I've been researching the CSRF exploit and how it affects our web apps
recently. The short story is that our code is pretty open to this at
the moment. I've written up a proposal for fixing this but it will
require a lot of coding so I'd love to have some more eyes on it to make
sure I'm not making any stupid mistakes.
The proposal is here::
The ticket for the overall CSRF fixing is here::
I consider fixing this to be a fairly high priority so I'll be starting
work on implementing this for a few pkgdb methods very soon. Assuming
the technique works we'll need to port every method that can change data
in every app to use this.
I think I solved the repo-closure/deps scripts issues. Now it should
be back to sending only one email, (instead of 6). Also, there was an
indentation issue in the reporting program that was causing the
dependencies problems to be cleared.
Please test this once before putting in production. I tested the best
I could on publictest16 and my home systems, but I didn't have full
access to all yum repos anywhere. Additionally, I changed the shell
script to reference local copies of yum.conf and rc-report.cfg. I
think that is probably ok, but somebody should verify.
Attached are some patches that will fix many AVC's that are currently
happening within our infrastructure.
/should/ fix the problem introduced in
41acfbc83c80d12d915a0d6087e841aba2c7e78c that caused restorecon to flip
out when trying to apply context to a symlink.
The rest should all be fairly straight-forward fixes that involve
flipping booleans, setting context, and creating custom policy modules.
Apologies for the binary blobs in the diffs :)
I won't be able to attend the meeting tomorrow. Many of us in the US will
be celebrating thanksgiving. I certainly do not want to stop others from
hosting the meeting. If you're around and want to hold a meeting, please
While astronomers took first ever pictures of other planetary systems
 last month, the fedora community was building its own planetary
systems. Some say one planet isn't enough, other strive to enlarge
their own planet. While F-10 Cambridge elevates the performance
barrier and much more, other planetary spins have been geared to
Ladies and Gentlemen, the following spins have also been released
together with Fedora 10 Cambridge release to ensure that you will be
the most productive in your specific work environment with opensource
- Fedora Electronic Lab
- Fedora KDE
- Fedora Edu-Math
- Fedora XFCE
- Fedora AOS
- Fedora Developer
- Fedora BrOffice
For more details, please visit https://fedoraproject.org/wiki/SIGs/Spins/10
All these official spins can be downloaded at
http://spins.fedoraproject.org/ for both i386 and x86_64 architectures
as LiveCDs or LiveDVDs.
Outage Notification - 2008-11-30 06:00 UTC
There will be an outage starting at 2008-11-30 06:00 UTC, which will last
approximately 12 hours.
To convert UTC to your local time, take a look at
date -d '2008-11-30 06:00 UTC'
Reason for Outage:
The building where the system is housed is losing power for 12 hours for
Please join #fedora-admin in irc.freenode.net or respond to this email to
track the status of this outage.
> The following errors were encountered while updating bugzilla with information
> from the Package Database. Please have the problems taken care of:
> (106, 'Sorry, entering a bug into the\n product Fedora OLPC has been disabled.')
I'm looking into special casing 'Fedora OLPC' to not attempt to sync to
bugzilla now. Talking to OLPC people about whether we need to disable
bugzilla acls in the pkgdb for OLPC and just manage cvs for them or if
re-enabling the bugzilla component is what they want to do.
For reference, the bugzilla ticket for this change was here:
Basic Commands in Linux and the following things
Basic Partition Structure
Types of Installation & Kickstart
User Administration & SUDO & PAM
File Permissions & Special Permissions [Setuid,Setgid,Stickybit]
Umask & ACL
Disk Management [creating,deleting]
Disk quota Management
RPM & Tarball Management [Package Mangement], YUM
XWindows Management , VNC
RAID & LVM Management
Setting up one or many ip Address to Lan card
Setting up Router
Setting up DHCP Server
NFS Server Administration
FTP Server Administration
SAMBA Server Administration
DNS Server Administration
Apache Server Administration
Sendmail Server Administration
Squid Proxy Server Administration
NIS Server Administration
Hope I get a positive response and get a chance to work
with Fedora Team (Thnks GOD)...
Phadke Omkar Ashok
http://www.fastmail.fm - mmm... Fastmail...
So I'm pretty sure I'm like others, but I'll be on vacation for about a
week with my family on Thanksgiving.
If my packages need fixed, go ahead and fix 'em ;)
Ian Weller <ianweller(a)gmail.com> http://ianweller.org
GnuPG fingerprint: E51E 0517 7A92 70A2 4226 B050 87ED 7C97 EFA8 4A36
"Technology is a word that describes something that doesn't work yet."
~ Douglas Adams