Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Gian Piero Carrubba

* [Mon, Sep 01, 2014 at 08:48:25PM +0200] Thijs Kinkhorst:
[needrestart]

- Do people agree that this would be something that's good to have in a
default installation? Are there drawbacks?


I like needrestart and I added it to my standard toolbox since its 
admission in Debian (well, it took some versions for being really usable 
with a readline front-end), so I second this proposal.
Please however note that it is not a replacement for checkrestart or a 
plain lsof, as it doesn't care for programs that don't have an init 
script. Maybe for such programs needrestart should warn and advice that 
a manual intervention is required, in the same way it currently does for 
kernel upgrades ?


Ciao,
Gian Piero.


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140903081758.gb4...@butterfly.fdc.rm-rf.it



Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Michael Stone

On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote:

This package is Priority: optional, and therefore not installed by
default.  What about just making it important or required?


On my system it pulled in more than 20MB of dependencies. That's a lot 
to push onto every debian system.


Mike Stone


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/eec95f46-336a-11e4-9da6-00163eeb5...@msgid.mathom.us



Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Thijs Kinkhorst
On Wed, September 3, 2014 15:05, Michael Stone wrote:
 On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote:
This package is Priority: optional, and therefore not installed by
default.  What about just making it important or required?

 On my system it pulled in more than 20MB of dependencies. That's a lot
 to push onto every debian system.

Hmm, yes. The sole culprit of this is libclass-methodmaker-perl, which is
a dependency of libterm-progressbar-perl. I'm not enough of a perl wizard
to understand why a progressbar would need 20 MB of perl module to work,
and whether this is fixable.


Cheers,
Thijs


-- 
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/d4296ef9a54ea809b6095c2ddd503a85.squir...@aphrodite.kinkhorst.nl



Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Jameson Graef Rollins
On Wed, Sep 03 2014, Michael Stone mst...@debian.org wrote:
 On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote:
This package is Priority: optional, and therefore not installed by
default.  What about just making it important or required?

 On my system it pulled in more than 20MB of dependencies. That's a lot 
 to push onto every debian system.

Is 20MB really a lot?  That seems like essentially nothing to me
nowadays.  I'm in the middle of a 2.2GB upgrade right now.

jamie.


pgpt8QUSPqj2A.pgp
Description: PGP signature


Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Wadih Maalouf

On Wed, 3 Sep 2014, Jameson Graef Rollins wrote:


On Wed, Sep 03 2014, Michael Stone mst...@debian.org wrote:

On Tue, Sep 02, 2014 at 01:41:05PM -0700, Jameson Graef Rollins wrote:

This package is Priority: optional, and therefore not installed by
default.  What about just making it important or required?


On my system it pulled in more than 20MB of dependencies. That's a lot
to push onto every debian system.


Is 20MB really a lot?  That seems like essentially nothing to me
nowadays.  I'm in the middle of a 2.2GB upgrade right now.

jamie.

I just installed alpine as my plain text email client and that fits in 
less than 8MB of dependencies altogether.


The checkrestart utility weighing 20MB can probably be fixed.


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/alpine.DEB.2.02.1409031516330.16927@wadih4



Re: Checking for services to be restarted on a default Debian installation

2014-09-03 Thread Michael Stone

On Wed, Sep 03, 2014 at 11:34:46AM -0700, Jameson Graef Rollins wrote:

Is 20MB really a lot?  That seems like essentially nothing to me
nowadays.  I'm in the middle of a 2.2GB upgrade right now.


It sure is for people doing minimal installations in a number of 
contexts. Yeah, it's nothing compared to gnome. It is a pretty 
significant fraction of debian's current minimum footprint.


Mike Stone


--
To UNSUBSCRIBE, email to debian-security-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/9ee25b2c-33a6-11e4-a3dc-00163eeb5...@msgid.mathom.us



Call for testing: gnupg update

2014-09-03 Thread Salvatore Bonaccorso
Hi,

The upcoming gnupg update introduces import functions that apply a
constraining filter to imported keys, allowing to ensure that the keys
fetched from the keyserver are in fact those selected by the user
beforehand. The initial patch introduced regressions which were fixed
upstream. 

Please test the packages from
https://people.debian.org/~carnil/tmp/gnupg-pre-dsa/

If you find further regressions regarding those fixes please report
the problem directly to th...@debian.org and car...@debian.org

Regards,
Salvatore


signature.asc
Description: Digital signature


External check

2014-09-03 Thread Raphael Geissert
CVE-2013-2597: RESERVED
--
The output might be a bit terse, but the above ids are known elsewhere,
check the references in the tracker. The second part indicates the status
of that id in the tracker at the moment the script was run.


-- 
To UNSUBSCRIBE, email to debian-security-tracker-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
https://lists.debian.org/5406b8c1.o4wh2+p5tpydb3o0%atomo64+st...@gmail.com