Re: For Those Who Care About: Switzerland/Liechtenstein

2007-02-03 Thread Joey Schulze
Adrian von Bidder wrote: > On Friday 02 February 2007 09:33, Sam Hocevar wrote: > > On Fri, Feb 02, 2007, martin f krafft wrote: > > > PS: Almost all... as first official act, I herewith announce the > > > nomination of Mark J. Ray as an honorary member of debian.ch. > > > Honorary members have no

Re: For Those Who Care About: Switzerland/Liechtenstein

2007-02-03 Thread Russell Coker
On Saturday 03 February 2007 20:25, Joey Schulze <[EMAIL PROTECTED]> wrote: > > No it's not.  It's what we technically call a Joke.  Debian could use > > more of them.  (And yes, I do invite people to make jokes on my expense > > when the occasion arises.) > > While I agree that it could help impro

Re: Attempts at security

2007-02-03 Thread Hendrik Sattler
Am Freitag 02 Februar 2007 21:14 schrieb Reinhard Tartler: > Hendrik Sattler <[EMAIL PROTECTED]> writes: > > And everybody gets the SE Linux overhead if he wants or not? > > Which overhead does SE Linux impose to you? Take a look at the extra paths in the LSM that the kernel runs for many system

Re: Attempts at security

2007-02-03 Thread Russell Coker
On Saturday 03 February 2007 22:37, Hendrik Sattler <[EMAIL PROTECTED]> wrote: > Am Freitag 02 Februar 2007 21:14 schrieb Reinhard Tartler: > > Hendrik Sattler <[EMAIL PROTECTED]> writes: > > > And everybody gets the SE Linux overhead if he wants or not? > > > > Which overhead does SE Linux impose

Re: Attempts at security (was Re: Draft spec for new dpkg "triggers" feature)

2007-02-03 Thread Hendrik Sattler
Am Samstag 03 Februar 2007 02:21 schrieb Russell Coker: > On Saturday 03 February 2007 05:17, Hendrik Sattler > <[EMAIL PROTECTED]> wrote: > > And everybody gets the SE Linux overhead if he wants or not? > > It's disabled by default, unlike in Fedora and Red Hat Enterprise Linux > where it's on by

Re: Attempts at security

2007-02-03 Thread Hendrik Sattler
Am Samstag 03 Februar 2007 13:17 schrieb Russell Coker: > Anyway, if the overhead of SE Linux in the kernel is something you consider > to be a problem then there are many bigger problems that you will have with > the Debian kernel packages (or probably any kernel image from a binary > distribution

Re: Attempts at security

2007-02-03 Thread Lars Wirzenius
On la, 2007-02-03 at 12:37 +0100, Hendrik Sattler wrote: > > > Not being able to change the cause to the better doesn't mean to > > > introduce a mess to control the result. And I really hope that Debian > > > never considers installing+enabling selinux by default. > > > > IIRC, debian/etch alread

Re: Attempts at security

2007-02-03 Thread Henrique de Moraes Holschuh
On Sat, 03 Feb 2007, Russell Coker wrote: > One that springs to mind is CONFIG_HIGHMEM4G, it seems only useful if you > have You need to enable PAE (64GB support) to access the NX bit on ia32, which is even worse, and that's the reason why my 1GB laptop has a PAE kernel :( > Another is the fact

Re: Attempts at security

2007-02-03 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/03/07 08:20, Henrique de Moraes Holschuh wrote: > On Sat, 03 Feb 2007, Russell Coker wrote: [snip] >>> "Real world security concerns"? Please describe your "real world" and >>> compare to the other existant "real world"s. > > Botnets and the maf

/foo has been mounted xx times... check forced

2007-02-03 Thread Enrico Zini
Hello, the feature as in the subject is nice and makes me feel safe, but sometimes it hits on the laptop, when booting on batteries, with people watching. Ideally, if I'm in a hurry I would like to be able to do ^C on it, and I would expect that the same check is run at next boot; however, I neve

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Frans Pop
On Saturday 03 February 2007 10:39, Enrico Zini wrote: > Assuming it's safe to ^C fsck, would it make sense to change the > message to document it, like: In my experience it is safe, except when the / partition is being fsck'ed. For / it is also safe, but I've been unable to get the system to bo

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Ron Johnson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/03/07 03:39, Enrico Zini wrote: > Hello, > > the feature as in the subject is nice and makes me feel safe, but > sometimes it hits on the laptop, when booting on batteries, with people > watching. > > Ideally, if I'm in a hurry I would like to

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Nico Golde
Hi, * Ron Johnson <[EMAIL PROTECTED]> [2007-02-03 20:13]: > On 02/03/07 03:39, Enrico Zini wrote: [...] > > Assuming it's safe to ^C fsck, would it make sense to change the message > > to document it, like: > > > > /foo has been mounted xx times [...] check forced > > If you need to boot quic

Bug#409526: ITP: shell.fm -- console based player for last.fm radio streams

2007-02-03 Thread Nacho Barrientos Arias
Package: wnpp Severity: wishlist Owner: Nacho Barrientos Arias <[EMAIL PROTECTED]> * Package name: shell.fm Version : 0.2 Upstream Author : Jonas Kramer <[EMAIL PROTECTED]> and others. * URL : http://nex.scrapping.cc/shell-fm/ * License : GPL Programming Lang:

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Armin Berres
Ron Johnson wrote: > The file /etc/init.d/checkfs.sh (in package initscripts) is supposed > to check whether you are on battery power or not. Maybe a bug needs > to be filed against it? Assumption: This only works, if the battery module is loaded at this point. Normally acpid loads this module, w

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Nico Golde
Hi, * Armin Berres <[EMAIL PROTECTED]> [2007-02-03 21:32]: > Ron Johnson wrote: > > The file /etc/init.d/checkfs.sh (in package initscripts) is supposed > > to check whether you are on battery power or not. Maybe a bug needs > > to be filed against it? > > Assumption: This only works, if the batt

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Evgeni Golov
On Sat, 3 Feb 2007 21:45:49 +0100 Nico Golde wrote: > Acpid doesn't load modules, it only listens to events and > executes programs. But the init-script does: # As the name says. If the kernel supports modules, it'll try to load # the ones listed in "MODULES". load_modules() { ... } Regards --

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Luca Capello
Hello! On Sat, 03 Feb 2007 21:45:49 +0100, Nico Golde wrote: > * Armin Berres <[EMAIL PROTECTED]> [2007-02-03 21:32]: >> Ron Johnson wrote: >>> The file /etc/init.d/checkfs.sh (in package initscripts) is >>> supposed to check whether you are on battery power or not. Maybe >>> a bug needs to be fi

Re: /foo has been mounted xx times... check forced

2007-02-03 Thread Armin Berres
Evgeni Golov wrote: > On Sat, 3 Feb 2007 21:45:49 +0100 Nico Golde wrote: > >> Acpid doesn't load modules, it only listens to events and >> executes programs. > > But the init-script does: That's what I meant. Thanks for the clarification. I can confirm the following behavior: If I boot with a

Bug#409544: ITP: tripod -- iPod photo uploader

2007-02-03 Thread Mark Purcell
Package: wnpp Severity: wishlist Owner: Mark Purcell <[EMAIL PROTECTED]> * Package name: tripod Version : 0.7.0 Upstream Author : Seb Ruiz <[EMAIL PROTECTED]> * URL : http://www.sebruiz.net/tripod * License : GPL Programming Lang: C++ Description : iPod

Bug#409553: ITP: ttf2tex -- a TrueType font installer for Unix

2007-02-03 Thread Rafael Laboissiere
Package: wnpp Severity: wishlist Owner: Rafael Laboissiere <[EMAIL PROTECTED]> * Package name: ttf2tex Version : 0.70 Upstream Author : Philipp Lehman <[EMAIL PROTECTED]> * URL : http://www.ctan.org/tex-archive/help/Catalogue/entries/ttf2tex.html * License : G

Bug#409563: ITP: thinkfinger -- library and utility for the SGS Thomson Microelectronics fingerprint reader

2007-02-03 Thread Luca Capello
Package: wnpp Owner: Luca Capello <[EMAIL PROTECTED]> Severity: wishlist * Package name: thinkfinger Version : 0.2.2 [1] Upstream Author : Timo Hoenig <[EMAIL PROTECTED]>, Pavel Machek <[EMAIL PROTECTED]> * URL or Web page : http://thinkfinger.sourceforge.net * License : G

Re: Attempts at security (was Re: Draft spec for new dpkg "triggers" feature)

2007-02-03 Thread Russell Coker
On Saturday 03 February 2007 23:47, Hendrik Sattler <[EMAIL PROTECTED]> wrote: > > It's disabled by default, unlike in Fedora and Red Hat Enterprise Linux > > where it's on by default. I believe that the latest release of SUSE has > > AppArmor on by default. > > RedHat has a long history of stran

Re: Attempts at security

2007-02-03 Thread Russell Coker
On Sunday 04 February 2007 01:20, Henrique de Moraes Holschuh <[EMAIL PROTECTED]> wrote: > On Sat, 03 Feb 2007, Russell Coker wrote: > > One that springs to mind is CONFIG_HIGHMEM4G, it seems only useful if you > > have > > You need to enable PAE (64GB support) to access the NX bit on ia32, which

Re: Welcome to Gay.com!

2007-02-03 Thread Earlie Laoz
idid'nt received my verification code, please send it Thanks _ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ -- To UNSUBSCRIBE, email to

Re: Attempts at security

2007-02-03 Thread Henrique de Moraes Holschuh
On Sun, 04 Feb 2007, Russell Coker wrote: > On Sunday 04 February 2007 01:20, Henrique de Moraes Holschuh <[EMAIL > PROTECTED]> > wrote: > > On Sat, 03 Feb 2007, Russell Coker wrote: > > > One that springs to mind is CONFIG_HIGHMEM4G, it seems only useful if you > > > have > > > > You need to ena

nsswitch.conf

2007-02-03 Thread Brian May
Hello, Is it still the case that packages should not update /etc/nsswitch.conf as documented in bug #78110? The reason I ask is because libnss-mdns does just this (e.g. see bug #406198), and I thought this was a policy violation. My personal opinion is that I consider /etc/nsswitch.conf, like /e

Re: Attempts at security (was Re: Draft spec for new dpkg "triggers" feature)

2007-02-03 Thread Steve Langasek
On Sun, Feb 04, 2007 at 12:27:41PM +1100, Russell Coker wrote: > On Saturday 03 February 2007 23:47, Hendrik Sattler > <[EMAIL PROTECTED]> wrote: > > > It's disabled by default, unlike in Fedora and Red Hat Enterprise Linux > > > where it's on by default. I believe that the latest release of SUSE