Please disable the SELinux execstack/relro checks before FC5 final
by Arjan van de Ven
Hi,
I'm hereby asking to disable/remove the SELinux execstack/relro checks
before FC5 ships. The current state of affairs will only lead to people
using big-hammer approaches in disabling selinux or big chunks thereof
(based on "solutions" they find with google), which is worse than not
having this protection in the first place.
The technology is not finished yet. What I can imagine being useful is:
1) having the security config tool do a scan for libs/binaries that are
not labeled correctly yet and present a dialog to add permissions,
including an explanation of what the consequences are
2) a dbus message on failure so that the desktop can pop up a "<this
application> tried to use <this insecure library> which is most likely a
security risk. In case you downloaded this plugin deliberately, make
sure you want this" or something
As it is right now, it's just one more thing people will just disable
and hate selinux more for.
18 years, 3 months
Announcing Fedora Core 5 Test 3
by Jesse Keating
Forty-four years ago, John Hershel Glenn Jr. is successfully launched
into space aboard the Friendship 7 spacecraft on the first orbital
flight by an American astronaut. Russia had already sent two cosmonauts
into orbit at this time. In the many following years Russian and
America race each other for space superiority. Much later Russia and
America have finally started cooperating in Earth's adventures into
space. Competition is good, but collaboration can by so much better.
Today, Open Source stands as one of the ultimate examples of
collaboration. No boundaries, no borders, no barriers. As an example
of this collaboration, we are proud to announce:
Fedora Core 5 Test 3 Now Available
==================================
The Fedora Project announces the third release of the Fedora Core 5
development cycle, available for the i386, x86_64, and PPC/PPC64
architectures. Beware that Test releases are recommended only for Linux
experts/enthusiasts or for technology evaluation, as many parts are
likely to be broken and the rate of change is rapid.
http://fedora.redhat.com/About/schedule/
Final is scheduled for release March 15. This aggressive schedule makes vitally
important your help in testing, reporting and suggesting fixes for bugs.
Please direct bugs to http://bugzilla.redhat.com, Product Fedora Core,
Version fc5test3. As always, be sure that your bug is not already fixed
by updates and search for existing bugs before filing.
http://fedoraproject.org/wiki/Core/ReleaseFreezeProcess/
During the continual freeze process, very few changes will be
introduced. This is to prevent new bugs from surfacing and to ensure
that Fedora Core 5 is the best release we can make it. Rawhide reports
over the next three weeks should be very sparse. Please do test the few
updates extensively.
Thanks to all in the Fedora Project who have contributed to this
release. Your continued efforts are what makes Fedora possible.
Downloads
=========
DVD, CD and network installation are available.
Please read the Important Warnings below in this announcement for more
details.
http://torrent.fedoraproject.org/
The recommended method of download is via BitTorrent from this site.
http://fedora.redhat.com/download/mirrors.html
HTTP, FTP, and RSYNC downloads are available from Fedora Project mirrors
listed above. Note that not all mirrors may be synced at this time.
Notable Features of FC5 Test 3
==============================
* Xen, now with x86_64!
* Package selection within the installer has been reenabled.
* Rebuilt again on later gcc4.1 snapshot for performance and security
* Hibernate should be functional on a wide variety of hardware again
(use pm-hibernate to test)
* PPC Install CDs are bootable once again
* Unified SRPM set instead of one per arch
* Lots of bugfixes from Test 2 release testing
* 1600+ Extras packages conveniently available via yum
http://fedora.redhat.com/docs/release-notes/
Latest version of release notes are available from here. (not yet
uploaded, will be soon.
Important Warnings
==================
http://fedoraproject.org/wiki/FC5Test3CommonProblems
Please see this page for an updated list of important notes for FC5test3
in order to avoid common problems and troubleshoot problems that you may
see.
Have fun testing this release, and enjoy the collaboration
of Linux.
--
Jesse Keating
Release Engineer: Fedora
18 years, 3 months
The value of native java
by Kaimano
All,
I was wondering around the value of embedding java within the operating
system and some of the most important applications, beyond the academic
exercise. I would rather focus on a better architectural design allowing
for a more flexible package inter-dependency.
The point of Java is "platform independency", if this requires more CPU
and memory, that is OK, they come cheaper than the work necessary to
maintain a parallel product line. If it is about license independence from
Sun, Sun have never hinted that they will create any problem in future, it
would all go to their disadvantage. Commercially, I would never recommend
to rely on the native java packages. Just look at Eclipse, the
masterpiece, 3.1.2 is out and FC5 dev is still on 3.1.1. What is FC4 on? I
do not even know, never used, it did not even work with plugins like
MyEclipseIDE. How much work has been spent to build those packages? It
must have been man years. How much more will be needed to maintain them?
I would rather spend my investment in time in re-designing the
architecture of the system to take it to the next level. Please, see also
my post on "The future of linux ..."
18 years, 3 months
rawhide report: 20060220 changes
by Build System
Updated Packages:
(none)
Broken deps for ia64
----------------------------------------------------------
rgmanager - 1.9.31-3.ia64 requires ccs
vconfig - 1.9-1.1.ia64 requires libc.so.6
vconfig - 1.9-1.1.ia64 requires libc.so.6(GLIBC_2.0)
Broken deps for ppc64
----------------------------------------------------------
emacs - 21.4-5.ppc64 requires fonts-xorg-75dpi
vconfig - 1.9-1.1.ppc64 requires libc.so.6
vconfig - 1.9-1.1.ppc64 requires libc.so.6(GLIBC_2.0)
Broken deps for s390
----------------------------------------------------------
rhythmbox - 0.8.8-2.s390 requires libgstgconf-0.8.so.0
rhythmbox - 0.8.8-2.s390 requires libgstreamer-0.8.so.1
rhythmbox - 0.8.8-2.s390 requires libgstcontrol-0.8.so.1
Broken deps for s390x
----------------------------------------------------------
rhythmbox - 0.8.8-2.s390x requires libgstcontrol-0.8.so.1()(64bit)
rhythmbox - 0.8.8-2.s390x requires libgstreamer-0.8.so.1()(64bit)
rhythmbox - 0.8.8-2.s390x requires libgstgconf-0.8.so.0()(64bit)
18 years, 3 months
David Spudich is out of the office.
by david.spudich＠elmarco.cz
I will be out of the office starting 20.02.2006 and will not return until
21.02.2006.
TEST, I`m still at my office. David
18 years, 3 months
[ANN] Fedora Project Wiki Policy Change
by Patrick W. Barnes
The Fedora Foundation has decided that all Fedora documentation, including the
fedoraproject.org wiki, will be licensed under the terms of the Open
Publication License 1.0[1] without options.
Unfortunately, the Fedora Project does not have copyright privileges over the
wiki's existing content. Since we have allowed anyone to edit the wiki
without any sort of licensing or copyright assignment, we cannot cover the
existing content without the agreement of each contributor. To solve this
issue, we have come up with a plan[2]. Our plan will require that all
contributors complete the CLA in the Fedora Account System[3] before joining
the EditGroup.
In order to facilitate our new changes, the EditGroup will be frozen effective
immediately and through the weekend. Those of you who are in the EditGroup
can continue to make edits during that time, but no new contributors are to
be added to the EditGroup during the freeze.
Everyone who is in the EditGroup but has not completed the CLA will be removed
after this weekend. If you are currently in the EditGroup and have not
completed the CLA, please take the time to do so now. This agreement will
allow us to license your contributions under the OPL. If you have completed
the CLA, but are removed after the weekend, contact someone in the revised
EditGroup to add you again.
All current EditGroup members who are removed will have their name added to a
tracking page[4]. If your name is moved to that list, you will need to
complete the CLA and remove yourself from the list to indicate that you agree
to having your past contributions licensed under the OPL. DO NOT REMOVE
OTHERS from this list. It will be monitored. After an undetermined waiting
period, all contributions made by names still on this list will be removed
from the wiki.
If you would like to learn more about our licensing and other legal terms,
visit the Legal page[5] on the wiki.
[1]
http://fedoraproject.org/wiki/Legal/Licenses/OPL
[2]
http://fedoraproject.org/wiki/WikiLicenseTalk
[3]
http://fedoraproject.org/wiki/Infrastructure/AccountSystem
[4]
http://fedoraproject.org/wiki/UnlicensedGroup
[5]
http://fedoraproject.org/wiki/Legal
--
Patrick "The N-Man" Barnes
nman64(a)n-man.com
http://www.n-man.com/
--
Have I been helpful? Rate my assistance! http://rate.affero.net/nman64/
18 years, 3 months
spec file question
by Erwin Rol
Hey all,
A small question to the rpm spec file format, how can i escape a % in a
spec file, like in ;
%define DATE ´date +%s´
Release: %{ox_release}.ER.%{DATE}
cause it doesn't like the % for the date command.
TIA,
Erwin
18 years, 3 months
rawhide report: 20060219 changes
by Build System
Updated Packages:
(none)
Broken deps for ia64
----------------------------------------------------------
rgmanager - 1.9.31-3.ia64 requires ccs
vconfig - 1.9-1.1.ia64 requires libc.so.6
vconfig - 1.9-1.1.ia64 requires libc.so.6(GLIBC_2.0)
Broken deps for ppc64
----------------------------------------------------------
emacs - 21.4-5.ppc64 requires fonts-xorg-75dpi
vconfig - 1.9-1.1.ppc64 requires libc.so.6
vconfig - 1.9-1.1.ppc64 requires libc.so.6(GLIBC_2.0)
Broken deps for s390
----------------------------------------------------------
rhythmbox - 0.8.8-2.s390 requires libgstgconf-0.8.so.0
rhythmbox - 0.8.8-2.s390 requires libgstreamer-0.8.so.1
rhythmbox - 0.8.8-2.s390 requires libgstcontrol-0.8.so.1
Broken deps for s390x
----------------------------------------------------------
rhythmbox - 0.8.8-2.s390x requires libgstcontrol-0.8.so.1()(64bit)
rhythmbox - 0.8.8-2.s390x requires libgstreamer-0.8.so.1()(64bit)
rhythmbox - 0.8.8-2.s390x requires libgstgconf-0.8.so.0()(64bit)
18 years, 3 months
some mimetype lost icons
by ZC Miao
I use:
shared-mime-info-0.16.cvs20060212-3
redhat-artwork-0.238-1.1
fedora-logos-1.1.41-1
gnome-icon-theme-2.14.0-2
And now, some mimetypes such as:
audio/mpeg
text/html
have no icons(looks very ugly)
--
ZC Miao<hellwolf(a)seu.edu.cn>
http://hellwolf.cublog.cn/
gpg --keyserver keyserver.veridis.com --recv-key 0x6B174C6F
18 years, 3 months
