Gentoo Weekly Newsletter: March 3rd, 2003
Gentoo Linux at the Game Developers Conference
The 2003 Game Developers Conference kicks off on Tuesday, March 4th. The GDC is one of the world's premier conferences dedicated to the computer gaming industry with several conference tracks focused on today's hot gaming topics. One of the highlights of the conference is the GDC Expo where vendors and exhibitors show off the latest and greatest software and hardware. This year, Gentoo Linux will be present at the NVIDIA booth, along with Emmett Plant, CEO of Vorbis. Demonstrations of Unreal Tournament 2003 will be on display to show the power of Gentoo Linux and NVIDIA hardware. So, if you're going to be at the GDC, be sure and stop by the NVIDIA booth to show your support for Gentoo Linux. You'll get a chance to meet Daniel Robbins, Seemant Kulleen and some of the other Gentoo Developers. Attendees may also get a chance to talk to Emmett Plant about the future of Ogg Vorbis, upcoming Ogg-capable portables or any number of other Ogg-related developments. Open Developer Positions in the Gentoo Linux Project Currently, the Gentoo Linux project has a number of open developer positions available for people who are interested in becoming more involved with the Gentoo Linux project. These positions include:
The third and hopefully final Release Candidate of Gentoo Linux 1.4 was released on February 27th. Improvements to this release include updated LiveCDs and a whole raft of bug fixes. With this release, Gentoo Linux moves to a package updates phase as described in the official Gentoo Linux Release Policy. For the next two weeks or so, developers will focus on migrating packages from a masked state to an unmasked, or stable, state. Users can expect long lists in their emerge -up world statements over the next couple of weeks as the backlog of masked packages is worked through.
Usermin is subject to the same vulnerability reported last week for Webmin, in which a security hole could permit unauthenticated access. No exploits in the wild have been reported.
The apcupsd daemon for controlling UPSs exposes a remote root access vulnerability and some buffer overflows.
The VNC server generates a cookie for authentication in X using a weak random number generator. This could permit an attacker to more easily guess the authentication value and gain access to the system. No specific exploit is reported, but an exploitation technique involving rapid challenges and response comparison is described.
TightVNC is subject to the same vulnerability as described above for VNC.
The following new security bugs were posted this week: 3. Featured Developer of the Week José Alberto Suárez López
This week we feature José Alberto Suárez López, a native of Spain who got started working with Gentoo when he had a conversation with Daniel Robbins about having a Spanish side (e.g. documentation, translation) for Gentoo. Now the editor and coordinator for all things Spanish in Gentoo, he also participates in the app-games team and maintains several ebuilds. His most recent work was the integration of win4lin with Gentoo, and he's also working on some artwork. José is also quite involved with OSS outside of Gentoo: he helped translate Mozilla to Spanish, does some development, some artwork for OSS projects, and participates in some local LUGs, like HispaLiNUX and ADALA. His proudest achievements include the integration of Free Software into his school's computer network and the creation of a Gentoo Spanish group. José lives in Sevilla, the capital of Andalucia in the South of Spain, a sunny and enjoyable city that he says is full of beautiful girls, including the most beautiful girl in the world. He studies graphics design in the morning and spends his afternoons in a crazy office working on embedded systems running Linux and other cool stuff. José's hobbies include music (recently he went to a concert with Lou Donaldson and Lonei Smith that he really liked), reading books by Lovecraft, Tolkien, and others, sports, and traveling. In his room, alongside a HiFi sound system and a bunch of CDs is his one functional computer, a laptop, which he is migrating from GNOME to KDE for political reasons. He likes Sylpheed but uses Evolution for job reasons, links and Mozilla for browsing, BitchX and gaim for messaging, and couldn't live without bash and mc. 1.4-rc3 out and about Housekeeping in the forums is always a challenging job, but it gets really messy whenever a new release candidate is being put out in the open, and all the new kids come storming in leaving muddy traces all over the floor... Let's help the moderators by putting up a sign: Yes, 1.4-rc3 has been released. No, you can't upgrade from 1.4-rc2... How would you "upgrade" to anything that isn't already covered by your 'emerge rsync && emerge -u world' routines? If you want to help the developers, please go ahead and test the LiveCD images for the different platforms to see if they all work well for installations. Report your experiences, chat about the new release candidate, preferrably in the two top thread for x86 and the bottom one for PPC (notice the higher RC count, the Mac devs are riding a bit ahead): Xfree 4.3.0 Equally eagerly awaited, the latest XFree86 upgrade has hit portage last week, only days after the ebuild for the release candidate 4.2.99.902 was distributed. Greeted by a thread that grew to three pages within 24 hours, the buzz in the forums is generally positive with a few quips here and there, and hope that bugs in previous versions have been ironed out. Real nice work by the XFree86 developers, apparently. At the time of this writing you still need ACCEPT_KEYWORDS="~arch", but that'll change soon...
Commercial Applications Ported to Linux? Why not? Why would the developers of Windows software not be interested in support for their products on Linux? After all, it isn't all that complicated, provided they try to assure some compatibility with the Windows emulators available. Or, better still, why not try to lobby them into awareness of the growing market potential for Linux ports of their software? An initiative centered around this idea was born in the Forums two weeks ago, but has gained so much momentum that it's been spun off into a mailing list of its own. Matija Suklje (aka hook, the initiator of the forum thread) brought it up to speed with an article on Newsforge that even got translated into Swedish. If you want to help exploring the possibilities of Linux advocacy directly addressing the vendors of proprietary software and drivers, check the original thread, Matija's article and the LCSP list at yahoogroups.com:
Gentoo releases and what they mean to you! In an effort to stem the tide of "how to I upgrade to 1.4_rc3" questions, Gentoo Developer Troy Dack posted a succinct message explaining exactly what Gentoo releases do (and, more importantly, don't) mean to you. The short version? emerge -u world. For the longer version, and to understand an issue that many users seem unaware of, read Troy's message. Does gentoo compare? Before slipping Gentoo the ring, Daniel Carerra asked some important questions on how the distribution compares with the 'bigger' ones. How complete (# of packages) is it? How quickly do ebuilds follow new source releases? Is it as easy to update as apt-get? Can packages be created easily? Does Gentoo run faster? The unanimous 'yes' answers to his five questions made one thing clear; Gentoo is mature, and as of big of a player as any other. In short, Gentoo is rocksteady.. mon. USE FLAG for DJB's daemontools Christian Wiese proposed a new USE flag "to automatically build packages with daemontools support if possible". Rajiv Aaron Manglani asked whether the support for daemontools would mean the creation of a separate set of init scripts and David Pavlotzky finally contributed with a pointer to an article about daemontools. Where to install lisp sources in an ebuild? Burton Samograd says he is writing an ebuild for a package which is entirely written in lisp and I'm not quite sure where the source files should be installed to. He has received no answers so far! GCC Myths and Facts Joao Seabra wrote a very elucidating article with tips on the optimization switches of GCC. RFC for Gentoo GNU Emacs users Matthew Kennedy announced in a message to the list that he has made a modification to the way GNU Emacs is installed in Gentoo systems. This will allow for more possibilities in customizing Emacs. Reminder: Vienna Meeting Tomorrow Last chance to make yourself available for the Gentoo User Meeting in Vienna tomorrow, Tuesday, 4 March 2003, from 19:00 at the Siebensternbräu, Siebensterngasse 19 in 1070 Wien. Send a quick note to the Viennese coordination forum thread before you drop by. Italian Gentoo Forum Established Just hours after the publication of the last GWN edition, the Italian campaign was rewarded with the creation of an official Gentoo Forum in Italian.. In all fairness, it is only second to Gentoo.it initiator Enrico Morelli's Gentoo Italia Forum, preceding this one by about a month, but the official forum leverages on the huge crowd attracted by the English mainstream, and as a result is certainly more dynamic than Enrico's site at the University of Florence. Opening hours for both forums are fairly flexible, check in any time... The following stable packages were added to portage this week
The Gentoo community uses Bugzilla (bugs.gentoo.org) to record and track bugs, notifications, suggestions and other interactions with the development team. In the last 7 days, activity on the site has resulted in:
The developers and teams who have closed the most bugs this week are:
The developers and teams who have been assigned the most new bugs this week are:
Handling Files with Spaces Many Gentoo users still favor command line tools (ls, find, etc.) over the newer GUI interfaces such as Nautilus or Konqueror. However, many command line users find that dealing with filenames that have spaces in them is difficult; especially when trying to automate a process or deal with multiple files at once. One common tool to deal with multipe files is xargs, which builds and executes commands from standard input. One example is using xargs to remove old files.
The solution to this is to use the --null (or -0) option which changes the spaces in the filenames to a NUL character.
The following developers recently left the Gentoo team:
The following developers recently joined the Gentoo Linux team:
The following developers recently changed roles within the Gentoo Linux project.
Interested in contributing to the Gentoo Weekly Newsletter? Send us an email. Please send us your feedback and help make GWN better. The Gentoo Weekly Newsletter is also available in the following languages: |
|
