Gentoo Weekly Newsletter -- Volume 2, Issue 35
Yuji Carlos Kosugi <[email protected]> Mon, 29 Sep 2003 00:57:42 -0400
| Newsgroups | gmane.linux.gentoo.weekly-news |
|---|---|
| Message-ID | <[email protected]> |
---------------------------------------------------------------------------
Gentoo Weekly Newsletter
http://www.gentoo.org/news/en/gwn/current.xml
This is the Gentoo Weekly Newsletter for the week of September 29th, 2003.
---------------------------------------------------------------------------
==============
1. Gentoo News
==============
Summary
-------
* BugDay on Saturday, October 4
* Featured Sponsor - Oregon State University
BugDay on Saturday, October 4
-----------------------------
The third Gentoo BugDay will be held this Saturday, October 4th. Come down
to the #gentoo-bugs channel in irc.freenode.net to work with Gentoo Linux
developers and help take a chunk out of the bugs in the distribution.
Featured Sponsor - Oregon State University
------------------------------------------
Gentoo Linux relies heavily on its sponsors to provide everything from
bandwidth to hardware to technical expertise. Without these sponsors,
Gentoo Linux would not be able to provide the level of service that it
does today. In an effort to raise awareness of our sponsors and their
businesses and services, we will occasionally be featuring them in the
Gentoo Weekly Newsletter. Our inaugural Featured Sponsor is also our most
important sponsor: Oregon State University.
Located in Corvallis, Oregon, Oregon State University[1] is 80 miles south
of Portland. OSU is Oregon's land grant, sea grant and space grant
university, with nearly 20,000 students from all 50 states and more than
80 countries.
1. http://oregonstate.edu
Earlier this year, OSU was approached by Gentoo about hosting
opportunities. In an effort to give back to the community that has helped
us all out so much they offered rack space and bandwidth for a couple of
machines. OSU now hosts the forums, database, CVS and the primary distfile
mirror for Gentoo. Gentoo currently uses well over 400GB of outbound
bandwidth per day from OSU (peaking at 1TB during the release of 1.4).
Figure 1.1: Top machine: sard.gentoo.org, an IA64 box. Black machine: our
CVS box. Beige machine: irc.oregonstate.edu(not a Gentoo box)
http://www.gentoo.org/images/gwn/20030929_osu1.jpg
Figure 1.2: falcon.gentoo.org, which hosts Bugzilla and will host the
forums soon
http://www.gentoo.org/images/gwn/20030929_osu1.jpg
Scott Kveton[2] from Oregon State University[3] has been pivotal in making
the Gentoo and other hosting opportunities happen.
2. http://oregonstate.edu/~kveton
3. http://oregonstate.edu
"OSU is trying to do its part for the open source community. We're a large
shop that uses open source almost exclusively in our environments" said
Kveton.
"The State of Oregon itself is a very progressive place. The OSDL is here
(Open Source Development Lab) and we've even had several bills making
their way through our state legislature about the use of open source in
government. We're trying to take it a step further and create a place for
open source developers to house their projects for the rest of the world."
In addition to Gentoo, OSU hosts several other projects:
* Ark Linux[4]
* Zynot Foundation[5]
* Freenode.net[6] (zelazny.freenode.net)
* Software in the Public Interest[7]
4. http://urirklinux.org
5. http://www.zynot.org
6. http://www.freenode.net
7. http://www.spi-inc.org
OSU will soon be hosting pieces of the Debian GNU/Linux[8], Free Software
Foundation[9] and Mozilla.org[10] infrastructure.
8. http://www.debian.org
9. http://www.fsf.org
10. http://www.mozilla.org
Oregon State University[11] is well on the way to being known as the home
of hosting for open source development. For more information on hosting
opportunities please visit the OSS @ Oregon State University pages.[12]
11. http://oregonstate.edu
12. http://oss.oregonstate.edu/hosting/
==================
2. Gentoo Security
==================
Summary
-------
* GLSA: openssh
GLSA: OpenSSH
-------------
Quote from advisory:
"Portable OpenSSH versions 3.7p1 and 3.7.1p1 contain multiple
vulnerabilities in the new PAM code. At least one of these bugs is
remotely exploitable (under a non-standard configuration, with privsep
disabled)."
* Severity: Medium - multiple vulnerabilities in new PAM code.
* Packages Affected: <openssh-3.7.1_p2
* Rectification: emerge sync; emerge openssh; emerge clean
* GLSA Announcement[13]
13. http://marc.theaimsgroup.com/?l=gentoo-announce&m=106434831016610&w=2
New Security Bug Reports
------------------------
The following new security bugs were posted in the past week:
* net-ftp/proftpd[14]
* KDE 3.1.3 has security bugs[15]
* pam: pam_console gives all users full access to serial ports![16]
14. http://bugs.gentoo.org/show_bug.cgi?id=29452
15. http://bugs.gentoo.org/show_bug.cgi?id=29406
16. http://bugs.gentoo.org/show_bug.cgi?id=28407
=================================
3. Featured Developer of the Week
=================================
Joachim Blaabjerg
Figure 3.1: Joachim Blaabjerg
http://www.gentoo.org/images/gwn/20030929_styx.jpg
This week's featured developer is Joachim Blaabjerg[17] (styx), who
describes his work as "a grunt developer" on security-related issues and
occasional forays into the kernel. Joachim first began using Linux in
early 2000, moving from Red Hat through Slackware, Debian, Trustix and
Mandrake before settling on Linux From Scratch. That was, of course,
before he discovered Gentoo, which he migrated to in February of 2002. He
became a developer rather quickly - being named to the rolls that April.
He has not been very active for the last few months, but hopes to rectify
that in the near future.
17. [email protected]
Joachim has a fair bit of Linux development experience. He worked on his
own security-focused Linux distro (SuxOS) for much of 2001 and 2002 before
abandoning the work in 2002 due to the daunting size of the project. He
has also been working on his own HTTP server while contributing to
open-source security projects like WOLK[18] and LIDS[19]. He even
maintained his own kernel patch series for some time, and has contributed
patches and bug-fixes to a number of other projects. He is most proud of
his work on the XFS sources for Gentoo, and the work he did with Michael
Cohen[20] on other Gentoo kernels. This is somewhat impressive if we note
that Joachim is a high-school student who turned 18 the day before this
publication.
18. http://sourceforge.net/projects/wolk
19. http://www.lids.org/
20. [email protected]
Joachim uses vim for editing; gcc bash, and cvs for development; and
irssi, nc, ssh and pig for communication. He is a KDE aficionado, and uses
Konsole, KMail,Konqueror and KNode extensively. He currently owns three
computers: an AthlonXP(2000+, 512MB) development box named Elysium, a DEC
3000 (64-bit Alpha 175 MHz, 32MB) server that goes by Zaphod and
Methuselah, a Sun SparcStation LX (MicroSparc 50 MHz, 64 MB) that is
running a somewhat lethargic Gentoo.
Joachim lives in Oslo, Norway, and currently works in a warehouse, but
hinted broadly that he would certainly consider a Unix-related job (if
only to free up more time to work on Gentoo) if it were offered. He is
single, and enjoys cars, music, movies, going out with friends and working
out. The favorite quote he offers is Benjamin Franklin's "Beer is proof
that God loves us and wants us to be happy.".
=========================
4. Heard in the Community
=========================
gentoo-user
-----------
Yahoo Blocks Instant Messaging
Gentoo users were not immune to the recent Yahoo move to block third party
instant messengers from using their service. Will Gaim be patched to fix
it? Check it out here [21] .
21.
http://news.gmane.org/onethread.php?group=gmane.linux.gentoo.user&root=%3C2
00309262103.47048.ghostwriter429%40ev1.net%3E
Measuring Network Metrics
Ever wonder how fast your cable modem really gets? Internet-based
calculators for download are immensely innaccurate. Some suggestions for
Linux-based tools were discussed [22] this week.
22. http://article.gmane.org/gmane.linux.gentoo.user/47842/
=======================
5. Gentoo International
=======================
Gentoo International is on hiatus this week.
================
6. Portage Watch
================
Portage Watch is on hiatus this week.
===========
7. Bugzilla
===========
Summary
-------
* Statistics
* Closed Bug Ranking
* New Bug Rankings
Statistics
----------
The Gentoo community uses Bugzilla (bugs.gentoo.org[23]) to record and
track bugs, notifications, suggestions and other interactions with the
development team. Between 19 September 2003 and 25 September 2003,
activity on the site has resulted in:
23. http://bugs.gentoo.org
* 493 new bugs during this period
* 368 bugs closed or resolved during this period
* 9 previously closed bugs were reopened this period
Of the 4526 currently open bugs: 118 are labeled 'blocker', 217 are
labeled 'critical', and 383 are labeled 'major'.
Closed Bug Rankings
-------------------
The developers and teams who have closed the most bugs during this period
are:
* Gentoo Sound Team[24], with 32 closed bugs[25]
* Martin Holzer[26], with 17 closed bugs[27]
* Gentoo Linux Gnome Desktop Team[28], with 16 closed bugs[29]
* Portage team[30], with 16 closed bugs[31]
24. [email protected]
25.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX
ED&[email protected]
26. [email protected]
27.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX
ED&[email protected]
28. [email protected]
29.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX
ED&[email protected]
30. [email protected]
31.
http://bugs.gentoo.org/buglist.cgi?bug_status=RESOLVED&bug_status=CLOSED&ch
field=bug_status&chfieldfrom=2003-09-19&chfieldto=2003-09-25&resolution=FIX
ED&[email protected]
New Bug Rankings
----------------
The developers and teams who have been assigned the most new bugs during
this period are:
* Portage team[32], with 18 new bugs[33]
* Gentoo Sound Team[34], with 16 new bugs[35]
* Gentoo Linux Gnome Desktop Team[36], with 15 new bugs[37]
* Martin Schlemmer[38], with 12 new bugs[39]
32. [email protected]
33.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09
-25&[email protected]
34. [email protected]
35.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09
-25&[email protected]
36. [email protected]
37.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09
-25&[email protected]
38. [email protected]
39.
http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&bug_s
tatus=REOPENED&chfield=assigned_to&chfieldfrom=2003-09-19&chfieldto=2003-09
-25&[email protected]
==================
8. Tips and Tricks
==================
Using netstat
This week's tip demonstrates some useful applications of the netstat
command. Netstat is a command used to print out a list of network
connections, routing tables, and other statistics related to networking.
Just typing netstat should display a long list of information that's
usually more than you want to go through at any given time. The trick to
keeping the information useful is knowing what you're looking for and how
to tell netstat to only display that information.
For example, if you only want to see TCP connections, use netstat --tcp.
This shows a list of TCP connections to and from your machine. The
following example shows connections to our machine on ports 993 (imaps),
143 (imap), 110 (pop3), 25 (smtp), and 22 (ssh). It also shows a
connection from our machine to a remote machine on port 389 (ldap).
Note: To speed things up you can use the --numeric option to avoid having
to do name resolution on addresses and display the IP only.
---------------------------------------------------------------------------
| Code Listing 8.1: |
| netstat tcp |
---------------------------------------------------------------------------
| |
|% netstat --tcp --numeric |
|Active Internet connections (w/o servers) |
|Proto Recv-Q Send-Q Local Address Foreign Address State|
|tcp 0 0 192.168.128.152:993 192.168.128.120:3853 \|
|ESTABLISHED |
|tcp 0 0 192.168.128.152:143 192.168.128.194:3076 \|
|ESTABLISHED |
|tcp 0 0 192.168.128.152:45771 192.168.128.34:389 \|
|TIME_WAIT |
|tcp 0 0 192.168.128.152:110 192.168.33.123:3521 \|
|TIME_WAIT |
|tcp 0 0 192.168.128.152:25 192.168.231.27:44221 \|
|TIME_WAIT |
|tcp 0 256 192.168.128.152:22 192.168.128.78:47258 \|
|ESTABLISHED |
---------------------------------------------------------------------------
If you want to see what (TCP) ports your machine is listening on, use
netstat --tcp --listening. Another useful flag to add to this is
--programs which indicates which process is listening on the specified
port. The following example shows a machine listening on ports 80 (www),
443 (https), 22 (ssh), and 25 (smtp);
---------------------------------------------------------------------------
| Code Listing 8.2: |
|netstat --tcp --listening --programs |
---------------------------------------------------------------------------
| |
|# sudo netstat --tcp --listening --programs |
|Active Internet connections (only servers) |
|Proto Recv-Q Send-Q Local Address Foreign Address State |
|PID/Program name |
|tcp 0 0 *:www *:* LISTEN \|
|28826/apache2 |
|tcp 0 0 *:ssh *:* LISTEN 26604/sshd|
|tcp 0 0 *:smtp *:* LISTEN 6836/ |
|tcp 0 0 *:https *:* LISTEN \|
|28826/apache2 |
| |
---------------------------------------------------------------------------
Note: Using --all displays both connections and listening ports.
The next example uses netstat --route to display the routing table. For
most people, this will show one IP and and the gateway address but if you
have more than one interface or have multiple IPs assigned to an
interface, this command can help troubleshoot network routing problems.
---------------------------------------------------------------------------
| Code Listing 8.3: |
|netstat --route |
---------------------------------------------------------------------------
| |
|% netstat --route |
|Kernel IP routing table |
|Destination Gateway Genmask Flags Metric Ref Use \|
|Iface |
|192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 \|
|eth0 |
|0.0.0.0 192.168.1.1 0.0.0.0 UG 1 0 0 \|
|eth0 |
| |
---------------------------------------------------------------------------
The last example of netstat uses the --statistics flag to display
networking statistics. Using this flag by itself displays all IP, TCP,
UDP, and ICMP connection statistics. To just show some basic information.
For example purposes, only the output from --raw is displayed here.
Combined with the uptime command, this can be used to get an overview of
how much traffic your machine is handling on a daily basis.
---------------------------------------------------------------------------
| Code Listing 8.4: |
|netstat --statistics --route |
---------------------------------------------------------------------------
| |
|% netstat --statistics --raw |
|Ip: |
| 620516640 total packets received |
| 0 forwarded |
| 0 incoming packets discarded |
| 615716262 incoming packets delivered |
| 699594782 requests sent out |
| 5 fragments dropped after timeout |
| 3463529 reassemblies required |
| 636730 packets reassembled ok |
| 5 packet reassembles failed |
| 310797 fragments created |
|ICMP statistics truncated |
| |
---------------------------------------------------------------------------
Note: For verbosity, the long names for the various flags were given.
Most can be abbreviated to avoid excessive typing (e.g. netstat -tn,
netstat -tlp, netstat -r, and netstat -sw).
While netstat is a common utility, hopefully this has demonstrated some
different ways to make use of the command. For more information see man 8
netstat.
==========================
9. Moves, Adds and Changes
==========================
Moves
-----
The following developers recently left the Gentoo team:
* none this week
Adds
----
The following developers recently joined the Gentoo Linux team:
* Stefan Knoblich (stkn) -- VoIP
Changes
-------
The following developers recently changed roles within the Gentoo Linux
project.
* none this week
=====================
10. Contribute to GWN
=====================
Interested in contributing to the Gentoo Weekly Newsletter? Send us an
email[40].
40. [email protected]
================
11. GWN Feedback
================
Please send us your feedback[41] and help make the GWN better.
41. [email protected]
================================
12. GWN Subscription Information
================================
To subscribe to the Gentoo Weekly Newsletter, send a blank email to
[email protected].
To unsubscribe to the Gentoo Weekly Newsletter, send a blank email to
[email protected] from the email address you are
subscribed under.
===================
13. Other Languages
===================
The Gentoo Weekly Newsletter is also available in the following languages:
* Dutch[42]
* English[43]
* German[44]
* French[45]
* Japanese[46]
* Italian[47]
* Polish[48]
* Portuguese (Brazil)[49]
* Portuguese (Portugal)[50]
* Russian[51]
* Spanish[52]
* Turkish[53]
42. http://www.gentoo.org/news/be/gwn/gwn.xml
43. http://www.gentoo.org/news/en/gwn/gwn.xml
44. http://www.gentoo.org/news/de/gwn/gwn.xml
45. http://www.gentoo.org/news/fr/gwn/gwn.xml
46. http://www.gentoo.org/news/ja/gwn/gwn.xml
47. http://www.gentoo.org/news/it/gwn/gwn.xml
48. http://www.gentoo.org/news/pl/gwn/gwn.xml
49. http://www.gentoo.org/news/br/gwn/gwn.xml
50. http://www.gentoo.org/news/pt/gwn/gwn.xml
51. http://www.gentoo.org/news/ru/gwn/gwn.xml
52. http://www.gentoo.org/news/es/gwn/gwn.xml
53. http://www.gentoo.org/news/tr/gwn/gwn.xml
Yuji Carlos Kosugi <[email protected]> - Editor
AJ Armstrong <[email protected]> - Contributor
Brian Downey <[email protected]> - Contributor
Cal Evans <[email protected]> - Contributor
Chris Gavin <[email protected]> - Contributor
Luke Giuliani <[email protected]> - Contributor
Shawn Jonnet <[email protected]> - Contributor
Michael Kohl <[email protected]> - Contributor
Kurt Lieber <[email protected]> - Contributor
Rafael Cordones Marcos <[email protected]> - Contributor
David Narayan <[email protected]> - Contributor
Gerald J Normandin Jr. <[email protected]> - Contributor
Ulrich Plate <[email protected]> - Contributor
Mathy Vanvoorden <[email protected]> - Dutch Translation
Hendrik Eeckhaut <[email protected]> - Dutch Translation
Jorn Eilander <[email protected]> - Dutch Translation
Bernard Kerckenaere <[email protected]> - Dutch Translation
Peter ter Borg <[email protected]> - Dutch Translation
Jochen Maes <[email protected]> - Dutch Translation
Roderick Goessen <[email protected]> - Dutch Translation
Gerard van den Berg <[email protected]> - Dutch Translation
Matthieu Montaudouin <[email protected]> - French Translation
Martin Prieto <[email protected]> - French Translation
Antoine Raillon <[email protected]> - French Translation
Sebastien Cevey <[email protected]> - French Translation
Jean-Christophe Choisy <[email protected]> - French Translation
Thomas Raschbacher <[email protected]> - German Translation
Steffen Lassahn <[email protected]> - German Translation
Matthias F. Brandstetter <[email protected]> - German Translation
Lukas Domagala <[email protected]> - German Translation
Tobias Scherbaum <[email protected]> - German Translation
Daniel Gerholdt <[email protected]> - German Translation
Marc Herren <[email protected]> - German Translation
Tobias Matzat <[email protected]> - German Translation
Marco Mascherpa <[email protected]> - Italian Translation
Claudio Merloni <[email protected]> - Italian Translation
Christian Apolloni <[email protected]> - Italian Translation
Stefano Lucidi <[email protected]> - Italian Translation
Yoshiaki Hagihara <[email protected]> - Japanese Translation
Katsuyuki Konno <[email protected]> - Japanese Translation
Yuji Carlos Kosugi <[email protected]> - Japanese Translation
Yasunori Fukudome <[email protected]> - Japanese Translation
Takashi Ota <[email protected]> - Japanese Translation
Radoslaw Janeczko <[email protected]> - Polish Translation
Lukasz Strzygowski <[email protected]> - Polish Translation
Michal Drobek <[email protected]> - Polish Translation
Adam Lyjak <[email protected]> - Polish Translation
Krzysztof Klimonda <[email protected]> - Polish Translation
Atila "Jedi" Bohlke Vasconcelos <[email protected]> - Portuguese
(Brazil) Translation
Eduardo Belloti <[email protected]> - Portuguese (Brazil) Translation
Jo達o Rafael Moraes Nicola <[email protected]> - Portuguese (Brazil)
Translation
Marcelo Gon巽alves de Azambuja <[email protected]> - Portuguese
(Brazil) Translation
Otavio Rodolfo Piske <[email protected]> - Portuguese (Brazil)
Translation
Pablo N. Hess -- NatuNobilis <[email protected]> - Portuguese
(Brazil) Translation
Pedro de Medeiros <[email protected]> - Portuguese (Brazil) Translation
Ventura Barbeiro <[email protected]> - Portuguese (Brazil)
Translation
Bruno Ferreira <[email protected]> - Portuguese (Portugal)
Translation
Gustavo Felisberto <[email protected]> - Portuguese (Portugal)
Translation
Jos辿 Costa <[email protected]> - Portuguese (Portugal) Translation
Luis Medina <[email protected]> - Portuguese (Portugal) Translation
Ricardo Loureiro <[email protected]> - Portuguese (Portugal) Translation
Sergey Galkin <[email protected]> - Russian Translator
Sergey Kuleshov <[email protected]> - Russian Translator
Alex Spirin <[email protected]> - Russian Translator
Dmitry Suzdalev <[email protected]> - Russian Translator
Anton Vorovatov <[email protected]> - Russian Translator
Denis Zaletov <[email protected]> - Russian Translator
Lanark <[email protected]> - Spanish Translation
Fernando J. Pereda <[email protected]> - Spanish Translation
Lluis Peinado Cifuentes <[email protected]> - Spanish Translation
Zephryn Xirdal T <[email protected]> - Spanish Translation
Guillermo Juarez <[email protected]> - Spanish Translation
Jes炭s Garc鱈a Crespo <[email protected]> - Spanish Translation
Carlos Castillo <[email protected]> - Spanish Translation
Julio Castillo <[email protected]> - Spanish Translation
Sergio G坦mez <[email protected]> - Spanish Translation
Aycan Irican <[email protected]> - Turkish Translation
Bugra Cakir <[email protected]> - Turkish Translation
Cagil Seker <[email protected]> - Turkish Translation
Emre Kazdagli <[email protected]> - Turkish Translation
Evrim Ulu <[email protected]> - Turkish Translation
Gursel Kaynak <[email protected]> - Turkish Translation
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE/d7vG9QP4LZPv56cRApT+AKCKnbjLCA+5w/MLyYnUCbAEj/jygACfSOjG t+/3TzNko0xGdrRShhOiy00= =P7xu -----END PGP SIGNATURE-----