Re: Installing debian-security-support by default

2014-09-18 Thread Moritz Muehlenhoff
On Thu, Sep 18, 2014 at 11:12:28AM +0800, Paul Wise wrote:
> On Thu, Sep 18, 2014 at 4:15 AM, Moritz Muehlenhoff wrote:
> 
> > Does anyone have a better suggestion?
> 
> What about just bumping the Priority?

This wouldn't ensure that updated systems would get it installed, or am
I missing something?

Cheers,
Moritz


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140918095917.gb18...@inutil.org



Re: Debian Policy 3.9.6.0 released

2014-09-18 Thread Bill Allombert
On Wed, Sep 17, 2014 at 09:52:31PM +, Thorsten Glaser wrote:
> Bill Allombert dixit:
> 
> > 10.1
> >  Binaries must not be statically linked with the GNU C library,
> >  see policy for exceptions.
> 
> It says there that exceptions *may* be granted, but not by whom.

The policy does not say that somebody may grant exceptions, but that the
requirement can be relaxed in some specific circumstances.
This is the full paragraph:

 Binary executables must not be statically linked with the GNU C
 library, since this prevents the binary from benefiting from fixes and
 improvements to the C library without being rebuilt and complicates
 security updates.  This requirement may be relaxed for binary
 executables whose intended purpose is to diagnose and fix the system
 in situations where the GNU C library may not be usable (such as
 system recovery shells or utilities like ldconfig) or for binary
 executables where the security benefits of static linking outweigh the
 drawbacks.

> So, who can grant an exception for the (already existing)
> /bin/mksh-static file (which fits the criteria named in §10.1)?

Debian has a long standing practice of providing statically linked
shells (bash-static, zsh-static).
/bin/mksh-static clearly fits the condition given for relaxing the requirement,
thus there is no issue.

Cheers,
-- 
Bill. 

Imagine a large red swirl here. 


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140918094313.GD1157@yellowpig



re : سلام

2014-09-18 Thread arshia hadizade
سلام مشکل حل شد ؟



Bug#762116: general: Some packages depend on a particular init system

2014-09-18 Thread Rob Owens
Package: general
Severity: normal

Dear Maintainer,

This bug applies to many desktop applications, and runs counter to Debian's
goals of supporting multiple init systems.  I classified this bug as
normal, but I think consideration should be given to classifying it as
serious.

An example:

'apt-get --no-install-recommends install brasero'

gives me:

The following extra packages will be installed:
  gvfs gvfs-daemons gvfs-libs libpam-systemd libudisks2-0 systemd systemd-sysv
  udisks2
Suggested packages:
  vcdimager libdvdcss2 tracker gvfs-backends systemd-ui reiserfsprogs
  exfat-utils mdadm
Recommended packages:
  policykit-1-gnome policykit-1
The following packages will be REMOVED:
  sysvinit-core
The following NEW packages will be installed:
  brasero gvfs gvfs-daemons gvfs-libs libpam-systemd libudisks2-0 systemd
  systemd-sysv udisks2
0 upgraded, 9 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B/3,413 kB of archives.
After this operation, 11.0 MB of additional disk space will be used.

So installing a cd-burning application triggers a change of my init system.
I know about systemd-shim, and I'll talk about that in a minute.

As I understand it, brasero uses gvfs as its method of detecting removable
media.  gvfs depends on gvfs-daemons, which depends on udisks2, which 
depends on libpam-systemd, which depends on systemd-sysv.

Each of those dependencies may be valid (I really don't know).  The end 
result, though, is somewhat nonsensical.  A cd-burning application
depends on a particular init system -- even though that init system does not
contain any functionality that the cd-burning application cannot do without.

I suspect the culprit here is packages which perform a broad array of
functions, rather than doing one thing and doing it well.  So brasero needs
X functionality, which can be found in package W.  Package W also provides 
Y functionality, which depends on systemd-sysv.  So therefore brasero depends 
on systemd-sysv, even though it doesn't *need* it.

This kind of entanglement is going to make it very hard for Debian to 
sincerely support multiple init systems.

Since I know there is a thing called systemd-shim (no thanks to apt, in
this case), I can install systemd-shim prior to the apt-get command shown
above, and then my init system will not be changed on me.  But is 
systemd-shim really the solution we need to the problem above?  I certainly
appreciate the developers' work, but it seems that the problem systemd-shim
solves could be better addressed a little closer to the root.  And the root,
I think, is single packages which provide multiple (and possibly unrelated)
functionality.  Without fixing the root of the problem, Debian's goal of
supporting multiple init systems depends entirely on the success of the
systemd-shim team.


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/571386134.740794.1411054947588.javamail.zim...@ptd.net



Bug#762116: marked as done (general: Some packages depend on a particular init system)

2014-09-18 Thread Debian Bug Tracking System
Your message dated Thu, 18 Sep 2014 18:10:09 +0200
with message-id <201409181810.10540.hol...@layer-acht.org>
and subject line Re: Bug#762116: general: Some packages depend on a particular 
init system
has caused the Debian Bug report #762116,
regarding general: Some packages depend on a particular init system
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
762116: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=762116
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: general
Severity: normal

Dear Maintainer,

This bug applies to many desktop applications, and runs counter to Debian's
goals of supporting multiple init systems.  I classified this bug as
normal, but I think consideration should be given to classifying it as
serious.

An example:

'apt-get --no-install-recommends install brasero'

gives me:

The following extra packages will be installed:
  gvfs gvfs-daemons gvfs-libs libpam-systemd libudisks2-0 systemd systemd-sysv
  udisks2
Suggested packages:
  vcdimager libdvdcss2 tracker gvfs-backends systemd-ui reiserfsprogs
  exfat-utils mdadm
Recommended packages:
  policykit-1-gnome policykit-1
The following packages will be REMOVED:
  sysvinit-core
The following NEW packages will be installed:
  brasero gvfs gvfs-daemons gvfs-libs libpam-systemd libudisks2-0 systemd
  systemd-sysv udisks2
0 upgraded, 9 newly installed, 1 to remove and 0 not upgraded.
Need to get 0 B/3,413 kB of archives.
After this operation, 11.0 MB of additional disk space will be used.

So installing a cd-burning application triggers a change of my init system.
I know about systemd-shim, and I'll talk about that in a minute.

As I understand it, brasero uses gvfs as its method of detecting removable
media.  gvfs depends on gvfs-daemons, which depends on udisks2, which 
depends on libpam-systemd, which depends on systemd-sysv.

Each of those dependencies may be valid (I really don't know).  The end 
result, though, is somewhat nonsensical.  A cd-burning application
depends on a particular init system -- even though that init system does not
contain any functionality that the cd-burning application cannot do without.

I suspect the culprit here is packages which perform a broad array of
functions, rather than doing one thing and doing it well.  So brasero needs
X functionality, which can be found in package W.  Package W also provides 
Y functionality, which depends on systemd-sysv.  So therefore brasero depends 
on systemd-sysv, even though it doesn't *need* it.

This kind of entanglement is going to make it very hard for Debian to 
sincerely support multiple init systems.

Since I know there is a thing called systemd-shim (no thanks to apt, in
this case), I can install systemd-shim prior to the apt-get command shown
above, and then my init system will not be changed on me.  But is 
systemd-shim really the solution we need to the problem above?  I certainly
appreciate the developers' work, but it seems that the problem systemd-shim
solves could be better addressed a little closer to the root.  And the root,
I think, is single packages which provide multiple (and possibly unrelated)
functionality.  Without fixing the root of the problem, Debian's goal of
supporting multiple init systems depends entirely on the success of the
systemd-shim team.


-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 3.14-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
Hi Rob,

On Donnerstag, 18. September 2014, Rob Owens wrote:
> This bug applies to many desktop applications

So file it there, or rather please don't. Better send patches. Really. 
Upstream has decided to go this way / these ways, the best way to persuede 
them into another direction also, is by providing code.

I'm closing this bug because this ain't a general bug in Debian. Some packages 
depend on Gnome too (or KDE or some obscure OCAML library) and it's no secret 
mean conspirancy that they do so, but rather relying on some feature 
somewhere. Aka: "business as usual".

Please direct your energy elsewhere than into useless bug filing. Code changes 
the world.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.
--- End Message ---


Bug#762125: ITP: cairocffi -- cffi-based cairo bindings for Python

2014-09-18 Thread Jean-Christophe Jaskula
Package: wnpp
Severity: wishlist
Owner: "Jean-Christophe Jaskula" 

* Package name: cairocffi
  Version : 0.5.4
  Upstream Author : Simon Sapin 
* URL : https://pythonhosted.org/cairocffi/
* License : BSD
  Programming Lang: Python
  Description : cffi-based cairo bindings for Python

cairocffi is a CFFI-based drop-in replacement for Pycairo,
a set of Python bindings and object-oriented API for cairo.
Cairo is a 2D vector graphics library with support for multiple backends
including image buffers, PNG, PostScript, PDF, and SVG file output.

This package is required to use the matplotlib's Gtk3 backend with python3.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140918185359.2508.71636.reportbug@localhost



Bug#762145: ITP: pycsw -- OGC compliant metadata (catalog service for web) server

2014-09-18 Thread Johan Van de Wauw
Package: wnpp
Severity: wishlist
Owner: Johan Van de Wauw 

* Package name: pycsw
  Version : 1.10.0
  Upstream Author : Angelos Tzotsos , Tom Kralidis

* URL : http://pycsw.org
* License : MIT/X
  Programming Lang: Python
  Description : OGC compliant metadata (catalog service for web) server

pycsw is an OGC CSW server implementation written in Python. Started in 2010
(more formally announced in 2011), pycsw allows for the publishing and
discovery of geospatial metadata, providing a standards-based metadata and
catalogue component of spatial data infrastructures. pycsw is Open Source,
released under an MIT license, and runs on all major platforms (Windows, Linux,
Mac OS X).

As far as I know this package would be the first implementation of a csw
service on debian. It is already used in several large geospatial data portal
applications.

This program was already packaged for the OSGeo live dvd (ubuntu based) by
Angelos Tzotsos. It will need fixes to be compliant with the debian file system
hierarchy.
We intent to maintain this package in the Debian-GIS team.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/20140918220625.2379.86660.report...@debian-usb.fritz.box



Bug#762152: ITP: gertty -- Console-based interface to Gerrit

2014-09-18 Thread Sebastien Badia
Package: wnpp
Severity: wishlist
Owner: Sebastien Badia 

* Package name: gertty
  Version : 1.0.2
  Upstream Author : OpenStack 
* URL : https://github.com/stackforge/gertty
* License : Apache-2
  Programming Lang: Python
  Description : Console-based interface to Gerrit

Gertty is a console-based interface to the Gerrit Code Review system.

As compared to the web interface, the main advantages are:

  * Workflow -- the interface is designed to support a workflow similar
to reading network news or mail.  In particular, it is designed to
deal with a large number of review requests across a large number
of projects.

  * Offline Use -- Gertty syncs information about changes in subscribed
projects to a local database and local git repos.  All review
operations are performed against that database and then synced back
to Gerrit.

  * Speed -- user actions modify locally cached content and need not
wait for server interaction.

  * Convenience -- because Gertty downloads all changes to local git
repos, a single command instructs it to checkout a change into that
repo for detailed examination or testing of larger changes.

I'm planed to package gretty on collab-maint.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140919002549.ga15...@sebian.fr



Work-needing packages report for Sep 19, 2014

2014-09-18 Thread wnpp
The following is a listing of packages for which help has been requested
through the WNPP (Work-Needing and Prospective Packages) system in the
last week.

Total number of orphaned packages: 593 (new: 7)
Total number of packages offered up for adoption: 139 (new: 2)
Total number of packages requested help for: 59 (new: 0)

Please refer to http://www.debian.org/devel/wnpp/ for more information.



The following packages have been orphaned:

   abraca (#761830), orphaned 2 days ago
 Description: Simple and powerful graphical client for XMMS2
 Installations reported by Popcon: 197

   flush (#761829), orphaned 2 days ago
 Description: GTK-based BitTorrent client
 Installations reported by Popcon: 203

   gnupg-pkcs11-scd (#761831), orphaned 2 days ago
 Description: GnuPG smart-card daemon with PKCS#11 support
 Reverse Depends: gnupg-pkcs11-scd-dbg
 Installations reported by Popcon: 129

   gsm0710muxd (#761519), orphaned 4 days ago
 Installations reported by Popcon: 14

   libpgm (#761246), orphaned 6 days ago
 Description: OpenPGM shared library
 Reverse Depends: libpgm-dbg libpgm-dev libxs2 libzmq1 libzmq3
 Installations reported by Popcon: 4372

   promoe (#761833), orphaned 2 days ago
 Description: GUI client for XMMS2
 Installations reported by Popcon: 163

   sparkline-php (#761832), orphaned 2 days ago
 Description: sparkline graphing library for php
 Installations reported by Popcon: 24

586 older packages have been omitted from this listing, see
http://www.debian.org/devel/wnpp/orphaned for a complete list.



The following packages have been given up for adoption:

   link-monitor-applet (#762008), offered yesterday
 Description: GNOME Panel Applet with bar graph of round-trip times
   to hosts
 Reverse Depends: link-monitor-applet link-monitor-applet-dbg
 Installations reported by Popcon: 92

   task (#762130), offered today
 Description: feature-rich console based todo list manager
 Reverse Depends: task vit
 Installations reported by Popcon: 457

137 older packages have been omitted from this listing, see
http://www.debian.org/devel/wnpp/rfa_bypackage for a complete list.



For the following packages help is requested:

   apt-xapian-index (#567955), requested 1690 days ago
 Description: maintenance tools for a Xapian index of Debian packages
 Reverse Depends: ept-cache goplay packagesearch
 Installations reported by Popcon: 76202

   athcool (#278442), requested 3614 days ago
 Description: Enable powersaving mode for Athlon/Duron processors
 Installations reported by Popcon: 48

   awstats (#755797), requested 57 days ago
 Description: powerful and featureful web server log analyzer
 Installations reported by Popcon: 4139

   balsa (#642906), requested 1089 days ago
 Description: An e-mail client for GNOME
 Reverse Depends: balsa-dbg
 Installations reported by Popcon: 782

   cardstories (#624100), requested 1242 days ago
 Description: Find out a card using a sentence made up by another
   player
 Installations reported by Popcon: 9

   chromium-browser (#583826), requested 1572 days ago
 Description: Chromium browser
 Reverse Depends: chromedriver chromium chromium-dbg chromium-l10n
   mozplugger
 Installations reported by Popcon: 25386

   code-saturne (#754477), requested 69 days ago
 Description: General purpose Computational Fluid Dynamics (CFD)
   software
 Reverse Depends: code-saturne
 Installations reported by Popcon: 190

   cups (#532097), requested 1930 days ago
 Description: Common UNIX Printing System
 Reverse Depends: bluez-cups chromium cinnamon-settings-daemon
   cloudprint cups cups-backend-bjnp cups-browsed cups-bsd cups-client
   cups-core-drivers (63 more omitted)
 Installations reported by Popcon: 139695

   debtags (#567954), requested 1690 days ago
 Description: Enables support for package tags
 Reverse Depends: goplay packagesearch
 Installations reported by Popcon: 2329

   developers-reference (#759995), requested 19 days ago
 Description: guidelines and information for Debian developers
 Installations reported by Popcon: 14135

   fbcat (#565156), requested 1709 days ago
 Description: framebuffer grabber
 Installations reported by Popcon: 158

   freeipmi (#628062), requested 1211 days ago
 Description: GNU implementation of the IPMI protocol
 Reverse Depends: freeipmi freeipmi-bmc-watchdog freeipmi-ipmidetect
   freeipmi-ipmiseld freeipmi-tools libfreeipmi-dev libfreeipmi16
   libipmiconsole-dev libipmiconsole2 libipmidetect-dev (4 more
   omitted)
 Installations reported by Popcon: 5568

   gnat-gps (#496905), req