path: root/xml/htdocs/news/en/gwn/20030127-newsletter.xml

<?xml version='1.0' encoding="UTF-8"?>

<!DOCTYPE guide SYSTEM "/dtd/guide.dtd">
<guide type="newsletter">
<title>Gentoo Weekly Newsletter</title>
<!-- test -->
<subtitle>January 27th, 2003</subtitle>
<abstract>This is the Gentoo Weekly Newsletter for the week of January 27th, 2003.</abstract>
<summary>Gentoo Linux at LinuxWorld Expo.  GLSAs being integrated into Portage.  Fighting spam with SpamAssassin.</summary>
<version>Volume 2, Issue 4</version>
<date>27th Jan 2003</date>
<author title="Editor">
	<mail link="klieber@gentoo.org">Kurt Lieber</mail>
</author>

<author title="Contributor">
<mail link="aja@clanarmstrong.com">AJ Armstrong</mail>
</author>

<author title="Contributor">
<mail link="nesta@iceburg.net">Brice Burgess</mail>
</author>

<author title="Contributor">
<mail link="carlos@gentoo.org">Yuji Carlos Kosugi</mail>
</author>

<author title="Contributor">
<mail link="rcm@sasaska.net">Rafael Cordones Marcos</mail>
</author>

<author title="Contributor">
<mail link="david@phrixus.net">David Narayan</mail>
</author>

<author title="Contributor">
<mail link="plate@gol.com">Ulrich Plate</mail>
</author>
<author title="Contributor">
<mail link="mail@psharp.uklinux.net">Peter Sharp</mail>
</author>
<author title="Dutch Translation">
	<mail link="matje@lanzone.be">Mathy Vanvoorden</mail>
</author>
<author title="Dutch Translation">
	<mail link="tom.vanlaerhoven@luc.ac.be">Tom Van Laerhoven</mail>
</author>
<author title="Dutch Translation">
	<mail link="roel@roel.ath.cx">Roel Adriaans</mail>
</author>
<author title="French Translation">
	<mail link="nicolas.ledez@free.fr">Nicolas Ledez</mail>
</author>
<author title="French Translation">
	<mail link="gui@moolfreet.com">Guillaume Plessis</mail>
</author>
<author title="French Translation">
	<mail link="thevedge@thevedge.net">Eric St-Georges</mail>
</author>
<author title="French Translation">
	<mail link="anfini@free.fr">John Berry</mail>
</author>
<author title="French Translation">
	<mail link="riverdale@linuxmail.org">Martin Prieto</mail>
</author>
<author title="German Translation">
	<mail link="citizen428@gentoo.org">Michael Kohl</mail>
</author>
<author title="German Translation">
	<mail link="madeagle@gentoo.org">Steffen Lassahn</mail>
</author>
<author title="German Translation">
	<mail link="haim@gentoo.org">Matthias F. Brandstetter</mail>
</author>
<author title="German Translation">
	<mail link="lordvan@gentoo.org">Thomas Raschbacher</mail>
</author>
<author title="Italian Translation">
	<mail link="mush@monrif.net">Marco Mascherpa</mail>
</author>
<author title="Italian Translation">
	<mail link="paper@tiscali.it">Claudio Merloni</mail>
</author>
<author title="Japanese Translation">
	<mail link="kage-chan@gentoo.org">Daniel Ketel</mail>
</author>
<author title="Japanese Translation">
	<mail link="hagi@p1d.com">Yoshiaki Hagihara</mail>
</author>
<author title="Japanese Translation">
	<mail link="andy@billydpro.com">Andy Hunne</mail>
</author>
<author title="Japanese Translation">
	<mail link="carlos@gentoo.org">Yuji Carlos Kosugi</mail>
</author>
<author title="Portuguese (Brazil) Translation">
	<mail link="venturasbarbeiro@ig.com.br">Ventura Barbeiro</mail>
</author>
<author title="Portuguese (Portugal) Translation">
	<mail link="blueroom@digitalmente.net">Bruno Ferreira</mail>
</author>
<author title="Spanish Translation">
	<mail link="lanark@lanark.com.ar">Lanark</mail>
</author>
<author title="Spanish Translation">
	<mail link="rcm@sasaska.net">Rafael Cordones Marcos</mail>
</author>
<author title="Spanish Translation">
	<mail link="julio@castillobueno.com">Julio Castillo</mail>
</author>
<author title="Spanish Translation">
	<mail link="s3r@fibertel.com.ar">Sergio Gómez</mail>
</author>
<author title="Spanish Translation">
	<mail link="pablo.leira@pitagoral.com">Pablo Pita Leira</mail>	
</author>
<author title="Spanish Translation">
	<mail link="carlos@castillobueno.com">Carlos Castillo</mail>
</author>
<author title="Spanish Translation">
	<mail link="tirant@menta.net">Tirant</mail>
</author>
<author title="Spanish Translation">
	<mail link="jfreire@ya.com">Jaime Freire</mail>
</author>
<author title="Spanish Translation">
	<mail link="krusty_ar@yahoo.com">Lucas Sallovitz</mail>
</author>
<chapter>
	<title>Gentoo News</title>
	<section>
		<title>Summary</title>
		<body>
		<p>
			<ul>
				<li><uri link="#doc_chap1_sect2">Gentoo Linux at LinuxWorld Expo</uri></li>
				<li><uri link="#doc_chap1_sect3">GLSAs being integrated into Portage</uri></li>
			</ul>
		</p>
		</body>
	</section>
	<section>
		<title>Gentoo Linux at LinuxWorld Expo</title>
		<body>
		<p>
		Gentoo Linux had a strong showing at last week's LinuxWorld Expo.  Showing off the recently-released Linux 
		port of Unreal Tournament 2003, the Gentoo booth drew large crowds throughout the show.  Many of the 
		attendees were unfamiliar with Gentoo Linux, so this was a great opportunity to educate a highly-targeted 
		audience about the many benefits of Gentoo.  While we received inquiries from a wide range of people, 
		there seemed to be a specific interest from the scientific community, with several attendees expressing
		an interest in using Gentoo Linux for their research projects.
		</p>
		<p>
		It was also a great opportunity for many of the developers and avid Gentoo users to finally meet 
		face to face.  All told, nearly a dozen developers showed up for part or all of the show. 
		Amazingly, few people looked like they do on IRC.  For those who were unable to attend LWE, we've
		included a few pictures with this week's issue.
		</p>
		<p>
		<!-- pics go here -->
		<figure link="http://www.gentoo.org/images/gwn/20030127_lwe_booth.jpg" short="The Gentoo Linux booth at LWE" caption="The Gentoo Linux booth at LinuxWorld Expo" />
		<figure link="http://www.gentoo.org/images/gwn/20030127_lwe_gerk_burning.jpg" short="Gerk burns CDs" caption="Gerk spent much of his time burning CDs for attendees" />
		<figure link="http://www.gentoo.org/images/gwn/20030127_lwe_seemant_drobbins.jpg" short="seemant and drobbins" caption="Seemant Kulleen (left) and Daniel Robbins" />
		<!-- end pics -->
		</p>
		</body>
	</section>
	<section>
		<title>GLSAs being integrated into Portage</title>
		<body>
		<p>
		Nick Jones announced his intention to integrate Gentoo Linux Security Announcements into Portage
		The proposed method is converting GLSAs to XML format to allow for easy integration into Portage,
		allowing users to only update packages that are affected by GLSAs.  While the details still need to be
		worked out, this will certainly be a welcome feature by many Gentoo users and will make running Gentoo
		on servers where stability is paramount an easier task.
		</p>
		</body>
	</section>
</chapter>
<chapter>
	<title>Gentoo Security</title>
	<section>
		<title>Summary</title>
		<body>
		<p>
			<ul>
				<li><uri link="#doc_chap2_sect2">GLSA: vim vim-core gvim</uri></li>
				<li><uri link="#doc_chap2_sect3">GLSA: cvs</uri></li>
				<li><uri link="#doc_chap2_sect4">GLSA: kde-2.2.x</uri></li>
				<li><uri link="#doc_chap2_sect5">New Security Bug Reports</uri></li>
			</ul> 
		</p>
		</body>
	</section>
	<section>
		<title>GLSA: vim vim-core gvim</title>
		<body>
		<p>
                The vim editor and associated packages contain a bug which permits execution of un-sandboxed modeline commands.
                This permits a maliciously crafted textfile to execute arbitrary code with the user's privileges.  The advisory also
                notes an unconfirmed report of a similar problem with local variables in emacs.  An exploit has been demonstrated..
                        <ul>
				<li>Severity: Moderate to High - arbitrary code execution.</li>
				<li>Packages Affected: app-editors/vim-core (prior to 6-1-r4), vim (prior to 6.1-r19), gvim (prior to 6.1-r6).</li>
				<li>Rectification: Synchronize and emerge -u vim-core vim gvim</li>
                                <li><uri link="http://forums.gentoo.org/viewtopic.php?t=31627">GLSA Announcement</uri></li>
                                <li><uri link="http://www.guninski.com/vim1.html">Advisory</uri></li>
			</ul>
		</p>
		</body>
	</section>
	<section>
		<title>GLSA: cvs</title>
		<body>
		<p>
                Maliciously malformed directory names can be used to trigger an error in CVS that can result in a global pointer being freed twice.
                This condition could be used to determine heap memory locations as a prelude to other attacks using the CVS servers' privilege level
                 (potentially root). No exploits in the wild are reported.
                        <ul>
				<li>Severity: Critical - remote information leak, security exposure of systems vulnerable to double-free pointer bugs.</li>
				<li>Packages Affected: dev-util/cvs versions prior to 1.11.5</li>
				<li>Rectification: Synchronize and emerge -u cvs</li>
                                <li><uri link="http://forums.gentoo.org/viewtopic.php?t=31285">GLSA Announcement</uri></li>
                                <li><uri link="http://security.e-matters.de/advisories/012003.html">Advisory</uri></li>
			</ul>
		</p>
		</body>
	</section>
	<section>
		<title>GLSA: kde-2.2.x</title>
		<body>
		<p>
                In some cases, KDE may fail to properly quote execution parameters.  This could permit arbitrary command execution (with the target user's privileges)
                 through the use of carefully crafted URLs, email addresses and filenames.  Exploits have been demonstrated.
                This report is related to an earlier <uri link="http://forums.gentoo.org/viewtopic.php?t=27299">report</uri> of a vulnerability in kde-3.0.x.
                        <ul>
				<li>Severity: High - remote execution of code, exploits in the wild.</li>
				<li>Packages Affected: kde-base/kde2.2.x</li>
				<li>Rectification: Synchronize and emerge -u kde</li>
                                <li><uri link="http://forums.gentoo.org/viewtopic.php?t=30777">GLSA Announcement</uri></li>
                                <li><uri link="http://www.kde.org/info/security/advisory-20021220-1.txt">Advisory</uri></li>
			</ul>
                <note>The updated ebuilds for kde-2.2.2 are currently only marked stable for x86.</note>
		</p>
		</body>
	</section>
	<section>
		<title>New Security Bug Reports</title>
		<body>
		<p>
		There are no new security bugs this week. The mpg123 bug mentioned last week:
			<ul>
                        <li><uri link="http://bugs.gentoo.org/show_bug.cgi?id=14076">media-sound/mpg123</uri></li>
			</ul>
                remains open, but the message traffic implies that the issue may not be a concern for the version currently in the portage tree.
                The bug is still open because of a potential issue with frame size calculation in the current version.
		</p>
		</body>
	</section>
</chapter>
<chapter>
<title>Featured Developer of the Week</title>
<body>
<p class="secthead">Nicholas Jones</p>
<figure link="http://www.gentoo.org/images/gwn/20030127_carpaski.jpg" short="Nicholas Jones aka carpaski" caption="Nicholas Jones" />
<p>
<mail link="carpaski@gentoo.org">Nicholas Jones</mail>, this week's (and the inaugural) Featured Developer, is the current maintainer of Portage.  Subscribers to the mailing lists will have his <uri link="http://marc.theaimsgroup.com/?l=gentoo-user&amp;m=104272726519197&amp;w=2">response</uri> to the recent <c>/etc/make.conf</c> fiasco fresh in their minds, whereas those who frequent the IRC channel (#gentoo on irc.freenode.net) or the forums will have seen him as carpaski, responding to Portage feature requests and resolving various problems.  IRC, actually, is where Nick got started with the Gentoo team: a regular who helped out with things and submitted ebuilds and patches, the developers snapped him up and got him onboard.  Now, as Portage maintainer, he plans and codes new features for Portage, making sure that changes are as modular as possible to facilitate testing and debugging, as well as reviewing bug reports, looking for problems to solve and features that can be merged into portage.
</p>
<p>
A self-proclaimed console junky, Nick's favorite applications include Midnight Commander, vi, lsof, and bash.  He uses Enlightenment 16.5 - and <e>only</e> Enlightenment 16.5 - for window management, and mutt for mail.  Using his scripting skills, Nick has done some work remotely administering UNIX machines, and has also worked as a network engineer on a US goverment backbone.  Amazingly enough, when he's not busy hacking and testing Portage or doing administration work,  you'll find him studying at the Illinois Institute of Technology in Chicago, IL.  After all that it's hard to imagine that he'd have time left for other pursuits, but Nick says he likes wine and music - both listening to it and playing it on guitar, as well as frisbee and racquetball.
</p>
</body>
</chapter>
<chapter>
	<title>Heard In The Community</title>
	<section>
	<title>Web Forums</title>
	<body>
	<p><b>emerge-webrsync Tool Problems</b></p>
	<p>
	A recent <uri link="http://forums.gentoo.org/viewtopic.php?t=31494">thread</uri> in the
	forums was promoted to an alert when it was discovered that an upgrade to
	the emerge-webrsync tool from the gentoolkit had resulted in the potential                                                   for it to delete the /usr directory on machines where it was run.
	emerge-webrsync is a tool for automatically updating the local portage
	directory from the daily snapshots on machines that are prevented from using
	emerge sync (for example, on machines behind firewalls that block rsync).  A
	number of users reported substantial (and possibly unrecoverable) damage to
	their installations.  The problem was reported in this <uri link="http://bugs.gentoo.org/show_bug.cgi?id=14388">bug report</uri>.  The
	issue was apparently resolved in gentoolkit-r11.
	</p>
	<p><b>Much Moaning About Ibiblio</b></p>

	    <p>People all over the planet are struggling to get decent download speeds from the Ibiblio server that provides the packages for Gentoo installations. Not a major problem as long as everybody was content to grab a stage1 tarball and take it from there, but since the introduction of the Gentoo Reference Platform and its collection of precompiled binaries, the CD images have grown to "normal" size around 500 MB each, and the complaints are getting louder, on the IRC channels and the forums. If it wasn't for the fact that many of those complaining have simply failed to embrace any of the <uri link="http://www.gentoo.org/main/en/where.xml">dozens of mirrors listed</uri> at the official Gentoo website and Ibiblio itself...
	    <ul>
	    	<li><uri link="http://forums.gentoo.org/viewtopic.php?t=31478">Ibiblio est&#225; lenta...</uri></li>
		<li><uri link="http://forums.gentoo.org/viewtopic.php?t=25724">Problems accessing ibiblio...</uri></li>
		<li><uri link="http://forums.gentoo.org/viewtopic.php?t=28560">ibiblio suddenly slow!</uri></li>
		<li><uri link="http://forums.gentoo.org/viewtopic.php?t=22830">ibiblslow.org</uri></li>
		</ul>
		</p>

	<p><b>Automatic Writing Resurrected</b></p>

	    <p>One of the Forum's all-time classics is back: After a break over Christmas and New Year's, the "Story By Post" thread has been reanimated. Knitted with one-liners that fit exceptionally well within the general direction the story will take (except that nobody actually knows where it's going), each contribution adds to a great recital involving (so far) the marmalade cat, Ellen Feiss, the wonder boy, Peter Falk and many others still rubbing their eyes in disbelief, wondering how they ended up starring in a prose artifact hovering on a technical support forum. Another thread in a similar genre has been left alone for a while - well, until now. This one actually comes with its own meta-thread:  
	    <ul>
			<li><uri link="http://forums.gentoo.org/viewtopic.php?t=21618">Story By Post</uri></li>
			<li><uri link="http://forums.gentoo.org/viewtopic.php?t=20571">Chain Thread</uri></li>
			<li><uri link="http://forums.gentoo.org/viewtopic.php?t=20599">Chain Thread Offramp</uri></li>
		</ul>
		</p>

	<p><b>Forum Statistics</b></p>

	    <p><uri link="http://forums.gentoo.org/profile.php?mode=viewprofile&amp;u=20">fghellar</uri>, one of the Forum's bodhisattvas and an honorary headcounter, has posted an update on the number of users currently registered at the site. Hard to estimate how many of these are active or at least passively reading stuff, but the sheer numbers are impressive. Constantly updated statistics can be watched by clicking on the official statistics link in the top menu, but for a historical perspective on growth in the Gentoo forums check the first link:  
	    <ul>
		<li><uri link="http://forums.gentoo.org/viewtopic.php?t=1593">1k users</uri></li>
	<li><uri link="http://forums.gentoo.org/statistics.php">Official forum statistics</uri></li>
		</ul>
		</p>
	</body>
	</section>
	<section>
		<title>gentoo-user</title>
		<body>
		<p><b>More praise for Phoenix</b></p>
		<p>
  A lengthy discussion took place on gentoo-user about the buggy misbehavior of Mozilla. It seems that almost
  everyone and their mother has complained about bad plugin support, sluggishness and crashes -- especially when
  dealing with Gentoo's Mozilla sources. Even with Rafa's 
  <uri link="http://marc.theaimsgroup.com/?l=gentoo-user&amp;m=104300159002182&amp;w=2">tip</uri>
   on compiling Mozilla without mail and news support
  and Steve's 
  <uri link="http://marc.theaimsgroup.com/?l=gentoo-user&amp;m=104297434515022&amp;w=2">point</uri>
   on using the mozilla.org tarballs, the complaints remained widespread. Phoenix was mentioned
  as an alternative and the audience gave nothing but praise. Phoenix is a non-bloated redesign of the Mozilla browser
  component which admittedly runs much faster and embraces the java and flash plugins on Gentoo systems without
  hesitation. The 
  <uri link="http://marc.theaimsgroup.com/?l=gentoo-user&amp;m=104296768011912&amp;w=2">thread</uri>
  even encouraged happy Mozilla users to switch to Phoenix. If you've been fighting with Mozilla,
  you may want to experiment with Phoenix if you don't need Moz's mail &amp; news.
		</p>
		
		<p><b>Kernel Performance</b></p>
		<p>
		  Most of us gentoo users are not satisfied with an OK system. We'd much rather have our software tweaked just enough
  to squeeze an extra 5hp out of that already souped up 750hp big block. The number one place to muster this extra horsepower
  is the Linux kernel. We can worry about the CFLAGS later. Gentoo is stocked with many different kernel sources other than the -gentoo ones, and all come
  with their unique advantages and disavantages as determined by the patches involved with them. These patches are applied
  against the 'vanilla' source resulting in a modified kernel. An example of these patches, 
  <uri link="http://marc.theaimsgroup.com/?l=gentoo-user&amp;m=104341729031736&amp;w=2">rmap</uri>
  , was described within the thread.
  Aniruddha Shankar started the 
  <uri link="http://marc.theaimsgroup.com/?l=gentoo-user&amp;m=104341350726805&amp;w=2">discussion</uri>
   by boasting his happines with using Con Kolivas's kernel (-ck sources) for his desktop system. As always,
  Gentoo users are encouraged to tailor their system to their needs, and a good place to start is the kernel.
		</p>
		</body>
	</section>
    <section>
    <title>gentoo-dev</title>
    <body>
    <!-- dev section goes here -->
	<p><b>Methods for managing etc files.</b></p>
	<p>
	Jeff Kowing 
			<uri link="http://article.gmane.org/gmane.linux.gentoo.devel/6702">asked</uri> about the
			techniques to use to manage updateing etc files after an upgrade. Matthew Walker answer
			very <uri link="http://article.gmane.org/gmane.linux.gentoo.devel/6704">succinctly</uri>
			that <c>etc-update</c> may be what he was looking for. 
	</p>
	
	<p><b>Gentoo-sources vs "stock" kernels.</b></p>
	<p>
	Dewet Diener <uri link="http://article.gmane.org/gmane.linux.gentoo.devel/6705">wrote</uri>
	  to ask: <e>"I'm wondering what the general status of gentoo-sources is compared to the more
	  "stock" kernels, like vanilla and -ac?  Is it being used in production-class setups without
	  hitches?"</e>. Kim Nielsen <uri link="http://article.gmane.org/gmane.linux.gentoo.devel/6710">replied</uri> 
	  with <e>"The gentoo kernel is quite stable but Gentoo was never ment as a server distribution even though it
	  serves just as well as others like Redhat or Debian. It was intedned for network/developer use."</e>
	  Thomas T. Veldhouse <uri link="http://article.gmane.org/gmane.linux.gentoo.devel/6711">chipped in</uri>
	  with: <e>"I don't think there is any such intent. By what I can see and know about
	  Gentoo, it is for any use that one sees fit. It was never designed for any
	  particular application. [...] it is up to the administrator to make sure that gentoo changes
	  don't hose a production machine"</e>.
	</p>
	</body>
  </section>
</chapter>
<chapter>
	<title>Gentoo International</title>
    <body>
	    <p class="secthead">Unofficial European Gentoo Websites</p>
		<p>While the official Gentoo website struggles to keep up with the multilingual cacophony created by the enormous wave of popularity crashing over its head, many non-English websites have taken over the part of support for local communities. Today we take a closer look at some European sites: French-speaking users, for example, have been blessed with a dynamic news and discussion site of their own for many months now. The forum section is not as active as the French board at forums.gentoo.org, but manages to coexist peacefully. But the real strength of "Da Gentoo" lies in its news coverage, delivered not only to common browsers: Gentoofr.org news are being served for PDAs and for WAP-enabled mobile phones. The German Gentoo project is probably the oldest outside of the US (it started sometime back in April 2002), but hasn't lost its appetite yet. Gentoo.de (like many other international sites, e.g. Korea and Japan) is focussed on documentation, but more importantly provides a large number of supplementary "regional" ebuilds with spellcheckers and localized Openoffice-bin versions, and the occasional tool for users with specific homegrown problems (a PPPoE tarball for DSL users in Germany can be downloaded from the project's FTP-server). The Danish site has its emphasis equally on projects and development, and is currently looking for contributors and people who can help with PHP coding. The news section definitely needs a blood transfusion, there haven't been any updates since May 2002. The Norwegian website has a comparatively low profile, apparently content to just provide a few links to mirror servers and information resources. But it's highly unfair to just point out the websites: The most buzz for the buck comes from the many non-English IRC channels on Freenode! Anybody who wants to get a feel for the huge user base Gentoo has in many European countries, just check out the Dutch or the Portuguese #gentoo-nl or #gentoo-pt channels via irc.freenet.org... With a channel like #gentoo-fi, who needs a Finnish website, and the Swedes even have their own IRC statistics:
		<ul><li><uri link="http://www.gentoofr.org/">France: Da Gentoo French Page</uri></li>
		<li><uri link="http://www.gentoo.de"></uri>Germany: Gentoo Linux - Das deutschsprachige Portal</li>
		<li><uri link="http://www.gentoo.dk">Denmark: Gentoo Linux Danmark</uri></li>
		<li><uri link="http://www.gentoo.no">Norway: Gentoo Linux Norge</uri></li>
		<li><uri link="http://gentoo-se.ath.cx">Sweden: IRC channel statistics</uri></li>
		</ul>
		</p>
	</body>

</chapter>
<chapter>
<title>Portage Watch</title>
<section>
<title>The following stable packages were added to portage this week</title>
<body>
<p>
<note>Because of the pending release of 1.4_final, the Portage tree is currently frozen.  As such, no new stable packages were introduced to Portage this week</note>
</p>
</body>
</section>
<section>
<title>Updates to notable packages</title>
<body>
<p>
<ul>
<li>sys-devel/gcc - gcc-3.2.1-r7.ebuild; </li>
<li>sys-kernel/* - aa-sources-2.4.21_pre3-r1.ebuild; development-sources-2.5.59-r1.ebuild; development-sources-2.5.59-r2.ebuild; development-sources-2.5.59.ebuild; gs-sources-2.4.21_pre3-r1.ebuild; gs-sources-2.4.21_pre3-r2.ebuild; mips-sources-2.4.19.ebuild; openmosix-sources-2.4.20-r2.ebuild; </li>
<li>net-www/apache - apache-2.0.44.ebuild; </li>
<li>app-admin/gentoolkit - gentoolkit-0.1.17-r10.ebuild; gentoolkit-0.1.17-r11.ebuild; </li>
</ul>
</p>
</body>
</section>
</chapter>
<chapter>
	<title>Bugzilla</title>
	<section>
		<title>Summary</title>
		<body>
		<p>
			<ul>
				<li><uri link="#doc_chap7_sect2">Statistics</uri></li>
				<li><uri link="#doc_chap7_sect3">Closed Bug Ranking</uri></li>
				<li><uri link="#doc_chap7_sect3">New Bug Rankings</uri></li>
                        </ul>                           
		</p>
		</body>
	</section>
	<section>
		<title>Statistics</title>
		<body>
		<p>
		The Gentoo community uses Bugzilla (<uri link="http://bugs.gentoo.org">bugs.gentoo.org</uri>) to record and track
                bugs, notifications, suggestions and other interactions with the development team.  In the last 7 days, activity
                on the site has resulted in:
			<ul>
				<li>258 new bugs this week</li>
				<li>1491 total bugs currently marked 'new'</li>
				<li>559 total bugs curently assigned to developers</li>
                                <li>54 bugs that were previously closed have been reopened.</li>
			</ul>
                There are currently 2104 bugs open in bugzilla. Of these: 40 are labelled 'blocker', 76 are labelled 'critical',
                and 144 are labelled 'major'.
		</p>
		<p>
                The current list of developers' open bugs may be found at the
                <uri link="http://bugs.gentoo.org/reports.cgi?product=-All-&amp;output=most_doomed&amp;links=1&amp;banner=1&amp;quip=0 ">
                Gentoo Bug Count Report</uri>.
		</p>
                </body>
        </section>
        <section>
		<title>Closed Bug Rankings</title>
                <body>
                <p>
                The developers and teams who have closed the most bugs this week are:
			<ul>
				<li><mail link="azarah@gentoo.org">Martin Schlemmer</mail>, with 38 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=RESOLVED&amp;bug_status=CLOSED&amp;resolution=FIXED&amp;resolution=TEST-REQUEST&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=azarah%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">closed bugs</uri></li>
				<li><mail link="raker@gentoo.org">Nick Hadaway</mail>, with 17 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=RESOLVED&amp;bug_status=CLOSED&amp;resolution=FIXED&amp;resolution=TEST-REQUEST&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=raker%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">closed bugs</uri></li>
				<li><mail link="mholzer@gentoo.org">M. Holzer</mail>, with 14 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=RESOLVED&amp;bug_status=CLOSED&amp;resolution=FIXED&amp;resolution=TEST-REQUEST&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=mholzer%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">closed bugs</uri></li>
				<li><mail link="woodchip@gentoo.org">Donny Davies</mail>, with 10 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=RESOLVED&amp;bug_status=CLOSED&amp;resolution=FIXED&amp;resolution=TEST-REQUEST&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=woodchip%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">closed bugs</uri></li>
				<li><mail link="seemant@gentoo.org">Seemant Kulleen</mail>, with 8 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=RESOLVED&amp;bug_status=CLOSED&amp;resolution=FIXED&amp;resolution=TEST-REQUEST&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=seemant%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">closed bugs</uri></li>
			</ul>
                </p>
		</body>
	</section>
        <section>
		<title>New Bug Rankings</title>
                <body>
                <p>
                The developers and teams who have been assigned the most new bugs this week are:
			<ul>				
                                <li><mail link="azarah@gentoo.org">Martin Schlemmer</mail>, with 10 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=azarah%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">new bugs</uri></li>
				<li><mail link="raker@gentoo.org">Nick Hadaway</mail>, with 6 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=raker%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">new bugs</uri></li>
				<li><mail link="sethbc@gentoo.org">Seth Chandler</mail>, with 6 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=sethbc%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">new bugs</uri></li>
				<li><mail link="gnome@gentoo.org">The Gnome Team</mail>, with 5 <uri link="http://bugs.gentoo.org/buglist.cgi?bug_status=NEW&amp;bug_status=ASSIGNED&amp;bug_status=REOPENED&amp;emailassigned_to1=1&amp;emailtype1=exact&amp;email1=gnome%40gentoo.org&amp;chfield=bug_status&amp;chfieldfrom=2003-01-18">new bugs</uri></li>
			</ul>
                </p>
		</body>
	</section>
</chapter>
<chapter>
<title>Tips and Tricks</title>
  
<body>

<p class="secthead">Using Procmail and SpamAssassin to Block Spam and Filter Mailing Lists</p>

<p>
The proliferation of unsolicited email, or spam, is becoming more and more widespread. However, there are many tools to help prevent spam. This week, we look at using Procmail and SpamAssassin to filter incoming mail and to block incoming spam. <uri link="http://www.procmail.org">Procmail</uri> is a mail filter than can be used to sort incoming mail into separate folders as well as many other types of mail preprocessing. <uri link="http://www.spamassassin.org">SpamAssassin</uri> is a mail filter that uses heuristic scanning to identify spam.
</p>

<p>Since both Procmail and SpamAssassin are in Portage, installation is a simple emerge.
<pre caption="Installing Procmail and SpamAssassin">
# <i>emerge net-mail/procmail</i>
# <i>emerge dev-perl/Mail-SpamAssassin</i>

<codenote>Add the SpamAssassin daemon to the default runlevel</codenote>
# <i>rc-update add spamd default</i>
</pre>
<impo>
When upgrading Perl to a higher version, you need to re-emerge dev-perl/Net-DNS, dev-perl/HTML-Parser, and dev-perl/Time-HiRes or SpamAssassin will exit and possibly discard valid emails.
</impo>
</p>

<p>Each procmail filter is known as a recipie. To keep things organized, we're going to create the directory <path>$HOME/.procmail</path> for separate recipies.
<pre caption="Creating ~/.procmail">
% <i>mkdir $HOME/.procmail</i>
</pre>
</p>

<p>Upon invocation, procmail first reads the <path>$HOME/.procmailrc</path> file. This file should contain the location of your mailbox and where to look for other recipies.
<pre caption="Example $HOME/.procmailrc">
VERBOSE=no

DEFAULT="$HOME/.maildir/"
MAILDIR="$HOME/.maildir/"

PMDIR="$HOME/.procmail"
LOGFILE="$PMDIR/log"

INCLUDERC=$PMDIR/lists.rc
INCLUDERC=$PMDIR/spam.rc
</pre>
<note>
This assumes that you are using the Maildir method of storing email. If you are using the mbox method, simply change .maildir to your mbox folder and remove the trailing slash
</note>
<impo>
<path>$HOME/.procmailrc</path> is read from top to bottom. This means that your recipies will be read in the order in which they appear. Procmail stops checking on the first recipie that matches. Keeping lists.rc above spam.rc ensures that mailing lists filters are checked first, avoiding expensive spam checking operations where possible.
</impo>
</p>

<p>
The next step is to set up mailing list filters. Since most lists use the List-Id header, we can easily filter out mailing lists from normal email.
<pre caption="Example $HOME/.procmail/lists.rc">
:0
*   ^List-Id: Gentoo Linux mail &lt;gentoo-security\.gentoo\.org&gt;
.gentoo-security/

:0
*   ^List-Id: Gentoo Linux mail &lt;gentoo-user\.gentoo\.org&gt;
.gentoo-user/
</pre>
<note>
To see the actual List-Id header, you may need view all email headers. See your mail client's documentation to enable that feature.
</note>
</p>

<p>
	Next, we can set up the spam filter. This recipie first invokes SpamAssassin using <c>spamc</c> and then checks the X-Spam-Status header. If the message is identified as spam, it is moved to the spam folder.
<pre caption="Example $HOME/.procmail/spam.rc">
:0 fw
| /usr/bin/spamc -f

:0
* X-Spam-Status: Yes
.spam/
</pre>
<warn>
While SpamAssassin is very good, it is not 100% accurate so using <path>/dev/null</path> as your spam folder may result in some lost email. It is better to move spam to a separate folder and manually delete messages.
</warn>
<note>
<c>spamc</c> connects to the SpamAssassin daemon (spamd). If for some reason you cannot use the daemon, SpamAssassin can be called directly using <c>/usr/bin/spamassassin -a</c>
</note>
</p>

<p>
You should now be set up to filter your email and block most spam. For more information on Procmail or SpamAssassin, see their system documentation with <c>man procmail</c> and <c>perldoc Mail::SpamAssassin</c> or the associated websites at <uri>http://www.procmail.org</uri> and <uri>http://www.spamassassin.org</uri>.
</p>

</body>
</chapter>
<chapter>
<title>Moves, Adds and Changes</title>
	<section>
		<title>Moves</title>
		<body>
		<p>The following developers recently left the Gentoo team:
			<ul>
				<li><e>none this week</e></li>
			</ul>
		</p>
		</body>
	</section>
	<section>
		<title>Adds</title>
		<body>
		<p>The following developers recently joined the Gentoo team:
			<ul>
				<li><e>none this week</e></li>
			</ul>
		</p>
		</body>
	</section>
	<section>
		<title>Changes</title>
		<body>
		<p>The following developers recently changed roles within the Gentoo project.
			<ul>
				<li><e>none this week</e></li>
			</ul>
		</p>
		</body>
	</section>
</chapter>
<chapter>
	<title>Contribute to GWN</title>
	<body>
	<p>Interested in contributing to the Gentoo Weekly Newsletter?  Send us an <mail link="gwn-feedback@gentoo.org">email</mail>.</p>
	</body>
</chapter>
<chapter>
	<title>GWN Feedback</title>
	<body>
	<p>Please send us your <mail link="gwn-feedback@gentoo.org">feedback</mail> and help make GWN better.</p>
	</body>
</chapter>
<chapter>
	<title>Other Languages</title>
	<body>
	<p>The Gentoo Weekly Newsletter is also available in the following languages:</p>
	<ul>
		<li><uri link="http://www.gentoo.org/news/be/gwn/gwn.xml">Dutch</uri></li>
		<li><uri link="http://www.gentoo.org/news/en/gwn/gwn.xml">English</uri></li>
		<li><uri link="http://www.gentoo.org/news/de/gwn/gwn.xml">German</uri></li>
		<li><uri link="http://www.gentoo.org/news/fr/gwn/gwn.xml">French</uri></li>
		<li><uri link="http://www.gentoo.org/news/ja/gwn/gwn.xml">Japanese</uri></li>
		<li><uri link="http://www.gentoo.org/news/it/gwn/gwn.xml">Italian</uri></li>
		<li><uri link="http://www.gentoo.org/news/br/gwn/gwn.xml">Portuguese (Brazil)</uri></li>
		<li><uri link="http://www.gentoo.org/news/pt/gwn/gwn.xml">Portuguese (Portugal)</uri></li>
		<li><uri link="http://www.gentoo.org/news/es/gwn/gwn.xml">Spanish</uri></li>
	</ul>
	</body>
</chapter>
</guide>