On Tue, 13 May 2003, Daniel K. Gebhart wrote:
> Matthew Palmer <[EMAIL PROTECTED]> wrote Tue, May 13, 2003 at 08:36:12AM
> +1000:
> > *very* serious problem for anyone who starts relying on the binary packages
> > uploaded to m.d.n. What sort of protections do you have in place or plan to
> > pu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Ivo Marino wrote:
Checking application/pgp-signature: FAILURE
- -- Start of PGP signed section.
> On Tue, 13 May 2003, Matthew Palmer wrote:
> > It appears as though anyone who has an account can upload any package they
> > like. While this isn't a p
On Tue, 13 May 2003, Daniel K. Gebhart wrote:
> Matthew Palmer <[EMAIL PROTECTED]> wrote Tue, May 13, 2003 at 08:36:12AM
> +1000:
> > *very* serious problem for anyone who starts relying on the binary packages
> > uploaded to m.d.n. What sort of protections do you have in place or plan to
> > pu
Hello!
That's exactly what I've already tried. :-) See... I've reported that in my
previous email. The problem is that it gives the complete dependency list
(and I can parse that), but I couldn't figure out how to discover what a
virtual package (reported between < and > by apt-cache) depends o
On Mon, May 12, 2003 at 08:28:01PM -0300, Pablo Lorenzzoni wrote:
> Hello!
>
> I was wondering... how to generate a list of dependencies of a given package?
>
> dpkg --status | grep "^Depends" get only the installed ones
>
> apt-cache depends | Grep "Depends" gives the names of the virtual
>
On Mon, May 12, 2003 at 05:41:40PM -0600, Jack Moffitt wrote:
> Ivo Marino wrote:
> > Of course we can't actually ensure that all uploaded packages on the
> > system are secure, for now we trust the testers of the system but in
> > future we'll introduce higher security standards.
> >
> > If someo
Matthew Palmer <[EMAIL PROTECTED]> wrote Tue, May 13, 2003 at 08:36:12AM +1000:
> *very* serious problem for anyone who starts relying on the binary packages
> uploaded to m.d.n. What sort of protections do you have in place or plan to
> put in place to protect against this sort of thing?
The men
> Of course we can't actually ensure that all uploaded packages on the
> system are secure, for now we trust the testers of the system but in
> future we'll introduce higher security standards.
>
> If someone can allready point out an eventual solution for this problem
> we'll open to consider any
Hello!
I was wondering... how to generate a list of dependencies of a given package?
dpkg --status | grep "^Depends" get only the installed ones
apt-cache depends | Grep "Depends" gives the names of the virtual
packages, whose dependencies I cannot determine.
I am kind of stuck... can someb
On Tue, 13 May 2003, Matthew Palmer wrote:
> First off, thanks for the effort spent in getting this working. It seems
> like it could be a useful resource for the non-DD packaging public (heh). I
> have a few issues with your upload queue support, in particular.
>
First of all thanks for your fe
On Mon, 12 May 2003, Daniel K. Gebhart wrote:
> This project is a benefit for maintainers (non-DDs) and their sponsors
> (DDs). Maintainers are able to upload packagages to mentors.debian.net
> and point their sponsors to this server. Sponsors can download and test
> this packages by downloading
On Mon, 12 May 2003, Kiryanov Vasiliy wrote:
> I writed little script that prevent basic crack throught PPP,
> (when you use dial-up method to use InterNet) by blocking packets
> that have:
> 1) your source ip
That should be one line.
> 2) loopback source ip
Also, one line.
> 3) A,B,C class
sorry I forget to attach scripts
..
bye
#!/bin/sh
#
# 3iptables-ppp_up-rules, v 0.2 2003/04/27 17:52:55
# Kiryanov Vasiliy, mailto://[EMAIL PROTECTED]
#
# Many people use ppp to connect to the InterNet, this script set BASIC
# firewall (iptables) rules to protect you machine from crackers.
# For g
At 23:34 12/05/2003 +0200, you wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, May 12, 2003 at 10:35:23PM +0200, José Luis Tallón wrote:
> The question is:
> - Is jdk a *real* build-dependency ?
What is *real*? How do you define *real*? If you're talking about what
you can feel, w
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, May 12, 2003 at 10:35:23PM +0200, José Luis Tallón wrote:
> The question is:
> - Is jdk a *real* build-dependency ?
What is *real*? How do you define *real*? If you're talking about what
you can feel, what you can smell, what you can taste and
Hi,
since debian-mentors is the help line for Debian Developers to be, I
think this question fits in here, though it is different from most of
the other mostly packaging related questions:
I am considering going to DebConf 3. Now Oslo is not really close (I
live in southern germany), and being a
---
Debian Mentors Project
http://mentors.debian.net/
opening - 12. May 2003
---
We are very proud to announce the opening of the mentors project. We
have
Hello:
I am makeing an installable package of a binary only program for x-ray and
neutron structure analysis (GSAS). When dpkg-shlibdeps runs on all its
compenents, I get the following errors for nearly all of the executables:
dpkg-shlibdeps: warning: could not find path for ld-linux.so.2
dpkg-
Following a suggestion from my sponsor, i place this question so that you
can point me in the righ direction.
( a bit long, sorry )
I have packaged webCDwriter [
http://wwwhomes.uni-bielefeld.de/jhaeger/webCDwriter ] ( and updated three
upstream versions since I started! :-| )
Package name
Hello.
I writed little script that prevent basic crack throught PPP,
(when you use dial-up method to use InterNet) by blocking packets
that have:
1) your source ip
2) loopback source ip
3) A,B,C class network source ip
4) D - class, multicast source ip
5) E - class, reserved source ip
6) your IS
Title: Welcome SinTec Corporation
A
Personal CD Duplication System
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Mon, May 12, 2003 at 04:48:33PM +0200, Luigi Gangitano wrote:
> Obviously 1.4.1 is less than 1.4.patch3. How can I fix this? I'd prefer
> to avoid adding an epoch... :-)
Well, I think thats exactly what epochs are for - fix a screwed
version ;)
1:1.
Hi,
I'm maintaining sarg (a squid log file report generator). Upstream
version has always been a bit messy. Last version changed from 1.4 to
1.4.patch3 and then to 1.4.1.
Obviously 1.4.1 is less than 1.4.patch3. How can I fix this? I'd prefer
to avoid adding an epoch... :-)
Thanks,
--
Luigi Ga
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
(Sorry, I did not know how to prefix this!)
After a discussion with Grzegorz B. Prokopski, I proposed to maintain
the argouml package and related packages and he agreed. I did update
those packages and they seems to be ready for an upload.
Grzegorz
Hi,
I'm maintaining a package, libapache-mod-dav, that has three tiny
programms (dbu, fixvers, lockview) that are more or less debugging
aids or aids for very unusual situations. I'm using the package for
more than a year and have never needed to even look at them. None of
these programms has a ma
On Sun, May 11, 2003 at 10:42:28PM -0400, Deedra Waters wrote:
> I'm trying to get myself subscribed to the package tracking system info
> for one of my packages that I adopted, but for some reason it's not
> letting me subscribe myself. It keeps coming back with an internal server
> error. Is this
26 matches
Mail list logo