Fedora Weekly News 253
pcalarco at nd.edu
Thu Nov 25 16:21:19 UTC 2010
* 1 Fedora Weekly News Issue 253
o 1.1 Announcements
+ 1.1.1 Fedora Announcement News
# 184.108.40.206 Appointment to the Fedora Board
+ 1.1.2 Fedora Development News
# 220.127.116.11 Moving /var/run and /var/lock to tmpfs in Rawhide
# 18.104.22.168 Fedora Board, FESCo & FAmSCo Elections - Voting Information
# 22.214.171.124 Fedora Board Election IRC Town Hall transcript
# 126.96.36.199 FESCo Election IRC Town Hall Transcript
+ 1.1.3 Fedora Events
# 188.8.131.52 Upcoming Events (Sept 2010 - November 2010)
# 184.108.40.206 Past Events
# 220.127.116.11 Additional information
o 1.2 Marketing
o 1.3 Fedora In the News
+ 1.3.1 Fedora 14 aka Laughlin Review (muktware)
+ 1.3.2 Run Applications in Secure Sandboxes with SELinux (Linux.com)
+ 1.3.3 Fedora 14: Strong follow-up to 13 still suffers from same niche appeal (Linux In Exile)
+ 1.3.4 Fuduntu Is A Fedora 14 Remix For Netbooks And Laptops (webupd8.org)
+ 1.3.5 openrespect.org sorgt für Uneinigkeit (Pro-Linux.de Germany)
+ 1.3.6 Spotlight on Linux: Fedora 14 (Linux Journal)
o 1.4 Ambassadors
+ 1.4.1 Welcome New Ambassadors
+ 1.4.2 Summary of traffic on Ambassadors mailing list
+ 1.4.3 Summary of traffic on FAmSCo mailing list
o 1.5 Security Advisories
+ 1.5.1 Fedora 14 Security Advisories
+ 1.5.2 Fedora 13 Security Advisories
+ 1.5.3 Fedora 12 Security Advisories
- Fedora Weekly News Issue 253 -
Welcome to Fedora Weekly News Issue 253 for the week ending November 24, 2010. What follows are some highlights from this issue.
In announcements, notice that Toshio Kuratomi has been appointed to the Fedora Board, moving /var/run and /var/lock to tmpfs in Rawhide, and lots of information regarding the various Fedora elections now ongoing.We have six more reposts of articles and blog postings about Fedora in Fedora In the News. In Ambassador news, several news Ambassadors, from the UK, USA, Indonesia and Italy and a summary of list traffic on the Ambassador and FAmSCO lists. In Security Advisories, we bring up current with the latest security-related package releases over the past week for Fedora 12, 13 and 14. Enjoy!
An audio version of some issues of FWN - FAWN - are available! You can listen to existing issues on the Internet Archive. If anyone is interested in helping spread the load of FAWN production, please contact us!
If you are interested in contributing to Fedora Weekly News, please see our 'join' page. We welcome reader feedback: news at lists.fedoraproject.org
FWN Editorial Team: Pascal Calarco, Adam Williamson
-- Announcements --
In this section, we cover announcements from the Fedora Project, including general announcements, development announcements and Events.
Contributing Writer: Pascal Calarco
--- Fedora Announcement News ---
The announcement list is always exclusive for the Fedora Community. Please, visit the past announcements at
---- Appointment to the Fedora Board ----
Jared K. Smith announced:
"The Fedora Board consists of five elected seats and four appointed seats. As part of the normal Board succession process, one Board appointment is made before elections and the other is made after the election cycle.
I'm happy to announce that Toshio Kuratomi has accepted the responsibility of serving on the Fedora Board. Toshio is a great contributor to open source in general, and has been actively collaborating with people throughout the Fedora Project for many years. I have no doubt that he'll work tirelessly to increase the level of trust, transparency, communication, and innovation within the Fedora community. I thank Toshio for his willingness to serve, and I hope the whole Fedora community will join me in welcoming him to the Board.
Toshio will fill seat A2 (see the Board History for a list of the seats), which has been held by Colin Walters. I'd also like to take this opportunity to publicly thank Colin for the work he's done on behalf of the Fedora Board.
Elections for the two open elected seats on the Board (as well as FAmSCo and FESCo elections) will begin on November 20th at UTC 0001, as shown on the Fedora wiki's Elections page. All community members are encouraged to cast their vote until the elections close at the end of the day on November 28th. After the end of elections, another appointment will be made for the remaining Board seat (seat A2).
Jared Smith Fedora Project Leader"
--- Fedora Development News ---
The development list is intended to be a LOW TRAFFIC announce-only list for Fedora development.
Acceptable Types of Announcements
* Policy or process changes that affect developers.
* Infrastructure changes that affect developers.
* Tools changes that affect developers.
* Schedule changes
* Freeze reminders
Unacceptable Types of Announcements
* Periodic automated reports (violates the INFREQUENT rule)
* Anything else not mentioned above
---- Moving /var/run and /var/lock to tmpfs in Rawhide ----
Lennart Poettering announced:
I hereby want to let everybody know that in the next days I will turn on /var/run and /var/lock on tmpfs on Rawhide/F15. This is in accordance with the following accepted F15 feature
My current tests indicate that we will not run into too much trouble with this and most things should continue to work just fine. However, of course I run only a small subset of packages of the fedora archive on my machine. So here's what might happen and which might need fixing over the next weeks in various packages:
* Not all packages might be able to create their directory in /var/run on start-up. Since SUSE and Ubuntu have already been shipping systems with tmpfs on /var/run and /var/lock for quite a while I expect the number of packages that are incapable of doing this to be very small. If your software nonetheless fails with this issue, then there are two options to fix this: a) patch the program in question, so that it is able to recreate the directories in /var/run, or b) ship a simple drop-in file for /etc/tmpfiles.d/ which recreates these directories on boot. (see below)
* There might be permission problems, since the rpms might have set different perms on the subdirs of /var/run than the software itself might apply when starting up. In this case, a drop-in file in /etc/tmpfiles.d/ might help. (see below)
* The SELinux policy might trigger AVCs and disallow creation of the dirs in question. In this case Dan will be of help of course, so make sure to file a bug. And I guess I don't need to mention this but temporarily falling back to permissive mode is a short-term workaround for this.
* In some cases daemons might want to create more than one file/dir below /var/run which are supposed to be labelled differently. In this case the daemon can either be modified to fix its labels up itself, or a drop-in file in /etc/tmpfiles.d/ might help (see below).
* Many .spec files currently own subdirs of /var/run. These need to be updated to %ghost those dirs only, so that the automatic removal of these files/dirs on boot doesnt cause rpm to complain. The list of packages which own such files/subdir you find on the aforementioned feature page. I will mass-file bugs against these packages later tonight, requesting the %ghosting of these entries. For more information on the %ghost directive in .spec files see this page
a) Lennart will mass-file bugs regarding %ghost usage tonight
b) Lennart will switch on /var/run and /var/lock on tmpfs either tomorrow or the day after tomorrow
c) YOU need to edit your .spec file and place a %ghost where appropriate.
d) YOU need to test if you package still works, and if necessary file AVC bugs, add an /etc/tmpfiles.d drop-in file to your program, or patch it so that it is able to recreate these directories beneath /var/run on its own.
This is a new feature of systemd, but which is apparently very much liked by people outside of systemd, so this might actually find adoption even on systems which will not adopt systemd any time soon, since it actually is not specific at all to systemd. By dropping a simple configuration file in /etc/tmpfiles.d you can ensure that volatile files and directories are: a) created, deleted or emptied at boot b) their permissions/ownership fixed c) its directory contents cleaned up in regular intervals (a la tmpwatch) and d) it is properly re-labeled at boot.
As an example, here's how such a file might look like for the screen package (name it /etc/tmpfiles.d/screen.conf):
d /var/run/screens 1777 root root 10d
d /var/run/uscreens 0755 root root 10d12h
This encodes that two directories are created under the listed names, with automatic clean up after 10 days resp. 10 days and 12h.
For more details consult the man page
Thank you for your attention!
Lennart Poettering - Red Hat, Inc."
---- Fedora Board, FESCo & FAmSCo Elections - Voting Information ----
Robyn Bergeron announced
The elections for the Fedora Board, Fedora Engineering Steering Committee (FESCo), and the Fedora Ambassadors Steering Committee (FAmSCo) began at 0000 UTC on 20th November 2010, and are scheduled to run until 23:59 UTC on 28th November 2010. (Please refer to a UTC time zone converter if you are unsure of your time zone's relation to UTC.)
All groups have chosen to use the Range Voting method.
Ballots may be cast on the Fedora Elections System. If this is the first time you've used the voting system, please refer to the Fedora Elections Guide.
To read more about the candidates, please refer to each group's nomination pages:
* Fedora Project Board
There is more general information about the election, as well as finding links for reading candidate answers to questionnaires and IRC town hall transcripts.
Please remember to cast your vote!
---- Fedora Board Election IRC Town Hall transcript ----
Toshio Kuratomi announced:
"The Fedora Board Town Hall happened today at 15:00 UTC. The transcript of the townhall is at the following URL:
Thanks to the candidates for answering questions and thanks to all the audience members for the insightful questions.
---- FESCo Election IRC Town Hall Transcript ----
Kyle McMartin announced:
"The IRC logs of the discussion are available
I'll be making an edited transcript available (I'll link it from the wiki) which should be a little easier to read, in the next day or so.
Thanks to our candidates, and to all who attended and submitted questions.
--- Fedora Events ---
Fedora events are the exclusive and source of marketing, learning and meeting all the fellow community people around you. So, please mark your agenda with the following events to consider attending or volunteering near you!
-- Upcoming Events (Sept 2010 - November 2010)
* North America (NA)
* Central & South America (LATAM) 
* Europe, Middle East, and Africa (EMEA)
* India, Asia, Australia (India/APJ)
---- Past Events ----
Archive of Past Fedora Events
---- Additional information ----
* Reimbursements -- reimbursement guidelines.
* Budget -- budget for the current quarter (as distributed by FAMSCo).
* Sponsorship -- how decisions are made to subsidize travel by community members.
* Organization -- event organization, budget information, and regional responsibility.
* Event reports -- guidelines and suggestions.
* LinuxEvents -- a collection of calendars of Linux events.
-- Marketing --
In this section, we cover the happenings for Fedora Marketing Project from 2010-11-17 to 2010-11-23.
Contributing Writer: Neville A. Cross
Robyn Bergeron announced that the press archive is now up to date.
The Marketing Team did not meet this past week.
-- Fedora In the News --
In this section, we cover news from the trade press and elsewhere that is re-posted to the Fedora Marketing list
Contributing Writer: Pascal Calarco
--- Fedora 14 aka Laughlin Review (muktware) ---
Rahul Sundaram forwarded another review of Fedora 14, which sums up their experience with:
"Fedora 14 is a good distribution. Parts of it may not be for the inexperienced, such as partitioning disk drives. It may also require more knowledge and understanding to add multimedia functionality to the system, but once everything is set up, the user is generally good to go"
The full article is available.
--- Run Applications in Secure Sandboxes with SELinux (Linux.com) ---
Rahul Sundaram forwarded an article in Linux.com about SELinux's sandbox approach to application security:
"SELinux runs a Firefox in a restricted session that doesn't have access to rest of the system. That includes the X session. Firefox will run in a nested X server (Xephyr), and you won't be able to even copy & paste from or to the Firefox session and other apps. /But/, it also means that Firefox is totally restricted from reading any other files on your system and that malicious Web pages or attacks on plugins like Flash are sandboxed as well."
The full article is available
--- Fedora 14: Strong follow-up to 13 still suffers from same niche appeal (Linux In Exile) ---
Rahul Sundaram forwarded another blog review of Fedora 14:
"Don't get me wrong, Fedora 14 is a great installation in the Fedora time line. It builds upon the strengths of Fedora 13. My biggest problem is in what was left out. It is my belief that ALL Linux distributions (the exception being the likes of Puppy Linux and other small to tiny distributions - as well as rescue distributions) should ship with all the tools necessary to get to work out-of-the-box (on top of the standard and system tools)."
The full post is available
--- Fuduntu Is A Fedora 14 Remix For Netbooks And Laptops (webupd8.org) ---
Rahul Sundaram forwarded announcement of a new Fedora 14 remix for Asus Eee netbooks:
"Fuduntu is a Fedora 14 remix (remaster) designed especially for Asus Eee (but you can of course use it on other netbooks and any laptop/desktop computer) and comes with some interesting performance tweaks by default. It was created by Fewt, the Jupiter (an hardware and power management applet for netbooks and Laptops) developer"
The full post is available
--- openrespect.org sorgt für Uneinigkeit (Pro-Linux.de Germany) ---
Henryk Heigl forwarded another posting on openrespect in which he provides some rough English translation:
"Originally the declaration should be carried by several projects together. This can be inferred anyhow to minutes of the last meeting of the Fedora executive committee. The Fedora executive committee appeared surprised that Bacon finally published its own version of the text despite the original offer to co-operation, and decided, not to support these. Individual members of the executive committee saw in the text a transparent attempt, criticism at Canonical, to the company behind Ubuntu to repel. Also the question, whether the text falsely equates politeness with respect, was raised."
The full post, in German, is available
--- Spotlight on Linux: Fedora 14 (Linux Journal) ---
Rahul Sundaram forwarded Linux Journal coverage of Fedora 14:
"One of the determining factors in the popularity of distributions is the size of their community. That puts Fedora near the top of the list.
Another advantage is the level of quality found throughout the distribution. Fedora developers contribute not only to Fedora, but also to upstream projects, and cherish the highest standards of quality control. Bugs are everywhere in code and Fedora is no exception, but Fedora developers seem to rise just a bit higher than some other distributions."
The full post is available
-- Ambassadors --
This section covers the news surrounding the Fedora Ambassadors Project.
Contributing Writer: Sankarshan Mukhopadhyay
--- Welcome New Ambassadors ---
This week the Fedora Ambassadors Project had a couple of new members joining.
https://fedoraproject.org/wiki/User:Renault from France mentored by Mathieu Bridon
Miles Kjeller from the United Kingdom mentored by Paul Mellors
Xavier from the USA mentored by Larry Cafiero
Arif from Indonesia mentored by Caius C. Chance
Francesco (zerodev) D'Aluisio from Italy mentored by Robert Scheck
--- Summary of traffic on Ambassadors mailing list ---
David Ramsey informed  about Fedora pulling ahead of Ubuntu in rankings . Christoph Wickert explained  that it was possible due to the Fedora 14 release within the timeframe of the past month. The thread  had some further conversations around the focus of Fedora and Ubuntu and the general perceptions.
Heherson Pagcaliwagan informed  about the meeting for Fedora Ambassadors in the APAC region on 2010-11-21 at 0300 UTC. The proposed agenda  was also posted
Marcus Moeller invited  all those who live nearby or, liked to travel to join the LinuxDay 2010 at Dornbirn, Austria
Christoph Wickert informed  the Ambassadors about the second FAmSCo Election IRC Townhall scheduled for 2010-11-19 at 1000 UTC. The logs to the first townhall were also referenced  Susmit Shannigrahi provided  the list of the questions asked in the first meeting to ensure that the candidates are asked similar questions. However, as Christoph was unable to moderate the meeting  as he would be traveling he called for volunteers and provided the scope of duties
Harish Pillay provided details  about Fedora 14 Launch in Singapore on 2010-11-29
Ryan Rix posted  minutes and logs of the FAmSCo Townhall meeting
Larry Cafiero posted a query  around an issue raised at the second FAmSCo Townhall pertaining to "upgrade ambassadors to superambassadors" The following thread  had clarifications from Caius 'kaio' Chance and others about the proposal and objective
Abdel G. Martínez L invited all  to be part of FUDCon Panama 2011 
Buddhika Kurera proposed  a T-shirt design  for Ambassadors in APAC. Matthias Kranz pointed to the existing page on a similar issue  and Mathieu Bridon asked about the possibility of reusing the design that is used in EMEA  The thread  has more discussion about designs and other possibilities of "Ambassador wear"
Joerg Simon posted  Meeting Minutes  from FAD EMEA 2010 at Rheinfelden along with a few photographs 
Caius 'kaio' Chance asked  whether the Meetup at Beijing on 2010-11-14  could be called a FAD
Robyn Bergeron posted  Voting Information about the Fedora Board, FESCo and FAmSCo elections
--- Summary of traffic on FAmSCo mailing list ---
Joerg Simon informed  that the FAmSCo meeting for 2010-11-22 was adjourned. There was some informal conversation
-- Security Advisories --
In this section, we cover Security Advisories from fedora-package-announce.
Contributing Writer: Pascal Calarco
--- Fedora 14 Security Advisories ---
* suricata-1.0.2-1.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051220.html
* openssl-1.0.0b-1.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051170.html
* systemtap-1.3-3.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051115.html
* libtlen-0-0.10.20060309.fc14 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051367.html
--- Fedora 13 Security Advisories ---
* libtlen-0-0.10.20060309.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051247.html
* openssl-1.0.0b-1.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051237.html
* freetype-2.3.11-7.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051231.html
* mingw32-OpenSceneGraph-2.8.2-3.fc13 -http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051198.html
* systemtap-1.3-3.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051127.html
* cups-1.4.4-11.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051301.html
* dhcp-4.1.1-27.P1.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051287.html
* clamav-0.96.4-1300.fc13 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.html
--- Fedora 12 Security Advisories ---
* openssl-1.0.0b-1.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051255.html
* freetype-2.3.11-7.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051251.html
* gif2png-2.5.1-1202.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051229.html
* libtlen-0-0.10.20060309.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051228.html
* systemtap-1.3-3.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051122.html
* pam-1.1.1-6.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050991.html
* bzip2-1.0.6-1.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051366.html
* cups-1.4.4-11.fc12 - http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051277.html
- end FWN 253 -
Pascal Calarco, Fedora Ambassador, Indiana, USA
More information about the news