Re: systmd-analyze security as a release goal

2023-07-05 Thread Trent W. Buck
Russ Allbery writes: > "Trent W. Buck" writes: > >> As someone who does that kind of thing a lot, I'd rather have >> the increased annoyance of opt-out hardening than >> the reduced security of opt-in hardening. >> Even if it means I occasionally need to patch site-local rules into >> /etc/appar

Re: systmd-analyze security as a release goal

2023-07-05 Thread Russ Allbery
"Trent W. Buck" writes: > As someone who does that kind of thing a lot, I'd rather have > the increased annoyance of opt-out hardening than > the reduced security of opt-in hardening. > Even if it means I occasionally need to patch site-local rules into > /etc/apparmor.d/local/usr.bin.msmtp or >

Re: systmd-analyze security as a release goal

2023-07-05 Thread Trent W. Buck
Russ Allbery writes: > [⋯] > We know which PAM modules are installed and > can analyze the PAM configuration files to know which ones are configured. > We know which daemons use PAM. > We similarly know which NSS modules are enabled. > We can figure out what facilities they require, and could > a

Re: systmd-analyze security as a release goal

2023-07-05 Thread Trent W. Buck
Philipp Kern writes: > On 2023-07-05 09:36, Russell Coker wrote: >> On Monday, 3 July 2023 22:37:35 AEST Russell Coker wrote: >>> https://wiki.debian.org/ReleaseGoals/SystemdAnalyzeSecurity > My fear here would be that you are not in control of what your > dependencies are doing. This is especia

Re: proposal: dhcpcd-base as standard DHCP client starting with Trixie

2023-07-05 Thread Santiago Ruano Rincón
El 22/06/23 a las 09:57, Santiago Ruano Rincón escribió: > El 20/06/23 a las 08:29, Martin-Éric Racine escribió: > > On Mon, Jun 19, 2023 at 9:11 PM Santiago Ruano Rincón > > wrote: > > > El 19/06/23 a las 13:54, Martin-Éric Racine escribió: > > > > Greetings, > > > > > > > > Seeing how the ISC DH

Re: Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Daniel S.
|| |We would also like to reveal the codename of Debian 15, which will be "Buttercup". This name follows the tradition of naming Debian releases after characters from the Toy Story movies. We hope you like it and look forward to your contributions to make Debian 15 another great release. | F

Re: Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Andrey Rakhmatullin
On Wed, Jul 05, 2023 at 11:05:05PM +0200, Joaquín Rufo Gutierrez wrote: > No, Debian 13 will be released on 2024 occasionally. Who are you, sorry?

Re: Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Samuel Henrique
The person who sent this "announcement" doesn't seem to be part of the Debian Project, they're also not listed as a member of the release team at https://www.debian.org/intro/organization Someone from the release team might confirm my assumption, but for now please assume this is a fake/troll emai

Re: Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Fabio Fantoni
Il 05/07/2023 22:50, Joaquín Rufo Gutierrez ha scritto: |Hello Debian users, We are happy to announce that Debian 13, codenamed "Trixie", is expected to be released sometime in 2024, following the usual 2-year release cycle.| | | |Hi, sorry but if it were |||2-year release cycle | shouldn't i

Re: Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Joaquín Rufo Gutierrez
No, Debian 13 will be released on 2024 occasionally. El mié, 5 jul 2023 a las 23:04, Mike Hommey () escribió: > On Wed, Jul 05, 2023 at 10:50:34PM +0200, Joaquín Rufo Gutierrez wrote: > > Hello Debian users, > > > > We are happy to announce that Debian 13, codenamed "Trixie", is > > expected to b

Re: Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Mike Hommey
On Wed, Jul 05, 2023 at 10:50:34PM +0200, Joaquín Rufo Gutierrez wrote: > Hello Debian users, > > We are happy to announce that Debian 13, codenamed "Trixie", is > expected to be released sometime in 2024, following the usual 2-year > release cycle. Bookworm was released in 2023. The usual 2-year

Debian 13 release schedule and Debian 15 codename announcement

2023-07-05 Thread Joaquín Rufo Gutierrez
Hello Debian users, We are happy to announce that Debian 13, codenamed "Trixie", is expected to be released sometime in 2024, following the usual 2-year release cycle. The exact release date will depend on the progress of testing and bug fixing, but we will keep you updated on the development stat

Re: Bug#1040032: rkdeveloptool: please switch to newer Pine64 fork

2023-07-05 Thread Jonas Smedegaard
Quoting Christopher Obbard (2023-07-05 18:16:45) > On Tue, 2023-07-04 at 17:06 +0200, Jonas Smedegaard wrote: > > Since none of these forks apparently is actively developed, I suggest to > > not take any strong action like introducing an epoch, but instead simply > > add a + to indicate that curren

Re: Bug#1040032: rkdeveloptool: please switch to newer Pine64 fork

2023-07-05 Thread Christopher Obbard
Hi Jonas, On Tue, 2023-07-04 at 17:06 +0200, Jonas Smedegaard wrote: > Hi Cristopher, > > Quoting Christopher Obbard (2023-07-04 16:01:19) > > On Sat, 2023-07-01 at 11:07 +0200, Jonas Smedegaard wrote: > > > I own a PineNote, and use rkdeveloptool for flashing software onto it, > > > but have fou

Re: 64-bit time_t transition for 32-bit archs: a proposal

2023-07-05 Thread Wookey
On 2023-06-06 11:45 +0100, Simon McVittie wrote: I missed most of this conversation due to being on holiday, so just catching up now. I hesitate to continue the i386-distraction thread because what's actually important is getting this transition underway on the other arches, particularly arm32 (

Re: systmd-analyze security as a release goal

2023-07-05 Thread Russ Allbery
Philipp Kern writes: > My fear here would be that you are not in control of what your > dependencies are doing. This is especially true if you think of NIS and > PAM, where libraries are dlopen()ed and can spawn arbitrary helper > binaries. I remember openssh installing a syscall filter for its a

Bug#1040380: ITP: spike -- Spike RISC-V ISA Simulator

2023-07-05 Thread Jax Young
Package: wnpp Severity: wishlist Owner: Jax Young X-Debbugs-Cc: debian-devel@lists.debian.org, jaxvany...@gmail.com * Package name: spike Version : 1.1.0 Upstream Author : Andrew Waterman * URL : https://github.com/riscv-software-src/riscv-isa-sim * License :

Re: systmd-analyze security as a release goal

2023-07-05 Thread Philipp Kern
On 2023-07-05 09:36, Russell Coker wrote: On Monday, 3 July 2023 22:37:35 AEST Russell Coker wrote: https://wiki.debian.org/ReleaseGoals/SystemdAnalyzeSecurity People have asked how hard it is to create policy for daemons. For an individual to create them it's a moderate amount of work, 1-2 h

Re: systmd-analyze security as a release goal

2023-07-05 Thread Russell Coker
On Monday, 3 July 2023 22:37:35 AEST Russell Coker wrote: > https://wiki.debian.org/ReleaseGoals/SystemdAnalyzeSecurity People have asked how hard it is to create policy for daemons. For an individual to create them it's a moderate amount of work, 1-2 hours per daemon which is a lot considering