Re: Doing a equivs rewrite, question to copyright and apt

1999-01-19 Thread Torsten Landschoff
On Sun, Jan 03, 1999 at 04:42:20PM +0100, Martin Bialasinski wrote: > > Hi, Hi Martin, > I am doing a rewrite of the equivs package, and have two questions. > > The package itself is GPLed, and I want to include some code from > other GPLed packages (mainly the doc-base parser). Now I want to

DESTDIR build problem

1999-01-19 Thread Stefan Karrmann
I've followed the instructions of Debian New Maintainers Guide (http://www.de.debian.org/doc/maint-guide) to create a new package clean. ---debian/control begin--- Source: clean Section: non-free/devel Priority: optional Maintainer: Stefan Karrmann <[EMAIL PROTECTED]> Standards-Version: 2.4.0.0 P

Re: non-root password lookups?

1999-01-19 Thread Chris
On Mon, Jan 18, 1999 at 11:48:59AM -0500, J. S. Connell wrote: > On 18 Jan 1999, Martin Bialasinski wrote: > > > I heared on Solaris you have a daemon, which takes username/password > > and tells you if the combination is OK. > > rpc.pwdauthd. Nice idea, but Linux doesn't have (as far as I am aw

Re: non-root password lookups?

1999-01-19 Thread Chris
On Mon, Jan 18, 1999 at 10:36:35AM +0100, Martin Bialasinski wrote: > > What use would shadow passwords have, if a unprivileged user can query > them? Well...then the query is at your control - and if you make a single query take a full second (or more) then it will take a very long time to brut

Re: /etc/{passwd,services} entry for contrib/non-free packages

1999-01-19 Thread Anthony Towns
On Mon, Jan 11, 1999 at 11:03:37PM +0900, Keita Maehara wrote: > The debian-policy says that we shouldn't modify /etc/{passwd,services} > and so on, and it should be managed by base-passwd or netbase. Ummm, if you've got something you want added to /etc/services, please file a wishlist bug against

Re: DESTDIR build problem

1999-01-19 Thread Josip Rodin
On Tue, Jan 19, 1999 at 09:27:47AM +0100, Stefan Karrmann wrote: > I've followed the instructions of Debian New Maintainers Guide > (http://www.de.debian.org/doc/maint-guide) to create a new > package clean. Nice to see someone is reading the manuals... :) Also, if your version of the document is

Re: Lintian error: executable-in-usr-doc

1999-01-19 Thread Santiago Vila
On Sat, 16 Jan 1999, Joey Hess wrote: > Peter S Galbraith wrote: > > After making my mh-book package, I got a lintian _warning_ that > > scripts in /usr/doc were executable. I checked the upstream > > tar.gz and the scripts were, in fact, set executable. > > > > So I changed my rules file to do

Re: Lintian error: executable-in-usr-doc

1999-01-19 Thread tmancill
On Tue, 19 Jan 1999, Santiago Vila wrote: > On Sat, 16 Jan 1999, Joey Hess wrote: > > > E: mh-book: executable-in-usr-doc > > > usr/doc/mh-book/html/download/split/mh/bin/incs 0755 > > > > > > So, can I let these example scripts be executable, or not? > > > > Examples should go in /usr/doc/exa

Re: non-root password lookups?

1999-01-19 Thread J. S. Connell
On Tue, 19 Jan 1999, Chris wrote: > Well...then the query is at your control - and if you make a single > query take a full second (or more) then it will take a very long time > to brute force anything (and thats assuming there is no logging). That doesn't solve the problem, merely slow it down.

Re: non-root password lookups?

1999-01-19 Thread Alexander N. Benner
hi Ship's Log, Lt. Chris, Stardate 190199.1949: > > > > What use would shadow passwords have, if a unprivileged user can query > > them? > > Well...then the query is at your control - and if you make a single query take > a full second (or more) then it will take a very long time to brute force

Re: Lintian error: executable-in-usr-doc

1999-01-19 Thread Jules Bean
On Tue, 19 Jan 1999, tmancill wrote: > On Tue, 19 Jan 1999, Santiago Vila wrote: > > > On Sat, 16 Jan 1999, Joey Hess wrote: > > > > E: mh-book: executable-in-usr-doc > > > > usr/doc/mh-book/html/download/split/mh/bin/incs 0755 > > > > > > > > So, can I let these example scripts be executable,

Re: non-root password lookups? [LONG]

1999-01-19 Thread J. S. Connell
On Tue, 19 Jan 1999, Chris wrote: > Can you explain what the problem with a auth daemon is? If there was a > daemon listening on a system port then why couldn't local processes be > sure that it is the real thing (since its the same machine anyway - if > a skript kiddie can fake the daemon runnin

Bug#27050 (fdutils): A cause for security concern?

1999-01-19 Thread Anthony Fok
Hello, I received the following bug report about fdutils a while ago, but haven't had time to deal with it yet. Basically, the bug reporter is concerned that the suid'ed fdmount could be insecure, because fdmount's manpage warns the user not to rely on it being secure. So far, my suid'ed fdmoun

Re: Bug#27050 (fdutils): A cause for security concern?

1999-01-19 Thread Ben Collins
On Tue, Jan 19, 1999 at 02:29:44PM -0700, Anthony Fok wrote: > As the Slink deep freeze and release are impending, I would like to ask your > advice: Should I follow the suggestion given by the bug reporter Thomas > Roessler? If so, should I fix this bug before Slink is out? I am kind of > busy w