Re: Intent to mass-file bugs: FDL/incorrect copyright files

On Wed, Nov 17, 2004 at 06:49:21PM +, Brian M. Carlson wrote: > This is an intent to mass-file bugs as required per custom. > > Bugs will be filed: > > 1) on packages that include GNU Free Documentation Licensed-material; > 2) on packages in 1) that do not include the copyright or license o

Re: Bug#285234: ITP: unlzx -- unarchiver for *.lzx archives

On Sat, Dec 11, 2004 at 04:37:01PM -0600, Graham Wilson wrote: > On Sat, Dec 11, 2004 at 10:53:10PM +0100, Marcin Orlowski wrote: > > Package: wnpp > > Severity: wishlist > > > > * Package name: unlzx > > Version : x.y.z > > Upstream Author : Name <[EMAIL PROTECTED]> > > * URL

Re: dselect survey

On Sun, Dec 12, 2004 at 11:35:22AM +1100, Paul Hampson wrote: > apt-get and apt-cache are my friends, and I love them for letting me > specify what I want to do in a way that is intuitive to me. Altough I > wish I could tab-complete package names sometimes. ^_^ If you're running bash you can so

Re: Bug#285625: ITP: expocity -- An enanced Window Manager based on metacity

On Tue, Dec 14, 2004 at 04:43:11PM +0100, Christian Surchi wrote: > > == > > Date: Tue, 14 Dec 2004 16:33:43 +0100 > > From: martin f krafft <[EMAIL PROTECTED]> > > To: debian-devel@lists.debian.org > > Subject: Re: Bug#285625: ITP: expocity -- An enanced Window Manager > >

Re: installing a source tree?

On Wed, Dec 15, 2004 at 12:01:24PM -0500, Chasecreek Systemhouse wrote: > So, I humbly request suggestions or hints as to a direction I can > follow to be able to get the source cod and development tree (READ Not > CVS Tree) of say package PostgresSQL. > > I have tried variations of - > apt-ge

Re: Who could be able to help SW vendors to support Debian?

On Tue, Feb 01, 2005 at 10:57:08PM +0100, Christian Perrier wrote: > Well, I'm not the software vendor here..:-) > > As far as I've inderstood, this product induces some interaction at > kernel-level and the vendor developers may have concerns about the > kernel on the distribution they want to s

Re: /etc under svk

On Fri, Feb 11, 2005 at 06:36:04PM +0100, Enrico Zini wrote: > And a question: where do we collect this kind of tips? wiki.debian.net debian-administration.org debianplanet.org debianhelp.org And any page that's accessible to google! Steve -- -- To UNSUBSCRIBE, email to [EMAIL P

Re: Tips wanted for debugging and testing Debian

On Thu, Feb 24, 2005 at 09:39:51PM +0100, Michael Tautschnig wrote: > >You can browse our bug database at . A good way > >to start is to search for any bugs in software you regularly use, and to > >see if you can help out. > > > > But what could one do, if the maintainer d

Re: Tips wanted for debugging and testing Debian

On Fri, Feb 25, 2005 at 02:41:48PM +0100, Michael Tautschnig wrote: > > If a bug is serious, and not a trivial thing, and if a patch has > >been filed then a NMU could be applied. > But only a Debian developer can do so, right? Usually, but I've sponsored NMU uploads by non-DDs before. > When

Re: How to debug - apachetop

On Wed, Jan 11, 2006 at 11:10:51AM -0600, Alejandro Bonilla wrote: > After the actual error I got with apachetop: > debian:~# apachetop -f /var/log/apache/access.log > *** glibc detected *** free(): invalid pointer: 0xb7da08c8 *** > Aborted > > I want to learn how to debug and see what went wrong

Re: ITP: moleinvasion -- Jump'n run game with Tux

On Tue, Mar 14, 2006 at 10:51:51AM +0100, G?rkan wrote: > * Package name: moleinvasion > Version : 0.2 > Upstream Author : Guillaume Chambraud <[EMAIL PROTECTED]> > * URL : http://moleinvasion.tuxfamily.org/ > * License : GNU General Public License, version 2 >

Re: apply to NM? ha!

On Tue, Jan 25, 2005 at 09:48:04AM +0100, Ingo Juergensmann wrote: > On Tue, Jan 25, 2005 at 09:17:32AM +0100, Goswin von Brederlow wrote: > > > > I wish more women would join Debian and the lists. My experience is that > > > usually there's not that much aggressiveness when there are women around

Re: advice needed on handling network port conflicts

On Thu, Apr 21, 2005 at 12:07:26PM -0400, Eric Cooper wrote: > But if apt-proxy is still installed and running when apt-proxy starts > up, it will fail because the port is in use. Should I make the approx > package conflict with apt-proxy? Both packages allow the port to be > changed to somethin

Re: Greylisting for @debian.org email, please

On Sat, Jun 18, 2005 at 05:39:10PM -0400, Glenn Maynard wrote: > Email is realtime. I receive mails much more quickly than five minutes > on average; within seconds, typically, even for round-trips to many > mailing lists. Email may appear to be realtime, and you may even expect it to be beca

Re: Greylisting for @debian.org email, please

On Sat, Jun 18, 2005 at 03:08:38PM -0700, Thomas Bushnell BSG wrote: > Steve Kemp <[EMAIL PROTECTED]> writes: > > > Email may appear to be realtime, and you may even expect it to > > be because this is frequently how it works. But this is not guaranteed. > >

Re: Why does Ubuntu have all the ideas?

On Fri, Jul 28, 2006 at 05:37:11PM +0100, Matthew Garrett wrote: > Steve Kemp <[EMAIL PROTECTED]> wrote: > > > Neither Ubuntu nor Debian do anything special to get hardware support > > that is provided by the kernel proper and tools that neither group > > cre

Re: Why does Ubuntu have all the ideas?

On Fri, Jul 28, 2006 at 06:55:26PM +0200, Fabio Tranchitella wrote: > How many Debian maintainers think the same? I'm sure there are a lot > of them who do not soffer of the "this is my package, go away" syndrome. There is a small list of some people who accept them here: http://wi

Re: thedebianuser.org started

On Thu, Aug 03, 2006 at 08:26:57AM -0600, Joseph Smidt wrote: > Wolfgang, > I think that is a great idea. You should make a post on > forums.debian.net to since that is another place many of the community > hang out. That's just my two cents. Seconded. I put a simple advert on Debian-Admini

Re: thedebianuser.org started

On Thu, Aug 03, 2006 at 08:26:41PM +0200, Eduard Bloch wrote: > Why don't you create a web ring and place banners everywhere? (seriously) There is a "promote debian" ring already: http://spreaddebian.com/ I like to see related sites linking to each other, and I like to see friendly coo

Re: Howto: Package for Debain the ???Easy??? Way

On Sat, Aug 05, 2006 at 09:18:39AM -0600, Joseph Smidt wrote: > I just posted a blog: blog.thedebianuser.org/?p=13, where I outline >how I feel: that working through examples using .diff files teaches how >to package better then trying to learn from documentation alone. The blog >

Re: Quickcam pro 4000, pwc problem

On Tue, Aug 22, 2006 at 02:45:38PM +0100, John Talbut wrote: > Can anyone explain the official Debian set up for pwc based web cams? .. > The only Debian package for pwc is pwc-source . According to the copyright > information fro this package: I've got one of these devices and found it

Re: Orphaning my packages

On Mon, Sep 18, 2006 at 10:58:31AM -0400, Nathanael Nerode wrote: > The ones which haven't been picked up either with ITAs or in this thread, > and which aren't lib*-perl or lib*-ruby, are: > > * I'll take since it hasn't been claimed. Steve -- Debian GNU/Linux System Administratio

Re: Orphaning my packages

On Mon, Sep 18, 2006 at 06:13:23PM +0100, James Westby wrote: > > I'll take since it hasn't been claimed. > I claimes it via ITA straight away, perhaps I should have emailed the > list as well sorry. No problem, it was my fault for trusting the mail and not checking. > I'm always happ

Packages up for adoption

I've recently orphaned all my packages whilst being on a bit of hiatus from project work. Several packages are still unclaimed, although people have offered on some of them. Please take a look at the list if you're interested: * debian-builder[O][O] * driftnet * dsniff * fla

Re: Packages up for adoption

On Sat, Oct 14, 2006 at 10:52:41PM +0200, Uwe Hermann wrote: > Hi Steve, > > On Tue, Oct 10, 2006 at 08:25:26PM +0100, Steve Kemp wrote: > >* flawfinder > >* pscan > > As I haven't gotten around to do too much audit work, I'll at least take > c

Re: LWN subscription

On Thu, Nov 09, 2006 at 06:22:14PM +0300, Al Nikolov wrote: > Is it possible for developers to subscribe to LWN as described in [1]? My > messages to [EMAIL PROTECTED] stay without any answer. > > [1] http://lwn.net/Articles/13797/ Yes. Though it might take a while to get processed. Steve --

Re: Bash /dev/tcp and /dev/udp

On Thu, Nov 23, 2006 at 12:30:09PM +0100, Klaus Ethgen wrote: > For this feature there are several scripts and tools around which use > this feature. Moreover if you want to make a net boot image where you > need to contact a other host easy there is no way to do this with debian > Linux so I have

Re: Etch, apache-perl and php5 needs manual config

On Thu, Nov 30, 2006 at 07:48:40PM +0100, Patrick Frank wrote: >But I have to manually edit /etc/apache-perl/httpd.conf and enable >"AddType application/x-httpd-php .php" aswell as >/etc/apache-perl/modules.conf >to add "LoadModule php5_module /usr/lib/apache/1.3/libphp5.so". > >

Re: RFC: Proposal for official screenshot repo

On Fri, Jan 05, 2007 at 12:16:25PM +0100, Jorge Salamero Sanz wrote: > On Friday 05 January 2007 11:55, Andrea Bolognani wrote: > > What I don't really get is, why would we want a similar service in Debian? > > > > We should already be pointing to the upstream site with the Homepage: > > pseudo-hea

Re: RFC: Proposal for official screenshot repo

On Fri, Jan 05, 2007 at 12:59:51PM +0100, Andrea Bolognani wrote: > If we really use that scheme, there would be no need to declare an extra > header -- the location of the file can be calculated by the package manager > using the name of the package and the version number. Agreed. I just want

Re: RFC: Proposal for official screenshot repo

On Fri, Jan 05, 2007 at 01:37:03PM +0100, Jorge Salamero Sanz wrote: > On Friday 05 January 2007 13:09, Steve Kemp wrote: > > ? If going down the XML route then I see no real reason to have > > ?a distinct file per version. ?Instead have something like: > > we should be car

Re: Debian Mini-distro: how to recompile base-system and remove Java?

On Mon, May 29, 2006 at 07:53:02PM -0300, Daniel Ruoso wrote: > In fact, I want it to work as a native debian system. This way, > buildroot causes a lot of problems Isn't this what 'apt-build' can be used for? http://julien.danjou.info/article-apt-build.html That allows you to rebuild

Bug#370722: ITP: libnet-httpserver-perl -- An extensible HTTP server framework for perl

Package: wnpp Severity: wishlist Owner: Steve Kemp <[EMAIL PROTECTED]> * Package name: libnet-httpserver-perl Version : 1.1.1. Upstream Author : Ryan Eatmon <[EMAIL PROTECTED]> * URL : http://search.cpan.org/~reatmon/Net-HTTPServer/ * License

Bug#376419: ITP: libapache2-mod-ifier -- Filter or reject incoming client requests

Package: wnpp Severity: wishlist Owner: Steve Kemp <[EMAIL PROTECTED]> * Package name: libapache2-mod-ifier Version : 0.2 Upstream Author : Steve Kemp <[EMAIL PROTECTED]> * URL : http://www.steve.org.uk/Software/mod_ifier/ * License : GPL + Ap

Re: A question on setting setuid bit

On Tue, Jul 04, 2006 at 08:37:52PM -0400, LEE, Yui-wah (Clement) wrote: > I am building a package in which one of the binary has > to have the setuid and setgid bits set. I wonder which > one of the following two is the more appropriate method > to use? It looks like you've got the answer to t

Re: how to deal with packages depending on mysql-server

On Tue, Jul 25, 2006 at 10:21:03AM +0200, Michal ??iha?? wrote: > > My proposal to satisfy both use-cases was, to provide two versions of > > wordpress: > > (1) wordpress -- depends on mysql-server > > (2) wordpress-remotesql -- does not How about: Depends: mysql-remote-server | mysql-serv

Re: Why does Ubuntu have all the ideas?

On Fri, Jul 28, 2006 at 09:02:57AM -0600, Katrina Jackson wrote: >A. Ubuntu seems like it can get hardware support immeadiatly, but that >support never seems to quickly get to Debian. I have been using Ubuntu >since Debian doesn't wok on my laptop. Suspend doesn't work and my >

Re: Reboot in postinst

On Thu, Jan 20, 2005 at 03:09:46PM -0300, Diogo Kollross wrote: > Is there a problem in using something like > > shutdown -r now > > inside a postinst script of a package? Definately. Even if the package requires a reboot to work you should let the administrator choose when that should b

Re: setuid/setgid binaries contained in the Debian repository.

A long time ago[1] I asked if there was a list of all the setuid/setgid binaries contained in the previous Debian stable release. As there still isn't such a list I've created one and placed it online with a simple search form. (This is the list that my recent spate of bug reporting has

Re: setuid/setgid binaries contained in the Debian repository.

On Thu, Jul 31, 2003 at 05:30:11PM +0300, Richard Braakman wrote: > If you're just scanning for binaries with s bits set, then you'll > probably miss all the ones that use whatever that tool was > (suidmanager?) that was used by some packages before we had > dpkg-statoverride. Yes I know that I

Re: setuid/setgid binaries contained in the Debian repository.

On Thu, Jul 31, 2003 at 12:55:28PM -0400, Joey Hess wrote: > I'd like to see us move all of our setgid games (except, perhaps, > nethack) away from using global score files by default. I think that should be a good option, but I can see several games that might suffer by it. I'm loath to

Re: setuid/setgid binaries contained in the Debian repository.

On Fri, Aug 01, 2003 at 08:20:08AM +0200, Tollef Fog Heen wrote: > what's wrong with a low-priority debconf question with a sane default? Absolutely nothing at all, but it's a slippery slope, and I thought we were tending towards less interactivity in installations? Steve --

Re: setuid/setgid binaries contained in the Debian repository.

On Fri, Aug 01, 2003 at 11:18:53AM -0400, Matt Zimmerman wrote: > > I also think it would be a good idea for policy to require all setuid/gid > > bit grants to go through this or another list for peer review, much as > > pre-depends are supposed to. > > I absolutely support this idea. All set[ug

Re: setuid/setgid binaries contained in the Debian repository.

On Fri, Aug 01, 2003 at 09:16:25PM -0400, Joey Hess wrote: > Only because Steve Kemp is doing some good work on auditing our games. > I suspect he would have just as much luck finding security holes in some > other areas. I've mostly covered the games now, there's not t

Re: setuid/setgid binaries contained in the Debian repository.

On Sat, Aug 02, 2003 at 08:58:00PM -0500, Manoj Srivastava wrote: > > Given the last review of a setgid program, I wonder if two > people are enough. The mistake was simple, human, and undesrtandable, > but the review does not in fact talk about any flaws in the current > version of angba

Re: setuid/setgid binaries contained in the Debian repository.

On Sun, Aug 03, 2003 at 03:14:23AM -0400, Matt Zimmerman wrote: > Surely two people would be an improvement over the current situation, where > there is no review at all. Our demonstration has shown how one person can > discover some common flaws with a relatively brief review. *Exactly*. Wel

Re: About NM and Next Release

On Thu, Aug 07, 2003 at 09:44:07AM +0200, Goswin von Brederlow wrote: > > I don't know the current average time for a NM to get > > through the queue but I would guess at it being around 3-4 months. > > How can that be with the DAM only accepting a few people every 6 > month or so? Whats the aver

Re: Snort: Mass Bug Closing

On Mon, Aug 25, 2003 at 01:33:37AM +0200, Goswin von Brederlow wrote: > > Why don't you add an option to load newer rulesets and/or update > information to snort. Once a day/week/month snort you probe some url > for a signed ruleset or news file and report to the user about any > updates. > > Tha

Re: apt-get internals help

On Sat, Sep 06, 2003 at 09:50:14AM -0400, Neil Roeth wrote: > I did not realize the full context of what you were trying to do from your > initial question. You're proposing a fundamental change from a process that is > static and noninteractive (so that build daemons will work, package building >

Re: Rotation of /var/log/mail.log

On Tue, Sep 23, 2003 at 11:18:27PM +0200, [EMAIL PROTECTED] wrote: > While /var/log/mail.log is rotated nicely on my (woody) boxes, > I have no idea which package is responsible for that. > Any suggestions ? /etc/cron.weekly/sysklogd This script rotates all the files which are output from

Re: ..last mirror update was a week ago, what's going on???

On Fri, Jul 29, 2005 at 02:31:01AM +0200, Arnt Karlsen wrote: > ..last mirror update was a week ago, what's going on??? > ..and, yeah, gg:"Debian mirror update" "21-Jul-2005" etc > finds _lotsa_ noise. > ..whether this mirror update lapse is planned or not, a wee > mention here on d-m and and

Re: Steve Kemp <[EMAIL PROTECTED]> Please check your Debian E-Mail.

On Tue, Aug 02, 2005 at 03:58:33PM -0400, Greg Folkert wrote: > I was finally able to acquire an SSP Build Host for you. > If you are still interest. Please contact me. A bit quick off the mark there, Greg! I think I've replied to all your previous mails within a day or two...? Anyway for

Re: Steve Kemp <[EMAIL PROTECTED]> Please check your Debian E-Mail.

On Sun, Aug 07, 2005 at 10:12:56PM -0400, Daniel Jacobowitz wrote: > > The SSP compiler is a patch against GCC and offers "Stack Smashing > > Protection". In short it gives protection against buffer overflow > > bugs, and attacks. > > Steve, you are aware that GCC 4.1 will include a complet

Re: [SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities

On Tue, Sep 13, 2005 at 09:25:22AM -0400, Roberto C. Sanchez wrote: > I am concerned that a version of Mozilla claiming to be an earlier will > eventually break user-installed extensions. .. > There really has to be a better way. The time to make suggestions was probably when Joey asked f

Re: Is openssl actually safe now? (was: debian infrastructure ssh key logins disabled, passwords reset)

On Wed May 14, 2008 at 10:21:18 +0200, BALLABIO GERARDO wrote: > If so, and if that was the ONLY entropy source used in generating keys, > then upstream openssl is (and has always been) just as broken as the > patched Debian package. It wasn't. Steve -- Debian GNU/Linux System Administration

Re: Packaging a module that overwrites kernel-provided files

On Wed Jun 18, 2008 at 10:41:13 -0430, Ernesto Hernandez-Novich wrote: > Been there, done that, doesnt't work for these machines. The problem has > to do with the interaction of the card with IBM's IPMI controller, and > requires the latest Broadcom drivers. What you want to do is install the E

Re: Orphaning debmirror

On Fri Jul 31, 2009 at 18:47:58 +0200, Siggy Brentrup wrote: > Who wrote debmirror? Without installing I can't find out since > only maintainers are listed in the PTS. Look at the copyright file: e.g. http://packages.debian.org/changelogs/pool/main/d/debmirror/debmirror_20070123/debmi

Re: Packages that download/install unsecured files

On Thu Sep 17, 2009 at 21:26:38 +0200, Christoph Anton Mitterer wrote: > CURRENT SITUATION: > One can differ between three classes of packages: > 0) Packages who do not download anything from the web. > > 1) Packages which download stuff but this is just normal data like > pidgin, firefox (I mean

Re: I don't understand Debian

On Fri Jun 22, 2007 at 20:24:22 +0200, ignatius wrote: > - Why it's Debian that fixes bugs and security holes? Why it isn't upstream > developers? Generally upstream developers *will* fix security holes, however Debian users generally get their software from *us*. So if we're shipping so

Re: Intend to orphan pscan.

On Sat Jun 30, 2007 at 18:43:36 +0900, Charles Plessy wrote: > I would like to know if it is OK that I orphan pscan and open a > discussion about its removal. I think it would be grossly rude to attempt to orphan a package which you do not maintain which has no bugs against it. (Except the n

Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

On Mon Aug 11, 2008 at 10:57:56 +0400, Dmitry E. Oboukhov wrote: > I set Severity into grave for this bug. The tableof discovered > problems is below. Great work. I don't think there should be any objection to a mass-filing for security sensitive bugs - and from the sounds of

Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

Great work. If you have the time to see if any of these are included in stable (etch) please could you do so? It might be that we'd need to release a security update, or at least a package for the next point release. (I guess severity "grave" and a tag of "security" will ensure the same

Re: screenshots.debian.net goes beta

On Tue Nov 11, 2008 at 01:02:42 +0100, Christoph Haas wrote: > > * There are 14 pages and the navigation is truncated to 'Page: 1 2 3 .. > >14 >'. Could you (optionally) display links to all pages? Or alter > >the number of results per page (increase, or make user configurable)? > > I'll

Re: SmellyWerewolf.com perfume & make-up discount

On Sun Nov 23, 2008 at 17:59:13 +0100, Josselin Mouette wrote: > - Send your private Debian GPG Key to [EMAIL PROTECTED] Include >the brand of your perfume and the color of the make-up. I find it disappointing to see this posted, and in bad taste. I'm sure I'm not alone. Steve -- si

Re: SmellyWerewolf.com perfume & make-up discount

On Sun Nov 23, 2008 at 19:52:46 +0200, Antti-Juhani Kaijanaho wrote: > > > - Send your private Debian GPG Key to [EMAIL PROTECTED] Include > > >the brand of your perfume and the color of the make-up. > > > > I find it disappointing to see this posted, and in bad taste. > > I found it gene

Re: For those who care about lesbians reloaded (Was: SmellyWerewolf.com perfume & make-up discount)

On Sun Nov 23, 2008 at 22:17:44 +0100, Pierre Habouzit wrote: > FWIW we had this discussion already: > > http://lists.debian.org/debian-devel/2006/01/msg00920.html > > Could we fucking stop repeating the same old discussions over and over > and over ? every two year we troll about firmwares, bad

Re: Adoption of Nix?

> > Yes, you are probably right: I don't understand how Nix may be useful for > > Debian (and for GNU/Linux also). > > That's too bad for you. Shallow thinking doesn't get you anywhere. As promoter/recommender surely the onus is upon you to demonstrate: 1. Nix is good. 2. Nix is better

Re: libpango update broke iceape synaptic and more

On Tue Sep 04, 2007 at 11:54:23 -0500, Don wrote: > I am using "sid" and yesterday my update/upgrade broke iceape, synaptic, and > some others. I've had problems with libpango before, but this one has me > stumped. I don't see anyone else having this problem, so I must conclude > something is

Re: libpango update broke iceape synaptic and more

On Wed Sep 05, 2007 at 00:43:46 +0200, Julien Cristau wrote: > > [EMAIL PROTECTED]:~$ firefox > > /usr/lib/iceweasel/firefox-bin: symbol lookup error: > > /usr/lib/libpangoft2-1.0.so.0: undefined symbol: g_once_init_enter_impl > > > > Interestingly the symbol is defined: > > > > [EMAIL

Re: Bits from the Security Team

On Fri Oct 19, 2007 at 17:36:21 +0200, Adrian von Bidder wrote: > Allow me to point out the message at > > which is really a Bits from the Security Team. > > Why is - once again - a message that I'd consider appropriat

Re: Bits from the Security Team

On Sat Oct 20, 2007 at 12:00:23 +0300, Lars Wirzenius wrote: > > pe, 2007-10-19 kello 18:29 +0200, Adrian von Bidder kirjoitti: > > Seriously: I think exactly this kind of "not really much new stuff going > > on, but here's what we're continuing to do" kind of information should be > > more vis

Re: Bits from the Security Team

On Fri Oct 19, 2007 at 18:29:46 +0200, Adrian von Bidder wrote: > That you like pies is important. :) > Though in the specific case of the security team, the flow of security > updates is an indication that the team is working Yes, this is what I think too. > Could've cc:ed you at least.

Re: Is archive this list?

On Sun Jan 10, 2010 at 21:16:04 +0100, Andrzej Borucki wrote: > Exists archive debian-devel@lists.debian.org ?Steve http://lists.debian.org/debian-devel/ Steve -- http://www.steve.org.uk/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscribe". Tro

Re: Package verification

On Wed, Oct 08, 2003 at 12:24:37AM +1000, Kim Lester wrote: > There is no way to verify/correct the MODE, USER, GROUP, TYPE > of any files installed in a pkg. That appears to be the case, partly because permissions may be changed from those files which are contained withing the .deb file via t

Re: Bug#214036: im: imput doesn't work with Perl 5.8.1

On Tue, Oct 21, 2003 at 01:13:49AM +0900, Tatsuya Kinoshita wrote: > With the perl 5.8.1 package, the line input operator (<>) causes > "Bad file descriptor". This problem is reproducible by the > following sample code. > > > #!/usr/bin/perl > $file = "/etc/debian_version"; > open(FH, $fil

Re: A case study of a new user turned off debian

On Mon, Nov 03, 2003 at 03:05:56PM -0500, Greg Stark wrote: > All he had to do was install an older version of libc6 and every other package > would have been happy. All the infrastructure is there to do this, the old > packages are all on the ftp/http sites, the package may even be sitting in > a

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

On Tue, Nov 04, 2003 at 04:20:26PM +0100, Jorge Bernal (Koke) wrote: > Package: wnpp > Version: unavailable; reported 2003-11-04 > Severity: wishlist > > * Package name: cdcat > Version : 0.92 > Upstream Author : Peter Deak <[EMAIL PROTECTED]> > * URL : http://cdcat.sf

Re: RFA: A lot of packages

On Fri, Nov 14, 2003 at 05:03:59PM +0100, Simon Richter wrote: > - uptimed (sponsor needed for Daniel Gubser, who helped out) I will sponsor Daniel; or failing that I'd take it over myself. Whichever you both prefer. Steve --

Re: [debian enterprise] sub-project planning

On Tue, Dec 02, 2003 at 06:24:58AM +1100, Zenaan Harkness wrote: > Great to hear. I started a web page at http://debian-enterprise.org/. Aren't we still waiting for clarification on the use of "Debian" in domain names, etc? As highlighted by the Adamantix name changed? > And as I put on the

Re: development environment question

On Wed, Dec 03, 2003 at 10:48:57AM -0800, bruce wrote: > Our goals: > * Provide Project Management > * Provide a Development Network of Servers > * Provide Test Servers > * Allow users to configure Test Servers as Required > * Allow users to build/execute/test their code on the Test Servers >

Building a distribution from source?

I wasn't going to post this, but it might be relevent to the ongoing custom distribution stuff that's happening. I've been experimenting with producing a hardened Debian derivitive as a small piece of paid work. This mostly means compiling things with a stackguard compiler, using format

Re: Building a distribution from source?

On Fri, Dec 05, 2003 at 12:10:44PM +1100, Russell Coker wrote: > On Fri, 5 Dec 2003 10:39, Steve Kemp <[EMAIL PROTECTED]> wrote: > > ? I've been experimenting with producing a hardened Debian derivitive > > ?as a small piece of paid work. ?This mostly means compiling thi

Re: Building a distribution from source?

On Thu, Dec 04, 2003 at 10:42:28PM -0500, Joey Hess wrote: > That's what the debian-cd package is for. Thanks, that was exactly what I was looking for :) Steve -- Will code for food.

Re: Building a distribution from source?

On Fri, Dec 05, 2003 at 10:20:19AM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: > > I believe that our GCC packages already have propolice patched in but not > > enabled. Therefore it should be a much easier change to make for it to be > > included. > > This is true, debian/patches has a line

Re: Building a distribution from source?

On Fri, Dec 05, 2003 at 06:37:47PM +0100, Jakob Lell wrote: > maybe Adamantix is what you are wanting to do. It is based on Debian woody > and > uses kernel and gcc patches to improve security. At the moment you need to > install a normal Debian woody and then upgrade. However, you might create

Re: how to handle multiple upstream changelogs

On Sun, Dec 07, 2003 at 03:18:54PM +0100, Tommaso Moroni wrote: > The only idea I've come up with is to put the name of > the corresponding subdirectory before each changelog. > Is there anyone who has resolved this problem in another > way? I just took the "main" one and used that. Some pa

Re: Need help: Idle X-user?

On Mon, Dec 08, 2003 at 07:09:59PM +0100, Dennis Stampfer wrote: > Is there any way to querry how long a X-user is idle? If not, do you > think it's okay to write something like "IDLE-Logout does not work > with X" into Readme.Debian and into the config-file(,manpage, ...)? I'm not sure to be h

Re: Building a distribution from source?

On Wed, Dec 10, 2003 at 07:44:55PM +0100, Peter Busser wrote: > ``We''? Who is ``we''? It is unlikely that you are one of them royal people, > so > I take it you meant to say: > > Adamantix is not what I want to do, what I want to do is to improve Debian. That is correct, I agree with Russell

Re: Building a distribution from source?

On Thu, Dec 11, 2003 at 12:10:06PM +1100, Russell Coker wrote: > Let me know when you have an apt repository that's in a usable state and I'll > recommend it on my SE Linux web pages. I expect that anyone who is > interested in SE Linux will be interested in your work as well. This work has

Announce - SSP/ProPolice compiler for Woody

Hi, Following the interest in my recent post about rebuilding Debian from source using a patched compiler I thought I'd announce the availability of gcc-3.3 with the SSP patches. (SSP is the new name for the work formerly called ProPolice). The packages may be downloaded via the follow

Re: J?rg Schilling is damage; the community should route around him

On Sat, Oct 09, 2004 at 01:18:50PM +0200, Jose Carlos Garcia Sogo wrote: > El s??b, 09-10-2004 a las 00:04 -0500, Branden Robinson escribi??: > > It's time to fork. Let us work with the rest of the community to > > standardize on a new set of tools based on the last free version of > > cdrtools,

Re: Package idea, Debian-Firewall.

On Wed, Oct 13, 2004 at 06:13:36AM +0200, nicklas (smurfd) wrote: > I have had a package idea, for a long time now. The idea, was a > package, containing a "Flush-all" firewall script. Adding this script to > be ran at bootup. Just for the simplicity. I tend to keep forgetting to > add it myself.

setuid/setgid binaries contained in the Debian repository.

Hi, I was wondering if there was a definitive list of all the setuid/setgid binaries which may be installed from the Debian archives. (Such a list would be very useful in prioritizing any examination of source code). I've partially worked my way through the list of packages which are

Re: md5 checksums

On Mon, Apr 21, 2003 at 09:05:58AM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: > It doesn't tackle the issue of dpkg _not_ storing filesystem permissions. > This makes it not feasible to easily recover the system after a 'chmod -R > go-rwx /' besides reinstalling all the packages (that's why I p

Re: md5 checksums

On Mon, Apr 21, 2003 at 07:16:01PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: > That's what Tiger calls 'signatures'. It's pretty easy to do at the moment, > but I have not updated signatures for Debian for quite some time. If you > intend to keep a database you also have to consider that for

Re: md5 checksums

On Mon, Apr 21, 2003 at 07:50:11PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: > Missed that mail. I remember the discussion on what should checksecurity > include though. Please notice I have include many of the modules we wanted > in Tiger. It may have been a private mail; the way I rememb

Re: Do we need policy changes?

On Mon, Apr 21, 2003 at 10:11:48PM +0200, Martin Schulze wrote: > Maybe the maintainer just has no clue about how UTF should work in > that particular application and can't do much about it other than wait > until upstream has a clue and implements it. I'm in this position, I'm upstream and mai

Re: security in testing

On Wed, May 14, 2003 at 03:04:10PM +0300, Kalle Kivimaa wrote: > Why not? Testing would be my personal choice for running a desktop (or > laptop) Linux, were I not otherwise involved with Debian development. > The only bad thing is the non-existent security (I could live with > occasional critical

Re: security in testing

On Wed, May 14, 2003 at 02:20:51PM +0100, Colin Watson wrote: > I haven't seen it be shot down. I've seen people saying "the > infrastructure's there, it's just that nobody's actually doing the > updates", though. Yes I've seen this mentioned previously also. If it's a matter of finding peopl

Re: security in testing

On Wed, May 14, 2003 at 05:24:03PM +0300, Kalle Kivimaa wrote: > "Pre-plans" in this case means that two people (one DD and one NM) have > been talking about it "seriously." So, if you want to shoot the idea > down, go ahead, no harm done :) And if someone else is thinking about > picking up the b

  1   2   >