On Fri, 17 Aug 2007 12:35:30 +0200, Romain Francoise
<[EMAIL PROTECTED]> said:
> Manoj Srivastava <[EMAIL PROTECTED]>
>angband angband-doc c2man calc flex-old flex-old-doc
>libgraphics-colordeficiency-perl libgraphics-colornames-perl
>libgraphics-colorobject-perl libmodule-load-perl
Russ Allbery schrieb:
> Sven Mueller <[EMAIL PROTECTED]> writes:
>
>> If it is created on install, why is it in the packages filelist in the
>> first place? Other packages also generate (supposedly architecture
>> dependend) files during postinst, without shipping a placeholder in the
>> .deb - so
[Joey Hess]
> It's even easier to do:
>
> dpkg --fsys-tarfile $deb | tar -C / -d
Ha. I didn't know about tar -d. Yes, that is even better.
> However, not all machines have the luxury of being able to store the
> orignal .debs in /var, or of being able to redownload the same debs.
Indeed, but
On Fri, Aug 17, 2007 at 08:23:38PM -0400, Joey Hess wrote:
>> I'd opt for dpkg generating the checksums upon _extracting_ the .deb
>> file.
> Not all debian systems have fast CPU and fast disk.
I could understand the fast CPU argument, but there's no good reason why
MD5ing at extraction time would
Peter Samuelson wrote:
> I'd opt for dpkg generating the checksums upon _extracting_ the .deb
> file.
Not all debian systems have fast CPU and fast disk.
--
see shy jo
signature.asc
Description: Digital signature
Peter Samuelson wrote:
> The thing is, if you're checking your system, you have to have
> something to check it against. If this is the md5sums file in
> /var/lib/dpkg/info, it doesn't matter whether it's included in the
> package. But if you're using the copy from the .deb (because, say, you
> d
On Sat, Aug 18, 2007 at 01:27:45AM +0200, Sven Mueller wrote:
> > The hash file, which is architecture dependend, is created on install.
> > This is the only file in the package that is architecture dependend.
>
> If it is created on install, why is it in the packages filelist in the
> first place
On Fri, Aug 17, 2007 at 11:21:35AM -0400, Felipe Sateler wrote:
> > It's not a question of being able to parse the file, it's that
> > "libcsnd.so"
> > is not a proper name for a shared library. dpkg-shlibdeps is warning you
> > about what appears to be a genuine bug in one of the libraries your
[Russ Allbery]
> While it's not the be-all and end-all of security, other OS vendors
> (Sun in particular) have found it useful to make available a central
> database of MD5 checksums of known-good versions of various binaries.
H. As far as being authoritative (and cryptographically secure),
Peter Samuelson <[EMAIL PROTECTED]> writes:
> I'd opt for dpkg generating the checksums upon _extracting_ the .deb
> file. We already claim that the md5sums file isn't supposed to be any
> kind of security thing. Why bother to ship it? It is redundant
> information which can easily be regenerat
Sven Mueller <[EMAIL PROTECTED]> writes:
> If it is created on install, why is it in the packages filelist in the
> first place? Other packages also generate (supposedly architecture
> dependend) files during postinst, without shipping a placeholder in the
> .deb - so what is the reason why [ia]sp
On Fri, Aug 17, 2007 at 05:05:28PM -0500, Peter Samuelson wrote:
> I'd opt for dpkg generating the checksums upon _extracting_ the .deb
> file. [...]
Where's the code for that?
Changing write_filelist_except to update a new .md5 control file ought to
be possible. You'd probably want to add a *ne
pe, 2007-08-17 kello 10:12 -0700, Russ Allbery kirjoitti:
> Some packages (aspell and ispell packages in particular) ship files that
> they then modify in maintainer scripts and intentionally exclude them from
> the md5sums file for that reason. lintian has special code to deal with
> this case.
pe, 2007-08-17 kello 17:05 -0500, Peter Samuelson kirjoitti:
> I'd opt for dpkg generating the checksums upon _extracting_ the .deb
> file. We already claim that the md5sums file isn't supposed to be any
> kind of security thing. Why bother to ship it? It is redundant
> information which can eas
Kurt Roeckx schrieb:
> On Fri, Aug 17, 2007 at 11:25:38AM -0700, Russ Allbery wrote:
Some packages (aspell and ispell packages in particular) ship files
that they then modify in maintainer scripts and intentionally exclude
them from the md5sums file for that reason.
>
> The hash fi
[Lars Wirzenius]
> It strikes me that if we want to make it policy, having dpkg generate
> the checksums upon creating the .deb would be the simplest and best
> way to do it.
I'd opt for dpkg generating the checksums upon _extracting_ the .deb
file. We already claim that the md5sums file isn't s
Package: wnpp
Severity: wishlist
Owner: Damyan Ivanov <[EMAIL PROTECTED]>
* Package name: libfilter-eof-perl
Version : 0.04
Upstream Author : Robert 'phaylon' Sedlacek - "<[EMAIL PROTECTED]>"
* URL : http://www.cpan.org/authors/id/P/PH/PHAYLON/
* License : same
[EMAIL PROTECTED] dijo [Fri, Aug 17, 2007 at 12:26:43AM -0600]:
> The following packages have been orphaned:
>
>mod-xinerama-for-ion (#438446), orphaned today
> Description: Xinerama support for the Ion3 window manager
> Installations reported by Popcon: 7
Wouldn't it be better to r
On Fri, 17 Aug 2007, Mike Hommey wrote:
> On Thu, Aug 16, 2007 at 07:34:51PM -0700, Don Armstrong <[EMAIL PROTECTED]>
> wrote:
> > On Fri, 17 Aug 2007, Junichi Uekawa wrote:
> > > HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many
> > > applications within Debian.
> > >
> > > There is a we
On Fri, Aug 17, 2007 at 11:25:38AM -0700, Russ Allbery wrote:
>
> >> Some packages (aspell and ispell packages in particular) ship files
> >> that they then modify in maintainer scripts and intentionally exclude
> >> them from the md5sums file for that reason. lintian has special code
> >> to dea
Kurt Roeckx <[EMAIL PROTECTED]> writes:
> On Fri, Aug 17, 2007 at 10:12:07AM -0700, Russ Allbery wrote:
>> Lars Wirzenius <[EMAIL PROTECTED]> writes:
>>> It strikes me that if we want to make it policy, having dpkg generate
>>> the checksums upon creating the .deb would be the simplest and best wa
On Fri, Aug 17, 2007 at 10:12:07AM -0700, Russ Allbery wrote:
> Lars Wirzenius <[EMAIL PROTECTED]> writes:
>
> > It strikes me that if we want to make it policy, having dpkg generate
> > the checksums upon creating the .deb would be the simplest and best way
> > to do it. This way we wouldn't have
Roland Mas <[EMAIL PROTECTED]> writes:
> Maybe add a lintian/linda test? Maybe add that to Lina
> (http://asdfasdf.debian.net/~tar/lina/)?
There's already a lintian test. It's just only info-level because last
time I had checked there wasn't project consensus that md5sums should be
required.
Lars Wirzenius <[EMAIL PROTECTED]> writes:
> It strikes me that if we want to make it policy, having dpkg generate
> the checksums upon creating the .deb would be the simplest and best way
> to do it. This way we wouldn't have to change packages to do it, and if
> we ever want to change the format
Hi,
> > HTTP_PROXY, or http_proxy (and ftp_proxy) is used in many
> > applications within Debian.
> >
> > There is a well-known remote attack using HTTP_* variables can be
> > set to arbitrary values for CGI scripts, and thus there is a need
> > for protection against that.
>
> Is there any reas
Hi,
> The boost library short name has changed semantics in Debian. Prior
> to 1.34.0-1, the short name was multi-threaded. Now it is single
> threaded.
Thanks for the note!
I see this is a lot of effort going on to get inter-distribution
compatibility. It's great work of coordionation, thanks
Processing commands for [EMAIL PROTECTED]:
> retitle 436520 There is no policy on HTTP_PROXY variable
Bug#436520: apt-listbugs: does not work with $http_proxy
Changed Bug title to `There is no policy on HTTP_PROXY variable' from
`apt-listbugs: does not work with $http_proxy'.
(By the way, that Bu
Steve Langasek wrote:
> On Fri, Aug 17, 2007 at 12:41:31AM -0400, Felipe Sateler wrote:
>> I'm getting this warning when building csound:
>
>> dpkg-shlibdeps: warning: format of 'NEEDED libcsnd.so' not recognized
>
>> What does it mean and how can I fix it? man dpkg-shlibdeps doesn't say
>> anyt
On Tue, Aug 14, 2007 at 07:55:36PM +0100, Marcin Owsiany wrote:
> The only metadata available seems to be the Content-type field of the
> header in the original po file, but I can't see how to enforce it for
> the temporary file...
I'm not sure if this helps, but when I have to work with ISO-885
Romain Francoise wrote:
> Daniel Baumann <[EMAIL PROTECTED]>
>lib32ncurses5
>lib32ncurses5-dev
>libncurses5
>libncurses5-dbg
>libncurses5-dev
>libncursesw5
>libncursesw5-dbg
>libncursesw5-dev
>ncurses-base
>ncurses-bin
>ncurses-term
fixed, thanks.
--
A
At Fri, 17 Aug 2007 08:24:29 +0900,
Junichi Uekawa wrote:
>
> > > >
> > > > Please provide information to where this bug is solved before closing
> > > > it. Reading this "resolved" bug gives me absolutely no hint on how to
> > > > fix this problem.
> > >
> > > Is it not fixed yet for you?
> > >
Package: wnpp
Severity: wishlist
Owner: Francesco Namuri <[EMAIL PROTECTED]>
Package name: gnome-video-arcade
Version : 0.4.2
Upstream Author : Matthew Barnes <[EMAIL PROTECTED]>
URL : http://sourceforge.net/projects/gva/
License : GPL
Programming Lang:
On Fri, Aug 17, 2007 at 11:58:14AM +, Marc 'HE' Brockschmidt wrote:
> Lars Wirzenius <[EMAIL PROTECTED]> writes:
> > pe, 2007-08-17 kello 10:07 +0200, Romain Francoise kirjoitti:
> >> It seems to me that the time spent to generate it on the buildds is
> >> probably insignificant compared to the
On Fri, Aug 17, 2007 at 12:56:14PM +0200, Romain Francoise wrote:
> > I would be happy to receive in a bug report about what it fails to
> > parse.
> Yep, it was sitting in my outbox and I've just sent it:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=438486
Thanks, this is now fixed in the
On 17-08-2007, Daniel Leidert <[EMAIL PROTECTED]> wrote:
> Am Freitag, den 17.08.2007, 12:11 +0200 schrieb Carl Fürstenberg:
>> On 8/17/07, Sylvain Le Gall <[EMAIL PROTECTED]> wrote:
>
> [..]
>> > Maybe you could split the thing as this :
>> > * define a debian/XXX.docbookxmlmanpages file, it conta
On Fri, Aug 17, 2007 at 01:58:14PM +0200, Marc 'HE' Brockschmidt wrote:
> Yes, that sounds like a good idea.
Agreed. But needs someone willing to patch dpkg for that: volunteers?
> It might also be interesting to not put those into the control.tar.gz,
> but directly into the deb, so that it can e
Stefano Zacchiroli, 2007-08-17 12:43:55 +0200 :
> On Fri, Aug 17, 2007 at 12:35:30PM +0200, Romain Francoise wrote:
>> For the record, the list of binary packages without md5sums
>
> Can you please upload this to people.debian.org or somewhere, and
> maybe keep it periodically updated? I guess it
Lars Wirzenius <[EMAIL PROTECTED]> writes:
> pe, 2007-08-17 kello 10:07 +0200, Romain Francoise kirjoitti:
>> It seems to me that the time spent to generate it on the buildds is
>> probably insignificant compared to the total time needed to build
>> the package... And since generating it can be do
Package: wnpp
Severity: wishlist
Owner: Alexis Sukrieh <[EMAIL PROTECTED]>
* Package name: libnamespace-clean-perl
Version : 0.05
Upstream Author : Robert 'phaylon' Sedlacek <[EMAIL PROTECTED]>
* URL
:http://search.cpan.org/~phaylon/namespace-clean-0.05/lib/namespace/
On Fri, 17 Aug 2007 12:35:30 +0200, Romain Francoise wrote:
> Debian Perl Group <[EMAIL PROTECTED]>
>libchemistry-elements-perl
>libdbd-odbc-perl
>libdigest-hmac-perl
>libmath-combinatorics-perl
>libmath-derivative-perl
>libmath-numbercruncher-perl
>libmath-spline-perl
Package: wnpp
Severity: wishlist
Owner: Alexis Sukrieh <[EMAIL PROTECTED]>
* Package name: libmoosex-object-pluggable-perl
Version : 0.0005
Upstream Author : Guillermo Roditi, <[EMAIL PROTECTED]>
* URL :
http://search.cpan.org/~groditi/MooseX-Object-Pluggable-0.0005/l
Package: wnpp
Severity: wishlist
Owner: Alexis Sukrieh <[EMAIL PROTECTED]>
* Package name: libmoosex-getopt-perl
Version : 0.05
Upstream Author : Stevan Little <[EMAIL PROTECTED]>,
Brandon L. Black, <[EMAIL PROTECTED]>
* URL :
http://search.cpan.o
Package: wnpp
Severity: wishlist
Owner: Alexis Sukrieh <[EMAIL PROTECTED]>
* Package name: liblexical-persistence-perl
Version : 0.97
Upstream Author : Rocco Caputo
* URL :
http://search.cpan.org/~rcaputo/Lexical-Persistence-0.97/lib/Lexical/Persistence.pm
* License
Package: wnpp
Severity: wishlist
Owner: Alexis Sukrieh <[EMAIL PROTECTED]>
* Package name: libdevel-repl-perl
Version : 1.001000
Upstream Author : Matt S Trout <[EMAIL PROTECTED]>
* URL :
http://search.cpan.org/~mstrout/Devel-REPL-1.001000/lib/Devel/REPL.pm
* License
Package: wnpp
Severity: wishlist
Owner: Alexis Sukrieh <[EMAIL PROTECTED]>
* Package name: libdata-dump-streamer-perl
Version : 2.03-30
Upstream Author : Yves Orton <[EMAIL PROTECTED]>
* URL :
http://search.cpan.org/~yves/Data-Dump-Streamer-2.03-30/lib/Data/Dump/Strea
Stefano Zacchiroli <[EMAIL PROTECTED]> writes:
> Can you please upload this to people.debian.org or somewhere, and maybe
> keep it periodically updated? I guess it would be useful for the sake
> of deciding what to do.
No problem, will do.
> Are you using the "debian_bundle.debfile" module for
* Romain Francoise [Fri, 17 Aug 2007 12:35:30 +0200]:
> Adeodato Simó <[EMAIL PROTECTED]>
>amarok-engines
This is a false positive. The package only ships /usr/share/doc/amarok-engines,
which is a symlink.
Cheers,
--
Adeodato Simó dato at net.com.org.es
On Fri, Aug 17, 2007 at 12:35:30PM +0200, Romain Francoise wrote:
> For the record, the list of binary packages without md5sums
Can you please upload this to people.debian.org or somewhere, and maybe
keep it periodically updated? I guess it would be useful for the sake
of deciding what to do.
>
Lars Wirzenius <[EMAIL PROTECTED]> writes:
> There's also a number of packages packaged without using
> debhelper.
Yep, that's what prompted me to look into this, I recently added
md5sums to rcs which doesn't use debhelper.
For the record, the list of binary packages without md5sums (give or
tak
Am Freitag, den 17.08.2007, 12:11 +0200 schrieb Carl Fürstenberg:
> On 8/17/07, Sylvain Le Gall <[EMAIL PROTECTED]> wrote:
[..]
> > Maybe you could split the thing as this :
> > * define a debian/XXX.docbookxmlmanpages file, it contains all
> > the toplevel xml file to install (firt column) and
On 8/17/07, Sylvain Le Gall <[EMAIL PROTECTED]> wrote:
> On 17-08-2007, Carl Fürstenberg <[EMAIL PROTECTED]> wrote:
> > On 8/17/07, Sylvain Le Gall <[EMAIL PROTECTED]> wrote:
> >> Hello,
> >>
> >> I just read your script which is quite interesting. I am working on a
> >> CDBS class for managing doc
On 17-08-2007, Carl Fürstenberg <[EMAIL PROTECTED]> wrote:
> On 8/17/07, Sylvain Le Gall <[EMAIL PROTECTED]> wrote:
>> Hello,
>>
>> I just read your script which is quite interesting. I am working on a
>> CDBS class for managing docbook-xml generated manpage and po4a
>> translation of it. For now,
On 8/17/07, Sylvain Le Gall <[EMAIL PROTECTED]> wrote:
> Hello,
>
> I just read your script which is quite interesting. I am working on a
> CDBS class for managing docbook-xml generated manpage and po4a
> translation of it. For now, it works quite well and i have tested it in
> some of my packages.
Hello,
I just read your script which is quite interesting. I am working on a
CDBS class for managing docbook-xml generated manpage and po4a
translation of it. For now, it works quite well and i have tested it in
some of my packages. You can have a look at this here:
http://svn.debian.org/wsvn/pkg
pe, 2007-08-17 kello 10:58 +0200, Stefano Zacchiroli kirjoitti:
> I fail to see any of those. I think that most of the packages without
> the md5sums just happen to have been packaged before dh_md5sums was
> available,
There's also a number of packages packaged without using debhelper.
(Mine is, u
Hi,
Unfortunately, there was no answer about this licensing issue.
Alan
> Hi,
>
> On Thursday 09 August 2007 10:03, Christian Perrier wrote:
>> > > > No, we should use the liberation fonts, which are designed to
>> replace
>> > > > the MS fonts.
>> > > Have their licensing issues been solved?
>
pe, 2007-08-17 kello 10:07 +0200, Romain Francoise kirjoitti:
> It seems to me that the time spent to generate it on the buildds is
> probably insignificant compared to the total time needed to build
> the package... And since generating it can be done with a trivial
> shell command, it's not a co
On Fri, Aug 17, 2007 at 10:07:36AM +0200, Romain Francoise wrote:
> Thanks for initiating the discussion! :-)
Well, no, thank you, it's actually you who initiated the discussion :)
> One thing I've been pondering about is: are there any good reasons
> *not* to have an md5sums control file?
I fai
Stefano Zacchiroli <[EMAIL PROTECTED]> writes:
> [ fully quoting my original request, for the sake of context
> preservation ]
Thanks for initiating the discussion! :-)
> On Fri, Aug 17, 2007 at 09:04:13AM +0200, Luk Claes wrote:
>>
>> With more than 600 issues, it's a bit early to make it a r
Hi,
On Thursday 09 August 2007 10:03, Christian Perrier wrote:
> > > > No, we should use the liberation fonts, which are designed to replace
> > > > the MS fonts.
> > > Have their licensing issues been solved?
Have those issues been communicated to upstream and what is their reaction?
The ITP in
Package: wnpp
Severity: wishlist
Owner: Mario Iseli <[EMAIL PROTECTED]>
* Package name: i-doit
Version : 0.9
Upstream Author : Joachim Winkler
Markus Wolfff
Daniel Kirsten
Niclas Potthast
Dennis Stuecke
[ fully quoting my original request, for the sake of context
preservation ]
On Fri, Aug 17, 2007 at 09:04:13AM +0200, Luk Claes wrote:
> Stefano Zacchiroli wrote:
>> [ Assuming is not too late to propose release goals of course ]
>> Hi, a long time ago we were wondering to have DEBIAN/md5sums ge
62 matches
Mail list logo
