Gentoo Archives: gentoo-gwn

From: Yuji Carlos Kosugi <carlos@g.o>
To: gentoo-gwn@g.o
Subject: [gentoo-gwn] Gentoo Weekli Newsletter - Volume 2, Issue 48
Date: Mon, 01 Dec 2003 22:45:52
Gentoo Weekly Newsletter
This is the Gentoo Weekly Newsletter for the week of December 1st, 2003.
1. Gentoo News
 * Gentoo Documentation Project looking for more translators 
 * Praise for Gentoo Linux in Linux Weekly News 
Gentoo Documentation Project looking for more translators
the Gentoo Documentation Project[1] (GDP) is looking for more translators 
to aid the current translation efforts. As documentation is actively 
maintained and updated, keeping the translations up to date is important 
but timeconsuming if not enough translators are available. 

To improve the translation efforts, the GDP is looking for additional 
translators for several languages. If you are interested to join the 
translation team, please contact the translation lead. 
Language   Lead                  Language            Lead  
Polish     albino@×××××××.net    German              Tobias Scherbaum[2]  
Danish     Jesper Brodersen[3]   Indonesian          Erwin[4]  
Portuguese Ricardo Loureiro[5]   Traditional Chinese Benny Chuang[6]  
Russian    Sergey Kuleshov[7]    French              Xavier Neys[8]  

 2. dertobi123@g.o
 3. broeman@g.o
 4. erwin@g.o
 5. rjlouro@×××××××.org
 6. bennyc@g.o
 7. svyatogor@g.o
 8. neysx@g.o
If you are interested in joining a non-listed translation team, or start a 
translation team for a not (yet :) supported language, please contact 
Sergey Kuleshov[9]. 

 2. svyatogor@g.o
Praise for Gentoo in Linux Weekly News
  When you know it's coming from the right person a simple appreciative 
nod of the head can be very flattering. now Ladislav Bodnar, the man 
behind distrowatch[9] and the only soul on the planet to actually know all 
linux distributions available in the past, present and future, has written 
some outright praise for Gentoo Linux. His article titled "The Success of 
Gentoo"[9] makes Gentoo devs, helpers, forum administrators and power 
users blush to the point of sporting a big, bright crimson complexion. 
Thanks to D.M.D. Ljungmark[9] for pointing us to this article that 
appeared on the LWN on November 19th.    

2. Featured Developer of the Week
Chris PeBenito
Figure 2.1: Chris PeBenito
This week, we are featuring Chris PeBenito[10] (pebenito), the lead for 
the SELinux sub-project for Hardened Gentoo[11], as well as the lead for 
the recently re-initialized Embedded Gentoo[12] project. He has been 
responsible for maintaining the SELinux (Security-Enhanced Linux) userland 
utilities and patches, sys-kernel/selinux-sources, and SELinux policies. 
He also manages the SELinux demo machine[13]. Finally, he has recently 
taken a lead role in re-activating the dormant Embedded Gentoo project and 
is currently hard at work recruiting help, organizing sub-projects and 
discussing priorities. Interested parties are invited to hang out on the 
gentoo-embedded IRC channel and subscribe to the mailing list. 

 3. pebenito@g.o
Chris first started using Linux with Slackware in 1997. He later switched 
to Red Hat, and was considering Sorcerer because it was source-based when 
he heard about Gentoo's packaging system and decided to try it. After 
taking note of the noticeably better performance on his P200 MMX server, 
he was sold. Earlier this year, Chris responded to a request for help from 
Joshua Brindle[14](method) by reading and digesting the NSA's white paper 
on SELinux and then helping to get the packages in order. He was named a 
developer and handed responsibility for the sub-project. One of the 
brightest experiences from that has been the SELinux demo server 
demonstrating its stability during an early slashdotting. He offers a 
cookie to anyone who can crack (not DoS) it. 

 7. method@g.o
Chris usually works on a dual p3-450 workstation, and tests on a pair of 
SELinux servers: a K6-2/400 and a G3/500 clone. He enjoys listening to and 
playing music, and has played soprano and bass clarinet for many years. 
His favorite quote is from the Buddha: "As irrigators lead water where 
they want, as archers make their arrows straight, as carpenters carve 
wood, the wise shape their minds" 
Chris is currently a Master's candidate and Research Assistant in Computer 
Engineering at the Illinois Institute of Technology. His primary research 
and career interests lie in embedded systems and hardware design. He 
expects to be completing his studies next spring. He describes Gentoo as 
"polymorphic; from the same portage tree you can get an embedded system, a 
desktop or a server. What will we come up with next?" 
3. Gentoo Security
 * GLSA: ethereal 
 * GLSA: glibc 
 * GLSA: libnids 
 * GLSA: phpsysinfo 
 * New Security Bug Reports 
GLSA: ethereal
Quote from
Potential security issues have been discovered in the following protocol 
 * An improperly formatted GTP MSISDN string could cause a buffer 
 * A malformed ISAKMP or MEGACO packet could make Ethereal or Tethereal 
 * The SOCKS dissector was susceptible to a heap overlfow. 
It may be possible to make Ethereal crash or run arbitrary code by 
injecting a purposefully malformed packet onto the wire, or by convincing 
someone to read a malformed packet trace file.
 * Severity: Normal 
 * Packages Affected: <0.9.16 
 * Rectification: emerge sync; emerge '>=net-analyzer/ethereal-0.9.16'; 
emerge clean 
 * GLSA Announcement[15] 

GLSA: glibc
A bug in the getgrouplist function can cause a buffer overflow if the size 
of the group list is too small to hold all the user's groups. This 
overflow can cause segmentation faults in user applications. This 
vulnerability exists only when an administrator has placed a user in a 
number of groups larger than that expected by an application. 
 * Severity: Normal 
 * Packages Affected: <=2.2.4 
 * Rectification: emerge sync; emerge '>=sys-libs/glibc-2.2.5'; emerge 
 * GLSA Announcement[16] 

GLSA: libnids
There is a bug in the part of libnids code responsible for TCP reassembly. 
The flaw probably allows remote code execution.
 * Severity: Normal 
 * Packages Affected: <=1.17 
 * Rectification: emerge sync; emerge '>=net-libs/libnids-1.18'; emerge 
 * GLSA Announcement[17] 

GLSA: phpsysinfo
phpSysInfo contains two vulnerabilities which could allow local files to 
be read or arbitrary PHP code to be executed, under the privileges of the 
web server process.
 * Severity: Normal 
 * Packages Affected: <=2.1 
 * Rectification: emerge sync; emerge '>=dev-php/phpsysinfo-2.1-r1'; 
emerge clean 
 * GLSA Announcement[18] 

New Security Bug Reports
The following new security bugs were posted this week: 
 * sys-apps/iproute[19] 
 * net-dialup/freeradius[20] 
 * net-analyzer/traceroute, net-misc/iputils, 
 * app-crypt/gnupg[22] 
 * net-mail/qmail[23] 
 * sys-kernel[24] 
4. Heard in the Community
Web Forums
Gnome 2.5 Hits the Ground Running
Sudden flurry of activity at the Desktop Environment section of the forum. 
After KDE 3.2, Keith Packard's new X server and other excitements of the 
past weeks, Gnome friends finally have had an opportunity to retaliate. 
Gnome 2.5 was released on Saturday, and the corresponding Forum thread is 
mightily pleased, albeit fiddling with minor issues concerning things that 
build less well than others... For the user who doesn't mind a bit of 
risk, has unofficial ebuilds (if you find bugs in these, 
please send them to, not to
 * Gnome 2.5.0 is out![25] 
 * Changelog for Gnome 2.5 at[26] 
Undelete in Linux
Windows has had various "undelete" software available for years. Once in a 
great while, we all wish we had one for our favorite OS. Does it exist? 
Readthis[27] thread to find out. 

New USE flag
With its continual strive to increase the amount of choice users have in 
Gentoo it's not suprising that new USE flags are being proposed all the 
time. Here[28] is the most recent one: accessibility. Check it out. 

Web-based Portage
Our favorite package maintenence suite has a new frontend in development. 
Benjamin Judas[29] is working on the construction of a new web based 
frontend for portage. Have a look here[30] and here[31] for the first 

 22. beejay@g.o
5. Gentoo International
Japan: 2nd Gentoo Appearance at the Internet Week 2003 in Yokohama
The "BSD/Linux Day" is an all-day event, traditionally embedded in the 
annual gathering of Internauts in Japan, the Internet Week[32] at 
Yokohama's Pacifico Conference Centre. In what amounts to a fledgling 
tradition of its own, Gentoo is going to be represented by GentooJP 
activists, just like last year[33]. This time Mamoru Komachi will give an 
introduction to Gentoo Linux during the first session of the day, and on 
top of the presentation (and the rather interesting conference 
program)[34], Gentooists on the Japanese mailing list have been busy 
organising some apres-speech gathering, possibly with drinks and whatever 
else one does in Yokohama after dark. This annual Japan Unix Society[35] 
meeting is going to be held on December 2nd, from 9:00 to 17:00, and has a 
price tag of 3000 JPY per person, subject to rebates available for JUS 
members and students. You may want to send an email to the Japanese Gentoo 
mailing list[36] to announce your intentions of showing up...

 29. gentoojp-users@××××××××××××.jp
6. Bugzilla
 * Statistics 
 * Closed Bug Ranking 
 * New Bug Rankings 
The Gentoo community uses Bugzilla ([37]) to record and 
track bugs, notifications, suggestions and other interactions with the 
development team. Between 21 November 2003 and 27 November 2003, activity 
on the site has resulted in: 

 * 506 new bugs during this period 
 * 268 bugs closed or resolved during this period 
 * 18 previously closed bugs were reopened this period 
Of the 4248 currently open bugs: 92 are labeled 'blocker', 185 are labeled 
'critical', and 314 are labeled 'major'. 
Closed Bug Rankings
The developers and teams who have closed the most bugs during this period 
 * Ryan Phillips[38], with 12 closed bugs[39]  
 * Gentoo Linux Gnome Desktop Team[40], with 10 closed bugs[41]  
 * Gentoo Games[42], with 10 closed bugs[43]  
 * Portage team[44], with 10 closed bugs[45]  
 * Alastair Tse[46], with 9 closed bugs[47]  
 * Daniel Ahlberg[48], with 9 closed bugs[49]  
 38. rphillips@g.o
 40. gnome@g.o
 42. games@g.o
 44. dev-portage@g.o
 46. liquidx@g.o
 48. aliz@g.o

New Bug Rankings
The developers and teams who have been assigned the most new bugs during 
this period are: 
 * AMD64 Porting Team[50], with 29 new bugs[51]  
 * Gentoo Sound Team[52], with 13 new bugs[53]  
 * Martin Schlemmer[54], with 13 new bugs[55]  
 * x86 Kernel Team[56], with 11 new bugs[57]  
 * Gentoo KDE team[58], with 11 new bugs[59]  
 * Portage team[60], with 11 new bugs[61]  
 50. amd64@g.o
 52. sound@g.o
 54. azarah@g.o
 56. x86-kernel@g.o
 58. kde@g.o
 60. dev-portage@g.o
7. Tips and Tricks
ANSI Escape Sequences: Colors
This week's tip shows the colors available as ANSI escape sequences. These 
can be used to beautify terminal prompts, text, or anything else that 
understands ANSI escape sequences.
ANSI escape sequences are non-printed text that is interpreted to change 
the format of some text. In this example, we will specifically look at the 
use of escape sequences to specify colors. In the standard Gentoo 
/etc/profile, there are some examples of these colors already being used 
to change the color of parts of the terminal prompt. For example, the 
pathname appears in blue and parts of the bash prompt show up in red or 
green depending on whether you are root or a normal user.
Non-printable ANSI escape sequences are always enclosed \[\033[ and \]. 
Colors must be followed by a m. Using the example from /etc/profile, we 
can see that the color code for green is 32, the code for blue is 34, and 
the code for red is 31.
| Code Listing 7.1:                                                       |
| PS1 from /etc/profile                                                   |
|                                                                         |
|root user                                                                |
|export PS1='\[\033[01;31m\]\h \[\033[01;34m\]\W \$ \[\033[00m\]'         |
|                      red               blue                             |
|normal user                                                              |
|export PS1='\[\033[01;32m\]\u@\h \[\033[01;34m\]\W \$ \[\033[00m\]'      |
|                      green                blue                          |
|                                                                         |
The next part is the 1 preceding the actual color code. This indicates 
whether or not the color should be bold or not (0 for normal, 1 for bold). 
So if you wanted a normal green instead of a bold green, you would use 
00;32m instead of 01;32m.
Note: This does not work with all colors. See the list at the bottom for a 
list of what's available in bold.
For background colors you would 4x instead of 3x. So to have the 
background blue instead of the text, you could use 00;44m instead of 
Here is a list of colors and their escape sequences.
| Code Listing 7.2:                                                       |
|                                                                         |
|    Black      0;30       Dark Gray    1;30                              |
|    Red        0;31       Bold Red     1;31                              |
|    Green      0;32       Bold Green   1;32                              |
|    Yellow     0;33       Bold Yellow  1;33                              |
|    Blue       0;34       Bold Blue    1;34                              |
|    Purple     0;35       Bold Purple  1;35                              |
|    Cyan       0;36       Bold Cyan    1;36                              |
|    Light Gray 0;37       White        1;37                              |
|                                                                         |
Note: ANSI sequence 0;33 is listed as Brown in the BASH-Prompt HOWTO, but 
it seems more of a mustard yellow. Strictly speaking, the bold version of 
it is indeed yellow - therefore I've listed it as yellow.
Also, if you're scared of these escape sequences but want to add color to 
shell scripts, check out app-misc/color.
8. Moves, Adds, and Changes
The following developers recently left the Gentoo team: 
 * none this week 
The following developers recently joined the Gentoo Linux team:
 * none this week 
The following developers recently changed roles within the Gentoo Linux 
 * none this week 
9. Contribute to GWN
Interested in contributing to the Gentoo Weekly Newsletter? Send us an 

 55. gwn-feedback@g.o
10. GWN Feedback
Please send us your feedback[63] and help make the GWN better.

 56. gwn-feedback@g.o
11. GWN Subscription Information
To subscribe to the Gentoo Weekly Newsletter, send a blank email to 
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to 
gentoo-gwn-unsubscribe@g.o from the email address you are 
subscribed under.
12. Other Languages
The Gentoo Weekly Newsletter is also available in the following languages:
 * Dutch[64] 
 * English[65] 
 * German[66] 
 * French[67] 
 * Japanese[68] 
 * Italian[69] 
 * Polish[70] 
 * Portuguese (Brazil)[71] 
 * Portuguese (Portugal)[72] 
 * Russian[73] 
 * Spanish[74] 
 * Turkish[75] 
Yuji Carlos Kosugi <carlos@g.o> - Editor
AJ Armstrong <aja@×××××××××××××.com> - Contributor
Brian Downey <bdowney@×××××××××××.net> - Contributor
Luke Giuliani <cold_flame@×××××.com> - Contributor
Shawn Jonnet <shawn.jonnet@×××××××.net> - Contributor
Michael Kohl <citizen428@g.o> - Contributor
Kurt Lieber <klieber@g.o> - Contributor
Rafael Cordones Marcos <rcm@×××××××.net> - Contributor
David Narayan <david@×××××××.net> - Contributor
Gerald J Normandin Jr. <gerrynjr@g.o> - Contributor
Ulrich Plate <plate@g.o> - Contributor
Mathy Vanvoorden <matje@×××××××.be> - Dutch Translation
Hendrik Eeckhaut <Hendrik.Eeckhaut@×××××.be> - Dutch Translation
Jorn Eilander <sephiroth@××××××××.nl> - Dutch Translation
Bernard Kerckenaere <bernieke@××××××××.com> - Dutch Translation
Peter ter Borg <peter@××××××.nl> - Dutch Translation
Jochen Maes <linux@××××.be> - Dutch Translation
Roderick Goessen <rgoessen@××××.nl> - Dutch Translation
Gerard van den Berg <gerard@××××××.net> - Dutch Translation
Matthieu Montaudouin <mat@××××××××.com> - French Translation
Xavier Neys <neysx@g.o> - French Translation
Martin Prieto <riverdale@×××××××××.org> - French Translation
Antoine Raillon <cabec2@××××××.net> - French Translation
Sebastien Cevey <seb@×××××.net> - French Translation
Jean-Christophe Choisy <mabouya@××××××××××××.org> - French Translation
Thomas Raschbacher <lordvan@g.o> - German Translation
Steffen Lassahn <madeagle@g.o> - German Translation
Matthias F. Brandstetter <haim@g.o> - German Translation
Lukas Domagala <Cyrik@g.o> - German Translation
Tobias Scherbaum <dertobi123@g.o> - German Translation
Daniel Gerholdt <Sputnik1969@g.o> - German Translation
Marc Herren <dj-submerge@g.o> - German Translation
Tobias Matzat <SirSeoman@g.o> - German Translation
Marco Mascherpa <mush@××××××.net> - Italian Translation
Claudio Merloni <paper@×××××××.it> - Italian Translation
Christian Apolloni <bsolar@×××××××.ch> - Italian Translation
Stefano Lucidi <stefano.lucidi@×××××××××××××.org> - Italian Translation
Yoshiaki Hagihara <hagi@×××.com> - Japanese Translation
Katsuyuki Konno <katuyuki@××××××××.jp> - Japanese Translation
Yuji Carlos Kosugi <carlos@g.o> - Japanese Translation
Yasunori Fukudome <yasunori@××××××××××××××××.uk> - Japanese Translation
Takashi Ota <088@××××××××××.jp> - Japanese Translation
Radoslaw Janeczko <sototh@×××.pl> - Polish Translation
Lukasz Strzygowski <lucass.home@××.pl> - Polish Translation
Michal Drobek <veng@××.pl> - Polish Translation
Adam Lyjak <apo@××××××××××××××××××××.pl> - Polish Translation
Krzysztof Klimonda <cthulhu@×××××××××.net> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <bohlke@×××××××××.br> - Portuguese 
(Brazil) Translation
Eduardo Belloti <dudu@××××××××.net> - Portuguese (Brazil) Translation
Jo達o Rafael Moraes Nicola <joaoraf@×××××××××.br> - Portuguese (Brazil) 
Marcelo Gon巽alves de Azambuja <mgazambuja@×××××××××.br> - Portuguese 
(Brazil) Translation
Otavio Rodolfo Piske <angusy@××××××××.org> - Portuguese (Brazil) 
Pablo N. Hess -- NatuNobilis <natunobilis@××××××××.org> - Portuguese 
(Brazil) Translation
Pedro de Medeiros <pzilla@××××××××.br> - Portuguese (Brazil) Translation
Ventura Barbeiro <venturasbarbeiro@××××××.br> - Portuguese (Brazil) 
Bruno Ferreira <blueroom@××××××××××××.net> - Portuguese (Portugal) 
Gustavo Felisberto <humpback@××××××××××.net> - Portuguese (Portugal) 
Jos辿 Costa <jose_costa@×××××××.pt> - Portuguese (Portugal) Translation
Luis Medina <metalgodin@×××××××××.org> - Portuguese (Portugal) Translation
Ricardo Loureiro <rjlouro@×××××××.org> - Portuguese (Portugal) Translation
Sergey Galkin <gals_home@××××.ru> - Russian Translator
Sergey Kuleshov <svyatogor@g.o> - Russian Translator
Alex Spirin <asp13@××××.ru> - Russian Translator
Dmitry Suzdalev <dimsuz@××××.ru> - Russian Translator
Anton Vorovatov <mazurous@××××.ru> - Russian Translator
Denis Zaletov <dzaletov@×××××××.ru> - Russian Translator
Lanark <lanark@××××××××××.ar> - Spanish Translation
Fernando J. Pereda <ferdy@××××××.org> - Spanish Translation
Lluis Peinado Cifuentes <lpeinado@×××.edu> - Spanish Translation
Zephryn Xirdal T <ZEPHRYNXIRDAL@××××××××××.net> - Spanish Translation
Guillermo Juarez <katossi@××××××××××××××××.es> - Spanish Translation
Jes炭s Garc鱈a Crespo <correo@××××××.com> - Spanish Translation
Carlos Castillo <carlos@×××××××××××××.com> - Spanish Translation
Julio Castillo <julio@×××××××××××××.com> - Spanish Translation
Sergio G坦mez <s3r@××××××××××××.ar> - Spanish Translation
Aycan Irican <aycan@××××××××.tr> - Turkish Translation
Bugra Cakir <bugra@×××××××××.com> - Turkish Translation
Cagil Seker <cagils@××××××××××.tr> - Turkish Translation
Emre Kazdagli <emre@××××××××.tr> - Turkish Translation
Evrim Ulu <evrim@××××××××.tr> - Turkish Translation
Gursel Kaynak <gurcell@××××××××.tr> - Turkish Translation