Re: Bug#943107: git-buildpackage to be autoremoved due to python2 transition

2020-02-28 Thread Guido Günther
Hi, On Fri, Feb 28, 2020 at 01:27:46AM -0500, Boyuan Yang wrote: > Hi all, > > (dropping debian-release and debian-python since it's kind of irrelevant) > > 在 2020-02-28五的 05:30 +0100,Johannes Schauer写道: > > Quoting peter green (2020-02-27 22:54:19) > > > > Relevant packages and bugs: > > > > 9

Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Dmytro Spivak
sorry, delete, please * after 1-hour living password 2020-02-28 20:22 GMT+02:00, Dmytro Spivak : > Please make a system app, that will prevent strange executables and > wrappers to be launched. > > For developers: > > 1. this app must allow an execution only executables with certain > hashes a

Security. Allow to run only executables with certain hash

2020-02-28 Thread Dmytro Spivak
Please make a system app, that will prevent strange executables and wrappers to be launched. For developers: 1. this app must allow an execution only executables with certain hashes and deny execution of files, hashes of which are not prescribed in a control file. 2. the control file (of list of

Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Steve Kemp
Good luck finding somebody to write this for you. If you're interested in kernel security you might enjoy this module which makes it possible to do most of what you want - but it'll require hacking: https://github.com/skx/linux-security-modules/tree/master/security/can-exec In general what you w

Bug#952764: ITP: python-django-libsass -- django-compressor filter using libsass

2020-02-28 Thread Michael Fladischer
Package: wnpp Severity: wishlist Owner: Michael Fladischer -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: python-django-libsass Version : 0.8 Upstream Author : Matt Westcott * URL : https://github.com/torchbox/django-libsass/ * License : BSD-

Re: Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Dmytro Spivak
Thank you, Steve! It is not for me but for everybody for the common good. I`ve made just an idea, somebody must make the result. For all companies who uses Debian OS and their customers against data (personal, banking) thefts, persecution of oppositions in countries, elections interferenses, for ma

Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Seth Arnold
On Fri, Feb 28, 2020 at 08:22:58PM +0200, Dmytro Spivak wrote: > Please make a system app, that will prevent strange executables and > wrappers to be launched. Hopefully this is helpful to you: https://sourceforge.net/p/linux-ima/wiki/Home/ Thanks signature.asc Description: PGP signature

Re: Security. Allow to run only executables with certain hash

2020-02-28 Thread Russ Allbery
Dmytro Spivak writes: > Please make a system app, that will prevent strange executables and > wrappers to be launched. This is doable as an LSM for executables. Pretty sure there's a working version of this on Android that uses hashes stored with the file and signed. (I recall seeing something

Bug#952776: RFP: libprometheus-tiny-perl -- tiny module to export monitoring metrics for Prometheus

2020-02-28 Thread Guillem Jover
Package: wnpp Severity: wishlist Tags: patch * Package name: libprometheus-tiny-perl Version : 0.004 Upstream Author : Rob N ★ * URL : https://metacpan.org/release/Prometheus-Tiny * License : Artistic or GPL-1+ Programming Lang: Perl Description : tiny