[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2012-06-17 23h59 UTC

2012-06-17 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed from the tree, for the week ending 2012-06-17 23h59 UTC. Removals: x11-libs/libPropList2012-06-14 15:45:59 ssuominen app-pda/synce-connector 2012-06-15 09:24:10 ssuominen dev-libs/lib

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Rich Freeman
On Sun, Jun 17, 2012 at 4:30 PM, Florian Philipp wrote: > Am 17.06.2012 20:56, schrieb Sascha Cunz: >> I was under the impression that it should at least help in that scenario. >> OTOH, if it takes a compromised system or physical access to the machine in >> order to manipulate the boot sequence,

Re: [gentoo-dev] About what would be included in EAPI5

2012-06-17 Thread Mike Frysinger
On Saturday 16 June 2012 08:12:13 Ulrich Mueller wrote: > > On Sat, 16 Jun 2012, Pacho Ramos wrote: > > I would like to know if there is some place where things going to be > > included (or proposed to be included) for eapi5 are listed (if such > > place exists). Currently, looks like there is

Re: [gentoo-dev] [pre-GLEP] Optional runtime dependencies via runtime-switchable USE flags

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 21:38:50 +0100 Ciaran McCreesh wrote: > On Sun, 17 Jun 2012 22:31:59 +0200 > Michał Górny wrote: > > A simple solution to a program long-unsolved. In GLEP form. > > > > Both attached and published as a gist: > > > > https://gist.github.com/2945569 > > Do you have an implem

Re: [gentoo-dev] [pre-GLEP] Optional runtime dependencies via runtime-switchable USE flags

2012-06-17 Thread Ciaran McCreesh
On Sun, 17 Jun 2012 22:31:59 +0200 Michał Górny wrote: > A simple solution to a program long-unsolved. In GLEP form. > > Both attached and published as a gist: > > https://gist.github.com/2945569 Do you have an implementation we can play with? -- Ciaran McCreesh signature.asc Description: P

[gentoo-dev] [pre-GLEP] Optional runtime dependencies via runtime-switchable USE flags

2012-06-17 Thread Michał Górny
Hello, A simple solution to a program long-unsolved. In GLEP form. Both attached and published as a gist: https://gist.github.com/2945569 (please note that github doesn't render GLEP headers correctly) -- Best regards, Michał Górny GLEP: XXX Title: Optional runtime dependencies via runtime-sw

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Florian Philipp
Am 17.06.2012 20:56, schrieb Sascha Cunz: > On Sunday, 17. June 2012 20:00:51 Florian Philipp wrote: >> Am 17.06.2012 19:34, schrieb Sascha Cunz: >>> [...] >>> It doesn't. It's just a very long wooden fence; you just didn't find the hole yet. >>> >>> Given the fact that the keys in the BI

Re: [gentoo-dev] UEFI secure boot and Gentoo

2012-06-17 Thread Maxim Kammerer
On Sun, Jun 17, 2012 at 8:03 PM, Greg KH wrote: > Huh?  No, why would a user need to resign the UEFI drivers?  Those > "live" in the BIOS and are only used to get the machine up and running > in UEFI space, before UEFI hands the control off to the bootloader it > has verified is signed with a corr

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Graham Murray
Sascha Cunz writes: > You've said yourself, that "some removable media might not require > signatures" > in order to boot. Well, if that is the case, then isn't this defeating the > whole point of Secure Boot at that stage? Not necessarily. As has been stated previously, secure boot is not in

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Sascha Cunz
On Sunday, 17. June 2012 20:00:51 Florian Philipp wrote: > Am 17.06.2012 19:34, schrieb Sascha Cunz: > > [...] > > > >> It doesn't. It's just a very long wooden fence; you just didn't find > >> the hole yet. > > > > Given the fact that the keys in the BIOS must somehow get there and it > > must >

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Florian Philipp
Am 17.06.2012 19:34, schrieb Sascha Cunz: > [...] > >> It doesn't. It's just a very long wooden fence; you just didn't find >> the hole yet. > > Given the fact that the keys in the BIOS must somehow get there and it must > also be able to update them (how to revoke or add keys else?). > > Unles

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Greg KH
On Sun, Jun 17, 2012 at 07:06:16PM +0200, Michał Górny wrote: > On Sun, 17 Jun 2012 09:55:35 -0700 > Greg KH wrote: > > > On Sun, Jun 17, 2012 at 05:51:04PM +0200, Michał Górny wrote: > > > 2. What happens if, say, your bootloader is compromised? > > > > And how would this happen? Your bootload

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Rich Freeman
On Sun, Jun 17, 2012 at 1:34 PM, Sascha Cunz wrote: > > Given the fact that the keys in the BIOS must somehow get there and it must > also be able to update them (how to revoke or add keys else?). Based on what I've read the keys are stored in flash. The flash module itself is protected. There

[gentoo-dev] Re: spec draft for cross-compile support in future EAPI (EAPI-5)

2012-06-17 Thread Duncan
Thomas Sachau posted on Sun, 17 Jun 2012 14:02:26 +0200 as excerpted: > I suggest you look for a better client to handle the line wrapping > better. ;-) In the meantime, the same file attached with wrapped lines. Thanks. (And I'm actually involved upstream tho not as a coder, so maybe...) --

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Florian Philipp
Am 17.06.2012 19:10, schrieb Michał Górny: > On Sun, 17 Jun 2012 12:56:34 -0400 > Matthew Finkel wrote: > >> On Sun, Jun 17, 2012 at 11:51 AM, Michał Górny >> wrote: >>> 1. How does it increase security? >>> >> This removed a few vectors of attack and ensures your computer is only >> bootstrappe

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Sascha Cunz
[...] > It doesn't. It's just a very long wooden fence; you just didn't find > the hole yet. Given the fact that the keys in the BIOS must somehow get there and it must also be able to update them (how to revoke or add keys else?). Unless this is completely done in hardware, there must be a sof

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Florian Philipp
Am 17.06.2012 19:06, schrieb Michał Górny: > On Sun, 17 Jun 2012 09:55:35 -0700 > Greg KH wrote: > >> On Sun, Jun 17, 2012 at 05:51:04PM +0200, Michał Górny wrote: [...] > >>> 3. What happens if the machine signing the blobs is compromised? >> >> So, who's watching the watchers, right? Come on,

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Dale
Greg KH wrote: > On Sat, Jun 16, 2012 at 06:37:41PM -0500, Steev Klimaszewski wrote: >> Just picking a random response to reply to. I'm not speaking >> officially, however, I'm pretty sure we at Genesi aren't going to pay >> Microsoft in order to boot our own boards. > If you don't want your board

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Rich Freeman
On Sun, Jun 17, 2012 at 1:06 PM, Michał Górny wrote: > On Sun, 17 Jun 2012 09:55:35 -0700 > Greg KH wrote: > >> On Sun, Jun 17, 2012 at 05:51:04PM +0200, Michał Górny wrote: >> > 2. What happens if, say, your bootloader is compromised? >> >> And how would this happen?  Your bootloader would not r

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 12:56:34 -0400 Matthew Finkel wrote: > On Sun, Jun 17, 2012 at 11:51 AM, Michał Górny > wrote: > > 1. How does it increase security? > > > This removed a few vectors of attack and ensures your computer is only > bootstrapped by and booted using software you think is safe. By

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 09:55:35 -0700 Greg KH wrote: > On Sun, Jun 17, 2012 at 05:51:04PM +0200, Michał Górny wrote: > > 2. What happens if, say, your bootloader is compromised? > > And how would this happen? Your bootloader would not run. Yes. I'm asking what happens next. Is there an easy way t

Re: [gentoo-dev] UEFI secure boot and Gentoo

2012-06-17 Thread Greg KH
On Sat, Jun 16, 2012 at 12:22:24PM +0300, Maxim Kammerer wrote: > On Fri, Jun 15, 2012 at 3:01 PM, Rich Freeman wrote: > > I think that anybody that really cares about security should be > > running in custom mode anyway, and should just re-sign anything they > > want to run.  Custom mode lets you

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Greg KH
On Sat, Jun 16, 2012 at 06:37:41PM -0500, Steev Klimaszewski wrote: > Just picking a random response to reply to. I'm not speaking > officially, however, I'm pretty sure we at Genesi aren't going to pay > Microsoft in order to boot our own boards. If you don't want your boards to be Windows 8 cer

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Matthew Finkel
On Sun, Jun 17, 2012 at 11:51 AM, Michał Górny wrote: > On Sun, 17 Jun 2012 11:20:38 +0200 > Florian Philipp wrote: > > > Am 16.06.2012 19:51, schrieb Michał Górny: > > > On Fri, 15 Jun 2012 09:54:12 +0200 > > > Florian Philipp wrote: > > > > > >> Am 15.06.2012 06:50, schrieb Duncan: > > >>> Gr

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Greg KH
On Sun, Jun 17, 2012 at 05:51:04PM +0200, Michał Górny wrote: > On Sun, 17 Jun 2012 11:20:38 +0200 > Florian Philipp wrote: > > > Am 16.06.2012 19:51, schrieb Michał Górny: > > > On Fri, 15 Jun 2012 09:54:12 +0200 > > > Florian Philipp wrote: > > > > > >> Am 15.06.2012 06:50, schrieb Duncan: >

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Thomas Sachau
Michał Górny schrieb: > On Sun, 17 Jun 2012 17:46:00 +0200 > Thomas Sachau wrote: > Beside that, it seems to solve things pretty similar to the proposed way in multilib-portage for cross-compiling (which could also be adapted for multi-slot languages) with different wording an

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Maxim Koltsov
2012/6/17 Michał Górny : > On Sun, 17 Jun 2012 19:03:22 +0400 > Maxim Koltsov wrote: > >> 2012/6/17 Justin : >> > On 17.06.2012 15:23, Maxim Koltsov wrote: >> >> 2012/6/17 Justin : >> >>> On 17.06.2012 14:13, Maxim Koltsov wrote: >> Hi, >> During prefix bootstrap i noticed that strip-fla

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 17:46:00 +0200 Thomas Sachau wrote: > >> Beside that, it seems to solve things pretty similar to the > >> proposed way in multilib-portage for cross-compiling (which could > >> also be adapted for multi-slot languages) with different wording > >> and with additional work for e

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 11:20:38 +0200 Florian Philipp wrote: > Am 16.06.2012 19:51, schrieb Michał Górny: > > On Fri, 15 Jun 2012 09:54:12 +0200 > > Florian Philipp wrote: > > > >> Am 15.06.2012 06:50, schrieb Duncan: > >>> Greg KH posted on Thu, 14 Jun 2012 21:28:10 -0700 as excerpted: > >>> > >>

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 19:03:22 +0400 Maxim Koltsov wrote: > 2012/6/17 Justin : > > On 17.06.2012 15:23, Maxim Koltsov wrote: > >> 2012/6/17 Justin : > >>> On 17.06.2012 14:13, Maxim Koltsov wrote: > Hi, > During prefix bootstrap i noticed that strip-flags removes -L > and -I flags fr

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Thomas Sachau
Michał Górny schrieb: > On Sun, 17 Jun 2012 14:09:14 +0200 > Thomas Sachau wrote: > >> Michał Górny schrieb: >>> Hello, >>> >>> I have prepared a first draft of 'dynamic SLOT' specification. This >>> is my proposal in attempt to solve the problem of building packages >>> for multiple Python and R

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 12:51:50 +0200 Marien Zwart wrote: > A common operation in an ebuild will be (say) "get the selected > version of python". That's easy enough if there's only one kind of > dynamic slot being used by the ebuild (just use CURRENT_SLOTS > directly), but if the ebuild supports mor

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 11:43:30 +0200 Hans de Graaff wrote: > On Sun, 2012-06-17 at 09:26 +0200, Michał Górny wrote: > > > I'm attaching a reStructuredText version of the spec. You can view > > it rendered as a gist[1]. But please keep the replies on the list, > > rather than forking the gist. > >

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Michał Górny
On Sun, 17 Jun 2012 14:09:14 +0200 Thomas Sachau wrote: > Michał Górny schrieb: > > Hello, > > > > I have prepared a first draft of 'dynamic SLOT' specification. This > > is my proposal in attempt to solve the problem of building packages > > for multiple Python and Ruby versions. It could also

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Maxim Koltsov
2012/6/17 Justin : > On 17.06.2012 15:23, Maxim Koltsov wrote: >> 2012/6/17 Justin : >>> On 17.06.2012 14:13, Maxim Koltsov wrote: Hi, During prefix bootstrap i noticed that strip-flags removes -L and -I flags from *FLAGS while these flags are essential for prefix bootstrapping.

[gentoo-dev] Re: [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Fabian Groffen
On 17-06-2012 16:13:33 +0400, Maxim Koltsov wrote: > Hi, > During prefix bootstrap i noticed that strip-flags removes -L and -I > flags from *FLAGS while these flags are essential for prefix > bootstrapping. Therefore i propose a fix for strip-flags function to > make it preserve prefix-related fla

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Justin
On 17.06.2012 15:23, Maxim Koltsov wrote: > 2012/6/17 Justin : >> On 17.06.2012 14:13, Maxim Koltsov wrote: >>> Hi, >>> During prefix bootstrap i noticed that strip-flags removes -L and -I >>> flags from *FLAGS while these flags are essential for prefix >>> bootstrapping. Therefore i propose a fix

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Maxim Koltsov
2012/6/17 Richard Yao : > On 06/17/2012 09:23 AM, Maxim Koltsov wrote: >> Don't tell me that OpenBSD prefix is unsupported, i'm working on >> getting it supported. > > OpenBSD is listed on the platform matrix, but it has lacked a maintainer > for quite some time: > > http://www.gentoo.org/proj/en/g

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Ciaran McCreesh
On Sun, 17 Jun 2012 09:26:55 +0200 Michał Górny wrote: > I have prepared a first draft of 'dynamic SLOT' specification. This is > my proposal in attempt to solve the problem of building packages for > multiple Python and Ruby versions. It could also be reused for > multilib. I'm pretty sure we ca

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Maxim Koltsov
2012/6/17 Justin : > On 17.06.2012 14:13, Maxim Koltsov wrote: >> Hi, >> During prefix bootstrap i noticed that strip-flags removes -L and -I >> flags from *FLAGS while these flags are essential for prefix >> bootstrapping. Therefore i propose a fix for strip-flags function to > > Is this really ne

Re: [gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Justin
On 17.06.2012 14:13, Maxim Koltsov wrote: > Hi, > During prefix bootstrap i noticed that strip-flags removes -L and -I > flags from *FLAGS while these flags are essential for prefix > bootstrapping. Therefore i propose a fix for strip-flags function to Is this really necessary? I never experienced

[gentoo-dev] Last rites: dev-perl/Tie-RegexpHash, net-proxy/vulture

2012-06-17 Thread Torsten Veller
The following packages will be removed from the tree: # Mask for removal (#421461) # Test suite fails since perl 5.13.6 dev-perl/Tie-RegexpHash # Mask for removal (#310711) # vulture is the only consumer of =dev-perl/DBD-SQLite-0.31* net-proxy/vulture

[gentoo-dev] [RFC]flag-o-matic.eclass strip-flags change to support prefix

2012-06-17 Thread Maxim Koltsov
Hi, During prefix bootstrap i noticed that strip-flags removes -L and -I flags from *FLAGS while these flags are essential for prefix bootstrapping. Therefore i propose a fix for strip-flags function to make it preserve prefix-related flags. I have attached a patch, please review it. It works for m

Re: [gentoo-dev] About using USE flags to pull in needed RDEPENDs being discouraged by devmanual

2012-06-17 Thread Ciaran McCreesh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sun, 17 Jun 2012 03:35:08 +0200 hasufell wrote: > On 06/16/2012 08:14 PM, Ciaran McCreesh wrote: > > Suggested dependencies were used in the old kdebuilds, and Exherbo > > makes extensive use of both suggested and recommended dependencies, > > so

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Thomas Sachau
Michał Górny schrieb: > Hello, > > I have prepared a first draft of 'dynamic SLOT' specification. This is > my proposal in attempt to solve the problem of building packages for > multiple Python and Ruby versions. It could also be reused for multilib. > > The spec tries to explain the broad idea,

Re: [gentoo-dev] About using USE flags to pull in needed RDEPENDs being discouraged by devmanual

2012-06-17 Thread Pacho Ramos
El sáb, 16-06-2012 a las 22:10 +0200, Peter Stuge escribió: > Pacho Ramos wrote: > > > I guess the point is that it is not really a dependency. > > > > No, it's a dependency only when you want ppp support working, > > Logically, but not technically. > > I like this separation; the package manage

Re: [gentoo-dev] Re: spec draft for cross-compile support in future EAPI (EAPI-5)

2012-06-17 Thread Thomas Sachau
Duncan schrieb: > Thomas Sachau posted on Sat, 16 Jun 2012 12:31:40 +0200 as excerpted: > >> Since i am not that sure about my ability to write formal specs, i am >> presenting my first draft for further review and suggestions for >> improvement. > > Just a format suggestion. Call it nitpicky if

Re: [gentoo-dev] Re: About using USE flags to pull in needed RDEPENDs being discouraged by devmanual

2012-06-17 Thread Pacho Ramos
El sáb, 16-06-2012 a las 22:07 -0500, Dale escribió: > Duncan wrote: > > > > Looking at the broader picture, the problem of extraneous packages in the > > world file has always concerned me. If it were to be done over again, > > and I think Zac would likely agree, emerge would use --oneshot by

Re: [gentoo-dev] About using USE flags to pull in needed RDEPENDs being discouraged by devmanual

2012-06-17 Thread Pacho Ramos
El sáb, 16-06-2012 a las 22:36 +0200, Michał Górny escribió: > On Sat, 16 Jun 2012 20:49:10 +0200 > Pacho Ramos wrote: > > > El sáb, 16-06-2012 a las 19:07 +0200, Michał Górny escribió: > > > On Sat, 16 Jun 2012 18:30:55 +0200 > > > Pacho Ramos wrote: > > > > > > > El sáb, 16-06-2012 a las 18:0

Re: [gentoo-dev] About what would be included in EAPI5

2012-06-17 Thread Peter Stuge
Hans de Graaff wrote: > > I think ABI fits well though? The situation is that A DEPENDs on B, > > and at some point B changes in a way that A must be rebuilt in order > > to run - right? > > At least for dev-ruby/nokogiri this is not the case. It checks the > version of libxml2 it was built agains

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Marien Zwart
On zo, 2012-06-17 at 09:26 +0200, Michał Górny wrote: > I'm attaching a reStructuredText version of the spec. You can view it > rendered as a gist[1]. But please keep the replies on the list, rather > than forking the gist. I've only thought about this a little, but some thoughts so far: A common

Re: [gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Hans de Graaff
On Sun, 2012-06-17 at 09:26 +0200, Michał Górny wrote: > I'm attaching a reStructuredText version of the spec. You can view it > rendered as a gist[1]. But please keep the replies on the list, rather > than forking the gist. I don't like the approach taken in 6. I'd rather state that there should

Re: [gentoo-dev] Re: UEFI secure boot and Gentoo

2012-06-17 Thread Florian Philipp
Am 16.06.2012 19:51, schrieb Michał Górny: > On Fri, 15 Jun 2012 09:54:12 +0200 > Florian Philipp wrote: > >> Am 15.06.2012 06:50, schrieb Duncan: >>> Greg KH posted on Thu, 14 Jun 2012 21:28:10 -0700 as excerpted: >>> So, anyone been thinking about this? I have, and it's not pretty. >

[gentoo-dev] [RFC] Dynamic SLOTs

2012-06-17 Thread Michał Górny
Hello, I have prepared a first draft of 'dynamic SLOT' specification. This is my proposal in attempt to solve the problem of building packages for multiple Python and Ruby versions. It could also be reused for multilib. The spec tries to explain the broad idea, and all problems relevant to it. It

[gentoo-dev] Re: [gentoo-commits] gentoo-x86 commit in media-gfx/graphviz: ChangeLog

2012-06-17 Thread Samuli Suominen
On 06/17/2012 10:12 AM, Naohiro Aota (naota) wrote: naota 12/06/17 07:12:19 Modified: ChangeLog Log: Add ~x86-fbsd. #419621 (Portage version: 2.2.0_alpha110/cvs/Linux x86_64) Revision ChangesPath 1.261media-gfx/graphviz/ChangeLog file : http