Failed to load SELinux policy ????
by Brian Millett
Ok, so I've never had selinux enabled. The config is
__BEGIN__
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of enforcing.
# disabled - SELinux is fully disabled.
SELINUX=disabled
# SELINUXTYPE= type of policy in use. Possible values are:
# targeted - Only targeted network daemons are protected.
# strict - Full SELinux protection.
SELINUXTYPE=targeted
__END__
I've got selinux=0 as a boot arg,
so why am I getting this message at boot time??
"Failed to load SELinux policy."
Just started after the update to
Updated: selinux-policy-3.9.16-10.fc15.noarch
Updated: selinux-policy-targeted-3.9.16-10.fc15.noarch
thanks.
--
Brian Millett - [ Sinclair (re: The Line), "The Gathering"]
"The sky was full of stars and every star an exploding ship...one of ours."
13 years, 1 month
Gnome 3 and VNC
by Chuck Forsberg WA7KGX
How is Gnome 3 going to work with VNC, which does not do 3D?
--
Chuck Forsberg WA7KGX N2469R caf(a)omen.com www.omen.com
Developer of Industrial ZMODEM(Tm) for Embedded Applications
Omen Technology Inc "The High Reliability Software"
10255 NW Old Cornelius Pass Portland OR 97231 503-614-0430
13 years, 1 month
Odd rebalancing behavior
by Michel Alexandre Salim
I have an external 4-disk enclosure, connected through USB 2.0 (my
laptop does not have a USB 3.0 connector, and the eSATA connector
somehow does not work); it initially had a 2-disk btrfs soft-RAID1 file
system (both data and metadata are RAID1).
I recently added two more disks and did a rebalance. To my surprise it
went past the point where all four disks have the same amount of disk
usage, and went all the way to the original disks being empty, and the
new disks having all the data!
Label: 'media.store' uuid: 4cfd3551-aa85-4399-b872-9238ddb14c97
Total devices 4 FS bytes used 1.22TB
devid 3 size 1.82TB used 1.24TB path /dev/sdb
devid 4 size 1.82TB used 1.24TB path /dev/sdc
devid 2 size 1.82TB used 8.00MB path /dev/sde
devid 1 size 1.82TB used 12.00MB path /dev/sdd
Is this to be expected? Would another rebalance fix it, or should I
force-stop it by shutting down when the disk usage is roughly balanced?
This is on Fedora 15 pre-release, x86_64, fully updated, kernel
2.6.38.2-9 and btrfs-progs 0.19-13
Thanks,
--
Michel Alexandre Salim
GPG key ID: 78884778
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments
13 years, 1 month
F-15 Branched report: 20110403 changes
by Fedora compose checker
Compose started at Sun Apr 3 13:15:34 UTC 2011
Broken deps for x86_64
----------------------------------------------------------
balsa-2.4.9-5.fc15.x86_64 requires libnm-glib.so.2()(64bit)
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Ograph2way) = 0:7442f647b0a74ed48a5c9361fc42ccc4
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Flag) = 0:522d7f86f1236405e53271ff74923515
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Osetb) = 0:8f21a0a4f771662673604ed92a237d79
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Oassocb) = 0:d873c4a1eeb6fa5c5333f8658c49d1db
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Setb) = 0:93bdb588146a13126bfad4eab6c58206
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Oassoc_buffer) = 0:cf6fbee4fcc6644a0a90f07da8eb6c7b
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Mapb) = 0:617c09a110cef9f040335b35078c7234
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Sexplib) = 0:a990ea80438337d5407bbc0343c7236a
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Dumper) = 0:76126ba149caeb2d34f12e11187a9d4e
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Oassoch) = 0:87f7dc2635e5a7ed1ab03b7cd5380ace
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(SetPt) = 0:b69c030e8ca717d556d3d9bd2a5d22fd
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(ANSITerminal) = 0:3d0d1700618d8b3a4e4b2308f28cefb6
coccinelle-0.2.5-0.rc4.2.fc15.1.x86_64 requires ocaml(Oseti) = 0:a937e7661f510c17bfd21d4372507795
collectd-mysql-4.10.2-2.fc15.x86_64 requires libmysqlclient.so.16()(64bit)
collectd-mysql-4.10.2-2.fc15.x86_64 requires libmysqlclient.so.16(libmysqlclient_16)(64bit)
cpm-0.23-0.3.beta.fc12.x86_64 requires libdotconf-1.0.so.0()(64bit)
db4o-7.4-2.fc13.x86_64 requires mono(Mono.GetOptions) = 0:2.0.0.0
dbmail-3.0.0-0.3.rc1.fc15.x86_64 requires libevent-1.4.so.2()(64bit)
dbmail-auth-ldap-3.0.0-0.3.rc1.fc15.x86_64 requires libevent-1.4.so.2()(64bit)
dh-make-0.55-3.fc15.noarch requires debhelper
eog-plugins-2.91.90-1.fc15.x86_64 requires libchamplain-gtk-0.10.so.0()(64bit)
eog-plugins-2.91.90-1.fc15.x86_64 requires libchamplain-0.10.so.0()(64bit)
1:fife-0.3.2-1.fc15.i686 requires libboost_regex.so.1.44.0
1:fife-0.3.2-1.fc15.i686 requires libboost_system.so.1.44.0
1:fife-0.3.2-1.fc15.i686 requires libboost_filesystem.so.1.44.0
1:fife-0.3.2-1.fc15.x86_64 requires libboost_regex.so.1.44.0()(64bit)
1:fife-0.3.2-1.fc15.x86_64 requires libboost_system.so.1.44.0()(64bit)
1:fife-0.3.2-1.fc15.x86_64 requires libboost_filesystem.so.1.44.0()(64bit)
file-browser-applet-0.6.6-1.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::ScrolledWindow)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::Dialog)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::Toolbar)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::TreeView)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::MenuBar)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::VBox)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::Window)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::MessageDialog)
glom-1.16.1-2.fc15.x86_64 requires libgdamm-4.0.so.12()(64bit)
glom-libs-1.16.1-2.fc15.i686 requires libgdamm-4.0.so.12
glom-libs-1.16.1-2.fc15.x86_64 requires libgdamm-4.0.so.12()(64bit)
glunarclock-0.34.1-1.fc14.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-bubblemon-2.0.15-1.fc13.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-cpufire-1.6-3.fc14.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-globalmenu-0.7.9-1.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-grandr-0.4.1-2.fc12.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-music-2.5.1-5.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-sensors-2.2.7-4.fc15.i686 requires libpanel-applet-2.so.0
gnome-applet-sensors-2.2.7-4.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-applet-sshmenu-3.18-3.fc15.noarch requires ruby(panelapplet2)
gnome-applet-window-picker-0.5.8-2.fc14.x86_64 requires libpanel-applet-2.so.0()(64bit)
1:gnome-applets-2.32.0-3.fc15.x86_64 requires libpanel-applet-3.so.0()(64bit)
1:gnome-applets-2.32.0-3.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
1:gnome-applets-2.32.0-3.fc15.x86_64 requires libgweather.so.1()(64bit)
gnome-netstatus-2.28.2-1.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-pilot-conduits-2.32.1-2.fc15.x86_64 requires libgpilotd.so.5()(64bit)
gnome-pilot-conduits-2.32.1-2.fc15.x86_64 requires libgpilotdcm.so.4()(64bit)
gnome-pilot-conduits-2.32.1-2.fc15.x86_64 requires libgpilotdconduit.so.3()(64bit)
gnome-python2-applet-2.32.0-1.fc14.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnome-python2-brasero-2.32.0-1.fc14.x86_64 requires libbrasero-media.so.1()(64bit)
gnome-python2-brasero-2.32.0-1.fc14.x86_64 requires libbrasero-burn.so.1()(64bit)
gnome-python2-evince-2.32.0-1.fc14.x86_64 requires libevview.so.3()(64bit)
gnome-python2-evince-2.32.0-1.fc14.x86_64 requires libevdocument.so.3()(64bit)
gnome-python2-evolution-2.32.0-1.fc14.x86_64 requires libcamel-1.2.so.19()(64bit)
gnome-python2-gdl-2.25.3-22.fc15.x86_64 requires libgdl-1.so.3()(64bit)
gnome-python2-totem-2.32.0-1.fc14.x86_64 requires libgnome-media-profiles.so.0()(64bit)
gnome-rdp-0.2.3-6.fc12.x86_64 requires mono(Mono.Data.SqliteClient) = 0:2.0.0.0
gnomeradio-1.8-9.fc15.x86_64 requires libgtk-3.0.so.0()(64bit)
gnomeradio-1.8-9.fc15.x86_64 requires libgdk-3.0.so.0()(64bit)
gnotime-2.3.0-8.fc15.x86_64 requires libgtkhtml-3.15.so.19()(64bit)
gnubiff-2.2.13-4.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
gnustep-back-0.18.0-4.fc14.x86_64 requires libobjc.so.2()(64bit)
gnustep-back-0.18.0-4.fc14.x86_64 requires libgnustep-base.so.1.20()(64bit)
gnustep-examples-1.3.0-4.fc15.x86_64 requires libgnustep-base.so.1.20()(64bit)
gnustep-examples-1.3.0-4.fc15.x86_64 requires libobjc.so.2()(64bit)
gnustep-gui-0.18.0-2.fc14.x86_64 requires libgnustep-base.so.1.20()(64bit)
gnustep-gui-0.18.0-2.fc14.x86_64 requires libobjc.so.2()(64bit)
gnustep-gui-libs-0.18.0-2.fc14.i686 requires libobjc.so.2
gnustep-gui-libs-0.18.0-2.fc14.i686 requires libgnustep-base.so.1.20
gnustep-gui-libs-0.18.0-2.fc14.x86_64 requires libgnustep-base.so.1.20()(64bit)
gnustep-gui-libs-0.18.0-2.fc14.x86_64 requires libobjc.so.2()(64bit)
gold-2.1.12.2-5.fc15.noarch requires perl(Data::Properties)
gorm-1.2.12-2.fc15.i686 requires libobjc.so.2
gorm-1.2.12-2.fc15.i686 requires libgnustep-base.so.1.20
gorm-1.2.12-2.fc15.x86_64 requires libgnustep-base.so.1.20()(64bit)
gorm-1.2.12-2.fc15.x86_64 requires libobjc.so.2()(64bit)
gpx-viewer-0.2.0-3.fc14.x86_64 requires libchamplain-0.6.so.0()(64bit)
gpx-viewer-0.2.0-3.fc14.x86_64 requires libchamplain-gtk-0.6.so.0()(64bit)
gpx-viewer-0.2.0-3.fc14.x86_64 requires libgdl-1.so.3()(64bit)
gshutdown-0.2-6.fc12.x86_64 requires libnotify.so.1()(64bit)
gtranslator-1.9.11-3.fc15.x86_64 requires libgdl-1.so.3()(64bit)
gyachi-plugin-libnotify-1.2.10-3.fc14.x86_64 requires libnotify.so.1()(64bit)
honeyd-1.5c-13.fc15.x86_64 requires libevent-1.4.so.2()(64bit)
intellij-idea-9.0.1.94.399-12.fc15.x86_64 requires commons-collections
java-gnome-4.0.16-3.fc14.x86_64 requires libnotify.so.1()(64bit)
libgail-gnome-1.20.3-2.fc15.i686 requires libpanel-applet-2.so.0
libgail-gnome-1.20.3-2.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
libnotifymm-0.6.1-8.fc14.i686 requires libnotify.so.1
libnotifymm-0.6.1-8.fc14.x86_64 requires libnotify.so.1()(64bit)
libopenvrml-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
libopenvrml-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
libopenvrml-0.18.6-4.fc14.1.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
libopenvrml-0.18.6-4.fc14.1.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
libopenvrml-gl-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
libopenvrml-gl-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
libopenvrml-gl-0.18.6-4.fc14.1.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
libopenvrml-gl-0.18.6-4.fc14.1.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
lock-keys-applet-1.0-21.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
log4net-1.2.10-13.fc13.x86_64 requires mono(System) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.x86_64 requires mono(System.Data) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.x86_64 requires mono(mscorlib) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.x86_64 requires mono(System.Xml) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.x86_64 requires mono(System.Web) = 0:1.0.5000.0
mathgl-1.11.0.1-2.fc15.i686 requires octave(api) = 0:api-v37
mathgl-1.11.0.1-2.fc15.x86_64 requires octave(api) = 0:api-v37
meego-panel-datetime-0.3.2-5.fc15.x86_64 requires libgweather.so.1()(64bit)
mono-ndoc-1.3.1-8.fc13.x86_64 requires mono(System.Drawing) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.x86_64 requires mono(System.Windows.Forms) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.x86_64 requires mono(System) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.x86_64 requires mono(mscorlib) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.x86_64 requires mono(System.Xml) = 0:1.0.5000.0
mono-tools-2.8-3.fc15.x86_64 requires mono(gtkhtml-sharp) >= 0:3.0
1:nant-0.85-34.fc13.x86_64 requires mono(ICSharpCode.SharpZipLib) = 0:0.84.0.0
network-manager-netbook-1.8-3.fc15.x86_64 requires libnm-util.so.1()(64bit)
network-manager-netbook-1.8-3.fc15.x86_64 requires libnm-glib.so.2()(64bit)
openvpn-auth-ldap-2.0.3-6.fc12.x86_64 requires libobjc.so.2()(64bit)
openvrml-java-0.18.6-4.fc14.1.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
openvrml-java-0.18.6-4.fc14.1.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
openvrml-javascript-0.18.6-4.fc14.1.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
openvrml-javascript-0.18.6-4.fc14.1.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
openvrml-nodes-0.18.6-4.fc14.1.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
openvrml-nodes-0.18.6-4.fc14.1.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
openvrml-xembed-0.18.6-4.fc14.1.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
openvrml-xembed-0.18.6-4.fc14.1.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
ovaldi-5.6.4-1.fc14.x86_64 requires librpm.so.1()(64bit)
ovaldi-5.6.4-1.fc14.x86_64 requires librpmio.so.1()(64bit)
pcp-import-sheet2pcp-3.5.0-1.fc15.1.x86_64 requires perl(Spreadsheet::Read)
pfstools-octave-1.8.1-4.fc15.x86_64 requires liboctave.so()(64bit)
pfstools-octave-1.8.1-4.fc15.x86_64 requires libcruft.so()(64bit)
pfstools-octave-1.8.1-4.fc15.x86_64 requires liboctinterp.so()(64bit)
php-facedetect-1.0.0-6.fc14.x86_64 requires libcv.so.2.1()(64bit)
php-facedetect-1.0.0-6.fc14.x86_64 requires libcxcore.so.2.1()(64bit)
php-facedetect-1.0.0-6.fc14.x86_64 requires libhighgui.so.2.1()(64bit)
php-facedetect-1.0.0-6.fc14.x86_64 requires libcvaux.so.2.1()(64bit)
pidgin-gfire-0.9.2-2.fc15.x86_64 requires libnotify.so.1()(64bit)
plee-the-bear-0.4.1-8.fc15.x86_64 requires libboost_filesystem-mt.so.1.44.0()(64bit)
plee-the-bear-0.4.1-8.fc15.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
plee-the-bear-0.4.1-8.fc15.x86_64 requires libboost_system-mt.so.1.44.0()(64bit)
qtgpsc-0.2.3-6.fc12.x86_64 requires libgps.so.18()(64bit)
1:rubygem-actionpack-3.0.3-4.fc15.noarch requires rubygem(i18n) = 0:0.4.2
sear-0.6.3-14.fc12.x86_64 requires liberis-1.3.so.15()(64bit)
snort-bloat-2.8.5.1-1.fc13.x86_64 requires libmysqlclient.so.16(libmysqlclient_16)(64bit)
snort-bloat-2.8.5.1-1.fc13.x86_64 requires libmysqlclient.so.16()(64bit)
snort-mysql-2.8.5.1-1.fc13.x86_64 requires libmysqlclient.so.16(libmysqlclient_16)(64bit)
snort-mysql-2.8.5.1-1.fc13.x86_64 requires libmysqlclient.so.16()(64bit)
snort-mysql+flexresp-2.8.5.1-1.fc13.x86_64 requires libmysqlclient.so.16(libmysqlclient_16)(64bit)
snort-mysql+flexresp-2.8.5.1-1.fc13.x86_64 requires libmysqlclient.so.16()(64bit)
spring-0.82.7.1-1.fc15.x86_64 requires libboost_signals-mt.so.1.44.0()(64bit)
spring-0.82.7.1-1.fc15.x86_64 requires libboost_regex-mt.so.1.44.0()(64bit)
spring-0.82.7.1-1.fc15.x86_64 requires libboost_thread-mt.so.1.44.0()(64bit)
spring-0.82.7.1-1.fc15.x86_64 requires libboost_program_options-mt.so.1.44.0()(64bit)
spring-0.82.7.1-1.fc15.x86_64 requires libboost_system-mt.so.1.44.0()(64bit)
springlobby-0.120-1.fc15.x86_64 requires libtorrent-rasterbar.so.5()(64bit)
springlobby-0.120-1.fc15.x86_64 requires libboost_system-mt.so.1.44.0()(64bit)
sunbird-1.0-0.33.b2pre.fc15.x86_64 requires libnotify.so.1()(64bit)
tsclient-2.0.2-7.fc13.x86_64 requires libnm-glib.so.2()(64bit)
uim-gnome-1.6.1-1.fc15.x86_64 requires libpanel-applet-2.so.0()(64bit)
xfce4-globalmenu-plugin-0.7.9-1.fc15.x86_64 requires libxfce4panel.so.1()(64bit)
xiphos-3.1.4-3.fc15.x86_64 requires libgtkhtml-3.15.so.19()(64bit)
xiphos-3.1.4-3.fc15.x86_64 requires libgtkhtml-editor-3.14.so.0()(64bit)
znc-modperl-0.098-0.3.rc1.fc15.x86_64 requires perl(ZNC::Module)
Broken deps for i386
----------------------------------------------------------
balsa-2.4.9-5.fc15.i686 requires libnm-glib.so.2
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Oassocb) = 0:d873c4a1eeb6fa5c5333f8658c49d1db
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Ograph2way) = 0:7442f647b0a74ed48a5c9361fc42ccc4
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Oseti) = 0:a937e7661f510c17bfd21d4372507795
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Sexplib) = 0:a990ea80438337d5407bbc0343c7236a
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Mapb) = 0:617c09a110cef9f040335b35078c7234
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Flag) = 0:522d7f86f1236405e53271ff74923515
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Dumper) = 0:76126ba149caeb2d34f12e11187a9d4e
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Oassoch) = 0:87f7dc2635e5a7ed1ab03b7cd5380ace
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Osetb) = 0:8f21a0a4f771662673604ed92a237d79
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Setb) = 0:93bdb588146a13126bfad4eab6c58206
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(ANSITerminal) = 0:3d0d1700618d8b3a4e4b2308f28cefb6
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(SetPt) = 0:b69c030e8ca717d556d3d9bd2a5d22fd
coccinelle-0.2.5-0.rc4.2.fc15.1.i686 requires ocaml(Oassoc_buffer) = 0:cf6fbee4fcc6644a0a90f07da8eb6c7b
collectd-mysql-4.10.2-2.fc15.i686 requires libmysqlclient.so.16
collectd-mysql-4.10.2-2.fc15.i686 requires libmysqlclient.so.16(libmysqlclient_16)
cpm-0.23-0.3.beta.fc12.i686 requires libdotconf-1.0.so.0
db4o-7.4-2.fc13.i686 requires mono(Mono.GetOptions) = 0:2.0.0.0
dbmail-3.0.0-0.3.rc1.fc15.i686 requires libevent-1.4.so.2
dbmail-auth-ldap-3.0.0-0.3.rc1.fc15.i686 requires libevent-1.4.so.2
dh-make-0.55-3.fc15.noarch requires debhelper
eog-plugins-2.91.90-1.fc15.i686 requires libchamplain-gtk-0.10.so.0
eog-plugins-2.91.90-1.fc15.i686 requires libchamplain-0.10.so.0
1:fife-0.3.2-1.fc15.i686 requires libboost_regex.so.1.44.0
1:fife-0.3.2-1.fc15.i686 requires libboost_system.so.1.44.0
1:fife-0.3.2-1.fc15.i686 requires libboost_filesystem.so.1.44.0
file-browser-applet-0.6.6-1.fc15.i686 requires libpanel-applet-2.so.0
gambas-gb-db-1.0.19-13.fc14.i686 requires libmysqlclient.so.16
gambas-gb-db-1.0.19-13.fc14.i686 requires libmysqlclient.so.16(libmysqlclient_16)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::MessageDialog)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::ScrolledWindow)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::Dialog)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::Toolbar)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::TreeView)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::MenuBar)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::VBox)
gcstar-1.6.1-3.fc15.noarch requires perl(Gtk2::Window)
glom-1.16.1-2.fc15.i686 requires libgdamm-4.0.so.12
glom-libs-1.16.1-2.fc15.i686 requires libgdamm-4.0.so.12
glunarclock-0.34.1-1.fc14.i686 requires libpanel-applet-2.so.0
gnome-applet-bubblemon-2.0.15-1.fc13.i686 requires libpanel-applet-2.so.0
gnome-applet-cpufire-1.6-3.fc14.i386 requires libpanel-applet-2.so.0
gnome-applet-globalmenu-0.7.9-1.fc15.i686 requires libpanel-applet-2.so.0
gnome-applet-grandr-0.4.1-2.fc12.i686 requires libpanel-applet-2.so.0
gnome-applet-music-2.5.1-5.fc15.i686 requires libpanel-applet-2.so.0
gnome-applet-sensors-2.2.7-4.fc15.i686 requires libpanel-applet-2.so.0
gnome-applet-sshmenu-3.18-3.fc15.noarch requires ruby(panelapplet2)
gnome-applet-window-picker-0.5.8-2.fc14.i686 requires libpanel-applet-2.so.0
1:gnome-applets-2.32.0-3.fc15.i686 requires libpanel-applet-2.so.0
1:gnome-applets-2.32.0-3.fc15.i686 requires libgweather.so.1
1:gnome-applets-2.32.0-3.fc15.i686 requires libpanel-applet-3.so.0
gnome-netstatus-2.28.2-1.fc15.i686 requires libpanel-applet-2.so.0
gnome-pilot-conduits-2.32.1-2.fc15.i686 requires libgpilotdcm.so.4
gnome-pilot-conduits-2.32.1-2.fc15.i686 requires libgpilotd.so.5
gnome-pilot-conduits-2.32.1-2.fc15.i686 requires libgpilotdconduit.so.3
gnome-python2-applet-2.32.0-1.fc14.i686 requires libpanel-applet-2.so.0
gnome-python2-brasero-2.32.0-1.fc14.i686 requires libbrasero-media.so.1
gnome-python2-brasero-2.32.0-1.fc14.i686 requires libbrasero-burn.so.1
gnome-python2-evince-2.32.0-1.fc14.i686 requires libevview.so.3
gnome-python2-evince-2.32.0-1.fc14.i686 requires libevdocument.so.3
gnome-python2-evolution-2.32.0-1.fc14.i686 requires libcamel-1.2.so.19
gnome-python2-gdl-2.25.3-22.fc15.i686 requires libgdl-1.so.3
gnome-python2-totem-2.32.0-1.fc14.i686 requires libgnome-media-profiles.so.0
gnome-rdp-0.2.3-6.fc12.i686 requires mono(Mono.Data.SqliteClient) = 0:2.0.0.0
gnomeradio-1.8-9.fc15.i686 requires libgtk-3.0.so.0
gnomeradio-1.8-9.fc15.i686 requires libgdk-3.0.so.0
gnotime-2.3.0-8.fc15.i686 requires libgtkhtml-3.15.so.19
gnubiff-2.2.13-4.fc15.i686 requires libpanel-applet-2.so.0
gnustep-back-0.18.0-4.fc14.i686 requires libobjc.so.2
gnustep-back-0.18.0-4.fc14.i686 requires libgnustep-base.so.1.20
gnustep-examples-1.3.0-4.fc15.i686 requires libgnustep-base.so.1.20
gnustep-examples-1.3.0-4.fc15.i686 requires libobjc.so.2
gnustep-gui-0.18.0-2.fc14.i686 requires libobjc.so.2
gnustep-gui-0.18.0-2.fc14.i686 requires libgnustep-base.so.1.20
gnustep-gui-libs-0.18.0-2.fc14.i686 requires libobjc.so.2
gnustep-gui-libs-0.18.0-2.fc14.i686 requires libgnustep-base.so.1.20
gold-2.1.12.2-5.fc15.noarch requires perl(Data::Properties)
gorm-1.2.12-2.fc15.i686 requires libobjc.so.2
gorm-1.2.12-2.fc15.i686 requires libgnustep-base.so.1.20
gpx-viewer-0.2.0-3.fc14.i686 requires libchamplain-gtk-0.6.so.0
gpx-viewer-0.2.0-3.fc14.i686 requires libgdl-1.so.3
gpx-viewer-0.2.0-3.fc14.i686 requires libchamplain-0.6.so.0
gshutdown-0.2-6.fc12.i686 requires libnotify.so.1
gtranslator-1.9.11-3.fc15.i686 requires libgdl-1.so.3
gyachi-plugin-libnotify-1.2.10-3.fc14.i686 requires libnotify.so.1
honeyd-1.5c-13.fc15.i686 requires libevent-1.4.so.2
intellij-idea-9.0.1.94.399-12.fc15.i686 requires commons-collections
java-gnome-4.0.16-3.fc14.i686 requires libnotify.so.1
libgail-gnome-1.20.3-2.fc15.i686 requires libpanel-applet-2.so.0
libnotifymm-0.6.1-8.fc14.i686 requires libnotify.so.1
libopenvrml-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
libopenvrml-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
libopenvrml-gl-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
libopenvrml-gl-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
lock-keys-applet-1.0-21.fc15.i686 requires libpanel-applet-2.so.0
log4net-1.2.10-13.fc13.i686 requires mono(System) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.i686 requires mono(System.Data) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.i686 requires mono(mscorlib) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.i686 requires mono(System.Xml) = 0:1.0.5000.0
log4net-1.2.10-13.fc13.i686 requires mono(System.Web) = 0:1.0.5000.0
mathgl-1.11.0.1-2.fc15.i686 requires octave(api) = 0:api-v37
meego-panel-datetime-0.3.2-5.fc15.i686 requires libgweather.so.1
mono-ndoc-1.3.1-8.fc13.i686 requires mono(System.Drawing) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.i686 requires mono(System.Windows.Forms) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.i686 requires mono(System) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.i686 requires mono(mscorlib) = 0:1.0.5000.0
mono-ndoc-1.3.1-8.fc13.i686 requires mono(System.Xml) = 0:1.0.5000.0
mono-tools-2.8-3.fc15.i686 requires mono(gtkhtml-sharp) >= 0:3.0
1:nant-0.85-34.fc13.i686 requires mono(ICSharpCode.SharpZipLib) = 0:0.84.0.0
network-manager-netbook-1.8-3.fc15.i686 requires libnm-glib.so.2
network-manager-netbook-1.8-3.fc15.i686 requires libnm-util.so.1
ntop-3.4-0.5.pre3.fc15.i686 requires 453b804e83a8a45a07a3a4b2b7e3d453ce9a70.debug
ntop-3.4-0.5.pre3.fc15.i686 requires 26f28e7a5d17bf3e13397105d19786767ef3b2.debug
ntop-3.4-0.5.pre3.fc15.i686 requires d6023a2ea5b64acf2e0dbd895d1321e6199cbb.debug
ntop-3.4-0.5.pre3.fc15.i686 requires ad1eb47bbdeebc1dde3036c9a7626df0393a9b.debug
ntop-3.4-0.5.pre3.fc15.i686 requires 92ea8a23638aabc035a224e2320a2612a0ed73.debug
ntop-3.4-0.5.pre3.fc15.i686 requires 51fa32419268a4e8c274a302fc392f772c1049.debug
ntop-3.4-0.5.pre3.fc15.i686 requires ce2c2471c1799491c6bd24d45019188bcb65b5.debug
openvpn-auth-ldap-2.0.3-6.fc12.i686 requires libobjc.so.2
openvrml-java-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
openvrml-java-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
openvrml-javascript-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
openvrml-javascript-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
openvrml-nodes-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
openvrml-nodes-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
openvrml-xembed-0.18.6-4.fc14.1.i686 requires libboost_thread-mt.so.1.44.0
openvrml-xembed-0.18.6-4.fc14.1.i686 requires libboost_filesystem-mt.so.1.44.0
ovaldi-5.6.4-1.fc14.i686 requires librpmio.so.1
ovaldi-5.6.4-1.fc14.i686 requires librpm.so.1
pcp-import-sheet2pcp-3.5.0-1.fc15.1.i686 requires perl(Spreadsheet::Read)
pfstools-octave-1.8.1-4.fc15.i686 requires liboctinterp.so
pfstools-octave-1.8.1-4.fc15.i686 requires liboctave.so
pfstools-octave-1.8.1-4.fc15.i686 requires libcruft.so
php-facedetect-1.0.0-6.fc14.i686 requires libcvaux.so.2.1
php-facedetect-1.0.0-6.fc14.i686 requires libcxcore.so.2.1
php-facedetect-1.0.0-6.fc14.i686 requires libcv.so.2.1
php-facedetect-1.0.0-6.fc14.i686 requires libhighgui.so.2.1
pidgin-gfire-0.9.2-2.fc15.i686 requires libnotify.so.1
plee-the-bear-0.4.1-8.fc15.i686 requires libboost_thread-mt.so.1.44.0
plee-the-bear-0.4.1-8.fc15.i686 requires libboost_system-mt.so.1.44.0
plee-the-bear-0.4.1-8.fc15.i686 requires libboost_filesystem-mt.so.1.44.0
qtgpsc-0.2.3-6.fc12.i686 requires libgps.so.18
1:rubygem-actionpack-3.0.3-4.fc15.noarch requires rubygem(i18n) = 0:0.4.2
sear-0.6.3-14.fc12.i686 requires liberis-1.3.so.15
snort-bloat-2.8.5.1-1.fc13.i686 requires libmysqlclient.so.16(libmysqlclient_16)
snort-bloat-2.8.5.1-1.fc13.i686 requires libmysqlclient.so.16
snort-mysql-2.8.5.1-1.fc13.i686 requires libmysqlclient.so.16(libmysqlclient_16)
snort-mysql-2.8.5.1-1.fc13.i686 requires libmysqlclient.so.16
snort-mysql+flexresp-2.8.5.1-1.fc13.i686 requires libmysqlclient.so.16(libmysqlclient_16)
snort-mysql+flexresp-2.8.5.1-1.fc13.i686 requires libmysqlclient.so.16
spring-0.82.7.1-1.fc15.i686 requires libboost_signals-mt.so.1.44.0
spring-0.82.7.1-1.fc15.i686 requires libboost_regex-mt.so.1.44.0
spring-0.82.7.1-1.fc15.i686 requires libboost_program_options-mt.so.1.44.0
spring-0.82.7.1-1.fc15.i686 requires libboost_thread-mt.so.1.44.0
spring-0.82.7.1-1.fc15.i686 requires libboost_system-mt.so.1.44.0
springlobby-0.120-1.fc15.i686 requires libtorrent-rasterbar.so.5
springlobby-0.120-1.fc15.i686 requires libboost_system-mt.so.1.44.0
sunbird-1.0-0.33.b2pre.fc15.i686 requires libnotify.so.1
tsclient-2.0.2-7.fc13.i686 requires libnm-glib.so.2
uim-gnome-1.6.1-1.fc15.i686 requires libpanel-applet-2.so.0
xfce4-globalmenu-plugin-0.7.9-1.fc15.i686 requires libxfce4panel.so.1
xiphos-3.1.4-3.fc15.i686 requires libgtkhtml-editor-3.14.so.0
xiphos-3.1.4-3.fc15.i686 requires libgtkhtml-3.15.so.19
znc-modperl-0.098-0.3.rc1.fc15.i686 requires perl(ZNC::Module)
New package: perl-Module-Mask-0.03-1.fc15
Pretend certain modules are not installed
Updated Packages:
aqsis-1.6.0-8.fc15
------------------
* Tue Mar 29 2011 Nicolas Chauvet <kwizart(a)gmail.com> - 1.6.0-8
- Update to current bugfix
- Disable tinyxml
desktop-backgrounds-15.0.0-8.fc15
---------------------------------
* Sat Apr 02 2011 Martin Sourada <mso(a)fedoraproject.org> - 15.0.0-8
- Use stripes version of the wallpaper on F15 in Gnome
- We should require the schema we override, not the component that uses
it
- Fix the scriplets
- Minor spec clean-up
gcc-4.6.0-2.fc15
----------------
* Thu Mar 31 2011 Jakub Jelinek <jakub(a)redhat.com> 4.6.0-2
- update from the 4.6 branch
- PRs c++/47504, c++/47570, c++/47999, c++/48166, c++/48212, c++/48265,
c++/48281, c++/48289, c++/48296, c++/48313, c++/48319, c++/48369,
debug/48041, debug/48253, preprocessor/48248, target/48349
- add -fno-debug-types-section switch
- don't emit .debug_abbrev section if it is empty and unused
gtkwave-3.3.20-2.fc15
---------------------
* Tue Mar 29 2011 Paul Howarth <paul(a)city-fan.org> 3.3.20-2
- tentative upstream fix for crash when reading malformed LXT file (#690920)
- nobody else likes macros for commands
gummi-0.5.8-1.fc15
------------------
* Wed Mar 23 2011 Fabian Affolter <fabian(a)bernewireless.net> - 0.5.8-1
- Updated to new upstream version 0.5.8
irclog2html-2.9.2-1.fc15
------------------------
* Sun Mar 27 2011 Fabian Affolter <fabian(a)bernewireless.net> - 2.9.2-1
- Updated to new upstream version 2.9.2
lovelock-backgrounds-14.91.1-1.fc15
-----------------------------------
* Fri Apr 01 2011 Martin Sourada <mso(a)fedoraproject.org> - 14.91.1-1
- New release
- Includes "Stripes" version of the wallpaper
- Apropriate subpackages created
* Tue Mar 22 2011 Martin Sourada <mso(a)fedoraproject.org> - 14.91.0-1
- New release, includes beta artwork
mailcap-2.1.37-1.fc15
---------------------
* Tue Mar 29 2011 Ville Skyttä <ville.skytta(a)iki.fi> - 2.1.37-1
- Update to 2.1.37.
mdds-0.5.2-1.fc15
-----------------
* Tue Mar 29 2011 David Tardon <dtardon(a)redhat.com> - 0.5.2-1
* new version
mesa-7.11-0.5.20110401.0.fc15
-----------------------------
* Fri Apr 01 2011 Dave Airlie <airlied(a)redhat.com> 7.11-0.5.20110401.0
- Revert upstream patches causing SNB regression.
* Fri Apr 01 2011 Dave Airlie <airlied(a)redhat.com> 7.11-0.4.20110401.0
- upstream snapshot again - proper fix for ILK + nv50 gnome-shell issue
* Wed Mar 30 2011 Dave Airlie <airlied(a)redhat.com> 7.11-0.3.20110330.0
- mesa-intel-fix-gs-rendering-regression.patch, attempt to fix gnome shell
rendering.
* Wed Mar 30 2011 Dave Airlie <airlied(a)redhat.com> 7.11-0.2.20110330.0
- snapshot upstream again to hopefully fix ILK bug
* Sun Mar 27 2011 Dave Airlie <airlied(a)redhat.com> 7.11-0.1.20110327.0
- pull latest snapshot + 3 post snapshot fixes
* Wed Mar 23 2011 Adam Jackson <ajax(a)redhat.com> 7.10.1-1
- mesa 7.10.1
* Fri Mar 18 2011 Dennis Gilmore <dennis(a)ausil.us> 7.10-0.30
- fall back to non native jit on sparc.
mr-1.02-1.fc15
--------------
* Sun Mar 27 2011 Fabian Affolter <fabian(a)bernewireless.net> - 1.02-1
- Updated to new upstream version 1.02
nfoview-1.9.3-1.fc15
--------------------
* Sun Mar 27 2011 Fabian Affolter <fabian(a)bernewireless.net> - 1.9.3-1
- Updated to new upstream version 1.9.3
pcsc-lite-ccid-1.4.2-2.fc15
---------------------------
* Tue Mar 29 2011 Kalev Lember <kalev(a)smartlink.ee> - 1.4.2-2
- Don't install the udev rules
perl-File-Slurp-9999.15-1.fc15
------------------------------
* Tue Mar 29 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> - 9999.15-1
- Upstream update.
- Add perl_default_filter.
- Fix encoding of "Changes".
- Spec cleanup.
perl-Test-CheckManifest-1.23-1.fc15
-----------------------------------
* Tue Mar 29 2011 Ralf Corsépius <corsepiu(a)fedoraproject.org> 1.23-1
- Upstream update.
- Add LICENSE file.
- Spec cleanup.
qemu-0.14.0-7.fc15
------------------
* Tue Mar 29 2011 Justin M. Forbes <jforbes(a)redhat.com> - 2:0.14.0-7
- Disable qemu-ppc and qemu-sparc packages (#679179)
* Mon Mar 28 2011 Justin M. Forbes <jforbes(a)redhat.com> - 2:0.14.0-6
- Spice fixes for flow control.
* Tue Mar 22 2011 Dan Horák <dan[at]danny.cz> - 2:0.14.0-5
- be more careful when removing the -g flag on s390
rxtx-2.2-0.4.20100211.fc15
--------------------------
* Thu Mar 17 2011 Levente Farkas <lfarkas(a)lfarkas.org> - 2.2-0.4.20100211
- fix fhs_lock #666761
urlwatch-1.12-1.fc15
--------------------
* Sun Mar 27 2011 Fabian Affolter <fabian(a)bernewireless.net> - 1.12-1
- Updated to new upstream version 1.12
wavemon-0.7.2-1.fc15
--------------------
* Sat Mar 26 2011 Fabian Affolter <fabian(a)bernewireless.net> - 0.7.2-1
- Updated to new upstream 0.7.2
xorg-x11-server-1.10.0-7.fc15
-----------------------------
* Wed Mar 30 2011 Adam Jackson <ajax(a)redhat.com> 1.10.0-7
- xserver-1.10-glx-pixmap-crash.patch, xserver-1.10-bg-none-revert.patch:
bugfixes from xserver-next
* Tue Mar 22 2011 Adam Jackson <ajax(a)redhat.com> 1.10.0-6
- Fix thinko in pointer barrier patch
* Tue Mar 22 2011 Adam Tkac <atkac redhat com> 1.10.0-5
- add more files into -source subpkg
* Thu Mar 17 2011 Adam Jackson <ajax(a)redhat.com> 1.10.0-4
- xserver-1.10-pointer-barriers.patch: Backport CRTC confinement from master
and pointer barriers from the development tree for same.
- xserver-1.10-vbe-malloc.patch: Fix a buffer overrun in the VBE code.
Summary:
Added Packages: 1
Removed Packages: 0
Modified Packages: 20
13 years, 1 month
Re: [systemd-devel] /run DoS
by Michał Piotrowski
W dniu 3 kwietnia 2011 23:35 użytkownik Lennart Poettering
<mzerqung(a)0pointer.de> napisał:
> On Sun, 03.04.11 23:28, Michał Piotrowski (mkkp4x4(a)gmail.com) wrote:
>
>> > But for /dev/shm I see no quick fix... do you?
>>
>> Unfortunately not. No one foresaw that quota support on tmpfs will
>> someday be useful :)
>>
>> >
>> > I think we should fix either both or should wait for the proper fix by
>> > the kernel.
>>
>> Can you temporarily fix one?
>
> Well, of course we could.
>
> But, think about it, what does this help? The vulnerability doesn't go
> away by doing this, and we'd have a temporary hack in there, that we'd
> have to remove later on again.
Ok, I filled a bug report
https://bugzilla.redhat.com/show_bug.cgi?id=693253
I realize that Fedora kernel folks wont be happy about it but it's
always worth a try :)
>
> Lennart
>
> --
> Lennart Poettering - Red Hat, Inc.
>
--
Best regards,
Michal
http://eventhorizon.pl/
13 years, 1 month
Re: [systemd-devel] /run DoS
by Michał Piotrowski
2011/4/3 Kay Sievers <kay.sievers(a)vrfy.org>:
> 2011/4/3 Lennart Poettering <mzerqung(a)0pointer.de>:
>> On Sun, 03.04.11 23:28, Michał Piotrowski (mkkp4x4(a)gmail.com) wrote:
>>
>>> > But for /dev/shm I see no quick fix... do you?
>>>
>>> Unfortunately not. No one foresaw that quota support on tmpfs will
>>> someday be useful :)
>>>
>>> >
>>> > I think we should fix either both or should wait for the proper fix by
>>> > the kernel.
>>>
>>> Can you temporarily fix one?
>>
>> Well, of course we could.
>>
>> But, think about it, what does this help? The vulnerability doesn't go
>> away by doing this, and we'd have a temporary hack in there, that we'd
>> have to remove later on again.
>
> Systems who might run into problems with /dev/shm, can just add limits
> to /etc/fstab, and systemd will re-mount it and apply them.
>
> There should really be a _proper_ solution some day, be it quota or
> something else. We have way too many /tmp-like dirs, where users can
> just leave their crap behind and cause problems. This is really
> nothing new with systemd.
I'm not saying that systemd is guilty of anything here :) Introduction
of /run dir just introduced yet another problem that can be used by
malicious users. I know that the most appropriate solution would be to
fix tmpfs but before it happens this problem can be used many times to
piss off admins and other system users.
>
> Kay
>
--
Best regards,
Michal
http://eventhorizon.pl/
13 years, 1 month
Re: [systemd-devel] /run DoS
by Michał Piotrowski
W dniu 3 kwietnia 2011 23:14 użytkownik Lennart Poettering
<mzerqung(a)0pointer.de> napisał:
> On Sun, 03.04.11 23:05, Michał Piotrowski (mkkp4x4(a)gmail.com) wrote:
>
>>
>> W dniu 3 kwietnia 2011 22:39 użytkownik Lennart Poettering
>> <mzerqung(a)0pointer.de> napisał:
>> > On Sun, 03.04.11 13:54, Lennart Poettering (mzerqung(a)0pointer.de) wrote:
>> >
>> >> On Sun, 03.04.11 13:10, Michał Piotrowski (mkkp4x4(a)gmail.com) wrote:
>> >>
>> >> > Hi,
>> >> >
>> >> > I can write to /run/user/michal in this way I can fill the entire free
>> >> > tmpfs space which is not good from my POV.
>> >>
>> >> Yupp, this is trivially fixable by placing another tmpfs on /run/user,
>> >> which can be done by installing a run-user.mount unit.
>> >>
>> >> We considered doing so by default, but stepped back a little, since we
>> >> didn't want to add another tmpfs to the mix, just like that. But yeah,
>> >> we probably should do that.
>> >
>> > We have the same vulnerability on /dev/shm btw.
>> >
>> > For now Kay and I are leaning to leaving things as they are for now, and
>> > count on that the kernel folks add quota support to tmpfs one day, since
>> > that appears the correct fix.
>>
>> Of course it will be the best solution. But I doubt it will happen in
>> a next few weeks - so some temporary workaround for F15 would be
>> appreciated. It seems to me that this is a too serious problem to
>> release F15 without fixing/workarounding it somehow.
>
> Well, /run/user can be fixed trivially, just by adding a separate tmpfs
> for it.
As I said - I think that this will be best solution for now.
> But for /dev/shm I see no quick fix... do you?
Unfortunately not. No one foresaw that quota support on tmpfs will
someday be useful :)
>
> I think we should fix either both or should wait for the proper fix by
> the kernel.
Can you temporarily fix one?
>
> Lennart
>
> --
> Lennart Poettering - Red Hat, Inc.
>
--
Best regards,
Michal
http://eventhorizon.pl/
13 years, 1 month
Re: [systemd-devel] /run DoS
by Michał Piotrowski
W dniu 3 kwietnia 2011 22:39 użytkownik Lennart Poettering
<mzerqung(a)0pointer.de> napisał:
> On Sun, 03.04.11 13:54, Lennart Poettering (mzerqung(a)0pointer.de) wrote:
>
>> On Sun, 03.04.11 13:10, Michał Piotrowski (mkkp4x4(a)gmail.com) wrote:
>>
>> > Hi,
>> >
>> > I can write to /run/user/michal in this way I can fill the entire free
>> > tmpfs space which is not good from my POV.
>>
>> Yupp, this is trivially fixable by placing another tmpfs on /run/user,
>> which can be done by installing a run-user.mount unit.
>>
>> We considered doing so by default, but stepped back a little, since we
>> didn't want to add another tmpfs to the mix, just like that. But yeah,
>> we probably should do that.
>
> We have the same vulnerability on /dev/shm btw.
>
> For now Kay and I are leaning to leaving things as they are for now, and
> count on that the kernel folks add quota support to tmpfs one day, since
> that appears the correct fix.
Of course it will be the best solution. But I doubt it will happen in
a next few weeks - so some temporary workaround for F15 would be
appreciated. It seems to me that this is a too serious problem to
release F15 without fixing/workarounding it somehow.
>
> Lennart
>
> --
> Lennart Poettering - Red Hat, Inc.
>
--
Best regards,
Michal
http://eventhorizon.pl/
13 years, 1 month
Re: [systemd-devel] /run DoS
by Michał Piotrowski
W dniu 3 kwietnia 2011 12:54 użytkownik Lennart Poettering
<mzerqung(a)0pointer.de> napisał:
> On Sun, 03.04.11 13:10, Michał Piotrowski (mkkp4x4(a)gmail.com) wrote:
>
>> Hi,
>>
>> I can write to /run/user/michal in this way I can fill the entire free
>> tmpfs space which is not good from my POV.
>
> Yupp, this is trivially fixable by placing another tmpfs on /run/user,
> which can be done by installing a run-user.mount unit.
>
> We considered doing so by default, but stepped back a little, since we
> didn't want to add another tmpfs to the mix, just like that. But yeah,
> we probably should do that.
I see no other way out here because tmpfs does not support quota.
BTW. There still be a possibility to deadlock machine if you have a
not limited /tmp on tmpfs. By default tmpfs can use a half of system
memory size, so if you got a two user writable tmpfs file systems you
can try to deadlock system.
>
> Lennart
>
> --
> Lennart Poettering - Red Hat, Inc.
>
--
Best regards,
Michal
http://eventhorizon.pl/
13 years, 1 month
