[gentoo-gwn] Gentoo Weekly Newsletter -- Volume 2, Issue 3

[Kurt Lieber]

---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of January 20th, 2003.
---------------------------------------------------------------------------
 
==============
1. Gentoo News
==============
  
Summary
-------

 * Next Release of Gentoo Linux to be 1.4_rc3 
 * Gentoo PPC developer presents at MIT 
 
    
Next Release of Gentoo Linux to be 1.4_rc3
------------------------------------------
  
The next release of Gentoo Linux is expected to be released as 1.4_rc3, 
rather than 1.4_final. This decision was based on a number of factors, 
including: 

 * KDE 3.1 is not yet released, but is expected to be released imminently 
 * The 2.4.20 kernel is experiencing IDE problems on x86. While patches 
   are in the pipeline to fix these issues, they require more testing before 
   being declared "stable" 
 * gcc-3.2.1-r6 has been recently released and requires additional testing 
 * Recent upgrades to XFree86 require additional testing 

And, most importantly, any final release of Gentoo Linux needs to be as 
stable as possible before being released to our users. 
    
Gentoo PPC developer presents at MIT
------------------------------------
  
The following was a late addition to this week's GWN and therefore may not 
appear in all translated versions. 
 
Rajiv Manglani, one of Gentoo's developers for the PowerPC platform (and 
an alumni of the Massachusetts Institute of Technology himself), is going 
to give a presentation featuring an overview of Gentoo Linux and a demo of 
a finished system. Curtains go up at the MIT (building no. 4[1], room 237) 
on Tuesday, 21 January 2003, from 19:00-20:00, and if you plan on 
attending, please RSVP to sipb-iap-gentoo@×××.edu. 

 1. http://whereis.mit.edu/bin/map?locate=bldg_4
    
==================
2. Gentoo Security
==================
  
Summary
-------
  
 * GLSA: dhcp 
 * GLSA: fnord 
 * GLSA: mod_php php 
 * New Security Bug Reports 
 
    
GLSA: dhcp
----------
  
ISC's dhcp package has several buffer overflow vulnerabilities which could 
permit an attacker to remotely execute arbitrary code. No exploits have 
been reported. 

 * Severity: high - remote execution of code. 
 * Packages Affected: net-misc/dhcp versions prior to dhcp-3.0_p2 (3.0_p2 
   is the fix package) 
 * Rectification: Synchronize and emerge -u dhcp 
 * GLSA Announcement[2] 
 * Advisory[3] 
 

 2. http://forums.gentoo.org/viewtopic.php?t=30721
 3. http://www.cert.org/advisories/CA-2003-01.html
    
GLSA: fnord
-----------
  
A buffer overrun in fnord's CGI code has been discovered. However, the 
affected function does not return, so it is unlikely that an exploit could 
be developed. 

 * Severity: low - probably unexploitable. 
 * Packages Affected: net-www/fnord-1.6 
 * Rectification: Synchronize and emerge -u fnord 
 * GLSA Announcement[4] 
 * Advisory[5] 
 

 4. http://forums.gentoo.org/viewtopic.php?t=30720
 5. http://www.fefe.de/fnord/
    
GLSA: mod_php php
-----------------
  
A flaw in php's wordwrap() function could, if used against user input, be 
subject to a buffer overfolow. No exploit has been reported. 

 * Severity: moderate - difficult to exploit. 
 * Packages Affected: dev-php/php-4.2.3 and earlier; dev-php/mod_php-4.2.3 
   and earlier 
 * Rectification: Synchronize and emerge -u php and/or mod_php 
 * GLSA Announcement[6] 
 * Advisory[7] 
 

 6. http://forums.gentoo.org/viewtopic.php?t=30004
 7. http://marc.theaimsgroup.com/?|=bugtraq&m=104102689503192&w=2
    
New Security Bug Reports
------------------------
  
New security bug reports this week include: 

 * media-sound/mpg123[8] 
 * app-editors/vim[9] 
 

 8. http://bugs.gentoo.org/show_bug.cgi?id=14076
 9. http://bugs.gentoo.org/show_bug.cgi?id=14088
    
=========================
3. Heard In The Community
=========================
  
Web Forums
----------
  
Gentoo on Laptops
 
Anybody who's ever tried to put Linux from a Firewire or PCMCIA CD drive 
onto their notebook PC will instantly recognise the need for support, no 
matter how Linux-savvy you thought you were: This is the grand art of 
dealing with hardware that's been misconfigured by vendors and BIOS 
manglers for use with pre-installed operating systems beyond the point 
where a simple "install from CD" manual can bail you out. Fortunately, the 
forums are full of threads dealing with the peculiarities of portable PCs. 
There's even a Gentoo-driven movement to set up an alternative to 
Linux-on-Laptops.net, the most famous, but infrequently updated resource 
for anybody looking to install Linux on something they can carry about. 
Here's a collection of some of the more active threads in this field, 
topmost the pointer to Gentoo's own "Linux-on-the-go": 

 * Linux On the Go[10] 
 * Software suspend[11] 
 * /proc/cpuinfo shows incorrect MHz for Pentium 800[12] 
 * Is there a way to sync my laptop with my desktop?[13] 
 * Vaio R505 w/ Slimdock[14] 
 * LCD Screen X problems [15] 
 

 10. http://forums.gentoo.org/viewtopic.php?t=28691
 11. http://forums.gentoo.org/viewtopic.php?t=29159
 12. http://forums.gentoo.org/viewtopic.php?t=29904
 13. http://forums.gentoo.org/viewtopic.php?t=30247
 14. http://forums.gentoo.org/viewtopic.php?t=29527
 15. http://forums.gentoo.org/viewtopic.php?t=28563
 
Forum Surveys
 
As the forum user base is steadily growing, the results of opinion polls 
are becoming more and more representative. The average Gentoo user seems 
to pay between 30 and 60 USD a month for a 500+ kbit/s Internet 
connection, lack proper chairs for their computer desks and drive around 
in Japanese pickup trucks. Most of these polls lack any sort of scientific 
value, but some of them are fun to watch. Impossible to list them all, 
check these popular ones and search yourself for others: 
 
 * How much do you pay for your internet?[16] 
 * How fast is your internet connection?[17] 
 * Post a picture of your actual desktop[18] 
 * What cars do you drive?[19] 
 * So, what did you name YOUR computer(s)?[20] 
 

 16. http://forums.gentoo.org/viewtopic.php?t=30510
 17. http://forums.gentoo.org/viewtopic.php?t=26364
 18. http://forums.gentoo.org/viewtopic.php?t=21997
 19. http://forums.gentoo.org/viewtopic.php?t=30505
 20. http://forums.gentoo.org/viewtopic.php?t=3300
 
Linux PDAs: Sharp Zaurus and Gentoo
 
A fair number of threads deal with configuration issues to connect the 
currently best-known Linux PDAs, the Sharp Zaurus series, via 
USB-networking to their Gentoo desktops. Given the growing range of models 
and the rather cumbersome tuning necessities of the usbdnet driver, this 
is hardly astonishing, but in spite of all the tools being present in the 
kernel sources, many people in the forums have been unable to get it to 
run. If you have managed and remember how you did it, here's where you 
could make a few people very happy: 

 * Zaurus network problem reward if your advice is successful![21] 
 * usbdnet patch[22] 
 * Zaurus and Gentoo[23] 
 * Is the Sharp Zaurus any good?[24] 
 

 21. http://forums.gentoo.org/viewtopic.php?t=29368
 22. http://forums.gentoo.org/viewtopic.php?t=24718
 23. http://forums.gentoo.org/viewtopic.php?t=29579
 24. http://forums.gentoo.org/viewtopic.php?t=25370
    
gentoo-user
-----------
  
Research solves problems
 
A recent thread[25] about portage 2.0.46-r6 accidently overwriting 
/etc/make.conf triggered some heat amongst the audience. Gentoo developer 
Nicholas Jones insisted that this was not an accident (bug), but rather 
that the poster failed to mention his unique circumstances and assumed 
that portage 2.0.46-r6 was at fault. It has been resolved that portage 
copied the original /etc/make.conf to /etc/.cfg0000_make.conf as it should 
with all config files residing in the /etc directory. This default 
behavior is configured via "CONFIG_PROTECT" in the environment settings. 
The thread also makes it clear that Gentoo developers encourage research 
before accusations. 

 25. http://marc.theaimsgroup.com/?l=gentoo-user&m=104272726519197&w=2
 
KMail with S/MIME and PGP/MIME support
 
Stephen Boulet posted a message[26] asking how to get KMail and OpenPGP to 
work properly together. Paul de Vrieze responded[27] and noted a bug[28] 
he had filed regarding the topic. A lengthy discussion[29] ensued about 
the various intricacies associated with key management and signatures in 
general. This thread is a great resource for anyone attempting to get PGP 
and/or S/MIME working in KMail. Users looking for a more general HOWTO on 
using GnuPG to sign emails should see this week's Tips and Tricks section. 

 26. http://article.gmane.org/gmane.linux.gentoo.user/20132
 27. http://article.gmane.org/gmane.linux.gentoo.user/20136
 28. http://bugs.gentoo.org/show_bug.cgi?id=13573
 29. 
http://news.gmane.org/onethread.php?group=gmane.linux.gentoo.user&root=%3C2
00301120812.30686.stephen%40theboulets.net%3E
    
gentoo-dev
----------
  
Little Tool for Portage.
 
Alastair Tse wrote[30]: "A couple of months ago, I wrote a small tool to 
help me view changelogs for packages in the portage. After a while, I 
added various features I thought were useful, like calculating the size of 
a installed package, and viewing the enabled USE variables for an ebuild." 
The tool is called etcat[31]: Portage Information Extractor. Nick Jones 
said[32] that recent versions of portage do also provide information on 
Changelog entries with the --changelog command-line option. 

 30. http://article.gmane.org/gmane.linux.gentoo.devel/6637
 31. http://www.liquidx.net/projects/etcat/
 32. http://article.gmane.org/gmane.linux.gentoo.devel/6641
    
=======================
4. Gentoo International
=======================
  
Akemashite Omedetou Gozaimasu
 
...or happy new year in Japanese. Friday night saw the first GentooJP New 
Year's Celebration, an event that is almost certain to become a tradition, 
at least for this year's 15 inaugural participants. Everybody who's 
anybody in Tokyo's bustling Gentoo scene was there, downing large 
quantities of beer and sake while trying hard not to spill anything on the 
laptops lying around, munching happily away at Kimchi-Nabe (fish of all 
denominations swimming in a bowl of Korean spicy cabbage...) and talking 
shop, of course, what else is there. Sadly missing were Gentooists from 
the Kansai area, including a number of prominent ebuilders from Osaka and 
Kyoto, who are of course much more seriously working people and never seem 
to make it to drinking events in Tokyo. [NB: The GWN team invites you to 
keep us informed about similar events in your countries.]
 
A Forum for Gentoo Users in China
 
While the mainstream user base on the official Gentoo Forums is slowly 
growing out of proportion, the inability to display Chinese has lead to a 
few frustrated comments by Gentooists from China. Until the official 
forums can add support for CJK character sets, Chinese Gentooists may want 
to check out the bustling community active in a Chinese Gentoo forum[33] 
on LinuxSir.com. Combining what they like to call "DIY Linux", the forum 
gathers users of both Gentoo and Linux-from-scratch under one umbrella. It 
is hosted on Linux,Sir!, one of the larger Chinese-language techie 
communities, emanating that typical BBS-style mix of technical support and 
entertainment centered around various Linux distributions. LinuxSir 
currently accomodates roughly 7500 users, predominantly from Shanghai, 
Chengdu, Dalian, but also from outside mainland China, of course. The 
popularity of the Gentoo forum is second only to Redhat, but towering over 
Debian, SuSE, Mandrake and Turbolinux, in spite of their better-known CJK 
support and adaptability to Chinese users. The software used for 
Linux,Sir! (vBulletin)[34] is MySQL-based just like forums.gentoo.org, and 
defaults to GB2312 encoding (Simplified Chinese character set). 

 33. 
http://www.linuxsir.com/bbs/forumdisplay.php?s=7fd36e0dd0f21fe72b435d5fe4d9
6e4e&forumid=58
 34. http://www.vbulletin.com
   
================
5. Portage Watch
================
  
The following stable packages were added to portage this week
-------------------------------------------------------------
  

 * app-emulation/win4lin : Win4Lin allows you run Windows applications 
somewhat natively http://www.netraverse.com/ 
 * app-games/gxmame : GXMame is a frontend for XMame using the GTK 
library, the goal is to provide the same GUI as mame32 
http://gmame.sourceforge.net 
 * app-misc/mime-types : Provides mime.types file http://www.gentoo.org/ 
 * app-misc/xnc : A ile manager for X Window system very similar to Norton 
Commander, with a lot of features. http://xnc.dubna.su/ 
 * app-sci/tbass : Balsa is both a framework for synthesising asynchronous 
hardware systems and the language for describing such systems 
http://www.cs.man.ac.uk/amulet/projects/balsa/ 
 * app-sci/systemc : A C++ based modeling platform for VLSI and 
system-level co-design http://www.systemc.org/ 
 * app-sci/vstgl : Visual Signal Transition Graph Lab 
http://vstgl.sourceforge.net/ 
 * app-text/mftrace : traces TeX fonts to PFA or PFB fonts (formerly 
pktrace) http://www.cs.uu.nl/~hanwen/mftrace/ 
 * dev-lang/stratego : Stratego term-rewriting language 
http://www.stratego-language.org 
 * dev-lang/erlang : Erlang programming language, runtime environment, and 
large collection of libraries http://www.erlang.org/ 
 * dev-lang/bigwig : a high-level programming language for developing 
interactive Web services. http://www.brics.dk/bigwig/ 
 * dev-libs/cgicc : A C++ class library for writing CGI applications 
http://www.cgicc.org 
 * dev-libs/libevent : A library to execute a function when a specific 
event occurs on a file descriptor http://monkey.org/~provos/libevent/ 
 * dev-util/cproto : generate C function prototypes from C source code 
http://cproto.sourceforge.net/ 
 * media-gfx/icoutils : A set of programs for extracting and converting 
images in Microsoft Windows icon and cursor files (.ico, .cur). 
http://www.student.lu.se/~nbi98oli 
 * media-gfx/pfaedit : postscript font editor and converter 
http://pfaedit.sourceforge.net/ 
 * net-analyzer/nagios-core : Nagios 1.0 core - Host and service monitor 
cgi, docs etc... http://www.nagios.org/ 
 * net-analyzer/nagios-imagepack : Nagios imagepacks - Icons and pictures 
for Nagios http://www.nagios.org 
 * net-mail/sylpheed-claws : Bleeding edge version of Sylpheed 
http://sylpheed-claws.sf.net 
 * net-misc/arpd : ARP reply daemon enables a single host to claim all 
unassigned addresses on a LAN for network monitoring or simulation 
http://www.citi.umich.edu/u/provos/honeyd/ 
 * net-www/adzapper : redirector for squid that intercepts advertising, 
page counters and some web bugs http://adzapper.sourceforge.net/ 
 * net-www/squirm : A redirector for Squid http://squirm.foote.com.au 
 * sys-devel/cc-config : Utility to change the gcc compiler being used. 
http://www.gentoo.org/ 
 * sys-libs/lrmi : LRMI is a library for calling real mode BIOS routines 
under Linux. http://www.sourceforge.net/projects/lrmi/ 
 
    
Updates to notable packages
---------------------------

 * sys-apps/portage - portage-2.0.46-r6.ebuild; portage-2.0.46-r8.ebuild; 
   portage-2.0.46-r9.ebuild;  
 * x11-base/xfree - xfree-4.2.99.3-r2.ebuild;  
 * sys-kernel/* - ac-sources-2.4.21_pre3-r2.ebuild; 
   ac-sources-2.4.21_pre3-r3.ebuild; ac-sources-2.4.21_pre3-r4.ebuild; 
   alpha-sources-2.4.20-r2.ebuild; development-sources-2.5.55.ebuild; 
   development-sources-2.5.56.ebuild; development-sources-2.5.57.ebuild; 
   development-sources-2.5.58.ebuild; gentoo-sources-2.4.20-r1.ebuild; 
   gs-sources-2.4.21_pre3.ebuild; lolo-sources-2.4.20.1.ebuild; 
   lolo-sources-2.4.20.1_rc3.ebuild; sparc-sources-2.4.20-r2.ebuild; 
   xfs-sources-2.4.20_pre4.ebuild; xfs-sources-2.4.20_pre5.ebuild;  
 * dev-php/php - php-4.3.0-r2.ebuild;  
 * sys-devel/perl - perl-5.8.0-r9.ebuild;  
 * app-admin/gentoolkit - gentoolkit-0.1.17-r9.ebuild;  
 
    
===========
6. Bugzilla
===========
  
Summary
-------

 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
 
    
Statistics
----------
  
The Gentoo community uses Bugzilla (bugs.gentoo.org[35]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. In the last 7 days, activity on the site has resulted 
in: 

 * 265 new bugs this week 
 * 1382 total bugs currently marked 'new' 
 * 548 total bugs curently assigned to developers 
 * 54 bugs that were previously closed have been reopened. 
 
There are currently 1984 bugs open in bugzilla. Of these: 36 are labelled 
'blocker', 72 are labelled 'critical', and 120 are labelled 'major'. 

 35. http://bugs.gentoo.org
 
The current list of developers' open bugs may be found at the  Gentoo Bug 
Count Report[36]. 

 36. 
http://bugs.gentoo.org/reports.cgi?product=-All-&output=most_doomed&links=1
&banner=1&quip=0 
    
Closed Bug Rankings
-------------------
  
The developers and teams who have closed the most bugs this week are: 

 * The Gnome Team[37], with 13 closed bugs[38] 
 * Martin Schlemmer[39], with 13 closed bugs[40] 
 * John P. Davis[41], with 12 closed bugs[42] 
 * Mike Frysinger[43], with 10 closed bugs[44] 
 * Michael Cummings[45], with 8 closed bugs[46] 
 

 37. mailto://gnome@g.o
 38. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=RESOLVED&bug_s
tatus=CLOSED&resolution=FIXED&resolution=TEST-REQUEST&emailassigned_to1=1&e
mailtype1=exact&email1=gnome%40gentoo.org&chfield=bug_status&chfieldfrom=20
03-01-10
 39. mailto://azarah@g.o
 40. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=RESOLVED&bug_s
tatus=CLOSED&resolution=FIXED&resolution=TEST-REQUEST&emailassigned_to1=1&e
mailtype1=exact&email1=azarah%40gentoo.org&chfield=bug_status&chfieldfrom=2
003-01-10
 41. mailto://zhen@g.o
 42. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=RESOLVED&bug_s
tatus=CLOSED&resolution=FIXED&resolution=TEST-REQUEST&emailassigned_to1=1&e
mailtype1=exact&email1=zhen%40gentoo.org&chfield=bug_status&chfieldfrom=200
3-01-10
 43. mailto://vapier@g.o
 44. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=RESOLVED&bug_s
tatus=CLOSED&resolution=FIXED&resolution=TEST-REQUEST&emailassigned_to1=1&e
mailtype1=exact&email1=vapier%40gentoo.org&chfield=bug_status&chfieldfrom=2
003-01-10
 45. mailto://mcummings@g.o
 46. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=RESOLVED&bug_s
tatus=CLOSED&resolution=FIXED&resolution=TEST-REQUEST&emailassigned_to1=1&e
mailtype1=exact&email1=mcummings%40gentoo.org&chfield=bug_status&chfieldfro
m=2003-01-10
    
New Bug Rankings
----------------
  
The developers and teams who have been assigned the most new bugs this 
week are: 

 * Michael Cummings[47], with 25 new bugs[48] 
 * Daniel Robbins[49], with 12 new bugs[50] 
 * Martin Schlemmer[51], with 11 new bugs[52] 
 * The Gnome Team[53], with 9 new bugs[54] 
 

 47. mailto://mcummings@g.o
 48. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&emailassigned_to1=1&emailtype1=exact&email1=mcummings%40gent
oo.org&chfield=bug_status&chfieldfrom=2003-01-10
 49. mailto://drobbins@g.o
 50. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&emailassigned_to1=1&emailtype1=exact&email1=drobbins%40gento
o.org&chfield=bug_status&chfieldfrom=2003-01-10
 51. mailto://azarah@g.o
 52. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&emailassigned_to1=1&emailtype1=exact&email1=azarah%40gentoo.
org&chfield=bug_status&chfieldfrom=2003-01-10
 53. mailto://gnome@g.o
 54. 
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&emailassigned_to1=1&emailtype1=exact&email1=gnome%40gentoo.o
rg&chfield=bug_status&chfieldfrom=2003-01-10
    
==================
7. Tips and Tricks
==================
  
Using GnuPG to digitally sign emails
 
GNU Privacy Guard (GnuPG) is an open source version of the commercial 
Pretty Good Privacy (PGP) software for creating digital signatures. This 
weeks Tips and Tricks will cover the creation of a key, exporting your key 
to a public keyserver, and finally adding your digital signature to email. 
 
---------------------------------------------------------------------------
| Code Listing 7.1:                                                       |
|Installing GnuPG                                                         |
---------------------------------------------------------------------------
|                                                                         |
|# emerge gnupg                                                           |
|                                                                         |
|//Create the .gnupg directory                                            |
|# mkdir $HOME/.gnupg                                                     |
|                                                                         |
---------------------------------------------------------------------------
 
---------------------------------------------------------------------------
| Code Listing 7.2:                                                       |
|Creating a new key                                                       |
---------------------------------------------------------------------------
|                                                                         |
|#  gpg --gen-key                                                         |
|gpg (GnuPG) 1.2.1; Copyright (C) 2002 Free Software Foundation, Inc.     |
|This program comes with ABSOLUTELY NO WARRANTY.                          |
|This is free software, and you are welcome to redistribute it            |
|under certain conditions. See the file COPYING for details.              |
|                                                                         |
|Please select what kind of key you want:                                 |
|   (1) DSA and ElGamal (default)                                         |
|   (2) DSA (sign only)                                                   |
|   (5) RSA (sign only)                                                   |
|Your selection? 1                                                        |
|                                                                         |
|About to generate a new ELG-E keypair.                                   |
|              minimum keysize is  768 bits                               |
|              default keysize is 1024 bits                               |
|    highest suggested keysize is 2048 bits                               |
|What keysize do you want? (1024) 1024                                    |
|                                                                         |
|Please specify how long the key should be valid.                         |
|         0 = key does not expire                                         |
|      <n>  = key expires in n days                                       |
|      <n>w = key expires in n weeks                                      |
|      <n>m = key expires in n months                                     |
|      <n>y = key expires in n years                                      |
|Key is valid for? (0) 0                                                  |
|Key does not expire at all                                               |
|Is this correct (y/n)? y                                                 |
|                                                                         |
|You need a User-ID to identify your key; the software constructs the user|
|id from Real Name, Comment and Email Address in this form:               |
|    "Heinrich Heine (Der Dichter) <heinrichh@×××××××××××.de>"            |
|                                                                         |
|Real name: John Doe                                                      |
|Email address: john.doe@×××××××.com                                      |
|Comment:                                                                 |
|                                                                         |
|You selected this USER-ID:                                               |
|   "John Doe <john.doe@×××××××.com>"                                     |
|                                                                         |
|Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o                    |
|You need a Passphrase to protect your secret key.                        |
|                                                                         |
|//Make sure you pick a good password and DON'T FORGET IT                 |
|Enter passphrase: secret                                                 |
|Repeat passphrase: secret                                                |
|                                                                         |
|We need to generate a lot of random bytes. It is a good idea to perform  |
|some other action (type on the keyboard, move the mouse, utilize the     |
|disks) during the prime generation; this gives the random number         |
|generator a better chance to gain enough entropy.                        |
|                                                                         |
|gpg: /home/johndoe/.gnupg/trustdb.gpg: trustdb created                   |
|public and secret key created and signed.                                |
|key marked as ultimately trusted.                                        |
|                                                                         |
|//The eight character string is your Key ID (in this case, A268D066)     |
|pub  1024D/A268D066 2003-01-17 John Doe <john.doe@×××××××.com>           |
|     Key fingerprint = D435 4979 610B 0BAB F107  64F8 FAF5 94E0 A268 D066|
|sub  1024g/AB3B30AF 2003-01-17                                           |
|                                                                         |
---------------------------------------------------------------------------
 
Now that your key has been made, it needs to be exported to a public 
keyserver. While this is not required, it's the easiest way for others to 
get your public key information and verify your information. To send your 
key, you'll first need to know your Key ID. 
 
---------------------------------------------------------------------------
| Code Listing 7.3:                                                       |
|Finding your Key ID                                                      |
---------------------------------------------------------------------------
|                                                                         |
|//Your Key ID is the eight character string after 1024D/                 |
|# gpg --list-keys                                                        |
|/home/johndoe/.gnupg/pubring.gpg                                         |
|-------------------------------                                          |
|pub  1024D/A268D066 2003-01-17 John Doe <john.doe@×××××××.com>           |
|sub  1024g/AB3B30AF 2003-01-17                                           |
|                                                                         |
---------------------------------------------------------------------------
 
Now you can export your key. 
 
---------------------------------------------------------------------------
| Code Listing 7.4:                                                       |
|Export your key to a public keyserver                                    |
---------------------------------------------------------------------------
|                                                                         |
|# gpg --send-keys --keyserver wwwkeys.pgp.net A268D066                   |
|gpg: success sending to `wwwkeys.pgp.net' (status=200)                   |
|                                                                         |
---------------------------------------------------------------------------
 
Now that your key has been created and published, you can start using it 
to sign emails. You'll need to remember your Key ID for this step. If you 
don't remember it, see the above code listing (Finding your Key ID). 
 
Use the following steps to set up encryption in Evolution: 

 * Click on Tools->Settings. 
 * Select the Mail Accounts button and the account that will be using the 
   key. 
 * Click Edit and then the Security tab. Enter your Key ID in the field 
   entitled PGP/GPG Key ID. 
 * Click OK.  Now when you compose a message, select Security->PGP Sign to 
   add your digital signature to your email. 

To set up encryption in Mutt, add the following options to your 
$HOME/.muttrc file. 
---------------------------------------------------------------------------
| Code Listing 7.5:                                                       |
|GPG settings in ~/.muttrc                                                |
---------------------------------------------------------------------------
|                                                                         |
|                                                                         |
|set pgp_decode_command="gpg %?p?--passphrase-fd 0? \                     |
|   --no-verbose --batch  --output - %f"                                  |
|set pgp_verify_command="gpg --no-verbose --batch --output \              |
|   - --verify %s %f"                                                     |
|set pgp_decrypt_command="gpg --passphrase-fd 0 --no-verbose \            |
|   --batch --output - %f"                                                |
|set pgp_sign_command="gpg --no-verbose --batch --output \                |
|   - --passphrase-fd 0 --armor --detach-sign --textmode %?a?-u %a? %f"   |
|set pgp_clearsign_command="gpg --no-verbose --batch --output - \         |
|   --passphrase-fd 0 --armor --textmode --clearsign %?a?-u %a? %f"       |
|                                                                         |
|//Insert your Key ID after the --encrypt-to option prefixed by 0x        |
|set pgp_encrypt_only_command="gpg --batch --quiet --no-verbose \         |
|   --output - --encrypt --textmode --armor --always-trust \              |
|   --encrypt-to 0x<your key ID> -- -r %r -- %f"                          |
|set pgp_encrypt_sign_command="gpg --passphrase-fd 0 --batch --quiet \    |
|   --no-verbose --textmode --output - --encrypt --sign %?a?-u %a? \      |
|   --armor --always-trust --encrypt-to 0x<your key ID> -- -r %r -- %f"   |
|set pgp_import_command="gpg --no-verbose --import -v %f"                 |
|set pgp_export_command="gpg --no-verbose --export --armor %r"            |
|set pgp_verify_key_command="gpg --no-verbose --batch --fingerprint \     |
|   --check-sigs %r"                                                      |
|set pgp_list_pubring_command="gpg --no-verbose --batch --with-colons \   |
|   --list-keys %r"                                                       |
|set pgp_list_secring_command="gpg --no-verbose --batch --with-colons     |
|   --list-secret-keys %r"                                                |
|set pgp_autosign=yes                                                     |
|set pgp_sign_as=0x<your key ID>                                          |
|set pgp_replyencrypt=yes                                                 |
|set pgp_timeout=1800                                                     |
|set pgp_good_sign="^gpg: Good signature from"                            |
|                                                                         |
---------------------------------------------------------------------------
 
When you compose a message, press p to sign or encrypt. To only sign your 
email, select s. Then you can send your message and it will be signed with 
your digital signature. 
 
The above tips will help you get up and running with gpg, but it is not by 
any means a complete guide. You should also read GnuPG's excellent 
documentation[55] section to learn more about important concepts like key 
revocation, key signing and webs of trust. 

 55. http://www.gnupg.org/(en)/documentation/index.html
   
==========================
8. Moves, Adds and Changes
==========================
  
Moves
-----
  
The following developers recently left the Gentoo team: 
  
 * none this week 
 
    
Adds
----
  
The following developers recently joined the Gentoo team: 

 * Alain Penders (RexOrient) -- Subversion and nforce2 kernel hacking 
 
    
Changes
-------
  
The following developers recently changed roles within the Gentoo project. 
 
 * none this week 
 
    
====================================
9. Subscribe to the GWN mailing list
====================================
  
Subscribe to our mailing list by sending a blank email to
gentoo-gwn-subscribe@g.o.
   
=====================
10. Contribute to GWN
=====================
  
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 
email[56].

 56. gwn-feedback@g.o
   
================
11. GWN Feedback
================
  
Please send us your feedback[57] and help make GWN better.

 57. gwn-feedback@g.o
   
===================
12. Other Languages
===================
  
The Gentoo Weekly Newsletter is also available in the following languages:
 
 * Dutch 
 * English 
 * German 
 * French 
 * Japanese 
 * Italian 
 * Portuguese (Brazil) 
 * Portuguese (Portugal) 
 * Spanish 
  
Kurt Lieber <klieber@g.o> - Editor
AJ Armstrong <aja@×××××××××××××.com> - Contributor
Brice Burgess <nesta@×××××××.net> - Contributor
Yuji Carlos Kosugi <carlos@g.o> - Contributor
Rafael Cordones Marcos <rcm@×××××××.net> - Contributor
David Narayan <david@×××××××.net> - Contributor
Ulrich Plate <plate@×××.com> - Contributor
Peter Sharp <mail@××××××××××××××.net> - Contributor
Mathy Vanvoorden <matje@×××××××.be> - Dutch Translation
Tom Van Laerhoven <tom.vanlaerhoven@××××××.be> - Dutch Translation
Roel Adriaans <roel@××××××××.cx> - Dutch Translation
Nicolas Ledez <nicolas.ledez@××××.fr> - French Translation
Guillaume Plessis <gui@×××××××××.com> - French Translation
Eric St-Georges <thevedge@××××××××.net> - French Translation
John Berry <anfini@××××.fr> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Michael Kohl <citizen428@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Daniel Ketel <kage-chan@g.o> - Japanese Translation
Yoshiaki Hagihara <hagi@×××.com> - Japanese Translation
Andy Hunne <andy@×××××××××.com> - Japanese Translation
Yuji Carlos Kosugi <carlos@g.o> - Japanese Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Translation
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Translation
Lanark <lanark@××××××××××.ar> - Spanish Translation
Rafael Cordones Marcos <rcm@×××××××.net> - Spanish Translation
Julio Castillo <julio@×××××××××××××.com> - Spanish Translation
Jaime Freire <jfreire@××.com> - Spanish Translation
Sergio Gómez <s3r@××××××××××××.ar> - Spanish Translation