Re: Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Robert Holtzm
On Sat, Aug 24, 2013 at 11:45:54PM +0200, Thomas Hood wrote: ...snip.. > > Here I assume that U.S. law is not so draconian that it can require someone > who has contributed to Debian (and who is therefore trusted) to continue > doing so. Don't be too sure. The owner of, I believe,

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Raphael Hertzog
Hi, On Sat, 24 Aug 2013, Ian Jackson wrote: > Did you know that dpkg-source doesn't notice if sensible-editor exits > nonzero ? I saw it when looking up the exact details to write my former reply. But since at that point all the changes are already applied (and the editor only allows you to chan

Re: Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Philip Ashmore
On 24/08/13 22:58, Russ Allbery wrote: > Thomas Hood writes: > >> If a Debian contributor were faced with a demand to do something that >> undermines the privacy or other interests of Debian users then I would >> hope and expect that the contributor would choose instead to cease being >> a contri

Re: Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Russ Allbery
Thomas Hood writes: > If a Debian contributor were faced with a demand to do something that > undermines the privacy or other interests of Debian users then I would > hope and expect that the contributor would choose instead to cease being > a contributor. Were he not to do so then he would have

Re: Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Thomas Hood
"We will be guided by the needs of our users and the free software community. We will place their interests first in our priorities." If a Debian contributor were faced with a demand to do something that undermines the privacy or other interests of Debian users then I would hope and expect that th

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Guillem Jover
On Sat, 2013-08-24 at 17:40:00 +0100, Ian Jackson wrote: > Did you know that dpkg-source doesn't notice if sensible-editor exits > nonzero ? Nope, thanks I've just fixed this locally now, will be included in dpkg 1.17.2. Thanks, Guillem -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.de

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Joey Hess
Ian Jackson wrote: > Maybe there should be a way to make the dgit-repos tree a symlink to > the collab-maint tree. Of course doing that would make it impossible > ever to sever the two services. I suspect you can manually remove the collab-maint repository and symlink it to the dgit-repos reposit

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Ian Jackson writes ("Introducing dgit - git integration with the Debian archive"): > I'm pleased to announce that dgit 0.7, which is a version of dgit > suitable for alpha and beta testers, is available in unstable. I've just uploaded 0.9. Thanks for the offers of packages for testing. I think

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Ian Jackson writes ("Re: Introducing dgit - git integration with the Debian archive"): > It turns out that I lied and the thing did go to unstable :-/. > > I will replace it with something looking like a reasonable NMU. > (The version in unstable is not broken; it just has a pointless change > to

Re: Custom Reload command/signal in upstart

2013-08-24 Thread Henrique de Moraes Holschuh
On Fri, 23 Aug 2013, John Paul Adrian Glaubitz wrote: > No, it's not. It's the only reasonable thing to do. Nothing is safer > than a daemon which is *not* running. The fewer services are running, A daemon which is not running but which can be made to run by an unpriviledged connect() is as good a

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Ian Jackson writes ("Re: Introducing dgit - git integration with the Debian archive"): > I took you up on this. I'll send the autopkgtest diff to the BTS. It turns out that I lied and the thing did go to unstable :-/. I will replace it with something looking like a reasonable NMU. (The version

Bug#720709: ITP: ruby-pcaprub -- Ruby bindings for LBL Packet Capture library (libpcap)

2013-08-24 Thread Jérémy Bobbio
Package: wnpp Severity: wishlist Owner: Jérémy Bobbio Control: block 719297 by -1 * Package name: ruby-pcaprub Version : 0.11.3-1 Upstream Author : shadowbq * URL : https://github.com/shadowbq/pcaprub * License : LGPL-2 Programming Lang: Ruby Description

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Raphael Hertzog writes ("Re: Introducing dgit - git integration with the Debian archive"): > This is wrong on so many levels... I don't think we are going to agree. I stand by the description in the dgit manpage. > > I will RTFM to use it in some noninteractive way by generating the > > argumen

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Raphael Hertzog
On Sat, 24 Aug 2013, Ian Jackson wrote: > > Well doing the right things with "3.0 (quilt)" means (for most people) > > to keep the source package tree actually usable with quilt, so actually > > recording "non-quilt managed" changes in a new quilt patch. > > IMO the design should have been that th

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Niels Thykier writes ("Re: Introducing dgit - git integration with the Debian archive"): > If you promise to add autopkgtest for it, you can use any of my > packages[1]. :P ... > [1] Any of which I am the sole maintainer. E.g. mscgen. I took you up on this. I'll send the autopkgtest diff to the

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Ian Jackson writes ("Re: Introducing dgit - git integration with the Debian archive"): > stable's dpkg-source doesn't even have this damned option! Sorry, my mistake. I was tricked by #708163. Ian. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of "unsubscri

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
Ian Jackson writes ("Re: Introducing dgit - git integration with the Debian archive"): > [Raphael:] > > dpkg-source --commit adds a new patch in debian/patches/, it adds the > > corresponding quilt metadata, and it might also modify > > debian/source/include-binaries in case you have (modified/new)

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Ian Jackson
(reordered slightly) Thanks for the information. Raphael Hertzog writes ("Re: Introducing dgit - git integration with the Debian archive"): > On Fri, 23 Aug 2013, Ian Jackson wrote: > > Ie: > > (i) dpkg-source -b should be able to run on any reasonable tree > > (ii) dpkg-source -b should not m

Re: Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Ben Hutchings
On Sat, 2013-08-24 at 14:51 +0200, Erich Schubert wrote: > Hello all, > Prism, NSA, Guardian etc. - I assume all of you have been following > these reports, and otherwise you definitely should start reading the > news. > > One thing that apparently has been happening a lot these days are > secret

Re: overriding udev rules

2013-08-24 Thread Ben Hutchings
On Sat, 2013-08-24 at 12:34 +0200, Thomas Goirand wrote: > On 08/22/2013 03:12 AM, Peter Samuelson wrote: > > > > [Thomas Goirand] > >> Oh ok. Not useful at all if you ask me. Why? Because sometimes, you > >> can't change the MAC address. For example, if you use the OpenStack > >> bare metal drive

Bug#714212: which xserver?

2013-08-24 Thread Holger Levsen
reassign 714212 xserver-xorg-video-nouveau tags 714212 +moreinfo thanks Hi Cyril, thanks for your bugreport. Can you please mail /var/log/Xorg.0.log and the output of "dpkg -l|grep xserver" to 714...@bugs.debian.org? Thanks already, Holger signature.asc Description: This is a digital

Processed: which xserver?

2013-08-24 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > reassign 714212 xserver-xorg-video-nouveau Bug #714212 [general] general: Screen goes to sleep after authentication (Wheezy) Bug reassigned from package 'general' to 'xserver-xorg-video-nouveau'. Ignoring request to alter found versions of bug #7

Re: Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Wookey
+++ Erich Schubert [2013-08-24 14:51 +0200]: > What I'd like to see is that for all packages (at least for all > security relevant packages, including kernel, SSH, GPG, OpenSSL) every > package is compiled multiple times, and checksums to verify that none > of the build systems were compromised.

Preventing government subversion in Debian, verification of binary package uploads

2013-08-24 Thread Erich Schubert
Hello all, Prism, NSA, Guardian etc. - I assume all of you have been following these reports, and otherwise you definitely should start reading the news. One thing that apparently has been happening a lot these days are secret court orders in the U.S. For example Google apparently was forced to in

Re: overriding udev rules

2013-08-24 Thread Thomas Goirand
On 08/22/2013 03:12 AM, Peter Samuelson wrote: > > [Thomas Goirand] >> Oh ok. Not useful at all if you ask me. Why? Because sometimes, you >> can't change the MAC address. For example, if you use the OpenStack >> bare metal driver, then you continue to use virtual machine images, >> though they wi

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Raphael Hertzog
On Fri, 23 Aug 2013, Ian Jackson wrote: > Bastien ROUCARIES writes ("Re: Introducing dgit - git integration with the > Debian archive"): > > Le 22 août 2013 21:52, "Ian Jackson" a > > écrit : > > > I'm pleased to announce that dgit 0.7, which is a version of dgit > > > suitable for alpha and beta

Re: Introducing dgit - git integration with the Debian archive

2013-08-24 Thread Raphael Hertzog
Hi, On Fri, 23 Aug 2013, Ian Jackson wrote: > > Well, by default step 3 fails if you have upstream changes. > > I'm not sure what you mean by "upstream changes". Do you mean changes > outside the Debian directory ? Yes. This was discussed on debian-devel and it was considered to be a better def