Re: Keeping SELinux on (was Attention: Proprietary video driver users (ATI, Nvidia, etc.))
by Ron Yorston
Ivan Gyurdiev wrote:
>Anyway, the fact that it's a tiny subset of applications doesn't mean
>that it wouldn't be helpful to get developer review of the policy, and
>participation/patches.
Quite so. But my concern isn't with the few developers working on
critical infrastructure: by all means have them learn about SELinux
and review policy.
However, I don't think it's reasonable to expect application developers
/in general/ to be responsible for making their applications work in
the presence of SELinux, any more than one could expect corporate admins
/in general/ to have a detailed understanding of SELinux policy.
Ron
18 years, 2 months
rawhide report: 20060224 changes
by Build System
Updated Packages:
anaconda-10.92.10-1
-------------------
* Thu Feb 23 2006 Jeremy Katz <katzj(a)redhat.com> - 10.92.10-1
- more bogl removal (dcantrel)
- make the exception dumping less braindead about things we don't
want dumped (clumens)
- add backtrace handler to anaconda (pjones)
- fix warnings with new yum in pkgorder
- make conditional packages on deps work (pnasrat)
- suppress some warnings (dcantrel)
- text mode language fixes (dcantrel)
* Thu Feb 23 2006 Jeremy Katz <katzj(a)redhat.com> - 10.92.9-1
- Fix text mode traceback (dcantrel)
- Skip a few more things in traceback dumps
- Attempt to fix pkgorder so that we require less CDs for "normal" installs
bluez-libs-2.25-1
-----------------
* Thu Feb 23 2006 David Woodhouse <dwmw2(a)redhat.com> - 2.25-1
- Update to bluez-libs 2.25
cpuspeed-1:1.2.1-1.33
---------------------
* Thu Feb 23 2006 Dave Jones <davej(a)redhat.com>
- Fix broken init script. (Alexandre Oliva) [#182691]
Taking ugly shell script to the next level.
evolution-data-server-1.5.91-1
------------------------------
* Tue Feb 14 2006 David Malcolm <dmalcolm(a)redhat.com> - 1.5.91-1
- 1.5.91
gnome-applets-1:2.13.4-4
------------------------
* Thu Feb 23 2006 Matthias Clasen <mclasen(a)redhat.com> - 2.13.4-4
- Make the stock ticker work with gcc 4.1 (#179528)
kernel-2.6.15-1.1977_FC5
------------------------
* Thu Feb 23 2006 Dave Jones <davej(a)redhat.com>
- 2.6.16rc4-git6
libbtctl-0.6.0-5
----------------
* Thu Feb 23 2006 Matthias Clasen <mclasen(a)redhat.com> 0.6.0-5
- try a fix for (#179413)
* Thu Feb 23 2006 Harald Hoyer <harald(a)redhat.com> 0.6.0-2
- rebuild
* Thu Feb 16 2006 Harald Hoyer <harald(a)redhat.com> 0.6.0-1
- version 0.6.0
xen-3.0.1-0.20060208.fc5.3
--------------------------
* Thu Feb 23 2006 Jeremy Katz <katzj(a)redhat.com> - 3.0.1-0.20060208.fc5.3
- add patch to ensure we get a unique fifo for boot loader (#182328)
- don't try to read the whole disk if we can't find a partition table
with pygrub
- fix restarting of domains (#179677)
Broken deps for i386
----------------------------------------------------------
GFS-kernel - 2.6.15-5.FC5.4.i686 requires kernel = 0:2.6.15-1.1955_FC5
GFS-kernel - 2.6.15-5.FC5.4.i686 requires /lib/modules/2.6.15-1.1955_FC5
GFS-kernel-smp - 2.6.15-5.FC5.4.i686 requires kernel-smp = 0:2.6.15-1.1955_FC5
GFS-kernel-smp - 2.6.15-5.FC5.4.i686 requires /lib/modules/2.6.15-1.1955_FC5smp
cman-kernel - 2.6.15.0-20051219.162641.FC5.11.7.i686 requires kernel = 0:2.6.15-1.1955_FC5
cman-kernel - 2.6.15.0-20051219.162641.FC5.11.7.i686 requires /lib/modules/2.6.15-1.1955_FC5
cman-kernel-smp - 2.6.15.0-20051219.162641.FC5.11.7.i686 requires kernel-smp = 0:2.6.15-1.1955_FC5
cman-kernel-smp - 2.6.15.0-20051219.162641.FC5.11.7.i686 requires /lib/modules/2.6.15-1.1955_FC5smp
dlm-kernel - 2.6.15.0-20051219.162641.FC5.9.7.i686 requires kernel = 0:2.6.15-1.1955_FC5
dlm-kernel - 2.6.15.0-20051219.162641.FC5.9.7.i686 requires /lib/modules/2.6.15-1.1955_FC5
dlm-kernel-smp - 2.6.15.0-20051219.162641.FC5.9.7.i686 requires kernel-smp = 0:2.6.15-1.1955_FC5
dlm-kernel-smp - 2.6.15.0-20051219.162641.FC5.9.7.i686 requires /lib/modules/2.6.15-1.1955_FC5smp
gnbd-kernel - 2.6.15-5.FC5.7.i686 requires kernel = 0:2.6.15-1.1955_FC5
gnbd-kernel - 2.6.15-5.FC5.7.i686 requires /lib/modules/2.6.15-1.1955_FC5
gnbd-kernel-smp - 2.6.15-5.FC5.7.i686 requires kernel-smp = 0:2.6.15-1.1955_FC5
gnbd-kernel-smp - 2.6.15-5.FC5.7.i686 requires /lib/modules/2.6.15-1.1955_FC5smp
libbtctl - 0.6.0-5.i386 requires libopenobex.so.1
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.i386 requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.i386 requires tomcat4
Broken deps for ia64
----------------------------------------------------------
libbtctl - 0.6.0-5.ia64 requires libopenobex.so.1()(64bit)
rgmanager - 1.9.31-3.ia64 requires ccs
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.ia64 requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.ia64 requires tomcat4
vconfig - 1.9-1.1.ia64 requires libc.so.6
vconfig - 1.9-1.1.ia64 requires libc.so.6(GLIBC_2.0)
Broken deps for ppc
----------------------------------------------------------
libbtctl - 0.6.0-5.ppc requires libopenobex.so.1
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.ppc requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.ppc requires tomcat4
Broken deps for ppc64
----------------------------------------------------------
emacs - 21.4-5.ppc64 requires fonts-xorg-75dpi
libbtctl - 0.6.0-5.ppc64 requires libopenobex.so.1()(64bit)
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.ppc64 requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.ppc64 requires tomcat4
vconfig - 1.9-1.1.ppc64 requires libc.so.6
vconfig - 1.9-1.1.ppc64 requires libc.so.6(GLIBC_2.0)
Broken deps for s390
----------------------------------------------------------
rhythmbox - 0.8.8-2.s390 requires libgstgconf-0.8.so.0
rhythmbox - 0.8.8-2.s390 requires libgstreamer-0.8.so.1
rhythmbox - 0.8.8-2.s390 requires libgstcontrol-0.8.so.1
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.s390 requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.s390 requires tomcat4
Broken deps for s390x
----------------------------------------------------------
rhythmbox - 0.8.8-2.s390x requires libgstcontrol-0.8.so.1()(64bit)
rhythmbox - 0.8.8-2.s390x requires libgstreamer-0.8.so.1()(64bit)
rhythmbox - 0.8.8-2.s390x requires libgstgconf-0.8.so.0()(64bit)
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.s390x requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.s390x requires tomcat4
Broken deps for x86_64
----------------------------------------------------------
GFS-kernel - 2.6.15-5.FC5.4.x86_64 requires kernel = 0:2.6.15-1.1955_FC5
GFS-kernel - 2.6.15-5.FC5.4.x86_64 requires /lib/modules/2.6.15-1.1955_FC5
cman-kernel - 2.6.15.0-20051219.162641.FC5.11.7.x86_64 requires kernel = 0:2.6.15-1.1955_FC5
cman-kernel - 2.6.15.0-20051219.162641.FC5.11.7.x86_64 requires /lib/modules/2.6.15-1.1955_FC5
dlm-kernel - 2.6.15.0-20051219.162641.FC5.9.7.x86_64 requires kernel = 0:2.6.15-1.1955_FC5
dlm-kernel - 2.6.15.0-20051219.162641.FC5.9.7.x86_64 requires /lib/modules/2.6.15-1.1955_FC5
gnbd-kernel - 2.6.15-5.FC5.7.x86_64 requires kernel = 0:2.6.15-1.1955_FC5
gnbd-kernel - 2.6.15-5.FC5.7.x86_64 requires /lib/modules/2.6.15-1.1955_FC5
libbtctl - 0.6.0-5.i386 requires libopenobex.so.1
libbtctl - 0.6.0-5.x86_64 requires libopenobex.so.1()(64bit)
struts-webapps-tomcat3 - 1.2.8-2jpp_8fc.x86_64 requires tomcat3
struts-webapps-tomcat4 - 1.2.8-2jpp_8fc.x86_64 requires tomcat4
18 years, 2 months
DRI permission problem
by Émeric Maschino
Hi,
I'm running up-to-date Rawhide on my Itanium workstation. However, when
I'm trying glxinfo as root or as user emeric, I'm getting:
libGL error: open DRM failed (Operation not permitted)
libGL error: reverting to (slow) indirect rendering
X Error of failed request: GLXBadContext
Major opcode of failed request: 143 (GLX)
Minor opcode of failed request: 5 (X_GLXMakeCurrent)
Serial number of failed request: 22
Current serial number in output stream: 22
name of display: :0.0
I don't understand what's wrong with the permissions. As user emeric,
ls -lZ /dev/dri/card0 gives:
crw------- emeric root system_u:object_r:dri_device_t /dev/dri/card0
Furthermore, the DRI section in my xorg.conf file is as follows:
Section "DRI"
Group 0
Mode 0666
EndSection
I've checked on a x86 FC4 system: the DRI section is identical. None of
the hints found with Google worked for me.
Does anybody understand what's wrong? Is this an ia64-specific issue?
Many thanks,
Émeric
18 years, 2 months
Non-free Extras?
by Eric Mesa
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In order to pull in packagers like those maintaining Dries, Dag Weirs,
freshrpms, and others, and in order to assure Fedora users that their
packages would work instead of saying, "if you don't use official
packages, you're on your own," has there been any conversation on
taking an example from Debian and having a non-free repository? It
would also free up the packagers who spend so much time duplicating
each other's packages in order to ensure compatibility. I know there
are issues with their ffmpeg and mp3 codecs, but could these issues be
solved simply by designating their repositories as non-free? I think
it would greatly enhance the Fedora experience, IMHO as a loyal FC
user since Yarrow.
- --
Eric Mesa
ericsbinaryworld(a)gmail.com
http://www.ericsbinaryworld.com
Note: All emails from this address should have a GPG signature. If
you have the proper setup you can use this to confirm my identity and
that the email was not changed in transit.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
iD8DBQFD+6HNPvU+8ApmWXIRApXBAJ9yZnV5o6OiE4ZHINorajzzaYIdzQCeKYx/
8+z2CY7CAzRXf8FaJxn3sWs=
=rLiE
-----END PGP SIGNATURE-----
18 years, 2 months
Where did all my memory go?
by Ivan Gyurdiev
So I decided to hunt for bugs (which there's a lot of...) by running rpm
-Va to see which packages conflict, and what other damage is there in
the database.
Then the computer got slower, and slower, and slower....
And several hours later it got done (I have a lot of packages, I don't
know how fast it should be)
Now I see:
total used free shared buffers cached
Mem: 1025512 1016696 8816 0 1668 39980
-/+ buffers/cache: 975048 50464
Swap: 524152 261924 262228
There were prelink/rpmv zombies which I killed.
Firefox and thunderbir were eating a lot of memory as usual, but I
killed those too.
The result above is afterwards, with not much running other than a
standard gnome desktop.
The top process by resident memory is eating 40MB or so.
Kernel (1959 + madwifi + Nvidia + Steve' Grubb's lspp things):
2.6.15-1.1959.2.1_FC5.lspp.9
slabtop:
12535365 12535330 99% 0.05K 187095 67 748380K size-32
869924 869896 99% 0.09K 19771 44 79084K size-64
93632 93622 99% 0.05K 1216 77 4864K avtab_node
14500 4918 33% 0.15K 580 25 2320K size-128
11210 10221 91% 0.20K 590 19 2360K vm_area_struct
What's using up all the memory?
18 years, 2 months
Funny .so situation under FC5 test 3
by Davide Bolcioni
Greetings,
I am testing a binary-only application under FC5 test 3 and find the
following situation:
- ldd on the main executable shows, among others,
libstdc++.so.5 => /usr/lib/libstdc++.so.5 (0x40050000)
- ldd on a .so loaded by the main executable shows, among others,
libstdc++-libc6.2-2.so.3 => /usr/lib/libstdc++-libc6.2-2.so.3
(0x4014c000)
The application seems to work but the above situation is new to me,
why did this happen ? Is this a problem ?
Thank you for your consideration,
Davide Bolcioni
18 years, 2 months
Re: Multiple concurrent versions of Python
by Alan Milligan
Toshio Kuratomi wrote:
> So from the outside looking in, zope-2.9.x is where python-2.4
> compatibility starts.
>
I've been making contributions to the Zope project for about four years
now, and follow it very closely. If you'd cared to look in the Zope dev
archives, you'd have seen posts from me regarding exactly this issue for
perhaps 8 months now.
As per the discussions of my post about this a few months ago, Jim
Fulton and Andreas Jung both confirmed that the security audit took
place last October, and that actually the changes went into Zope-2.8.4,
however, it wasn't brought to wider attention until 2.8.5.
Please try to refrain from spreading further untruths in already murky
waters.
Alan
18 years, 2 months
Any ppc netboot install instructions out there?
by Orion Poplawski
I'm pretty new to the ppc architecture and really have no clue how to
start a kickstart install on a ppc Mac via network (PXE? netboot?)
start. I do PXE installs on x86 all the time...
- Orion
18 years, 2 months
Xen network performance problem during kickstart.
by Naoki
Howdy,
So the new hypervisor kernel is working fine which is just dandy. And so
now I'm testing the host install process. I'm doing network installs
(http) and the performance is just awful. A build to a non xen-guest
takes about 5 minutes, however from within the domain it is taking over
four hours for a cut down (couple of gig) install.
If it was doing this on standalone hardware I'd say it looks like a
duplex problem killing network performance, however network performance
from the main instance (domain-0) is full whack at 10+MB/sec even when
doing two xen guest installs at the same time. I am building from a
local mirror of the devel tree and a transfer of a large file from there
to domain-0 is happening at 1.46MB/sec. So the install should not be
taking this long I would suggest unless there is a problem.
So, anybody have any tips as to how to diagnose what the problem might
be? "xm top" shows network traffic at a very slow rate, ifconfig shows
no errors on the vifs.
Cheers,
18 years, 2 months
