June 2009 - openSUSE Factory - openSUSE Mailing Lists

[opensuse-factory] "/" and include .h files
by Donn Washburn 20 Jun '09

20 Jun '09

Hey Strange Happening Seekers; I hope this is the correct list to ask. SuSE 11.2 off a DVD.iso upgraded by "zypper upgrade" or "zypper dup" Running in runlevel 3. I have noticed that something is writing header files in "/" or root directory. Last night I removed all of the blue basic / directory files.h, files .o and transactions.db leaving all of the blue Linux/UNIX root directories. What is dumping these files.h into the / directory? Furthermore, "locate mediamode.h is not found based on a earlier "upadtedb" locate index. That implies something created them not just moved them. Erased/cleared last night around 11 PM CST and this AM around 7 AM. "ls /" showed abstractaudiooutput.h home phonondefs.h abstractaudiooutput_p.h i586-suse-linux phonondefs_p.h abstractmediastream.h lib phonon_export.h abstractvideooutput.h lost+found proc abstractvideooutput_p.h media qsettingsgroup_p.h backendinterface.h medianodedestructionhandler_p.h root bin mediamode.h sbin boot medianode_p.h srv crti.o mediasource.h sys crtn.o mediasource_p.h tmp dev mnt transactions.db etc objectdescription.h usr factory_p.h objectdescriptionmodel.h var globalconfig_p.h opt videowidget.h globalstatic_p.h path.h videowidget_p.h -- 73 de Donn Washburn 307 Savoy Street Email:" n5xwb(a)comcast.net " Sugar Land, TX 77478 LL# 1.281.242.3256 Ham Callsign N5XWB HAMs : " n5xwb(a)arrl.net " VoIP via Gizmo: bmw_87kbike / via Skype: n5xwbg BMW MOA #: 4146 - Ambassador " http://counter.li.org " #279316 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

3 3

[opensuse-factory] Openffice 3.1.0 problems
by Peter Nikolic 20 Jun '09

20 Jun '09

Hi . I seem to be having some problems with the version of OpenOffice supplied with 11.2Milestone2 (yes i know devel stuff) i can not show Tables in an MS office doc the headers and footnotes are all there just none of the tables . Is this an Opensuse issue or an Openoffice issue ie where does one report it . Pete .

3 4

[opensuse-factory] Security Implications of opening Factory
by Marcus Meissner 19 Jun '09

19 Jun '09

Hi, As you have read, Factory is opening for more Community Contributions. Henne explained it already in his post how this works: Basically several Topic Groups are founded consisting of Packagers who are the reviewers / maintainers of the packages in this group. The Topic Groups maintainers have full authority of what goes in in their part of openSUSE Factory, either maintain packages themselves and review contributions to their group. We will be boostrapping those groups with Novell employees. The groups themselves will then decide whom to accept into their ranks. So for the first time, we will have non-Novell employees submitting packages to openSUSE:Factory without being sourcelevel reviewed before. So what should you be aware in regards of Security of as topic group members? 1. Every single package can disturb / destroy the integrity of the whole openSUSE Factory distribution. (As in "install trojans, rootkits, etc.") Even if a package is not meant to be installed by default or by patterns, by specific RPM magic it could be pulled in into every install. So every package needs to be reviewed! 2. Reviewers have a way more difficult task than Packagers, and more responsibility The new submission model turns a lot of packagers into packager reviewers. As a packager you previously did: - Take a tarball from a known good mirror (e.g. ftp.gnu.org for GNU Hello), or built your tarball from a CVS/SVN/GIT checkout from a known good server. (If possible checking md5/sha1 sums of the tarballs) - built it, reviewed logoutput, did some tests. - submitted it. As a reviewer you however have different stuff to do (besides all usual technical review stuff of course): - Need to review the spec file and the patches for malicious code. Not so hard fortunately, but .spec files give best attack possibilities so every line needs to be reviewed. - Review tarballs for malicious code. Very hard. You get tarballs from an unknown source and have to find out if this is is not infected by backdoors or similar. The submission might say "This is GNU hello-3.1.tar.bz2 from ftp.gnu.org", but you cannot be sure. How to find out? You either trust the submitter, you review the tarball (or its diff) or replace it with a known good one (from the original server). - The security team still reviews all security relevant changes that we previously reviewed, like: * new and largely changed daemons * new and largely changed setuid / setgid binaries * new and largely changed network services * new world writeable directories. So please involve us if you see something matching. 3. Have a look at your projects Buildservice permissions. There are 2 kinds of permissions. Project permissions and package permissions. Check and have an eye on each and every instance of the <person> tags in the different meta files (osc meta prj PROJECT and osc meta pkg PROJECT PACKAGE) because as we stated in 1. a single package an disturb / destroy the integrity of the whole 4. Usernames or E-Mails may look deceiving. Slightly misspelled usernames or e-mails of known good submitters could be used to gain your trust. Cross check. Improvements to user management probably can / need to be done here. 5. Easy thinkable attack scenario is people who behave good for a while, but after some months of doing occasional good submits start submit bad code. This counts more for group members but also for developers submitting regulary to groups. Or a known submitter whose account was hacked. -> Always keep such a thing in the back of your head and watch for behavioural changes. Trust your gut feeling and check twice if in doubt! Likely I forgot stuff ;) Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

8 8

Re: [opensuse-factory] New Package Procedures?
by Henne Vogelsang 19 Jun '09

19 Jun '09

Hi, Stephan Binner wrote: > > now with the "open" Factory and PDB being dead what are the new procedures for > > - Creation of a new (sub-)package? How does it work legal review wise? You just send a submitrequest to openSUSE:Factory and then the review is triggered. > - Renaming of sub-packages? Just changed "%package" in new .spec file? Exactly :) For renaming of packages the OBS people work on a clone request. So rename woud be clone+drop. Henne -- http://www.opensuse.org -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

1 0

[opensuse-factory] New Package Procedures?
by Stephan Binner 19 Jun '09

19 Jun '09

Hello, now with the "open" Factory and PDB being dead what are the new procedures for - Creation of a new (sub-)package? How does it work legal review wise? - Renaming of sub-packages? Just changed "%package" in new .spec file? Bye, Steve -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 1

[opensuse-factory] Czech Packagers Team meeting minutes 2009-06-09
by Michal Vyskocil 19 Jun '09

19 Jun '09

Czech Packagers Team meeting minutes 2009-06-09 =============================================== Present: jmatejek, mhrusecky, mkudlvasr, mseben, nadvornik, pgajdos, prusnak, puzel, sbrabec Minutes: mvyskocil Topics: (1) Pinentry-qt4 in Factory (2) The visit of Markus Rex (3) Status reports (1) Pinentry-qt4 in Factory =========================== puzel have added the pinentry-qt4 to Factory, so ti will be available for openSUSE 11.2. He requests community for testing. (2) Visit of Markus Rex =========================== nadvornik have informed us about upcoming visit of Markus Rex in Prague. He will have the all hands meeting on Monday Jun 22th. (3) Status reports ================== mhrusecky: - working on registration of various sblim packages with tog-pegasus - working on update of MySQL <inovation> - investigating possibilities how to implement feature #306411 </inovation> mkudlvasr: * yast2-gtk and yast2-gtk-pkg now building in YaST:Head * updating packages (lftp, ...) mseben: amanda : closed bnc#467365 : resolved problem with amrecover virtualbox-ose : closed bnc#509094 as fixed : virtualbox crash when it reach boot menu qtractor : moved to factory repo djavulibre : updated to 3.5.22 tuxguitar : working on new package for factory mvyskocil: - ITO: osc build reads and checks the default platform from BS instance - fixed bnc#510016: chinese fonts for Sun Java + merged fontconfig.SuSE.properties in openjdk and Sun Java - work on bnc#494536: marked cacerts and policy files for Sun Java 1.6.0 as %config(noreplace) - fixed bnc#496489: add a samples/ to demo package in sun java - fixed bnc#509430: license issue in netbeans-platform - fixed Factory builds: junitperf and tomcat6 pgajdos: * fixing build of packages prusnak: - adopting GNOME Patches policy as the universal Packaging policy http://en.opensuse.org/Packaging/Patches - created new packages in security:SELinux project: * setroubleshoot, setroubleshoot-plugins - updating packages in games, Contrib projects - trying Opera 10.00beta1 (package in home:prusnak project) puzel: - work on kpartx update feature and corresponding udev rule - Contrib updates: - gparted-0.4.5 - gengetopt-2.22.2 - grsync-0.9.0 - alien-8.76 - fix build failures of some packages in Contrib - Contrib: package vimwiki-plugin - rename pth-devel to libpth-devel to better conform to shlib policy sbrabec: xlock: Update, fixing QA errors, bnc510542. gimp-gap: Update, fixing QA errors, bnc513034. gstreamer-0_10-plugins-good: Security fix bnc510292, CVE-2009-1932. [ITO] Debugging resume of linux-2.6.30 on spitz. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

1 0

[opensuse-factory] isos at 422K
by doiggl＠velocitynet.com.au 18 Jun '09

18 Jun '09

Hello, Some recent ISOs are coming out as 422K. I think that is wrong size or not building properly. Please fix Thanks Glenn http://download.opensuse.org/factory/iso/ openSUSE-GNOME-LiveCD-i586-i686-Build0104-Media.iso 20-May-2009 04:41 422K openSUSE-GNOME-LiveCD-x86_64-Build0104-Media.iso 20-May-2009 04:41 422K openSUSE-KDE4-LiveCD-i586-i686-Build0104-Media.iso 20-May-2009 04:41 422K openSUSE-KDE4-LiveCD-x86_64-Build0104-Media.iso 20-May-2009 04:41 422K openSUSE-NET-i586-Build0103-Media.iso 18-May-2009 15:48 92M openSUSE-NET-i586-Build0104-Media.iso 20-May-2009 04:41 93M openSUSE-NET-x86_64-Build0103-Media.iso 18-May-2009 15:52 118M openSUSE-NET-x86_64-Build0104-Media.iso 20-May-2009 10:17 119M -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 4

Fixing --as-needed packages (was [opensuse-factory] status distribution)
by Cristian Morales Vega 17 Jun '09

17 Jun '09

coolo published a list of packages that fail to build with --as-needed at http://www.suse.de/~coolo/asneeded/ (see Factory ML for details), so I continue this in opensuse-packaging ML so people can say in which packages they are working and so... I take care of alsa-tools (fltk is the problematic package), ami and DirectFB. 2009/6/17 Cristian Rodríguez <crrodriguez(a)opensuse.org>: > While I certainly cannot promise fix all the broken packages, please tell > people to email me or this list if they have doubts about fixing this > problems, this issue has to be sorted out. Fixing fltk I also saw "fltk_gl" isn't linked against GL, so since I'm with it... it this a bug? The ld man says: "The reason that --allow-shlib-undefined is the default is that the shared library being specified at link time may not be the same as the one that is available at load time, so the symbols might actually be resolvable at load time." and the thing is that I don't know too much about openGL, but it's my understanding that there are multiple libraries (with different sonames?) implementing it (nVidia has one, ATI probably other...), I'm correct? If so, is the fltk_gl/openGL a case where it is really correct to allow undefined symbols? -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 1

[opensuse-factory] Important osc version 0.119 release !
by Adrian Schröter 16 Jun '09

16 Jun '09

The new osc version 0.119 is released and available in the openSUSE:Tools project. It comes with a new build script package as well. You will need this version of osc to handle new kinds of requests, which will come soon to api.opensuse.org. So an update is highly recommended. This release has a lot of fixes and new features, but also some argument changes compared to former releases. We decided to do these changes to have a more consistent UI and to avoid conflicts in the future. However, osc always tells you when you use a command in a no longer supported way and points you to the new command. Find a list of changes at the bottom of this mail. Main Features/Bugfixes ====================== osc request: osc now supports multiple kinds of requests (needs OBS version 1.7, api.opensuse.org will get upgraded soon). You can create requests with the following commands: * osc submitrequest (or just "osc sr") * osc submitrequest DESTPRJ [DESTPKG] * osc submitrequest SOURCEPRJ SOURCEPKG DESTPRJ [DESTPKG] * osc deleterequest PROJECT [PACKAGE] * osc changedevelrequest PROJECT PACKAGE DEVEL_PROJECT [DEVEL_PACKAGE] And there is one new command that deals with all kind of requets: * osc request list [-M] [PRJ [PKG]] * osc request log ID * osc request show [-d] [-b] ID * osc request accept [-m TEXT] ID * osc request decline [-m TEXT] ID * osc request revoke [-m TEXT] ID osc build: * Image building now uses the correct pool of packages * plain "osc build" command now picks a correct repository Package tracking has now been enabled by default. That means you can do all kind of local changes in a checked out project with multiple packages and submit them all together in one step. This includes adding new packages or deleting them. You can find a more detailed list, including all smaller changes in the "NEWS" file of the osc package. Command UI changes ================== osc submitreq create -> osc submitreq osc submitreq accept/decline/show/revoke -> osc request accept/... osc submitreq delete -> osc request wipe osc deletepac -> osc delete or osc rdelete osc deleteprj -> osc rdelete osc rlog -> osc log osc rprjresults -> osc prjresults osc rresults -> osc results osc req -> osc api osc rebuildpac -> osc rebuild Download URL ============ http://download.opensuse.org/repositories/openSUSE:Tools/ We plan to make an official update of osc and build for former distros. It will include either this version or the next one. Btw, it is really great that we get more and more contributors to osc lately. This release would not have been possible without the work of mvyskocil, mcihar, dimstar, mmeeks, Ming Xi Wu, MartinMohring, Marcus Huewe, prusnak, lnussel and some person I always forget (sorry in advance ;) ! Go on and make this your tool, only the users know it best ! ;) thanks a lot adrian -- Adrian Schroeter SUSE Linux Products GmbH email: adrian(a)suse.de -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

3 5

[opensuse-factory] Error upgrading LVM-based system (Milestone 2)
by Lukas Ocilka 16 Jun '09

16 Jun '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I failed to upgrade a system with root partition on LVM. I did both online migration (using experimental YaST Wagon [#1]) and standard upgrade using installation media. Both went fine till the first reboot. Initrd seems to be incomplete and doesn't start LVM. I've already reported this issue in bugzilla [#2] but it doesn't seem to be fixed yet. #1 http://svn.opensuse.org/svn/yast/trunk/wagon/ #2 https://bugzilla.novell.com/show_bug.cgi?id=512251 Have a nice day Lukas - -- Lukas Ocilka, YaST Developer (xn--luk-gla45d) - ----------------------------------------------------------------- Ano, ano. Moudry rozkaz. Sam jsem nemel v tech gratulacich jasno. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.11 (GNU/Linux) Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org iD8DBQFKN12oVSqMdRCqTiwRApu9AJ9ztHOCJC+JWY2NXgde6TSU00dD7QCeLhA4 WY2W7Hu4DDtrsCZxIy0A17g= =9RkF -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-factory+help(a)opensuse.org

2 1