Bug#702030: ideas for implementation

2014-06-20 Thread Patrick Schleizer
Hi! intrigeri: > Patrick Schleizer wrote (09 Jun 2014 14:20:15 GMT) : >> I have two ideas on how to implement this and might eventually even be >> able to submit patches for this. > > I like reading this. Thanks for working on it! :) > >> 1) A clean solution, that

Bug#750848: add openvpn to init script Should-Start

2014-06-07 Thread Patrick Schleizer
Package: tor Dear Maintainer, could you modify Tor's init script line # Should-Start: $syslog with # Should-Start: $syslog openvpn please? This would aid users who want to connect to a VPN before connecting to Tor, because then the Tor daemon would start a little later, if and only

Bug#750848: add openvpn to init script Should-Start

2014-06-07 Thread Patrick Schleizer
intrigeri: > Am I wrong in thinking that if we add this line, then we're making > life harder for those who want to run OpenVPN *on top* of Tor? To my knowledge, one cannot route OpenVPN though Tor without using Virtual Machines or multiple physical computers. (OpenVPN has no socks proxy support a

Bug#750848: add openvpn to init script Should-Start

2014-06-07 Thread Patrick Schleizer
intrigeri: > Patrick Schleizer wrote (07 Jun 2014 15:11:10 GMT) : >> (OpenVPN has no socks proxy support and mechanisms such as torsocks >> won't work.) > > openvpn(8) mentions a socks-proxy option, and a simple web search > shows that plenty of people seem to

Bug#702030: ideas for implementation

2014-06-09 Thread Patrick Schleizer
Dear AppArmor Maintainers, I have two ideas on how to implement this and might eventually even be able to submit patches for this. 1) A clean solution, that can be implemented in the grub-common package: In /etc/grub.d/10_linux it could be attempted to run aa-status and if it exits 0, the follow

Bug#795519: debhelper: dh_installinit should run systemd-tmpfiles if a /usr/lib/tmpfiles.d/ snippet gets shipped for systemd-only packages also

2015-08-14 Thread Patrick Schleizer
Package: debhelper Severity: normal Usertags: pkg-systemd-maintainers tmpfiles.d As explained verbosely on the pkg-systemd-maintainers mailing list [1], when a package ships a /usr/lib/tmpfiles.d/ snippet while at the same time that package does not ship a sysvinit script, then the 'systemd-tmpfil

Bug#796235: rinetd fills up the logs until disk is full up if it cannot bind

2015-08-20 Thread Patrick Schleizer
Package: rinetd Version: 0.62-5.1 Severity: critical X-Debbugs-CC: t...@punkave.com X-Debbugs-CC: whonix-de...@whonix.org When rinetd cannot bind, it quickly fills up the logs. Confirmations. [1] [2] CC'd upstream, Tom Boutell. Tom, do you still maintain rinetd? Severity critical chosen, becaus

Bug#859121: RFP: genmkfile - Generic Makefile

2017-03-30 Thread Patrick Schleizer
Package: wnpp Severity: wishlist X-Debbugs-CC: pkg-privacy-maintain...@lists.alioth.debian.org * Package name: genmkfile Version : 4.0 Upstream Author : Patrick Schleizer * URL : https://github.com/Whonix/genmkfile * License : GPL-3+ Programming Lang: bash

Bug#859125: RFP: onion-grater - Whitelisting Tor Control Protocol Filter

2017-03-30 Thread Patrick Schleizer
a great addition to Debian because it would improve usability and security for users that use applications using Tor's ControlPort. onion-grater is a Tor ControlPort filter written by anonym (Tails project) that has been packaged by Patrick Schleizer (Whonix project). The packaged version of

Bug#859121: [Pkg-privacy-maintainers] Bug#859121: RFP: genmkfile - Generic Makefile

2017-03-30 Thread Patrick Schleizer
related: [1] RFP: onion-grater - Whitelisting Tor Control Protocol Filter http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=859125 Hi Antoine! Antoine Beaupré: > Funny you send this issue to the maintainers' mailing list.. It was my impression pkg-privacy-maintain...@lists.alioth.debian.org w

Bug#856587: fake-tty shared object or command line tool

2017-03-02 Thread Patrick Schleizer
Package: moreutils Severity: whishlist X-Debbugs-CC: whonix-de...@whonix.org feature request: fake-tty [application] - fools application into detecting being run inside a tty I am not a C coder, but at least a shared object looks easy to implement. echo "int isatty(int fd) { return 1; }" | gcc

Bug#820111: Info received (document how to use per-user systemd --user services)

2017-02-20 Thread Patrick Schleizer
By Debian stretch default, there are some default systemd user unit files in `/usr/lib/systemd/user/`. With a different path on Debian stretch `/usr/lib/systemd/user/mytest.service`: ``` [Unit] Description=mytest [Service] Type=oneshot RemainAfterExit=yes ExecStart=/bin/true [Install] WantedBy=

Bug#856217: [/lib/systemd/system/user@.service:13] Invalid user/group name or numeric ID, ignoring: .service

2017-02-26 Thread Patrick Schleizer
Package: systemd Severity: normal X-Debbugs-CC: whonix-de...@whonix.org sudo service user@.service status ● user@.service.service - User Manager for UID .service Loaded: loaded (/lib/systemd/system/user@.service; static; vendor preset: enabled) Active: inactive (dead) Feb 26 17:15:17 user s

Bug#856217: [/lib/systemd/system/user@.service:13] Invalid user/group name or numeric ID, ignoring: .service

2017-02-26 Thread Patrick Schleizer
Do you think this warning could / should be removed?

Bug#824290: add dpkg trigger for /usr/share/netfilter-persistent/plugins.d folder to have newly installed plugins take effect

2016-05-14 Thread Patrick Schleizer
Package: netfilter-persistent Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, please add a dpkg trigger. Once a plugin is dropped into /usr/share/netfilter-persistent/plugins.d folder, the service netfilter-persistent should be restarted so the new plugins will take effe

Bug#822693:

2016-06-02 Thread Patrick Schleizer
The user amending PATH is not great as this would be ignored by (background) applications running other applications. For example update-flashplugin-nonfree run by postinst would use /usr/bin/gpg rather than /use/local/bin/gpg because it will not have the same PATH setting as the user. Etc. > Tho

Bug#819824: easy mode for needrestart

2016-04-02 Thread Patrick Schleizer
Package: needrestart Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, we are wondering if needrestart should be installed by default in Whonix. When needrestart is automatically run during apt-get dist-upgrade, I am concerned, that its output by default is too technical

Bug#820111: document how to use per-user systemd --user services

2016-04-05 Thread Patrick Schleizer
Package: systemd Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, please document how to use per-user systemd --user services. - how to do that for a login console - how to do that for an X session (If there is any difference.) Steps I done: sudo apt-get install libpa

Bug#776152: provide meaningful exit codes for network failures

2016-06-27 Thread Patrick Schleizer
Julian Andres Klode: > On Sat, Jan 24, 2015 at 04:50:04PM +0000, Patrick Schleizer wrote: >> Package: apt >> Severity: important >> >> When "apt-get update" fails the program exits with a 0 status. >> It would be useful if it exited with a non-zero status

Bug#793376: su-to-root: higher priority for kdesudo and gksudo

2015-07-23 Thread Patrick Schleizer
Package: menu Severity: wishlist Dear maintainer! Please consider the following patch. It improves SU_TO_ROOT_X auto detection code. It prefers kdesudo (because it's more modern, supports /etc/sudoers.d etc.) and gksudo over gksu. commit: https://github.com/adrelanos/menu/commit/cfbaf0bc5b4dc49

Bug#793416: help making systemd drop-in overwrite files take effect

2015-07-23 Thread Patrick Schleizer
Felipe Sateler: > On 23 July 2015 at 17:28, Patrick Schleizer wrote: >> Package: dh-systemd >> Severity: wishlist >> >> Could you please add a feature, so debhelper (dh-systemd) could help >> making systemd drop-in overwrite files >> (/lib/systemd/system/un

Bug#793416: help making systemd drop-in overwrite files take effect

2015-07-23 Thread Patrick Schleizer
Package: dh-systemd Severity: wishlist Could you please add a feature, so debhelper (dh-systemd) could help making systemd drop-in overwrite files (/lib/systemd/system/unit.service.d/override.conf) take effect? (systemctl daemon-reload + service restart) (guarded by [ -d /run/systemd/system ])

Bug#793376: su-to-root: higher priority for kdesudo and gksudo

2015-07-23 Thread Patrick Schleizer
Bill Allombert: > On Thu, Jul 23, 2015 at 12:46:25PM +0000, Patrick Schleizer wrote: >> Package: menu >> Severity: wishlist >> >> Dear maintainer! >> >> Please consider the following patch. >> >> It improves SU_TO_ROOT_X auto detection co

Bug#793376: su-to-root: higher priority for kdesudo and gksudo

2015-07-23 Thread Patrick Schleizer
Bill Allombert: > On Thu, Jul 23, 2015 at 10:42:59PM +0000, Patrick Schleizer wrote: >> Bill Allombert: >>> On Thu, Jul 23, 2015 at 12:46:25PM +, Patrick Schleizer wrote: >>>> Package: menu >>>> Severity: wishlist >>>> >>>&

Bug#793376: su-to-root: higher priority for kdesudo and gksudo

2015-07-24 Thread Patrick Schleizer
Bill Allombert: > On Thu, Jul 23, 2015 at 11:57:04PM +0000, Patrick Schleizer wrote: >>>> Even if not disallowed. Even without any custom sudoers settings, this >>>> patch would work? No disadvantages by it? >>>> >>>> kdesudo works on any system.

Bug#794099: optional non-zero exit codes in case of restart(s) required

2015-07-30 Thread Patrick Schleizer
Package: needrestart Severity: wishlist When running 'needrestart' from a terminal or script, it would be useful to have some command line parameter to make it exit non-zero, in case any restart(s) are required. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subjec

Bug#764007: (no subject)

2015-07-31 Thread Patrick Schleizer
What's the status of this? Cheers, Patrick -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#754730: packages should not depend on apparmor

2014-07-13 Thread Patrick Schleizer
Package: lintian Severity: wishlist Dear lintian maintainers, no package should depend on apparmor. Please add a lintian check, that reports an error, should a package depend on apparmor. Why? Before we can automatically enable AppArmor when the userspace tools are installed, AppArmor maintaine

Bug#702030: ideas for implementation

2014-07-13 Thread Patrick Schleizer
Hi! intrigeri: >> Shouldn't we use a number in front of the config file such as >> /etc/default/grub.d/10_apparmor.cfg, to get a useful order and to make >> it simpler for users to overrule it? > > Yes, ordering requires more thought, and a survey of how other > packages that ship snippets into /

Bug#754730: [lintian] Moreinfo

2014-07-13 Thread Patrick Schleizer
Hi bastien! Thank you for taking this! > Could we get a tag description ? package-depends-recommends-on-apparmor > Something what would explain why and how to fix your package ? Package must neither depend nor recommend apparmor, because it would not only enable AppArmor for this package, but

Bug#754744: forbid most packages to depend on or recommend apparmor

2014-07-13 Thread Patrick Schleizer
Package: debian-policy Severity: wishlist Hi! Suggested policy addition: Do not depend on or recommend the apparmor package Packages must neither depend on nor recommend apparmor, because it would not only enable AppArmor for this package, but for any packages shipping an AppArmor profile, whic

Bug#754730: [lintian] Moreinfo

2014-07-13 Thread Patrick Schleizer
Bastien ROUCARIES: > Could you also open a bug agaisnt policy ? It will help to have reference. Done: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754744 -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.

Bug#702030: ideas for implementation

2014-07-15 Thread Patrick Schleizer
intrigeri: > Hi, > > Patrick Schleizer wrote (13 Jul 2014 18:45:42 GMT) : >> Looks like we're the first ones to ship a /etc/default/grub.d snippet. I >> guess the arbitrarily chosen /etc/default/grub.d/10_apparmor.cfg is >> fine. It allows others to easily hook

Bug#786418: deb-systemd-helper fails to enable systemd units when using 'WantedBy = ' with spaces

2015-05-21 Thread Patrick Schleizer
Package: init-system-helpers Version: 1.23 Severity: minor As reported [1] on the debian-systemd mailing list, deb-systemd-helper will not enable systemd unit files when using spaces. The spaces in > WantedBy = multi-user.target are unsupported by `deb-systemd-helper`. It needs to be strictly w

Bug#786421: warn against usage of spaces, i.e. 'Type = notify' in systemd unit files

2015-05-21 Thread Patrick Schleizer
Package: lintian Severity: wishlist systemd man pages always uses the syntax without spaces, for example 'Type=notify' and so forth. A systemd contributor on #systemd irc.freenode.net also recommended against it. adrelanos: please do not use spaces adrelanos: there was recently a problem with

Bug#786418: (no subject)

2015-05-21 Thread Patrick Schleizer
related lintian feature request... warn against usage of spaces, i.e. 'Type = notify' in systemd unit files http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=786421 Cheers, Patrick -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? C

Bug#734794: (no subject)

2015-06-05 Thread Patrick Schleizer
> From: Ritesh Raj Sarraf > On 12/02/2014 07:04 PM, Sebastian Pipping wrote: >> I can confirm that kpartx needs "sleep 2" /after/ adding or removing >> partitions before running some other command that assumes the >> partitions are now gone (or in place). My guess is that something >> needs to pr

Bug#734794: (no subject)

2015-06-07 Thread Patrick Schleizer
Does upstream know about this issue? What would be the real fix to solve this timing problem? Are there commands, such as: - 'kpartx --wait-until-ready' that waits as long as required or, - 'kpartx --is-ready' that exits 0 or 1 accordingly. Or would implementing those up to 'kpartx' or another

Bug#788099: mat missed dependency gir1.2-gtk-3.0

2015-06-08 Thread Patrick Schleizer
Package: mat Severity: normal How to reproduce? sudo apt-get install mat sudo apt-get purge gir1.2-gtk-3.0 mat-gui Traceback (most recent call last): File "/usr/bin/mat-gui", line 6, in from gi.repository import GObject, Gtk, GLib ImportError: cannot import name Gtk Cheers, Patrick -

Bug#778357: audit 'apt-get update' exit codes

2015-02-13 Thread Patrick Schleizer
Package: apt Severity: important X-Debbugs-CC: hol...@layer-acht.org,p...@debian.org When "apt-get update" fails the program under some conditions exits with a 0 status. It would be useful if it exited with a non-zero status in that case (or if there were a switch to tell it to do so). Since ther

Bug#778357: audit 'apt-get update' exit codes

2015-02-14 Thread Patrick Schleizer
Julian Andres Klode: > The results are meaningful. 0 indicates success or transient error, whereas > other values indicate a persistent error. > > Stuff like gpg errors are transient, they are expected to happen during > mirror updates due to the repository format. If an adversary mounts a denial

Bug#776152: provide meaningful exit codes for network failures

2015-01-24 Thread Patrick Schleizer
Package: apt Severity: important When "apt-get update" fails the program exits with a 0 status. It would be useful if it exited with a non-zero status in that case (or if there were a switch to tell it to do so). This is similar to bug 41053 [1] from 1999, that says it's fixed, but it doesn't say

Bug#774888: please provide an option to hide or deactivate all the noisy, scary warnings during boot

2015-01-08 Thread Patrick Schleizer
Package: apparmor-profiles Severity: important When having the apparmor-profiles package installed, but not enabled all the profiles enforced by default, there are more than >20 warnings, such as: > Warning from /etc/apparmor.d/usr.sbin/traceroute (/etc/apparmor.d/usr.sbin.traceroute line 29): pr

Bug#774888: [pkg-apparmor] Bug#774888: please provide an option to hide or deactivate all the noisy, scary warnings during boot

2015-01-08 Thread Patrick Schleizer
Those warnings are fixed in testing indeed. Sorry for the noise. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#756193: --import-ownertrust

2015-03-19 Thread Patrick Schleizer
I agree, this should be fixed. It's possible. But needlessly difficult. I don't have python code for this, but this is how gpg-bash-lib [1] (written by me) does it. Should give you an idea how the import command could look like. gpg_bash_lib_internal_primary_key_fingerprint="$(gpg_bash_lib_functi

Bug#780970: [bash] exported bash functions broken in chroot

2015-03-22 Thread Patrick Schleizer
Package: bash Version: 4.3-11+b1 Severity: important --- Please enter the report below this line. --- Dear Maintainer! operating system: Debian jessie How to reproduce? mkdir testdir sudo debootstrap wheezy ./testdir/ http://ftp.us.debian.org/debian/ [snipped output of debootstrap] Consider

Bug#780970: (no subject)

2015-03-30 Thread Patrick Schleizer
Asked about this on the help-bash mailing list: https://lists.gnu.org/archive/html/help-bash/2015-03/msg00081.html And got a reply: https://lists.gnu.org/archive/html/help-bash/2015-03/msg00082.html -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubsc

Bug#758228: (no subject)

2015-07-01 Thread Patrick Schleizer
Friendly ping? -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#763164: (no subject)

2014-11-09 Thread Patrick Schleizer
> I have upgraded to bash 4.3-11 and this problem is no longer reproducible. > [...] > I believe this bug can be closed. I don't think this bug should be closed. Debian's wheezy repository, that currently provides 4.2+dfsg-0.1+deb7u3 is still affected. -- To UNSUBSCRIBE, email to debian-bugs-

Bug#758228: please provide /usr/bin/visual

2014-08-15 Thread Patrick Schleizer
Package: kwrite Severity: wishlist Dear maintainer, there already is, - $EDITOR environment variable (honored by sensible-editor), - as well as /usr/bin/editor (managed by debian alternatives) (honored by sensible-editor). - as well as /usr/bin/gnome-text-editor, - as well as $VISUAL environment

Bug#866187: add torrc.d configuration directory

2017-07-04 Thread Patrick Schleizer
Peter Palfrader: > I'm tempted to stop shipping upstream's torrc as /etc/tor/torrc. It's > full of options that most users should never set, and shipping an almost > empty one is much nicer. > > I suspect that approximately the only thing it ought to have is the > include line. I was too afraid

Bug#860721: please enable Tor2webMode compile time option

2017-04-19 Thread Patrick Schleizer
Package: tor Severity: whishlist X-Debbugs-CC: whonix-de...@whonix.org Dear Maintainer, please enable Tor2webMode compile time option. # How? Please add to debian/control dh_auto_configure --enable-tor2web-mode And in src/or/config.c change from V(Tor2webMode, BOOL, "0"),

Bug#848279: deprecate InRelease in favor of Release.gpg

2016-12-15 Thread Patrick Schleizer
Package: apt Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org In light of CVE-2016-1252... When there is Release.gpg implemented in apt, why not deprecate InRelease?

Bug#832802: usage of network-pre.target results in systemd ordering cycle

2016-07-28 Thread Patrick Schleizer
Package: netfilter-persistent Severity: grave X-Debbugs-CC: whonix-de...@whonix.org Tags: security Dear maintainer, I am using the following minimal systemd unit file for testing purposes. ### /lib/systemd/system/my-test.service [Unit] Description=my-test-firewall-service Before=network-pre.ta

Bug#675008: bash should source package hooks into interractive shells

2016-07-29 Thread Patrick Schleizer
I don't think this LSB / FHS approach is appropriate here. I appreciate having got a very reasonable response from LSB / FHS. > https://bugs.linuxfoundation.org/show_bug.cgi?id=1367 > > --- Comment #1 from Jeff Licquia --- > In general, LSB and FHS don't mind if someone like Debian wants to > i

Bug#832911: broken systemd dependencies may result in firewall not being load early enough

2016-07-29 Thread Patrick Schleizer
Package: firewalld Severity: grave X-Debbugs-CC: whonix-de...@whonix.org Tags: security Dear maintainer, the systemd dependencies in firewalld.service are broken. It leads to a systemd ordering cycle. And systemd's automatic breaking of the chain might result in the firewall not being load early

Bug#833474: please use configuration folder /etc/audit/rules.d/ by default

2016-08-04 Thread Patrick Schleizer
Package: auditd Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, /lib/systemd/system/auditd.service it is currently using [relevant snippet]: # [Service] ExecStart=/sbin/auditd -n ## To use augenrules, copy this file to /etc/systemd/system/auditd.service ## and uncom

Bug#820111: document how to use per-user systemd --user services

2016-12-24 Thread Patrick Schleizer
Michael Biebl: > Can you attache the full output of > systemctl status --user mytest > > and the completer mytest.service unit. You looking into this is appreciated! cat /etc/systemd/user/mytest.service [Unit] Description=mytest [Service] Type=oneshot RemainAfterExit=yes ExecStart=/bin/true [I

Bug#845496: /var/log/syslog spam host brltty[204]: file system mount error: usbfs[brltty-usbfs] -> /var/run/brltty/usbfs: No such device

2016-11-23 Thread Patrick Schleizer
Package: brltty Severity: normal X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, brltty keeps spamming /var/log/syslog. host brltty[204]: file system mount error: usbfs[brltty-usbfs] -> /var/run/brltty/usbfs: No such device Like 20 messages every 2 minutes or so. Running on Debian jessi

Bug#845922: virtualbox-guest-x11 broken after jessie to stretch upgrade

2016-11-26 Thread Patrick Schleizer
Package: virtualbox-guest-x11 Severity: important X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, after upgrading from jessie to stretch inside VirtualBox (Whonix), X is no longer starting. Even though the old kernel module was uninstalled and the new one installed by dkms during upgrade.

Bug#851175: plasma-workspace - All shell packages missing. This is an installation issue, please contact your distribution - missing dependency on plasma-desktop-data

2017-01-12 Thread Patrick Schleizer
Package: plasma-workspace Severity: grave X-Debbugs-CC: whonix-de...@whonix.org Installing plasma-workspace alone on Debian stretch (after a jessie -> stretch upgrade) leads to leads to the KDE desktop being totally unusable only showing the following error popup. All shell packages missing. This

Bug#824939: (no subject)

2017-01-12 Thread Patrick Schleizer
I can confirm this. Without kwin installed, there are no window title bars, which makes it pretty unusable. Best regards, Patrick

Bug#754242: (no subject)

2017-01-14 Thread Patrick Schleizer
Is this actually implemented despite saying wontfix? Acquire::BlockDotOnion "false"; allows connecting to http://asdfasdf.onion without tor:// Thank you for implementing 'Acquire::BlockDotOnion "false";' - very useful for Whonix! Best regards, Patrick

Bug#850474: RFP: ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network

2017-01-06 Thread Patrick Schleizer
Package: wnpp Severity: wishlist X-Debbugs-CC: pkg-privacy-maintain...@lists.alioth.debian.org * Package name: zeronet Version : v0.5.0 Upstream Author : HelloZeroNet * URL : https://zeronet.io * License : GPL-2 Programming Lang: python Description : Dec

Bug#829640: (no subject)

2016-09-04 Thread Patrick Schleizer
> 1) It's still al just Wants, no Requires... i.e. if netfilter rules loading fails for whichever reason, the boot process will continue just normally, with networking and any daemons, that possibly require netfilter for their security, being brought up. There is a separate bug report for this: '

Bug#834196: add dpkg trigger for /etc/audit/rules.d folder to have newly installed rules files take effect

2016-08-12 Thread Patrick Schleizer
Package: auditd Severity: wishlist X-Debbugs-CC: whonix-de...@whonix.org Dear maintainer, please add a dpkg trigger. Once a new auditd rules file is dropped into /etc/audit/rules.d folder, run within the Debian maintainer script: /sbin/augenrules --load || true Cheers, Patrick

Bug#829752: do not bring up the network if the firewall fails

2016-08-21 Thread Patrick Schleizer
A way to fix this would be to not bring up the network if the firewall fails. I suggest adding the following file: /lib/systemd/system/networking.service.d/30_netfilter-persistent.conf With the following content: [Unit] ## Fail Closed Mechanism. ## When the firewall systemd service failed, do no

Bug#829640: netfilter-persistent.service suggestion

2016-08-21 Thread Patrick Schleizer
Thank you for working on this patch! Me and rustybird agreed on the following. Please consider using the following as netfilter-persistent.service. # [Unit] Description=netfilter persistent configuration DefaultDependencies=no Wants=network-pre.target Before=network-pre.target Wants=system

Bug#675008: (no subject)

2016-04-14 Thread Patrick Schleizer
Christoph Anton Mitterer: > So if you think that a working solution, which is used by others, isn't the correct one... what is you suggestion how to do it? ;-) I am a afraid, I believe he already answered that above. > So the best thing would be to bring such a proposal to the LSB, or to FreeDesk

Bug#829640: netfilter-persistent loads firewall rules too late

2016-07-04 Thread Patrick Schleizer
Package: netfilter-persistent Severity: grave X-Debbugs-CC: whonix-de...@whonix.org Tags: security Dear maintainer, there is a security issue with the netfilter-persistent systemd service. [1] netfilter-persistent orders itself before the wrong target. Should be 'Before=network-pre.target'. The

Bug#829740: RFP: corridor - a Tor traffic whitelisting gateway

2016-07-05 Thread Patrick Schleizer
Package: wnpp Severity: wishlist X-Debbugs-CC: pkg-privacy-maintain...@lists.alioth.debian.org * Package name: corridor Version : 20160705124628 Upstream Author : rustybird * URL : https://github.com/rustybird/corridor * License : ISC / public domain Programm

Bug#829740: Acknowledgement (RFP: corridor - a Tor traffic whitelisting gateway)

2016-07-05 Thread Patrick Schleizer
Hi! Is someone from the PkgPrivacyMaintainers team interested / willing to help get corridor into Debian? I got a working prototype of a Debian package which is almost free of lintian warnings. [1] [2] [3] There are just some remaining --pedantic lintian warnings that are fixable. First questions

Bug#829640: Acknowledgement (netfilter-persistent loads firewall rules too late)

2016-07-05 Thread Patrick Schleizer
Rusty Bird: > They also have to add Wants=network-pre.target then, > https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/

Bug#829740: [Pkg-privacy-maintainers] Bug#829740: RFP: corridor - a Tor traffic whitelisting gateway

2016-07-05 Thread Patrick Schleizer
Hi! Is someone from the PkgPrivacyMaintainers team interested / willing to help get corridor [4] [5] [6] into Debian? I got a working prototype of a Debian package which is almost free of lintian warnings. [1] [2] [3] There are just some remaining --pedantic lintian warnings that are fixable. Fir

Bug#829752: netfilter-persistent systemd service does not lock the network if netfilter-persistent wrapper is failing at system bootup

2016-07-05 Thread Patrick Schleizer
Package: netfilter-persistent Severity: grave X-Debbugs-CC: whonix-de...@whonix.org Tags: security Dear maintainer, there is a security issue with the netfilter-persistent systemd service. [1] If the netfilter-persistent wrapper [2] fails for some reason, it does not load any firewall rules and

Bug#829740: (no subject)

2016-07-20 Thread Patrick Schleizer
Sorry, I did not get e-mail notifications so I missed your replies here and answer late. My Debian packaging questions (copyright lintian warning and combined man page) have been sorted out after asking on Debian mentors mailing list. I have forked and successfully packaged corridor for Debian. [

Bug#675008: LSB feature request

2016-07-20 Thread Patrick Schleizer
Posted an LSB feature request: define bash non-login shell snippet drop-in folder /etc/bash.bashrc.d/ in LSB https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=4167 Cheers, Patrick

Bug#675008: LSB feature request

2016-07-22 Thread Patrick Schleizer
Patrick Schleizer: > Posted an LSB feature request: > > define bash non-login shell snippet drop-in folder /etc/bash.bashrc.d/ > in LSB > > https://lsbbugs.linuxfoundation.org/show_bug.cgi?id=4167 Mats Wichmann: > This won't happen: LSB says nothing about bash, rathe

Bug#1075960: cowbuilder: stop passing obsolete --mirror and --distribution parameters to pbuilder to silence superfluous pbuilder warning "W: --override-config is not set; not updating apt.conf Read t

2024-07-08 Thread Patrick Schleizer
Package: cowbuilder Severity: normal Dear maintainer, even though I will be writing a lot about pbuilder, I am pretty sure that this is a cowbuilder issue. When running cowbuilder there is a warning: > W: --override-config is not set; not updating apt.conf Read the manpage for details. Th

Bug#1076269: enroll DKMS signing key / automate running "sudo mokutil --import /var/lib/dkms/mok.pub"

2024-07-13 Thread Patrick Schleizer
Package: dkms Severity: normal Dear maintainer, as of Debian bookworm, the most non-intuitive, difficult for users to figure out setup step that must be applied on Secure Boot enabled systems is the following: sudo mokutil --import /var/lib/dkms/mok.pub This is documented in DKMS readme

Bug#1076278: please update update-secureboot-policy / add '--new-key' option

2024-07-13 Thread Patrick Schleizer
Package: shim-signed Severity: normal Dear maintainer, Debian's update-secureboot-policy [1] might be an outdated version of Ubuntu's update-secureboot-policy [2]. Could you please update it? Rationale? This might cause a broken DKMS feature to automatically enroll the DKMS signing key. [3]

Bug#999811: HAVEGED no longer considered obsolete

2024-08-06 Thread Patrick Schleizer
HAVEGED no longer considered obsolete. This was bad wording from 2021. This was revised in 2022. [1] Readme was also udpated in 2022. [2] Quote from the new readme [3]: > It means that HAVEGED service is now less relevant. However, it's still useful in the following situations, when you > .

Bug#1078052: upload new version haveged 1.9.18

2024-08-06 Thread Patrick Schleizer
Package: haveged Severity: important Dear maintainer, could you please update the new haveged version 1.9.18? (But isn't haveged obsolete? No, it's not. See [1].) Cheers, Patrick [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=999811#29

Bug#1056382: missing dependency on init / systemd-sysv / libpam-systemd

2023-11-21 Thread Patrick Schleizer
Package: dracut-core Severity: normal When attempting to install dracut inside a chroot while libpam-systemd wasn't installed, dracut showed an error message and the resulting image was unbootable. > ``` > dracut-install: ERROR: installing 'poweroff' > dracut-install: ERROR: installing 'reboo

Bug#1017039: (no subject)

2023-12-17 Thread Patrick Schleizer
https://salsa.debian.org/debian/dracut/-/merge_requests/20 was not merged but will Debian get this change from upstream dracut when a new version is uploaded to Debian?

Bug#1059221: outdated package description - mkosi is no longer legacy-free (and that's okay)

2023-12-21 Thread Patrick Schleizer
Package: mkosi Severity: low Dear maintainer, as for the headline, I know "create legacy-free OS images" was the original branding of the project. mkosi know supports legacy BIOS booting. I see you already updated the package description to reflect that. Images are no longer "legacy-free".

Bug#1017039: (no subject)

2023-12-21 Thread Patrick Schleizer
Hi Thomas, understood. Thank you for your elaboration and maintaining dracut in Debian! Cheers, Patrick

Bug#1037299: (no subject)

2024-01-03 Thread Patrick Schleizer
Didn't work for me but this did: https://forum.xfce.org/viewtopic.php?id=16357

Bug#686817: grub-pc: Add option to change keyboard layout

2024-01-03 Thread Patrick Schleizer
This bug is assigned to grub-pc (legacy BIOS). grub-efi (and probably others) are however equally affected. Should this bug therefore be re-assigned to grub? I haven't found any bug report for grub-efi. Is this bug report the reason why non-US keyboard layouts result in broken password prompt

Bug#1037299: debian-live-12.0.0-amd64-xfce.iso: "Install Debian" -> "Untrusted application launcher"

2024-01-03 Thread Patrick Schleizer
f=~/Desktop/install-debian.desktop gio set -t string "$f" metadata::xfce-exe-checksum "$(sha256sum "$f" | awk '{print $1}')"

Bug#1068250: Switch to 'ng', but calling it 'dracut', don't add 'ng'?

2024-05-23 Thread Patrick Schleizer
Fedora, Arch kept calling the package dracut. They did not add the "-ng" appendix. Would it be an option for Debian to keep calling it dracut even though the git upstream repository will be changed to dracut-ng? If permissible, that might be easier. It seems unlikely that the dracut without

Bug#1031932: mmdebstrap: fix debootstrap, live-boot compatibility / support --download-only, --foreign, --second-stage, --no-check-gpg

2023-03-13 Thread Patrick Schleizer
Johannes Schauer Marin Rodrigues: It's currently broken because `lb` uses (at least) the following parameters which are unsupported by mmdebstrap: * --download-only By looking at the source code of live-build I am reasonably sure, this might only be happening because I previously set: `lh confi

Bug#1022746: please provide linux-image-generic / linux-headers-generic

2022-10-24 Thread Patrick Schleizer
Package: linux Severity: normal Dear maintainer, In Debian, linux-headers-generic is a virtual package. https://packages.debian.org/bullseye/linux-headers-generic In Ubuntu, linux-headers-generic is a real package. https://packages.ubuntu.com/linux-headers-generic It depends at time of writi

Bug#1040928: live-build fails ln: failed to create symbolic link '/etc/mtab': File exists caused by --chroot-filesystem ext4

2023-07-12 Thread Patrick Schleizer
inary_rootfs also does not handle this case. Why am I interested to use '--chroot-filesystem ext4'? Because it saves a lot time during testing to skip squashfs creation. Making the scripts resilient against this seems useful to me either way as such as situation might also happen through other kinds of customization. Kind regards, Patrick Schleizer

Bug#919320: big update

2022-12-07 Thread Patrick Schleizer
A ton of progress was made thanks to Jan Mojzis and Jérémy Lal. https://alioth-lists.debian.net/pipermail/pkg-nginx-maintainers/2022q4/002051.html libnginx-mod-http-brotli has entered Debian sid: https://packages.debian.org/search?keywords=libnginx-mod-http-brotli https://packages.debian.org/sid

Bug#1029554: Tor fails to start a few times before succeeding to start

2023-01-24 Thread Patrick Schleizer
Package: tor Severity: normal Dear maintainer, Tor fails to start a few times before succeeding to start. This is likely because the tor@default.service systemd unit does not wait for 'network.target.' symptom: [FAILED] to start Anonymizing overlay network for TCP This only started happenin

Bug#1031903: live-build: add dracut support

2023-02-24 Thread Patrick Schleizer
Package: live-build Severity: normal Dear maintainer, could you please add support for dracut? related: - live-build: netboot IPv6 only and NFSv4 → dracut https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006612 - https://packages.debian.org/dracut-live - https://packages.debian.org/kiwi-dr

Bug#1031929: support configuration of debootstrap binary

2023-02-25 Thread Patrick Schleizer
Package: live-build Severity: wishlist Dear maintainer, currently scripts/build/bootstrap_debootstrap hardcodes `debootstrap`. debootstrap ${DEBOOTSTRAP_OPTIONS} "${LB_PARENT_DISTRIBUTION_CHROOT}" chroot "${LB_PARENT_MIRROR_BOOTSTRAP}" ${DEBOOTSTRAP_SCRIPT} There are however other implementa

Bug#1031932: mmdebstrap: fix debootstrap, live-boot compatibility / support --download-only, --foreign, --second-stage, --no-check-gpg

2023-02-25 Thread Patrick Schleizer
Package: mmdebstrap Severity: normal Dear maintainer, live-build's `lb build` uses some command line options which are unsupported by mmdebstrap. live-build currently doesn't support configuration of the debootstrap program [1] but until/if it does, I simply used "sudo cp /usr/bin/mmdebstra

Bug#1050862: ship systemd-tmpfiles /usr/lib/tmpfiles.d/tor.conf to fix permission issues

2023-08-30 Thread Patrick Schleizer
, then the Tor systemd unit should be able to restore it without needing to re-install the tor package. I would suggest the following /usr/lib/tmpfiles.d/tor.conf file contents: d /var/lib/tor 02700 debian-tor debian-tor - Z /var/lib/tor/* 0660 debian-tor debian-tor - Kind regards, Patrick

  1   2   >