Re: goals for hardening Debian: ideas and help wanted

2014-04-28 Thread Guido Günther
On Tue, Apr 29, 2014 at 11:35:26AM +0800, Paul Wise wrote: > On Tue, Apr 29, 2014 at 8:07 AM, Marko Randjelovic wrote: > > > - security patches should be clearly marked as such in every *.patch > > file > > That sounds like a good idea, could you add it to the wiki page? It's not always easy t

make 4.0: archive rebuild resulted in 73 packages broken (help wanted)

2014-04-28 Thread Manoj Srivastava
Hi, David Suárez kindly did an archive rebuild with the new version of make in experimental, and the results of the build are at: http://aws-logs.debian.net/ftbfs-logs/results-make4/ The summary: 73 packages have failed, though not all seem obviously related to make. Out of

Re: Source Requirements

2014-04-28 Thread Ben Finney
Scott Kitterman writes: > Recently there have been a number of questions about source > requirements for the Debian archive. The FTP master view of this [is:] > We consider source packages to be part of the Debian system and as > such all files in source packages must come with their source as >

Re: goals for hardening Debian: ideas and help wanted

2014-04-28 Thread Paul Wise
On Tue, Apr 29, 2014 at 8:07 AM, Marko Randjelovic wrote: > - security patches should be clearly marked as such in every *.patch > file That sounds like a good idea, could you add it to the wiki page? > - easy create and run programs from chroot and alternate users Could you detail what you m

Re: Release upgrade, menu downgrade

2014-04-28 Thread Paul Wise
On Tue, Apr 29, 2014 at 7:40 AM, Peter wrote: > Debian-devel team, Your post doesn't seem to be on-topic here, probably debian-user or the GNOME community would be best. > a full-featured desktop menu. By full-featured menu you appear to mean a hierarchical menu instead of a searchable flat men

Re: Gcc and undefined behavior

2014-04-28 Thread Paul Wise
On Tue, Apr 29, 2014 at 12:45 AM, Thorsten Glaser wrote: > Plus, crashing in a screensaver is bad :D Only if the screensaver or the thing that runs it is written without the possibility of crashes in mind. -- bye, pabs http://wiki.debian.org/PaulWise -- To UNSUBSCRIBE, email to debian-devel

Re: goals for hardening Debian: ideas and help wanted

2014-04-28 Thread Jacob Appelbaum
On 4/25/14, Kevin Chadwick wrote: > previously on this list Paul Wise contributed: > >> I have written a non-exhaustive list of goals for hardening the Debian >> distribution, the Debian project and computer systems of the Debian >> project, contributors and users. >> >> https://wiki.debian.org/Ha

Re: goals for hardening Debian: ideas and help wanted

2014-04-28 Thread Marko Randjelovic
On Thu, 24 Apr 2014 10:57:39 +0800 Paul Wise wrote: > Hi all, > > I have written a non-exhaustive list of goals for hardening the Debian > distribution, the Debian project and computer systems of the Debian > project, contributors and users. > > https://wiki.debian.org/Hardening/Goals > > If y

Release upgrade, menu downgrade

2014-04-28 Thread Peter
Debian-devel team, On the Web page announcing extended support for Debian 6, you state "Users ... are encouraged to upgrade to Debian 7 (“wheezy”)". Well, I tried Debian 7 on my desktop PCs and laptops. My first and strongest impression was of the menu. It is a dumbed-down Ubuntu / Windows 8 st

Re: Gcc and undefined behavior

2014-04-28 Thread Vincent Lefevre
On 2014-04-28 16:45:56 +, Thorsten Glaser wrote: > Shachar Shemesh debian.org> writes: > > > the changes there is a runtime check for undefined behavior. Just > > compile with -fsanitize=undefined, and your program will crash with > > log if it performs an operation that C/C++ con

mips64el: FTBFS list and buildlogs

2014-04-28 Thread Yunqiang Su
After more than 2 month rebuild, we have more than 7k packages built successfully, and more than 1k in queue, and it will be more with the process of build. You can get the buildlogs from http://mips.wicp.net:9998/mips2/buildlog/ The FTBFS list (aka attempted in sbuild) can be get from ht

Bug#746302: ITP: phpunit-git -- simple wrapper for Git

2014-04-28 Thread David Prévot
Package: wnpp Severity: wishlist Owner: David Prévot Control: block 746293 by -1 * Package name: phpunit-git Version : 1.2.0 Upstream Author : Sebastian Bergmann * URL : https://github.com/sebastianbergmann/finder-facade * License : BSD-3-clause Programming

Re: Bug#745872: ITP: profanity -- a console based XMPP client

2014-04-28 Thread Clint Adams
On Mon, Apr 28, 2014 at 10:15:32PM +0200, Jeroen Dekkers wrote: > Please use a wording that also grants permission to link to forks of > OpenSSL such as LibreSSL, in case LibreSSL or another fork is > preferred over OpenSSL in the future. You can take wget as an example: No, please use a more secu

Re: Bug#745872: ITP: profanity -- a console based XMPP client

2014-04-28 Thread Jeroen Dekkers
At Sun, 27 Apr 2014 08:22:59 +0200, Dariusz Dwornikowski wrote: > > > Dariusz Dwornikowski writes: > > > > >> PKG_CHECK_MODULES([openssl], [openssl], [], > > >> [AC_MSG_ERROR([openssl is required for profanity])]) > > >> > > >> The resulting binary cannot be distributed. > > > > > Could Yo

Re: New Cinnamon Maintainer, looking for help

2014-04-28 Thread Matteo F. Vescovi
Hi! On Apr 26, 2014 4:26 PM, "Maximiliano Curia" wrote: > > Hi, > > Cinnamon is a desktop environment based on GNOME, but with a different > shell and some other replaced parts (screensaver, file manager, system > settings, etc). It was created by Linux Mint, but it's independent of > the distri

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Barry Warsaw
On Apr 28, 2014, at 01:12 PM, Felipe Sateler wrote: >Both soappy and fpconst seem dead upstream, which makes option 2 more >attractive, but it looks like the soap implementations in python3 do >not get along very well with debbugs, as Jordan notes. A REST API would be fantastic. The best REST li

Bug#746294: ITP: pyotherside -- Asynchronous Python 3 Bindings for Qt 5

2014-04-28 Thread Zygmunt Krynicki
Package: wnpp Severity: wishlist Owner: Zygmunt Krynicki * Package name: pyotherside Version : 1.2.0 Upstream Author : Thomas Perl * URL : http://thp.io/2011/pyotherside/ * License : BSD Programming Lang: C++ Description : Asynchronous Python 3 Binding

Bug#746293: ITP: php-loc -- tool for quickly measuring the size of a PHP project

2014-04-28 Thread David Prévot
Package: wnpp Severity: wishlist Owner: David Prévot Control: block 744876 by -1 * Package name: php-loc Version : 2.0.4 Upstream Author : Sebastian Bergmann * URL : https://github.com/sebastianbergmann/phploc * License : BSD-3-clause Programming Lang: PHP

Re: concurrent installation of different pkg versions

2014-04-28 Thread Jonas Smedegaard
Quoting Daniel Pocock (2014-04-28 20:10:09) > On 28/04/14 18:59, Gunnar Wolf wrote: > > Paul Wise dijo [Sat, Apr 26, 2014 at 11:41:17AM +0800]: > >>> a generalized approach is needed. > >> > >> Multiple versions of a package seems undesirable to me, for the > >> same reasons as static libraries an

Re: debconf reconfiguration from postinst of another package

2014-04-28 Thread Jonas Smedegaard
Quoting Thorsten Glaser (2014-04-28 19:22:11) > Jonas Smedegaard jones.dk> writes: > >> Please elaborate what you mean can "trigger later". >> >> Simple example: Choosing via debconf to have adduser create homes >> below "/srv/home" instead of the default "/home". > > Ah, sure. > > Admin installs

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Jordan Metzmeier
On Mon, Apr 28, 2014 at 12:12 PM, Felipe Sateler wrote: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=732644 > > Reportbug uses debianbts, and debianbts in turn uses soappy. So it all > depends on either porting soappy (and fpconst, used by soappy) to > python3 or porting debianbts away fr

Re: concurrent installation of different pkg versions

2014-04-28 Thread Daniel Pocock
On 28/04/14 18:59, Gunnar Wolf wrote: > Paul Wise dijo [Sat, Apr 26, 2014 at 11:41:17AM +0800]: >>> a generalized approach is needed. >> >> Multiple versions of a package seems undesirable to me, for the same >> reasons as static libraries and embedded code copies are undesirable. >> >> Systems t

Re: New Cinnamon Maintainer, looking for help

2014-04-28 Thread Jonathan Dowland
On Sat, Apr 26, 2014 at 04:14:36PM +0200, Maximiliano Curia wrote: > The cinnamon package and dependencies included in Debian are currently > uninstallable, and have been unmantained for a year. > > I have prepared new packages, adding their sources to the collab-maint > alioth project. There's s

Re: Having fun with the following C code (UB)

2014-04-28 Thread Thorsten Glaser
Shachar Shemesh debian.org> writes: > My understanding of things is that undefined behaviors are fairly > common, and almost always benign. Look at the following code: > int add( int a, int b ) > { >     return a+b; > } > Do you really want to get a "Warning: signed in

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Felipe Sateler
On Mon, Apr 28, 2014 at 12:46 PM, Matthias Klose wrote: > Am 28.04.2014 16:34, schrieb Felipe Sateler: >> On Mon, 28 Apr 2014 14:44:39 +0200, Matthias Klose wrote: >> >>> you are not writing which packages you are talking about ... >>> >>> Am 28.04.2014 12:16, schrieb Osamu Aoki: python3 sup

Re: debconf reconfiguration from postinst of another package

2014-04-28 Thread Thorsten Glaser
Jonas Smedegaard jones.dk> writes: > Please elaborate what you mean can "trigger later". > > Simple example: Choosing via debconf to have adduser create homes below > "/srv/home" instead of the default "/home". Ah, sure. Admin installs adduser. adduser defaults to /home. Admin now installs yo

Re: Hardened OpenSSL fork

2014-04-28 Thread daThorsten Glaser
Steven Chamberlain pyro.eu.org> writes: > I'd say the code still looks quite 'portable' in that it is ANSI C and > isn't using kernel-specific features. arc4random is just a library > routine from their libc and I see no reason it can't be borrowed. No, it’s more. And after sysctl() got remove

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Cameron Norman
On Mon, Apr 28, 2014 at 3:16 AM, Osamu Aoki wrote: > Hi, > > Questions are how Debian Jessie packages should be packaged with regards > to configuration choices etc.: > > wayland support or not (I am skipping ones using libwayland-dev now) > python3 support or not (Are we moving too?) > X sessi

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Matthias Klose
Am 28.04.2014 16:34, schrieb Felipe Sateler: > On Mon, 28 Apr 2014 14:44:39 +0200, Matthias Klose wrote: > >> you are not writing which packages you are talking about ... >> >> Am 28.04.2014 12:16, schrieb Osamu Aoki: >>> python3 support or not (Are we moving too?) >> >> bindings and python modul

Re: concurrent installation of different pkg versions

2014-04-28 Thread Gunnar Wolf
Paul Wise dijo [Sat, Apr 26, 2014 at 11:41:17AM +0800]: > > a generalized approach is needed. > > Multiple versions of a package seems undesirable to me, for the same > reasons as static libraries and embedded code copies are undesirable. > > Systems that do this already exist though: > > https:

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Josselin Mouette
Le lundi 28 avril 2014 à 19:16 +0900, Osamu Aoki a écrit : > I, as the ibus maintainer, tend to update ibus with almost the same > compile options and patches used for the latest Fedora packages to make > it behave well with GNOME3. (But I am also careful not to disable > supports for other deskt

Re: Hardened OpenSSL fork

2014-04-28 Thread daThorsten Glaser
Kurt Roeckx roeckx.be> writes: > On Sun, Apr 20, 2014 at 07:07:45PM +0100, Steven Chamberlain wrote: > > But meanwhile, OpenBSD developers are extensively cleaning up OpenSSL > > 1.0.1g. > > One of the problems with anything from OpenBSD is that they only > care about OpenBSD, and if you want t

Re: Gcc and undefined behavior

2014-04-28 Thread Thorsten Glaser
Shachar Shemesh debian.org> writes: > the changes there is a runtime check for undefined behavior. Just > compile with -fsanitize=undefined, and your program will crash with > log if it performs an operation that C/C++ considers to be > undefined. This does not help. At all. Con

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Osamu Aoki
Hi, On Mon, Apr 28, 2014 at 02:44:39PM +0200, Matthias Klose wrote: > you are not writing which packages you are talking about ... ibus source package > Am 28.04.2014 12:16, schrieb Osamu Aoki: > > python3 support or not (Are we moving too?) /usr/bin/ibus-setup command in the ibus package fro

Bug#746266: ITP: latex-coffee-stains -- Add a coffee stain to your LaTeX documents

2014-04-28 Thread Barak A. Pearlmutter
Package: wnpp Owner: Barak A. Pearlmutter Severity: wishlist * Package name: latex-coffee-stains Version : 4 Upstream Author : Hanno Rein * URL or Web page : http://hanno-rein.de/archives/349 * License : "You can freely distribute this package as I do not believe in imagi

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Jordan Metzmeier
On Mon, Apr 28, 2014 at 8:16 AM, Thomas Goirand wrote: > On 04/28/2014 06:16 PM, Osamu Aoki wrote: >> Hi, >> >> Questions are how Debian Jessie packages should be packaged with regards >> to configuration choices etc.: >> >> wayland support or not (I am skipping ones using libwayland-dev now) >>

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Barry Warsaw
On Apr 28, 2014, at 07:16 PM, Osamu Aoki wrote: > python3 support or not (Are we moving too?) I will of course echo Matthias and Thomas on the issue of Python 3 support. I'd like to see us migrating to Python 3 for any "system" scripts, i.e. scripts that come with Debian by default or are relied

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Felipe Sateler
On Mon, 28 Apr 2014 14:44:39 +0200, Matthias Klose wrote: > you are not writing which packages you are talking about ... > > Am 28.04.2014 12:16, schrieb Osamu Aoki: >> python3 support or not (Are we moving too?) > > bindings and python modules should be built for both Python2 and > Python3. If

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Scott Kitterman
On Monday, April 28, 2014 14:44:39 Matthias Klose wrote: > you are not writing which packages you are talking about ... > > Am 28.04.2014 12:16, schrieb Osamu Aoki: > > python3 support or not (Are we moving too?) > > bindings and python modules should be built for both Python2 and Python3. If >

Bug#746255: ITP: verynice -- nice(1)-like utility to throttle long running processes

2014-04-28 Thread Radovan Garabík
Package: wnpp Severity: wishlist Owner: "Radovan Garabík" * Package name: verynice Version : 0.1 Upstream Author : Radovan Garabík * URL : http://kassiopeia.juls.savba.sk/~garabik/software/verynice/ * License : GPL v2 or more Programming Lang: Python Descr

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Thomas Goirand
On 04/28/2014 06:16 PM, Osamu Aoki wrote: > Hi, > > Questions are how Debian Jessie packages should be packaged with regards > to configuration choices etc.: > > wayland support or not (I am skipping ones using libwayland-dev now) > python3 support or not (Are we moving too?) > X session autos

Re: what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Matthias Klose
you are not writing which packages you are talking about ... Am 28.04.2014 12:16, schrieb Osamu Aoki: > python3 support or not (Are we moving too?) bindings and python modules should be built for both Python2 and Python3. If you cannot support both for some reason, please give Python3 the prefer

Bug#746240: ITP: socket-wrapper -- socket wrapper library

2014-04-28 Thread Jakub Wilk
Package: wnpp Severity: wishlist Owner: Jakub Wilk * Package name: socket-wrapper Version : 1.0.1 Upstream Author : Andreas Schneider * URL : http://cwrap.org/socket_wrapper.html * License : BSD 3 clauses Programming Lang: C Description : socket wrapper li

what to do with wayland, python3, gdm3/systemd, ...

2014-04-28 Thread Osamu Aoki
Hi, Questions are how Debian Jessie packages should be packaged with regards to configuration choices etc.: wayland support or not (I am skipping ones using libwayland-dev now) python3 support or not (Are we moving too?) X session autostart scripts under systemd Here are the backgrounds: The

Re: concurrent installation of different pkg versions

2014-04-28 Thread Tollef Fog Heen
]] Don Armstrong > On Sat, 26 Apr 2014, Russ Allbery wrote: > > And simultaneous installation of multiple versions of packages is > > simply a requirement for many research computing scenarios, usually > > because there's a lot of bespoke scientific code that accomplishes > > some specific goal b

Re: concurrent installation of different pkg versions

2014-04-28 Thread Josselin Mouette
Le dimanche 27 avril 2014 à 17:16 -0700, Don Armstrong a écrit : > The right way to handle this for research computing scenarios is to > deploy virtual machines with specific versions otherwise you're > constantly battling with trying to make sure that you're actually using > the version that y