Re: For those who care about pam-ssh: RFC

[Peter Palfrader]

On Thu, 04 Dec 2008, Jens Peter Secher wrote:

> 2008/12/4 Vincent Zweije <[EMAIL PROTECTED]>:
> > It probably would be fine if there were a (documented) ~/.ssh/id.d/
> > directory containing keys to be used (and nothing else).
> >
> 
> That is a very good idea.  But the id.d directory should probably
> contain soft links to the actual keys to not interfere with the
> standard location.  Are the other packages which does something
> similar?

It should probably also be called something that describes its purpose
accurately.  like login-keys.d or pam-key.d or something like that.
id.d is just too generic.
-- 
   |  .''`.  ** Debian GNU/Linux **
  Peter Palfrader  | : :' :  The  universal
 http://www.palfrader.org/ | `. `'  Operating System
   |   `-http://www.debian.org/


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: system users

[Guido Günther]

On Sun, Nov 30, 2008 at 04:29:28PM +0100, Petter Reinholdtsen wrote:
> [Vincent Bernat]
> >> That is nice.  We will be able to get reasonable output under ps
> >> command for exim4 too.
> >
> > You are right. Too long usernames are displayed numerically.
> 
> ps, top and wtmp/utmp (ie w,last, etc) have user name limits.  For ps
> and top, it seem to be the POSIX limit of 8 characters, while
> wtmp/utmp have 32 characters as the limit (see
> /usr/include/bits/utmp.h).  To avoid admins being surprised when using
> ps and top, I would strongly recommend to avoid more than 8 characters
> in usernames.
This unfortunately doesn't match reality. Often you can't even control
how long the usernames might be if you're importing users from other
systems ldap. Not being able to see the full username (at least up to
UT_NAMESIZE, #367428) simply doesn't help and is just an anachronism.
Cheers,
 -- Guido


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

ITP: python-gpiv -- wrapper of libgpiv

[Gerber van der Graaf]

* Package name: python-gpiv
  Version : 1.0.0
  Upstream Author : Name <[EMAIL PROTECTED]>
* URL : http://libgpiv.sourceforge.net/pygpiv.html
* License : GPL
  Programming Lang: Python
  Description : wrapper of libgpiv

This module allows the functionality of libgpiv in Python scripts
to quick develop programs for Particle Image Velocimetry (PIV).

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

ITP: python-gpiv -- wrapper of libgpiv

[Gerber van der Graaf]

Package : python-gpiv
Version : 1.0.0
Upstream Author : Name <[EMAIL PROTECTED]>
URL : http://libgpiv.sourceforge.net/pygpiv.html
License : GPL
Programming Lang: Python
Description : wrapper of libgpiv

This module allows the functionality of libgpiv in Python scripts
to quick develop programs for Particle Image Velocimetry (PIV).

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507876: ITP: flactag -- A tagger for whole album FLACs using data from MusicBrainz

[Andy Hawkins]

Package: wnpp
Severity: wishlist
Owner: Andy Hawkins <[EMAIL PROTECTED]>


* Package name: flactag
  Version : 1.1 RC1
  Upstream Author : Andy Hawkins <[EMAIL PROTECTED]>
* URL : http://software.gently.org.uk/flactag
* License : GPL
  Programming Lang: C++
  Description : A tagger for whole album FLACs using data from MusicBrainz

A tagger for whole album FLAC files with embedded CUE sheets. Data for the 
tags is retrieved from the MusicBrainz service

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.27
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: For those who care about pam-ssh: RFC

[Jens Peter Secher]

2008/12/5 Peter Palfrader <[EMAIL PROTECTED]>:
>
> It should probably also be called something that describes its purpose
> accurately.  like login-keys.d or pam-key.d or something like that.
> id.d is just too generic.

OK, I will use ~/.ssh/login-keys.d, unless there are objections.

Cheers,
-- 
Jens Peter Secher.
_DD6A 05B0 174E BFB2 D4D9 B52E 0EE5 978A FE63 E8A1 jpsecher gmail com_.
A. Because it breaks the logical sequence of discussion.
Q. Why is top posting bad?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507894: ITP: python-gpiv -- wrapper of libgpiv

[Gerber van der Graaf]

Package: wnpp
Severity: wishlist
Owner: Gerber van der Graaf <[EMAIL PROTECTED]>


* Package name: python-gpiv
  Version : 1.0.0
  Upstream Author : Gerber van der Graaf <[EMAIL PROTECTED]>
* URL : http://libgpiv.sourceforge.net/pygpiv.html
* License : GPL
  Programming Lang: Python
  Description : wrapper of libgpiv

This module allows the functionality of libgpiv in Python scripts
to quick develop programs for Particle Image Velocimetry (PIV).

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507895: ITP: python-gpiv -- wrapper of libgpiv

[Gerber van der Graaf]

Package: wnpp
Severity: wishlist
Owner: Gerber van der Graaf <[EMAIL PROTECTED]>


* Package name: python-gpiv
  Version : 1.0.0
  Upstream Author : Gerber van der Graaf <[EMAIL PROTECTED]>
* URL : http://libgpiv.sourceforge.net/pygpiv.html
* License : GPL
  Programming Lang: Python
  Description : wrapper of libgpiv

This module allows the functionality of libgpiv in Python scripts
to quick develop programs for Particle Image Velocimetry (PIV).

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Packages still depending on GTK+ 1.2

[Josselin Mouette]

Hi,

GTK+ 1.2 has been deprecated upstream for 6 years. There is no security
support for it, and no new applications using it have been out for quite
a long time as well.

I think it is more than time to remove it from the archive. Of course,
this can only be done after we have dealt with the reverse dependencies.
For them, there are not many solutions:
  * Look for alternatives using GTK+ 2.x. For most utilities and
games, they already exist, whether already in the archive or
somewhere else ready to be packaged.
  * Port to GTK+ 2.x. Depending on the application, this can be a
trivial or very large task, and it requires a bit of motivation.
  * Simply drop the application from the archive.


Here is a first list of packages that could either be removed right now
because they seem to have replacements, or updated with little work. If
there are no objections, I think we should ask for removal of all of
those which don’t have a GTK+ 2 version.

Guenter Geiger (Debian/GNU) <[EMAIL PROTECTED]>
   shaketracker
 => we have other sequencers in the archive
   swami
 => upstream is currently porting it to GTK+ 2

Marc Dequènes (Duck) <[EMAIL PROTECTED]>
   worlded
 => no upstream news for 4 years, we have better such games in the
archive

Jari Aalto <[EMAIL PROTECTED]>
   gcrontab
 => gnome-schedule

Russ Allbery <[EMAIL PROTECTED]>
   gtimer
 => hamster-applet, gnotime

Ben Armstrong <[EMAIL PROTECTED]>
   snowflake
 => just a toy

Ernesto Nadir Crespo Avila <[EMAIL PROTECTED]>
   xwhois
 => gnome-nettool

Bradley Bell <[EMAIL PROTECTED]>
   gtkmm

Jon Bernard <[EMAIL PROTECTED]>
   e16menuedit
 => we don’t ship E16 anymore

Adrian Bridgett <[EMAIL PROTECTED]>
   gato
 => gnome-schedule

Marc 'HE' Brockschmidt <[EMAIL PROTECTED]>
   wmclockmon
 => Yet Another WindowMaker Applet

Mark Brown <[EMAIL PROTECTED]>
   powertweak
 => Is that still relevant with modern power management policies?

Daniel Burrows <[EMAIL PROTECTED]>
   xarchon
 => Unmaintained upstream for 5 years, we’re not lacking games
   xpuyopuyo
 => flobopuyo, cuyo…

Ross Burton <[EMAIL PROTECTED]>
   gtk-engines-lighthouseblue

Patryk Cisek <[EMAIL PROTECTED]>
   kadu
 => pidgin

Debian Electronics Team <[EMAIL PROTECTED]>
   gwave
 => gtkwave

Debian Games Team <[EMAIL PROTECTED]>
   lmemory
 => gcompris ?

Tim Dijkstra <[EMAIL PROTECTED]>
   digitaldj
 => prokyon3

Randall Donald <[EMAIL PROTECTED]>
   gradio
 => gnomeradio

Peter Eisentraut <[EMAIL PROTECTED]>
   pinentry
 => just need to disable the GTK+ 1.2 build

Rene Engelhard <[EMAIL PROTECTED]>
   aria
 => gwget
   manedit
 => gmanedit

Devid Filoni <[EMAIL PROTECTED]>
   dillo
 => there is a new upstream based on FLTK

Bdale Garbee <[EMAIL PROTECTED]>
   predict (U)

Debian QA Group <[EMAIL PROTECTED]>
   gnome-libs
   gtkfontsel
   gtkglarea
   imlib
   netdude
   sqlrelay
   stegdetect

 => QA-maintained packages should be removed as soon as they don’t have
remaining rdeps

Steinar H. Gunderson <[EMAIL PROTECTED]>
   amoeba
 => just a toy, and we have rss-glx

Wartan Hachaturow <[EMAIL PROTECTED]>
   grpn
 => calcoo

John Hasler <[EMAIL PROTECTED]>
   gpppon
 => gnome-ppp

Uwe Hermann <[EMAIL PROTECTED]>
   cccd
 => we have so many CD players that I won’t list them
   powershell
 => gnome-terminal, xfterm…

Alberto Gonzalez Iniesta <[EMAIL PROTECTED]>
   gqcam
 => cheese…

Joerg Jaspert <[EMAIL PROTECTED]>
   xbindkeys-config
 => I think we have quite a number of key->event managers already

Steffen Joeris <[EMAIL PROTECTED]>
   xoscope
 => extace

Matthew Johnson <[EMAIL PROTECTED]>
   gbib
 => pybliographer ?

Daniel Kobras <[EMAIL PROTECTED]>
   libdv
 => we just need to stop building libdv-bin

Alexander Kotelnikov <[EMAIL PROTECTED]>
   fvwm (U)

Antonin Kral <[EMAIL PROTECTED]>
   gtkguitune
 => lingot

Noèl Köthe <[EMAIL PROTECTED]>
   mbrowse
 => tkmib + at least 2 online services doing the same

Wesley J. Landaker <[EMAIL PROTECTED]>
   gwave (U)

Chris Lawrence <[EMAIL PROTECTED]>
   gnome-lokkit
 => so many iptables frontends…

Ron Lee <[EMAIL PROTECTED]>
   wxwindows2.4
 => no remaining rdeps

Jacob Luna Lundberg <[EMAIL PROTECTED]>
   xscorch
 => atanks, scorched3d

Eduardo Marcel Macan <[EMAIL PROTECTED]>
   vertex
 => blender ?

Camm Maguire <[EMAIL PROTECTED]>
   codebreaker
 => gnome-mastermind

OHURA Makoto <[EMAIL PROTECTED]>
   tex-guy
 => xgdvi can be replaced by evince and many others
   xemacs21
 => maybe we need to wait for emacs23

Paul Mangan <[EMAIL PROTECTED]>
   sylpheed-gtk1 (U)

Bart Martens <[EMAIL PROTECTED]>
   qiv
 => yay, an image viewer

GOTO Masanori <[EMAIL PROTECTED]>
   lm-batmon
 => yay, a battery monitor

Hamish Moffatt <[EMAIL PROTECTED]>
   guile-gtk-1.2
   gwave (U)

Ricardo Mones <[EMAIL PROTECTED]>
   sylpheed-gtk1
 => sylpheed-claws

Stephen M Moraco <[EMAIL PROTECTED]>
   karpski
 => wireshark

Ryan Murray <[EMAIL PROTECTED]>
   gdk-pixbuf

Francesco Namuri <[EMAIL PROTECTED]>
   lopster
 => did 

Re: Packages still depending on GTK+ 1.2

[James Vega]

On Fri, Dec 05, 2008 at 07:06:26PM +0100, Josselin Mouette wrote:
> Jon Bernard <[EMAIL PROTECTED]>
>e16menuedit
>  => we don’t ship E16 anymore

packages.debian.org says otherwise.

-- 
James
GPG Key: 1024D/61326D40 2003-09-02 James Vega <[EMAIL PROTECTED]>


signature.asc
Description: Digital signature

Re: Packages still depending on GTK+ 1.2

[Barry deFreese]

Josselin Mouette wrote:


Debian Games Team <[EMAIL PROTECTED]>
   lmemory
 => gcompris ?

  

I'll take a look at this one.



Debian QA Group <[EMAIL PROTECTED]>
   gnome-libs
   gtkfontsel
   gtkglarea
   imlib
   netdude
   sqlrelay
   stegdetect

 => QA-maintained packages should be removed as soon as they don’t have
remaining rdeps

  
I will look at this as well since I'm on an RM:/proposed RM kick.  I 
assume this is more of a Lenny+1 goal?


Thanks,

Barry deFreese


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507907: ITP: telepathy-farsight -- Glue library between telepathy and farsight2

[Sjoerd Simons]

Package: wnpp
Severity: wishlist
Owner: Sjoerd Simons <[EMAIL PROTECTED]>

* Package name: telepathy-farsight
  Version : 0.0.3
  Upstream Author : Olivier Crete <[EMAIL PROTECTED]>
* URL : http://telepathy.freedesktop.org
* License : LGPL
  Programming Lang: C
  Description : Glue library between telepathy and farsight2

A helper library to glue together Telepathy's media signalling and the media
streaming capabilities of Farsight2
.
Telepathy is a D-Bus framework for unifying real time communication,
including instant messaging, voice calls and video calls. It abstracts
differences between protocols to provide a unified interface for applications.
.
Farsight2 is a framework for media streaming in audio/video conferences.

This package will be maintained by the pkg-telepathy alioth group

-- System Information:
Debian Release: 5.0
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing'), (101, 'experimental')
Architecture: amd64 (x86_64)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507910: ITP: maven-reporting-impl -- Maven Reporting API Implementation

[Torsten Werner]

Package: wnpp
Severity: wishlist
Owner: Torsten Werner <[EMAIL PROTECTED]>

* Package name: maven-reporting-impl
  Version : 2.0.4.1
  Upstream Author : Vincent Siveton
* URL : http://maven.apache.org
* License : Apache-2.0
  Programming Lang: Java
  Description : Maven Reporting API Implementation
 Maven is a software project management and comprehension tool. Based on the
 concept of a project object model (POM), Maven can manage a project's build,
 reporting and documentation from a central piece of information.
 .
 Maven's primary goal is to allow a developer to comprehend the complete
 state of a development effort in the shortest period of time. In order to
 attain this goal there are several areas of concern that Maven attempts
 to deal with:
 .
* Making the build process easy
* Providing a uniform build system
* Providing quality project information
* Providing guidelines for best practices development
* Allowing transparent migration to new features
 .
 This package implements the Maven Reporting API.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: NEW processing

[Amaya]

Clint Adams wrote:
> No, not more power to them.  Conflating unnecessary tasks with privileged
> roles is a bad idea.

100% agreed.

-- 
  ·''`.  It's never too late to have a happy childhood
 : :' :
 `. `'
   `- Proudly running Debian GNU/Linux


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Barry deFreese]

Barry deFreese wrote:

OK, I have looked at several of these and man what a mess.


Debian QA Group <[EMAIL PROTECTED]>
   gnome-libs

Orphaned but obviously tons of r(b)depends.

   gtkfontsel
Orphaned but a fairly significant popcon.  I can't find new upstream 
source.  Could probably be ported or RM:d.



   gtkglarea
Orphaned and I can't find any upstream source yet but again lots of 
r(b)depends.

   imlib

Orphaned and LOTS of r(b)depends.

   netdude
ITA'd.  There is a new upstream available.  I've pinged the ITAer to see 
if the new upstream is GTK 2.0.

   sqlrelay
Some of the binaries have decent popcons.  We could probably either port 
sqlrelay-config-gtk or just remove that binary for now.

   stegdetect


RM: filed.


Is this really feasible?  How many people are going to work on dead 
packages?  Or if we RM: the lot of them, how many users are we pissing off?


Thanks,

Barry deFreese


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507918: ITP: drraw -- A simple web based presentation front-end for RRDtool

[Mohammad Ebrahim Mohammadi Panah]

Package: wnpp
Severity: wishlist
Owner: Mohammad Ebrahim Mohammadi Panah <[EMAIL PROTECTED]>


* Package name: drraw
  Version : 2.1.3
  Upstream Author : Christophe Kalt <[EMAIL PROTECTED]>
* URL : http://web.taranis.org/drraw/
* License : BSD
  Programming Lang: Perl
  Description : A simple web based presentation front-end for RRDtool

drraw is a simple web based presentation front-end for RRDtool that allows you
to interactively build graphs of your own design. A graph definition can be
turned into a template which may be applied to many Round Robin Database files.
drraw specializes in providing an easy mean of displaying data stored with
RRDtool and does not care about how the data is collected, making it a great
complement to other RRDtool front-ends.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (800, 'unstable'), (700, 'experimental'), (600, 'testing')
Architecture: amd64 (x86_64)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Scott Kitterman]

On Friday 05 December 2008 13:06, Josselin Mouette wrote:
> Paul Mangan <[EMAIL PROTECTED]>
>    sylpheed-gtk1 (U)
...
>
> Ricardo Mones <[EMAIL PROTECTED]>
>    sylpheed-gtk1
>  => sylpheed-claws

sylpheed-gtk1 should be replaced by sylpheed.  sylpheed-claws (now claws-mail) 
is a fork.

Scott K


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: For those who care about pam-ssh: RFC

[Ben Finney]

"Jens Peter Secher" <[EMAIL PROTECTED]> writes:

> OK, I will use ~/.ssh/login-keys.d, unless there are objections.

I think you should consult on ‘pam-list’, the discussion list for PAM,
before making that change.

https://listman.redhat.com/mailman/listinfo/pam-list>

-- 
 \ “True greatness is measured by how much freedom you give to |
  `\  others, not by how much you can coerce others to do what you |
_o__)   want.” —Larry Wall |
Ben Finney


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Morten Kjeldgaard]

On 05/12/2008, at 21.11, Barry deFreese wrote:




Is this really feasible?  How many people are going to work on dead  
packages?  Or if we RM: the lot of them, how many users are we  
pissing off?





There are several useful science programs that still make use of GTK+  
1.2, one is a very useful chemistry program, GAMGI, which is in the  
new queue and on its way into unstable. The other is coot, a  
widespread application for macromolecular crystallography.


Please don't remove GTK+ 1.2. There are still upstream authors,  
especially in science who use GTK+ 1.2 and who don't bother revising  
their programs from the wisdom: if it ain't broke don't fix it.


Cheers,
Morten



--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Bug#457318: qmail and related packages in NEW

[Gerrit Pape]

Hi,

On Thu, Dec 04, 2008 at 11:05:31AM +0100, Florian Weimer wrote:
> Out of curiosity, does netqmail fix at least the delayed bounce
> problem?

no, or maybe: not yet; they gave notice of including that, but nothing
happened yet

 http://marc.info/?l=qmail&m=120275739720434&w=2
 
On Thu, Dec 04, 2008 at 11:44:41AM +0200, Kalle Kivimaa wrote:
> Gerrit Pape <[EMAIL PROTECTED]> writes:
> > I've yet to be pointed to a grave or serious bug in the packages pending
> > in NEW, otherwise I see no reason why they shouldn't be processed and
> > pass NEW.  I completely agree with this well written post
> 
> Does the package in NEW fix the well known backscatter spam issue? I
> tried searching for the fix in the package but unfortunately failed.

Not the default install.  The package includes a patch though, and
builds and provides additional smtpd and qmtpd replacements that reject
unknown addresses in the SMTP connection, they're trivial to enable.  I
personally use mailfront instead of qmail-smtpd.  mailfront, already
available in Debian/main, has this functionality and can also act
perfectly as a replacement.

> If it doesn't, then IMO, at this day and age, a MTA sending
> backscatter spam doesn't belong to Debian.

I understand that opinion, and almost share it, after all I've
configured my servers that way too.  I'd prefer to have that changed
upstream in netqmail, but am not strictly opposed to making that change
for Debian explicitly.


Why 'almost share it'?

Rejecting in the SMTP connection also plays into the hands of spammers.
They have some resources available to blast out data of unsolicited
mails.  Once an SMTP server rejects a recipient before DATA, the SMTP
client doesn't need to transmit the data, and can immediately switch to
another recipient, using the resources more efficiently.  The more SMTP
servers reject on RCPT, the more moves the load to other SMTP servers.
So it might well be that those SMTP servers, that accept mail regardless
of the existence of the recipient mailbox, take load off your server's
spam processing, because they eat spammer's resources.

Concerning the delayed delivery notifications, there's an efficient way
to immediately reject those in the SMTP connection, see

 http://lists.debian.org/debian-isp/2004/09/msg00080.html

Finally, just as not supporting VRFY, not rejecting in the SMTP
conversation makes it harder for the spammers to sort out bad recipient
addresses, and so to use their resources even more efficiently.

That not necessarily needs to be true; it's theory, but in my opinion
it's worth thinking about.

Regards, Gerrit.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Russ Allbery]

Josselin Mouette <[EMAIL PROTECTED]> writes:

> Russ Allbery <[EMAIL PROTECTED]>
>gtimer
>  => hamster-applet, gnotime

My intention is to request removal of gtimer when there's a consensus that
GTK+ 1.2 is going away.  The package has been RFA for years without a
nibble, I haven't used it personally in about five years, and I'm only
still maintaining it because I know a few people use it and it hasn't
required much effort to keep it mostly up to snuff.  But the resources to
port it to a new version of GTK just aren't there, and it's dead upstream.

If it's now time to get rid of GTK+ 1.2, I can file a removal request for
it.

-- 
Russ Allbery ([EMAIL PROTECTED])   


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Luk Claes]

Russ Allbery wrote:
> Josselin Mouette <[EMAIL PROTECTED]> writes:
> 
>> Russ Allbery <[EMAIL PROTECTED]>
>>gtimer
>>  => hamster-applet, gnotime
> 
> My intention is to request removal of gtimer when there's a consensus that
> GTK+ 1.2 is going away.  The package has been RFA for years without a
> nibble, I haven't used it personally in about five years, and I'm only
> still maintaining it because I know a few people use it and it hasn't
> required much effort to keep it mostly up to snuff.  But the resources to
> port it to a new version of GTK just aren't there, and it's dead upstream.
> 
> If it's now time to get rid of GTK+ 1.2, I can file a removal request for
> it.

I think there is a consensus to get rid of GTK+ 1.2, but we didn't
manage to do it for Lenny, although we made some progress. Personally I
would like to get rid of it before Squeeze preferably with ported
applications or alternatives.

Cheers

Luk


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507922: ITP: maven-plugin-tools -- Maven Plugin Tools Base POM

[Torsten Werner]

Package: wnpp
Severity: wishlist
Owner: Torsten Werner <[EMAIL PROTECTED]>

* Package name: maven-plugin-tools
  Version : 2.4.3
  Upstream Author : [EMAIL PROTECTED]
* URL : http://maven.apache.org
* License : Apache-2.0
  Programming Lang: Java
  Description : Maven Plugin Tools Base POM
 Maven is a software project management and comprehension tool. Based on the
 concept of a project object model (POM), Maven can manage a project's build,
 reporting and documentation from a central piece of information.
 .
 Maven's primary goal is to allow a developer to comprehend the complete
 state of a development effort in the shortest period of time. In order to
 attain this goal there are several areas of concern that Maven attempts
 to deal with:
 .
* Making the build process easy
* Providing a uniform build system
* Providing quality project information
* Providing guidelines for best practices development
* Allowing transparent migration to new features
 .
 This package ships some basic POM tools.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Mark Brown]

On Fri, Dec 05, 2008 at 07:06:26PM +0100, Josselin Mouette wrote:

> Mark Brown <[EMAIL PROTECTED]>
>powertweak
>  => Is that still relevant with modern power management policies?

It's nothing to do with power management.  I'd rather let it stay until
lenny is released, though if it were the only thing keeping GTK 1.2 in
it should go.

-- 
"You grabbed my hand and we fell into it, like a daydream - or a fever."


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507932: ITP: sdlmess -- SDL port of MESS emulator (based on MAME)

[Ludovic Lechapt]

Package: wnpp
Severity: wishlist
Owner: Ludovic Lechapt <[EMAIL PROTECTED]>


* Package name: sdlmess
  Version : 0128
  Upstream Author : O. Galibert <[EMAIL PROTECTED]> and R. Belmont
* URL : http://rbelmont.mameworld.info/?page_id=163
* License : custom (see details in description)
  Programming Lang: C
  Description : SDL port of MESS emulator (based on MAME)

MESS is an acronym that stands for Multi Emulator Super System. MESS will more
or less faithfully reproduce computer and console systems on a PC. MESS can
currently emulate over 250 systems from the last 5 decades.
.
MESS emulates the hardware of the systems and sometimes utilizes ROM images to
load programs and games. Therefore, these systems are NOT simulations, but the
actual emulations of the hardware.


License ( exactly the same as MAME http://mamedev.org/license.html ):
==
Redistribution and use of this code or any derivative works are permitted
provided that the following conditions are met:
* Redistributions may not be sold, nor may they be used in a commercial product
or activity.
* Redistributions that are modified from the original source must include the
complete source code, including the source code for all components used by a
binary built from the modified sources. However, as a special exception, the
source code distributed need not include anything that is normally distributed
(in either source or binary form) with the major components (compiler, kernel,
and so on) of the operating system on which the executable runs, unless that
component itself accompanies the executable.
* Redistributions must reproduce the above copyright notice, this list of
conditions and the following disclaimer in the documentation and/or other
materials provided with the distribution.
  
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
==


Regards,
ludomatic


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-686
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Michael Banck]

Hi,

On Fri, Dec 05, 2008 at 10:41:52PM +0100, Morten Kjeldgaard wrote:
>
> On 05/12/2008, at 21.11, Barry deFreese wrote:
>
>
>>
>> Is this really feasible?  How many people are going to work on dead  
>> packages?  Or if we RM: the lot of them, how many users are we pissing 
>> off?
>
> There are several useful science programs that still make use of GTK+  
> 1.2, one is a very useful chemistry program, GAMGI, which is in the new 
> queue and on its way into unstable. 

AFAICT, gamgi is using GTK-2.0.

Michael


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507938: ITP: whohas -- query multiple distributions' package archives

[Jonathan Wiltshire]

Package: wnpp
Severity: wishlist
Owner: Jonathan Wiltshire <[EMAIL PROTECTED]>


* Package name: whohas
  Version : 0.21
  Upstream Author : Philipp Wesche <[EMAIL PROTECTED]>
* URL : http://www.philippwesche.org/200811/whohas/intro.html
* License : GPL
  Programming Lang: Perl
  Description : query multiple distributions' package archives

whohas is a command line tool that allows you to query several package 
collections at once. It supports Arch Linux (and AUR), Debian, Fedora, Gentoo, 
openSUSE, Slackware (and linuxpackages.net), Source Mage Linux, Ubuntu, FreeBSD,
NetBSD, OpenBSD, Fink, and MacPorts repositories. whohas was designed to help 
package maintainers find ebuilds, pkgbuilds, and similar package definitions 
from other distributions to learn from. However, it can also be used by normal 
users who want to know which distribution provides certain packages, and which 
version of a given package is in use in each distribution or in each release of 
a distribution.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507939: ITP: rednotebook -- graphical daily journal with calendar, templates and keyword searching

[Jonathan Wiltshire]

Package: wnpp
Severity: wishlist
Owner: Jonathan Wiltshire <[EMAIL PROTECTED]>


* Package name: rednotebook
  Version : 0.3.0
  Upstream Author : Jendrik Seipp <[EMAIL PROTECTED]>
* URL : http://rednotebook.sf.net/
* License : GPLv2
  Programming Lang: Python
  Description : graphical daily journal with calendar, templates and 
keyword searching

RedNotebook is a graphical diary and journal to keep track of notes and 
thoughts throughout the day. It includes a calendar navigation, customisable 
templates for each day, and a keywork search and cloud.


-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Morten Kjeldgaard]

On 06/12/2008, at 00.09, Michael Banck wrote:


There are several useful science programs that still make use of GTK+
1.2, one is a very useful chemistry program, GAMGI, which is in the  
new

queue and on its way into unstable.


AFAICT, gamgi is using GTK-2.0.


Yes you are right, gamgi uses GTK-2.0 as of March this year. I was  
quoting from (volatile, apparently) memory.


However, I maintain my objection. One thing is removing out-of-date  
applications, another is to remove a library which may well be used by  
users to compile and link their local applications. Even though there  
are no apps in Debian linking to GTK+ 1.2 the library should really  
remain in the archives.


Cheers,
Morten


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#507941: ITP: r-cran-rcpp -- GNU R / C++ interface package

[Dirk Eddelbuettel]

Package: wnpp
Owner: Dirk Eddelbuettel <[EMAIL PROTECTED]>
Severity: wishlist

* Package name: r-cran-rcpp
  Version : 0.6.2
  Upstream Author : Dominick Samperi and Dirk Eddelbuettel
* URL or Web page : http://dirk.eddelbuettel.com/code/rcpp.html
* License : LGPL 2.1
  Description : GNU R / C++ interface package

Rcpp used to be included in the r-cran-quantlib package that has been in
Debian since 2003.  I recently broke Rcpp out into its own package which we
now need.

Dirk 

-- 
Three out of two people have difficulties with fractions.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Josselin Mouette]

Le vendredi 05 décembre 2008 à 13:19 -0500, James Vega a écrit :
> On Fri, Dec 05, 2008 at 07:06:26PM +0100, Josselin Mouette wrote:
> > Jon Bernard <[EMAIL PROTECTED]>
> >e16menuedit
> >  => we don’t ship E16 anymore
> 
> packages.debian.org says otherwise.

Ah right, it was renamed. Anyway, there is e16menuedit2 which uses GTK+
2.x.

Thanks,
-- 
 .''`.
: :' :  We are debian.org. Lower your prices, surrender your code.
`. `'   We will add your hardware and software distinctiveness to
  `-our own. Resistance is futile.


signature.asc
Description: Ceci est une partie de message	numériquement signée

Re: Packages still depending on GTK+ 1.2

[Josselin Mouette]

Le vendredi 05 décembre 2008 à 15:11 -0500, Barry deFreese a écrit :
> >>gtkfontsel
> Orphaned but a fairly significant popcon.  I can't find new upstream 
> source.  Could probably be ported or RM:d.

The notion of X fonts is simply losing its meaning now that most if not
all toolkits are using Xft2. IIUC their support will be dropped from the
X server some time in the future.

> >>imlib
> Orphaned and LOTS of r(b)depends.

I wonder how many exploitable security issues there are in this one.

-- 
 .''`.
: :' :  We are debian.org. Lower your prices, surrender your code.
`. `'   We will add your hardware and software distinctiveness to
  `-our own. Resistance is futile.


signature.asc
Description: Ceci est une partie de message	numériquement signée

Re: Packages still depending on GTK+ 1.2

[Josselin Mouette]

Le vendredi 05 décembre 2008 à 22:49 +, Mark Brown a écrit :
> On Fri, Dec 05, 2008 at 07:06:26PM +0100, Josselin Mouette wrote:
> 
> > Mark Brown <[EMAIL PROTECTED]>
> >powertweak
> >  => Is that still relevant with modern power management policies?
> 
> It's nothing to do with power management.  I'd rather let it stay until
> lenny is released, though if it were the only thing keeping GTK 1.2 in
> it should go.

Does it even work? The description says it needs a /dev/cpu/ tree.

-- 
 .''`.
: :' :  We are debian.org. Lower your prices, surrender your code.
`. `'   We will add your hardware and software distinctiveness to
  `-our own. Resistance is futile.


signature.asc
Description: Ceci est une partie de message	numériquement signée

Re: Packages still depending on GTK+ 1.2

[Raphael Geissert]

Barry deFreese wrote:
[...]
>>>stegdetect
>>>
> RM: filed.

Why isn't just the xsetg package dropped? stegdetect is a CLI app; only xsteg
uses GTK+

Cheers,
/me who has stegdetect installed and keeps it around to time by time try to find
something that just isn't there



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Barry deFreese]

Raphael Geissert wrote:

Barry deFreese wrote:
[...]
  

   stegdetect



RM: filed.



Why isn't just the xsetg package dropped? stegdetect is a CLI app; only xsteg
uses GTK+

Cheers,
/me who has stegdetect installed and keeps it around to time by time try to find
something that just isn't there
  

Feel free to adopt it then. :)

Barry deFreese


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Packages still depending on GTK+ 1.2

[Raphael Geissert]

Josselin Mouette wrote:
[...]
> Joerg Jaspert <[EMAIL PROTECTED]>
>xbindkeys-config
>  => I think we have quite a number of key->event managers already

And is prone to buffer overflow attacks (only reported one atm, though).

> 
> Josip Rodin <[EMAIL PROTECTED]>
[...]
>gentoo

The maint docs will need an update if gentoo is removed (yay! Debian will remove
its competition from the archive :)

> 
> Alain Schroeder <[EMAIL PROTECTED]>
>gsnes9x
>  => visualboyadvance ?

C'mon, there are at least 15 years between the two consoles.
And nope, visualboyadvance doesn't replace gsnes9x, although the latter is just
a front-end.

> 
> Christoph Martin <[EMAIL PROTECTED]>
>gtalk

w00t, didn't know Google's IM was already ported (JK).

P.S. thanks for working on it, never really found time to go through that list
(/me wanted to just RM libgtk and its rdeps).

Cheers,
Raphael Geissert



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: For those who care about pam-ssh: RFC

[Allan Wind]

On 2008-12-03T23:19:52, Jens Peter Secher wrote:
>   * No SSH passphrase will be asked if the user has no SSH keys.

Is the idea to make the module optional if there is no private key?  It 
would be fine if the module is configured as optional (and perhaps 
sufficient?), but if the module is required then it leaks if the key 
exist and possible if the user exist or not.

I authenticate against my private key by having common-auth read:

auth required pam_ssh.so keyfiles=id_dsa

(i.e. not using pam_unix).  This currently leaks if the user is correct 
or not via different behavior / error message and bad by similar logic.


/Allan
-- 
Allan Wind
Life Integrity, LLC
http://lifeintegrity.com


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]