Bug#1003032: debootstrap: harden signature checking

2022-01-02 Thread Philippe Cerfon
Package: debootstrap Version: 1.0.126+nmu1 Severity: normal Tags: security Hey there. As far as I understood it, debootstrap defaults neither to --no-check-gpg nor to --force-check-gpg, but instead, if a keyring is speicified for some distribution and if that file is available, it uses (and veri

Re: Going ahead with non-free-firmware

2016-01-09 Thread Philippe Cerfon
And btw: Even if Debian doesn't want to do the non-open thing now or perhaps generally doesn't want to allow people to opt-out of closed source software while keeping other non-free software, then the name non-free-firmware seems to break the current naming, doesn't it? main contrib non-free These

Going ahead with non-free-firmware

2016-01-09 Thread Philippe Cerfon
Ansgar Burchardt wrote: > I think there was consensus to introduce the non-free-firmware > section > and move the non-free firmware blobs there. I'm wondering what we > need > to do next? While it's good that at least something happens it's really sad and kinda disturbing to see that a more narro