Gentoo Archives: gentoo-gwn

From: Yuji Kosugi <carlos@g.o>
To: gentoo-gwn@l.g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter - Volume 3, Issue 26
Date: Tue, 29 Jun 2004 22:35:58
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of June 28th, 2004.
1. Gentoo News
First Installation of Gentoo Linux on a Quadruple Opteron
There are offers simply impossible to turn down. When Gentoo developer 
Lars Weiler (Pylon) was approached to try an installation on the finest 
machine displayed at the Hewlett-Packard booth during the German LinuxTag, 
the HP staff really didn't have to ask him twice. A Proliant DL 585 
featuring four 2.2 GHz AMD64 CPUs with 1 MB of L2 Cache each and a total 
of 16 GB of RAM was sitting at the HP stand, and the RedHat environment 
already installed served as the base of a chroot installation of Gentoo 
Linux - the first installation ever on this type of machine, and the first 
time anyone got a 2.6 kernel to run on it. In spite of the warnings in the 
hardware manual, Pylon managed to install a 2.6.7 kernel, bootstrapped a 
stage1 install in 25 minutes and was done with a complete stage3 
installation after another 45 minutes. The HP staff was so pleased with 
the fact that they had Gentoo running on their quadruple Opteron beast, 
they took over and set up the management software for 16 other Opteron 
cluster machines in the same rack, fiddled a little with Povray rendering, 
and merrily ran Gentoo Linux for the remaining two days of the LinuxTag.
Figure 1.1: Left: Lars Weiler (Gentoo), right: Cedric Milesi (HP 
Grenoble), center: Proliant DL 585 and 16 cluster nodes below
Figure 1.2: 6 minutes to compile Qt...
Gentoo Present at the LinuxTag in Karlsruhe
With more than 20,000 visitors the LinuxTag in Karlsruhe is by far the 
most important Linux and Open Source show in Europe, and the statistics at 
the Gentoo booth matched the record figures of the event as a whole.During 
the four days of the event, 15 developers and other Gentoo activists 
shared in manning the booth. On top of the obligatory x86 PCs, six 
architectures running Gentoo Linux were on display this year, including an 
SGI Indy, an Xbox, several Macintosh laptops, an HP PA/RISC machine, a DEC 
Alpha and a Sparc Ultra 10. It was also the first occasion to register as 
a member of the Gentoo e.V., the German not-for-profit association set up 
a few weeks ago. 
Figure 1.1: Not just a football team: German, Swiss and Austrian 
Gentooistas in front of their LinuxTag booth
Left to right: cybersystem, dakjo, darktemplaa, Pylon, ian!, wschlich, 
zypher, amne (kneeling), beejay, dertobi123, stkn, tantive, dj-submerge
2. Projects Update
The Infrastructure project team reports that they have received two new 
servers from the Open Source Lab at Oregon State University[1]. These are 
dual Xeon machines with 1 GB of RAM each, which will provide new homes for 
the forums as well as bugzilla and The infrastructure 
team is also working on developing and deploying some new survey software 
which will help gather better information about Gentoo users, how they use 
the distro, and what they would like to see. There has been a new server 
added to the rotation. 

The Security team was pleased to report that they have set records for the 
number of GLSAs released for each of the last three months, and seem well 
on the way to setting another one this month. This is a strong indication 
that the processes for identifying, documenting and fixing security bugs 
are in place and working well. Thierry Carrez[2], Sune Kloppenborg 
Jeppesen[3] and KrispyKringle[4] were specifically identified as having 
done "yeoman's duty in keeping our security bugs under control". 

 2. Koon@g.o
 3. Jaervosz@g.o
 4. KrispyKringle@g.o
The Release Engineering project informed us that Chris Gianelloni[5] will 
be serving as the the Release QA manager, and that Roger Miliker[6] has 
joined the team. Testing for the 2004.2 release is well underway, and test 
releases of the new LiveCDs are available on the Gentoo mirrors under the 
path /experimental/x86/livecd. Bugs on the test releases, as always, 
should be reported at[7]. The catalyst tool for building 
LiveCDs has been updated significantly, including better support for 
distcc and the option of using an overlay for the portage snapshot. New 
versions should appear in portage soon. 

 5. wolf31o2@g.o
 6. roger55@g.o
3. Gentoo Security
Apache 1.3: Buffer overflow in mod_proxy
A bug in mod_proxy may allow a remote attacker to execute arbitrary code 
when Apache is configured a certain way. 
For more information, please see the GLSA Announcement[8] 

IPsec-Tools: authentication bug in racoon
racoon provided as part of IPsec-Tools fails do proper authentication. 
For more information, please see the GLSA Announcement[9] 

gzip: Insecure creation of temporary files
gzip contain a bug potentially allowing an attacker to execute arbitrary 
For more information, please see the GLSA Announcement[10] 

giFT-FastTrack: remote denial of service attack
There is a vulnerability where a carefully crafted signal sent to the 
giFT-FastTrack plugin will cause the giFT daemon to crash. 
For more information, please see the GLSA Announcement[11] 

FreeS/WAN, Openswan, strongSwan: Vulnerabilities in certificate handling
FreeS/WAN, Openswan, strongSwan and Super-FreeS/WAN contain two bugs when 
authenticating PKCS#7 certificates. This could allow an attacker to 
authenticate with a fake certificate. 
For more information, please see the GLSA Announcement[12] 

4. Featured Developer of the Week
Marius Mauch
Our featured developer for this week is Marius Mauch[13] (genone), a 
member of the portage[14] developers group. He is not tied to any specific 
sub-project, but works as needed on areas ranging from portage and its 
associated tools through developer and user support, bugzilla maintenance 
and ebuild maintenance in app-portage and others such as 
sylpheed-claws[15] and gambas[16]. 

 13. genone@g.o
Marius has been using Linux since Suse 6.1 in 1998, although he was 
introduced to it somewhat earlier when a friend lent him a boot disk to 
repair a failed Windows install. He remained a Suse user through version 
7.1 and tried Red Hat 7.3 and 8.0 - the latter he describes as "one big 
bug". A few Slashdot postings about Gentoo encouraged him to try it under 
VMWare in the Summer of 2002. That fall, he installed Gentoo on one of his 
desktops. Marius promptly began tweaking portage on his new system. After 
he contributed a number of patches to portage and several new ebuilds, he 
was invited to join the Gentoo team as a developer last September. When 
asked to identify work he had been particularly pleased with, he mentioned 
the modifications to the GLSA framework outlined in GLSA 14[17], an update 
to portage to permit security upgrades to be identified and emerged. 

Marius uses a fairly prosaic Athon-XP 2600+ desktop, as well as a P2 266 
that has been converted for use as a router/server and an aging P3 Celeron 
1133 Laptop. He is currently using XFCE4[18] on the Desktop and Gnome[19] 
on the Laptop, but isn't particularly partisan about any WM. In addition 
to Sylpheed-Claws, he usually starts gaim[20], xchat[21], firefox[22] and 
xmms[23] or motv[24] shortly after booting a machine. 

Marius lives in Germany, where he is studying Computer Science at the 
University of Bremen. He enjoys role-playing (although he has little 
opportunity to do so at the moment) as well as biking and watching 
Football. He is particularly pleased that Werder Bremen[25] won the double 
this year. He confesses to having recently renewed a video-game addiction 
for which he is not seeking treatment. He is a Babylon 5 fan, offering a 
line from the character G'Kar as a favorite: "No dictator, no invader can 
hold an imprisoned population by force of arms forever. There is no 
greater power in the universe than the need for freedom. Against that 
power, governments and tyrants and armies cannot stand." Marius concluded 
by saying that "Gentoo is like a Vorlon: mysterious but very powerful." 

5. Heard in the Community
Web Forums
GNUstep Guerilla 
GNUstep, the notoriously underestimated project, is not just the umptienth 
funny way of managing your desktop. What's more interesting is the 
development environment it provides for compiling Mac OS X (Cocoa) 
applications for use on an x86 Linux platform. To reflect the progress 
that GNUstep has made over the past few months, Forum user fafhrd[26] 
seems to have found his calling: Unconvinced by the current state of the 
GNUstep ebuilds in Portage, he decided to write some of his own, ended up 
posting a dozen new bugs and getting feedback from a number of people 
adventurous enough to try them out: 

 * GNUstep on Gentoo: how many of us are there?[27] 
 * New GNUstep Bugs[28] 
Yahoo Changes Affect Gentoo Users 
Earlier this week, Yahoo changed the protocol used in their Instant 
Messaging client. Two popular message clients, Kopete and GAIM, were both 

Installing Gentoo from Knoppix? 
The Alternative Gentoo Installation guide provides instructions on 
installing Gentoo from a Knoppix CD. However, one list member was having 
some troubles. Check out this[30] thread to read up on som extra tips! 

6. Gentoo International
Italy: MOCA Hacker Camp in Pescara, 20-22 August 2004 
Italian geeks have known Metro Olografix[31] as an organisation of mailbox 
admins and bulletin board system hackers from the Fido realm who got 
together ten years ago in an effort to fight against police intervention 
in running their BBSs. To commemorate the anniversay, the Metro Olografix 
Camp (MOCA)[32] will be organised during the third weekend in August, in 
the city of Pescara. The MOCA is a hacker camp designed after the famous 
Chaos Computer Club summer camps in Germany, with workshops and 
friendliness and sports for nerds. Gentoo developer Luca Barbato[33] 
currently drumming up a posse to join him at the camp knows what he's 
talking about - he's already been to the CCC camps... You don't want to 
miss this, the MOCA site is set in one of the most spectacular landscapes 
of Italy, underneath the Abruzzian hills and right on the Adriatic 
waterfront. If you haven't planned your summer holiday yet, here's the 
perfect place. Check the Italian forum thread[34] for details. 

 33. lu_zero@g.o
Central Europe: Gentoo User Map Revisited 
About a year ago, German Gentoo developers came up with the idea of 
representing users as little red dots on a map of the country. 
Unfortunately, the old site disappeared along with the entries of 
everybody who had already entered their location data. Now the interactive 
map of the geographical Gentoo user distribution in and around Germany has 
been brought back, stable and easily usable, and on a server that's 
unlikely to disappear any time soon. If you're a Gentoo user within the 
area covered on this map (which is much larger than Germany, including all 
of the Netherlands, the Czech Republic, Austria and Switzerland, together 
with most of Belgium, Poland, and Slovakia, and parts of Italy and 
France), make yourself visible here[35]. Even if you don't know a word of 
German, the instructions should be fairly easy to follow: Just enter your 
coordinates, name and email address. 

7. Tips and Tricks
Finding recent files with ls and 'FlAt'
A quick way to find recently changed files is to pass the -FlAt flags to 
ls. Combined with head, this command can give you a quick overview of 
recently modified files in a directory. The -F option distinguishes 
certain types of files and directories by adding extra characters (such as 
'/' for directories, '*' for executables, etc.). The -t option sorts the 
entries by the date they were last modified. Piping the output to head 
shows (by default) only 10 entries. 
| Code Listing 7.1:                                                       |
|# ls -FlAt | head                                                        |
For more information, see man ls.
8. Moves, Adds, and Changes
The following developers recently left the Gentoo team:
 * None this week 
The following developers recently joined the Gentoo Linux team:
 * Michele Noberasco (s4t4n) 
 * Frank van de pol (fvdpol) - sound 
 * Daniel Goller (morfic) - gcc 
 * Philippe Trottier (tchiwam) - ppc64 
 * Olivier Fisette (ribosome) - bioinformatics/molecular biology software 
 * Robb Romans (killsoft) - media-radio 
 * Elizabeth Blackwell (LizB) - Gentoo/PPC documentation 
 * Tamran Lengyel (tamran) 
 * Alex Polvi (polvi) - infrastructure 
The following developers recently changed roles within the Gentoo Linux 
 * Jeremy Huddleston (eradicator) - joined devrel 
9. Contribute to GWN
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 

 36. gwn-feedback@g.o
10. GWN Feedback
Please send us your feedback[37] and help make the GWN better.

 37. gwn-feedback@g.o
11. GWN Subscription Information
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@g.o from the email address you are 
subscribed under.
12. Other Languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Danish[38] 
 * Dutch[39] 
 * English[40] 
 * German[41] 
 * French[42] 
 * Japanese[43] 
 * Italian[44] 
 * Polish[45] 
 * Portuguese (Brazil)[46] 
 * Portuguese (Portugal)[47] 
 * Russian[48] 
 * Spanish[49] 
 * Turkish[50] 
Yuji Carlos Kosugi <carlos@g.o> - Editor
AJ Armstrong <aja@×××××××××××××.com> - Contributor
Brian Downey <bdowney@×××××××××××.net> - Contributor
Kurt Lieber <klieber@g.o> - Contributor
David Narayan <david@×××××××.net> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Sven Vermeulen <swift@g.o> - Contributor
Simon Holm Thagersen <simon@××××××.net> - Danish Translation
Jesper Brodersen <broeman@g.o> - Danish Translation
Arne Mejlholm <aaby@g.o> - Danish Translation
Hendrik Eeckhaut <Hendrik.Eeckhaut@×××××.be> - Dutch Translation
Jorn Eilander <sephiroth@××××××××.nl> - Dutch Translation
Bernard Kerckenaere <bernieke@××××××××.com> - Dutch Translation
Peter ter Borg <peter@××××××.nl> - Dutch Translation
Jochen Maes <linux@××××.be> - Dutch Translation
Roderick Goessen <rgoessen@××××.nl> - Dutch Translation
Gerard van den Berg <gerard@××××××.net> - Dutch Translation
Matthieu Montaudouin <mat@××××××××.com> - French Translation
Xavier Neys <neysx@g.o> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Antoine Raillon <cabec2@××××××.net> - French Translation
Sebastien Cevey <seb@×××××.net> - French Translation
Jean-Christophe Choisy <mabouya@××××××××××××.org> - French Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Lukas Domagala <Cyrik@g.o> - German Translation
Tobias Scherbaum <dertobi123@g.o> - German Translation
Daniel Gerholdt <Sputnik1969@g.o> - German Translation
Marc Herren <dj-submerge@g.o> - German Translation
Tobias Matzat <SirSeoman@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Stefano Lucidi <stefano.lucidi@×××××××××××××.org> - Italian Translation
Katuyuki Konno <katuyuki@××××××××.jp> - Japanese Translation
Hiroyuki Takeda <hiro@××××××××××××××.jp> - Japanese Translation
Masato Hatakeyama <hatake@×××××××××××.jp> - Japanese Translation
Masayoshi Nakamura <masayang@×××××××××.com> - Japanese Translation
Yasunori Fukudome <yasunori@××××××××××××××××.uk> - Japanese Translation
Tomoyuki Sakurai <web-gentoo-doc-jp@××××××××××××.nu> - Japanese Translation
Lukasz Strzygowski <lucass@××××××.pl> - Polish Translation
Karol Goralski <gooroo@××××××.pl> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <bohlke@×××××××××.br> - Portuguese 
(Brazil) Translation
Eduardo Belloti <dudu@××××××××.net> - Portuguese (Brazil) Translation
Jo??o Rafael Moraes Nicola <joaoraf@×××××××××.br> - Portuguese (Brazil) 
Marcelo Gon??alves de Azambuja <mgazambuja@×××××××××.br> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <angusy@××××××××.org> - Portuguese (Brazil) 
Pablo N. Hess -- NatuNobilis <natunobilis@××××××××.org> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <pzilla@××××××××.br> - Portuguese (Brazil) Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Gustavo Felisberto <humpback@××××××××××.net> - Portuguese (Portugal) 
Jos?? Costa <jose_costa@×××××××.pt> - Portuguese (Portugal) Translation
Luis Medina <metalgodin@×××××××××.org> - Portuguese (Portugal) Translation
Ricardo Loureiro <rjlouro@×××××××.org> - Portuguese (Portugal) Translation
Aleksandr Martyncev <amncorp@××.ru> - Russian Translator
Sergey Galkin <gals_home@××××.ru> - Russian Translator
Sergey Kuleshov <svyatogor@g.o> - Russian Translator
Alex Spirin <asp13@××××.ru> - Russian Translator
Denis Zaletov <dzaletov@×××××××.ru> - Russian Translator
Lanark <lanark@××××××××××.ar> - Spanish Translation
Fernando J. Pereda <ferdy@××××××.org> - Spanish Translation
Lluis Peinado Cifuentes <lpeinado@×××.edu> - Spanish Translation
Zephryn Xirdal T <ZEPHRYNXIRDAL@××××××××××.net> - Spanish Translation
Guillermo Juarez <katossi@××××××××××××××××.es> - Spanish Translation
Jes??s Garc??a Crespo <correo@××××××.com> - Spanish Translation
Carlos Castillo <carlos@×××××××××××××.com> - Spanish Translation
Julio Castillo <julio@×××××××××××××.com> - Spanish Translation
Sergio G??mez <s3r@××××××××××××.ar> - Spanish Translation
Aycan Irican <aycan@××××××××.tr> - Turkish Translation
Bugra Cakir <bugra@×××××××××.com> - Turkish Translation
Cagil Seker <cagils@××××××××××.tr> - Turkish Translation
Emre Kazdagli <emre@××××××××.tr> - Turkish Translation
Evrim Ulu <evrim@××××××××.tr> - Turkish Translation
Gursel Kaynak <gurcell@××××××××.tr> - Turkish Translation