what is the family of ......

2003-11-04 Thread Caitlin Riddle
What family is the potato bug in? Because I saw one in my back yard. It was reaaly freaky. Tell me .

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Henning Makholm
Scripsit Jorge Bernal (Koke) <[EMAIL PROTECTED]> > CDCat is a graphical, multiplatform media catalog program which scans the > directories/drives you specify and makes a list of the filesystem (including > the tags of MP3s) and stores the result in a gzipped XML file. Perhaps not "drives", unl

Re: Exec-Shield vs. PaX

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > second, paxtest had some bugs which Exec-Shield exposed and made > Exec-Shield appear better than it is. i've fixed them here and > expect to release 0.9.5 today or so. the results now look like: i downloaded the new 0.9.5 paxtest package and a

Re: A case study of a new user turned off debian

2003-11-04 Thread Adam Heath
On 4 Nov 2003, Greg Stark wrote: > So all it would take to make the tools handle this would be to somehow make > apt aware of more revisions of packages. They're all in the pool after all. > Short of making some king of humongous mega-Packages file with every revision > of every package -- which a

Re: A case study of a new user turned off debian

2003-11-04 Thread Jonathan Dowland
On Mon, Nov 03, 2003 at 08:12:38PM +, Steve Kemp wrote: > On Mon, Nov 03, 2003 at 03:05:56PM -0500, Greg Stark wrote: > > > All he had to do was install an older version of libc6 and every other > > package > > would have been happy. All the infrastructure is there to do this, the old > > pac

Re: [debian-devel] Re: A case study of a new user turned off debian

2003-11-04 Thread Jonathan Dowland
On Tue, Nov 04, 2003 at 06:48:09AM +, Magos?nyi ?rp?d wrote: > I guess having kernel-image-vanilla and/or > kernel-image-onlybugfix in debian would not hurt. Or kernel-image-hx ... what caught me out was believing kernel-image-2.4.xx or whatever was relatively pristine. However naive that make

Re: What's the deal with NMUs? [was Re: Are you still there?]

2003-11-04 Thread Bernd Eckenfels
On Tue, Nov 04, 2003 at 04:42:14PM -0800, Tom wrote: > I'm confused by the concept of NMU: can anybody just arbitrarily upload > a new version of a package? I have a feeling that are some controls but > it seems pretty wild and wooly, and subject to abuse. Any Debian Developer can, but not unno

What's the deal with NMUs? [was Re: Are you still there?]

2003-11-04 Thread Tom
On Tue, Nov 04, 2003 at 07:17:12PM -0500, Alex Pennace wrote: > A well meaning NMU to unstable can be helpful in the interim. > Naturally, submit a bug to describe the NMU; a diff is useful. If I > notice any problems I'll work with the uploader while the package is > still in unstable. I'm confus

Re: Are you still there?

2003-11-04 Thread Alex Pennace
On Tue, Nov 04, 2003 at 02:22:35PM -0500, Andrés Roldán wrote: > I'd like to know if you are still working for your debian packages, > specially libelfg0 which one of my packages may depend on. > > If you have no time, I'd like to take over this package since it's > pretty important for me. I hav

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Matthew Palmer
On Wed, Nov 05, 2003 at 12:44:40AM +0100, Jorge Bernal wrote: > What about this?: > > Description: media catalog program > CDCat is a graphical, multiplatform media catalog program which scans the > > directories/drives you specify and makes a list of the filesystem (including > the ta

Re: Exec-Shield vs. PaX

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > since a few points have been made regarding $subject, let me clear > up a few of them: > > 1. 'It seems that exec-shield does 99% of what PaX does' this is not the case and i'm not claiming it. If you feel attacked, please dont - i'll stipulate that

Bug#212988: Are you still packaging this?

2003-11-04 Thread Elizabeth Fong
Package: wnpp Severity: wishlist Followup-For: Bug #212988 I just compiled a copy of turck-mmcache today, and absolutely love it. It's working nearly perfectly on my system, integrating well with PHP4 and Apache. This doesn't seem like a terrifically difficult package to put in: like all the

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Koke
On Wed, 5 Nov 2003 10:03:38 +1100 Matthew Palmer <[EMAIL PROTECTED]> wrote: > Maybe fix the capitalisation of CDCat to that which upstream uses. What about this?: Description: media catalog program CDCat is a graphical, multiplatform media catalog program which scans the directories/dri

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Matthew Palmer
On Wed, Nov 05, 2003 at 12:00:57AM +0100, Jorge Bernal wrote: > Description: a graphical catalog program Catalog of what? Music, by the look of it. Can it scan anything other than MP3s? if not, you could say it's an MP3 catalog program. > The cdcat is a graphical multiplatform (Linux/Windows)

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread spender
> yes. It's a compatible opt-in for something that cannot be enabled for all > binaries, instead of an opt-out. You say it's a bug, i say it's a feature. > A really bad analogy: it's like spam, you want to opt-in not opt-out ;) That is indeed a really bad analogy. Security shouldn't be as unwan

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Joe Drew
On Tue, 2003-11-04 at 10:20, Jorge Bernal (Koke) wrote: > Description : a graphical (QT based) catalog program As Matthew said, drop "QT based". Also drop the leading "a," and "graphical" too, I think. What you should insert is what sort of catalog program it is. For example: Description:

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Koke
I juest copied some descriptions from the cdcat website and it seems the english of the author is worst than mine ;) Here is he modified result (I'll update the package tomorrow if there's no other correction): Description: a graphical catalog program The cdcat is a graphical multiplatform (Lin

Re: A case study of a new user turned off debian

2003-11-04 Thread Steve Greenland
On 03-Nov-03, 16:22 (CST), Erik Steffl <[EMAIL PROTECTED]> wrote: > Oh, not this crap again. Or perhaps you're contending that what is > usefull for you is usefull for everybody. No, I didn't, My point was to object to YOUR contention that anything over 3 months old is "Useless". Woody Emacs w

Re: Debian Jr. joins with OSEF to focus on outreach

2003-11-04 Thread Tom Badran
On Tuesday 04 Nov 2003 21:54, Richard B. Kreckel wrote: > On Tue, 4 Nov 2003, Ben Armstrong wrote on [EMAIL PROTECTED]: > [...] > > > For two years, Justin Zeigler of OSEF has handed out Knoppix for Kids > > CDs[1] to dozens of Trick-or-treaters visiting his house on Halloween. > > Sigh.. Ben, you

Re: Debian Jr. joins with OSEF to focus on outreach

2003-11-04 Thread Richard B. Kreckel
On Tue, 4 Nov 2003, Ben Armstrong wrote on [EMAIL PROTECTED]: [...] > For two years, Justin Zeigler of OSEF has handed out Knoppix for Kids > CDs[1] to dozens of Trick-or-treaters visiting his house on Halloween. Sigh.. Ben, your email comes five days too late. We could have had so much fun now

Changes in t1lib.

2003-11-04 Thread Artur R. Czechowski
Hello Developers, I would like to inform you, that some important changes happened to t1lib 1.3.1-4[1] package. I changed the naming scheme. All binary packages contain version in its name, i.e.: t1lib-dev is now named t1lib1-dev. Of course old packages are provided as a dumb packages with depend

Bug#219183: ITP: libgetopt-argvfile-perl -- simple supplement to option handling modules

2003-11-04 Thread Sami Haahtinen
Package: wnpp Severity: wishlist Package name: libgetopt-argvfile-perl Version : 1.06 Upstream Author : Jochen Stenzel <[EMAIL PROTECTED]> URL : http://search.cpan.org/dist/Getopt-ArgvFile/ License : Artistic Description : simple supplement to option

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Matthew Palmer
On Tue, Nov 04, 2003 at 04:20:26PM +0100, Jorge Bernal (Koke) wrote: > Description : a graphical (QT based) catalog program > > The cdcat is a graphical (QT based) multiplatform (Linux/Windows) > catalog program which scan your directoryes/drives you want and > memoryze the filesystem /in

Exec-Shield vs. PaX

2003-11-04 Thread pageexec
since a few points have been made regarding $subject, let me clear up a few of them: 1. 'It seems that exec-shield does 99% of what PaX does' i don't know the origin of that number above, for now i'll just stick to the facts i know: - PaX implements perfect non-executable pages on amd64, i

Re: A case study of a new user turned off debian

2003-11-04 Thread Brian May
On Tue, Nov 04, 2003 at 12:01:10PM -0500, Greg Stark wrote: > Hm, it appears to be true that not every single revision is here. But there > are certainly more than just the unstable and testing revisions too: > > libc6_2.2.5-11.2_i386.deb 26-Sep-2002 11:32 3.2M stable > libc6

Linux kernel re-packaged using CDBS

2003-11-04 Thread Robert Millan
Hi there! Well, this is to announce that I just [re-]packaged the Linux kernel. It's not that I'm unhappy with the current (somewhat strange) way of packaging Linux, but rather than I wanted to try something new and package it as a standard Debian package (which means, sources in orig.tar.gz, deb

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > [...] Exec-shield "can" stop, but "will" stop is a completely different > matter. I'll let the bugfixed paxtest tell this story, however. i am 100% sure that by taking the range-property of exec-shield into account you can construct 'bugfixed' mappin

Bug#219172: RFA: lm-sensors, i2c

2003-11-04 Thread David Z Maze
Package: wnpp Severity: normal I'm looking for someone to take over maintenance of the lm-sensors hardware monitoring package, along with the corresponding i2c interface kernel modules. These two packages have the same upstream and they're pretty closely related, so it'd be nice if they had the

re: Grsec/PaX and Exec-shield

2003-11-04 Thread Andrew Saunders
On Tue 4 November, spender wrote: > I've spared you your precious time and gone ahead and done this for > you. You might have a better reception if you dropped the attitude. Anyone reading the thread will quickly form the opinion that maintaining PaX within Debian would likely require frequent i

Re: Advices on choosing a documentation license for an upstream project

2003-11-04 Thread Brian T. Sniffen
Arnaud Quette <[EMAIL PROTECTED]> writes: > [@ -legal: please cc me on reply as I'm not subscribed] > > Hi folks, > > We (Network UPS Tools project) are currently > looking at creating a complete documentation > set using docbook, for output formats and i18n > reasons. That's great. Thanks. > T

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > [...] the main point of my argument: exec-shield=2 means enabling > exec-shield on all binaries but the ones it is disabled for. This would > be a secure-by-default design, and yet it's being recommended for > "testing purposes" only? [...] yes. It

Re: Advices on choosing a documentation license for an upstream project

2003-11-04 Thread Chad Walstrom
On Tue, Nov 04, 2003 at 07:49:38PM +0100, Arnaud Quette wrote: > Knowing that: > - NUT is a pure GPL project, thus we need a _free_ > documentation licence, > > So, what are your advices about choosing a _free_ > documentation licence for NUT? Why not use the GPL to cover the documentation as wel

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread spender
On Tue, Nov 04, 2003 at 06:49:58PM +0100, Ingo Molnar wrote: > > On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > > > [...] Are you so certain that Exec-shield stops execution in shared > > library bss/data? [...] > > no, it doesnt, this is the main (and pretty much only) substantial > difference b

Are you still there?

2003-11-04 Thread Andrés Roldán
Hi Alex. I'd like to know if you are still working for your debian packages, specially libelfg0 which one of my packages may depend on. If you have no time, I'd like to take over this package since it's pretty important for me. Thanks. -- Andres Roldan Fluidsignal Group <[EMAIL PROTECTE

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread viro
On Tue, Nov 04, 2003 at 07:51:52PM +0100, Josselin Mouette wrote: > Le mar 04/11/2003 à 16:56, [EMAIL PROTECTED] a écrit : > > Also, I think both you and Ingo will be interested to see the results of > > a bugfixed version of paxtest. Are you so certain that Exec-shield > > stops execution in sh

Re: Bug#219163: ITP: synaptic-touchpad -- Synaptics TouchPad driver for XFree86

2003-11-04 Thread Andreas Metzler
In article <[EMAIL PROTECTED]> (local.debian-devel) you wrote: > Package: wnpp > Severity: wishlist > * Package name: synaptic-touchpad > Version : 0.12.0 > Upstream Author : Peter Österlund <[EMAIL PROTECTED]> > * URL : http://w1.894.telia.com/~u89404340/touchpad/index.h

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Josselin Mouette
Le mar 04/11/2003 à 16:56, [EMAIL PROTECTED] a écrit : > Also, I think both you and Ingo will be interested to see the results of > a bugfixed version of paxtest. Are you so certain that Exec-shield > stops execution in shared library bss/data? Or did you just say it > because that's what a pr

Advices on choosing a documentation license for an upstream project

2003-11-04 Thread Arnaud Quette
[@ -legal: please cc me on reply as I'm not subscribed] Hi folks, We (Network UPS Tools project) are currently looking at creating a complete documentation set using docbook, for output formats and i18n reasons. This improvement in the upstream will, by side effect, (re)create a nut-doc package in

3 packages for adoption

2003-11-04 Thread Oliver Kurth
Hi there, I would like to give three of my packages for adoption: dumpasn1 This is a useful program if you work with files using the ASN.1 syntax, eg. X.509 cerificates. I needed this in my previous job, but not any more. Upstream is responsive, no bugs. tcpreen This is a sort of proxy. It

Bug#219163: ITP: synaptic-touchpad -- Synaptics TouchPad driver for XFree86

2003-11-04 Thread Mattia Dongili
Package: wnpp Severity: wishlist * Package name: synaptic-touchpad Version : 0.12.0 Upstream Author : Peter Österlund <[EMAIL PROTECTED]> * URL : http://w1.894.telia.com/~u89404340/touchpad/index.html * License : GPL Description : Synaptics TouchPad driver

Re: A case study of a new user turned off debian

2003-11-04 Thread Matt Zimmerman
On Tue, Nov 04, 2003 at 01:11:43AM -0500, Joey Hess wrote: > Suggested project: Create a package that, a-l-apt-move, pulls packages > out of the apt cache and creates apt repositories from them. But make it > create a new repository after every upgrade, by hooking into apt. And > auto-add these re

Re: A case study of a new user turned off debian

2003-11-04 Thread Andrew Suffield
On Tue, Nov 04, 2003 at 05:53:04PM +0800, Cameron Patrick wrote: > On Tue, Nov 04, 2003 at 03:22:10AM -0600, Chris Cheney wrote: > | I refuse to use nvidia products, but I somehow doubt that boards based > | on their nforce2 chipset work properly either. > > I have a machine using the nforce2 chip

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003 [EMAIL PROTECTED] wrote: > [...] Are you so certain that Exec-shield stops execution in shared > library bss/data? [...] no, it doesnt, this is the main (and pretty much only) substantial difference between exec-shield and PaX. Exec-shield will stop execution in ET_EXEC binary

Re: A case study of a new user turned off debian

2003-11-04 Thread Matt Zimmerman
On Tue, Nov 04, 2003 at 12:47:30AM -0500, Greg Stark wrote: > So all it would take to make the tools handle this would be to somehow > make apt aware of more revisions of packages. They're all in the pool > after all. Short of making some king of humongous mega-Packages file with > every revision

Re: A case study of a new user turned off debian

2003-11-04 Thread Josip Rodin
On Tue, Nov 04, 2003 at 11:56:37AM -0500, Greg Stark wrote: > > > It would be helpful if Debian could even be installed on machines newer > > > than about 2 years old. > > > > It would be helpful if people wouldn't make sweeping generalizations all the > > time. Only a part of the new machines are

Re: A case study of a new user turned off debian

2003-11-04 Thread Greg Stark
Chris Cheney <[EMAIL PROTECTED]> writes: > Er no they are not all in the pool. The only packages in the pool are > the current versions for stable/testing/unstable/experimental. There are > also the few packages that haven't been completely compiled on all archs > yet and so are still left in arc

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Michael Ablassmeier
On Tue, Nov 04, 2003 at 10:56:23AM -0500, [EMAIL PROTECTED] wrote: > Now surely, Russell, a "security expert" such as yourself is capable of > copy+pasting that last reject in the file. Doing this took one minute. > I would imagine this was much less time than it took for you to write > your i

Re: A case study of a new user turned off debian

2003-11-04 Thread Greg Stark
Josip Rodin <[EMAIL PROTECTED]> writes: > On Tue, Nov 04, 2003 at 01:53:36AM -0600, Chris Cheney wrote: > > It would be helpful if Debian could even be installed on machines newer > > than about 2 years old. > > It would be helpful if people wouldn't make sweeping generalizations all the > time.

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread spender
> Also note that I use LSM on all my kernels, so anything that conflicts with > LSM is something that I have no ability to test and therefore no interest in > maintaining. I'm sure I could get PaX working with LSM, but it would take > some work. Anyway I'll look into this matter after I upload

Re: A case study of a new user turned off debian

2003-11-04 Thread Josip Rodin
On Tue, Nov 04, 2003 at 01:53:36AM -0600, Chris Cheney wrote: > It would be helpful if Debian could even be installed on machines newer > than about 2 years old. It would be helpful if people wouldn't make sweeping generalizations all the time. Only a part of the new machines are made with hardwar

Re: A case study of a new user turned off debian

2003-11-04 Thread Marcelo E. Magallon
On Tue, Nov 04, 2003 at 03:22:10AM -0600, Chris Cheney wrote: > Intel > - > i845 10 Sept 2001 > i875 14 Apr 2003 > i865 21 May 2003 The last two don't have AGP support before 2.4.23-preX (not sure if X is 1 or not), and the on-board network cards which many of the the motherboards b

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Koke
On Tue, 4 Nov 2003 15:45:10 + Steve Kemp <[EMAIL PROTECTED]> wrote: > > Please apply the following patch: Done :) -- "Dios es real, a no ser que sea declarado como entero" Jorge Bernal "Koke" http://sindominio.net/~koke/ Jabber-ID: [EMAIL PROTECTED] <[EMAIL PROTECTED]> || <[EMAIL PROTE

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Colin Watson
On Tue, Nov 04, 2003 at 03:45:10PM +, Steve Kemp wrote: > Please apply the following patch: > > --- config.cpp-orig 2003-11-04 15:36:58.0 + > +++ config.cpp 2003-11-04 15:37:06.0 + > @@ -92,7 +92,7 @@ > #else >if(getenv("HOME") == NULL) > return 1; > -

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Steve Kemp
On Tue, Nov 04, 2003 at 04:20:26PM +0100, Jorge Bernal (Koke) wrote: > Package: wnpp > Version: unavailable; reported 2003-11-04 > Severity: wishlist > > * Package name: cdcat > Version : 0.92 > Upstream Author : Peter Deak <[EMAIL PROTECTED]> > * URL : http://cdcat.sf

Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-04 Thread Richard Braakman
On Mon, Nov 03, 2003 at 07:42:27AM -0500, [EMAIL PROTECTED] wrote: > Go ahead and do it. I could frankly care less if your users get owned. In that case it seems safer to avoid using any software you helped to develop. Richard Braakman

Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Jorge Bernal (Koke)
Package: wnpp Version: unavailable; reported 2003-11-04 Severity: wishlist * Package name: cdcat Version : 0.92 Upstream Author : Peter Deak <[EMAIL PROTECTED]> * URL : http://cdcat.sf.net * License : GPL Description : a graphical (QT based) catalog progra

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Russell Coker
On Tue, 4 Nov 2003 19:53, Peter Busser wrote: > > I volunteered to make a package for exec-shield because it meets the > > Debian criteria, I have time to do it, and it interests me.  PaX would > > take much more time so I can't do it. > > You cannot do it or you don't want to do it? In fact, anyon

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Lukas Geyer
Peter Busser <[EMAIL PROTECTED]> writes: > > I volunteered to make a package for exec-shield because it meets > > the Debian criteria, I have time to do it, and it interests me. > > PaX would take much more time so I can't do it. > > You cannot do it or you don't want to do it? In fact, anyone ca

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Tommi Virtanen
Peter Busser wrote: Summary: i can see no significant differences between the paxtest output - all the differences seem to be bogus, see the details below. Fact is: There is a difference in paxtest output between PaX and exec-shield. And it is not a difference in exec-shield's advantage. Peter, no

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Mario Lang
Peter Busser <[EMAIL PROTECTED]> writes: >> On Tue, 04 Nov 2003, Peter Busser wrote: >> > In fact, anyone can do it Russell, I'm pretty sure even you can do >> > it: >> Why not volunteer to make the .deb, get a sponsor and get it uploaded >> then? > > Good idea! Already did that in fact. So who do

Re: Galeon 1.2.12 for Debian woody

2003-11-04 Thread Christoph Martin
Christoph Martin schrieb: > I have build unofficial Galeon 1.2.12 packages for Debian woody based on > the Mozilla 1.5 packages backported to woody from > http://debian.relativ.org/. > > Just add the following line to your /etc/apt/sources.list: > > deb http://www.verwaltung.uni-mainz.de debian

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003, Peter Busser wrote: > > the reply below is mostly a re-send of a mail i sent to you privately > > but you repeat this argument again without any apparent answer to my > > counter-arguments. > > I already suggested you to reread the PaX documentation, there are the > answers

Re: A case study of a new user turned off debian

2003-11-04 Thread Karsten M. Self
on Mon, Nov 03, 2003 at 04:57:34PM -0500, Greg Stark ([EMAIL PROTECTED]) wrote: > > "Julian Mehnle" <[EMAIL PROTECTED]> writes: > > > First, I think what Daniel Jacobowitz said is entirely true. Why didn't you > > start with "testing"? > > Sure testing is less likely to trigger this. Frankly,

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Andreas Schuldei
* Peter Busser ([EMAIL PROTECTED]) [031104 13:55]: > You didn't touch the other facts in the list, because you know you don't have > any proof to easily dismiss them. You would be my hero if you succeeded in > improving on PaX. But in all honesty, exec-shield does not do that I'm afraid. > In fact,

Re: A case study of a new user turned off debian

2003-11-04 Thread Rob Weir
On Tue, Nov 04, 2003 at 12:47:30AM -0500, Greg Stark said > or perhaps a little less automatic, > > apt-cache show libc6 > > to list the available revisions then explicitly > > apt-get install libc6:2.3.2-8 With a s/:/=/ and a sources.list line pointing at sid, say, two days ago on http://snaps

Re: A case study of a new user turned off debian

2003-11-04 Thread Arnaud Vandyck
On Tue, 4 Nov 2003 12:18:00 + Colin Watson <[EMAIL PROTECTED]> wrote: > On Tue, Nov 04, 2003 at 12:54:25PM +0100, Arnaud Vandyck wrote: > > On Tue, 4 Nov 2003 10:04:11 + > > Will Newton <[EMAIL PROTECTED]> wrote: > > > Er, doesn't apt-get install libc6=2.3.2-8 do exactly this? > > > > No

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Michael Ablassmeier
On Tue, Nov 04, 2003 at 12:39:46PM +0100, Peter Busser wrote: > > Why not volunteer to make the .deb, get a sponsor and get it uploaded > > then? > > Good idea! Already did that in fact. So who do I send this new kernel-source > .deb to? You can use the mentors service to exchange your packages w

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Peter Busser
Hi! > the reply below mostly a re-sent of a mail i sent to you privately - but > you repeat this argument again without any apparent answer to my > counter-arguments. I already suggested you to reread the PaX documentation, there are the answers to your questions. There is no need to copy/paste i

Re: A case study of a new user turned off debian

2003-11-04 Thread Colin Watson
On Tue, Nov 04, 2003 at 12:54:25PM +0100, Arnaud Vandyck wrote: > On Tue, 4 Nov 2003 10:04:11 + > Will Newton <[EMAIL PROTECTED]> wrote: > > Er, doesn't apt-get install libc6=2.3.2-8 do exactly this? > > No because of a conflict with (file own by) libdb1-compat. Uh, 2.3.2-8 is well after the

Re: status of Progeny projects

2003-11-04 Thread Jamie Wilkinson
This one time, at band camp, Ian Murdock wrote: >We have ported Red Hat's Anaconda installer to Debian; This rocks. I have an extensive PXE+kickstart based server build system at work and I was considering hacking d-i to read a kickstart configuration file, this looks like it's saved me the troub

Re: A case study of a new user turned off debian

2003-11-04 Thread Arnaud Vandyck
On Tue, 4 Nov 2003 10:04:11 + Will Newton <[EMAIL PROTECTED]> wrote: > Er, doesn't apt-get install libc6=2.3.2-8 do exactly this? No because of a conflict with (file own by) libdb1-compat. Well, it was the problem I faced. Best regards, -- .''`. ** Debian GNU/Linux ** : :' :

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Peter Busser
Hi! > [NB: When reponsding using the web archives, please get the References > and In-Reply-To: correctly. You may also consider setting MFT:] I can't post from the lists.debian.org site. > On Tue, 04 Nov 2003, Peter Busser wrote: > >> PaX would take much more time so I can't do it. > > > > You

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Ingo Molnar
On Tue, 4 Nov 2003, Peter Busser wrote: > - Running paxtest shows the differences between PaX and exec-shield. > Everyone is invited to run paxtest to see for yourself. the reply below mostly a re-sent of a mail i sent to you privately - but you repeat this argument again without any appar

Re: A case study of a new user turned off debian

2003-11-04 Thread Marco d'Itri
On Nov 04, Andrew Suffield <[EMAIL PROTECTED]> wrote: >On Tue, Nov 04, 2003 at 01:53:36AM -0600, Chris Cheney wrote: >> It would be helpful if Debian could even be installed on machines newer >> than about 2 years old. Neither my KT400 based machine nor my i875P >> based machine could be insta

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Peter Busser
Thomas Viehmann wrote: > So, please don't start insulting and accusing people for doing good work > and proposing to do even more of it. If there are technical reasons that > cause you to prefer that exec-shield does not become part of Debian's > standard kernel, just put them on the table, but sa

Re: A case study of a new user turned off debian

2003-11-04 Thread Andreas Metzler
Chris Cheney <[EMAIL PROTECTED]> wrote: [...] > Regardless updating boot-floppies when new kernels come out would be a > good idea so that newbies with recent machines can still use Debian. Iirc Eduard Bloch (blade) provides inofficial updated boot-floppies on people.debian.org. cu a

Re: A case study of a new user turned off debian

2003-11-04 Thread Will Newton
On Tuesday 04 Nov 2003 05:47, Greg Stark wrote: > to list the available revisions then explicitly > > apt-get install libc6:2.3.2-8 > > Actually this wouldn't really have helped my friend at all because he was > unlucky enough that the *first* version of libc6 from unstable that he saw > happened

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Don Armstrong
[NB: When reponsding using the web archives, please get the References and In-Reply-To: correctly. You may also consider setting MFT:] On Tue, 04 Nov 2003, Peter Busser wrote: >> PaX would take much more time so I can't do it. > > You cannot do it or you don't want to do it? Russell has made it

Re: A case study of a new user turned off debian

2003-11-04 Thread Cameron Patrick
On Tue, Nov 04, 2003 at 03:22:10AM -0600, Chris Cheney wrote: | I refuse to use nvidia products, but I somehow doubt that boards based | on their nforce2 chipset work properly either. I have a machine using the nforce2 chipset and the Woody installer doesn't recognise its IDE controller. (Proper

Re: A case study of a new user turned off debian

2003-11-04 Thread Chris Cheney
On Tue, Nov 04, 2003 at 08:17:06AM +, Andrew Suffield wrote: > I challenge the assertion that this affects a large portion of users. > > In the past few months, I've installed woody on roughly 30-40 > different types of box, all aged 0-3 years, and only one was > unsupported by woody (and that

Re: Grsec/PaX and Exec-shield

2003-11-04 Thread Peter Busser
Hi! > I volunteered to make a package for exec-shield because it meets the Debian > criteria, I have time to do it, and it interests me. PaX would take much > more time so I can't do it. You cannot do it or you don't want to do it? In fact, anyone can do it Russell, I'm pretty sure even you ca

Re: exec-shield (maybe ITP kernel-patch-exec-shield)

2003-11-04 Thread Manoj Srivastava
On Mon, 3 Nov 2003 07:42:27 -0500, spender <[EMAIL PROTECTED]> said: > Go ahead and do it. I could frankly care less if your users get > owned. > There's another exploitable bug in Exec-shield that I've known of > for months. Maybe you'll find it after you put it into Debian. > Maybe not.

Re: A case study of a new user turned off debian

2003-11-04 Thread Chris Cheney
On Tue, Nov 04, 2003 at 12:47:30AM -0500, Greg Stark wrote: > So all it would take to make the tools handle this would be to somehow make > apt aware of more revisions of packages. They're all in the pool after all. > Short of making some king of humongous mega-Packages file with every revision > o

Re: A case study of a new user turned off debian

2003-11-04 Thread Andrew Suffield
On Mon, Nov 03, 2003 at 03:05:56PM -0500, Greg Stark wrote: > I finally convinced a sysadmin friend of mine that Debian was the way and the > light. Ah, there's your mistake. Don't do that. Anybody who uses Debian as a result of this sort of evangelism is going to have a similar experience, so it

Re: A case study of a new user turned off debian

2003-11-04 Thread Andrew Suffield
On Tue, Nov 04, 2003 at 01:53:36AM -0600, Chris Cheney wrote: > It would be helpful if Debian could even be installed on machines newer > than about 2 years old. Neither my KT400 based machine nor my i875P > based machine could be installed using the standard Debian > boot-floppies. I had to resort

Re: comerr-dev (>= 2.0-1.33-2)

2003-11-04 Thread Joerg Jaspert
Turbo Fredriksson <[EMAIL PROTECTED]> writes: > Joerg> If it was a package then its available at > Joerg> snapshot.debian.net > Is this web only (tried both ssh and ftp)? Yes. But apt-able if you want. For every single day you need. Read its webpage. :) -- bye Joerg bignachos: the famo

Re: A case study of a new user turned off debian

2003-11-04 Thread Chris Cheney
On Mon, Nov 03, 2003 at 03:43:29PM -0600, Steve Greenland wrote: > On 03-Nov-03, 14:21 (CST), Erik Steffl <[EMAIL PROTECTED]> wrote: > > > is even worse than unstable> > > Oh, not this crap again. Or perhaps you're contending that I've not > gotten anything done at work in the last two years usi

Re: [debian-devel] Re: A case study of a new user turned off debian

2003-11-04 Thread Magosányi Árpád
A levelezőm azt hiszi, hogy [EMAIL PROTECTED] a következőeket írta: > > > but I wouldn't touch Herbert's kernels with a ten-feet pole. [] > a) I can do better Please do then. I guess having kernel-image-vanilla and/or kernel-image-onlybugfix in debian would not hurt. > b) I don't do

Re: A case study of a new user turned off debian

2003-11-04 Thread Goswin von Brederlow
Greg Stark <[EMAIL PROTECTED]> writes: > I finally convinced a sysadmin friend of mine that Debian was the way and the > light. He started a new job and showed up on his first day to set up his > machine by installing Debian. In short, things went horribly wrong and he > started this new job by wa

Re: comerr-dev (>= 2.0-1.33-2)

2003-11-04 Thread Turbo Fredriksson
> "Joerg" == Joerg Jaspert <[EMAIL PROTECTED]> writes: Joerg> Turbo Fredriksson <[EMAIL PROTECTED]> writes: >> Where can I find '= 2.0-1.33-2' (or something around that >> number)? It used to be an 'attic' (morgue I think it is >> called) on ftp-master. This however only have

Re: comerr-dev (>= 2.0-1.33-2)

2003-11-04 Thread Turbo Fredriksson
> "Theodore" == Theodore Ts'o <[EMAIL PROTECTED]> writes: Theodore> com-err is pretty safe and low-risk, so there should be Theodore> no problem using the latest version in unstable. Oki. Will do. Thanx. -- fissionable radar KGB 747 Saddam Hussein iodine domestic disruption preside

Re: A case study of a new user turned off debian

2003-11-04 Thread Joey Hess
Greg Stark wrote: > The only interface for rolling back is switching the entire machine to an > earlier distribution and telling apt to try to downgrade -- which is unlikely > to work. And worse, every time you run apt it only downloads and unpacks > *more* packages, all of which, of course, fail a