Gentoo Weekly Newsletter -- Volume 2, Issue 35
From: | Yuji Carlos Kosugi <carlos@gentoo.org> | |
To: | gentoo-gwn@gentoo.org | |
Subject: | [gentoo-gwn] Gentoo Weekly Newsletter -- Volume 2, Issue 35 | |
Date: | Mon, 29 Sep 2003 00:57:42 -0400 |
--------------------------------------------------------------------------- Gentoo Weekly Newsletter http://www.gentoo.org/news/en/gwn/current.xml This is the Gentoo Weekly Newsletter for the week of September 29th, 2003. --------------------------------------------------------------------------- ============== 1. Gentoo News ============== Summary ------- * BugDay on Saturday, October 4 * Featured Sponsor - Oregon State University BugDay on Saturday, October 4 ----------------------------- The third Gentoo BugDay will be held this Saturday, October 4th. Come down to the #gentoo-bugs channel in irc.freenode.net to work with Gentoo Linux developers and help take a chunk out of the bugs in the distribution. Featured Sponsor - Oregon State University ------------------------------------------ Gentoo Linux relies heavily on its sponsors to provide everything from bandwidth to hardware to technical expertise. Without these sponsors, Gentoo Linux would not be able to provide the level of service that it does today. In an effort to raise awareness of our sponsors and their businesses and services, we will occasionally be featuring them in the Gentoo Weekly Newsletter. Our inaugural Featured Sponsor is also our most important sponsor: Oregon State University. Located in Corvallis, Oregon, Oregon State University[1] is 80 miles south of Portland. OSU is Oregon's land grant, sea grant and space grant university, with nearly 20,000 students from all 50 states and more than 80 countries. 1. http://oregonstate.edu Earlier this year, OSU was approached by Gentoo about hosting opportunities. In an effort to give back to the community that has helped us all out so much they offered rack space and bandwidth for a couple of machines. OSU now hosts the forums, database, CVS and the primary distfile mirror for Gentoo. Gentoo currently uses well over 400GB of outbound bandwidth per day from OSU (peaking at 1TB during the release of 1.4). Figure 1.1: Top machine: sard.gentoo.org, an IA64 box. Black machine: our CVS box. Beige machine: irc.oregonstate.edu(not a Gentoo box) http://www.gentoo.org/images/gwn/20030929_osu1.jpg Figure 1.2: falcon.gentoo.org, which hosts Bugzilla and will host the forums soon http://www.gentoo.org/images/gwn/20030929_osu1.jpg Scott Kveton[2] from Oregon State University[3] has been pivotal in making the Gentoo and other hosting opportunities happen. 2. http://oregonstate.edu/~kveton 3. http://oregonstate.edu "OSU is trying to do its part for the open source community. We're a large shop that uses open source almost exclusively in our environments" said Kveton. "The State of Oregon itself is a very progressive place. The OSDL is here (Open Source Development Lab) and we've even had several bills making their way through our state legislature about the use of open source in government. We're trying to take it a step further and create a place for open source developers to house their projects for the rest of the world." In addition to Gentoo, OSU hosts several other projects: * Ark Linux[4] * Zynot Foundation[5] * Freenode.net[6] (zelazny.freenode.net) * Software in the Public Interest[7] 4. http://urirklinux.org 5. http://www.zynot.org 6. http://www.freenode.net 7. http://www.spi-inc.org OSU will soon be hosting pieces of the Debian GNU/Linux[8], Free Software Foundation[9] and Mozilla.org[10] infrastructure. 8. http://www.debian.org 9. http://www.fsf.org 10. http://www.mozilla.org Oregon State University[11] is well on the way to being known as the home of hosting for open source development. For more information on hosting opportunities please visit the OSS @ Oregon State University pages.[12] 11. http://oregonstate.edu 12. http://oss.oregonstate.edu/hosting/ ================== 2. Gentoo Security ================== Summary ------- * GLSA: openssh GLSA: OpenSSH ------------- Quote from advisory: "Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple vulnerabilities in the new PAM code. At least one of these bugs is remotely exploitable (under a non-standard configuration, with privsep disabled)." * Severity: Medium - multiple vulnerabilities in new PAM code. * Packages Affected: <openssh-3.7.1_p2 * Rectification: emerge sync; emerge openssh; emerge clean * GLSA Announcement[13] 13. http://marc.theaimsgroup.com/?l=gentoo-announce&m=106434831016610&w=2 New Security Bug Reports ------------------------ The following new security bugs were posted in the past week: * net-ftp/proftpd[14] * KDE 3.1.3 has security bugs[15] * pam: pam_console gives all users full access to serial ports![16] 14. http://bugs.gentoo.org/show_bug.cgi?id=29452 15. http://bugs.gentoo.org/show_bug.cgi?id=29406 16. http://bugs.gentoo.org/show_bug.cgi?id=28407 ================================= 3. Featured Developer of the Week ================================= Joachim Blaabjerg Figure 3.1: Joachim Blaabjerg http://www.gentoo.org/images/gwn/20030929_styx.jpg This week's featured developer is Joachim Blaabjerg[17] (styx), who describes his work as "a grunt developer" on security-related issues and occasional forays into the kernel. Joachim first began using Linux in early 2000, moving from Red Hat through Slackware, Debian, Trustix and Mandrake before settling on Linux From Scratch. That was, of course, before he discovered Gentoo, which he migrated to in February of 2002. He became a developer rather quickly - being named to the rolls that April. He has not been very active for the last few months, but hopes to rectify that in the near future. 17. styx@gentoo.org Joachim has a fair bit of Linux development experience. He worked on his own security-focused Linux distro (SuxOS) for much of 2001 and 2002 before abandoning the work in 2002 due to the daunting size of the project. He has also been working on his own HTTP server while contributing to open-source security projects like WOLK[18] and LIDS[19]. He even maintained his own kernel patch series for some time, and has contributed patches and bug-fixes to a number of other projects. He is most proud of his work on the XFS sources for Gentoo, and the work he did with Michael Cohen[20] on other Gentoo kernels. This is somewhat impressive if we note that Joachim is a high-school student who turned 18 the day before this publication. 18. http://sourceforge.net/projects/wolk 19. http://www.lids.org/ 20. mjc@gentoo.org Joachim uses vim for editing; gcc bash, and cvs for development; and irssi, nc, ssh and pig for communication. He is a KDE aficionado, and uses Konsole, KMail,Konqueror and KNode extensively. He currently owns three computers: an AthlonXP(2000+, 512MB) development box named Elysium, a DEC 3000 (64-bit Alpha 175 MHz, 32MB) server that goes by Zaphod and Methuselah, a Sun SparcStation LX (MicroSparc 50 MHz, 64 MB) that is running a somewhat lethargic Gentoo. Joachim lives in Oslo, Norway, and currently works in a warehouse, but hinted broadly that he would certainly consider a Unix-related job (if only to free up more time to work on Gentoo) if it were offered. He is single, and enjoys cars, music, movies, going out with friends and working out. The favorite quote he offers is Benjamin Franklin's "Beer is proof that God loves us and wants us to be happy.". ========================= 4. Heard in the Community ========================= gentoo-user ----------- Yahoo Blocks Instant Messaging Gentoo users were not immune to the recent Yahoo move to block third party instant messengers from using their service. Will Gaim be patched to fix it? Check it out here [21] . 21. http://news.gmane.org/onethread.php?group=gmane.linux.gentoo.user&root=%3C2 00309262103.47048.ghostwriter429%40ev1.net%3E Measuring Network Metrics Ever wonder how fast your cable modem really gets? Internet-based calculators for download are immensely innaccurate. Some suggestions for Linux-based tools were discussed [22] this week. 22. http://article.gmane.org/gmane.linux.gentoo.user/47842/ ======================= 5. Gentoo International ======================= Gentoo International is on hiatus this week. ================ 6. Portage Watch ================ Portage Watch is on hiatus this week. =========== 7. Bugzilla =========== Summary ------- * Statistics * Closed Bug Ranking * New Bug Rankings Statistics ---------- The Gentoo community uses Bugzilla (bugs.gentoo.org[23]) to record and track bugs, notifications, suggestions and other interactions with the development team. Between 19 September 2003 and 25 September 2003, activity on the site has resulted in: 23. http://bugs.gentoo.org * 493 new bugs during this period * 368 bugs closed or resolved during this period * 9 previously closed bugs were reopened this period Of the 4526 currently open bugs: 118 are labeled 'blocker', 217 are labeled 'critical', and 383 are labeled 'major'. Closed Bug Rankings ------------------- The developers and teams who have closed the most bugs during this period are: * Gentoo Sound Team[24], with 32 closed bugs[25] * Martin Holzer[26], with 17 closed bugs[27] * Gentoo Linux Gnome Desktop Team[28], with 16 closed bugs[29] * Portage team[30], with 16 closed bugs[31] 24. sound@gentoo.org 25. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX ED&assigned_to=sound@gentoo.org 26. mholzer@gentoo.org 27. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX ED&assigned_to=mholzer@gentoo.org 28. gnome@gentoo.org 29. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX ED&assigned_to=gnome@gentoo.org 30. dev-portage@gentoo.org 31. http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX ED&assigned_to=dev-portage@gentoo.org New Bug Rankings ---------------- The developers and teams who have been assigned the most new bugs during this period are: * Portage team[32], with 18 new bugs[33] * Gentoo Sound Team[34], with 16 new bugs[35] * Gentoo Linux Gnome Desktop Team[36], with 15 new bugs[37] * Martin Schlemmer[38], with 12 new bugs[39] 32. dev-portage@gentoo.org 33. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09 -25&assigned_to=dev-portage@gentoo.org 34. sound@gentoo.org 35. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09 -25&assigned_to=sound@gentoo.org 36. gnome@gentoo.org 37. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09 -25&assigned_to=gnome@gentoo.org 38. azarah@gentoo.org 39. http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09 -25&assigned_to=azarah@gentoo.org ================== 8. Tips and Tricks ================== Using netstat This week's tip demonstrates some useful applications of the netstat command. Netstat is a command used to print out a list of network connections, routing tables, and other statistics related to networking. Just typing netstat should display a long list of information that's usually more than you want to go through at any given time. The trick to keeping the information useful is knowing what you're looking for and how to tell netstat to only display that information. For example, if you only want to see TCP connections, use netstat --tcp. This shows a list of TCP connections to and from your machine. The following example shows connections to our machine on ports 993 (imaps), 143 (imap), 110 (pop3), 25 (smtp), and 22 (ssh). It also shows a connection from our machine to a remote machine on port 389 (ldap). Note: To speed things up you can use the --numeric option to avoid having to do name resolution on addresses and display the IP only. --------------------------------------------------------------------------- | Code Listing 8.1: | | netstat tcp | --------------------------------------------------------------------------- | | |% netstat --tcp --numeric | |Active Internet connections (w/o servers) | |Proto Recv-Q Send-Q Local Address Foreign Address State| |tcp 0 0 192.168.128.152:993 192.168.128.120:3853 \| |ESTABLISHED | |tcp 0 0 192.168.128.152:143 192.168.128.194:3076 \| |ESTABLISHED | |tcp 0 0 192.168.128.152:45771 192.168.128.34:389 \| |TIME_WAIT | |tcp 0 0 192.168.128.152:110 192.168.33.123:3521 \| |TIME_WAIT | |tcp 0 0 192.168.128.152:25 192.168.231.27:44221 \| |TIME_WAIT | |tcp 0 256 192.168.128.152:22 192.168.128.78:47258 \| |ESTABLISHED | --------------------------------------------------------------------------- If you want to see what (TCP) ports your machine is listening on, use netstat --tcp --listening. Another useful flag to add to this is --programs which indicates which process is listening on the specified port. The following example shows a machine listening on ports 80 (www), 443 (https), 22 (ssh), and 25 (smtp); --------------------------------------------------------------------------- | Code Listing 8.2: | |netstat --tcp --listening --programs | --------------------------------------------------------------------------- | | |# sudo netstat --tcp --listening --programs | |Active Internet connections (only servers) | |Proto Recv-Q Send-Q Local Address Foreign Address State | |PID/Program name | |tcp 0 0 *:www *:* LISTEN \| |28826/apache2 | |tcp 0 0 *:ssh *:* LISTEN 26604/sshd| |tcp 0 0 *:smtp *:* LISTEN 6836/ | |tcp 0 0 *:https *:* LISTEN \| |28826/apache2 | | | --------------------------------------------------------------------------- Note: Using --all displays both connections and listening ports. The next example uses netstat --route to display the routing table. For most people, this will show one IP and and the gateway address but if you have more than one interface or have multiple IPs assigned to an interface, this command can help troubleshoot network routing problems. --------------------------------------------------------------------------- | Code Listing 8.3: | |netstat --route | --------------------------------------------------------------------------- | | |% netstat --route | |Kernel IP routing table | |Destination Gateway Genmask Flags Metric Ref Use \| |Iface | |192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 \| |eth0 | |0.0.0.0 192.168.1.1 0.0.0.0 UG 1 0 0 \| |eth0 | | | --------------------------------------------------------------------------- The last example of netstat uses the --statistics flag to display networking statistics. Using this flag by itself displays all IP, TCP, UDP, and ICMP connection statistics. To just show some basic information. For example purposes, only the output from --raw is displayed here. Combined with the uptime command, this can be used to get an overview of how much traffic your machine is handling on a daily basis. --------------------------------------------------------------------------- | Code Listing 8.4: | |netstat --statistics --route | --------------------------------------------------------------------------- | | |% netstat --statistics --raw | |Ip: | | 620516640 total packets received | | 0 forwarded | | 0 incoming packets discarded | | 615716262 incoming packets delivered | | 699594782 requests sent out | | 5 fragments dropped after timeout | | 3463529 reassemblies required | | 636730 packets reassembled ok | | 5 packet reassembles failed | | 310797 fragments created | |ICMP statistics truncated | | | --------------------------------------------------------------------------- Note: For verbosity, the long names for the various flags were given. Most can be abbreviated to avoid excessive typing (e.g. netstat -tn, netstat -tlp, netstat -r, and netstat -sw). While netstat is a common utility, hopefully this has demonstrated some different ways to make use of the command. For more information see man 8 netstat. ========================== 9. Moves, Adds and Changes ========================== Moves ----- The following developers recently left the Gentoo team: * none this week Adds ---- The following developers recently joined the Gentoo Linux team: * Stefan Knoblich (stkn) -- VoIP Changes ------- The following developers recently changed roles within the Gentoo Linux project. * none this week ===================== 10. Contribute to GWN ===================== Interested in contributing to the Gentoo Weekly Newsletter? Send us an email[40]. 40. gwn-feedback@gentoo.org ================ 11. GWN Feedback ================ Please send us your feedback[41] and help make the GWN better. 41. gwn-feedback@gentoo.org ================================ 12. GWN Subscription Information ================================ To subscribe to the Gentoo Weekly Newsletter, send a blank email to gentoo-gwn-subscribe@gentoo.org. To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to gentoo-gwn-unsubscribe@gentoo.org from the email address you are subscribed under. =================== 13. Other Languages =================== The Gentoo Weekly Newsletter is also available in the following languages: * Dutch[42] * English[43] * German[44] * French[45] * Japanese[46] * Italian[47] * Polish[48] * Portuguese (Brazil)[49] * Portuguese (Portugal)[50] * Russian[51] * Spanish[52] * Turkish[53] 42. http://www.gentoo.org/news/be/gwn/gwn.xml 43. http://www.gentoo.org/news/en/gwn/gwn.xml 44. http://www.gentoo.org/news/de/gwn/gwn.xml 45. http://www.gentoo.org/news/fr/gwn/gwn.xml 46. http://www.gentoo.org/news/ja/gwn/gwn.xml 47. http://www.gentoo.org/news/it/gwn/gwn.xml 48. http://www.gentoo.org/news/pl/gwn/gwn.xml 49. http://www.gentoo.org/news/br/gwn/gwn.xml 50. http://www.gentoo.org/news/pt/gwn/gwn.xml 51. http://www.gentoo.org/news/ru/gwn/gwn.xml 52. http://www.gentoo.org/news/es/gwn/gwn.xml 53. http://www.gentoo.org/news/tr/gwn/gwn.xml Yuji Carlos Kosugi <carlos@gentoo.org> - Editor AJ Armstrong <aja@clanarmstrong.com> - Contributor Brian Downey <bdowney@briandowney.net> - Contributor Cal Evans <cal@calevans.com> - Contributor Chris Gavin <gubbs@fudo.org> - Contributor Luke Giuliani <cold_flame@email.com> - Contributor Shawn Jonnet <shawn.jonnet@verizon.net> - Contributor Michael Kohl <citizen428@gentoo.org> - Contributor Kurt Lieber <klieber@gentoo.org> - Contributor Rafael Cordones Marcos <rcm@sasaska.net> - Contributor David Narayan <david@phrixus.net> - Contributor Gerald J Normandin Jr. <gerrynjr@gentoo.org> - Contributor Ulrich Plate <plate@gentoo.org> - Contributor Mathy Vanvoorden <matje@lanzone.be> - Dutch Translation Hendrik Eeckhaut <Hendrik.Eeckhaut@UGent.be> - Dutch Translation Jorn Eilander <sephiroth@quicknet.nl> - Dutch Translation Bernard Kerckenaere <bernieke@bernieke.com> - Dutch Translation Peter ter Borg <peter@daborg.nl> - Dutch Translation Jochen Maes <linux@sejo.be> - Dutch Translation [NAME REMOVED BY REQUEST] <rgoessen@home.nl> - Dutch Translation Gerard van den Berg <gerard@steelo.net> - Dutch Translation Matthieu Montaudouin <mat@frheaven.com> - French Translation Martin Prieto <riverdale@linuxmail.org> - French Translation Antoine Raillon <cabec2@pegase.net> - French Translation Sebastien Cevey <seb@cine7.net> - French Translation Jean-Christophe Choisy <mabouya@petitefleure.org> - French Translation Thomas Raschbacher <lordvan@gentoo.org> - German Translation Steffen Lassahn <madeagle@gentoo.org> - German Translation Matthias F. Brandstetter <haim@gentoo.org> - German Translation Lukas Domagala <Cyrik@gentoo.org> - German Translation Tobias Scherbaum <tobias@scherbaum.info> - German Translation Daniel Gerholdt <Sputnik1969@gentoo.org> - German Translation Marc Herren <dj-submerge@gentoo.org> - German Translation Tobias Matzat <SirSeoman@gentoo.org> - German Translation Marco Mascherpa <mush@monrif.net> - Italian Translation Claudio Merloni <paper@tiscali.it> - Italian Translation Christian Apolloni <bsolar@bluewin.ch> - Italian Translation Stefano Lucidi <stefano.lucidi@gentoo-italia.org> - Italian Translation Yoshiaki Hagihara <hagi@p1d.com> - Japanese Translation Katsuyuki Konno <katuyuki@siva.ddo.jp> - Japanese Translation Yuji Carlos Kosugi <carlos@gentoo.org> - Japanese Translation Yasunori Fukudome <yasunori@mail.portland.co.uk> - Japanese Translation Takashi Ota <088@t.email.ne.jp> - Japanese Translation Radoslaw Janeczko <sototh@gts.pl> - Polish Translation Lukasz Strzygowski <lucass.home@pf.pl> - Polish Translation Michal Drobek <veng@wp.pl> - Polish Translation Adam Lyjak <apo@cyberpunk.net.pulawy.pl> - Polish Translation Krzysztof Klimonda <cthulhu@emusearch.net> - Polish Translation Atila "Jedi" Bohlke Vasconcelos <bohlke@inf.ufrgs.br> - Portuguese (Brazil) Translation Eduardo Belloti <dudu@datavibe.net> - Portuguese (Brazil) Translation Jo達o Rafael Moraes Nicola <joaoraf@rudah.com.br> - Portuguese (Brazil) Translation Marcelo Gon巽alves de Azambuja <mgazambuja@terra.com.br> - Portuguese (Brazil) Translation Otavio Rodolfo Piske <angusy@gentoobr.org> - Portuguese (Brazil) Translation Pablo N. Hess -- NatuNobilis <natunobilis@gentoobr.org> - Portuguese (Brazil) Translation Pedro de Medeiros <pzilla@yawl.com.br> - Portuguese (Brazil) Translation Ventura Barbeiro <venturasbarbeiro@ig.com.br> - Portuguese (Brazil) Translation Bruno Ferreira <blueroom@digitalmente.net> - Portuguese (Portugal) Translation Gustavo Felisberto <humpback@felisberto.net> - Portuguese (Portugal) Translation Jos辿 Costa <jose_costa@netcabo.pt> - Portuguese (Portugal) Translation Luis Medina <metalgodin@linuxmail.org> - Portuguese (Portugal) Translation Ricardo Loureiro <rjlouro@rjlouro.org> - Portuguese (Portugal) Translation Sergey Galkin <gals_home@list.ru> - Russian Translator Sergey Kuleshov <svyatogor@gentoo.org> - Russian Translator Alex Spirin <asp13@mail.ru> - Russian Translator Dmitry Suzdalev <dimsuz@mail.ru> - Russian Translator Anton Vorovatov <mazurous@mail.ru> - Russian Translator Denis Zaletov <dzaletov@rambler.ru> - Russian Translator Lanark <lanark@lanark.com.ar> - Spanish Translation Fernando J. Pereda <ferdy@ferdyx.org> - Spanish Translation Lluis Peinado Cifuentes <lpeinado@uoc.edu> - Spanish Translation Zephryn Xirdal T <ZEPHRYNXIRDAL@telefonica.net> - Spanish Translation Guillermo Juarez <katossi@usuarios.retecal.es> - Spanish Translation Jes炭s Garc鱈a Crespo <correo@sevein.com> - Spanish Translation Carlos Castillo <carlos@castillobueno.com> - Spanish Translation Julio Castillo <julio@castillobueno.com> - Spanish Translation Sergio G坦mez <s3r@fibertel.com.ar> - Spanish Translation Aycan Irican <aycan@core.gen.tr> - Turkish Translation Bugra Cakir <bugra@myrealbox.com> - Turkish Translation Cagil Seker <cagils@biznet.com.tr> - Turkish Translation Emre Kazdagli <emre@core.gen.tr> - Turkish Translation Evrim Ulu <evrim@core.gen.tr> - Turkish Translation Gursel Kaynak <gurcell@core.gen.tr> - Turkish Translation