Re: to the mysterious consultant

2005-01-21 Thread Susana Weir
Hello, Our database records indicate we will be able to appprove you for a motrtgage / re-finnance for up to 450k for 3.6 deal. If you are interested we advise you to act ASAP. We need some information from you to finish up the process. Use this unique URL http://www.regcmp.com/ Have a nice da

Re: updated debian development diagram -- comments?

2005-01-21 Thread Kevin Mark
On Fri, Jan 07, 2005 at 05:14:56PM -0200, Otavio Salvador wrote: > || On Mon, 3 Jan 2005 01:08:49 -0500 > || Kevin Mark <[EMAIL PROTECTED]> wrote: > > km> Hi Folks, > km> I have updated my diagram on the debian developement model. Any comments > km> appreciated! > > IMHO have one wrong informat

The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Martin Quinson
Hello, as part of my current effort of getting rid of packages using debconf without providing support to translators, I had a bug repport against the keychain package asking simply to drop this template: Description: Information for people upgrading from versions prior to 2.0. With this new ver

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Henrique de Moraes Holschuh
On Fri, 21 Jan 2005, Martin Quinson wrote: > Dudes. There is a reason why those informations are not written to file by > ssh itself. If my local machine gets corrupted, I'm happy to see the And it is because all of ssh-agent is a second-thought crap, as evidenced by the fact that stock ssh-agent

Re: Reboot in postinst

2005-01-21 Thread Marc Haber
On Thu, 20 Jan 2005 21:27:46 +0100, Osamu Aoki <[EMAIL PROTECTED]> wrote: >Relax, he did not say "rm -rf /" in postinst. That would be postrm. Greetings Marc -- -- !! No courtesy copies, please !! - Marc Haber | " Questions are the | Mai

Re: Reboot in postinst

2005-01-21 Thread Marc Haber
On 20 Jan 2005 14:45:52 -0800, Thomas Bushnell BSG <[EMAIL PROTECTED]> wrote: >Yes. Debian packages are supposed to be able to be installed and >start working without requiring any reboots. We've made this work >pretty well for libc and all kinds of hard cases; you can make it work >for yours too

Re: Reboot in postinst

2005-01-21 Thread Tino Keitel
On Fri, Jan 21, 2005 at 11:03:08 +0100, Marc Haber wrote: > On 20 Jan 2005 14:45:52 -0800, Thomas Bushnell BSG <[EMAIL PROTECTED]> > wrote: > >Yes. Debian packages are supposed to be able to be installed and > >start working without requiring any reboots. We've made this work > >pretty well for l

Re: Reboot in postinst

2005-01-21 Thread Scott James Remnant
On Fri, 2005-01-21 at 11:03 +0100, Marc Haber wrote: > On 20 Jan 2005 14:45:52 -0800, Thomas Bushnell BSG <[EMAIL PROTECTED]> > wrote: > >Yes. Debian packages are supposed to be able to be installed and > >start working without requiring any reboots. We've made this work > >pretty well for libc

${lib}-dev, .pc and pkg-config

2005-01-21 Thread Artur R. Czechowski
Hello, I would like to ask about common practice in packaging libraries, especially their development files. There is a rather old tool like pkg-config. It gives standarized interface[1] for getting compiler and linker flags. What is your recomendation for adding a .pc files in -dev package? What i

Re: ${lib}-dev, .pc and pkg-config

2005-01-21 Thread Rene Engelhard
Hi, Am Freitag, 21. Januar 2005 12:08 schrieb Artur R. Czechowski: > pkg-config. It gives standarized interface[1] for getting compiler and > linker flags. What is your recomendation for adding a .pc files in -dev > package? What is your recomendation for using pkg-config in packages > dependend

Re: Reboot in postinst

2005-01-21 Thread Andreas Barth
* Tino Keitel ([EMAIL PROTECTED]) [050121 13:02]: > On Fri, Jan 21, 2005 at 11:03:08 +0100, Marc Haber wrote: > > On 20 Jan 2005 14:45:52 -0800, Thomas Bushnell BSG <[EMAIL PROTECTED]> > > wrote: > > >Yes. Debian packages are supposed to be able to be installed and > > >start working without requi

Re: RFP: gtybalt -- computer algebra system (CAS) based on GiNaC with optional TeXmacs GUI

2005-01-21 Thread Frank Küster
"Kevin B. McCarty" <[EMAIL PROTECTED]> wrote: > On 01/20/2005 05:24 PM, [EMAIL PROTECTED] wrote: > >> Avoid gnuplot if you can, the license is GPL-incompatible and not one we >> should encourage (See bug #100612 for why). > > (Checks gnuplot license and #100612) > Argh, that will teach me not to a

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Goswin von Brederlow
Henrique de Moraes Holschuh <[EMAIL PROTECTED]> writes: > On Fri, 21 Jan 2005, Martin Quinson wrote: >> I'd drop the package from the archive right away. I have several cron jobs >> using ssh keys (a new key for each cron, without pass and allowed to do only >> one specific command on the remote h

Re: Reboot in postinst

2005-01-21 Thread Andreas Barth
* Andreas Barth ([EMAIL PROTECTED]) [050121 13:10]: > * Tino Keitel ([EMAIL PROTECTED]) [050121 13:02]: > > On Fri, Jan 21, 2005 at 11:03:08 +0100, Marc Haber wrote: > > > On 20 Jan 2005 14:45:52 -0800, Thomas Bushnell BSG <[EMAIL PROTECTED]> > > > wrote: > > > >Yes. Debian packages are supposed t

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Henrique de Moraes Holschuh
On Fri, 21 Jan 2005, Goswin von Brederlow wrote: > Henrique de Moraes Holschuh <[EMAIL PROTECTED]> writes: > > This can very well be a much bigger security risk than doing what you > > already do BUT using passphrases AND ssh-agent to reduce the window of > > opportunity. > > Even if you get hold

Re: Reboot in postinst

2005-01-21 Thread Adeodato Simó
* Andreas Barth [Fri, 21 Jan 2005 13:13:51 +0100]: > using old libs. E.g. > lsof | grep dpkg- | awk '{print $1, $8}' | sort +0 > helps you to find out which ones. There is also checkrestart from the debian-goodies package. Seems to do some more stuff, but don't know how much better it is.

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Goswin von Brederlow
Henrique de Moraes Holschuh <[EMAIL PROTECTED]> writes: > On Fri, 21 Jan 2005, Goswin von Brederlow wrote: >> Henrique de Moraes Holschuh <[EMAIL PROTECTED]> writes: >> > This can very well be a much bigger security risk than doing what you >> > already do BUT using passphrases AND ssh-agent to re

Re: Reboot in postinst

2005-01-21 Thread David Schmitt
On Friday 21 January 2005 11:03, Marc Haber wrote: > This prompts a question I have been wanting to ask for ages: When a > security update for, say, libc6, libssl or libz is installed, do I > need to restart services or not? That's one of the question you ask > three people and get five different a

Bug#291553: ITP: gnome-blosxom -- Gnome Bloxsom is a GUI based program to post entries to a Blosxom based weblog.

2005-01-21 Thread Simon Morris
Package: wnpp Severity: wishlist * Package name: gnome-blosxom Version : 1.0 Upstream Author : Chris Ladd <[EMAIL PROTECTED]> * URL : http://gnome-blosxom.sourceforge.net/ * License : GPL Description : Gnome Bloxsom is a GUI based program to post entries

Re: Reboot in postinst

2005-01-21 Thread Colin Watson
On Fri, Jan 21, 2005 at 01:06:55PM +0100, Andreas Barth wrote: > I disagree. You should warn the administrator that he has to do that. > Especially just restarting ssh is _very_ wrong IMHO, because it can > easily kill the only access to a remote computer. Restarting sshd doesn't kill existing ses

Re: Reboot in postinst

2005-01-21 Thread Wouter Verhelst
Op do, 20-01-2005 te 21:27 +0100, schreef Osamu Aoki: > On Thu, Jan 20, 2005 at 07:35:42PM +0100, Wouter Verhelst wrote: > > Op do, 20-01-2005 te 15:09 -0300, schreef Diogo Kollross: > > > Is there a problem in using something like > > > > > > shutdown -r now > > > > > > inside a postinst scrip

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Colin Watson
On Fri, Jan 21, 2005 at 10:22:02AM +0100, Martin Quinson wrote: > A closer check to the package reveals that it's only useful if you want to > open a security risk on your machine. All info relatives to the ssh-agent > are written into a well known file, allowing cron jobs and attackers to use > th

Re: Reboot in postinst

2005-01-21 Thread Andreas Barth
* Colin Watson ([EMAIL PROTECTED]) [050121 14:50]: > On Fri, Jan 21, 2005 at 01:06:55PM +0100, Andreas Barth wrote: > > I disagree. You should warn the administrator that he has to do that. > > Especially just restarting ssh is _very_ wrong IMHO, because it can > > easily kill the only access to a

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Colin Watson
On Fri, Jan 21, 2005 at 07:42:07AM -0200, Henrique de Moraes Holschuh wrote: > On Fri, 21 Jan 2005, Martin Quinson wrote: > > Dudes. There is a reason why those informations are not written to file by > > ssh itself. If my local machine gets corrupted, I'm happy to see the > > And it is because al

Re: The keychain package, its debconf templates, the security hole induced

2005-01-21 Thread Henrique de Moraes Holschuh
On Fri, 21 Jan 2005, Colin Watson wrote: > On Fri, Jan 21, 2005 at 07:42:07AM -0200, Henrique de Moraes Holschuh wrote: > > On Fri, 21 Jan 2005, Martin Quinson wrote: > > > Dudes. There is a reason why those informations are not written to file by > > > ssh itself. If my local machine gets corrupte

Re: Reboot in postinst

2005-01-21 Thread Florian Weimer
* Marc Haber: > This prompts a question I have been wanting to ask for ages: When a > security update for, say, libc6, libssl or libz is installed, do I > need to restart services or not? That's one of the question you ask > three people and get five different answers. It depends. If the bug is

Re: Reboot in postinst

2005-01-21 Thread Henrique de Moraes Holschuh
On Fri, 21 Jan 2005, Andreas Barth wrote: > Yes. But I prefer verifying that I can login again after each ssh > restart. So, I want to do that _only_ if I explicitly do it. (Others may > disagree.) I disagree ;-) The way it is done now, punishes lack of attention *IF* a ssh bug breaks it, with a

Re: Reboot in postinst

2005-01-21 Thread Henrique de Moraes Holschuh
On Fri, 21 Jan 2005, David Schmitt wrote: > On Friday 21 January 2005 11:03, Marc Haber wrote: > > This prompts a question I have been wanting to ask for ages: When a > > security update for, say, libc6, libssl or libz is installed, do I > > need to restart services or not? That's one of the questi

Re: Reboot in postinst

2005-01-21 Thread Roberto Sanchez
Quoting Henrique de Moraes Holschuh <[EMAIL PROTECTED]>: > On Fri, 21 Jan 2005, Andreas Barth wrote: > > Yes. But I prefer verifying that I can login again after each ssh > > restart. So, I want to do that _only_ if I explicitly do it. (Others may > > disagree.) > > I disagree ;-) The way it is

Re: Reboot in postinst

2005-01-21 Thread sean finney
On Fri, Jan 21, 2005 at 11:00:49AM +0100, Marc Haber wrote: > On Thu, 20 Jan 2005 21:27:46 +0100, Osamu Aoki <[EMAIL PROTECTED]> > wrote: > >Relax, he did not say "rm -rf /" in postinst. > > That would be postrm. or, prerm, since it hasn't been rm'd yet. postrm would be run after, if only it sti

Re: Bug#291495: ITP: blktool -- Program that does stuff with block devices

2005-01-21 Thread Gaudenz Steinlin
On Fri, Jan 21, 2005 at 12:00:30AM -0500, Eric Dorland wrote: > Package: wnpp > Severity: wishlist > > * Package name: blktool > Version : 4 > Upstream Author : Jeff Garzik <[EMAIL PROTECTED]> > * URL : http://sourceforge.net/projects/gkernel/ > * License : GPL

Re: Reboot in postinst

2005-01-21 Thread David Sawyer
This reminds me of a horror story at a place I used to work. I was browsing the 'Net on one of our production servers (this thing served hundreds of banks around the world). I was looking for some fix or SP for NT. I came across this site that started installing Flash Player. It installed it, t

Re: Reboot in postinst

2005-01-21 Thread Petter Reinholdtsen
[David Sawyer] > Moral of the story: NEVER SHUTDOWN OR REBOOT WITHOUT ASKING. Another moral might be to always test the stuff you plan to do on a production server on a test-server first. I fail to see how it is sensible to browse the net on a production server. And I fail to see how it is smar

Re: Reboot in postinst

2005-01-21 Thread Henrique de Moraes Holschuh
On Fri, 21 Jan 2005, Petter Reinholdtsen wrote: > [David Sawyer] > > Moral of the story: NEVER SHUTDOWN OR REBOOT WITHOUT ASKING. No. Never handle serious business like you'd handle your home's gateway machine. > Another moral might be to always test the stuff you plan to do on a > production se

Bug#291581: ITP: libhdate -- small C, C++ library for Hebrew dates and holidays

2005-01-21 Thread Lior Kaplan
Package: wnpp Severity: wishlist Owner: Lior Kaplan <[EMAIL PROTECTED]> * Package name: libhdate Version : 0.10.1 Upstream Author : Kobi Zamir <[EMAIL PROTECTED]> * URL : http://libhdate.sourceforge.net * License : GPL Description : small C, C++ library fo

Re: Reboot in postinst

2005-01-21 Thread Ken Bloom
On Thu, 20 Jan 2005 15:09:46 -0300, Diogo Kollross wrote: > Is there a problem in using something like > > shutdown -r now > > inside a postinst script of a package? So I dist-upgrade, and it upgrades 12 packages. Your postinst runs before any of the other 11. The computer reboots immediately

Re: Reboot in postinst

2005-01-21 Thread Joey Hess
Roberto Sanchez wrote: > If the system is that important to the admin, he will pay attention to such > things. Imagine that you are upgrading ssh for some security update over the > weekend. If your system is in some colo or other remote location where you > are unable to access it until Monday m

NPTL support in 2.4 kernel series?

2005-01-21 Thread Martin Kittel
Hi, I am maintaining the packages of the MaxDB database system. Recently upstream has converted the database kernel from linuxthread-style threading to NPTL. While -at least for i386- linuxthreads is still supported in MaxDB at this time, it will go away in one of the next releases. As far as I

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Miquel van Smoorenburg
In article <[EMAIL PROTECTED]>, Martin Kittel <[EMAIL PROTECTED]> wrote: >Hi, > >I am maintaining the packages of the MaxDB database system. > >Recently upstream has converted the database kernel from >linuxthread-style threading to NPTL. While -at least for i386- >linuxthreads is still supporte

Re: Reboot in postinst

2005-01-21 Thread Gustavo Noronha Silva
Em Sex, 2005-01-21 Ãs 14:56 +0100, Andreas Barth escreveu: > Yes. But I prefer verifying that I can login again after each ssh > restart. So, I want to do that _only_ if I explicitly do it. (Others may > disagree.) I always do test I can still login after restarting ssh. The trick is using a difer

Re: Reboot in postinst

2005-01-21 Thread Bernd Eckenfels
On Fri, Jan 21, 2005 at 01:34:51PM -0500, Joey Hess wrote: > If your system is in a colo, it would be wise to have a backup login > method besides ssh. Oh yes, especially since my ssh regularly beaks because of 2UsePam yes" and "ListenAddress ::" while switching between stable and testing versio

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Lars Wirzenius
pe, 2005-01-21 kello 20:11 +, Miquel van Smoorenburg kirjoitti: > In article <[EMAIL PROTECTED]>, > Martin Kittel <[EMAIL PROTECTED]> wrote: > >As far as I know there is no NPTL support in 2.4 debian kernels (as for > >example in some RedHat 2.4 kernels). Is that correct? > >In that case I wi

Is Daniel Lutz MIA?

2005-01-21 Thread Chuan-kai Lin
Hi all, Does anyone know the status of Daniel Lutz? I had mailed him a while ago asking if he needs any help with the synergy package; the last upload of the package was 14 months ago, with quite a few bugs open that had not been dealt with, and a new major upstream stable release had been made i

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Martin Kittel
Miquel van Smoorenburg wrote: >>As far as I know there is no NPTL support in 2.4 debian kernels (as for >>example in some RedHat 2.4 kernels). Is that correct? >>In that case I will have to add a dependency on kernel-image-2.6 > > Bad idea. On my systems, there is no kernel-image installed at all

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Henning Makholm
Scripsit Martin Kittel <[EMAIL PROTECTED]> >> You can check in the preinst if the running kernel is new enough, >> but that is about all you can do. > But this happens only after you have downloaded the whole package > and leaves you with a broken one. So I don't think that would be an > acceptab

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Martin Kittel
Henning Makholm makholm.net> writes: > > Scripsit Martin Kittel martin-kittel.de> > > >> You can check in the preinst if the running kernel is new enough, > >> but that is about all you can do. > > > But this happens only after you have downloaded the whole package > > and leaves you with a br

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Kurt Roeckx
On Fri, Jan 21, 2005 at 07:51:22PM +0100, Martin Kittel wrote: > Hi, > > I am maintaining the packages of the MaxDB database system. > > Recently upstream has converted the database kernel from > linuxthread-style threading to NPTL. While -at least for i386- > linuxthreads is still supported in

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Martin Kittel
Kurt Roeckx wrote: What is the problem with linuxthread? Are there some problems linuxthreads cause that go away when using NPTL? Upstream is switching to NPTL for performance reasons and because it allows them to clean up a lot of their threading code. Currently there is still support for linux

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Joel Aelwyn
On Fri, Jan 21, 2005 at 11:05:58PM +0100, Kurt Roeckx wrote: > On Fri, Jan 21, 2005 at 07:51:22PM +0100, Martin Kittel wrote: > > Hi, > > > > I am maintaining the packages of the MaxDB database system. > > > > Recently upstream has converted the database kernel from > > linuxthread-style threadi

Re: updated debian development diagram -- comments?

2005-01-21 Thread Otavio Salvador
|| On Fri, 21 Jan 2005 04:19:03 -0500 || Kevin Mark <[EMAIL PROTECTED]> wrote: km> On Fri, Jan 07, 2005 at 05:14:56PM -0200, Otavio Salvador wrote: >> || On Mon, 3 Jan 2005 01:08:49 -0500 >> || Kevin Mark <[EMAIL PROTECTED]> wrote: >> km> Hi Folks, km> I have updated my diagram on the debian de

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Joel Aelwyn
On Fri, Jan 21, 2005 at 09:14:00PM +, Henning Makholm wrote: > Scripsit Martin Kittel <[EMAIL PROTECTED]> > > >> You can check in the preinst if the running kernel is new enough, > >> but that is about all you can do. > > > But this happens only after you have downloaded the whole package > >

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Lars Wirzenius
pe, 2005-01-21 kello 15:42 -0700, Joel Aelwyn kirjoitti: > However, is it really unreasonable to expect someone willing and able to > build their own kernel to at *least* be able and willing to set up an > equivs entry for the kernel provides? That won't help enough. You can have a kernel-image-2.

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Joel Aelwyn
On Sat, Jan 22, 2005 at 12:53:43AM +0200, Lars Wirzenius wrote: > pe, 2005-01-21 kello 15:42 -0700, Joel Aelwyn kirjoitti: > > However, is it really unreasonable to expect someone willing and able to > > build their own kernel to at *least* be able and willing to set up an > > equivs entry for the

Re: NPTL support in 2.4 kernel series?

2005-01-21 Thread Steve Greenland
On 21-Jan-05, 12:51 (CST), Martin Kittel <[EMAIL PROTECTED]> wrote: > Hi, > > I am maintaining the packages of the MaxDB database system. > > [snip] > In that case I will have to add a dependency on kernel-image-2.6 or does > anyone know of a better way to express a dependency on NPTL style thr

Version woes (packaging SWT milestones)

2005-01-21 Thread Shaun Jackman
I'm packaging SWT for GTK version 3.1M4, which is a prerelease of 3.1. I want to eventually package 3.1. What options do I have for numbering the prerelease so that 3.1 is a greater version number? If I understand epochs, I could name the next one 1:3.1, although I'm not particularly fond of that s

Re: Version woes (packaging SWT milestones)

2005-01-21 Thread Aaron M. Ucko
Shaun Jackman <[EMAIL PROTECTED]> writes: > it must start with 3.0.x. Perhaps 3.0.3.1M4? Ugly. Any thoughts? Post-sarge, I believe 3.1~m4 should work. For now, I'd probably call it 3.0+3.1m4, which is slightly less ugly IMO than having dots throughout. (I've used a similar notation for FLTK pre

Re: Re: Arabic Linguist

2005-01-21 Thread Eizeno
my name is eizen putrus i work in iraq for 17 m former titan linguist i work for JAG and i work with MI and interpet for 2 BG and i work with FBI and rebuilt the court sys in mousel and work with local tribe .e mail me at [EMAIL PROTECTED] or call me at 909-944-3197 thank you eizen putrus

Bug#291654: ITP: lnpd -- BrickOS (legOS) networking protocol daemon

2005-01-21 Thread Stephen M Moraco
Package: wnpp Severity: wishlist * Package name: lnpd Version : 0.9.0 Upstream Author : Martin Cornelius <[EMAIL PROTECTED]> * URL : http://brickos.sourceforge.net/ * License : Mozilla Public License v1.0 Description : BrickOS logical network protocol dae

Re: Release update: kde3.3, upload targets, kernels, infrastructure

2005-01-21 Thread Kenshi Muto
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Release-update of this month sounds really nice for me :-) At Fri, 21 Jan 2005 20:11:03 -0800, Steve Langasek wrote: > Many of these security bugs have been fixed in unstable, and are just > waiting to propagate to testing -- largely blocked by m

Re: Re: Arabic Linguist

2005-01-21 Thread Eizeno
my name is eizen putrus i am former titan linguist i work in iraq for 17m i work in all lavel of the mill JAG and FBI and interpet for  2BG and rebuilt the court sys in mousel go to metting in city councel and work with ACO anti crruption office in mousel if you are looking for a linguistmy e