Hmm, a youtube video reskinned as machinima. The beginning of a trend?

1. Flamethrower.
2. "Ballroom Blitz", Sweet
3. Chuck Norris.

After fixing some unforeseen collateral damage that crept in when we started using roles in SELinux policy, I think we've got oddjob working again and doing the right thing in F9.

The bits in the oddjob-mkhomedir package make a good example of how you can get something useful going rather easily.

Dan pointed out that having pam_oddjob_mkhomedir.so refrain from doing anything if the user's home directory exists would be less wasteful in the cases where the user doesn't need her home directory created.

It's occurred to me that while having the pam_oddjob_mkhomedir.so module make the request is okay, that it's something that could be generalized to let arbitrary things be triggered at login-time.

Then of course there's the PolicyKit integration (branch), which works, but needs to be gone over again to make sure it doesn't do anything super-dumb.

Maybe I'll propose a talk (or a lightning talk) about oddjob for FUDCon. Or else just barge into David's PolicyKit talk.

Off the top of my head, I can think of three packages which attempt to do what ssh-agent does, but which aren't ssh-agent.

Boggle boggle boggle.

Shell history meme, huh?

history | awk '{a[$2]++ } END{for(i in a){print a[i] " " i}}' | sort -rn | head
7 15:37
7 11:38
5 18:54
5 15:36
5 15:33
5 15:27
4 19:26
4 17:26
3 9:25
3 16:58

I use tcsh. Good times.

Oh yes, that's hilarious.

The Fedora infrastructure and translation folks offered to bulk-move projects off of the CVS repository on the venerable elvis.redhat.com (also known as "rhlinux.redhat.com") to the shiny new fedorahosted.org server, so I took them up on it.

The takeaway is that oddjob, pam_krb5, pkinit-nss, setuptool, and splatbind all live in git repositories now. "Why git and not something else?" I wanted something that was distributed, and the local X guys rave about git.

This fulfills my Technotronic reference quota for the year.

Yeah, it's late. Sue me. On second thought, don't.

So I went to FUDCon. Nitin already posted his notes, which made me realize that I'd forgotten to use my camera again. I spent an inordinate amount of time getting a loaner from the office working on the wireless, so I was offline for large chunks of the weekend, which as it turned out, was fine.

I did get a bit more work done on the oddjob PolicyKit integration branch, as planned, but it's not quite where I want it to be to merge it to mainline (it's using APIs which are promised to be super-slow, which is less than optimal). As it happens, I haven't gotten back to it in the 2+ months since then.

The big event for me was the Func session. Func is made of awesome and excitement, but I had some concerns about how it used PKI. After quietly fretting about it, which I do far too much, Seth hunted me down and grilled me about it. In summary: certmaster doesn't quite do what the RFCs say a CA should do (mainly, revocation and basic constraints: in that certmaster didn't support them), and I think we generally agreed about that.

Part of this was due to not being able to create and add certain extensions to certificates via pyOpenSSL -- the code was there, but it had rotted as OpenSSL gained new APIs. A week or two later, I took another stab at it and filed a bug to at least get pyOpenSSL to provide a way to add extensions.

Ah, as Max points out, Friday's FUDCon hackfest won't be held at Red Hat's headquarters. Darn, that would have been amusing.

People seem to be noting what their plans are, so here goes: I'm probably going to Adrian's Func session, the GPG keysigning, and the Fedora Account System session.

Other than that, I expect to be hacking on the usual stuff that very few people around me are messing with (getting oddjob to be able to use PolicyKit authorization data in its ACLs, random other stuff), and just hanging around and being a nuisance.

In four days, FUDCon starts in Raleigh. At Red Hat's world headquarters. Which will be open for business, as usual. On NC State University's Centennial Campus. While classes are in session.

Well, that should be an interesting logistical problem.

See you there!

But... no, wait, that's it.

Today, it came to my attention that July is National Ice Cream month, and the third Sunday in the month (the Sunday just past) is National Ice Cream Day.

And what, you might ask, what was I doing on Sunday? Purely by chance, I was making ice cream.

Now, join with me, and in your best tractor pull announce voice: Sundae Sundae Sundae!

Web Logs ("Blogs", as the kids call them) will become so prevalent a means of communicating that there will eventually be no other new content. Instead, blogs will endlessly comment on other blogs, which themselves comment on other blogs.

Manufacturers will continue to make electronic devices smaller until a child chokes on one. Then they will place a warning label on the box and continue.

We will reach a point when, like copyright laws, retirement age continues to be increased faster than people age. Specifically, a child born after 2550 will never be allowed to retire. Also, due to continuing advancements in medical science, that child will be immortal.

The thing that got me thinking about the local news is the current run of television advertising for the Nintendo Wii.

As before, you have two people. But only one of them ever speaks. The other guy just stands there, smiling, while his traveling companion barges into someone's home and forces them to play video games, holding the Wii controller in a vice-like grip borne of pure terror. Or joy. Sometimes I just can't tell. Yeah, it's probably joy. Still, creepy.

BotCon is this weekend. And Providence isn't even that far away.