August 2011 - Arch-dev-public - lists.archlinux.org

[arch-dev-public] Archweb login cookies are now secure-only
by Dan McGee 23 Aug '11

23 Aug '11

I switched cookies in the developer interface to be secure-only as of this morning. This means you won't see any of the developer stuff if you are viewing the site over plain HTTP once your existing cookie expires. You will be redirected to HTTPS if you are required to log in, but devs/TUs may not see the links they are used to if you are not viewing over a secure connection. -Dan

1 0

[arch-dev-public] [signoff] isl-0.07-1, cloog-0.16.3-1, gcc-4.6.1-4
by Allan McRae 23 Aug '11

23 Aug '11

This is going to hit [testing] as soon as gcc-multilib gets a rebuild so the signoff thread is slightly early... isl-0.07-1 - upstream update, soname bump cloog-0.16.3-1 - upstream compatibility update for isl bump - has its own soname bump... gcc-4.6.1-4 - new upstream snapshot from 4.6 branch (there are some nice bug fixes on the way to the 4.6.2 release) - libstdc++ man page update - disable libssp building - it is not needed on glibc systems The only other package requiring rebuild for the isl/cloog soname bumps is gcc-multilib. @heftig: I am leaving that to you. Can you move isl/cloog/gcc from [staging] to [testing] once you are done? The only package require rebuilt for removing libssp is avahi and I have put that in [testing] now. Allan

2 1

[arch-dev-public] [signoff] fakeroot-1.17-1
by Allan McRae 22 Aug '11

22 Aug '11

Minor upstream bug fix release. Signoff both, Allan

3 2

[arch-dev-public] [isgnoff] linux-firmware-20110822-1
by Tobias Powalowski 22 Aug '11

22 Aug '11

Hi, bumped to new intel wireless firmware. greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

1 0

[arch-dev-public] [signoff] lvm2/device-mapper 2.02.88-1
by Eric Bélanger 22 Aug '11

22 Aug '11

Hi, lvm2/device-mapper 2.02.88-1 are in testing for upstream update. Please test and signoff. Eric

2 2

Re: [arch-dev-public] [arch-general] gnutls 3.0.0 pushed to testing
by Allan McRae 21 Aug '11

21 Aug '11

On 21/08/11 18:50, Andreas Radke wrote: > I'm running into similar issue running now valgrind tests when building > gnutls. The gnutls upstream developer says it's probably a bug in > glibc headers breaking memcpy. > See also this Debian report mentioned in the gnutls bug: > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=619963 That bug report seems to be only with gcc-4.6 and (e)glibc < 2.13 so does not seem relevant to us. Other than that, I have no idea what the context of this message as you did not quote anything, so can not look into the issue further... Does it get fixed with gnutls-3.0.1 which I note was released 12 hours ago? Allan

1 0

[arch-dev-public] New CFLAGS/LDFLAGS plus complete toolchain rebuild
by Allan McRae 21 Aug '11

21 Aug '11

This has been discussed a couple of times previously on the mailing lists and there were no objections so I have finally gotten around to adding some hardening options to our CFLAGS/LDFLAGS. With pacman-3.5.4-4 the defaults in makepkg.conf become: CFLAGS="-march=i686 -mtune=generic -O2 -pipe -fstack-protector --param=ssp-buffer-size=4 -D_FORTIFY_SOURCE=2" LDFLAGS="-Wl,-O1,--sort-common,--as-needed,-z,relro,--hash-style=gnu" As discussed previously, the addition of -Wl,-O1,--sort-common to LDFLAGS is not hardening... but these are safe options and they do appear to more than counter the slight overhead that stack smashing protection adds. These are all fairly standard flags being used to build the major distros these days (other distros patch their toolchain to make these the default), so there should be few issues. Probably the only thing to watch out for is to disable them when building bootloaders. The toolchain and all its (real) dependencies has been rebuilt with these flags and the necessary adjustments made to the packages. See notes below: All toolchain dependencies (just rebuilds): cloog-0.16.2-2 gmp-5.0.2-3 isl-0.06-2 libmpc-0.9-2 mpfr-3.0.1.p4-2 ppl-0.11.2-2 zlib-1.2.5-4 Toolchain components: linux-api-headers-3.0.1-1 (upstream update) binutils-2.21.1-2 gcc{,-libs}-4.6.1-3 (do not build libssp with hardening flags) glibc-2.14-5 (do not build libraries with hardening flags) I intend to leave this in [testing] for a couple of weeks to make sure there are no issues. I have been running this locally for about a week and am fairly sure I have the kinks worked out now... I will call for the sign-off later. Allan

7 10

[arch-dev-public] [signoff] usbutils-004-1
by Tobias Powalowski 20 Aug '11

20 Aug '11

Hi guys, latest upstream release, please signoff both arches greetings tpowa -- Tobias Powalowski Archlinux Developer & Package Maintainer (tpowa) http://www.archlinux.org tpowa(a)archlinux.org

3 2

[arch-dev-public] [signoff] sudo-1.8.2-1
by Allan McRae 20 Aug '11

20 Aug '11

Upstream update. Big changelog below. I have been running the various RCs (12 of them!) without issue for a while. Signoff both, Allan What's new in Sudo 1.8.2? * Sudo, visudo, sudoreplay and the sudoers plug-in now have natural language support (NLS). This can be disabled by passing configure the --disable-nls option. Sudo will use gettext(), if available, to display translated messages. All translations are coordinated via The Translation Project, http://translationproject.org/. * Plug-ins are now loaded with the RTLD_GLOBAL flag instead of RTLD_LOCAL. This fixes missing symbol problems in PAM modules on certain platforms, such as FreeBSD and SuSE Linux Enterprise. * I/O logging is now supported for commands run in background mode (using sudo's -b flag). * Group ownership of the sudoers file is now only enforced when the file mode on sudoers allows group readability or writability. * Visudo now checks the contents of an alias and warns about cycles when the alias is expanded. * If the user specifes a group via sudo's -g option that matches the target user's group in the password database, it is now allowed even if no groups are present in the Runas_Spec. * The sudo Makefiles now have more complete dependencies which are automatically generated instead of being maintained manually. * The "use_pty" sudoers option is now correctly passed back to the sudo front end. This was missing in previous versions of sudo 1.8 which prevented "use_pty" from being honored. * "sudo -i command" now works correctly with the bash version 2.0 and higher. Previously, the .bash_profile would not be sourced prior to running the command unless bash was built with NON_INTERACTIVE_LOGIN_SHELLS defined. * When matching groups in the sudoers file, sudo will now match based on the name of the group instead of the group ID. This can substantially reduce the number of group lookups for sudoers files that contain a large number of groups. * Multi-factor authentication is now supported on AIX. * Added support for non-RFC 4517 compliant LDAP servers that require that seconds be present in a timestamp, such as Tivoli Directory Server. * If the group vector is to be preserved, the PATH search for the command is now done with the user's original group vector. * For LDAP-based sudoers, the "runas_default" sudoOption now works properly in a sudoRole that contains a sudoCommand. * Spaces in command line arguments for "sudo -s" and "sudo -i" are now escaped with a backslash when checking the security policy.

4 3

[arch-dev-public] Integrity Check x86_64: core, extra, community, multilib 19-08-2011
by repomaint＠archlinux.org 19 Aug '11

19 Aug '11

Warning : the repository multilib does not exist in /srv/abs/rsync/any =========================================================== = Integrity Check x86_64 of core,extra,community,multilib = =========================================================== Performing integrity checks... ==> parsing pkgbuilds ==> parsing db files ==> checking mismatches ==> checking archs ==> checking dependencies ==> checking makedepends ==> checking hierarchy ==> checking for circular dependencies ==> checking for differences between db files and pkgbuilds Missing PKGBUILDs ------------------- /srv/abs/rsync/any/multilib Missing Dependencies ---------------------- extra/mail-notification --> 'cyrus-sasl-plugins' Missing Makedepends --------------------- community/darcs --> 'haskell-hashed-storage<0.6' extra/alex --> 'ghc=7.0.2' extra/cabal-install --> 'ghc=7.0.2' extra/happy --> 'ghc=7.0.2' Repo Hierarchy for Dependencies --------------------------------- extra/archboot depends on community/squashfs-tools (0 extra (make)deps to pull) extra/gnucash depends on community/aqbanking (4 extra (make)deps to pull : gwenhywfar ktoblzcheck docbook2x perl-sgmls) extra/gnucash depends on community/libdbi-drivers (4 extra (make)deps to pull : libdbi sqlite2 docbook2x perl-sgmls) extra/mod_perl depends on community/perl-linux-pid (2 extra (make)deps to pull : docbook2x perl-sgmls) Repo Hierarchy for Makedepends -------------------------------- community/virtualbox depends on multilib/gcc-multilib (6 extra (make)deps to pull : gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc gcc-multilib lib32-gcc-libs) community/virtualbox depends on multilib/lib32-glibc (6 extra (make)deps to pull : gcc-multilib gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc lib32-gcc-libs) community/virtualbox-archlinux-additions depends on multilib/gcc-multilib (6 extra (make)deps to pull : gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc gcc-multilib lib32-gcc-libs) community/virtualbox-archlinux-additions depends on multilib/lib32-glibc (6 extra (make)deps to pull : gcc-multilib gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc lib32-gcc-libs) community/virtualbox-archlinux-modules depends on multilib/gcc-multilib (6 extra (make)deps to pull : gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc gcc-multilib lib32-gcc-libs) community/virtualbox-archlinux-modules depends on multilib/lib32-glibc (6 extra (make)deps to pull : gcc-multilib gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc lib32-gcc-libs) community/virtualbox-sdk depends on multilib/gcc-multilib (6 extra (make)deps to pull : gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc gcc-multilib lib32-gcc-libs) community/virtualbox-sdk depends on multilib/lib32-glibc (6 extra (make)deps to pull : gcc-multilib gcc-libs-multilib binutils-multilib gcc-ada-multilib lib32-glibc lib32-gcc-libs) core/ca-certificates depends on extra/python2 (168 extra (make)deps to pull) core/crda depends on extra/python-m2crypto (169 extra (make)deps to pull) core/dbus-core depends on extra/libx11 (168 extra (make)deps to pull) core/e2fsprogs depends on extra/bc (0 extra (make)deps to pull) core/glib2 depends on extra/python2 (168 extra (make)deps to pull) core/groff depends on extra/ghostscript (168 extra (make)deps to pull) core/groff depends on extra/netpbm (168 extra (make)deps to pull) core/groff depends on extra/psutils (168 extra (make)deps to pull) core/libsasl depends on extra/libmysqlclient (168 extra (make)deps to pull) core/libsasl depends on extra/postgresql-libs (168 extra (make)deps to pull) core/lilo depends on extra/sharutils (168 extra (make)deps to pull) core/links depends on extra/libpng (0 extra (make)deps to pull) core/links depends on extra/libtiff (168 extra (make)deps to pull) core/links depends on extra/libxt (168 extra (make)deps to pull) core/linux depends on extra/docbook-xsl (168 extra (make)deps to pull) core/linux depends on extra/xmlto (168 extra (make)deps to pull) core/linux-docs depends on extra/docbook-xsl (168 extra (make)deps to pull) core/linux-docs depends on extra/xmlto (168 extra (make)deps to pull) core/linux-headers depends on extra/docbook-xsl (168 extra (make)deps to pull) core/linux-headers depends on extra/xmlto (168 extra (make)deps to pull) core/module-init-tools depends on community/docbook2x (168 extra (make)deps to pull) core/pam depends on extra/docbook-xml (168 extra (make)deps to pull) core/pam depends on extra/docbook-xsl (168 extra (make)deps to pull) core/pam depends on extra/w3m (168 extra (make)deps to pull) core/sqlite3 depends on extra/tcl (0 extra (make)deps to pull) core/sqlite3-doc depends on extra/tcl (0 extra (make)deps to pull) core/sqlite3-tcl depends on extra/tcl (0 extra (make)deps to pull) core/syslinux depends on extra/nasm (168 extra (make)deps to pull) core/udev depends on extra/gobject-introspection (168 extra (make)deps to pull) core/udev depends on extra/gperf (0 extra (make)deps to pull) core/udev depends on extra/libxslt (168 extra (make)deps to pull) core/udev-compat depends on extra/gobject-introspection (168 extra (make)deps to pull) core/udev-compat depends on extra/gperf (0 extra (make)deps to pull) core/udev-compat depends on extra/libxslt (168 extra (make)deps to pull) extra/ardour depends on community/cwiid (2 extra (make)deps to pull : docbook2x perl-sgmls) extra/audacious-plugins depends on community/jack2 (4 extra (make)deps to pull : celt docbook2x perl-sgmls celt-0.7) extra/audacious-plugins depends on community/oss (2 extra (make)deps to pull : docbook2x perl-sgmls) extra/bigloo depends on community/jdk (3 extra (make)deps to pull : jre docbook2x perl-sgmls) extra/frozen-bubble depends on community/perl-file-slurp (2 extra (make)deps to pull : docbook2x perl-sgmls) extra/frozen-bubble depends on community/perl-locale-maketext-lexicon (2 extra (make)deps to pull : docbook2x perl-sgmls) extra/gnome-speech depends on community/espeak (4 extra (make)deps to pull : portaudio celt-0.7 docbook2x perl-sgmls) extra/grml-zsh-config depends on community/txt2tags (2 extra (make)deps to pull : docbook2x perl-sgmls) extra/jack depends on community/celt-0.7 (0 extra (make)deps to pull) extra/java-commons-daemon depends on community/docbook2x (2 extra (make)deps to pull : perl-sgmls docbook2x) extra/java-jsvc depends on community/docbook2x (2 extra (make)deps to pull : perl-sgmls docbook2x) extra/libiodbc depends on community/chrpath (0 extra (make)deps to pull) extra/libsmbios depends on community/chrpath (0 extra (make)deps to pull) extra/speech-dispatcher depends on community/espeak (4 extra (make)deps to pull : portaudio celt-0.7 docbook2x perl-sgmls) extra/telepathy-salut depends on community/xmldiff (2 extra (make)deps to pull : docbook2x perl-sgmls) extra/vigra depends on community/python-sphinx (4 extra (make)deps to pull : python2-pygments python2-jinja docbook2x perl-sgmls) extra/xfconf depends on community/chrpath (0 extra (make)deps to pull) Packages found in db, but not in tree --------------------------------------- community/unhide Summary --------- Missing PKGBUILDs: 1 Invalid PKGBUILDs: 0 Mismatching PKGBUILD names: 0 Duplicate PKGBUILDs: 0 Invalid archs: 0 Missing (make)dependencies: 5 Repo hierarchy problems: 63 Circular dependencies: 0 In db, but not in tree: 1 In tree, but not in db: 0

1 0