Re: md5sum proposal

1999-05-18 Thread Joey Hess
Brian Almeida wrote: > On Tue, May 18, 1999 at 02:17:04PM -0700, Joey Hess wrote: > > it's worth noting that Jim Dennis <[EMAIL PROTECTED]> is working on a > > standalone auditing tool for debian. The basic idea is that it compares an > > actual .deb file with what's installed on the system and fla

Re: md5sum proposal

1999-05-18 Thread Brian Almeida
On Tue, May 18, 1999 at 02:17:04PM -0700, Joey Hess wrote: > it's worth noting that Jim Dennis <[EMAIL PROTECTED]> is working on a > standalone auditing tool for debian. The basic idea is that it compares an > actual .deb file with what's installed on the system and flags differences. > It'll requi

Re: md5sum proposal

1999-05-18 Thread Joey Hess
it's worth noting that Jim Dennis <[EMAIL PROTECTED]> is working on a standalone auditing tool for debian. The basic idea is that it compares an actual .deb file with what's installed on the system and flags differences. It'll require that copies be kept of all installed deb's though, so it may onl

Re: md5sum proposal

1999-05-18 Thread Manoj Srivastava
Hi, >>"Peter" == Peter S Galbraith <[EMAIL PROTECTED]> writes: Peter> Then why do we half do it already? I don't. I do not think anyone should. However, I am williong not to micromanage other developers. Peter> Is there another reason? (I'm not talking `secure', I'm talking Peter>

Re: md5sum proposal

1999-05-18 Thread Manoj Srivastava
Hi, >>"Piotr" == Piotr Roszatycki <[EMAIL PROTECTED]> writes: >> a) It really provides no security. Piotr> It is not for *this* security reason (crackers, hackers and Piotr> others) Good. So on this we agree. >> b) It would bloat the packaging system, when it does not really solve

Re: md5sum proposal

1999-05-18 Thread Manoj Srivastava
Hi, >>"Peter" == Peter S Galbraith <[EMAIL PROTECTED]> writes: Peter> I agree. I didn't second the proposal because I thought it helped Peter> security, I seconded the proposal because it helps to find Peter> corrupted file after a system crash. A simple script with find and md5sum an

Re: logrotation

1999-05-18 Thread Manoj Srivastava
Hi, >>"Conrad" == Conrad Parker <[EMAIL PROTECTED]> writes: Also, one does not want the *.0 files that lgorotate creates, so the expression gets more complex. (a.log, a.log.0, a.log.1.gz, etc) Conrad> (bash) Conrad> shopt -s extglob __> shopt -s extglob bash: shopt: extglob:

Re: md5sum proposal

1999-05-18 Thread Peter S Galbraith
Marcus Brinkmann wrote: > See, Piotr. We all agree with you that it would be great if we had a > reliable and secure tool to verify the system integrity. > > The real problem is that your proposal did nothing to get us closer to this > goal. Putting md5sums in the package file is probably not th

Re: md5sum proposal

1999-05-18 Thread Marcus Brinkmann
Hi, On Tue, May 18, 1999 at 05:23:20PM +0200, Piotr Roszatycki wrote: > > A few weeks ago I had a system crash. I had to check which packages was > broken. I had to do this _quickly_ and _easly_. > I lost a lot of time because I had to do it manually - a lot of packages > didn't have md5sums che

Re: md5sum proposal

1999-05-18 Thread Peter S Galbraith
Piotr Roszatycki wrote: > > a) It really provides no security. > It is not for *this* security reason (crackers, hackers and others) > [...] > > A few weeks ago I had a system crash. I had to check which packages was > broken. I had to do this _quickly_ and _easly_. > I lost a lot of time bec

Re: weekly policy summary

1999-05-18 Thread Davide G. M. Salvetti
* JH => Joey Hess JH> Let me know if you're finding these useful. Very useful indeed, thank you. I'm unsure about how to second formal proposal, I hope this message will suffice. JH> Bug: JH> Title: Patented software == non-free? JH> Posted: 10 May 99 JH> Proposer: Joseph Carter JH> Seconde

Re: md5sum proposal

1999-05-18 Thread Piotr Roszatycki
> I have a different memory of events. This proposal was brought > up on this list, and was shot down because > a) It really provides no security. It is not for *this* security reason (crackers, hackers and others) > b) It would bloat the packaging system, when it does not really

Re: logrotation

1999-05-18 Thread Robert Collier
Thanks for the globbing tips. On Tue, May 18, 1999 at 10:54:26AM -0400, Michael Stone wrote: > (of course, this will be interesting when it comes to wtmp...) This is my point again, not everything in /var/log is an asci file - even excluding *.gz ... -- Robert Collier

Re: md5sum proposal

1999-05-18 Thread Manoj Srivastava
Hi, >>"Christoph" == Christoph Lameter <[EMAIL PROTECTED]> writes: Christoph> We have tried to get dpkg to do md5sums since over 3 years Christoph> now. We? The policy group has in the past rejected this proposal (it did come up for inclusion in policy a while ago). Christoph> Given

Re: logrotation

1999-05-18 Thread Michael Stone
On Wed, May 19, 1999 at 12:20:21AM +1000, Conrad Parker wrote: > On Tue, May 18, 1999 at 02:50:22PM +0100, Robert Collier wrote: > > ie. tail all logfiles, until shell expansion allows me to tail > > everything except *.gz haveing a common extension is usefull. > > (bash) > > shopt -s ext

Re: logrotation

1999-05-18 Thread Conrad Parker
On Tue, May 18, 1999 at 02:50:22PM +0100, Robert Collier wrote: > On Tue, May 18, 1999 at 03:12:07PM +0200, Paul Slootman wrote: > > > I find the ".log" extension redundant here. After all, it's a > > log directory, right? It's like having /bin/ls.bin ... Reminds me > > of .exe extensions too muc

Re: logrotation

1999-05-18 Thread Robert Collier
On Tue, May 18, 1999 at 03:12:07PM +0200, Paul Slootman wrote: > I find the ".log" extension redundant here. After all, it's a > log directory, right? It's like having /bin/ls.bin ... Reminds me > of .exe extensions too much. But, it is very usefull in that it allows one to do: cd /var/

Re: weekly policy summary

1999-05-18 Thread Martin Mitchell
Joey Hess <[EMAIL PROTECTED]> writes: > Joseph Carter wrote: > > Maybe I'm missing something here (it wouldn't be the first time), but I > > believe wichert said the changes in the non-us archive (ie, that non-us > > is now a section of main, whether the archive happens to be on pandora or > > on

Re: logrotation

1999-05-18 Thread Paul Slootman
Sorry to be so very late on this... On Wed 28 Apr 1999, Balazs Scheidler wrote: > > Log files should usually be named `/var/log/.log'. If you I find the ".log" extension redundant here. After all, it's a log directory, right? It's like having /bin/ls.bin ... Reminds me of .exe extensions t

pending normal debian bugs for Debian Policy List

1999-05-18 Thread Nag
Maintainer: Debian Policy List Severity: normal Status: pending This mail is being sent to you because the indicated bug reports have been marked as overdue (i.e. has been open longer than 9 months). Overdue reminders are repeated monthly. #8221 debian-policy ispell suggests non-ex

Re: md5sum proposal

1999-05-18 Thread Christoph Lameter
We have tried to get dpkg to do md5sums since over 3 years now. Given the inertia of the product we have no choice but to continue using what we have. I introduced md5sums only after it became clear that dpkg was an essentially deadbeat package and there was persistent demand for such a feature. Pl

Re: md5sum proposal

1999-05-18 Thread Manoj Srivastava
Hi, Oh, I agree. I woul;d welcome any project to provide a free replacement for tripwire. Perhaps I shaould have said a tripwire _like_ package should be the way to go. manoj >>"Marcus" == Marcus Brinkmann <[EMAIL PROTECTED]> writes: Marcus> I second your motion in general (t