Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Ian Campbell
On Sat, 2021-02-27 at 17:30 -0500, Sergio Durigan Junior wrote: > I don't know if I understand the pushback I'm seeing > against using a debconf question for this. FWIW I don't think I've read any actual pushback on that in this thread although I can see how it might appear that way to another rea

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Sergio Durigan Junior
On Saturday, February 27 2021, Paul Wise wrote: > On Sat, Feb 27, 2021 at 10:31 PM Sergio Durigan Junior wrote: > >> Anyway, as I said before, I don't intend to work on this specific idea >> right away, and I don't know if I understand the pushback I'm seeing >> against using a debconf question fo

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Paul Wise
On Sat, Feb 27, 2021 at 10:31 PM Sergio Durigan Junior wrote: > Anyway, as I said before, I don't intend to work on this specific idea > right away, and I don't know if I understand the pushback I'm seeing > against using a debconf question for this. It seems to me that this is > exactly why debc

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Sergio Durigan Junior
On Saturday, February 27 2021, Ian Campbell wrote: > On Sat, 2021-02-27 at 11:21 -0500, Sergio Durigan Junior wrote: >> On Saturday, February 27 2021, Ian Campbell wrote: >> > >> > FWIW that would be my personal preference too (probably with some sort >> > of cache, maybe once per library or exec

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Ian Campbell
On Sat, 2021-02-27 at 11:21 -0500, Sergio Durigan Junior wrote: > On Saturday, February 27 2021, Ian Campbell wrote: > > > > FWIW that would be my personal preference too (probably with some sort > > of cache, maybe once per library or executable or some granularity like > > that)... > > BTW, lib

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Sergio Durigan Junior
On Saturday, February 27 2021, Ian Campbell wrote: > On Sat, 2021-02-27 at 11:47 +0100, Kurt Roeckx wrote: > On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote: >> As I said in the announcement message, I have proposed a Merge >> Request >> against elfutils in order to enable th

Re: Unsolicited internet access in default installs (was: New service: https://debuginfod.debian.net)

2021-02-27 Thread Jonas Smedegaard
Quoting Johannes Schauer Marin Rodrigues (2021-02-27 15:24:52) > Quoting Steinar H. Gunderson (2021-02-27 13:46:27) > > On Sat, Feb 27, 2021 at 12:29:34PM +, Thaddeus H. Black wrote: > > > I would prefer Kurt's option. Network silence is important. > > > Network noise would probably be a bug

Re: Unsolicited internet access in default installs (was: New service: https://debuginfod.debian.net)

2021-02-27 Thread Steinar H. Gunderson
On Sat, Feb 27, 2021 at 03:24:52PM +0100, Johannes Schauer Marin Rodrigues wrote: > No idea why we are still asking whether popcon should be enabled or not > because > apparently it's 2021 and it's okay to tell others out there that I just > installed Debian. This is a strawman, though. popcon c

Unsolicited internet access in default installs (was: New service: https://debuginfod.debian.net)

2021-02-27 Thread Johannes Schauer Marin Rodrigues
Quoting Steinar H. Gunderson (2021-02-27 13:46:27) > On Sat, Feb 27, 2021 at 12:29:34PM +, Thaddeus H. Black wrote: > > I would prefer Kurt's option. Network silence is important. Network > > noise would probably be a bug. A sysadmin should not be made to take > > special precautions to avoi

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Ian Campbell
On Sat, 2021-02-27 at 11:47 +0100, Kurt Roeckx wrote: On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote: > As I said in the announcement message, I have proposed a Merge > Request > against elfutils in order to enable the automatic usage of our > debuginfod server.  I know that

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Steinar H. Gunderson
On Sat, Feb 27, 2021 at 12:29:34PM +, Thaddeus H. Black wrote: > I would prefer Kurt's option. Network silence is important. Network > noise would probably be a bug. A sysadmin should not be made to take > special precautions to avoid the inadvertent disclosure of the user's > presence on th

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Thaddeus H. Black
Thanks for consulting us, Sergio, before proceeding. On Sat, Feb 27, 2021 at 11:47:40AM +0100, Kurt Roeckx wrote: > On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote: > > As I said in the announcement message, I have proposed a Merge Request > > against elfutils in order to ena

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Kurt Roeckx
On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote: > As I said in the announcement message, I have proposed a Merge Request > against elfutils in order to enable the automatic usage of our > debuginfod server. I know that there are people who are not comfortable > with having a

Re: New service: https://debuginfod.debian.net

2021-02-27 Thread Johannes Schauer Marin Rodrigues
Quoting Ian Campbell (2021-02-24 18:50:39) > What are the security implications for users/clients of using this or more > importantly enabling it by default? > > Presumably clients have to trust that the server is not going to feed > them malicious debug info. Are the tools which consume this info