Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-24 Thread Russ Allbery
Henrique de Moraes Holschuh writes: > On Thu, 24 Aug 2017, Sean Whitton wrote: >> Seconded, but I think the integrity protection is a more important >> reason to avoid the git protocol or http, so if we can come up with a >> further change to reflect that it would be better. > Attacking the inte

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-24 Thread Henrique de Moraes Holschuh
On Thu, 24 Aug 2017, Sean Whitton wrote: > Seconded, but I think the integrity protection is a more important > reason to avoid the git protocol or http, so if we can come up with a > further change to reflect that it would be better. Attacking the integrity of the messages in transit requires act

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
Jonathan Nieder writes: > Russ Allbery wrote: >> +++ b/policy/ch-customized-programs.rst >> @@ -93,19 +93,21 @@ page. > [...] >> -It is not required for a package to depend on ``editor`` and ``pager``, >> -nor is it required for a package to provide such virtual >> -packages. [#]_ >> +Packages ma

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
Christoph Berg writes: > Thanks for the notice. I'm quite surprised that my dnsvi seems to be the > only package in Debian that requires a text editor. Given that our base > doesn't really include one, and getting dependencies Just Right is among > the things that Debian is really good at, droppi

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-24 Thread Russ Allbery
Sean Whitton writes: > On Wed, Aug 23 2017, Russ Allbery wrote: >> --- a/policy/ch-controlfields.rst >> +++ b/policy/ch-controlfields.rst >> @@ -962,6 +962,10 @@ repository where the Debian source package is developed. >> >> More than one different VCS may be specified for the same package

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-24 Thread Sean Whitton
On Wed, Aug 23 2017, Russ Allbery wrote: > --- a/policy/ch-controlfields.rst > +++ b/policy/ch-controlfields.rst > @@ -962,6 +962,10 @@ repository where the Debian source package is developed. > > More than one different VCS may be specified for the same package. > > +For both fields, any

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Jonathan Nieder
Hi, Russ Allbery wrote: > +++ b/policy/ch-customized-programs.rst > @@ -93,19 +93,21 @@ page. [...] > -It is not required for a package to depend on ``editor`` and ``pager``, > -nor is it required for a package to provide such virtual > -packages. [#]_ > +Packages may assume that ``/usr/bin/edito

Bug#873001: [debian-policy] get-orig-source documentation should include a pointer to devref and a minimal example

2017-08-24 Thread gregor herrmann
On Thu, 24 Aug 2017 22:10:15 +0200, Bill Allombert wrote: > How do you plan to instruct uscan how repacking should be done ? Adding files to be removed to Files-Excluded in d/copyright covers about (rough guess) 95% of the cases, without any further changes needed. And for the remaining cases, us

Bug#873001: [debian-policy] get-orig-source documentation should include a pointer to devref and a minimal example

2017-08-24 Thread Bill Allombert
On Wed, Aug 23, 2017 at 02:37:25PM -0700, Russ Allbery wrote: > roucaries bastien writes: > > > you call the rules with something (using shebang or directly) make -f > > somepath/package/debian/rules, uscan need to be excuted on > > somepath/package/. > > Oh, I see the edge case this is trying t

Bug#873125: debian-policy: FTBFS with Sphinx 1.6: Needs build-dep on latexmk

2017-08-24 Thread Dmitry Shachnev
Source: debian-policy Version: 4.1.0.0 Severity: important User: python-modules-t...@lists.alioth.debian.org Usertags: sphinx1.6 Dear maintainer, debian-policy fails to build with Sphinx 1.6, currently available in experimental: sphinx-build -M latexpdf policy policy/_build Running Sphinx v1

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Christoph Berg
Re: Russ Allbery 2017-08-24 <87efs1lyc7@hope.eyrie.org> > Oh, thank you! For some reason, apt-cache rdepends didn't show any of > those packages. All of them except dnsvi are Suggests, which basically > doesn't accomplish anything. > > Copying myon on this message as maintainer of dnsvi, whi

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Christoph Berg
Re: To Russ Allbery 2017-08-24 <20170824171653.r24gyar5mikyj...@msg.df7cb.de> > $ grep-dctrl -F Provides editor -nsPackage > /var/lib/apt/lists/deb_debian_dists_sid_main_binary-amd64_Packages | xargs > deutex edbrowse emacs25 emacs25-lucid emacs25-nox fte-console > fte-terminal fte-xwindow jed xje

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
Dropping Artem, whose email address no longer works. Brendan O'Dea writes: > On Wed, Aug 23, 2017 at 11:03:23PM -0700, Russ Allbery wrote: >> In previous discussions, no one seemed to feel that it was helpful as a >> virtual package. Virtual packages are only useful for another package >> to de

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Brendan O'Dea
On Wed, Aug 23, 2017 at 11:03:23PM -0700, Russ Allbery wrote: >Would anyone on the Policy list or any of the maintainers bcc'd want to >make a case for keeping the virtual package "editor"? No strong objection to removing this virtual package. >In previous discussions, no one seemed to feel that