Gentoo Archives: gentoo-gwn

From: Yuji Carlos Kosugi <carlos@g.o>
To: gentoo-gwn@g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter -- Volume 2, Issue 35
Date: Mon, 29 Sep 2003 04:59:48
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of September 29th, 2003.
1. Gentoo News
 * BugDay on Saturday, October 4 
 * Featured Sponsor - Oregon State University 
BugDay on Saturday, October 4
The third Gentoo BugDay will be held this Saturday, October 4th. Come down 
to the #gentoo-bugs channel in to work with Gentoo Linux 
developers and help take a chunk out of the bugs in the distribution. 
Featured Sponsor - Oregon State University
Gentoo Linux relies heavily on its sponsors to provide everything from 
bandwidth to hardware to technical expertise. Without these sponsors, 
Gentoo Linux would not be able to provide the level of service that it 
does today. In an effort to raise awareness of our sponsors and their 
businesses and services, we will occasionally be featuring them in the 
Gentoo Weekly Newsletter. Our inaugural Featured Sponsor is also our most 
important sponsor: Oregon State University.
Located in Corvallis, Oregon, Oregon State University[1] is 80 miles south 
of Portland. OSU is Oregon's land grant, sea grant and space grant 
university, with nearly 20,000 students from all 50 states and more than 
80 countries.

Earlier this year, OSU was approached by Gentoo about hosting 
opportunities. In an effort to give back to the community that has helped 
us all out so much they offered rack space and bandwidth for a couple of 
machines. OSU now hosts the forums, database, CVS and the primary distfile 
mirror for Gentoo. Gentoo currently uses well over 400GB of outbound 
bandwidth per day from OSU (peaking at 1TB during the release of 1.4).
Figure 1.1: Top machine:, an IA64 box. Black machine: our 
CVS box. Beige machine: a Gentoo box)
Figure 1.2:, which hosts Bugzilla and will host the 
forums soon
Scott Kveton[2] from Oregon State University[3] has been pivotal in making 
the Gentoo and other hosting opportunities happen.

"OSU is trying to do its part for the open source community. We're a large 
shop that uses open source almost exclusively in our environments" said 
"The State of Oregon itself is a very progressive place. The OSDL is here 
(Open Source Development Lab) and we've even had several bills making 
their way through our state legislature about the use of open source in 
government. We're trying to take it a step further and create a place for 
open source developers to house their projects for the rest of the world."
In addition to Gentoo, OSU hosts several other projects:
 * Ark Linux[4] 
 * Zynot Foundation[5] 
 *[6] ( 
 * Software in the Public Interest[7] 

OSU will soon be hosting pieces of the Debian GNU/Linux[8], Free Software 
Foundation[9] and[10] infrastructure.

Oregon State University[11] is well on the way to being known as the home 
of hosting for open source development. For more information on hosting 
opportunities please visit the OSS @ Oregon State University pages.[12] 

2. Gentoo Security
 * GLSA: openssh 
Quote from advisory: 
"Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple 
vulnerabilities in the new PAM code. At least one of these bugs is 
remotely exploitable (under a non-standard configuration, with privsep 
 * Severity: Medium - multiple vulnerabilities in new PAM code. 
 * Packages Affected: <openssh-3.7.1_p2 
 * Rectification: emerge sync; emerge openssh; emerge clean 
 * GLSA Announcement[13] 

New Security Bug Reports
The following new security bugs were posted in the past week: 
 * net-ftp/proftpd[14] 
 * KDE 3.1.3 has security bugs[15] 
 * pam: pam_console gives all users full access to serial ports![16] 
3. Featured Developer of the Week
Joachim Blaabjerg
Figure 3.1: Joachim Blaabjerg
This week's featured developer is Joachim Blaabjerg[17] (styx), who 
describes his work as "a grunt developer" on security-related issues and 
occasional forays into the kernel. Joachim first began using Linux in 
early 2000, moving from Red Hat through Slackware, Debian, Trustix and 
Mandrake before settling on Linux From Scratch. That was, of course, 
before he discovered Gentoo, which he migrated to in February of 2002. He 
became a developer rather quickly - being named to the rolls that April. 
He has not been very active for the last few months, but hopes to rectify 
that in the near future. 

 17. styx@g.o
Joachim has a fair bit of Linux development experience. He worked on his 
own security-focused Linux distro (SuxOS) for much of 2001 and 2002 before 
abandoning the work in 2002 due to the daunting size of the project. He 
has also been working on his own HTTP server while contributing to 
open-source security projects like WOLK[18] and LIDS[19]. He even 
maintained his own kernel patch series for some time, and has contributed 
patches and bug-fixes to a number of other projects. He is most proud of 
his work on the XFS sources for Gentoo, and the work he did with Michael 
Cohen[20] on other Gentoo kernels. This is somewhat impressive if we note 
that Joachim is a high-school student who turned 18 the day before this 

 20. mjc@g.o
Joachim uses vim for editing; gcc bash, and cvs for development; and 
irssi, nc, ssh and pig for communication. He is a KDE aficionado, and uses 
Konsole, KMail,Konqueror and KNode extensively. He currently owns three 
computers: an AthlonXP(2000+, 512MB) development box named Elysium, a DEC 
3000 (64-bit Alpha 175 MHz, 32MB) server that goes by Zaphod and 
Methuselah, a Sun SparcStation LX (MicroSparc 50 MHz, 64 MB) that is 
running a somewhat lethargic Gentoo. 
Joachim lives in Oslo, Norway, and currently works in a warehouse, but 
hinted broadly that he would certainly consider a Unix-related job (if 
only to free up more time to work on Gentoo) if it were offered. He is 
single, and enjoys cars, music, movies, going out with friends and working 
out. The favorite quote he offers is Benjamin Franklin's "Beer is proof 
that God loves us and wants us to be happy.". 
4. Heard in the Community
Yahoo Blocks Instant Messaging 
Gentoo users were not immune to the recent Yahoo move to block third party 
instant messengers from using their service. Will Gaim be patched to fix 
it? Check it out  here [21] . 

Measuring Network Metrics 
Ever wonder how fast your cable modem really gets? Internet-based 
calculators for download are immensely innaccurate. Some suggestions for 
Linux-based tools were  discussed [22] this week. 

5. Gentoo International
Gentoo International is on hiatus this week.
6. Portage Watch
Portage Watch is on hiatus this week.
7. Bugzilla
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
The Gentoo community uses Bugzilla ([23]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 19 September 2003 and 25 September 2003, 
activity on the site has resulted in: 

 * 493 new bugs during this period 
 * 368 bugs closed or resolved during this period 
 * 9 previously closed bugs were reopened this period 
Of the 4526 currently open bugs: 118 are labeled 'blocker', 217 are 
labeled 'critical', and 383 are labeled 'major'. 
Closed Bug Rankings
The developers and teams who have closed the most bugs during this period 
 * Gentoo Sound Team[24], with 32 closed bugs[25]  
 * Martin Holzer[26], with 17 closed bugs[27]  
 * Gentoo Linux Gnome Desktop Team[28], with 16 closed bugs[29]  
 * Portage team[30], with 16 closed bugs[31]  
 24. sound@g.o
 26. mholzer@g.o
 28. gnome@g.o
 30. dev-portage@g.o

New Bug Rankings
The developers and teams who have been assigned the most new bugs during 
this period are: 
 * Portage team[32], with 18 new bugs[33]  
 * Gentoo Sound Team[34], with 16 new bugs[35]  
 * Gentoo Linux Gnome Desktop Team[36], with 15 new bugs[37]  
 * Martin Schlemmer[38], with 12 new bugs[39]  
 32. dev-portage@g.o
 34. sound@g.o
 36. gnome@g.o
 38. azarah@g.o
8. Tips and Tricks
Using netstat
This week's tip demonstrates some useful applications of the netstat 
command. Netstat is a command used to print out a list of network 
connections, routing tables, and other statistics related to networking. 
Just typing netstat should display a long list of information that's 
usually more than you want to go through at any given time. The trick to 
keeping the information useful is knowing what you're looking for and how 
to tell netstat to only display that information. 
For example, if you only want to see TCP connections, use netstat --tcp. 
This shows a list of TCP connections to and from your machine. The 
following example shows connections to our machine on ports 993 (imaps), 
143 (imap), 110 (pop3), 25 (smtp), and 22 (ssh). It also shows a 
connection from our machine to a remote machine on port 389 (ldap). 
Note:  To speed things up you can use the --numeric option to avoid having 
to do name resolution on addresses and display the IP only. 
| Code Listing 8.1:                                                       |
| netstat tcp                                                             |
|                                                                         |
|% netstat --tcp --numeric                                                |
|Active Internet connections (w/o servers)                                |
|Proto Recv-Q Send-Q Local Address           Foreign Address         State|
|tcp        0      0        \|
|ESTABLISHED                                                              |
|tcp        0      0        \|
|ESTABLISHED                                                              |
|tcp        0      0          \|
|TIME_WAIT                                                                |
|tcp        0      0         \|
|TIME_WAIT                                                                |
|tcp        0      0        \|
|TIME_WAIT                                                                |
|tcp        0    256        \|
|ESTABLISHED                                                              |
If you want to see what (TCP) ports your machine is listening on, use 
netstat --tcp --listening. Another useful flag to add to this is 
--programs which indicates which process is listening on the specified 
port. The following example shows a machine listening on ports 80 (www), 
443 (https), 22 (ssh), and 25 (smtp); 
| Code Listing 8.2:                                                       |
|netstat --tcp --listening --programs                                     |
|                                                                         |
|# sudo netstat --tcp --listening --programs                              |
|Active Internet connections (only servers)                               |
|Proto Recv-Q Send-Q Local Address   Foreign Address   State              |
|PID/Program name                                                         |
|tcp        0      0 *:www           *:*               LISTEN            \|
|28826/apache2                                                            |
|tcp        0      0 *:ssh           *:*               LISTEN   26604/sshd|
|tcp        0      0 *:smtp          *:*               LISTEN   6836/     |
|tcp        0      0 *:https         *:*               LISTEN            \|
|28826/apache2                                                            |
|                                                                         |
Note:  Using --all displays both connections and listening ports. 
The next example uses netstat --route to display the routing table. For 
most people, this will show one IP and and the gateway address but if you 
have more than one interface or have multiple IPs assigned to an 
interface, this command can help troubleshoot network routing problems. 
| Code Listing 8.3:                                                       |
|netstat --route                                                          |
|                                                                         |
|% netstat --route                                                        |
|Kernel IP routing table                                                  |
|Destination     Gateway         Genmask         Flags Metric Ref    Use \|
|Iface                                                                    |
|   U     0      0        0 \|
|eth0                                                                     |
|         UG    1      0        0 \|
|eth0                                                                     |
|                                                                         |
The last example of netstat uses the --statistics flag to display 
networking statistics. Using this flag by itself displays all IP, TCP, 
UDP, and ICMP connection statistics. To just show some basic information. 
For example purposes, only the output from --raw is displayed here. 
Combined with the uptime command, this can be used to get an overview of 
how much traffic your machine is handling on a daily basis. 
| Code Listing 8.4:                                                       |
|netstat --statistics --route                                             |
|                                                                         |
|% netstat --statistics --raw                                             |
|Ip:                                                                      |
|    620516640 total packets received                                     |
|    0 forwarded                                                          |
|    0 incoming packets discarded                                         |
|    615716262 incoming packets delivered                                 |
|    699594782 requests sent out                                          |
|    5 fragments dropped after timeout                                    |
|    3463529 reassemblies required                                        |
|    636730 packets reassembled ok                                        |
|    5 packet reassembles failed                                          |
|    310797 fragments created                                             |
|ICMP statistics truncated                                                |
|                                                                         |
Note:  For verbosity, the long names for the various flags were given. 
Most can be abbreviated to avoid excessive typing (e.g. netstat -tn, 
netstat -tlp, netstat -r, and netstat -sw). 
While netstat is a common utility, hopefully this has demonstrated some 
different ways to make use of the command. For more information see man 8 
9. Moves, Adds and Changes
The following developers recently left the Gentoo team: 
 * none this week 
The following developers recently joined the Gentoo Linux team:
 * Stefan Knoblich (stkn) -- VoIP 
The following developers recently changed roles within the Gentoo Linux 
 * none this week 
10. Contribute to GWN
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 

 40. gwn-feedback@g.o
11. GWN Feedback
Please send us your feedback[41] and help make the GWN better.

 41. gwn-feedback@g.o
12. GWN Subscription Information
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@g.o from the email address you are 
subscribed under.
13. Other Languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Dutch[42] 
 * English[43] 
 * German[44] 
 * French[45] 
 * Japanese[46] 
 * Italian[47] 
 * Polish[48] 
 * Portuguese (Brazil)[49] 
 * Portuguese (Portugal)[50] 
 * Russian[51] 
 * Spanish[52] 
 * Turkish[53] 

Yuji Carlos Kosugi <carlos@g.o> - Editor
AJ Armstrong <aja@×××××××××××××.com> - Contributor
Brian Downey <bdowney@×××××××××××.net> - Contributor
Cal Evans <cal@××××××××.com> - Contributor
Chris Gavin <gubbs@××××.org> - Contributor
Luke Giuliani <cold_flame@×××××.com> - Contributor
Shawn Jonnet <shawn.jonnet@×××××××.net> - Contributor
Michael Kohl <citizen428@g.o> - Contributor
Kurt Lieber <klieber@g.o> - Contributor
Rafael Cordones Marcos <rcm@×××××××.net> - Contributor
David Narayan <david@×××××××.net> - Contributor
Gerald J Normandin Jr. <gerrynjr@g.o> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Mathy Vanvoorden <matje@×××××××.be> - Dutch Translation
Hendrik Eeckhaut <Hendrik.Eeckhaut@×××××.be> - Dutch Translation
Jorn Eilander <sephiroth@××××××××.nl> - Dutch Translation
Bernard Kerckenaere <bernieke@××××××××.com> - Dutch Translation
Peter ter Borg <peter@××××××.nl> - Dutch Translation
Jochen Maes <linux@××××.be> - Dutch Translation
Roderick Goessen <rgoessen@××××.nl> - Dutch Translation
Gerard van den Berg <gerard@××××××.net> - Dutch Translation
Matthieu Montaudouin <mat@××××××××.com> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Antoine Raillon <cabec2@××××××.net> - French Translation
Sebastien Cevey <seb@×××××.net> - French Translation
Jean-Christophe Choisy <mabouya@××××××××××××.org> - French Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Lukas Domagala <Cyrik@g.o> - German Translation
Tobias Scherbaum <tobias@×××××××××.info> - German Translation
Daniel Gerholdt <Sputnik1969@g.o> - German Translation
Marc Herren <dj-submerge@g.o> - German Translation
Tobias Matzat <SirSeoman@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Christian Apolloni <bsolar@×××××××.ch> - Italian Translation
Stefano Lucidi <stefano.lucidi@×××××××××××××.org> - Italian Translation
Yoshiaki Hagihara <hagi@×××.com> - Japanese Translation
Katsuyuki Konno <katuyuki@××××××××.jp> - Japanese Translation
Yuji Carlos Kosugi <carlos@g.o> - Japanese Translation
Yasunori Fukudome <yasunori@××××××××××××××××.uk> - Japanese Translation
Takashi Ota <088@××××××××××.jp> - Japanese Translation
Radoslaw Janeczko <sototh@×××.pl> - Polish Translation
Lukasz Strzygowski <lucass.home@××.pl> - Polish Translation
Michal Drobek <veng@××.pl> - Polish Translation
Adam Lyjak <apo@××××××××××××××××××××.pl> - Polish Translation
Krzysztof Klimonda <cthulhu@×××××××××.net> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <bohlke@×××××××××.br> - Portuguese 
(Brazil) Translation
Eduardo Belloti <dudu@××××××××.net> - Portuguese (Brazil) Translation
Jo達o Rafael Moraes Nicola <joaoraf@×××××××××.br> - Portuguese (Brazil) 
Marcelo Gon巽alves de Azambuja <mgazambuja@×××××××××.br> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <angusy@××××××××.org> - Portuguese (Brazil) 
Pablo N. Hess -- NatuNobilis <natunobilis@××××××××.org> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <pzilla@××××××××.br> - Portuguese (Brazil) Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Gustavo Felisberto <humpback@××××××××××.net> - Portuguese (Portugal) 
Jos辿 Costa <jose_costa@×××××××.pt> - Portuguese (Portugal) Translation
Luis Medina <metalgodin@×××××××××.org> - Portuguese (Portugal) Translation
Ricardo Loureiro <rjlouro@×××××××.org> - Portuguese (Portugal) Translation
Sergey Galkin <gals_home@××××.ru> - Russian Translator
Sergey Kuleshov <svyatogor@g.o> - Russian Translator
Alex Spirin <asp13@××××.ru> - Russian Translator
Dmitry Suzdalev <dimsuz@××××.ru> - Russian Translator
Anton Vorovatov <mazurous@××××.ru> - Russian Translator
Denis Zaletov <dzaletov@×××××××.ru> - Russian Translator
Lanark <lanark@××××××××××.ar> - Spanish Translation
Fernando J. Pereda <ferdy@××××××.org> - Spanish Translation
Lluis Peinado Cifuentes <lpeinado@×××.edu> - Spanish Translation
Zephryn Xirdal T <ZEPHRYNXIRDAL@××××××××××.net> - Spanish Translation
Guillermo Juarez <katossi@××××××××××××××××.es> - Spanish Translation
Jes炭s Garc鱈a Crespo <correo@××××××.com> - Spanish Translation
Carlos Castillo <carlos@×××××××××××××.com> - Spanish Translation
Julio Castillo <julio@×××××××××××××.com> - Spanish Translation
Sergio G坦mez <s3r@××××××××××××.ar> - Spanish Translation
Aycan Irican <aycan@××××××××.tr> - Turkish Translation
Bugra Cakir <bugra@×××××××××.com> - Turkish Translation
Cagil Seker <cagils@××××××××××.tr> - Turkish Translation
Emre Kazdagli <emre@××××××××.tr> - Turkish Translation
Evrim Ulu <evrim@××××××××.tr> - Turkish Translation
Gursel Kaynak <gurcell@××××××××.tr> - Turkish Translation