure-list/2007-May/msg00...

== Artwork ==

In this section, we cover Fedora Artwork Project.

http://fedoraproject.org/wiki/Artwork

=== Ambassador Program Banner ===

After a posting to the art-list requesting a new banner for the
Ambassador Program's websites[1], one was quickly forwarded[2] and is
now part of the Ambassador's websites.

[1] https://www.redhat.com/archives/fedora-art-list/2007-May/msg00010.html

[2] https://www.redhat.com/archives/fedora-art-list/2007-May/msg00011.html

The Ambassadors are still looking for some print banners[1], however,
for LinuxTag Germany, and work is underway[2] but new contributions
are always welcome.

[1] https://www.redhat.com/archives/fedora-art-list/2007-May/msg00013.html

[2] https://www.redhat.com/archives/fedora-art-list/2007-May/msg00014.html

=== Shutdown and Logout Icons ===

A discussion was prompted about the usability of Fedora's current
approach to logging out and shutting down, the functions respective
icons and menu locations[1].

[1] https://www.redhat.com/archives/fedora-art-list/2007-May/msg00024.html

== Security Week ==

In this section, we highlight the security stories from the week in Fedora.

=== Samba ===

Last week a round of Samba flaws were fixed[1]:

This update fixed three security flaws, all of which could allow a
remote attacker to execute arbitrary code with the same permissions of
the Samba server. Some of these flaws are especially dangerous as they
allow an anonymous attacker on the network to compromise the Samba
server. The anonymous part is what makes the flaws the most scary. If
an attacker has to be authenticated against the Samba server, you have
a known number of attackers. If anyone attached to the network is able
to attack Samba, there can be a near infinite number of attackers
depending on the network setup.

The lesson one should take away from this, is that proper network
setup is important. Sane firewall rules can go a long way. If you only
need one machine to talk to the Samba server, you should only allow
that machine access, not the whole network. Spending some time
thinking about your network needs can make a big difference when a
security flaw is found.

[1] http://news.samba.org/releases/samba_3_0_25_release/

== Security Advisories ==

In this section, we cover Security Advisories from fedora-package-announce.

https://www.redhat.com/mailman/listinfo/fedora-package-announce

=== Fedora Core 6 Security Advisories ===

 * 2007-05-15 nfs-utils-1.0.10-10.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-510
 * 2007-05-14 [SECURITY] freeradius-1.1.3-2.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-499
 * 2007-05-14 [SECURITY] php-5.1.6-3.6.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-503
 * 2007-05-14 [SECURITY] samba-3.0.24-5.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-507
 * 2007-05-14 [SECURITY] squirrelmail-1.4.10a-1.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-505
 * 2007-05-14 firefox-1.5.0.10-6.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-500
 * 2007-05-14 foomatic-3.0.2-39.5.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-446
 * 2007-05-14 logrotate-3.7.4-13.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-504
 * 2007-05-14 openldap-2.3.30-2.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-467
 * 2007-05-14 procps-3.2.7-10.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-495
 * 2007-05-14 ypbind-1.19-7.fc6 -
http://fedoraproject.org/wiki/FSA/FC6/FEDORA-2007-502

=== Fedora Core 5 Security Advisories ===

 * 2007-05-14 [SECURITY] samba-3.0.24-5.fc5 -
http://fedoraproject.org/wiki/FSA/FC5/FEDORA-2007-506
 * 2007-05-14 openldap-2.3.30-2.fc5 -
http://fedoraproject.org/wiki/FSA/FC5/FEDORA-2007-468
 * 2007-05-14 procps-3.2.7-2.fc5 -
http://fedoraproject.org/wiki/FSA/FC5/FEDORA-2007-494
 * 2007-05-14 SDL-1.2.9-6 -
http://fedoraproject.org/wiki/FSA/FC5/FEDORA-2007-498

== Events and Meetings ==

In this section, we cover event reports and meeting summaries from
various projects.

=== Fedora Release Engineering Meeting 2007-05-14 ===

 * https://www.redhat.com/archives/fedora-devel-list/2007-May/msg01192.html

=== Fedora French Ambassadors Meeting 2007-05-13 ===

 * https://www.redhat.com/archives/fedora-ambassadors-list/2007-May/msg00094...

=== Fedora Engineering Steering Committee 2007-05-10 ===

 * https://www.redhat.com/archives/fedora-maintainers/2007-May/msg00474.html

== Feedback ==

This document is maintained by the Fedora News Team[1]. Please feel
free to contact us to give your feedback. If you'd like to contribute
to a future issue of the Fedora Weekly News, please see the Join[2]
page to find out how to help.

[1] http://fedoraproject.org/wiki/NewsProject

[2] http://fedoraproject.org/wiki/NewsProject/Join

-- 
Thomas Chung
http://fedoraproject.org/wiki/ThomasChung