Re: SSDs have extra "unused" space???

2014-01-20 Thread Sven Hartge
Holger Levsen wrote: > On Montag, 20. Januar 2014, Kevin Chadwick wrote: >> As long as it is a modern SSD (years) or one of the old ones one with >> a sandforce controller (OpenBSD dev let me know about that) then it >> has a good 20% extra space above it's listed gigabytes reserved >> unusable f

Re: Debian CI pipeline for Developers

2018-11-16 Thread Sven Hartge
IOhannes m zmölnig (Debian/GNU) wrote: > On 11/16/18 3:14 PM, Kentaro Hayashi wrote: >> package repository, sure we can change the project's setting, but >> debian/.gitlab-ci.yml seems to be the proper default setting. > i don't think there is any reason to use a (hidden) dotfile in the > debian

Re: usrmerge -- plan B?

2018-12-23 Thread Sven Hartge
Martin Steigerwald wrote: > Marco d'Itri - 23.12.18, 22:30: >> On Dec 23, Martin Steigerwald wrote: >>> I think I have seen this with either SLES or RHEL that they created >>> symlinks for every binary in /bin and /sbin, pointing to the binary >>> in /usr/bin and /usr/sbin. I did not understand

Re: confused about virtual build-depends libcurl-dev

2019-01-17 Thread Sven Hartge
Thomas Koch wrote: > We're trying to package nix. Its d/control[1] currently says: > build-depends: libcurl4-gnutls-dev | libcurl4-openssl-dev | libcurl-ssl-dev > When I build it on my own machines with sbuild, then it gets built > with libcurl4-gnutls-dev. On salsa it gets built with > libcurl

Re: confused about virtual build-depends libcurl-dev

2019-01-18 Thread Sven Hartge
Sven Hartge wrote: > I changed the resolver to use a combination of mk-build-deps and > aptitude, the same as sbuild and pbuilder use to resolve build-deps, to > better handle alternatives. > You may have hid an edge case I didn't encounter during my testing. Hmm, I may see th

Re: confused about virtual build-depends libcurl-dev

2019-01-18 Thread Sven Hartge
Sven Hartge wrote: > Sven Hartge wrote: >> I changed the resolver to use a combination of mk-build-deps and >> aptitude, the same as sbuild and pbuilder use to resolve build-deps, to >> better handle alternatives. >> You may have hid an edge case I didn't encoun

Re: Seeking hardening flag / blhc expoert

2019-04-05 Thread Sven Hartge
Otto Kekäläinen wrote: > I've read this section many times over but I don't get it. A > workaround is presented but since we are on a new debhelper it is > advised not to be used. It suggests using > /usr/share/dpkg/buildflags.mk but since we already call default.mk the > buildflags.mk should be

Re: Seeking hardening flag / blhc expoert

2019-04-06 Thread Sven Hartge
Andrey Rahmatullin wrote: > [-- text/plain, encoding quoted-printable, charset: utf-8, 11 lines --] > On Fri, Apr 05, 2019 at 09:07:06PM +0200, Sven Hartge wrote: >> CMake is a bit "special" in that regard. To get the right hardening >> flags to work for some parts

Bug#932769: [moreinfo] DoS via DHCP request

2019-07-23 Thread Sven Hartge
On Tue, 23 Jul 2019 19:32:04 -0600 Mark Hutchison wrote: > When I look at systemctl for the dhclient service, I can see that there's > an error, "can't create /var/lib/dhcp/dhclient.intname.leases Read Only > file system", and then the DHCPREQUEST > DHCPACK > DHCPDECLINE sequence > starts every f

Re: Bug#993488: maybe reason for wontfix?

2021-09-03 Thread Sven Hartge
Tomas Pospisek wrote: > I am guessing that the reason for the "wontfix" is "that's just how > Unix works unfortunately" aka "that's a Unix design bug"? Is my guess > correct? I would call it a "Unix design decision" or even an "OS design decision", because Windows (of the NT variant) has made th

Re: wiki about block alignment issues

2016-07-15 Thread Sven Hartge
Daniel Pocock wrote: > I've started a wiki about block alignment issues: > https://wiki.debian.org/DiskBlockAlignment > Can anybody comment on specific packages / tools that may help people > investigate or update their systems, maybe adding links to the wiki? There is also an interesting "wri

Is missing SysV-init support a bug?

2016-08-25 Thread Sven Hartge
Hi all! I just saw the new conntrack-tools (1:1.4.4-2) package in Sid, which has as a change * [917beed] conntrackd: get rid of the sysvinit support and I wondered, if this is a bug (and at what severity) or not. While I run all my personal computers on systemd (on Sid) and nearly all servers

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-09 Thread Sven Hartge
Marco d'Itri wrote: > On Aug 07, Joerg Jaspert wrote: >> Thats nice for any environment where on can freely define that >> everything works like this. >> >> Unfortunately real world doesnt work like it. > Can you describe some examples of what still requires 1.0/1.1 on a > client or a server?

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-11 Thread Sven Hartge
Marco d'Itri wrote: > On Aug 09, Sven Hartge wrote: >> Looking at https://developer.android.com/about/dashboards/index.html >> there is still a marketshare of ~25% of smartphones based on Android >> 5.0 and 5.1 and 16% based on 4.4. So this change would (at the >&g

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-11 Thread Sven Hartge
Marco d'Itri wrote: > On Aug 11, Marco d'Itri wrote: >> but I see on your link that Android pre-5.x still has a ~25% market >> share, so unless it will drop a lot in the next year I do not think >> that we can cut them off from Debian-based web servers. > OTOH if the PCI council says that TLS <

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-11 Thread Sven Hartge
Kurt Roeckx wrote: > On Fri, Aug 11, 2017 at 01:34:53PM +0200, Sven Hartge wrote: >> Marco d'Itri wrote: >>> On Aug 09, Sven Hartge wrote: >> >> Looking at https://developer.android.com/about/dashboards/index.html >> >> there is still a mark

Re: OpenSSL disables TLS 1.0 and 1.1

2017-08-11 Thread Sven Hartge
Christian Seiler wrote: > Don't get me wrong: I do believe it's a huge problem that vendors of > said appliances don't provide updates for these kind of things, and I > wish that we could indeed drop everything except TLS 1.2, but the real > world is unfortunately more complicated, and I think De

Re: openssl/libssl1 in Debian now blocks offlineimap?

2017-08-20 Thread Sven Hartge
Adrian Bunk wrote: > [1] I haven't investigated how widespread this specific problem > actually is, or whether it can be mitigated - the point is that > it is unrelated to TLS versions supported by PayPal or online > banking apps running on the device I asked on the freeradius-user

Re: Debian Stretch new user report (vs Linux Mint)

2017-12-01 Thread Sven Hartge
Luca Capello wrote: > On Fri, 01 Dec 2017 14:59:53 -0500, James McCoy wrote: >> People seem to be skipping over the fact that even after ntfs-3g was >> installed, the user only had RO access. That's the bigger issue. > Exactly, which IIRC is the normal behavior if the NTFS filesystem was > not

Re: Debian Stretch new user report (vs Linux Mint)

2017-12-01 Thread Sven Hartge
The Wanderer wrote: > On 2017-12-01 at 16:44, Sven Hartge wrote: >> Luca Capello wrote: >>> On Fri, 01 Dec 2017 14:59:53 -0500, James McCoy wrote: >>>> People seem to be skipping over the fact that even after ntfs-3g >>>> was installed, the u

Re: Debian Stretch new user report (vs Linux Mint)

2017-12-04 Thread Sven Hartge
Paul Wise wrote: > On Mon, Dec 4, 2017 at 5:22 AM, Marc Haber wrote: >> Debian is also about providing an Universal Operating System, and I >> have seen BIG installations of Debian on server farms moving to >> PragBF because the Broadcom network chips on those servers required >> people jumping t

Re: suggestion to add package vlan to default instalation DVD

2015-09-16 Thread Sven Hartge
Josef Masek wrote: > it is possible to add package "vlan" to the DVD instalation images? > It is tiny package (36kB) and in some special environment (without > Internet with DVD in vmware environmen) i have to download and install > it manually. Why? The vlan package is not needed since at least

Re: suggestion to add package vlan to default instalation DVD

2015-09-16 Thread Sven Hartge
Pascal Giard wrote: > On Wed, Sep 16, 2015 at 3:10 PM, Sven Hartge wrote: >> Josef Masek wrote: >>> it is possible to add package "vlan" to the DVD instalation images? >>> It is tiny package (36kB) and in some special environment (without >>> Int