On Wednesday 18 March 2009 11:43:40 Peter Pentchev wrote: > Dear mentors,
Hello Peter, > I am looking for a sponsor for my package "confget". > > * Package name : confget > Version : 1.01-1 > Upstream Author : Peter Pentchev <[email protected]> (myself) > * URL : http://devel.ringlet.net/textproc/confget/ > * License : Two-clause BSD > Section : text > > It builds these binary packages: > confget - read variables from INI-style configuration files > > The package has been lintian- and pbuilder-tested. > > The upload would fix these bugs: 502543 (ITP) > > The package can be found on mentors.debian.net: > dget -x > http://mentors.debian.net/debian/pool/main/c/confget/confget_1.01-1.dsc > > Here is the long description of the package: > > The confget utility examines a INI-style configuration file and retrieves > the value of the specified variables from the specified section. > Its intended use is to let shell scripts use the same INI-style > configuration files as other programs, to avoid duplication of data. > > The confget utility may retrieve the values of one or more variables, > list all the variables in a specified section, list only those whose names > or values match a specified pattern (shell glob or regular expression), or > check if a variable is present in the file at all. It has a > "shell-quoting" output mode that quotes the variable values in a way > suitable for passing them directly to a Bourne-style shell. It took me some time to assimilate the hardening notes at wiki.d.o [1], I'm remotely familiar with, though this document is informative enough about potential build and run-time failures on different architectures wrt compiler/linker hardening options. Anyway, buildd logs and buglogs should be monitored closely, and in case of troublesome behaviour we should disable features via DEB_BUILD_HARDENING_[feature]=0. The question is: is it worth the effort? Let's say, I'm fine either way ;-) A couple of minor points: confget(1) manpage references to a non-existing Config::IniFiles(3) which potentially should describe the syntax of ini configuration files if I'm not mistaken? It would be even better to include some short configuration files samples/examples in the binary package itself. Your own t{1|2}.ini should suffice. Otherwise, the package looks useful and the source code very clean and sound. Let me know what you think about the above points, and I'll sponsor. [1] http://wiki.debian.org/Hardening -- pub 4096R/0E4BD0AB 2003-03-18 <people.fccf.net/danchev/key pgp.mit.edu> -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]

