![\"gentoo-gmn-back\"](\"http:\/\/blogs.gentoo.org\/news\/files\/2013\/11\/gentoo-gmn-back.jpg\")
<\/a><\/p>\nThis month in GMN:<\/p>
- 1<\/span> Introduction<\/a><\/li>
- 2<\/span> Gentoo News<\/a>
- 2.1<\/span> Gentoo at Google Summer of Code 2013<\/a>
- 2.1.1<\/span> RAP<\/a><\/li>
- 2.1.2<\/span> identity.gentoo.org<\/a><\/li>
- 2.1.3<\/span> Puppet Portage module<\/a><\/li><\/ul><\/li>
- 2.2<\/span> SELinux System Administration<\/a><\/li>
- 2.3<\/span> Gentoo Council News<\/a><\/li>
- 2.4<\/span> Conferences<\/a>
- 2.4.1<\/span> LinuxDays 2013 in Prague, CZ<\/a><\/li><\/ul><\/li><\/ul><\/li>
- 3<\/span> Gentoo Developer Moves<\/a>
- 3.1<\/span> Summary<\/a><\/li>
- 3.2<\/span> Moves<\/a><\/li>
- 3.3<\/span> Additions<\/a><\/li><\/ul><\/li>
- 4<\/span> Portage<\/a><\/li>
- 5<\/span> Security<\/a><\/li>
- 6<\/span> Infrastructure<\/a>
- 6.1<\/span> Sponsors<\/a><\/li>
- 6.2<\/span> Puppet<\/a><\/li><\/ul><\/li>
- 7<\/span> Package Removals\/Additions<\/a>
- 7.1<\/span> Removals<\/a><\/li>
- 7.2<\/span> Additions<\/a><\/li><\/ul><\/li>
- 8<\/span> Bugzilla<\/a>
- 8.1<\/span> Activity<\/a><\/li>
- 8.2<\/span> Closed bug ranking<\/a><\/li>
- 8.3<\/span> Assigned bug ranking<\/a><\/li><\/ul><\/li>
- 9<\/span> Tips of the Month<\/a><\/li>
- 10<\/span> Getting Involved?<\/a><\/li><\/ul><\/div>\n
Introduction<\/span><\/span><\/h1>\n
So GMN<\/strong> is back! \ud83d\ude42 As you can see, we moved away<\/em> from GuideXML<\/strong> and moved to the 2013 era. You can also subscribe to this blog using the form on your left. If you are interested in contributing, have a look at the end of this newsletter.<\/p>\n
Gentoo News<\/span><\/h1>\n
Gentoo at Google Summer of Code 2013<\/span><\/h2>\n
RAP<\/span><\/h3>\n
RAP is an abbreviation for “Rap Ain’t Prefix”. It is a variant of\u00a0Gentoo Prefix<\/a>\u00a0that uses its own libc instead of that of the\u00a0host. By depending only on the Kernel, it expands the horizon of\u00a0Gentoo Prefix into the systems as handhold Android, multiarch\u00a0Debian\/Ubuntu and ancient (5 years+) GNU\/Linux with a libc lacking\u00a0crucial modern features like fortify. It eases the maintenance of\u00a0Prefix by being more identical to Gentoo vanilla.<\/p>\n
Although the Prefix team has been keeping the possibility in\u00a0mind and have made several unsuccessful attempts earlier, it was Ruud\u00a0(redlizard) Koolen (now a Gentoo developer) who brought the first\u00a0implementation into reality. Benda (heroxbd) Xu from the Prefix team\u00a0joined the effort of RAP for his Gentoo on Android<\/em><\/a> project\u00a0under Google Summer of Code 2013, mentored by Luca (lu_zero) Barbato.<\/p>\n
RAP specification has been tracked by a GLEP draft<\/a>. The draft is\u00a0endorsed by the council and will be further refined after recovery of\u00a0the GLEP process<\/a>.<\/p>\n
RAP is in a usable state for end users in the two overlays initiated\u00a0by redlizard<\/a>\u00a0and heroxbd<\/a>, whose development are related\u00a0closely. With the ultimate goal of offering RAP with Gentoo\u00a0officially, the development in the overlays will be merged to gx86\u00a0tree. The major remaining refinements are:<\/p>\n
- \n
- RAP profiles to be integrated with those of prefix and default<\/li>\n
- RAP toolchain patches to be refined and accepted by the toolchain\u00a0herd and upstream<\/li>\n<\/ul>\n
Contact the RAP developers by mailing list gentoo-alt@lists.gentoo.org<\/a>\u00a0or IRC #gentoo-prefix on freenode for further information.<\/p>\n
identity.gentoo.org<\/span><\/h3>\n
Pavlos Ratis and Michal Gorny (under the mentorship of Theo Chatzimichos and the great help of Robin Johnson and Matt Summers) were both working on our upcoming identity.gentoo.org website. It is going to be our LDAP frontend, which will be connected with various Gentoo services as well (eg Overlays, Git repositories and Planet). Additionally, it will act as an OpenID provider, which will allow us to connect it to our various Gentoo websites, and use only one account for all of them.<\/p>\n
Pavlos has been working on the LDAP part. He implemented the login, signup, attribute settings and password recovery pages, all of the above working against a clone of our production Gentoo LDAP configuration. For the future, privileged accounts through groups are planned as well. Read his final report<\/a>.<\/p>\n
Michal has been working on the OpenID provider, as well to two factor authentication. The website supports authentication with SSH, SSL certs and OTP tokens on top of the traditional username\/password authentication. Read his final report<\/a>.<\/p>\n
The team gave much weight on unit and integration tests as well, having around 80% coverage so far. Acceptance tests with selenium are also planned. Also, a large number of work has been done on upstream libraries, like django-ldapdb, django-auth-ldap, even a patch in Django itself was submitted.<\/p>\n
The plan for the near future is to finish the groups support first, and then deploy a testing instance for developers’ only. Around February of 2014 the website should be hopefully ready for production usage, although it will remain a developer-only service for quite some time.<\/p>\n
In case you are interested in helping, the code is in Github<\/a>, and you can contact the team in the mail identity@gentoo.org, or in the IRC channel #gentoo-www in Freenode.<\/p>\n
Puppet Portage module<\/span><\/h3>\n
The Puppet Portage module provides various Gentoo related features. While it used to be tight to Portage only, Vikraman Choudhury (under the mentorship of Adrien Thebo<\/a> and Theo Chatzimichos<\/a>) added support for a number of other Gentoo tools, like layman, eselect, webapp-config, and additionally he did tons of bugfixing. The features are going to be released soon in version 2.1.0 in the PuppetLabs Forge<\/a>.<\/p>\n
SELinux System Administration<\/span><\/h2>\n
Sven Vermeulen<\/a>, a Gentoo Hardened and Documentation developer, has made his first book publication:\u00a0SELinux System Administration<\/a>.<\/p>\n
“The book first starts with the fundamentals of SELinux \u2013 concepts you really need to grasp before diving into SELinux. Then, it goes on about switching SELinux state (disabling, permissive, granular permissive, etc.), logging, managing SELinux users and roles, handling process domains, etc.” is how Sven summarizes his book.<\/em><\/p>\n
Do you want to know more about SELinux on Gentoo? Read the excellent wiki<\/a> page.<\/p>\n
Read more about this on his<\/a> blog. \ud83d\ude09<\/p>\n
Gentoo Council News<\/span><\/h2>\n
The October 2013 council meeting was comparatively uneventful. Completely\u00a0replacing the current Gentoo Code of Conduct with a new text did not find a\u00a0majority; instead a decision about more gradual incorporation of improvements\u00a0was deferred to the next meeting.<\/p>\n
As a consequence of the decisions taken during the September 2013 council\u00a0meetings, the m68k, s390, and sh profiles have in the meantime been modified\u00a0to automatically accept testing\/unstable keywords. Stable keywords of these\u00a0arches can and will now be replaced by unstable\/testing keywords in ebuilds.<\/p>\n
In addition, the council had concluded in its September 2013 meetings that\u00a0sufficient documentation on initramfs and similar early boot mechanisms is\u00a0available. As a consequence a news item has been published- Gentoo Linux\u00a0systems which have \/ and \/usr on separate file systems but do not use an
\ninitramfs will not be supported starting on 01-Nov-2013, and all users with\u00a0such setups are encouraged to migrate to an initramfs.<\/p>\nConferences<\/span><\/h2>\n
LinuxDays 2013 in Prague, CZ<\/span><\/h3>\n
LinuxDays<\/a> is an annual Linux conference that takes place in Czech Technical\u00a0University in Prague. This conference has big value for our community, as last\u00a0year it was co-hosted with the Gentoo Miniconf<\/a>. The conference was a big success this year, having around 500\u00a0visitors. Many presentations and workshops took place, the highlight being the\u00a03D printer workshop. Gentoo was also there with a booth, organized by the\u00a0Czech Gentoo Developers and Contributors, many of whom had presentations\u00a0around various topics (Autotools, Puppet etc.).<\/p>\n
Photos<\/a><\/p>\n
Gentoo Developer Moves<\/span><\/h1>\n
Summary<\/span><\/h2>\n
Gentoo is made up of 247<\/strong> active developers, of which 36<\/strong> are currently away.
\nGentoo has recruited a total of 788<\/strong> developers since its inception.<\/p>\nMoves<\/span><\/h2>\n
The following developers have recently changed roles<\/p>\n
- \n
- Mikle Kolyada<\/a>\u00a0joined the PPC64 and MIPS teams.<\/span><\/li>\n
- Mark Wright<\/a>\u00a0joined the Emacs team.<\/li>\n
- Ian Delaney<\/a>\u00a0joined the Openstack team.<\/li>\n
- Bernard Cafarelli<\/a>\u00a0left the afterstep herd (which is now empty, read the announcement here<\/a>)<\/li>\n
- Kacper Kowalik<\/a>\u00a0left the desktop-wm herd.<\/li>\n
- Markos Chandras<\/a>\u00a0left the Qt team.<\/li>\n
- Pavlos Ratis<\/a> joined Overlays and Planet team.<\/li>\n
- Rajiv Aaron Manglani<\/a>\u00a0left the voip herd.<\/li>\n
- Lars\u00a0Wendler<\/a> joined the base-system herd.<\/li>\n
- Hanno B\u00f6ck<\/a>\u00a0left the\u00a0sci-geosciences herd.<\/li>\n
- Jorge Manuel BS Vicetto<\/a> joined the Infra team.<\/li>\n
- Jason Donenfeld<\/a> joined the Infra team.<\/li>\n<\/ul>\n
Additions<\/span><\/h2>\n
The following developers have recently joined the project<\/p>\n
- \n
- Pavel Kazakov<\/a>\u00a0has joined the LXDE team. (announcement<\/a>).
\n<\/span><\/li>\n- Ruud Koolen<\/a>\u00a0\u00a0has joined the Prefix team. (announcement<\/a>).<\/li>\n<\/ul>\n
Portage<\/span><\/h1>\n
This section summarizes the current state of the portage tree.<\/p>\n
[table th=”0″]
\nArchitectures, 44
\nCategories, 159
\nPackages, 16924
\nEbuilds, 36928
\n[\/table]<\/p>\n[table]
\nArchitecture, Stable, Testing, Total, % of Packages
\nalpha, 3569, 534, 4103, 24.24%
\namd64, 10350, 6055, 16405, 96.93%
\namd64-fbsd, 4, 1562, 1566, 9.25%
\narm, 2509, 1616, 4125, 24.37%
\nhppa, 2993, 472, 3465, 20.47%
\nia64, 3108, 595, 3703, 21.88%
\nm68k, 524, 87, 611, 3.61%
\nmips, 0, 2243, 2243, 13.25%
\nppc, 6832, 2399, 9231, 54.54%
\nppc64, 4281, 908, 5189, 30.66%
\ns390, 1640, 122, 1762, 10.41%
\nsh, 1865, 173, 2038, 12.04%
\nsparc, 4073, 918, 4991, 29.49%
\nsparc-fbsd, 0, 326, 326, 1.93%
\nx86, 11132, 5153, 16285, 96.22%
\nx86-fbsd, 0, 3193, 3193, 18.87%
\n[\/table]<\/p>\n![\"gmn-portage-stats-2013-10\"](\"http:\/\/blogs.gentoo.org\/news\/files\/2013\/11\/gmn-portage-stats-2013-10.png\")
<\/a><\/p>\nSecurity<\/span><\/h1>\n
The following GLSAs<\/a> have been released by the Security Team<\/a>
\n[table tablesorter=”1″ id=”glsas”]
\nGLSA, Package, Description, Bug
\n201310-21<\/a>, www-apps\/mediawiki<\/a>, MediaWiki: Multiple vulnerabilities, 460352<\/a>
\n201310-20<\/a>, sys-power\/acpid<\/a>, acpid2: Privilege escalation, 434522<\/a>
\n201310-19<\/a>, net-misc\/x2goserver<\/a>, X2Go Server: Arbitrary code execution, 472582<\/a>
\n201310-18<\/a>, net-libs\/gnutls<\/a>, GnuTLS: Multiple vulnerabilities, 455560<\/a>
\n201310-17<\/a>, sys-devel\/pmake<\/a>, pmake: Insecure temporary file usage, 367891<\/a>
\n201310-16<\/a>, net-analyzer\/tptest<\/a>, TPTEST: Arbitrary code execution, 261191<\/a>
\n201310-15<\/a>, sys-devel\/automake<\/a>, GNU Automake: Multiple vulnerabilities, 295357<\/a>
\n201310-14<\/a>, sys-apps\/groff<\/a>, Groff: Multiple Vulnerabilities, 386335<\/a>
\n201310-13<\/a>, media-video\/mplayer<\/a>, MPlayer: Multiple vulnerabilities, 253649<\/a>
\n201310-12<\/a>, media-video\/ffmpeg<\/a>, FFmpeg: Multiple vulnerabilities, 285719<\/a>
\n201310-11<\/a>, dev-perl\/Parallel-ForkManager<\/a>, Perl Parallel-ForkManager Module: Insecure temporary file usage, 389839<\/a>
\n201310-10<\/a>, net-libs\/polarssl<\/a>, PolarSSL: Multiple vulnerabilities, 358783<\/a>
\n201310-09<\/a>, dev-python\/setuptools<\/a>, Setuptools: Man-in-the-Middle attack, 479964<\/a>
\n201310-08<\/a>, net-misc\/quagga<\/a>, Quagga: Multiple vulnerabilities, 408507<\/a>
\n201310-07<\/a>, media-libs\/openjpeg<\/a>, OpenJPEG: User-assisted execution of arbitrary code, 412895<\/a>
\n201310-06<\/a>, net-wireless\/aircrack-ng<\/a>, Aircrack-ng: User-assisted execution of arbitrary code, 311797<\/a>
\n201310-05<\/a>, media-libs\/gegl<\/a>, GEGL: User-assisted execution of arbitrary code, 442016<\/a>
\n201310-04<\/a>, www-servers\/nginx<\/a>, nginx: Multiple vulnerabilities, 458726<\/a>
\n201310-03<\/a>, app-text\/poppler<\/a>, Poppler: Multiple vulnerabilities, 263028<\/a>
\n201310-02<\/a>, net-mail\/isync<\/a>, isync: Man-in-the-Middle attack, 458420<\/a>
\n201310-01<\/a>, dev-perl\/Module-Signature<\/a>, Perl Module-Signature module: Arbitrary code execution, 472428<\/a>
\n[\/table]<\/p>\nInfrastructure<\/span><\/h1>\n
Sponsors<\/span><\/h2>\n
LeaseWeb<\/a> provided us a new<\/a>\u00a0box.<\/p>\n
Puppet<\/span><\/h2>\n
Our Cfengine to Puppet migration is still ongoing. The past month we’ve been
\nworking on the upcoming 2.1.0 release of the Puppet Portage module<\/a> (which by the way has been moved under the Gentoo Github organization). Also, there has been much effort and testing to provide Gentoo support to the
\nfollowing puppet modules:<\/p>\n- \n
- zach\/r10k<\/a><\/li>\n
- ploperations\/puppet<\/a><\/li>\n
- puppetlabs\/apache<\/a><\/li>\n
- puppetlabs\/passenger<\/a><\/li>\n<\/ul>\n
Some of our patches have already been accepted upstream, but more work is
\nrequired, and more modules will be needed to be tested or patched in order to
\nhave decent Gentoo support. If you are interested in helping, contact Theo<\/a>.<\/p>\nPackage Removals\/Additions<\/span><\/h1>\n
Removals<\/span><\/h2>\n
[table]
\nPackage, Developer, Date
\ndev-games\/neoengine<\/a>, creffett, 03 Oct 2013
\ndev-games\/neotools<\/a>, creffett, 03 Oct 2013
\ndev-python\/pyme<\/a>, mgorny, 05 Oct 2013
\nnet-irc\/ezbounce<\/a>, pacho, 12 Oct 2013
\napp-misc\/gpsdrive<\/a>, pacho, 12 Oct 2013
\nsys-fs\/cdfs<\/a>, pacho, 12 Oct 2013
\nvirtual\/python-json<\/a>, pacho, 12 Oct 2013
\ndev-php\/symfony<\/a>, pacho, 12 Oct 2013
\ndev-vcs\/bzr-svn<\/a>, pacho, 12 Oct 2013
\ndev-tex\/natbib<\/a>, dilfridge, 12 Oct 2013
\nsys-firmware\/amd-ucode<\/a>, hwoarang, 21 Oct 2013
\nvirtual\/pyparsing<\/a>, mgorny, 22 Oct 2013
\n[\/table]<\/p>\nAdditions<\/span><\/h2>\n
[table]
\nPackage, Developer, Date
\ndev-libs\/liblouis<\/a>, teiresias, 02 Oct 2013
\ndev-java\/felix-gogo-runtime<\/a>, tomwij, 02 Oct 2013
\ndev-java\/felix-utils<\/a>, tomwij, 02 Oct 2013
\ndev-java\/felix-shell<\/a>, tomwij, 02 Oct 2013
\ndev-java\/struts-xwork<\/a>, tomwij, 02 Oct 2013
\ndev-java\/struts-core<\/a>, tomwij, 02 Oct 2013
\ndev-java\/struts-plugins<\/a>, tomwij, 02 Oct 2013
\ndev-lang\/execline<\/a>, williamh, 02 Oct 2013
\nsys-apps\/s6<\/a>, williamh, 02 Oct 2013
\ndev-python\/xmltodict<\/a>, radhermit, 04 Oct 2013
\nx11-libs\/xcb-util-cursor<\/a>, chithanh, 04 Oct 2013
\ndev-libs\/clens<\/a>, ulm, 04 Oct 2013
\napp-crypt\/tc-play<\/a>, alonbl, 05 Oct 2013
\ndev-python\/pygal<\/a>, yngwin, 06 Oct 2013
\ndev-python\/pyptlib<\/a>, blueness, 06 Oct 2013
\nx11-libs\/libXaw3dXft<\/a>, hasufell, 06 Oct 2013
\nmedia-gfx\/xpaint<\/a>, hasufell, 06 Oct 2013
\ndev-ruby\/activerecord-deprecated_finders<\/a>, graaff, 07 Oct 2013
\ndev-ruby\/sprockets-rails<\/a>, graaff, 07 Oct 2013
\napp-admin\/r10k<\/a>, vikraman, 07 Oct 2013
\ndev-java\/j2ssh<\/a>, ercpe, 08 Oct 2013
\ndev-java\/junrar<\/a>, ercpe, 08 Oct 2013
\ndev-python\/simplegui<\/a>, hasufell, 08 Oct 2013
\ndev-ruby\/protected_attributes<\/a>, graaff, 09 Oct 2013
\ndev-python\/json-tools<\/a>, radhermit, 10 Oct 2013
\ndev-util\/xxdi<\/a>, hasufell, 11 Oct 2013
\ndev-java\/unkrig-nullanalysis<\/a>, ercpe, 11 Oct 2013
\ndev-java\/janino<\/a>, ercpe, 11 Oct 2013
\nkde-base\/ktnef<\/a>, johu, 11 Oct 2013
\nmedia-libs\/waffle<\/a>, mattst88, 12 Oct 2013
\ndev-java\/testng<\/a>, tomwij, 12 Oct 2013
\ndev-libs\/libevdev<\/a>, chithanh, 13 Oct 2013
\ndev-libs\/go-fuse<\/a>, zerochaos, 21 Oct 2013
\nsys-fs\/go-mtpfs<\/a>, zerochaos, 21 Oct 2013
\napp-arch\/lziprecover<\/a>, polynomial-c, 21 Oct 2013
\ndev-ruby\/tokyocabinet<\/a>, a3li, 21 Oct 2013
\napp-backup\/bareos<\/a>, mschiff, 21 Oct 2013
\ndev-python\/dogpile-core<\/a>, prometheanfire, 22 Oct 2013
\ndev-python\/dogpile-cache<\/a>, prometheanfire, 22 Oct 2013
\ndev-libs\/qcodeedit<\/a>, jlec, 22 Oct 2013
\ndev-python\/lesscpy<\/a>, prometheanfire, 23 Oct 2013
\ndev-python\/python-ceilometerclient<\/a>, prometheanfire, 23 Oct 2013
\ndev-python\/python-troveclient<\/a>, prometheanfire, 23 Oct 2013
\ndev-java\/glassfish-xmlrpc-api<\/a>, tomwij, 23 Oct 2013
\ndev-java\/glassfish-ejb-api<\/a>, tomwij, 23 Oct 2013
\ndev-java\/spring-instrument<\/a>, tomwij, 23 Oct 2013
\njava-virtuals\/xmlrpc-api<\/a>, tomwij, 23 Oct 2013
\njava-virtuals\/ejb-api<\/a>, tomwij, 23 Oct 2013
\ndev-java\/glassfish-interceptor-api<\/a>, tomwij, 23 Oct 2013
\njava-virtuals\/interceptor-api<\/a>, tomwij, 23 Oct 2013
\ndev-java\/jdbc2-stdext<\/a>, tomwij, 24 Oct 2013
\ndev-java\/hibernate-annotations<\/a>, tomwij, 24 Oct 2013
\ndev-ruby\/jquery-ui-rails<\/a>, graaff, 25 Oct 2013
\nmedia-fonts\/hermit<\/a>, yngwin, 25 Oct 2013
\nmedia-libs\/libmygpo-qt<\/a>, yngwin, 26 Oct 2013
\nnet-firewall\/shorewall-init<\/a>, constanze, 26 Oct 2013
\nsys-apps\/lmctfy<\/a>, patrick, 27 Oct 2013
\ndev-libs\/hidapi<\/a>, blueness, 27 Oct 2013
\nnet-libs\/libkpeople<\/a>, johu, 29 Oct 2013
\napp-misc\/conmux<\/a>, hwoarang, 29 Oct 2013
\nnet-libs\/libqinfinity<\/a>, johu, 29 Oct 2013
\nkde-misc\/kte-collaborative<\/a>, johu, 29 Oct 2013
\nnet-misc\/livestreamer<\/a>, hwoarang, 30 Oct 2013<\/p>\n[\/table]<\/p>\n
Bugzilla<\/span><\/h1>\n
- ploperations\/puppet<\/a><\/li>\n
- Ruud Koolen<\/a>\u00a0\u00a0has joined the Prefix team. (announcement<\/a>).<\/li>\n<\/ul>\n
- Mark Wright<\/a>\u00a0joined the Emacs team.<\/li>\n
- Mikle Kolyada<\/a>\u00a0joined the PPC64 and MIPS teams.<\/span><\/li>\n
- 8.2<\/span> Closed bug ranking<\/a><\/li>
- 7.2<\/span> Additions<\/a><\/li><\/ul><\/li>
- 6.2<\/span> Puppet<\/a><\/li><\/ul><\/li>
- 3.2<\/span> Moves<\/a><\/li>
- 3<\/span> Gentoo Developer Moves<\/a>
- 2.1.2<\/span> identity.gentoo.org<\/a><\/li>
- 2.1.1<\/span> RAP<\/a><\/li>
- 2<\/span> Gentoo News<\/a>