devel May 2004

devel@lists.fedoraproject.org

228 participants
211 discussions

How do I configure the kernel for the nvidia drivers
by Robert Trembath 23 May '04

23 May '04

How do I reconfigure my kernel in FC2 final so I can use the nvidia drivers. I know it has to do with 4KStacks but how do I go about changing it to work. Thanks in advance, Robert

2 1

Self-Introduction: Noa Resare
by Noa Resare 22 May '04

22 May '04

Full legal name: Noa Daniel Johannes Resare Country, City: Sweden, Linköping Profession or Student status: Currently unemployed :/ My goals in the Fedora project: * I intend to package software that I use that is missing from * fedora.us or fc core. * Yes, QA is ok with me. Historical qualifications: My contributions to linux/redhat/fedora has been up and down depending on my work and family situation. Thins I've done. * Some translation work to Swedish, notably grep and parts of gpg. * I did corefonts.sf.net * Set up http://bugzilla.fedora.us/ pub 1024D/A1906F09 2004-02-14 Noa Resare <noa(a)resare.com> Key fingerprint = F3C4 AC90 B885 FE15 344B 4D05 220B 7662 A190 6F09 cheers/noa Ps. A while ago i changed first name from Daniel to Noa (actually I added Noa). When doing so I created a new gpg key. The old one, with id 0x9B8DEC2A is signed by Warrren Togami, and that one signs my new one so I suppose I'm already in the web of trust.

1 0

RFC: Fedora.us "unstable" section
by Aurelien Bompard 22 May '04

22 May '04

Hello, I have a proposal for the redefinition of fedora.us' "unstable" section. Right now, it contains "add-ons with severe known defects or that may interfere with other software" (from FedoraChannels). It currently contains a dozen of packages. I think it could be used for software which have been checked for packaging errors, which build, but which haven't been deeply tested to work properly (at run-time). This would solve the problem we currently have in the QA queue with the pile of programming languages. They could be spec-checked, built, tested with "language --version" just to make sure they don't segfault, and put in unstable. This would adress the problem we have with packages in QA which are used by too few people or are too complex to be correctly tested at run-time. But we don't want to turn the unstable section into a second "pending" repository: there must be a way for packages to move into "testing" after being tested. For this task, we could require the usual 2 GPG-signed votes by people who use the packages. Since this type of vote doesn't imply checking the package for errors, there are more chances that people do it. It's just a "Yes, it runs properly". We could even drop the GPG requirement if we have to. There must be some place to put the vote. The voter could open a bug against the new component, but I don't think that would happen. We could also add another step between "Verified" and "Closed" but I don't know if it is possible in bugzilla. This other step would only be used for packages in the "unstable" section. Third option: we could use a specific keyword in bugzilla, and leave the package in "Verified" state (or another one, like "Reopened" for example). This would define a new queue (again). I think that the main objective is to make it as easy as possible to vote for a package in the "unstable" section, because by definition these packages are used by few people. There are probably other options, but that's all I can see right now. What do you think of that ? Aurélien -- http://gauret.free.fr ~~~~ Jabber : gauret(a)amessage.info In God we Trust. All others must submit an X.509 certificate.

1 0

rawhide report: 20040522 changes
by Build System 22 May '04

22 May '04

Updated Packages: checkpolicy-1.10-2 ------------------ * Thu Apr 08 2004 Dan Walsh <dwalsh(a)redhat.com> 1.10-2 - Add BuildRequires byacc gdm-2.6.0.0-5 ------------- * Fri May 21 2004 Matthias Clasen <mclasen(a)redhat.com> 1:2.6.0.0-5 - rebuild gimp-2.0.1-4 ------------ * Fri May 21 2004 Matthias Clasen <mclasen(a)redhat.com> - rebuild glibc-2.3.3-30 -------------- * Fri May 21 2004 Jakub Jelinek <jakub(a)redhat.com> 2.3.3-30 - fix pthread_cond_wait on architectures other than IA-32 and x86_64 gnome-games-2.6.0.1-3 --------------------- * Fri May 21 2004 Matthias Clasen <mclasen(a)redhat.com> 2.6.0.1-3 - rebuild gtk2-2.4.1-1 ------------ * Thu May 20 2004 Matthias Clasen <mclasen(a)redhat.com> - 2.4.1-1 - Upgrade to 2.4.1 * Wed Mar 17 2004 Alex Larsson <alexl(a)redhat.com> 2.4.0-1 - update to 2.4.0 - update bin_version to 2.4.0 * Wed Mar 10 2004 Mark McLoughlin <markmc(a)redhat.com> 2.3.6-1 - Update to 2.3.6 - Remove 2.3.5 buildfix patch - Remove gdk-pixbuf-xlib dependancy fix kernel-2.6.6-1.376 ------------------ lha-1.14i-15 ------------ * Fri May 21 2004 Than Ngo <than(a)redhat.com> 1.14i-15 - fix segmentation fault on ia64 librsvg2-2.6.4-3 ---------------- * Fri May 21 2004 Matthias Clasen <mclasen(a)redhat.com> 2.6.4-3 - rebuild nautilus-2.6.0-5 ---------------- * Fri May 21 2004 Matthias Clasen <mclasen(a)redhat.com> 2.6.0-5 - rebuild * Wed Apr 14 2004 Alexander Larsson <alexl(a)redhat.com> 2.6.0-4 - update cvs backport, now handles kde trash dir better * Wed Apr 14 2004 Alexander Larsson <alexl(a)redhat.com> 2.6.0-3 - add cvs backport openldap-2.1.29-3 ----------------- * Thu May 13 2004 Thomas Woerner <twoerner(a)redhat.com> 2.1.29-3 - removed rpath - added pie patch: slapd and slurpd are now pie - requires libtool >= 1.5.6-2 (PIC libltdl.a) policycoreutils-1.13-1 ---------------------- * Fri May 21 2004 Dan Walsh <dwalsh(a)redhat.com> 1.13-1 - Update to latest from NSA - Change fixfiles to prompt before deleteing /tmp files rpmdb-fedora-2-0.20040522 ------------------------- sharutils-4.2.1-19 ------------------ * Fri May 21 2004 Than Ngo <than(a)redhat.com> 4.2.1-19 - add suse patch, which fixes buffer overflow in handling of -o option, #123230 slocate-2.7-10 -------------- * Fri May 21 2004 Bill Nottingham <notting(a)redhat.com> 2.7-10 - exclude cifs (#122499) system-config-securitylevel-1.3.13-1 ------------------------------------ * Fri May 21 2004 Bill Nottingham <notting(a)redhat.com> 1.3.13-1 - fix typo (#122907)

1 0

FC2 cyrus-imapd...
by MG 22 May '04

22 May '04

Hi! FC2 contains the cyrus-imapd. It cannot use the old mailbox format. How can I migrate it? If the users like to download their mails with pop3 then they get message: "Unable to locate maildrop." Now I must use the old imap package (wu-imap) from FC1. Bye! Gabor

3 2

FC2 - init level 5...
by MG 22 May '04

22 May '04

Hi! I updated a machine with FC1. It seems okay, but the init level 5 (X11) doesn't work properly. When the X11 begins to start then it show up a message in console: "...It seems the X11 runnig in :0 ..." What is the problem? If I set the init level to "3" in the /etc/inittab then the system starts properly and I can start the X11 with "startx"! Bye! Gabor

1 0

Upgrading FC1 to FC2: Severe problem with modules
by Gérard Milmeister 22 May '04

22 May '04

I yesterday upgraded from FC1 to FC2. However the boot failed as it couldn't find the initrd. After I booted from the rescue disk, I noticed that initrd-2.6.5-1.358.img wasn't present. I tried to inkoke new-kernel-pkg myself, but it failed, because it couldn't find the initio scsi driver. It seems that initio is not supported anymore in 2.6, which isn't so dramatic as I had it only for my Zip drive. I had to manually delete all references from modprobe.conf and hwconf so that new-kernel-pkg would work. I think this is a severe problem that should not have happened. BTW, why are the harddisks shut down on reboot? -- Gérard Milmeister Tannenrauchstrasse 35 8038 Zürich gemi(a)bluewin.ch

4 9

RE: FC2 Final can't get to loading kernel.. New bug?
by Kenneth Benson 21 May '04

21 May '04

As a note to the P4P800 owners on this list, there is a 1017 beta bios at the ASUS web site. I intend to update to it (saving my 1016, of course) and try to do an install during the next week. I will add a comment to the bugzilla concerning this and update that and the list on the results. Ken Benson > -----Original Message----- > From: Chris Chabot [mailto:chabotc@4-ice.com] > Sent: Wednesday, May 19, 2004 4:21 PM > To: David Kewley; Development discussions related to Fedora Core > Subject: Re: FC2 Final can't get to loading kernel.. New bug? > > > Wow thanks! > > Yes indeed, a Asus P4P800 SE motherboard.. never would've > thought to check > bugzilla for my motherboard type.. thanks again for pointing > out the bug! > (Added my specs and comments to it) > > -- Chris > > ----- Original Message ----- > From: "David Kewley" <kewley(a)cns.caltech.edu> > To: "Development discussions related to Fedora Core" > <fedora-devel-list(a)redhat.com>; "Chris Chabot" <chabotc(a)4-ice.com> > Sent: Wednesday, May 19, 2004 19:29 > Subject: Re: FC2 Final can't get to loading kernel.. New bug? > > > > Chris Chabot wrote on Wednesday 19 May 2004 04:36: > > > I've used FC2 test 1 and 2 without any problems > previously. However when > i > > > now try to boot the FC2 (release), it won't even load the > kernel, but > > > instantly reboots my system > > > > > > It get's to the Loading vmlinuz... then loading initrd.. > Then, boom, > > > reboots.. (thats just before the "Uncompressing Kernel.." message) > > > > > > ps i did download the first cd again (from a diff mirror > even), burned 2 > > > more copies, checked MD5's.. but nothing's wrong with the > media. As > > > mentioned, test 1 and 2 worked fine on this machine, and > the hardware > > > didn't change in the meantime > > > > > > My system details: > > > P4 3.0 Ghz (HT) Cpu > > > Intel 865PE + ICH5R chipset > > > Maxtor 6Y080P0 80Gb (set to ATA 100) HD > > > 3Com 3c9x Network card > > > ATI 9800XT (8x agp) graphics card > > > SB Audigy (with intergrated IEEE 1394 controller) > > > Plextor DVDR PX-708A dvd/cd drive > > > > Is this by any chance an Asus P4P800 motherboard? If so, see: > > > > https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=121819 > > > > David > > > > > -- > fedora-devel-list mailing list > fedora-devel-list(a)redhat.com > http://www.redhat.com/mailman/listinfo/fedora-devel-list >

1 0

patch to initscripts: configure rc.modules for PC speaker (and others)
by Matthew Miller 21 May '04

21 May '04

As probably everyone knows by now, the PC speaker beep module isn't something that you just _have_. You need to manually insert the pcspkr module. Which is annoying, if you want to have it. And, this is a general problem -- there's several other things (some laptop special-feature modules, webcam support, etc) which don't get loaded automatically even though it'd be nice for them to. As someone pointed out on one of the fedora lists (this one, maybe), rc.sysinit calls /etc/rc.modules if it exists, which it doesn't, by default. My first cut of this added that file, but then I decided it'd probably be better to leave that alone and just insert the code into rc.sysinit, both for backwards-compatibility (who knows what various installations have done) and because in general the current rc.sysinit isn't broken out like that elsewhere. <https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123927> Comments? -- Matthew Miller mattdm(a)mattdm.org <http://www.mattdm.org/> Boston University Linux ------> <http://linux.bu.edu/>

1 0

Re: VPN solution(s) for Fedora Core
by James Yonan 21 May '04

21 May '04

James Morris alerted me to the presence of this thread. I'm the developer of OpenVPN and I'd be happy to answer any of your questions about it. One point I'd like to add to the thread is that there are really two classes of VPNs in active development today, SSL/TLS VPNs and IPSec, and that it probably makes sense for a distro to include at least one implementation from each class. SSL/TLS VPNs implement the bulk of the VPN function in user-space, use SSL/TLS as the security layer, use an application-level protocol over TCP or UDP as the transport layer, and use virtual networking interfaces such as TUN/TAP interfaces as their hook into the network stack. Some commercial SSL/TLS VPNs also provide the ability to use a web browser as the client, though this tends to be more of a marketing twist to sell secure web apps. IPSec VPNs take a different approach and attempt to tightly couple the security function with the transport protocols being secured. For this reason, IPSec implementations have a much larger kernel footprint and tend to have a separate implementation for each OS. Each class really has its own strengths and weaknesses. SSL/TLS VPNs tend to be more flexible as far as configuration options are concerned. For example OpenVPN supports IPv4 or IPv6 routed VPNs or Ethernet 802.3 bridged VPNs, can use UDP or TCP as the transport layer protocol, and runs on most OSes in current use including Linux, Windows (2000 and above), *BSD, Solaris, and OS X. OpenVPN is also very flexible in terms of transport protocols, allowing TCP, UDP, SOCKS, or TCP proxying using the HTTP connect method. This latter flexibility allows OpenVPN to work well with both NAT and restrictive firewall policies. IPSec wins in the multi-vendor support category, and in the availability of dedicated hardware. One would also expect IPSec to have a potential advantage in the speed department, given that a kernel VPN implemenation doesn't need as many context switches between kernel and user space for each VPN packet. In practice, however, I have not seen this to be a critical foci for VPN users simply because network bandwidth and the CPU cost of crypto operations tend to be the limiting factor in VPN performance. On the security side, OpenVPN uses SSL/TLS as the authentication and key exchange protocol, and then uses the ESP protocol derived from IPSec to secure the IP stream itself (because IP is an "unreliable" protocol, ESP makes more sense than SSL/TLS to tunnel the actual IP stream over UDP). While my personal expertise is more in crypto implementation than in crypto theory, I understand that crypto implementations don't usually succeed unless implementors and crytography experts can work together at a certain level. And I think that by and large this has occurred with OpenVPN, especially in the way that crypto experts such as Peter Gutmann have had a hand in guiding the development of the crypto layer. One point I would make as well when comparing OpenVPN's security to an in-kernel implemenation such as IPSec, is that as a user-space daemon, OpenVPN can be run as user/group nobody or in a chroot jail, providing a certain degree of containment of code injection exploits, should they be discovered. For a higher level overview of OpenVPN, you might want to take a look at the slides for the talk I gave at Linux Fest Northwest this year: http://openvpn.sourceforge.net/papers/BLUG-talk/ James

1 0

← Newer
1
...
6
7
8
9
10
11
12
...
22
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

devel May 2004