Obligatory First Post
by Jay Chandler
Greetings!
My name is Corey "Jay' Chandler, and I'm a Linux admin. Besides a
general knowledge of standard Linux admin tasks, I specialize in
monitoring (Nagios and Cacti at the current gig, a handful of other
packages (including Zabbix) over the years), httpd, and DNS-- but the
area I really shine in is email, from MTA to anti-spam to list
management. I've been active in the Unix/Linux world for roughly five
years now, both as a user and as a systems admin.
I just discovered the Fedora Infrastructure project today, and I must
say, I'm enthused. I've always wanted to contribute to an open source
project, but given that I can't code my way out of a paper bag at this
point, that's been rather difficult. The dayjob keeps me busy in a
primarily CentOS environment, so I'm no stranger to the RedHat way of
systems design.
Feel free to let me know where I can best be of use!
--
Corey Chandler / KB1JWQ
Living Legend / Systems Exorcist
Today's Excuse: Forced to support NT servers; sysadmins quit
15 years, 4 months
Fixing CSRF exploits in Infrastructure
by Toshio Kuratomi
Greetings all,
I've been researching the CSRF exploit and how it affects our web apps
recently. The short story is that our code is pretty open to this at
the moment. I've written up a proposal for fixing this but it will
require a lot of coding so I'd love to have some more eyes on it to make
sure I'm not making any stupid mistakes.
The proposal is here::
https://fedorahosted.org/fas/wiki/CSRF
The ticket for the overall CSRF fixing is here::
https://fedorahosted.org/fedora-infrastructure/ticket/992
I consider fixing this to be a fairly high priority so I'll be starting
work on implementing this for a few pkgdb methods very soon. Assuming
the technique works we'll need to port every method that can change data
in every app to use this.
-Toshio
15 years, 4 months
Patch to fix EPEL dep scripts
by Michael Stahnke
I think I solved the repo-closure/deps scripts issues. Now it should
be back to sending only one email, (instead of 6). Also, there was an
indentation issue in the reporting program that was causing the
dependencies problems to be cleared.
Please test this once before putting in production. I tested the best
I could on publictest16 and my home systems, but I didn't have full
access to all yum repos anywhere. Additionally, I changed the shell
script to reference local copies of yum.conf and rc-report.cfg. I
think that is probably ok, but somebody should verify.
stahnma
15 years, 4 months
Re: Introduction...
by Mark True
My username is darfoo, and I applied to the sysadmin group.
I guess I am pretty much interested in whatever FIG needs me, but
primarily sysadmin-releng and sysadmin-noc
--Mark T.
----- Original Message -----
From: "Mike McGrath" <mmcgrath(a)redhat.com>
Sent: Mon, December 1, 2008 16:30
Subject:Re: Introduction...
On Mon, 1 Dec 2008, Mark True wrote:
> Hey Guys,
>
> I am interested in joining the Fedora sysadmins and infrastructure team
> and helping out. I have been using Linux for more than 10 years on my own
> and in various jobs. Over that time, I have used Slackware, Gentoo,
> Debian, Redhat, Ubuntu and of course Fedora. My exposure to all these
> different distributions has given me a wide variety of experiences with
> how various people implement a system. Most of the companies I have
> worked for have used RHEL on the corporate servers and Fedora or Ubuntu on
> the desktops. In my roll as either systems engineer, software developer
> or QA engineer I have always played ad-hoc sysadmin for people because of
> my knowledge. I have experience with bash, Perl, Python and C/C++, and
> many different kinds of system utilities. I would love to contribute my
> talents with tools and knowledge toward supporting the Fedora project.
>
Hello Mark, was there any particular FIG you are interested in? Also have
you applied for the sysadmin group yet? What is your account name?
-Mike
----- End of original message -----
15 years, 4 months
Introduction...
by Mark True
Hey Guys,
I am interested in joining the Fedora sysadmins and infrastructure team
and helping out. I have been using Linux for more than 10 years on my own
and in various jobs. Over that time, I have used Slackware, Gentoo,
Debian, Redhat, Ubuntu and of course Fedora. My exposure to all these
different distributions has given me a wide variety of experiences with
how various people implement a system. Most of the companies I have
worked for have used RHEL on the corporate servers and Fedora or Ubuntu on
the desktops. In my roll as either systems engineer, software developer
or QA engineer I have always played ad-hoc sysadmin for people because of
my knowledge. I have experience with bash, Perl, Python and C/C++, and
many different kinds of system utilities. I would love to contribute my
talents with tools and knowledge toward supporting the Fedora project.
Hope to hear from you!
--Mark T.
15 years, 4 months
Change request: SELinux tweaks.
by Luke Macken
Attached are some patches that will fix many AVC's that are currently
happening within our infrastructure.
Patch 0010-Fix-our-semanage_fcontext-function-to-work-on-symlin.patch
/should/ fix the problem introduced in
41acfbc83c80d12d915a0d6087e841aba2c7e78c that caused restorecon to flip
out when trying to apply context to a symlink.
The rest should all be fairly straight-forward fixes that involve
flipping booleans, setting context, and creating custom policy modules.
Apologies for the binary blobs in the diffs :)
luke
15 years, 4 months
