Pro Police stack detector and GCC 4.1
by Bojan Smojver
It appears that IBM's Pro Police stack detector was merged into GCC 4.1.
Once this version hits the shelves, are there any plans to compile FCx
binaries of the day with this protection enabled or will exec-shield
will be the only stack smashing protection for the foreseeable future.
Don't want to start a security flame war here, just being curious.
--
Bojan
18 years, 7 months
FC4 state of affairs and FC5
by Gilboa Davara
Hello all,
I've been lurking this list for quite some time now, waiting for a good
reason to post...
Seems that I found one.
Let me first point out that this is not a rant; I understand that the
Fedora Core is supplied "as is" and that the FC development team isn't
working *for me*. In short, they don't owe me anything.
Plus, being a Linux developer myself, I can appreciate the *perceived*
(in my eyes) lack of interest in dealing with (what-seems-to-be-in-my-
eyes) bugs, when the FC5 development is at full swing.
I'm not trying to start a flame war; I am trying to understand the
direction in which the Fedora Core foundation is heading, and make my
own decisions as a result. (Roll back machines to FC3, keep others at
FC2/3, switch to another distro, etc)
Three months ago FC4 was released; as expected, being bleeding edge FC4
was buggy as hell (compared to FC2/FC3). However, living on the bleeding
edge comes at a price, and I'm willing to pay it.
Like any good user, I did my best to report what-ever bugs I saw:
Some of them were fix promptly:
Missing KDE screensavers:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161312
LVM2 boot problems:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=164250
But others were not:
gpilotd segfaults:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=156646
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=160926
Python gtksourceview:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=162403
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161223
GDB segfaults when debugging libraries:
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=161401
Thus far, nothing new. FC4 has known bugs that are being (slowly?)
addressed.
However, here comes my problem:
FC5 is 6 months (at least) away.
The lvm2 problem was only fixed in -updates; it still plagues new
installations. (I saw a couple of threads about it in fedoraforum.) The
fix did not go downstream to a new ISO images.
FC4 users cannot use their Palm and a full fix is no where to be seen.
GDB is effectively dead when debugging libraries.
And python python-gtksourceview, while fixed in rawhide, will not making
it (at least to my knowledge) into FC4.
My question is simple:
Is it the view of the FC foundation, that the FC4 bug-fixing is taking
second seat to the FC5 development?
Is it acceptable, again, in the FC foundation's eyes, that up until the
release of the FC5, people will not be able to sync with their Palm or
have dead installations on their hands (lvm problem)
I may be wrong here, isn't the lvm problem big enough to require ISO
remaster?
Isn't the Palm problem serious enough to warrant a switch to an older
pilotd (and gnome-pilot)?
Am I the only to feel that these problems are critical?
Again let me stress, that being free-riding user (Sadly enough, I've yet
to pitch in and find some why to contribute to FC) I'm in no position to
rant about the stability of FC4.
However, being someone with vested interest in the FC project, I'm very
interested in the view of the FC project about the above.
Thanks,
Gilboa Davara.
18 years, 7 months
howto generate i386 and noarch rpms from single .spec ?
by John Ellson
I know how to generate multiple rpms from a single .spec, but I don't
know how to generate
a mix of .i386 and .noarch rpms. Is this possible?
If so, could someone point me at an example, or provide a quick howto?
TIA
John Ellson
18 years, 7 months
rawhide report: 20050920 changes
by Build System
New package libiec61883
Streaming library for IEEE1394
Updated Packages:
anaconda-10.3.0.23-1
--------------------
* Mon Sep 19 2005 Jeremy Katz <katzj(a)redhat.com> - 10.3.0.23-1
- fix a silly typo that would cause tracebacks
- Look for help in /tmp/updates too (#168155)
- Add skge driver (#168590)
- Some fixes to hopefully get x86_64 trees working
bogl-0:0.1.18-10
----------------
* Tue Sep 20 2005 Miloslav Trmac <mitr(a)redhat.com> - 0:0.1.18-10
- Simplify overzealous bogl-0.1.18-1.1.sigchld.patch
* Tue Sep 20 2005 Miloslav Trmac <mitr(a)redhat.com> - 0:0.1.18-9
- Update to bogl-0.1.18-1.1
- Don't ship unused ucs fonts in the SRPM
- Remove obsolete URL: (#168673)
doxygen-1:1.4.4-2
-----------------
* Mon Sep 19 2005 Than Ngo <than(a)redhat.com> 1:1.4.4-2
- move doxywizard man page to subpackge doxywizard
file-4.15-3
-----------
* Mon Sep 19 2005 Radek Vokal <rvokal(a)redhat.com> - 4.15-3
- small fix in previously added patch, now it works for multiple params
* Mon Sep 19 2005 Radek Vokal <rvokal(a)redhat.com> - 4.15-2
- print xxx-style only once (#168617)
* Tue Aug 09 2005 Radek Vokal <rvokal(a)redhat.com> - 4.15-1
- upgrade to upstream
gcc-4.0.1-14
------------
* Mon Sep 19 2005 Jakub Jelinek <jakub(a)redhat.com> 4.0.1-14
- update from CVS
- PRs c++/16171, c++/21135, c++/21514, c++/23139, c++/23624, c++/23691,
c++/23789, c++/23839, c++/23841, c++/23842, c++/23896, c++/23914,
c++/9782, debug/20998, debug/23190, debug/23806, fortran/16511,
fortran/17917, fortran/18870, fortran/18878, fortran/19358,
fortran/20848, fortran/22304, fortran/22502, fortran/23270,
fortran/23765, libfortran/19872, libfortran/23262, libfortran/23419,
libfortran/23784, libgcj/22211, libgcj/23549, libgcj/23662,
libgcj/23739, libstdc++/23358, libstdc++/23417, target/23747,
target/23774, tree-optimization/22348
- fix libstdc++ ostream oct and hex formatting logic
(Paolo Carlini, Janis Johnson, #168205, PR libstdc++/23871)
- fix fortran ENTRY handling when ENTRY symbol is passed
to a function (PR fortran/23663)
- make sure dominance info is computed in stdarg pass
(PR tree-optimization/23818)
- workaround for stack smashing in Java's fdlibm
(Tom Tromey, #166657, PR classpath/23863)
hplip-0.9.5-2
-------------
* Mon Sep 19 2005 Tim Waugh <twaugh(a)redhat.com> 0.9.5-2
- 0.9.5.
- No longer need condrestart patch.
- Fix compile errors.
kernel-2.6.13-1.1561_FC5
------------------------
kudzu-1.2.7-1
-------------
* Mon Sep 19 2005 Bill Nottingham <notting(a)redhat.com> 1.2.7-1
- fix fbProbe to work with X drivers, not card entries
- fix crash in matchNetDevices (#168689)
libidn-0.5.19-1
---------------
* Mon Sep 19 2005 Joe Orton <jorton(a)redhat.com> 0.5.19-1
- update to 0.5.19
libsetrans-0.1.6-1
------------------
* Mon Sep 19 2005 Dan Walsh <dwalsh(a)redhat.com> 0.1.6-1
- Fix memory problem
logwatch-6.1.2-4
----------------
* Mon Sep 19 2005 Ivana Varekova <varekova(a)redhat.com> 6.1.2-4
- fixed secure script (part of bug 141116, added a few
unknown logs)
- bug 168469 - fixed up2date script
lsof-4.76-1
-----------
* Mon Sep 19 2005 Karel Zak <kzak(a)redhat.com> 4.76-1
- new upstream version
neon-0.24.7-7
-------------
* Mon Sep 19 2005 Joe Orton <jorton(a)redhat.com> 0.24.7-7
- drop static libs, doc/html from devel docdir
selinux-policy-strict-1.27.1-3
------------------------------
* Mon Sep 19 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.1-3
- Add yppasswdd policy
- Change ftpd_anon_t to public_content_t
selinux-policy-targeted-1.27.1-3
--------------------------------
* Mon Sep 19 2005 Dan Walsh <dwalsh(a)redhat.com> 1.27.1-3
- Add yppasswdd policy
- Change ftpd_anon_t to public_content_t
sendmail-8.13.5-1
-----------------
* Mon Sep 19 2005 Thomas Woerner <twoerner(a)redhat.com> 8.13.5-1
- new version 8.13.5
- fixed email address in changelog
* Fri May 06 2005 Thomas Woerner <twoerner(a)redhat.com> 8.13.4-2
- using new certificates directory /etc/pki/tls/certs
* Wed Apr 27 2005 Thomas Woerner <twoerrner(a)redhat.com> 8.13.4-1.1
- added configuration example for Cyrus-IMAPd to sendmail.mc (#142001)
Thanks to Alexander Dalloz
sudo-1.6.8p9-4
--------------
* Mon Sep 19 2005 Karel Zak <kzak(a)redhat.com> 1.6.8p9-4
- fix debuginfo
* Mon Sep 19 2005 Karel Zak <kzak(a)redhat.com> 1.6.8p9-3
- fix #162623 - sesh hangs when child suspends
* Mon Aug 01 2005 Dan Walsh <dwalsh(a)redhat.com> 1.6.8p9-2
- Add back in interfaces call, SELinux has been fixed to work around
xchat-1:2.4.5-1
---------------
* Mon Sep 19 2005 Christopher Aillon <caillon(a)redhat.com> 1:2.4.5-1
- X-Chat 2.4.5
Broken deps for ia64
----------------------------------------------------------
libsetrans - 0.1.6-1.ia64 requires libc.so.6(GLIBC_2.1.3)
libsetrans - 0.1.6-1.ia64 requires libc.so.6
libsetrans - 0.1.6-1.ia64 requires libselinux.so.1
libsetrans - 0.1.6-1.ia64 requires libdl.so.2
libsetrans - 0.1.6-1.ia64 requires libc.so.6(GLIBC_2.3)
libsetrans - 0.1.6-1.ia64 requires libc.so.6(GLIBC_2.1)
libsetrans - 0.1.6-1.ia64 requires libc.so.6(GLIBC_2.0)
Broken deps for ppc64
----------------------------------------------------------
libsetrans - 0.1.6-1.ppc64 requires libc.so.6(GLIBC_2.1.3)
libsetrans - 0.1.6-1.ppc64 requires libc.so.6
libsetrans - 0.1.6-1.ppc64 requires libselinux.so.1
libsetrans - 0.1.6-1.ppc64 requires libdl.so.2
libsetrans - 0.1.6-1.ppc64 requires libc.so.6(GLIBC_2.3)
libsetrans - 0.1.6-1.ppc64 requires libc.so.6(GLIBC_2.1)
libsetrans - 0.1.6-1.ppc64 requires libc.so.6(GLIBC_2.0)
18 years, 7 months
Installing from ub
by Pete Zaitcev
Hi, Jeremy, hi, Peter:
I would really appreciate if someone added a capability to Anaconda to
install from /dev/uba1 and similar. This way, we do not need to reload
usb-storage, which contributes to various problems.
I did not request to turn ub on in kernel yet, because it interferes
with usb-storage and this makes some users unhappy. But I am working
on solutions to that, and the results are encouraging. I may need
Anaconda support in FC5 on a very short notice if we wait until that
is complete.
Do you want me to file an RFE in Bugzilla?
Thanks,
-- Pete
18 years, 7 months
mysql-administrator & mysql-query-browser
by Farkas Levente
hi,
any change to someone package mysql-administrator and
mysql-query-browser for fedora eg in extras. it seems mysql ab no longer
create rpms for fedora and redhat and it'd be useful to package these
two tools.
yours.
--
Levente "Si vis pacem para bellum!"
18 years, 7 months
latest yum seems to be broken
by Radek Vokál
I've installed yum-2.4.0-3 yesterday and now I can't update any package
--> Processing Dependency: policycoreutils >= 1.25.9-1 for package:
selinux-policy-targeted
--> Processing Dependency: selinux-policy-targeted = 1.25.4-11 for
package: selinux-policy-targeted-sources
Traceback (most recent call last):
File "/usr/bin/yum", line 27, in ?
yummain.main(sys.argv[1:])
File "/usr/share/yum-cli/yummain.py", line 133, in main
(result, resultmsgs) = base.buildTransaction()
File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 339, in
buildTransaction
(rescode, restring) = self.resolveDeps()
File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 251, in
resolveDeps
(checkdep, missing, conflict, errormsgs) = self._processReq(dep)
File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 382, in
_processReq
requirementTuple, errormsgs)
File "/usr/lib/python2.4/site-packages/yum/depsolve.py", line 489, in
_requiringFromInstalled
for pkg in pkgs:
TypeError: iteration over non-sequence
--
Radek Vokál <radekvokal(a)gmail.com>
18 years, 7 months
ownership of devices
by Thomas Vander Stichele
Hi everyone,
I wanted to bring up something that has bothered multimedia users and
developers for a long time about Fedora - the ownership of devices.
Currently, in Fedora, permissions are set to 600. Ownership is set to
root, until a user logs in, and then it gets owned by the user.
This has multiple problems.
a) user switching assigns ownership to the first user that managed to
log in on the machine. A second login under a different account will
not be able to use sound or video devices
b) server programs like flumotion and icecast cannot be installed to
work as a service without manual intervention
A lot of other distributions solve this simply by creating a group for
these devices, "audio", "sound", "media", whatever. Then normal users
get added to this group, and rpms can as part of the install add their
newly-created user to this group, and everyone is happy.
The only problem is that apparently it is hard for an rpm to add a group
when a system is being upgraded between distros; ie, while anaconda
could add this new group just fine, people doing a dist upgrade, it is
claimed, will not get this group installed.
I would like to know if anyone else sees this as a problem (I have to
explain the situation to users that want to install and run flumotion
pretty much every time someone tries it). At this point I am very
tempted to do evil things from the flumotion rpm just so this problem
gets dealt with instead of being shuffled under the carpet :)
Comments appreciated,
Thomas
Dave/Dina : future TV today ! - http://www.davedina.org/
<-*- thomas (dot) apestaart (dot) org -*->
I can't go away with you on a rock climbing weekend
What if something's on TV and it's never shown again
Just as well I'm not invited I'm afraid of heights
I lied about being the outdoor type
<-*- thomas (at) apestaart (dot) org -*->
URGent, best radio on the net - 24/7 ! - http://urgent.fm/
18 years, 7 months
rawhide report: 20050919 changes
by Build System
Updated Packages:
iproute-2.6.14-3
----------------
* Mon Sep 19 2005 Radek Vokal <rvokal(a)redhat.com> 2.6.14-3
- forget to apply the patch :(
* Mon Sep 19 2005 Radek Vokal <rvokal(a)redhat.com> 2.6.14-2
- make ip help work again (#168449)
kernel-2.6.13-1.1560_FC5
------------------------
* Sun Sep 18 2005 Dave Jones <davej(a)redhat.com>
- 2.6.14-rc1-git4
kudzu-1.2.5-1
-------------
* Sun Sep 18 2005 Bill Nottingham <notting(a)redhat.com> 1.2.5-1
- fix module_upgrade
stardict-2.4.5-1
----------------
* Mon Sep 19 2005 Leon Ho <llch(a)redhat.com> 2.4.5-1
- Upgraded to 2.4.5
Broken deps for s390x
----------------------------------------------------------
initscripts - 8.14-1.s390x requires kernel >= 0:2.6.12
Broken deps for s390
----------------------------------------------------------
initscripts - 8.14-1.s390 requires kernel >= 0:2.6.12
18 years, 7 months
FC4.1 i386 isos and jigdo
by Neil Thompson
ISTR someone was playing around with jigdo <http://atterer.net/jigdo/> and upgrading
the FC[3or4] test isos to the final isos with a massive download bandwidth saving.
Is that person still around?
It would certainly make FC4.x updates easier.
I'm going to have a look myself, but if there's anyone out there who knows more about
jigdo than I (not difficult :-) please speak up.
--
Cheers! (Relax...have a homebrew)
Neil
THEOREM: VI is perfect.
PROOF: VI in roman numerals is 6. The natural numbers < 6 which divide 6 are
1, 2, and 3. 1+2+3 = 6. So 6 is a perfect number. Therefore, VI is perfect.
QED
-- Arthur Tateishi
18 years, 7 months