Gentoo Archives: gentoo-gwn

From: Yuji Carlos Kosugi <carlos@g.o>
To: gentoo-gwn@l.g.o
Subject: [gentoo-gwn] Gentoo Weekly Newsletter - Volume 3, Issue 2
Date: Mon, 12 Jan 2004 14:50:43
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of January 12th, 2004.
1. Gentoo News
 * 2003 Gentoo Bug Hunt Winners 
2003 Gentoo Bug Hunt Winners
The 2003 Gentoo Bug Hunt has come to a close. Here are the winners, who 
are developers who have closed the most bugs in the last quarter of 2003 
(in order):
 * Mike Frysinger[1], with 672 bugs closed 
 * Martin Holzer[2], with 565 bugs closed 
 * Heinrich Wendel[3], with 480 bugs closed 
 * Caleb Tennis[4], with 277 bugs closed 
 * Michael Sterett[5], with 192 bugs closed 
 * Markus Nigbur[6], with 180 bugs closed 
 * Marinus Schraal[7], with 179 bugs closed 
 1. vapier@g.o
 2. mholzer@g.o
 3. lanius@g.o
 4. caleb@g.o
 5. mr_bones_@g.o
 6. pYrania@g.o
 7. foser@g.o

In addition, the following developers receive an honorable mention for 
their great bug stomping efforts:
 * Seemant Kulleen[8], with 161 bugs closed 
 * Marius Mauch[9], with 160 bugs closed 
 * Brad House[10], with 160 bugs closed 
 * Sven Vermeulen[11], with 158 bugs closed 
 * Nicholas Jones[12], 156 bugs closed 
 * Robin Johnson[13], with 153 bugs closed 
 * Tim Yamin[14], with 145 bugs closed 
 * Alastair Tse[15], with 138 bugs closed 
 * Mike Gardiner[16], with 111 bugs closed 
 * Martin Schlemmer[17], with 108 bugs closed 
 * Paul de Vrieze[18], with 93 bugs closed 
 * Donnie Berkholz[19], with 84 bugs closed 
 8. seemant@g.o
 9. genone@g.o
 10. brad_mssw@g.o
 11. swift@g.o
 12. carpaski@g.o
 13. robbat2@g.o
 14. plasmaroo@g.o
 15. liquidx@g.o
 16. obz@g.o
 17. azarah@g.o
 18. pauldv@g.o
 19. spyderous@g.o

And last but not least, non-developer bug janitor Andrew Cooks had an 
impressive showing easily worth an honorable mention: he closed 100 bugs.
If you are one of the winners or have received an honorable mention, 
please contact Daniel Robbins[20] and make sure that he has your mailing 
address. If you're a winner, then we need to determine what hardware you 
should receive. Daniel has decided not to purchase the prize hardware 
components in advance so that winners can suggest or request components 
they may need.

 20. drobbins@g.o
Thank you everyone (not just those mentioned here) for your efforts to 
make Gentoo better for everyone! :)
2. Featured Developer of the Week
Olivier Cr??te
Figure 2.1: Olivier Cr??te
This week, we are featuring Olivier Cr??te[21] (tester), a Montr??al 
resident who is currently spending a year in Europe. Olivier is on the 
AMD64 project, maintains a few packages that would otherwise have been 
abandoned, and is working on some of the Adelie Linux[22] clustering 
enhancements to Gentoo. He is also co-maintainer of GnomeICU[23], a 
Gnome-based ICQ client. 

 21. tester@g.o
Olivier has been using Linux since 1997, progressing from RedHat 4.2 
through 7.3 before the brand-new laptop he acquired in early-2002 caused 
him to look around for a distro that could be optimized for his new 
hardware. He has been on Gentoo ever since, largely because he "found the 
Gentoo forums to be really helpful, and the Gentoo community was 
wonderful". The next summer, he was employed at Cyberlogic[24], a Montreal 
company providing computers and support services, including clustering. 
One of the projects he worked on there was Adelie Linux,using Gentoo as 
the foundation for clustering, including AMD Opteron-based clusters. 
Cyberlogic was very supportive of their staff pursuing an AMD64 version of 
Gentoo, and Olivier worked with Daniel Robbins[25] and others to start 
making it a reality. In particular, Olivier noted that Brad House[26], the 
current Gentoo AMD64 Project[27] lead, "is doing a tremendous job and the 
AMD64 port would not be anywhere near where it is without his 

 25. drobbins@g.o
 26. brad_mssw@g.o
A third-year Software Engineering Student at the Canadian ??cole 
Polytechnique de Montr??al[28], Olivier is currently studying as an 
exchange student at the ??cole Nationale Sup??rieure d'Informatique et de 
Math??matiques Appliqu??es de Grenoble (ENSIMAG)[29] in France He enjoys 
traveling, and you can read about his adventures (in French) on his 
blog[30]. He is currently working on a Dell Inspiron Laptop, and (as a 
Gnome Developer) he uses Gnome[31] 2.4. He recently abandoned Pine[32] in 
favor of Evolution[33] for email, and counts Mozilla Firebird[34], 
xchat[35], Gossip[36], Amsn[37] and aterm[38] among his most oft-used 
applications. Democratically, he uses GNU Emacs[39] for development, and 
vi[40] for general editing. 

Olivier closed our correspondence with the following observation: "What I 
really like about Gentoo is not only that its a great distribution from a 
technical point of view, but that it has a great community. The life and 
blood of a Free Software project is in its community, and Gentoo has one 
of the best communities that I have been part of." His favorite quote was 
from Henry Spencer: "Those who do not understand Unix are condemned to 
reinvent it, poorly." 
3. Gentoo Security
GLSA: Linux kernel do_mremap() privilege escalation vulnerability
A critical security vulnerability has been found in recent Linux kernels 
which allows for local privilege escalation. Arbitrary code may be able to 
exploit this vulnerability and may disrupt the operation of other parts of 
the kernel memory management subroutines finally leading to unexpected 
Since no special privileges are required to use the mremap() system call 
any process may misuse its unexpected behavior to disrupt the kernel 
memory management subsystem. Proper exploitation of this vulnerability may 
lead to local privilege escalation including execution of arbitrary code 
with kernel level access. Proof-of-concept exploit code has been created 
and successfully tested, permitting root escalation on vulnerable systems. 
As a result, all users should upgrade their kernels to new or patched 
There is no temporary workaround - a kernel upgrade is required. A list of 
unaffected kernels is provided in the GLSA announcement[41].

 * Severity: High 
 * Packages Affected: see GLSA announcement[42] 
 * Rectification: emerge sync; emerge -pv your-favorite-sources; emerge 
your-favorite-sources; follow usual procedures for compiling and 
installing a kernel. 
 * GLSA Announcement[43] 

4. Heard in the Community
Web Forums
Greet the Repoman
Genone[44] is among those Gentoo developers with more than just occasional 
guest appearances in the Forums. Last week he put up a post describing the 
characteristics of an upcoming Portage version 2.0.50, which has quickly 
developed in a lively thread discussing the advantages of new and improved 
features, but also points out possible hickups other tools like etcat 
might run into if they're used in conjunction with the new Portage:

 * What to expect from portage-2.0.50[45] 
Stuck Between An ~ARCH and A Hard Place 
For the moderators, the sudden outbreak of complaints about kdelibs-3.1.4 
compiles ending rather abruptly on peculiar error messages was hard to 
contain, particularly because many people seem to panic and forget about 
the Forum's search function. After a biug @urge of duplicates, only one 
thread remained alive. Luckily, Gentoo dev Caleb[46] had both that Forum 
thread and the corresponding bug report[47] in his focus and provided a 
temporary solution (update autoconf to a release number beyond "x86" 
stable) within a very decent response time. Anyway, the actual error is on 
its way out as soon as autoconf-2.58 is bumped to usability for people not 
living on the bleeding ~x86 edge:

 * The big bad kdelibs/kde/autoconf thread of Jan 2004[48] 
DJBDNS and Gentoo 
DJBDNS[49] is a popular alternative to the traditional and sometimes buggy 
BIND[50] package from ISC. This[51] thread covers some basics of getting 
DJBDNS up and running on Gentoo. 

Experimental Gentoo 2004 Stages 
The new Gentoo 2004.0 stages were  quietly[52] announced on gentoo-user 
this week. Download them, and submit bug reports! 

The Command Line Editor Thread 
Finally this week, a more entertaining thread. How many ways can you 
replace a text string in a bunch of files from the Linux command line? 

Submitting Ebuilds.
Interesting in submitting ebuilds? Want to know a bit more about how 
developers get to be developers? Feel like finding a bit more about how 
this whole portage tree thing works when dealing with fun issues like 
spam, security and screwups? Have a look here[54] and here[55] for a start.

5. Gentoo International
Time Out
There are certainly things worth noting - if only we knew about them. 
Please help the GWN team with information about international events, user 
stories and interesting projects from your own countries! By all means, do 
send suggestions to gwn-feedback@g.o. 
6. Bugzilla
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
The Gentoo community uses Bugzilla ([56]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 02 January 2004 and 08 January 2004, activity on 
the site has resulted in: 

 * 578 new bugs during this period 
 * 322 bugs closed or resolved during this period 
 * 8 previously closed bugs were reopened this period 
Of the 4590 currently open bugs: 100 are labeled 'blocker', 187 are 
labeled 'critical', and 331 are labeled 'major'. 
Closed Bug Rankings
The developers and teams who have closed the most bugs during this period 
 * AMD64 Porting Team[57], with 51 closed bugs[58]  
 * Gentoo Games Team[59], with 30 closed bugs[60]  
 * Net-Mail Packages Team[61], with 14 closed bugs[62]  
 * Daniel Ahlberg[63], with 13 closed bugs[64]  
 * x86 Kernel Team[65], with 10 closed bugs[66]  
 * Sven Vermeulen[67], with 10 closed bugs[68]  
 * Gentoo KDE Team[69], with 10 closed bugs[70]  
 57. amd64@g.o
 59. games@g.o
 61. net-mail@g.o
 63. aliz@g.o
 65. x86-kernel@g.o
 67. swift@g.o
 69. kde@g.o
New Bug Rankings
The developers and teams who have been assigned the most new bugs during 
this period are: 
 * AMD64 Porting Team[71], with 38 new bugs[72]  
 * Gnustep Herd[73], with 13 new bugs[74]  
 * Core System Packages Team[75], with 13 new bugs[76]  
 * x86 Kernel Team[77], with 10 new bugs[78]  
 * Gentoo Sound Team[79], with 10 new bugs[80]  
 * Gentoo KDE Team[81], with 10 new bugs[82]  
 71. amd64@g.o
 73. gnustep@g.o
 75. base-system@g.o
 77. x86-kernel@g.o
 79. sound@g.o
 81. kde@g.o
7. Tips and Tricks
Forwarding an SSH agent
This weeks tip shows you how to forward ssh sessions between hosts so you 
don't have to copy private keys between hosts. 
Note:  Remote SSH sessions and public keys are covered in the Keychain 
If you're using remote sessions with public key authentication you are 
probably used to logging into remote hosts without having to retype your 
password. So logging into Host B from Host A and logging into Host C from 
Host A works great. But what if you need to login to Host C from Host B 
(e.g. to use scp or rsync). Instead of copying your private key from Host 
A to Host B, SSH has a configuration flag you can use. 
This flag is called ForwardAgent and it will forward you ssh-agent process 
from Host A to Host B so that you can use the same authentication from 
Host B to Host C without copying your private SSH key. 
To enable ssh-agent forwarding, set ForwardAgent yes in either .ssh/config 
or /etc/ssh/ssh_config. 
| Code Listing 7.1:                                                       |
| /etc/ssh/ssh_config                                                     |
|Host *                                                                   |
|  ForwardAgent  yes                                                      |
Now you can ssh from Host A to Host B and ssh or scp to Host C using the 
authentication information from Host A. 
8. Moves, Adds, and Changes
The following developers recently left the Gentoo team: 
 * none this week 
The following developers recently joined the Gentoo Linux team:
 * none this week 
The following developers recently changed roles within the Gentoo Linux 
 * none this week 
9. Contribute to GWN
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 

 83. gwn-feedback@g.o
10. GWN Feedback
Please send us your feedback[84] and help make the GWN better.

 84. gwn-feedback@g.o
11. GWN Subscription Information
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@g.o from the email address you are 
subscribed under.
12. Other Languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Dutch[85] 
 * English[86] 
 * German[87] 
 * French[88] 
 * Japanese[89] 
 * Italian[90] 
 * Polish[91] 
 * Portuguese (Brazil)[92] 
 * Portuguese (Portugal)[93] 
 * Russian[94] 
 * Spanish[95] 
 * Turkish[96] 
Yuji Carlos Kosugi <carlos@g.o> - Editor
AJ Armstrong <aja@×××××××××××××.com> - Contributor
Brian Downey <bdowney@×××××××××××.net> - Contributor
Luke Giuliani <cold_flame@×××××.com> - Contributor
Kurt Lieber <klieber@g.o> - Contributor
Rafael Cordones Marcos <rcm@×××××××.net> - Contributor
David Narayan <david@×××××××.net> - Contributor
David Nielsen <Lovechild@××××××××.com> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Hendrik Eeckhaut <Hendrik.Eeckhaut@×××××.be> - Dutch Translation
Jorn Eilander <sephiroth@××××××××.nl> - Dutch Translation
Bernard Kerckenaere <bernieke@××××××××.com> - Dutch Translation
Peter ter Borg <peter@××××××.nl> - Dutch Translation
Jochen Maes <linux@××××.be> - Dutch Translation
Roderick Goessen <rgoessen@××××.nl> - Dutch Translation
Gerard van den Berg <gerard@××××××.net> - Dutch Translation
Matthieu Montaudouin <mat@××××××××.com> - French Translation
Xavier Neys <neysx@g.o> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Antoine Raillon <cabec2@××××××.net> - French Translation
Sebastien Cevey <seb@×××××.net> - French Translation
Jean-Christophe Choisy <mabouya@××××××××××××.org> - French Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Lukas Domagala <Cyrik@g.o> - German Translation
Tobias Scherbaum <dertobi123@g.o> - German Translation
Daniel Gerholdt <Sputnik1969@g.o> - German Translation
Marc Herren <dj-submerge@g.o> - German Translation
Tobias Matzat <SirSeoman@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Christian Apolloni <bsolar@×××××××.ch> - Italian Translation
Stefano Lucidi <stefano.lucidi@×××××××××××××.org> - Italian Translation
Yoshiaki Hagihara <hagi@×××.com> - Japanese Translation
Katsuyuki Konno <katuyuki@××××××××.jp> - Japanese Translation
Yuji Carlos Kosugi <carlos@g.o> - Japanese Translation
Yasunori Fukudome <yasunori@××××××××××××××××.uk> - Japanese Translation
Takashi Ota <088@××××××××××.jp> - Japanese Translation
Radoslaw Janeczko <sototh@×××.pl> - Polish Translation
Lukasz Strzygowski <lucass.home@××.pl> - Polish Translation
Michal Drobek <veng@××.pl> - Polish Translation
Adam Lyjak <apo@××××××××××××××××××××.pl> - Polish Translation
Krzysztof Klimonda <cthulhu@×××××××××.net> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <bohlke@×××××××××.br> - Portuguese 
(Brazil) Translation
Eduardo Belloti <dudu@××××××××.net> - Portuguese (Brazil) Translation
Jo??o Rafael Moraes Nicola <joaoraf@×××××××××.br> - Portuguese (Brazil) 
Marcelo Gon??alves de Azambuja <mgazambuja@×××××××××.br> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <angusy@××××××××.org> - Portuguese (Brazil) 
Pablo N. Hess -- NatuNobilis <natunobilis@××××××××.org> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <pzilla@××××××××.br> - Portuguese (Brazil) Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Gustavo Felisberto <humpback@××××××××××.net> - Portuguese (Portugal) 
Jos?? Costa <jose_costa@×××××××.pt> - Portuguese (Portugal) Translation
Luis Medina <metalgodin@×××××××××.org> - Portuguese (Portugal) Translation
Ricardo Loureiro <rjlouro@×××××××.org> - Portuguese (Portugal) Translation
Aleksandr Martyncev <amncorp@××.ru> - Russian Translator
Sergey Galkin <gals_home@××××.ru> - Russian Translator
Sergey Kuleshov <svyatogor@g.o> - Russian Translator
Alex Spirin <asp13@××××.ru> - Russian Translator
Denis Zaletov <dzaletov@×××××××.ru> - Russian Translator
Lanark <lanark@××××××××××.ar> - Spanish Translation
Fernando J. Pereda <ferdy@××××××.org> - Spanish Translation
Lluis Peinado Cifuentes <lpeinado@×××.edu> - Spanish Translation
Zephryn Xirdal T <ZEPHRYNXIRDAL@××××××××××.net> - Spanish Translation
Guillermo Juarez <katossi@××××××××××××××××.es> - Spanish Translation
Jes??s Garc??a Crespo <correo@××××××.com> - Spanish Translation
Carlos Castillo <carlos@×××××××××××××.com> - Spanish Translation
Julio Castillo <julio@×××××××××××××.com> - Spanish Translation
Sergio G??mez <s3r@××××××××××××.ar> - Spanish Translation
Aycan Irican <aycan@××××××××.tr> - Turkish Translation
Bugra Cakir <bugra@×××××××××.com> - Turkish Translation
Cagil Seker <cagils@××××××××××.tr> - Turkish Translation
Emre Kazdagli <emre@××××××××.tr> - Turkish Translation
Evrim Ulu <evrim@××××××××.tr> - Turkish Translation
Gursel Kaynak <gurcell@××××××××.tr> - Turkish Translation