question about the libpam-ldap debian package.

2008-05-06 Thread Anthony
ation to add. The package have been compiled with hard options Thank you very much for your help.... Anthony

Re: question about the libpam-ldap debian package.

2008-05-07 Thread Anthony
Hello Petter Reinholdtsen a e'crit: [Anthony Berger] i try to configure the auth of my all users by a openldap server. So i configure libpam-ldap libnss-ldap (with db in nsswitch.conf) and nss_udatedb (with a cron to update de db users) configure the libpam_ccreds to be able to aut

Re: question about the libpam-ldap debian package.

2008-05-07 Thread Anthony
entry is anavail=continue, so it would be OK... Does i need to use a proxy dns??? thanks Anthony a écrit : Hello Petter Reinholdtsen a écrit : [Anthony Berger] i try to configure the auth of my all users by a openldap server. So i configure libpam-ldap libnss-ldap (with db in nsswitch

package for configuration - Some suggestions

2008-05-13 Thread Anthony
ostinstall script to change configuration!!! I can't create configuration file and add them in the package, can I? Is it a good think? Have you any suggestion? Thank you Anthony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

utilisation de ucf - paquet de configuration.

2008-05-19 Thread Anthony
e mon_paquet je me retrouve avec ma conf originelle...conf1 Est il possible de faire cela J'ai pensé a utiliser les fichier.dpkg-old généré par ucf??!! Y a t-il un autre moyen merci Anthony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

package config

2008-05-19 Thread Anthony
manage some files with ucf BUT when i remove the package i would like to restore the files before the installation . I could rename the file package_file.conf.dpkg-old in package_file.conf in postrm script (remove) Thank you Anthony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of

Re: package config

2008-05-21 Thread Anthony
Manoj Srivastava a écrit : On Tue, 20 May 2008 08:34:10 +0200, Anthony <[EMAIL PROTECTED]> said: Hello, everybody I have a little question about ucf (example with a package which contains a file package_file.conf) Can i use de package_file.conf.dpkg-old generate by t

Automatic debiian installation

2008-06-05 Thread Anthony
Hello, I would like to use a system to install automatically all my debian pc. But i don't know wich could be the best between FAI and PRESSEED. Somebody could explain the difference the avantage and disavantage of the two methodes...! Thank you very much Anthony -- To UNSUBS

menu applications-merged

2008-07-11 Thread Anthony
have already try to add a menu. Rq : if i use the xdg-desktop-menu utility, the menu appear... ! Thanks anthony -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

make user's home automatically

2009-02-02 Thread Anthony
which is auto-mounted on /home/user1 (with other automounted directory) Somebody know the solution to do this. I can not use the pam_mkhomedir because the home is not really the home... so... would exist an other solution...?:! thanks for help Anthony -- To UNSUBSCRIBE, email to debian-devel

Re: make user's home automatically

2009-02-02 Thread Anthony
Le lundi 2 février 2009 20:02, Franck Joncourt a écrit : |> Anthony wrote: |> > hi everybody, |> |> Hi, |> |> [...] |> > I can not use the pam_mkhomedir because the home is not really the home... so... |> > would exist an other solution...?:! |> |> You

Bug#1077638: ITP: golang-github-bep-imagemeta -- Go library for reading EXIF, IPTC and XMP image metadata

2024-07-30 Thread Anthony Fok
Package: wnpp Severity: wishlist Owner: Anthony Fok * Package name: golang-github-bep-imagemeta Version : 0.7.4-1 Upstream Author : Bjørn Erik Pedersen * URL : https://github.com/bep/imagemeta * License : Expat Programming Lang: Go Description : Go

Re: Drop testing

2004-10-24 Thread Anthony Towns
thread a single RC bug that affects sarge was fixed, > probably there could be *zero* such bugs now. Why not do both? Every time you post a mail to a thread like this, fix an RC bug. This is the "ObBug:" rule. ObBug: 275585 Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]>

Re: Drop testing

2004-10-24 Thread Anthony Towns
er problem with talk of a Debian freeze is finding someone willing to manage it -- the last freeze we had was potato, which managed to fairly thoroughly burn out Richard Braakman, and I think we're something like four times bigger now than we were then, just counting packages; another factor of t

Re: Ubuntu discussion at planet.debian.org

2004-10-24 Thread Anthony Towns
any people use testing in the first place, without getting some actual numbers to back them up? Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> Don't assume I speak for anyone but myself. GPG signed mail preferred. ``[S]exual orgies eliminate

Re: Ubuntu discussion at planet.debian.org

2004-10-27 Thread Anthony Towns
better than trying to automatically guess it -- I've had unstable in my sources.list for ages, with pinning to stick with testing, eg. But hey, it's easier to ignore bad numbers that've been generated, than to make use of good numbers that haven't. Cheers, aj -- Anthony Towns <[EMAIL

Re: Drop testing

2004-10-28 Thread Anthony Towns
s that you don't have to get particular people's advice to come up with good solutions -- you can just troll through the archives for all the data you need. Cheers, aj -- Anthony Towns <[EMAIL PROTECTED]> <http://azure.humbug.org.au/~aj/> Don't assume I speak for any

Re: Drop testing

2004-10-28 Thread Anthony Towns
On Mon, Oct 25, 2004 at 01:05:51PM -0700, Thomas Bushnell BSG wrote: > Anthony Towns writes: > > * One of Testing's goals was to be 95% releasable at all times. > > * It hasn't been. > > * Why not? > >(a) RC bugs > >(

Re: software updates file in /usr -- policy bug?

2004-10-30 Thread Anthony Towns
ams put their data in /var, ~, or /srv, depending on what sort of data it is (internal, personal work, or shared work). Having apt-spy dpkg-divert the file in /usr on install, and replace it with a symlink to a file in /var/lib, and then update the file in /var/lib when invoked seems the obviously co

Re: New method for Packages/Sources file updates

2004-12-03 Thread Anthony Towns
Goswin von Brederlow wrote: Thiemo Seufer <[EMAIL PROTECTED]> writes: Goswin von Brederlow wrote: very hard (figure out how to make a minimal diff from the daylies) or you need every days Packages file (apt-dupdate does that). Is there any program in Debian to do this for ed script style diffs? pat

Re: Bug#283994: ITP: glastree -- builds live backup trees, with branches for each day

2004-12-03 Thread Anthony DeRobertis
Matthew Palmer wrote: The advantage of using glastree over pdumpfs is that it is implemented in Perl rather than Ruby (this is in fact the reason that I encountered it in the first place). How is that an advantage of use? We're talking about free software. Modifying it to fit your needs is a perf

Re: Bug#283994: ITP: glastree -- builds live backup trees, with branches for each day

2004-12-03 Thread Anthony DeRobertis
Matthew Palmer wrote: Sounds like you need to expand your repertoire a bit. Possibly so, but unfortunately my time is a finite. There are far too many languages (even in debian main) for me to learn them all. Can you imagine a world in which your argument was taken at face value? There would be

Re: binary NMUs and version numbers

2004-12-08 Thread Anthony Towns
Goswin von Brederlow wrote: 1.rc << 1.rc2 << 1.rc+b1 1.2-1~beta << 1.2-1~beta2 << 1.2-1~beta+b1 1.2~beta-1 << 1.2~beta-1+b1 << 1.2~beta2-1 Keeping the Debian revision simple is a Good Thing. Adding the implicit '0' that dpkg assumes on versions ending in alpha chars would solve both cases: That'd m

Re: binary NMUs and version numbers

2004-12-09 Thread Anthony Towns
Andreas Metzler wrote: Anthony Towns azure.humbug.org.au> writes: Hrm, why isn't this 1.2+20041208-1 ? Isn't the date describing the upstream version? Or "1.2-20041208-1", or "1.2+cvs20041208-1" or whatever. -rw-rw-r-- 16 katiedebadmin 2908273 May 2 2

Re: Processed: Fixed in NMU of tetex-base 2.0.2c-2.1

2004-12-10 Thread Anthony Towns
Frank Lichtenheld wrote: On Fri, Dec 10, 2004 at 11:43:22AM +0100, Frank Küster wrote: I find this extremely annoying. Please calm down. Why? There's _no_ excuse not to mail the BTS before NMUing. You're free to discuss with lamont how to handle such cases in the future (and communicating him your

Re: binary NMUs and version numbers

2004-12-14 Thread Anthony Towns
Goswin von Brederlow wrote: Anthony Towns writes: Goswin von Brederlow wrote:>> 1.rc << 1.rc2 << 1.rc+b1 1.2-1~beta << 1.2-1~beta2 << 1.2-1~beta+b1 1.2~beta-1 << 1.2~beta-1+b1 << 1.2~beta2-1 Adding the implicit '0' that dpkg assumes on version

Re: murphy is listed on spamcop

2005-01-03 Thread Anthony DeRobertis
Thomas Bushnell BSG wrote: What is this, "you go to war with the army you have, not the army you want"? Consider the full context of the quote[0], yes. [0] http://www.defenselink.mil/transcripts/2004/tr20041208-secdef1761.html

Re: Print Alternative

2005-01-03 Thread Anthony DeRobertis
Fernanda Giroleti Weiden wrote: That would ease porting this application to run on Debian. This application would add a great facility for our users since it is impossible to know what command must be used to print a document on a Debian system. Which ones don't support 'lpr' ? The LPR varients obv

Re: RunDinstallHourly

2005-01-05 Thread Anthony Towns
Robert Lemmen wrote: On Wed, Jan 05, 2005 at 07:12:34AM -0500, Joey Hess wrote: All of the benefits I've thought of from running dinstall more often really only apply to unstable package churn issues. Running britney more often sounds relatively orthagonal actually, though it does sound useful for

Re: LCC and blobs

2005-01-06 Thread Anthony DeRobertis
Brian Thomas Sniffen wrote: So would a web-based firmware loader, that never saved the firmware to disk allow the drivers to be in main? Of course not. It's fetching software, then using that software. ICQ software merely mentions messages, but doesn't use them. ICQ uses the messages as instruct

Re: LCC and blobs

2005-01-06 Thread Anthony DeRobertis
Raul Miller wrote: On Fri, Dec 31, 2004 at 05:02:15PM -0500, Anthony DeRobertis wrote: The social contract says "...but we will never make the system depend on an item of non-free software." not "but we will never make the system depend on an item of non-free software /which we

Re: LCC and blobs

2005-01-06 Thread Anthony DeRobertis
Josh Triplett wrote: I would like to suggest an additional option, which I think covers most cases quite well: If Debian were to package (a copy of) the non-free item in the non-free section, would the Free package express a Depends, Recommends, or Build-Depends on the non-free package? If so, the

Re: New stable version after Sarge

2005-01-07 Thread Anthony Towns
Someone should patch Thunderbird so it handles M-F-T:. Grump. Wouter Verhelst wrote: Packages qualify to be enter prestable after residing in testing for ten days and having NO RC BUGS. The idea is to keep prestable in a highly stable state at all times, a rolling stable if you will. That's how tes

Re: apt-secure broke?

2005-01-31 Thread Anthony Towns
Henrique de Moraes Holschuh wrote: On Mon, 31 Jan 2005, Steve Langasek wrote: I don't know that I'm one of the "relevant people", but since the issue came Sure you are, as you have a trusted path to ftp-master :) Thanks Steve. Now that merkel's back up (and, err, ... now that it's synced again),

Re: shell script sniplets in /usr/bin?

2005-01-31 Thread Anthony Towns
Joey Hess wrote: Anthony Towns wrote: Neither. Shell snippets should not go in PATH unless they also happen to be programs. I hate to say it aj, but you just gave him a hell of an out there... Yeah, *shrug*. Rhetoric is getting pretty boring. Bug#293096, fwiw. Cheers, aj -- To UNSUBSCRIBE, email

Re: list what's in the NEW queue?

2005-02-03 Thread Anthony Towns
Marcelo E. Magallon wrote: On Thu, Feb 03, 2005 at 08:39:10PM +0100, Joerg Jaspert wrote: * it's not ftp-master's business to judge on _technical_ merits of the pacakge (bad packaging practices, missing dependencies, ignores /chapter and verse/ of policy, ...), so we can safely rule that one

Re: list what's in the NEW queue?

2005-02-03 Thread Anthony Towns
Marcelo E. Magallon wrote: On Fri, Feb 04, 2005 at 11:21:02AM +1000, Anthony Towns wrote: > >On Thu, Feb 03, 2005 at 08:39:10PM +0100, Joerg Jaspert wrote: > > * it's not ftp-master's business to judge on _technical_ merits of the > > pacakge (bad packaging pra

Re: apply to NM? ha!

2005-02-06 Thread Anthony Towns
Russell Coker wrote: On Monday 31 January 2005 16:16, Anthony Towns wrote: 1) - a community where people are pleasant to each other, where disagreements are discussed politely, and where people who are unable to be civil are not glorified for their behaviour. This isn't too far from the situ

Re: what is /.udev for ?

2005-02-09 Thread Anthony Towns
GOMBAS Gabor wrote: You cannot reliably put it under a directory that is not guaranteed to be on the root file system; that leaves roughly /, /etc, /bin, /lib and /sbin. Pick your favourite :-) So what's wrong with /lib/udev/pre-udev-dev or /lib/udev/real-rootfs-dev or similar? Cheers, aj -- To U

Re: list what's in the NEW queue?

2005-03-06 Thread Anthony Towns
Marcelo E. Magallon wrote: pardon me for the delay, I really have better things to do that getting involved all day long in discussions with purposely obtuse people. On Fri, Feb 04, 2005 at 01:30:22PM +1000, Anthony Towns wrote: Yay for pulling up flamewars from over a month ago and restarting

Re: On dpkg support for binary recompilations

2005-03-11 Thread Anthony Towns
Scott James Remnant wrote: Source: banana Package: banana Architecture: any Depends: libbanana0 (= ${Source-Version}) Package: libbanana0 Architecture: any Depends: libbanana-common (= ${Source-Version}) Package: libbanana-com

Re: Questions for the DPL candidates

2005-03-14 Thread Anthony Towns
Matthew Garrett wrote: Steve Langasek <[EMAIL PROTECTED]> wrote: Andreas Schuldei (DPL candidate) Angus Lees (DPL candidate) Branden Robinson (DPL candidate) Jonathan Walther (DPL candidate) Little advance public warning was given about this meeting, and the scope of the discussions that would

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-14 Thread Anthony Towns
Thiemo Seufer wrote: Tollef Fog Heen wrote: * Thiemo Seufer | For anyone who uses Debian as base of a commercial solution it is a | requirement. Grabing some random unstable snapshot is a non-starter. You do realise this is exactly what Ubuntu is doing? (Grab «random» snapshot; stabilise) The "st

SCC proposal (was: Re: Questions for the DPL candidates)

2005-03-14 Thread Anthony Towns
John Goerzen wrote: -vote dropped from Cc's, subject changed. Please, can we take some care over these things? And the result of this discussion is what leaves me with great concern. Specifically, the proposal: 1) Provides no way for an arch to produce a stable release after the initial set

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-14 Thread Anthony Towns
Joey Hess wrote: Steve Langasek wrote: Considered that ftbfs bugs for scc architectures are not going to be RC any more, Right, they'll be important instead of serious, the traditional severity for FTBFS on non-RC archs Somewhere else in this vast thread, someone suggested that they be serious and

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-14 Thread Anthony Towns
Mark Brown wrote: On Tue, Mar 15, 2005 at 08:50:04AM +1000, Anthony Towns wrote: What that actually means is that when porters want to stabilise, they'll be able to simply stop autobuilding unstable, fix any remaining problems that are a major concern, and request a snapshot be done. Th

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-14 Thread Anthony Towns
Alastair McKinstry wrote: The question is: how do you release a SCC arch, if at all? AFAIK, the terminology is FCC/SCC for mirror split, and "release-arch" and "non-release-arch" for which arches get released as stable. So the question is "how do you release a non-release arch?" Once you get ove

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-14 Thread Anthony Towns
Thomas Bushnell BSG wrote: Ok, I think I understand. Suppose that we have an arch that does have enough download share, and meets every requirement but the existence of sufficient buildds to keep up and developer machines, and that only because hardware hasn't come available. Who's downloading it,

Re: Questions for the DPL candidates

2005-03-14 Thread Anthony Towns
cobaco (aka Bart Cornelis) wrote: That's why it's posted on the lists now -- it never too late to get input into something in Debian; even after we've committed to something, we can almost always change our minds. er, saying "we've committed to this" really comes across as a 'fait a compli' to a l

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-14 Thread Anthony Towns
Thomas Bushnell BSG wrote: Anthony Towns writes: Thomas Bushnell BSG wrote: Ok, I think I understand. Suppose that we have an arch that does have enough download share, and meets every requirement but the existence of sufficient buildds to keep up and developer machines, and that only because

Re: Do not make gratuitous source uploads just to provoke the buildds!

2005-03-15 Thread Anthony DeRobertis
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wouter Verhelst wrote: | You misunderstood. I don't fight generic changes to the order; I just | don't think it would be a good thing that any random developer could | prioritize his pet package. | Any random developer already has root on X thousand deb

Re: *seconded* Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-15 Thread Anthony Towns
Ola Lundqvist wrote: - the release architecture must have N+1 buildds where N is the number required to keep up with the volume of uploaded packages Sane. - the value of N above must not be > 2 Testing related. I do not really understand why this is a problem but somebody may be able to tell. Uh,

Re: Release sarge now, or discuss etch issues?

2005-03-15 Thread Anthony Towns
Frank Küster wrote: I think all this discussion about etch should be delayed until sarge is out. Of course we would need a statement from the Nybbles team that they do not intend to make decicions, and not to settle facts before a thorough discussion has taken place - after the release. Meanwhile,

Re: The 98% and N<=2 criteria

2005-03-15 Thread Anthony Towns
Frank Küster wrote: For the porters to a specific architecture, this means they have an easy way to get nearer to the 98% and the N<=2 criteria: Just convince the maintainers of heavy-loaded desktop stuff, of big self-bootstrapping numbercrunching applications, and whatever, to take your architectu

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-15 Thread Anthony Towns
Frank Küster wrote: Would the task of setting up an archive for the fixed up sources, and the resulting binary packages, be on the shoulder of the porters alone, or would there be support by the ftpmasters, and especially by the system administrators? Will it at least be possible to host such an a

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-15 Thread Anthony Towns
Henning Makholm wrote: So how can an architecture ever become releaseworthy? It will not get release-certified before it has a a debian.org machine, and it cannot get a machine in debian.org before it has a stable version with security support, and it's not allowed to create a stable version and pr

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-16 Thread Anthony Towns
Daniel Jacobowitz wrote: I've suggested (briefly) a slaved testing which tries to enforce sync with the main testing archive. Hrm, I don't think I've got any idea what that means. Cheers, aj -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTE

Re: Do not make gratuitous source uploads just to provoke the buildds!

2005-03-16 Thread Anthony DeRobertis
Wouter Verhelst wrote: That's not to say that a request to prioritize a package is to be ignored; however, the power of deciding which packages get built first should be with those that actually build the packages, rather than with those who want their packages to be built. The former are expected

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-17 Thread Anthony Towns
Daniel Jacobowitz wrote: My basic idea is to have something similar to the testing migration scripts, which takes the decisions of the "master" copy running on ftp-master as an input. At a minimum: I think it's easiest just to assume everything's on ftp-master; for mirroring, stuff's already plan

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-17 Thread Anthony Towns
Frank Küster wrote: Unless there is an arch-specific bug in that version. The code for architecture tags in the BTS is available if I'm not mistaken. I'll add "rc-s390" etc tags or similar to bugs.d.o the day sarge is released, presuming this goes ahead. No complicated patching whatsoever needed

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-17 Thread Anthony Towns
Daniel Jacobowitz wrote: I would really like to see some real use cases for architectures that want this; I'd like to spend my time on things that're actually useful, not random whims people have on lists -- and at the moment, I'm not in a good position to tell the difference for most of the non

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-18 Thread Anthony Towns
Sven Luther wrote: I think the main reply is for developers using said archs. Developers *developing* on those architectures need to use unstable anyway. If there aren't any users, then there's no much point doing any development. Are there any users? If so, what are they doing? Cheers, aj -- T

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-18 Thread Anthony Towns
Michael K. Edwards wrote: AJ's categorization has some traction, but I think it's a somewhat short-term perspective. I was kind-of hoping it wasn't even that: we've been supporting all these architectures for over two years now; are they really completely useless? I think Sarge on ARM has the po

Re: Bits (Nybbles?) from the Vancouver release team meeting

2005-03-18 Thread Anthony Towns
Henning Makholm wrote: The question is whether the *porters* think they have a sufficiently good reason to do the work of maintaining a separate testing-esque suite. If the porters want to do the work they should be allowed to do it. If they don't need any support from anyone else, they're welcome

Re: Licenses for DebConf6

2005-11-14 Thread Anthony Towns
On Sun, Nov 13, 2005 at 04:56:37PM +0100, Francesco Poli wrote: > On Sun, 13 Nov 2005 11:28:41 +1000 Anthony Towns wrote: > > On Sat, Nov 12, 2005 at 07:26:55PM +0100, Francesco Poli wrote: > > > I disagree with your calling "licensing in a DFSG-free manner" as > >

Re: Licenses for DebConf6

2005-11-14 Thread Anthony Towns
On Sun, Nov 13, 2005 at 06:59:41AM -0800, Thomas Bushnell BSG wrote: > [EMAIL PROTECTED] (Marco d'Itri) writes: > > On Nov 13, Thomas Bushnell BSG <[EMAIL PROTECTED]> wrote: > >> I think the best reason to ask or require contributors to licenses > >> their papers in a DFSG form is so that Debian ca

Re: Licenses for DebConf6

2005-11-14 Thread Anthony Towns
On Mon, Nov 14, 2005 at 05:38:10PM +, Colin Watson wrote: > On Mon, Nov 14, 2005 at 11:17:06PM +1000, Anthony Towns wrote: > > On Sun, Nov 13, 2005 at 04:56:37PM +0100, Francesco Poli wrote: > > > It resembles describing charity as "investment with no return". &

Re: Automated testing - design and interfaces

2005-11-17 Thread Anthony Towns
Bcc'ed to -project; followups to -devel. On Thu, Nov 17, 2005 at 06:43:32PM +, Ian Jackson wrote: > Note that the point is to be able to test the _actual package_, _as > installed_ (eg on a testbed system). This is much better than testing > the package from the source treeu during build time

Re: Automated testing - design and interfaces

2005-11-23 Thread Anthony Towns
On Mon, Nov 21, 2005 at 06:22:37PM +, Ian Jackson wrote: > > Note that it's often better to have a single script run many tests, so > > you probably want to allow tests to pass back some summary information, > > or include the last ten lines of its output or similar. Something like: > > foo F

Re: dpkg-sig support wanted?

2005-11-23 Thread Anthony Towns
On Wed, Nov 23, 2005 at 11:33:47AM +0100, Florian Weimer wrote: > * Marc Brockschmidt: > > Today (or last night, whatever), the dak installation on ftp-master was > > changed to not accept packages that include more than 3 parts, which are > > usually the binary version and the compressed control a

Re: dpkg-sig support wanted?

2005-11-23 Thread Anthony Towns
On Wed, Nov 23, 2005 at 04:37:05PM -0200, Henrique de Moraes Holschuh wrote: > On Thu, 24 Nov 2005, Anthony Towns wrote: > > Personally, I think it's cryptographic snake oil, at least in so far > A signed deb has a seal of procedence and allows one to track the path it > mad

Re: dpkg-sig support wanted?

2005-11-23 Thread Anthony Towns
On Thu, Nov 24, 2005 at 12:38:37AM +0100, Goswin von Brederlow wrote: > > I know this is a contrived use case, but Ubuntu doesn't use any .debs from > > Debian. > One could prove that. :) No, one couldn't -- the signatures could just be removed from the debs, no recompilation needed. Cheers, aj

Re: dpkg-sig support wanted?

2005-11-23 Thread Anthony Towns
On Thu, Nov 24, 2005 at 09:09:21AM +1100, Matthew Palmer wrote: > 2) A signature from dinstall saying "this package was installed in the > Debian archive" would provide a means of automatic "assurance" of the source > of a binary package, when I'm putting together custom CDs or package repos. You

Re: dpkg-sig support wanted?

2005-11-23 Thread Anthony Towns
On Wed, Nov 23, 2005 at 09:18:40PM +0100, Goswin von Brederlow wrote: > Use 1: I have this deb in my apt-move mirror and I want to know if it >was compromised on yesterdays breakin > Boot a clean system with debian keyring and check all deb > signatures. Find some don't pass because th

Re: dpkg-sig support wanted?

2005-11-23 Thread Anthony Towns
On Thu, Nov 24, 2005 at 02:31:22PM +1100, Matthew Palmer wrote: > Then there's the opposite argument about "why not do that inside the .deb?". Simple answers: unnecessary bloat, unwarranted feeling of security leading to bad decisions. Whenever anyone asks "how do you manage the keys", the answ

Re: dpkg-sig support wanted?

2005-11-24 Thread Anthony Towns
On Thu, Nov 24, 2005 at 07:39:57AM +0100, Marc Haber wrote: > >Uh, packages not uploaded to the official Debian archive can do whatever > >they want. > It would, however, be convenient to be able to upload a package to > Debian and to be able to use the same package for different things. As far as

Re: dpkg-sig support wanted?

2005-11-24 Thread Anthony Towns
On Thu, Nov 24, 2005 at 06:44:37PM +1100, Matthew Palmer wrote: > On Thu, Nov 24, 2005 at 03:48:15PM +1000, Anthony Towns wrote: > > On Thu, Nov 24, 2005 at 02:31:22PM +1100, Matthew Palmer wrote: > > > I think the final judgment in this issue is going to come down to person

Re: dpkg-sig support wanted?

2005-11-24 Thread Anthony Towns
On Thu, Nov 24, 2005 at 10:43:38AM -0200, Henrique de Moraes Holschuh wrote: > On Thu, 24 Nov 2005, Anthony Towns wrote: > > On Wed, Nov 23, 2005 at 04:37:05PM -0200, Henrique de Moraes Holschuh wrote: > > > On Thu, 24 Nov 2005, Anthony Towns wrote: > > > > Personal

Re: dpkg-sig support wanted?

2005-11-24 Thread Anthony Towns
On Thu, Nov 24, 2005 at 07:47:58PM +0100, Goswin von Brederlow wrote: > Anthony Towns writes: > > On Wed, Nov 23, 2005 at 09:18:40PM +0100, Goswin von Brederlow wrote: > >> Use 1: I have this deb in my apt-move mirror and I want to know if it > >>was compro

Re: dpkg-sig support wanted?

2005-11-24 Thread Anthony Towns
On Thu, Nov 24, 2005 at 11:13:45AM -0200, Henrique de Moraes Holschuh wrote: > While the point about "you can no longer just use md5sum" is useless (you > need gpg, other "special" tools won't make it any more difficult, especially > since they are gzip and ar), The problem is that using gzip and

Re: dpkg-sig support wanted?

2005-11-24 Thread Anthony Towns
On Thu, Nov 24, 2005 at 06:28:04PM +0100, Florian Weimer wrote: > Of course, with current state of technology, there can't be a digital > signature that directly says that "installation of this package will > not cause any harm". But this doesn't mean that we should give up > completely. Mmm. I'd

Re: dpkg-sig support wanted?

2005-11-25 Thread Anthony Towns
On Fri, Nov 25, 2005 at 03:13:58PM +0100, Goswin von Brederlow wrote: > > You're correct. > And he is also wrong. > That would result in debs with the same name and version but different > md5sums. Something that easily confuses apt-get and people. And yet, somehow people manage partial cross-grad

Re: dpkg-sig support wanted?

2005-11-25 Thread Anthony Towns
On Fri, Nov 25, 2005 at 12:49:11PM -0800, Thomas Bushnell BSG wrote: > Anthony Towns writes: > > .deb signatures are aimed at giving users some sort of assurance the > > package is "valid"; but when you actually look into it -- at least in > > Debian's cir

Re: dpkg-sig support wanted?

2005-11-25 Thread Anthony Towns
On Fri, Nov 25, 2005 at 02:27:23PM -0200, Henrique de Moraes Holschuh wrote: > Well, the email about the new bin-NMU structure implied that it was fixed > for *NMUs done through that structure*. Then the email was wrong. *shrug* > > > > My objection is that it's *useless* for *Debian*. Debian h

Re: dpkg-sig support wanted?

2005-11-25 Thread Anthony Towns
On Fri, Nov 25, 2005 at 07:59:40PM +0100, Florian Weimer wrote: > * Anthony Towns: > > (I'm amazed the security "crisis" we're having is about deb sigs > > *again*, when we're still relying on md5sum which has a public exploit > > available now...)

Re: dpkg-sig support wanted?

2005-11-26 Thread Anthony Towns
On Fri, Nov 25, 2005 at 11:08:32PM -0600, Peter Samuelson wrote: > You may laugh if you wish, but I think it's annoying to have to move to > a hash function whose hexadecimal representation takes 64 bytes, which > doesn't leave much room on an 80-column line to describe what the hash > is hashing.

Re: dpkg-sig support wanted?

2005-11-26 Thread Anthony Towns
On Sat, Nov 26, 2005 at 10:59:57AM +0100, Florian Weimer wrote: > For the "exploits" we have seen so far to work, the malicious party > needs upload access to the archive and has to plant a specially > crafted package there, for which they have created an evil twin > package. (Same for attacking o

Re: dpkg-sig support wanted?

2005-11-27 Thread Anthony Towns
On Sun, Nov 27, 2005 at 12:42:42PM +0100, Steinar H. Gunderson wrote: > On Sun, Nov 27, 2005 at 02:18:00PM +1000, Anthony Towns wrote: > > My understanding was that there aren't other hash functions that've had > > remotely similar levels of cryptographic analysis to m

Re: dpkg-sig support wanted?

2005-11-28 Thread Anthony Towns
On Sat, Nov 26, 2005 at 11:10:27PM -0600, Peter Samuelson wrote: > sha256sum () { > (Implementation of -c left as an exercise, etc.) Hrm, if we're writing our own thing, maybe we should do it properly: have a single program that can do multiple hash algorithms, have the default hash be secure, a

Re: Checksumming tool

2005-11-28 Thread Anthony DeRobertis
Lars Wirzenius wrote: > > The best I've come up with so far is a pseudo rfc822 syntax: > > File: foo%20bar/hellurei.txt > Size: 12345 > MD5: 012345667 > SHA-256: 0a0a0a0a0a0a0a0a0a0a0a0a > Mode: 0644 [EMAIL PROTECTED]:tmp$ md5sum test 04c09e317db0a

Re: texlive-basic_2005-1_i386.changes REJECTED

2005-11-28 Thread Anthony DeRobertis
Norbert Preining wrote: > > texlive-binaries-source 96M > --- > texlive-basicbin texlive-base-bin > texlive-binextra texlive-extrautils I'd suggest texline-extra-utils here, because (at least to me) "extra" and "utils" put together are

Re: texlive-basic_2005-1_i386.changes REJECTED

2005-11-28 Thread Anthony DeRobertis
Norbert Preining wrote: >>allrunes dfsg >> >>Please: Tell me its not true that the DFSG is used as a license there. > > > As stated in the License file, this list was generated from the TeX > Catalogue, which *can be wrong*! If you check the actual allrunes files, > you see that it is LPPL

Re: dpkg-sig support wanted?

2005-11-28 Thread Anthony Towns
On Mon, Nov 28, 2005 at 10:15:34PM +0100, Henning Makholm wrote: > I would expect something like > $ dsum -a sha1 COPYING; sha1sum COPYING > s.w4runjyMTV1ZT_VIob4FRTAjAW1ihpMfZRLbIV7B_UI COPYING sha1sum already exists; and isn't that long. Do you mean sha256? Cheers, aj signature.asc Descrip

Re: dpkg-sig support wanted?

2005-11-28 Thread Anthony Towns
On Mon, Nov 28, 2005 at 12:09:33PM -0600, Peter Samuelson wrote: > I still think two-byte prefixes for non-md5-non-sha1 hashes makes some > sense, like s- for sha-256. Avoids the filename encoding issue you > mentioned later (unless we want to encode newlines). The encoding issues are only for do

Re: dpkg-sig support wanted?

2005-11-30 Thread Anthony Towns
On Tue, Nov 29, 2005 at 02:20:55PM +0100, Florian Weimer wrote: > > not even be out of the question to find someone who'll sponsor an upload > > without rebuilding the .deb. I think it's safe to imagine that there are > > developers right now who've done some shady things in the past; is it > > tha

Re: ITP: ladder.app -- GNU Go frontend for GNUstep

2005-11-30 Thread Anthony DeRobertis
Roberto C. Sanchez wrote: > On Wed, Nov 30, 2005 at 12:59:07PM +0100, Gürkan Sengün wrote: > >>It uses gnugo as its >>engine and you must have a recent version of gnugo installed in order to run >>it. > > This statement is unnecessary. You use dependencies to specify that. "The description sho

Re: How to automatically update files on alioth from svn

2005-11-30 Thread Anthony DeRobertis
Frank Küster wrote: > What do you mean > with https? I don't want to only check out individual files from a > websvn site, but complete directories, including new files. http://svnbook.red-bean.com/en/1.1/ch06s04.html -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscrib

Re: Alternate proposal for Declassification of debian-private archives

2005-12-01 Thread Anthony Towns
(Followups to -vote) On Fri, Dec 02, 2005 at 08:30:37AM +1100, Robert Collins wrote: > The primary reason for this is that the existing messages were sent to > debian-private with an expectation of privacy. As Matthew pointed out in [0] this expectation of privacy isn't really that strong, fundam

Re: Linux in a binary world... a doomsday scenario

2005-12-06 Thread Anthony Towns
On Tue, Dec 06, 2005 at 03:00:14PM +1100, Aníbal Monsalve Salazar wrote: > Should we do something about packages in main that load MS Windows > binary drivers? Err, what? Shouldn't they be in contrib? Or do you just mean packages that can use Windows drivers but don't need to? Cheers, aj signa

Re: StrongARM tactics

2005-12-07 Thread Anthony Towns
On Tue, Dec 06, 2005 at 05:21:46PM -0800, Blars Blarson wrote: > I can do the analyzing, but what should I do with the results? Put them on a webpage so anyone can see them, and if you don't find someone who'll give you an immediate response, track the issues over time so you can trivially demonst

  1   2   3   4   5   6   7   8   9   10   >