Re: systmd-analyze security as a release goal

On Monday, 3 July 2023 22:37:35 AEST Russell Coker wrote: > https://wiki.debian.org/ReleaseGoals/SystemdAnalyzeSecurity People have asked how hard it is to create policy for daemons. For an individual to create them it's a moderate amount of work, 1-2 hours per daemon which is a

systmd-analyze security as a release goal

Someone said on Matrix that we aren't going to have official release goals in future. If so that doesn't stop people from doing the work just makes it less of an issue to release with some of the bugs unsolved. https://wiki.debian.org/ReleaseGoals/SystemdAnalyzeSecurity I think we should make

dh-translations

The package dh-translations in Ubuntu has the below description. Do we have something in Debian that does this? Do we need something in Debian to do this? Should we put this Ubuntu package in Debian to make it easier to build Ubuntu packages on Debian? License is GPLv2+. Description:

warzone2100 video downloader

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=862973 Regarding the above bug report, I don't think that cut-scene videos add much to the game play, and I'm certain it doesn't add enough to justify a gigabyte or more storage on the Debian mirrors. I think it would be OK to have a video

Re: strange BD-Uninstallable

On Wednesday, 27 January 2021 1:40:56 AM AEDT Russell Coker wrote: > https://buildd.debian.org/status/package.php?p=libselinux > > libselinux isn't being built on ia64, it says "BD-Uninstallable (Extra- > Depends: python3-all-dev (>= 3.8.6-1))". > > https://buildd.

strange BD-Uninstallable

https://buildd.debian.org/status/package.php?p=libselinux libselinux isn't being built on ia64, it says "BD-Uninstallable (Extra- Depends: python3-all-dev (>= 3.8.6-1))". https://buildd.debian.org/status/package.php?p=python3-defaults=sid python3-defaults is being built on ia64 with no errors.

pager and upgrades

I just upgraded a Buster system to today's unstable and got the below. I think this should be regarded as a bug, but what is it a bug in? dpkg? Configuration file '/etc/smartd.conf' ==> Modified (by you or by a script) since installation. ==> Package distributor has shipped an updated

Accepted refpolicy 2:2.20190201-7 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted etbemon 1.3.3-5 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 06 Jan 2020 17:04:00 +1100 Source: etbemon Binary: mon mon-dbgsym Architecture: source amd64 Version: 1.3.3-5 Distribution: unstable Urgency: medium Maintainer: Debian Mon Maintainers Changed-By: Russell Coker Description

Accepted refpolicy 2:2.20190201-4 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted etbemon 1.3.3-4 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 30 Apr 2019 20:38:26 +1000 Source: etbemon Binary: mon mon-dbgsym Architecture: source amd64 Version: 1.3.3-4 Distribution: unstable Urgency: medium Maintainer: Debian Mon Maintainers Changed-By: Russell Coker Description

Accepted refpolicy 2:2.20190201-3 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted refpolicy 2:2.20190201-2 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted refpolicy 2:2.20190201-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted refpolicy 2:2.20180701-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted refpolicy 2:2.20180114-5 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers Changed-By: Russell Coker Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy for building modules selinux-policy-doc - Documentation

Accepted bonnie++ 1.98 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 26 Dec 2018 15:14:28 +1100 Source: bonnie++ Binary: bonnie++ Architecture: source amd64 Version: 1.98 Distribution: unstable Urgency: medium Maintainer: Russell Coker Changed-By: Russell Coker Description: bonnie++ - Hard

Accepted etbemon 1.3.3-3 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 23 Jul 2018 15:24:34 +1000 Source: etbemon Binary: mon Architecture: source amd64 Version: 1.3.3-3 Distribution: unstable Urgency: medium Maintainer: Debian Mon Maintainers Changed-By: Russell Coker Description: mon

Accepted etbemon 1.3.3-2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 11 Jul 2018 01:40:04 +1000 Source: etbemon Binary: mon Architecture: source amd64 Version: 1.3.3-2 Distribution: unstable Urgency: medium Maintainer: Debian Mon Maintainers Changed-By: Russell Coker Description: mon

Accepted refpolicy 2:2.20180114-3 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted checkpolicy 2.7-2 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: checkpolicy - SELinux policy compiler Closes: 895988 Changes: checkpolicy (2.7-2) unstable; urgency=medium . * https://marc.info/?l=selinux=152078548332657=raw Add the above patch for sctp support and

Accepted libsepol 2.7-2 (source amd64) into unstable

-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: libsepol1 - SELinux library for manipulating binary security policies libsepol1-dev - SELinux binary policy manipulation library and development files sepol-utils - Security Enhanced Linux po

Accepted refpolicy 2:2.20180114-2 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20180114-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted etbemon 1.3.2-3 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Changes: etbemon (1.3.2-3) unstable; urgency=medium . * Make smtpswaks.monitor use long form swaks arguments for ease of searching the man pa

Accepted refpolicy 2:2.20171228-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Re: recommends for apparmor in newest linux-image-4.13

One thing that would be good to have is a set of profiles for Puppet or something similar for installing a variety of common Debian configurations. This could be used for testing SE Linux as well as anything else one might want to test. If we had automated tests for the most common webapps,

Accepted etbemon 1.3.2-2 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Closes: 876088 878850 Changes: etbemon (1.3.2-2) unstable; urgency=medium . * Conflict with mon-contrib (<= 1.0+dfsg-3+nmu1), Closes: #

Accepted etbemon 1.3.2-1 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Changes: etbemon (1.3.2-1) unstable; urgency=medium . * Made http.monitor use strict and made it not give an error if the server d

Accepted refpolicy 2:2.20161023.1-10 (source all) into unstable

: unstable Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted etbemon 1.3.0-1 (source amd64) into unstable, unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Changes: etbemon (1.3.0-1) unstable; urgency=medium . * Forked upstream and renamed it to etbemon Checksums-Sha1: 7b0496f0436f47b99769e5230eb10c275

Accepted etbemon 1.3.1-1 (source amd64) into unstable, unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Closes: 870238 870239 Changes: etbemon (1.3.1-1) unstable; urgency=medium . * Fixed up the hack for freespace.monitor. * Stop using quilt

Accepted mon-contrib 1.0+dfsg-4 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 27 Aug 2017 14:57:17 +1000 Source: mon-contrib Binary: mon-contrib Architecture: source amd64 Version: 1.0+dfsg-4 Distribution: unstable Urgency: medium Maintainer: Dario Minnucci <mid...@debian.org> Changed-By: Russell

Accepted mon 1.2.0-12 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Changes: mon (1.2.0-12) unstable; urgency=medium . * Made btrfs and zfs checks accept low and high numbers for error counts. * Add softraid2.m

Accepted mon 1.2.0-11 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Changes: mon (1.2.0-11) unstable; urgency=medium . * Make zfs.monitor and btrfs.monitor alert when you forget to fix the okcount after fix

Accepted mon 1.2.0-10 (source amd64) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: mon- monitor hosts/services/whatever and alert about problems Changes: mon (1.2.0-10) unstable; urgency=medium . * Change to team maintainership. * Make loadavg.monitor report on D state processes and pro

Accepted refpolicy 2:2.20161023.1-9 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20161023.1-8 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted mon 1.2.0-9+nmu4 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 16 Jan 2017 12:16:21 +1100 Source: mon Binary: mon Architecture: source amd64 Version: 1.2.0-9+nmu4 Distribution: unstable Urgency: medium Maintainer: Dario Minnucci <mid...@debian.org> Changed-By: Russell Coker

Accepted refpolicy 2:2.20161023.1-7 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20161023.1-6 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted cyclades-serial-client 0.93 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sat, 31 Dec 2016 16:37:21 +1100 Source: cyclades-serial-client Binary: cyclades-serial-client Architecture: source amd64 Version: 0.93 Distribution: unstable Urgency: medium Maintainer: Russell Coker <russ...@coker.com.au> C

Accepted sredird 2.2.1-2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 30 Dec 2016 15:44:42 +1100 Source: sredird Binary: sredird Architecture: source amd64 Version: 2.2.1-2 Distribution: unstable Urgency: medium Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted refpolicy 2:2.20161023.1-5 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20161023.1-4 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted logtools 0.13e (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 26 Dec 2016 02:11:11 +1100 Source: logtools Binary: logtools Architecture: source amd64 Version: 0.13e Distribution: unstable Urgency: medium Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted mon 1.2.0-9+nmu3 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 21 Dec 2016 21:08:11 +1100 Source: mon Binary: mon Architecture: source amd64 Version: 1.2.0-9+nmu3 Distribution: unstable Urgency: medium Maintainer: Dario Minnucci <mid...@debian.org> Changed-By: Russell Coker

Accepted mon 1.2.0-9+nmu2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 21 Dec 2016 20:47:11 +1100 Source: mon Binary: mon Architecture: source amd64 Version: 1.2.0-9+nmu2 Distribution: unstable Urgency: medium Maintainer: Dario Minnucci <mid...@debian.org> Changed-By: Russell Coker

Accepted refpolicy 2:2.20161023.1-3 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted mon-contrib 1.0+dfsg-3+nmu1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 08 Dec 2016 22:28:15 +1100 Source: mon-contrib Binary: mon-contrib Architecture: source amd64 Version: 1.0+dfsg-3+nmu1 Distribution: unstable Urgency: medium Maintainer: Dario Minnucci <mid...@debian.org> Changed-By: R

Accepted mon 1.2.0-9+nmu1 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 12 Dec 2016 10:00:22 +1100 Source: mon Binary: mon Architecture: source amd64 Version: 1.2.0-9+nmu1 Distribution: unstable Urgency: medium Maintainer: Dario Minnucci <mid...@debian.org> Changed-By: Russell Coker

Accepted libfilesys-diskspace-perl 0.05-16+nmu2 (source all) into unstable

org> Changed-By: Russell Coker <russ...@coker.com.au> Description: libfilesys-diskspace-perl - fetch filesystem size and usage information from Perl Closes: 821103 Changes: libfilesys-diskspace-perl (0.05-16+nmu2) unstable; urgency=medium . * Non-maintainer upload. * Add suppo

Accepted memlockd 1.2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 14 Dec 2016 13:55:24 +1100 Source: memlockd Binary: memlockd Architecture: source amd64 Version: 1.2 Distribution: unstable Urgency: low Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted memlockd 1.1.2 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Wed, 14 Dec 2016 12:06:09 +1100 Source: memlockd Binary: memlockd Architecture: source amd64 Version: 1.1.2 Distribution: unstable Urgency: low Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted selinux-basics 0.5.6 (source all) into unstable

-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-basics - SELinux basic support Closes: 504412 Changes: selinux-basics (0.5.6) unstable; urgency=medium . [ Laurent Bigonville ] * debian/gbp.conf: Sign tags by default [ Russell Coker ] * Make post

Accepted postal 0.75 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 13 Dec 2016 23:00:46 +1100 Source: postal Binary: postal Architecture: source amd64 Version: 0.75 Distribution: unstable Urgency: medium Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted bonnie++ 1.97.3 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 13 Dec 2016 13:37:51 +1100 Source: bonnie++ Binary: bonnie++ Architecture: source amd64 Version: 1.97.3 Distribution: unstable Urgency: medium Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted refpolicy 2:2.20161023.1-2 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20161023.1-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20161023-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted refpolicy 2:2.20151208-1 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers <selinux-de...@lists.alioth.debian.org> Changed-By: Russell Coker <russ...@coker.com.au> Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux refe

Accepted postal 0.74 (source amd64) into unstable

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 30 Jun 2016 18:07:19 +1000 Source: postal Binary: postal Architecture: source amd64 Version: 0.74 Distribution: unstable Urgency: medium Maintainer: Russell Coker <russ...@coker.com.au> Changed-By: Russell Coker

Accepted refpolicy 2:2.20140421-9 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted refpolicy 2:2.20140421-7 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted refpolicy 2:2.20140421-6 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted refpolicy 2:2.20140421-5 (source all) into unstable

Urgency: medium Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted goplay 0.5-1.2 (source amd64) into unstable

-By: Russell Coker russ...@coker.com.au Description: goplay - games (and more) package browser using DebTags Closes: 755404 Changes: goplay (0.5-1.2) unstable; urgency=medium . * Non-maintainer upload. * Build against latest libept Closes: #755404 Checksums-Sha1

Accepted refpolicy 2:2.20140421-3 (source all)

Urgency: medium Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted refpolicy 2:2.20140421-2 (source all)

Urgency: medium Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Re: socket-based activation has unmaintainable security?

On Thu, 7 Feb 2013, Thomas Goirand z...@debian.org wrote: I think he's referring to allowing processes which require listening to a port under 1024 to run without superuser privileges. I believe our implementation on Debian (e.g. Apache) is to have the process start as root, start

Re: Feedback

On Tue, 25 Dec 2012, Mistikos Nik kolus...@yandex.com wrote: Debian use to be really popular. Now only old people use it. Why because new comers will choose a well documented distro over one that doesn't make sense. Life is too short to fuck around. In private mail he said Being anonymous on

Re: Accepted bonnie++ 1.97 (source amd64)

On Fri, 23 Nov 2012, Adam D. Barratt a...@adam-barratt.org.uk wrote: On 23.11.2012 08:47, Russell Coker wrote: Format: 1.8 Date: Fri, 15 Jan 2010 20:26:55 +1100 Really? That was a mistake. I'm afraid I've removed that upload from testing-proposed-uploads. Testing and unstable

Accepted bonnie++ 1.97.1 (source amd64)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Fri, 23 Nov 2012 20:12:46 +1100 Source: bonnie++ Binary: bonnie++ Architecture: source amd64 Version: 1.97.1 Distribution: unstable Urgency: medium Maintainer: Russell Coker russ...@coker.com.au Changed-By: Russell Coker russ

Re: systemd

On Thu, 22 Nov 2012, Nikolaus Rath nikol...@rath.org wrote: I read through some of the systemd man page and a little of the original design document. I think I have a rough idea of what systemd thinks it is. But I am not able to form a sound foundation from the ideas systemd describes.

Re: Systemd

On Thu, 22 Nov 2012, Kevin Toppins kevin.topp...@gmail.com wrote: I respect that you are free to make up your mind, and I do not want that fundamental freedom to go away. So I ask you, please, just give this more than a passing thought. I know that this is debian's list, but please just look

Re: Gentoo guys starting a fork of udev

On Sat, 17 Nov 2012, Paul Wise p...@debian.org wrote: Maybe systemd is faster, but i think being unable to do a normal reboot is an important drawback. systemd reboots just fine. It also kills all processes just like sysvinit does. I have also had problems with systemd not rebooting as

Re: major linux problems summary 2012

On Sun, 4 Nov 2012, Salvo Tomaselli tipos...@tiscali.it wrote: Linux/open source developers are usually not interested in fixing bugs if they cannot easily reproduce them. This problem plagues virtually all Open Source projects. Well in proprietary software you are usually required to

Re: Discarding uploaded binary packages

On Thu, 18 Oct 2012, Michael Gilbert mgilb...@debian.org wrote: Maybe someone would be interested in writing a lintian check for these issues? Something a bit more advanced than this $ strings /sbin/dhclient | grep ^PATH

Re: Discarding uploaded binary packages

On Thu, 18 Oct 2012, Paul Wise p...@debian.org wrote: On Thu, Oct 18, 2012 at 10:20 AM, Russell Coker wrote: We could have a lintian warning for any occurance of the string /home in a packaged file and have error conditions for /build and the current value of $HOME for the account running

Re: Discarding uploaded binary packages

On Tue, 16 Oct 2012, Jakub Wilk jw...@debian.org wrote: * martin f krafft madd...@debian.org, 2012-10-16, 08:21: This is my opinion but I admit I have not followed previous discussions on the subject http://lists.debian.org/debian-security/2004/09/msg00014.html We have not cared

Re: Discarding uploaded binary packages

On Tue, 16 Oct 2012, Arno Töll a...@debian.org wrote: On 16.10.2012 14:00, Russell Coker wrote: There are a fairly small number of Debian servers. So even if the probability of system compromise for a Debian server was the same as for a laptop owned by a random DD the fact that DD

Re: Discarding uploaded binary packages

On Wed, 17 Oct 2012, Barry Warsaw ba...@python.org wrote: I also think allowing source-only uploads makes for easier contributions, and thus hopefully more contributions. Why would it be easier? Surely we still want people to build packages first to ensure that we don't needlessly get FTBFS

Re: nacl and CPU frequency.

On Sun, 23 Sep 2012, Thomas Preud'homme robo...@celest.fr wrote: Le dimanche 23 septembre 2012 01:42:01, Ben Hutchings a écrit : So the build process is trying to determine which method will work? Then what if it settles on some method that is available on the build machine's kernel, but

Re: nacl and CPU frequency.

On Sun, 23 Sep 2012, peter green plugw...@p10link.net wrote: In order to build successfully nacl needs to determine the CPU frequency (the CPU frequency determined at build time is not used in the final binaries afaict but if it's not determined then the build will fail as it will consider

Re: greater popularity of Debian on AMD64?

On Sat, 8 Sep 2012, Henrique de Moraes Holschuh h...@debian.org wrote: If 64-bit PC is too vague, the alternative designator for the amd64 arch is the vendor neutral x86-64. The vendor-neutral designator for all of i386, i486, i586, i686, amd64 and x32 is x86 (i.e. it is for both 32-bit and

Re: CD sizes again (and BoF reminder!)

On Mon, 23 Jul 2012, Adam Borowski kilob...@angband.pl wrote: You tested ext4. On btrfs, dpkg is around an order of magnitude slower, making using it without eatmydata a laughable idea. And that's on a filesystem whose features include: * transactions (so all dpkg processing could be done

Re: EFI in Debian

On Tue, 10 Jul 2012, Thomas Preud'homme robo...@celest.fr wrote: When the flaws was exploited, then the attacker had sufficient access to change e.g. EFI and could thus have done whatever nasty things he wanted on the system. And as long as the system is not rebooted, nothing can prevent it to

Re: EFI in Debian

On Sun, 8 Jul 2012, Wookey woo...@wookware.org wrote: The distinction is between x86 and ARM, and the Windows 8 cert requirements for ARM appear to have as their goal to prevent any other OS to be bootable on that hardware. Which is pretty outrageous IMHO and may well become a serious

Re: Proposal for stage-1 boot loader for use with SecureBoot [Re: [Long] UEFI support]

On Fri, 6 Jul 2012, Rick Thomas rbtho...@pobox.com wrote: We need a stage-1 boot loader, signed by somebody trusted (FSF? SFLC?) with a key that will be recognized by the SecureBoot BIOS. This is an un-changable binary blob, so it can't be GPL (is this a problem?) There is no reason why GPL

Re: Improving our response to duplicate packages in Debian

On Sat, 30 Jun 2012, Michael Hanke m...@debian.org wrote: I think this is approaching the problem from the wrong end. Instead of preserving the status quo and asking oracles to predict the future we should have better means of removing software that has proven to be inferior of an equivalent

Accepted portslave 2010.04.19.1 (source amd64)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Sat, 30 Jun 2012 17:05:33 +1000 Source: portslave Binary: portslave Architecture: source amd64 Version: 2010.04.19.1 Distribution: unstable Urgency: high Maintainer: Russell Coker russ...@coker.com.au Changed-By: Russell Coker russ

Accepted refpolicy 2:2.20110726-9 (source all)

Urgency: high Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted policycoreutils 2.1.10-9 (source amd64)

...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: policycoreutils - SELinux core policy utilities Closes: 474956 677759 678590 Changes: policycoreutils (2.1.10-9) unstable; urgency=high . * Revert the munging of setrans.conf which was introduced in 2.1.10-7. Closes

Accepted refpolicy 2:2.20110726-8 (source all)

Urgency: high Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Re: Report from the Bug Squashing Party in Salzburg

On Thu, 21 Jun 2012, Bernd Zeimetz be...@bzed.de wrote: Seriously, thats all fine stuff, but if having a hangout with 10+ people on google+ helps Debian to get the bugs squashed, I can't see a reason why we should not use it. It is much more pain free to use than any other solution we have in

Re: Report from the Bug Squashing Party in Salzburg

On Thu, 21 Jun 2012, Jon Dowland j...@debian.org wrote: On Thu, Jun 21, 2012 at 10:55:28PM +1000, Russell Coker wrote: On Thu, 21 Jun 2012, Bernd Zeimetz be...@bzed.de wrote: Seriously, thats all fine stuff, but if having a hangout with 10+ people on google+ helps Debian to get the bugs

Accepted refpolicy 2:2.20110726-7 (source all)

Urgency: high Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted memlockd 1.1.1 (source amd64)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Wed, 20 Jun 2012 20:06:20 +1000 Source: memlockd Binary: memlockd Architecture: source amd64 Version: 1.1.1 Distribution: unstable Urgency: high Maintainer: Russell Coker russ...@coker.com.au Changed-By: Russell Coker russ

Accepted refpolicy 2:2.20110726-6 (source all)

Urgency: low Maintainer: Debian SELinux maintainers selinux-de...@lists.alioth.debian.org Changed-By: Russell Coker russ...@coker.com.au Description: selinux-policy-default - Strict and Targeted variants of the SELinux policy selinux-policy-dev - Headers from the SELinux reference policy

Accepted memlockd 1.1 (source amd64)

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Format: 1.8 Date: Sat, 16 Jun 2012 15:43:44 +1000 Source: memlockd Binary: memlockd Architecture: source amd64 Version: 1.1 Distribution: unstable Urgency: high Maintainer: Russell Coker russ...@coker.com.au Changed-By: Russell Coker russ

  1   2   3   4   5   6   7   8   9   10   >