[arch-general] [pacman-dev] Privilege separation in the pacman downloader (Was: Pacman Database Signatures)

2020-02-04 Thread Eli Schwartz via arch-general
On 2/2/20 4:59 PM, Christopher W. via arch-general wrote: > Right now, pacman is taking untrusted input from the internet as root. > That's very bad. Most of the comments I've seen say that an attacker > could hold back vulnerable packages, but this is assuming the attacker > does not have bigger p

Re: [arch-general] Pacman Database Signatures

2020-02-04 Thread Eli Schwartz via arch-general
On 2/2/20 4:59 PM, Christopher W. via arch-general wrote: > Hi. The wiki states that database signatures for pacman are currently > a work in progress. It's been that way for a long time, so I assume > there is no "progress" happening. What is currently in the way of this > much-needed security fea

Re: [arch-general] Packages "jami-gnome" and "libjamiclient" out of date

2020-02-04 Thread Friedrich Strohmaier
Hi Bruno, *, happy to see You are alive ;o)) Am 03.02.20 um 01:39 schrieb Archange via arch-general: > Hi, > Le 3 février 2020 00:58:02 GMT+01:00, Friedrich Strohmaier > a écrit : [..] >> I retrieved the maintainers (Bruno Pagani) mail adress from this mailinglist. >> I suspect the mails didn

Re: [arch-general] 5.5 kernel - Latest virtualbox testcase build for 5.2.37 fails to start Arch guest on Arch host

2020-02-04 Thread David C. Rankin
On 02/04/2020 12:42 PM, David C. Rankin wrote: > On 02/04/2020 04:18 AM, David C. Rankin wrote: >> lAll, >> >> After update to 5.5 kernel and rebuild of virtualbox from the 5.2.36 and >> the >> latest testcase build for 5.2.37 (all kernel modules build and load fine) >> >> https://www.virtualbox

Re: [arch-general] 5.5 kernel - Latest virtualbox testcase build for 5.2.37 fails to start Arch guest on Arch host

2020-02-04 Thread David C. Rankin
On 02/04/2020 04:18 AM, David C. Rankin wrote: > lAll, > > After update to 5.5 kernel and rebuild of virtualbox from the 5.2.36 and the > latest testcase build for 5.2.37 (all kernel modules build and load fine) > > https://www.virtualbox.org/download/testcase/VirtualBox-5.2.37-135942-Linux_amd

[arch-general] 5.5 kernel - Latest virtualbox testcase build for 5.2.37 fails to start Arch guest on Arch host

2020-02-04 Thread David C. Rankin
lAll, After update to 5.5 kernel and rebuild of virtualbox from the 5.2.36 and the latest testcase build for 5.2.37 (all kernel modules build and load fine) https://www.virtualbox.org/download/testcase/VirtualBox-5.2.37-135942-Linux_amd64.run Arch guests fail to run on Arch host. network devic

Re: [arch-general] omega won't build

2020-02-04 Thread Jude DaShiell
Correction, it was the ncurses-5-compat package with the missing gpg key not ncurses-6. I found that out by ignoring all gpg checks and the other thing with pikaur is it didn't keep the gpg key that was unknown on the screen long enough for me to check with gpg2 and possibly import it. --