Bug#1109121: rsyslog: tainted by β€œAI”

2025-07-12 Thread Ansgar πŸ™€
Hi, Thorsten Glaser wrote: > Justification: code and/or documentation probably non-free > > Our friends from Gentoo have uncovered this: > > https://social.treehouse.systems/@mgorny/114835815375250264 > > In the linked-to article, the rsyslog author admits to having > used so-called β€œAI” over t

Bug#1105027: sqv: since yesterday's trickle to Testing, fails to verify Debian archive key

2025-05-10 Thread Ansgar πŸ™€
Hi, On Sat, 10 May 2025 08:51:15 + Holger Levsen wrote: > control: retitle -1 document that rust packages require SSE2 on i386 [...] > I'm reassigning this to release-notes as this needs to be documented > for the trixie release. Leaving some context too, but pleaseΒ readΒ theΒ full > bug. As I

Bug#1094969: git linked with OpenSSL

2025-04-14 Thread Ansgar πŸ™€
Hi, On Mon, 2025-04-14 at 16:18 -0500, Richard Laager wrote: > On 2025-04-14 11:10, Russ Allbery wrote: > > I do find it fairly hard to understand the logic behind a position that > > somehow our git-remote-https binary as distributed is a derived work of > > OpenSSL and thus violates the GPLv2 li

Bug#1100828: debian-archive-keyring: trixie archive signing keys

2025-04-06 Thread Ansgar πŸ™€
Hi, On Wed, 2025-03-19 at 07:47 +, Jonathan Wiltshire wrote: > New archive signing keys are now needed for trixie, ideally before the soft > freeze for trixie's update and then they can also be included in 12.11 > before 13.0. The keys are now published, see [1]. Ansgar [1]: https://lists

Bug#1072205: prevent re-using package versions for NMUs

2025-04-05 Thread Ansgar πŸ™€
Hi, regarding your analysis: I think you could just scan the .changes files as they list all *.deb files uploaded. Though very old changes only have MD5 hashes. They can be found in file://mirror.ftp-master.debian.org/srv/ftp-master.debian.org/queue/done Regarding your observation regarding bash

Bug#1072205: prevent re-using package versions for NMUs

2025-04-03 Thread Ansgar πŸ™€
Hi, On Thu, 2025-04-03 at 00:25 +0200, Johannes Schauer Marin Rodrigues wrote: > Quoting Ansgar πŸ™€ (2025-04-02 21:41:39) > > regarding your analysis: I think you could just scan the .changes files as > > they list all *.deb files uploaded.> Though very old changes only h

Bug#1100828: debian-archive-keyring: trixie archive signing keys

2025-03-19 Thread Ansgar πŸ™€
owner -1 ! On Wed, 2025-03-19 at 07:47 +, Jonathan Wiltshire wrote: > New archive signing keys are now needed for trixie, ideally before the soft > freeze for trixie's update and then they can also be included in 12.11 > before 13.0. It has been on my TODO list for a while. I'll try to get it

Bug#1084924: Draft Ballot Re: Bug#1084924: The system-log-daemon virtual package

2024-12-15 Thread Ansgar πŸ™€
Hi, On Sun, 2024-12-15 at 14:02 +, Matthew Vernon wrote: > The Technical Committee also > acknowledges that on systemd systems, journald can serve the purpose of > system-log-daemon, but that systemd also supports installing a separate > system-log-daemon. Does this mean that systemd shoul

Bug#1084924: The system-log-daemon virtual package

2024-12-11 Thread Ansgar πŸ™€
Hi, On Wed, 2024-12-11 at 11:19 +, Matthew Vernon wrote: > On 11/12/2024 08:13, Ansgar πŸ™€ wrote: > > > 2. Drop the "Conflicts: system-log-daemon" from providers of > > system- > > log-daemon > > > (2.) is also technically correct: different implem

Bug#1084924: The system-log-daemon virtual package

2024-12-11 Thread Ansgar πŸ™€
Hi, there is also an alternative solution which I think hasn't been mentioned: 1. Add "Provides: system-log-daemon" to systemd 2. Drop the "Conflicts: system-log-daemon" from providers of system- log-daemon (1.) is technically correct: systemd provides the system-log-daemon system facility. (2.

Bug#1084924: The system-log-daemon virtual package

2024-11-13 Thread Ansgar πŸ™€
Hi Sean, On Thu, 2024-11-14 at 10:16 +0800, Sean Whitton wrote: > I struggle to see why logging is special, in this case. > > Why isn't an MTA a system facility?Β  Well, because many many systems > don't need an MTA at all. > > And similarly, others might not want a standard logging facility, > b

Bug#1084924: The system-log-daemon virtual package

2024-11-07 Thread Ansgar πŸ™€
Hi, On Thu, 2024-11-07 at 15:46 +, Matthew Vernon wrote: > Hi, > > On 07/11/2024 10:03, Helmut Grohne wrote: > > > Indeed, we can lift Bastian's mail into a proper proposal. Logging > > services are generally assumed to be available. It becomes the > > responsibility of the init system or co

Bug#1084924: The system-log-daemon virtual package

2024-10-16 Thread Ansgar πŸ™€
Hi, On Sat, 2024-10-12 at 17:29 +0800, Sean Whitton wrote: Okay, then let me ask some questions: 1. What should decide whether system-wide logging facilities exist? Some central defaults or random packages (say foobard) shipping a daemon? 1a. If not random packages, should policy be updated to

Bug#1082643: Bug#1082904: kernel-install.8: Some remarks and editorial changes for this man page

2024-09-28 Thread Ansgar πŸ™€
Control: tag 1082904 - patch Control: tag 1082643 - patch Control: tag 1082714 - patch Hi, On Sat, 2024-09-28 at 01:13 +, Bjarni Ingi Gislason wrote: > Tags: patch Patches against generated files are not very useful. If there is an issue, it must be fixed in the original source file and/or g

Bug#1081274: ftp.debian.org: snapper-gui wrongly removed from testing

2024-09-10 Thread Ansgar πŸ™€
Control: reassign -1 release.debian.org Hi, On Tue, 2024-09-10 at 14:24 +0530, Ritesh Raj Sarraf wrote: > Yesterday, I got a report that snapper-gui is removed from Debian > testing. > > The reason for removal is Debiang bug: 1073699, which is for the > snapper package. > snapper is still in the

Bug#1080041: adduser: take sysusers.d files as input

2024-09-01 Thread Ansgar πŸ™€
Hi, On Sun, 2024-09-01 at 07:43 +0200, Gioele Barabucci wrote: > On Fri, 30 Aug 2024 03:16:34 +0200 Lorenzo Puliti > wrote: > > > If adduser could be used as alternative to systemd by > > dh_installsysusers that would solve my issue. Even if you don't > > care > > about my use case, the linux

Bug#1074014: encode mandatory merged-/usr into policy

2024-06-26 Thread Ansgar πŸ™€
Hi, On Sat, 2024-06-22 at 09:42 +0200, Helmut Grohne wrote: > I have another question. Thorsten Glaser was unhappy about my mksh > report as he believes that it should be /bin/mksh and not /usr/bin/mksh. > I argued that the biggest concern is the symlink vs directory conflict > and he came up with

Bug#1064938: isospec - maintainer does not access email from ftp-master

2024-05-23 Thread Ansgar πŸ™€
Hi, given neither debian.org nor ftp-master.debian.org have a DMARC policy, it should be a configuration error on alioth-lists.debian.net. (Arguably mailing lists should not impersonate other domains outside their control and set "From:" to an address controlled by the mailing list operator.) An

Bug#1071201: systemd 256~rc2-1

2024-05-15 Thread Ansgar πŸ™€
Hi, On Wed, 2024-05-15 at 22:38 -0600, Antonio Russo wrote: > I can confirm this version of systemd breaks my system's boot as well. I > don't have any > modified journald.conf settings. > > I'm running dracut, and the image that is built fails to start > systemd-modules-load.service This is a

Bug#996202: EFI Secure Boot for systemd-boot

2024-05-10 Thread Ansgar πŸ™€
Hi, On Fri, 2024-05-10 at 15:20 +0100, Luca Boccassi wrote: > On Thu, 04 Apr 2024 20:41:59 +0100 Luca Boccassi > > On IRC Steve mentioned that he's ok with proceeding with this. > > jcristau from DSA said that it's the FTP team that should confirm the > > request > > for the new intermediate sig

Bug#1068192: debian-policy: extended forbidden network access to contrib and non-free

2024-04-01 Thread Ansgar πŸ™€
Hi, On Mon, 2024-04-01 at 17:52 +0200, Bill Allombert wrote: > On Mon, Apr 01, 2024 at 05:29:54PM +0200, Aurelien Jarno wrote: > > This gives constraints on the build daemons infrastructure and also > > brings some security concerns. Would it be possible to extend this > > restriction to all archi

Bug#1064951: UDD/upload_history: importer broken by switch to detached PGP signatures

2024-02-28 Thread Ansgar πŸ™€
Hi Lucas, On Wed, 28 Feb 2024 08:30:28 +0100 Lucas Nussbaum wrote: > The upload_history importer parses email received by the > debian-devel-changes mailing list. On 2024-02-11, the format of those > emails changed to multipart/signed. Previously the PGP signature was > inlined. This isn't correc