Re: Intel CET Support?

2022-09-06 Thread nick black
nick black left as an exercise for the reader: > that's the cornerstone of protecting against the highest level s/the high/anyone but the high/ =\ -- nick black -=- https://www.nick-black.com to make an apple pie from scratch, you need first invent a universe. signature.asc Description: PGP

Re: Intel CET Support?

2022-09-06 Thread nick black
Paul Wise left as an exercise for the reader: > On Mon, 2022-09-05 at 22:44 +0200, Felix Potthast wrote: > > > i just stumbled upon the fact that debian doesn't yet make use of the > > Intel CET security feature, while many other distributions > > (Ubuntu, Fedora, Suse, Arch Linux) do. > > Allege

Re: Intel CET Support?

2022-09-06 Thread Paul Wise
On Mon, 2022-09-05 at 22:44 +0200, Felix Potthast wrote: > i just stumbled upon the fact that debian doesn't yet make use of the > Intel CET security feature, while many other distributions > (Ubuntu, Fedora, Suse, Arch Linux) do. Allegedly Intel CET provides weak protection, although perhaps it

Bug#1019290: ITP: parolottero-languages -- Project that holds the language packs for parolottero

2022-09-06 Thread Salvo 'LtWorf' Tomaselli
Package: wnpp Severity: wishlist Owner: Salvo 'LtWorf' Tomaselli X-Debbugs-Cc: debian-devel@lists.debian.org, tipos...@tiscali.it * Package name: parolottero-languages Version : 0.3 Upstream Author : Salvo 'LtWorf' Tomaselli * URL : https://github.com/ltworf/parolotte

Bug#1019276: ITP: nvda2speechd -- A bridge between Windows applications and Speech dispatcher

2022-09-06 Thread Samuel Thibault
Package: wnpp Severity: wishlist Owner: Samuel Thibault X-Debbugs-Cc: debian-devel@lists.debian.org, debian-accessibil...@lists.debian.org * Package name: nvda2speechd Version : 0.1 Upstream Author : Rastislav Kish * URL : https://github.com/RastislavKish/nvda2speechd

Re: Automatic trimming of changelogs in binary packages

2022-09-06 Thread Niels Thykier
Paul Wise: On Tue, 2022-09-06 at 07:13 +0200, Gioele Barabucci wrote: * Packages not meant to be included in Debian (and without access to a changelog server): Creators that want to preserve the full history can use the `--no-trim` option to disable the trimming. Most derivatives aren't going

Re: Intel CET Support?

2022-09-06 Thread Adrien CLERC
Le 05/09/2022 à 22:44, Felix Potthast a écrit : objdump -d /usr/bin/mv | grep endbr | wc -l I got 2 on my current Bookworm/testing with 5.18.0-4-amd64

Re: Intel CET Support?

2022-09-06 Thread Felix Potthast
Ok, it turns out the quick test i spontaneously came up with is flawed, sorry about that. However, if you look at the disassembly, you can see that the endbr instruction is not at the beginning of a function, but rather directly after a nop instruction, so it seems to me this is just used as anoth

Bug#1019256: ITP: golang-gopkg-telebot.v3 -- bot framework for the Telegram Bot API

2022-09-06 Thread Daniel Swarbrick
Package: wnpp Severity: wishlist Owner: Daniel Swarbrick X-Debbugs-Cc: debian-devel@lists.debian.org * Package name: golang-gopkg-telebot.v3 Version : 3.0.0 Upstream Author : Ilya Kowalewski * URL : https://gopkg.in/telebot.v3 * License : Expat Programming L

Re: Intel CET Support?

2022-09-06 Thread Andrey Rahmatullin
On Mon, Sep 05, 2022 at 10:44:52PM +0200, Felix Potthast wrote: > i just stumbled upon the fact that debian doesn't yet make use of the > Intel CET security feature, while many other distributions > (Ubuntu, Fedora, Suse, Arch Linux) do. > > The idea is to insert endbr instructions, > (which are j

Re: Automatic trimming of changelogs in binary packages

2022-09-06 Thread Andrey Rahmatullin
On Tue, Sep 06, 2022 at 12:11:38PM +0300, Hakan Bayındır wrote: > While all looks good and feels sound from many aspects, I have some > reservations against treating changelogs as metadata. > > Current changelogs as files have a well known place, can be used by anything > and everything, and they

Re: Automatic trimming of changelogs in binary packages

2022-09-06 Thread Hakan Bayındır
Hello all, While all looks good and feels sound from many aspects, I have some reservations against treating changelogs as metadata. Current changelogs as files have a well known place, can be used by anything and everything, and they are local. Stuffing them behind a command, possibly maki

Re: Automatic trimming of changelogs in binary packages

2022-09-06 Thread Paul Wise
On Tue, 2022-09-06 at 07:13 +0200, Gioele Barabucci wrote: > * Packages not meant to be included in Debian (and without access to a > changelog server): Creators that want to preserve the full history can > use the `--no-trim` option to disable the trimming. Most derivatives aren't going to hav