Backporting 2.4.23 kernel packages

2003-12-04 Thread Andrew Pollock
Where I'm working, we have Debian stable deployed on a number of boxes. For hardware support reasons, we've had to grab newer kernels from testing, and have been reasonably successful at not dragging in half of testing with them. We're going to want to upgrade everything to 2.4.23 ASAP, but I'd pr

Re: Building a distribution from source?

2003-12-04 Thread Joey Hess
Steve Kemp wrote: > If I wish to produce an installation CD-ROM identical to that used > in woody, with my packages installed how do I do that? Is there some > tool that will allow me to create an ISO with my packages. That's what the debian-cd package is for. -- see shy jo signature.asc

Re: Bits from the RM

2003-12-04 Thread Peter S Galbraith
Anthony Towns wrote: > On Thu, Dec 04, 2003 at 08:46:19PM -0500, Peter S Galbraith wrote: > > Anyone know the answer to my second question? > > : Does the OTA bug get filled against the package you are offering to help > > : with, or against wnpp? I presume against the package you are offering >

Re: Bits from the RM

2003-12-04 Thread Anthony Towns
On Thu, Dec 04, 2003 at 08:46:19PM -0500, Peter S Galbraith wrote: > Anyone know the answer to my second question? > : Does the OTA bug get filled against the package you are offering to help > : with, or against wnpp? I presume against the package you are offering > : to help with, but then there

Bug#222946: ITP: qsynth -- GUI frontend to fluidsynth based on QT

2003-12-04 Thread Eric Van Buggenhaut
Package: wnpp Severity: wishlist * Package name: qsynth Version : 0.0.2 Upstream Author : Rui Nuno Capela <[EMAIL PROTECTED]> * URL : http://qsynth.sourceforge.net * License : GPL Description : GUI frontend to fluidsynth based on QT QSynth is a fluidsynth

无线微型监听器

2003-12-04 Thread 监听器
大连鹏展公司最新研制高频率 无线微型监听器。发射器为半个火柴盒大小。可发射一公里以外。接收机有半 个烟盒大小。可随身携带.不受任何干扰。语音清晰。是同类产品的数倍功率。代理价158元。零售价188元,国内 各大市县可货到付款。 短距离 无线微型监听器接收200米只售100元/套,代理价68元/套。80米的声感监听器只 售40元/套,代理价33元/套。 成聘全国代理商。必须先付10元邮费,特快专递另加20元。3天内到货。联系人:李军 贾殿艳 24小时热线: 04117051037 邮箱地址 [EMAIL PROTECTED] 公

Re: kernel-patch-acl

2003-12-04 Thread Russell Coker
On Fri, 5 Dec 2003 13:59, Ben Collins <[EMAIL PROTECTED]> wrote: > > This problem has already bitten several skilled Debian developers at > > various times. Given the problems that are caused for such skilled > > people as a result of this I hate to imagine the consequences for typical > > users!

Re: kernel-patch-acl

2003-12-04 Thread Ben Collins
> This problem has already bitten several skilled Debian developers at various > times. Given the problems that are caused for such skilled people as a > result of this I hate to imagine the consequences for typical users! But typical users wont be building custom kernels with ACL patches, will

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Andrew Suffield
On Thu, Dec 04, 2003 at 05:27:50PM -0600, Billy Biggs wrote: > Andrew Suffield ([EMAIL PROTECTED]): > > > > Are there any technical complaints about it? (Apart from "I don't > > > like the .desktop extension", which I consider unimportant.) > > > > It doesn't support anything but gnome or kde. W

kernel-patch-acl

2003-12-04 Thread Russell Coker
Herbert, would it be possible to get the ACL kernel patch included in the Debian kernel source? Much of this patch is scheduled to be included in 2.4.24, so the work required will be decreasing. The patch is already in 2.6.0-test kernels so it does not require anything to be carried forward to

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Joey Hess
Billy Biggs wrote: > So far there has been a lot of support for the .desktop standard > effort. Which systems do you refer to that are not supporting, > adopting, or intending to adopt the .desktop standard? Some or all of: twm, pdmenu, blackbox, afterstep, fluxbox, gtk-menu, wmaker, fvwm2, enl

Re: Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Andrew Suffield
On Fri, Dec 05, 2003 at 10:19:28AM +0800, Cameron Patrick wrote: > | > Frankly, I'm not clear why there's opposition to adopting the freedesktop > | > draft specifications in Debian. > | > > | > Are there any technical complaints about it? (Apart from "I don't like > | > the .desktop extension"

阿才

2003-12-04 Thread 9318
提供在线招聘、求职,免费发布求职简历。 天下英才网 http://free.aofa.net/amark/ 为单位提供在线招聘 为企业提供简历查询、职位发布 http://free.aofa.net/amark/

Re: Building a distribution from source?

2003-12-04 Thread Russell Coker
On Fri, 5 Dec 2003 13:18, Steve Kemp <[EMAIL PROTECTED]> wrote: > On Fri, Dec 05, 2003 at 12:10:44PM +1100, Russell Coker wrote: > > On Fri, 5 Dec 2003 10:39, Steve Kemp <[EMAIL PROTECTED]> wrote: > > > ? I've been experimenting with producing a hardened Debian derivitive > > > ?as a small piece of

Re: Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Cameron Patrick
On Thu, Dec 04, 2003 at 10:04:56PM +, Andrew Suffield wrote: | > Why be gratuitously different? | | Why not? Why waste effort just to be the same as everybody else? | | It's identical to the old rpm vs. deb argument. Really? Once again, I believe that there are differences, in that it shou

Re: Building a distribution from source?

2003-12-04 Thread Steve Kemp
On Fri, Dec 05, 2003 at 12:10:44PM +1100, Russell Coker wrote: > On Fri, 5 Dec 2003 10:39, Steve Kemp <[EMAIL PROTECTED]> wrote: > > ? I've been experimenting with producing a hardened Debian derivitive > > ?as a small piece of paid work. ?This mostly means compiling things with > > ?a stackguard c

Re: Bits from the RM

2003-12-04 Thread Peter S Galbraith
Frank Lichtenheld <[EMAIL PROTECTED]> wrote: > On Thu, Dec 04, 2003 at 10:38:10AM -0500, Peter S Galbraith wrote: > > Anthony Towns wrote on debian-devel-announce: > > > > > I think the best way is to > > > file a RFA (which we're redefining as "Requ

Unidentified subject!

2003-12-04 Thread yity
我公司每月有运输发票,普通发票,增值税发票,商品销售发票,建筑安装发票,广告业发票可以代开如有需要的公司请来电. 联系电话: 13510685111 联系人: 张扬

Re: debian pxe dhcp netinstall (debconf enterprise fai etc.)

2003-12-04 Thread Mark Ferlatte
Tim Krieglstein said on Fri, Dec 05, 2003 at 02:10:57AM +0100: > I would like to have some feedback, especially on the topic of > doing automatic updates with an cron job. I would also like to hear of > some hints if there is an other tool which does the job (debix, > skolelinux,...: haven't looked

debian pxe dhcp netinstall (debconf enterprise fai etc.)

2003-12-04 Thread Tim Krieglstein
Hi Last week i started implementing an netinstall-script for debian machines. I am no debian developer, but using debian for quite a while. However i didn't like the state of our linux machines, we where working on, some are in a really poor condition, software wise. So having some nice new machi

Re: Building a distribution from source?

2003-12-04 Thread Russell Coker
On Fri, 5 Dec 2003 10:39, Steve Kemp <[EMAIL PROTECTED]> wrote: >   I've been experimenting with producing a hardened Debian derivitive >  as a small piece of paid work.  This mostly means compiling things with >  a stackguard compiler, using format guard, and enforcing policies, etc. Are you usin

Re: New 2.4 kernels in unstable when archive reopens?

2003-12-04 Thread Shaya Potter
http://www1.cs.columbia.edu/~spotter/debian/kernel/ those are Herbert's packages, archive isn't processing yet, so can get them from the above link. On Thu, 2003-12-04 at 17:49, Nathanael Nerode wrote: > It's clear that it's important to fix the brk vulnerability. > > It is intended to release s

Building a distribution from source?

2003-12-04 Thread Steve Kemp
I wasn't going to post this, but it might be relevent to the ongoing custom distribution stuff that's happening. I've been experimenting with producing a hardened Debian derivitive as a small piece of paid work. This mostly means compiling things with a stackguard compiler, using format

Re: Backport of the integer overflow in the brk system call

2003-12-04 Thread Tom
On Thu, Dec 04, 2003 at 06:13:49PM -0500, Matt Zimmerman wrote: > > Not really; he just has to set things up ahead of time. This is like > claiming the attacker has to be present in order to sniff your password from > a telnet session (he doesn't; he just has to have been around at any time > bef

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Billy Biggs
Andrew Suffield ([EMAIL PROTECTED]): > > Are there any technical complaints about it? (Apart from "I don't > > like the .desktop extension", which I consider unimportant.) > > It doesn't support anything but gnome or kde. We have a system that > works for everything, and it is unlikely that anyb

Re: Backport of the integer overflow in the brk system call

2003-12-04 Thread Matt Zimmerman
On Thu, Dec 04, 2003 at 11:55:26AM -0800, Tom wrote: > Yes, but the reason it would have been efficiacious in this *particular* > instance is the hacker sniffed the password, and then logged on to > Debian's servers later at his leisure from a different PC. With a > smartcard, he would have had t

New 2.4 kernels in unstable when archive reopens?

2003-12-04 Thread Nathanael Nerode
It's clear that it's important to fix the brk vulnerability. It is intended to release sarge with a 2.4 kernel as the default, I believe. Therefore, it is imperative that there be a 2.4 kernel in sarge which has the brk vulnerability patched. Currently, none of the 2.4 kernels in sarge or sid ha

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Billy Biggs
Steve Greenland ([EMAIL PROTECTED]): > On 04-Dec-03, 14:44 (CST), Nathanael Nerode <[EMAIL PROTECTED]> wrote: > > There's now a standard used by KDE and GNOME which has more features > > than the Debian menu system. > > And missing one key one: working with menu sysems other than KDE and > GNOME

Re: Revival of the signed debs discussion

2003-12-04 Thread Matt Zimmerman
On Wed, Dec 03, 2003 at 08:07:53AM +0100, Goswin von Brederlow wrote: > I wrote a little script that checks what apt things its installing > against what the control files of the debs say. I will test it with > some more fakes and then file it in the BTS. Why would you do this with a script rathe

Re: Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Andrew Suffield
On Thu, Dec 04, 2003 at 03:44:56PM -0500, Nathanael Nerode wrote: > Andrew Suffield wrote: > >That wasn't his argument. However, it's similar, and the response is > >the same: why not simply add these features to the Debian menu system? > > Why be gratuitously different? Why not? Why waste effort

Re: Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Steve Greenland
On 04-Dec-03, 14:44 (CST), Nathanael Nerode <[EMAIL PROTECTED]> wrote: > There's now a standard used by KDE and GNOME which has more features than the > Debian menu system. And missing one key one: working with menu sysems other than KDE and GNOME. > Which makes more sense: > * Investing time i

Re: exim4-config and exim4-base installed on systems with non-exim-MTA

2003-12-04 Thread Tore Anderson
* Marc Haber > Splitting up the config file in small files was necessary to do > debconf support, which is a Debian requirement. * Tore Anderson > Debconf support is now required? I'm flabbergasted. * Joey Hess > debconf support is a requirement if you want to be supported > (reconfig

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Steve Greenland
On 04-Dec-03, 09:26 (CST), Jonathan Dowland <[EMAIL PROTECTED]> wrote: > It has been bashed around a lot but I think the menu system needs to be > discussed thoroughly, as everyone seems to have reserved opinions on how > it should be developed. No it doesn't need to be discussed thorougly, it h

Re: exim4-config and exim4-base installed on systems with non-exim-MTA

2003-12-04 Thread Joey Hess
Tore Anderson wrote: > > Splitting up the config file in small files was necessary to do > > debconf support, which is a Debian requirement. > > Debconf support is now required? I'm flabbergasted. debconf support is a requirement if you want to be supported (reconfigured) by base-config, whi

Re: exim4-config and exim4-base installed on systems with non-exim-MTA

2003-12-04 Thread Tore Anderson
* Marc Haber > Splitting up the config file in small files was necessary to do > debconf support, which is a Debian requirement. Debconf support is now required? I'm flabbergasted. Could you please point me to this section of our policy? I certainly cannot find it. * Tore Anderson >

Re: Revival of the signed debs discussion

2003-12-04 Thread Matt Zimmerman
On Thu, Dec 04, 2003 at 03:58:38PM -0500, Daniel Jacobowitz wrote: > On Thu, Dec 04, 2003 at 02:41:43PM -0500, Matt Zimmerman wrote: > > What kind of real world attacks do signed debs prevent? > > > > The only one which comes to mind is a rogue Debian developer that you do > > not wish to trust,

Re: Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Nathanael Nerode
Andrew Suffield wrote: >That wasn't his argument. However, it's similar, and the response is >the same: why not simply add these features to the Debian menu system? Why be gratuitously different? There's now a standard used by KDE and GNOME which has more features than the Debian menu system. W

Re: Revival of the signed debs discussion

2003-12-04 Thread Daniel Jacobowitz
On Thu, Dec 04, 2003 at 02:41:43PM -0500, Matt Zimmerman wrote: > On Thu, Dec 04, 2003 at 12:28:41PM -0600, Manoj Srivastava wrote: > > > On Thu, 4 Dec 2003 11:47:50 -0500, Matt Zimmerman <[EMAIL PROTECTED]> said: > > > > > What kind of real world attacks do signed debs prevent? Not a > > > com

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Billy Biggs
Felipe Almeida Lessa ([EMAIL PROTECTED]): > It would be *very* hard to make the developers agree, but we need to > think in the Open Source Community as a whole. The Debian Menu is used > only by Debian, but the .desktop is or may be used by any > distribution. > > Now just imagine what would ha

Re: apt-rpm article -- the features we don't have

2003-12-04 Thread Matt Zimmerman
Just making another pass over this to associate the bug numbers for those who are interested (especially in helping with the merge effort). On Mon, Dec 01, 2003 at 07:06:41PM -0500, Joey Hess wrote: > To install a package directly, with apt downloading any necessary > dependencies: > apt-get in

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Zenaan Harkness
On Fri, 2003-12-05 at 05:49, Felipe Almeida Lessa wrote: > > On Thursday 04 December 2003 13:19, Andrew Suffield wrote: > > The other question is "how hard could it be to adapt menu to desktop files > > ?". > I think only one thing is blocking the whole idea of moving from Debian Menu > style to

Re: [custom] The term "flavor" and encouraging work on Debian

2003-12-04 Thread Fabian Fagerholm
On Thu, 2003-12-04 at 11:42, Zenaan Harkness wrote: > I could almost cut and paste your email into the wiki it was so clear > (at least Debian parent(super) project -> CDD -> Flavor). > > I hope I haven't misunderstood you, No, I was just in a hurry and expressed myself inadequately. The discuss

Re: Bits from the RM

2003-12-04 Thread Peter S Galbraith
> On Dec 4, 2003, at 10:56, Peter S Galbraith wrote: > > > But another package's was using convert > > in the build stage to convert some images and it was failing. The bug > > was elevated to release-critical. I don't think it would be fair to > > remove imagemagick from the distribution for su

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Chad Walstrom
On Thu, Dec 04, 2003 at 04:49:45PM -0200, Felipe Almeida Lessa wrote: > I think only one thing is blocking the whole idea of moving from > Debian Menu style to freedesktop.org style: the work that need to be > done. In other words, people don't wanna use the .desktop format > because the have alrea

Re: Backport of the integer overflow in the brk system call

2003-12-04 Thread Tom
On Thu, Dec 04, 2003 at 02:23:54PM -0500, Matt Zimmerman wrote: > On Tue, Dec 02, 2003 at 05:19:22PM -0800, Tom wrote: > You must be joking. If the developer's system is compromised, and he logs > into another system after that time, that system can be easily compromised > also. Yes, but the rea

Re: OT: Smartcards and Physical Security

2003-12-04 Thread Tom
On Thu, Dec 04, 2003 at 11:43:21AM -0600, Manoj Srivastava wrote: > Snippy, aren't we? Usually it is better to have basic logic > straight before you try for a mistaken sense of haughtiness. My logic is correct; apparently my understanding of the goals of the Debian project is not. I al

Re: Revival of the signed debs discussion

2003-12-04 Thread Matt Zimmerman
On Thu, Dec 04, 2003 at 12:28:41PM -0600, Manoj Srivastava wrote: > On Thu, 4 Dec 2003 11:47:50 -0500, Matt Zimmerman <[EMAIL PROTECTED]> said: > > > What kind of real world attacks do signed debs prevent? Not a > > compromised buildd, or a compromised maintainer's workstation. > > It wo

Re: Backport of the integer overflow in the brk system call

2003-12-04 Thread Matt Zimmerman
On Tue, Dec 02, 2003 at 05:19:22PM -0800, Tom wrote: > Smartcards would have avoided the Debian compromise: merely having a > compromised DD box would have prevented bad guy from getting on the box. > > It's all about layers of defense. > > I think the DD's should seriously think about requirin

Re: Revival of the signed debs discussion

2003-12-04 Thread Manoj Srivastava
On Thu, 4 Dec 2003 11:47:50 -0500, Matt Zimmerman <[EMAIL PROTECTED]> said: > What kind of real world attacks do signed debs prevent? Not a > compromised buildd, or a compromised maintainer's workstation. It would allow me to copy .debs around with other people, or use .debs not made a

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Felipe Almeida Lessa
> On Thursday 04 December 2003 13:19, Andrew Suffield wrote: > > > The silly question is : What does our actual menu system provide that > > > shouldn't be achieved by using .desktop file ? > > > > > > As those are going to be a standard, we should deal with them. > > > > You could swap "our menu s

Re: [custom] Debian Enterprise - flavors

2003-12-04 Thread Fabian Fagerholm
On Thu, 2003-12-04 at 15:20, Joerg Wendland wrote: > When such a system is available, then having a "fileserver flavor" is > just a matter of typing "apt-get install samba". > So what I (and my clients) need is an operating system for the real > big boxen. This is of course Debian but I expect of

Re: Best pratices for short descriptions

2003-12-04 Thread Branden Robinson
On Sat, Nov 29, 2003 at 10:49:11AM +0100, Florent Rougon wrote: > Yes. Now, you have the problem that Policy maintainers want > implementation prior to the rule appearing in Policy and some people > won't follow rules unless they are stated in Policy (or are themselves > convinced that the rule is

Re: debsums for maintainer scripts

2003-12-04 Thread Javier Fernández-Sanguino Peña
[Manoj, I'm going to concentrate on this example, it's probably a corner case and I'm probably digressing here ... oh well] On Thu, Dec 04, 2003 at 11:17:46AM -0600, Manoj Srivastava wrote: > > Finally, there's one thing md5sums in packages can provide that no > > other solution proposed in th

Re: exim4-config and exim4-base installed on systems with non-exim-MTA

2003-12-04 Thread Marc Haber
On Thu, 4 Dec 2003 13:43:39 +1000, Anthony Towns wrote: >Maybe an easy way of answering that is to instead answer this: why can't >you just make the -config package a bunch of files and a script that >doesn't get executed until the daemon package is installed? That's a nice idea. The -base init s

Re: exim4-config and exim4-base installed on systems with non-exim-MTA

2003-12-04 Thread Marc Haber
On Thu, 04 Dec 2003 10:20:16 +0100, Tore Anderson <[EMAIL PROTECTED]> wrote: >* Marc Haber > > Well, I am only paid to work on the exim4 package if my employer gets > > to use the package as well. Since we don't want debconf questions to > > pop up during installation and we found the pre-fabricate

Re: Bits from the RM

2003-12-04 Thread Anthony DeRobertis
On Dec 4, 2003, at 10:56, Peter S Galbraith wrote: But another package's was using convert in the build stage to convert some images and it was failing. The bug was elevated to release-critical. I don't think it would be fair to remove imagemagick from the distribution for such a case. More impor

Re: OT: Smartcards and Physical Security

2003-12-04 Thread Manoj Srivastava
On Wed, 3 Dec 2003 13:36:58 -0800, Tom <[EMAIL PROTECTED]> said: > On Wed, Dec 03, 2003 at 09:24:07AM -0600, Manoj Srivastava wrote: >> Heh. Your grasp of the practicality of the situation is slipping. >> Not only do these guys donate a fairly expensive chunk of billable >> hours and expertise,

Re: OT: Smartcards and Physical Security

2003-12-04 Thread Manoj Srivastava
On Wed, 3 Dec 2003 13:36:58 -0800, Tom <[EMAIL PROTECTED]> said: > On Wed, Dec 03, 2003 at 09:24:07AM -0600, Manoj Srivastava wrote: >> Heh. Your grasp of the practicality of the situation is slipping. >> Not only do these guys donate a fairly expensive chunk of billable >> hours and expertise,

Re: OT: Smartcards and Physical Security

2003-12-04 Thread Manoj Srivastava
On Wed, 3 Dec 2003 13:34:51 -0800, Tom <[EMAIL PROTECTED]> said: > On Wed, Dec 03, 2003 at 09:26:15AM -0600, Manoj Srivastava wrote: >> Guess what the median age of a Debian developer is. > Don't know, don't care. >> Volunteer organization have dues? > Yes, I don't know what planet you're fro

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Andrew Suffield
On Thu, Dec 04, 2003 at 09:01:27PM +0800, Cameron Patrick wrote: > On Thu, Dec 04, 2003 at 12:19:28PM +, Andrew Suffield wrote: > | On Thu, Dec 04, 2003 at 12:34:22AM +0100, Raphael Goulais wrote: > | > On Wednesday 03 December 2003 21:31, Zenaan Harkness wrote: > | > > I agree. I would like to

Re: debsums for maintainer scripts

2003-12-04 Thread Manoj Srivastava
On Thu, 4 Dec 2003 12:43:18 +0100, Eduard Bloch <[EMAIL PROTECTED]> said: >> include > * Manoj Srivastava [Wed, Dec 03 2003, 04:19:59AM]: >> > - current md5sums file in control.tar.gz should contain checksums >> > of >> >really all files >> >> Hard to do for conffiles. Now, if the md5sums

Re: debsums for maintainer scripts

2003-12-04 Thread Manoj Srivastava
On Thu, 4 Dec 2003 02:29:29 +0100, Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> said: > On Wed, Dec 03, 2003 at 04:23:33AM -0600, Manoj Srivastava wrote: >> On Mon, 1 Dec 2003 17:12:36 -0500, christophe barbe >> <[EMAIL PROTECTED]> said: >> >> > I don't see why adding a md5dsum_are_mandato

Re: [RFC] adding system users: which is the best way??

2003-12-04 Thread Anthony DeRobertis
On Dec 3, 2003, at 22:35, Graham Wilson wrote: On Wed, Dec 03, 2003 at 10:20:14AM -0500, Anthony DeRobertis wrote: Please, please, use debian- or some other prefix! That shouldn't confuse any rational person What about sys- as a prefix? I'm not particularly tied to any prefix, though something

Re: debsums for maintainer scripts

2003-12-04 Thread Anthony DeRobertis
On Dec 3, 2003, at 21:07, Goswin von Brederlow wrote: You can just as well just check all the debs. gunzip doesn't take longer, the slowest thing usually is the cdrom. True, so I should probably just put the md5sums files on my CD, and check those. That'd be far faster. I could even put the md5su

Re: Bits from the RM

2003-12-04 Thread Jan Nieuwenhuizen
Peter S Galbraith <[EMAIL PROTECTED]> writes: > another package's was using convert in the build stage to convert > some images and it was failing. The bug was elevated to > release-critical. I don't think it would be fair to remove > imagemagick from the distribution for such a case. >From the

Re: debsums for maintainer scripts

2003-12-04 Thread Manoj Srivastava
On Wed, 03 Dec 2003 17:40:51 -0500, Anthony DeRobertis <[EMAIL PROTECTED]> said: > On Wed, 2003-12-03 at 05:23, Manoj Srivastava wrote: >> Because it buys little security wise? > I can take a rescue disk, a CD with relevant packages on it, boot > the suspect server from the rescue disk, and qui

Re: debsums for maintainer scripts

2003-12-04 Thread Bernhard R. Link
* Goswin von Brederlow <[EMAIL PROTECTED]> [031204 15:05]: > > I also think it is hardly possible to regenerate the .md5sums file > > in a way the signature will be kept. It would need to never change > > which files are included and how they are sorted. It could also > > cause problems with more s

Bug#222899: ITP: djohn -- Distributed password cracker

2003-12-04 Thread Samuele Giovanni Tonon
Package: wnpp Severity: wishlist Package name: djohn Version : 0.9.8.1 Upstream Author : Luis Parravicini [EMAIL PROTECTED] URL : http://ktulu.com.ar/en/djohn.php License : GPL Description : Distributed password cracker This is a little program to p

Re: debsums for maintainer scripts

2003-12-04 Thread Bernhard R. Link
* Manoj Srivastava <[EMAIL PROTECTED]> [031204 18:00]: > >> The md5sum file should be generated at build time, signed and only > >> the signature kept. The signature is small enough not to cause > >> bloat, it can be included in the Package file or a Signatures.gz > >> file containing all signature

Re: Two different libpng2_1.0.12-3.woody.3_i386.deb?

2003-12-04 Thread Jeroen van Wolffelaar
On Wed, Dec 03, 2003 at 02:46:59PM -0600, Chad Walstrom wrote: > On Wed, Dec 03, 2003 at 06:30:16PM +0100, Jeroen van Wolffelaar wrote: > > On Wed, Dec 03, 2003 at 05:44:36PM +0100, Santiago Vila wrote: > > > file=main/libp/libpng/libpng2_1.0.12-3.woody.3_i386.deb > > > wget -q -O 1.deb http://ftp.

Re: Bits from the RM

2003-12-04 Thread Frank Lichtenheld
On Thu, Dec 04, 2003 at 10:38:10AM -0500, Peter S Galbraith wrote: > Anthony Towns wrote on debian-devel-announce: > > > I think the best way is to > > file a RFA (which we're redefining as "Request For Assistance" instead > > of just "Request For Ado

Re: debsums for maintainer scripts

2003-12-04 Thread Thomas Viehmann
Manoj Srivastava wrote: > Before we make such a push, we should at least ensure that it > is something we really want to do. I think locally generated > checksums are a better solution. To me, the main use of md5sums seems to be verifying nothing bad (as in accident, not malicious manipulat

Re: debsums for maintainer scripts

2003-12-04 Thread Manoj Srivastava
On Thu, 4 Dec 2003 13:02:57 +0100, Bernhard R Link <[EMAIL PROTECTED]> said: > * Goswin von Brederlow <[EMAIL PROTECTED]> > [031204 02:46]: >> "Bernhard R. Link" <[EMAIL PROTECTED]> writes: >> > I don't think so. md5-calculation it not the fastest thing >> > (especially on non-i386 it often fee

Re: Revival of the signed debs discussion

2003-12-04 Thread Matt Zimmerman
On Thu, Dec 04, 2003 at 03:03:39AM +0100, Goswin von Brederlow wrote: > Signed debs establish a trust chain from the buildd to the user and > from the buildd-admin/maintainer to the user as well as copy the > existing trust chain from ftp-master to the user into the deb itself. > > The Release.gp

Re: debsums for maintainer scripts

2003-12-04 Thread Manoj Srivastava
On 04 Dec 2003 02:44:31 +0100, Goswin von Brederlow <[EMAIL PROTECTED]> said: > "Bernhard R. Link" <[EMAIL PROTECTED]> writes: >> * Manoj Srivastava <[EMAIL PROTECTED]> [031203 20:12]: >> >Before we make such a push, we should at least ensure that it >> > is something we really want to do. I

Re: debsums for maintainer scripts

2003-12-04 Thread Manoj Srivastava
On Wed, 3 Dec 2003 23:19:58 +0100, Bernhard R Link <[EMAIL PROTECTED]> said: > * Manoj Srivastava <[EMAIL PROTECTED]> [031203 20:12]: >> Before we make such a push, we should at least ensure that it is >> something we really want to do. I think locally generated checksums >> are a better solution

Bug#222894: ITP: dap -- Comprehensive audio sample editing and processing suite

2003-12-04 Thread Eric Van Buggenhaut
Package: wnpp Severity: wishlist * Package name: dap Version : 2.1.5 Upstream Author : Richard Kent <[EMAIL PROTECTED]> * URL : http://www.cee.hw.ac.uk/~richardk/ * License : GPL Description : Comprehensive audio sample editing and processing suite DAP is

Re: Bits from the RM

2003-12-04 Thread Peter S Galbraith
"Nikita V. Youshchenko" <[EMAIL PROTECTED]> wrote: >> On Tue, Dec 02, 2003 at 05:32:59PM +1100, Zenaan Harkness wrote: >>> Can "requesting removal from archive" be automated, to occur say after 3 >>> weeks of inactivity of rc/grave/serious bug? >>> >>> As a DD, I assume there is some pride and/ o

Re: Bits from the RM

2003-12-04 Thread Peter S Galbraith
Anthony Towns wrote on debian-devel-announce: > I think the best way is to > file a RFA (which we're redefining as "Request For Assistance" instead > of just "Request For Adoption") report against wnpp [cut] > Third, personnel deployment. As a complem

Re: apt-rpm article -- the features we don't have

2003-12-04 Thread Jonathan Dowland
On Wed, Dec 03, 2003 at 06:10:27PM +1100, Hamish Moffatt wrote: > On Tue, Dec 02, 2003 at 02:10:56PM +, Jonathan Dowland wrote: > > Should this be the job of apt-get? Fetching a list of build-depends is a > > similar job to that performed by apt-cache for other fields. I always > > associate ap

Re: apt-rpm article -- the features we don't have

2003-12-04 Thread Jonathan Dowland
On Wed, Dec 03, 2003 at 08:19:24AM +0100, Goswin von Brederlow wrote: > Hamish Moffatt <[EMAIL PROTECTED]> writes: > > > ... apt-get build-dep somesourcepackage" ... > > apt-get build-deb ... Just to clarify, build-dep is the proposed action rather than build-deb? -- Jon Dowland http://jon.dow

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Jonathan Dowland
On Thu, Dec 04, 2003 at 03:53:54PM +0900, Miles Bader wrote: > Sebastien Bacher <[EMAIL PROTECTED]> writes: > > I'm not sure that's a good idea. I'm using Gnome and I'd like to keep a > > simple applications' menu, not having hundred entries like in my > > debian's menu. Having too many entries in

Re: Revival of the signed debs discussion

2003-12-04 Thread Goswin von Brederlow
Andreas Barth <[EMAIL PROTECTED]> writes: > * Goswin von Brederlow ([EMAIL PROTECTED]) [031204 15:10]: > > Andreas Barth <[EMAIL PROTECTED]> writes: > > > > Ok? > > > Sounds ok but the upload rules can be tightened much much later. First > > we have to get signing started, which means fixing ap

Re: Revival of the signed debs discussion

2003-12-04 Thread Andreas Barth
* Goswin von Brederlow ([EMAIL PROTECTED]) [031204 15:10]: > Andreas Barth <[EMAIL PROTECTED]> writes: > > Ok? > Sounds ok but the upload rules can be tightened much much later. First > we have to get signing started, which means fixing apt-utils or > debsigs or preferably both. And of cause cha

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Raphael Goulais
On Thursday 04 December 2003 13:19, Andrew Suffield wrote: > > The silly question is : What does our actual menu system provide that > > shouldn't be achieved by using .desktop file ? > > > > As those are going to be a standard, we should deal with them. > > You could swap "our menu system" and ".d

Re: Revival of the signed debs discussion

2003-12-04 Thread Goswin von Brederlow
Andreas Barth <[EMAIL PROTECTED]> writes: > * Wouter Verhelst ([EMAIL PROTECTED]) [031203 23:10]: > > Op wo 03-12-2003, om 10:09 schreef Andreas Barth: > > > > > file back signed by the build admin. The debian archive scripts > > > > > accepts packages signed by a buildd-key only if it is a binary

Re: debsums for maintainer scripts

2003-12-04 Thread Goswin von Brederlow
"Bernhard R. Link" <[EMAIL PROTECTED]> writes: > * Goswin von Brederlow <[EMAIL PROTECTED]> [031204 02:46]: > > "Bernhard R. Link" <[EMAIL PROTECTED]> writes: > > > I don't think so. md5-calculation it not the fastest thing (especially > > > on non-i386 it often feels like downloading and installi

买MP3非要去中关村吗 批发商299元

2003-12-04 Thread mp3批发
请天津、北京的朋友一定来看看,如果您闲下边文字乱,请您直接点击: http://www.cityxf.com/lan2.htm或; http://www.cityxf.com/eshop ? ? 京津MP3、CD数码总批发? ?┤ ├? ?

Re: [custom] Debian Enterprise - flavors

2003-12-04 Thread Joerg Wendland
Zenaan Harkness, on 2003-12-03, 14:58, you wrote: > To give limits to Debian Enterprise/ User Linux we need to define some > areas of focus. > > Flavours (and sub-flavours/ tasks/ yadda) is as good a place to start as > any. So here are some proposed flavours: > > - Enterprise (base packages and

Re: [custom] Debian Enterprise - packages

2003-12-04 Thread David Palmer
On Thu, 2003-12-04 at 19:58, Russell Coker wrote: > On Thu, 4 Dec 2003 16:44, "David Palmer." <[EMAIL PROTECTED]> wrote: > > On Thu, 2003-12-04 at 07:04, Russell Coker wrote: > > > Please point out where the Adamantix developers expressed a willingness > > > to help in any way. > > That message wa

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Cameron Patrick
On Thu, Dec 04, 2003 at 12:19:28PM +, Andrew Suffield wrote: | On Thu, Dec 04, 2003 at 12:34:22AM +0100, Raphael Goulais wrote: | > On Wednesday 03 December 2003 21:31, Zenaan Harkness wrote: | > > I agree. I would like to see .desktop standard adopted. There have been | > > a few threads I hav

Re: Debian packages and freedesktop.org (Gnome, KDE, etc) menu entries

2003-12-04 Thread Andrew Suffield
On Thu, Dec 04, 2003 at 12:34:22AM +0100, Raphael Goulais wrote: > On Wednesday 03 December 2003 21:31, Zenaan Harkness wrote: > > I agree. I would like to see .desktop standard adopted. There have been > > a few threads I have seen so far, and there seems to be some level of > > resistance to the

Re: exim4-config and exim4-base installed on systems with non-exim-MTA

2003-12-04 Thread Andreas Barth
* Tore Anderson ([EMAIL PROTECTED]) [031203 23:55]: > * Marc Haber > > The way -config does the configuration is something that is questioned > > by a lot of people. Most conservative eximists hate the configuration > > being split out in several files, > Absolutely, this is a slight conven

Re: Revival of the signed debs discussion

2003-12-04 Thread Andreas Barth
* Wouter Verhelst ([EMAIL PROTECTED]) [031203 23:10]: > Op wo 03-12-2003, om 10:09 schreef Andreas Barth: > > > > file back signed by the build admin. The debian archive scripts > > > > accepts packages signed by a buildd-key only if it is a binary package > > > > for this architecture, the key is

Re: debsums for maintainer scripts

2003-12-04 Thread Bernhard R. Link
* Goswin von Brederlow <[EMAIL PROTECTED]> [031204 02:46]: > "Bernhard R. Link" <[EMAIL PROTECTED]> writes: > > I don't think so. md5-calculation it not the fastest thing (especially > > on non-i386 it often feels like downloading and installing together > > needs less time than the md5sum-verifica

Re: debsums for maintainer scripts

2003-12-04 Thread Eduard Bloch
#include * Manoj Srivastava [Wed, Dec 03 2003, 04:19:59AM]: > > - current md5sums file in control.tar.gz should contain checksums of > >really all files > > Hard to do for conffiles. Now, if the md5sums were generated Then only add the m5sums of the control.tar.gz contents and add it

Re: [custom] Debian Enterprise - packages

2003-12-04 Thread Russell Coker
On Thu, 4 Dec 2003 16:44, "David Palmer." <[EMAIL PROTECTED]> wrote: > On Thu, 2003-12-04 at 07:04, Russell Coker wrote: > > Please point out where the Adamantix developers expressed a willingness > > to help in any way. That message was intentionally to you not the list. Now we will have another

Re: Bits from the RM

2003-12-04 Thread Rene Mayrhofer
Anthony Towns wrote: * #203339 - freeswan - Rene Mayrhofer FTBFS, patch in the bug log since July, no further activity I feel that I need to respond to that, after being mentioned here :) I fully admit that I have simply overlooked this one, because it is very easy to fix (and in

Re: [custom] The term "flavor" and encouraging work on Debian

2003-12-04 Thread VEROK Istvan
> I don't mean any offense to you or your terms but I think that the > major source of the confusion is not the the imprecision of the terms > because (as other have pointed out) all terms are imprecise. The major > problem is the *number* of these terms. Adding one or two more, even > with their

Re: [RFC] adding system users: which is the best way??

2003-12-04 Thread Andreas Metzler
Zenaan Harkness <[EMAIL PROTECTED]> wrote: > On Thu, 2003-12-04 at 01:51, Andreas Metzler wrote: [...] >> The problem with this is time. I need to add a system-user (for exim4) >> _now_. Shall I go for namespace, and if yes which one? _debian-exim, >> debian-dexim, DEB-exim? > This might be pointi

  1   2   >