Bug#881969: making bootable SD cards

2017-11-17 Thread Joey Hess
Vagrant Cascadian wrote: > u-boot-install --board=Cubietruck --device=/dev/mmcblk0 > > u-boot is where the information such as > supported boot media and device offsets generally comes from, as it > sometimes changes changes between different versions of u-boot Verison specificity is another

Bug#881969: making bootable SD cards

2017-11-17 Thread Joey Hess
Karsten Merker wrote: > to use d-i/flash-kernel on the target device, one obviously needs > to already have put a u-boot onto the device in some form (such > as preinstalled in the d-i SD card images), otherwise one > couldn't have booted it Not necessarily, see for example /target in d-i when

Bug#882024: allow bind mounting the qemu binaries into a chroot

2017-11-17 Thread Joey Hess
Package: qemu-user-static Version: 1:2.10.0+dfsg-2 Severity: wishlist qemu-debootstrap's approach of copying the host emulation binary into the chroot is kind of messy. Nothing updates that binary when this package is upgraded. If the chroot is turned into a bootable disk image on the target

Bug#881969: making bootable SD cards

2017-11-16 Thread Joey Hess
Package: flash-kernel Version: 3.87 Severity: normal Therefore you usually have to setup an SD card with the appropriate u-boot version for your particular device (see below) as a prerequisite for installing Debian. If you use the pre-made SD card images with the installer, this step is

Bug#881280: update for zsh and fish completions

2017-11-09 Thread Joey Hess
Package: libghc-optparse-applicative-dev Version: 0.13.2.0-1+b1 Severity: normal Version 0.14 added support for zsh and fish completion. git-annex uses that feature. -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1,

Bug#879723: can get stuck in state INSANE and stop responding

2017-10-24 Thread Joey Hess
Package: netplug Version: 1.2.9.2-3 Severity: normal If the netplug script fails to bring up the interface, netplug can put it into state INSANE. Unfortunately, it never leaves that state, preventing netplug from responding to further link changes. This log shows the problem occurring. Probably

Bug#874321: backtraces from generic extractor: "Compressed file ended before the end-of-stream marker was reached"

2017-10-24 Thread Joey Hess
Rogério Brito wrote: > I believe that you meant to file this as a Python bug and I think that the > severity is, quite frankly, lower than normal... I don't think this is a python bug. It's reasonable for pythons's gzip library to fail when presented with corrupted data. It does not know it's

Bug#877256: stack is too old to use current nightlies

2017-09-29 Thread Joey Hess
Package: haskell-stack Version: 1.1.2-8 Severity: normal joey@darkstar:~/src/git-annex> git diff diff --git a/stack.yaml b/stack.yaml index d40b53ee9..afde86b0d 100644 --- a/stack.yaml +++ b/stack.yaml @@ -23,4 +23,4 @@ extra-deps: - yesod-default-1.2.0 explicit-setup-deps: git-annex: true

Bug#874321: backtraces from generic extractor: "Compressed file ended before the end-of-stream marker was reached"

2017-09-04 Thread Joey Hess
Package: youtube-dl Version: 2017.05.18.1-1 Severity: normal joey@darkstar:~>youtube-dl http://debian.org/ [generic] debian: Requesting header [redirect] Following redirect to http://www.debian.org/ [generic] www.debian: Requesting header WARNING: Falling back on generic information extractor.

Bug#873115: Acknowledgement (concurrent apache2 -k graceful hang)

2017-08-24 Thread Joey Hess
Seems similar to #779077. mod_fcgid is not enabled on our server. Regular cgi scripts are in use and one is quite likely running when apache is reloaded. Using mpm_worker. -- see shy jo signature.asc Description: PGP signature

Bug#873115: concurrent apache2 -k graceful hang

2017-08-24 Thread Joey Hess
Package: apache2 Version: 2.4.25-3+deb Severity: normal I woke up to a server with hundreds of apach2e -k graceful processes running. This prevented any cgis from running since it was nearly out of process slots. 2142 ?SNs0:01 /usr/sbin/apache2 -k graceful 6007 ?SN 0:00

Bug#872278: setResponseTimeout Nothing has silently changed behavior with http-client 0.5.0

2017-08-15 Thread Joey Hess
Package: libghc-dav-dev Version: 1.3.1-2+b5 Severity: normal Proir to http-client 0.5.0, setResponseTimeout Nothing disabled the timeout entirely. However with http-client 0.5.0, setResponseTimeout Nothing sets responseTimeout = responseTimeoutDefault, which is 30 seconds. I want to entirely

Bug#872187: package description unclear about API breaking version numbers

2017-08-14 Thread Joey Hess
Source: borgbackup Version: 1.0.11-3 Severity: normal Please note that the server and the client should be on the same version of borgbackup. Using different versions of borgbackup on client and server might result in 'incompatible API version' error messages and a non-working backup. Could

Bug#869843: Jul 26 19:37:49 honeybee dnsmasq[31624]: sed: -e expression #1, char 103: Invalid range end

2017-07-26 Thread Joey Hess
Source: dnsmasq Severity: normal Version: 2.77-2 Noticed the subject message in the journal. It does not seem to break basic functionality. Probably caused by the sed in the init script. -- see shy jo signature.asc Description: PGP signature

Bug#844056: hard coded mac address

2017-07-26 Thread Joey Hess
My cubietruck needs this file for wifi to work. However, the MAC address hardcoded in the file is not used. -- see shy jo signature.asc Description: PGP signature

Bug#867408: upgrade logged me out, stopped network-manager; kernel: dbus-daemon[650]: segfault at 0 ip 0000562c3192e620 sp 00007ffd9c679798 error 6 in dbus-daemon

2017-07-06 Thread Joey Hess
Simon McVittie wrote: > On Thu, 06 Jul 2017 at 09:58:35 -0400, Joey Hess wrote: > > I ran apt-get dist-upgrade to unstable today > > What state were you upgrading from? > > What version of `dbus-daemon --system` was running on your system? Your > apt logs mig

Bug#867408: upgrade logged me out, stopped network-manager; kernel: dbus-daemon[650]: segfault at 0 ip 0000562c3192e620 sp 00007ffd9c679798 error 6 in dbus-daemon

2017-07-06 Thread Joey Hess
Simon McVittie wrote: > On Thu, 06 Jul 2017 at 09:58:35 -0400, Joey Hess wrote: > > Jul 06 09:16:38 darkstar dbus[650]: [system] Unable to reload > > configuration: (null) > > Jul 06 09:16:38 darkstar dbus-daemon[650]: Unable to reload configuration: > > (null) &

Bug#867408: upgrade logged me out, stopped network-manager; kernel: dbus-daemon[650]: segfault at 0 ip 0000562c3192e620 sp 00007ffd9c679798 error 6 in dbus-daemon

2017-07-06 Thread Joey Hess
Package: dbus Version: 1.10.20-1 Severity: normal I ran apt-get dist-upgrade to unstable today from a xfce4-terminal and at some point in the upgrade the entire X session uncerimoniously ended, losing anything I was working on at the time and dumping me back into the lightdm login screen. When I

Bug#865705: assword gui does not appear when key is expired

2017-06-23 Thread Joey Hess
Package: assword Version: 0.10-2 Severity: normal When the gpg key used to sign the assword database has expired, assword gui does not display any indication of the problem, except to stderr. When it's bound to a key, the user has no way to know what's wrong unless they think to look in the logs.

Bug#864530: uuid parsing accepts invalid UUIDs, with potential security consequences

2017-06-09 Thread Joey Hess
Package: uuid Version: 1.6.2-1.5+b4 Severity: normal joey@darkstar:~>uuid -d 4eb841ca-ce98-4590-8ea2-c4643bfa537bad encode: STR: 4eb841ca-ce98-4590-8ea2-c4643bfa537b SIV: 104636500717844908867795278139605275515 decode: variant: DCE 1.1, ISO/IEC 11578:1996 version: 4

Bug#864507: patch: support bash completion for add-on git commands

2017-06-09 Thread Joey Hess
256; c=simple/simple; d=joeyh.name; s=mail; t=1437067354; bh=S41M8xrs0gjLpTaf2Y78ysFHAKcge7Ulwdhy/OHE+N8=; h=Date:From:To:Subject:From; b=kVB/G+GKKLHrAS99NIkJVVzUp5fFhkDT+KmoUt4RAfoInQq+gOpPDIHOoT8uo/ikU 5KuhVw2HYK7SKgPUi+h5okRafG+i0Y65RlM49f4k9jFoJ43oU0F3p4k3npGYsM3Tef OwtYrGNA0M4+15XcBl0yKMcBSpRIFfj9hI2u

Bug#864505: bash completion does not work

2017-06-09 Thread Joey Hess
Package: git-hub Version: 0.11.0-1 Severity: normal In bash, typing "git-hub " does not offer any completions. There must be a problem with the included bash completion file. -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1,

Bug#863910: haskell highlighting colors lines starting with # operator in red

2017-06-01 Thread Joey Hess
Package: vim Version: 2:8.0.0197-4 Severity: normal This in foo.hs will show the problem when loaded in vim with no local ~/.vimrc or ~/.vim: main = print (munge "world hello,") munge = words # reverse # unwords (#) = flip (.) Both of the lines starting with "#" are displayed

Bug#862350: importfeed debug print

2017-05-11 Thread Joey Hess
Package: git-annex Version: 6.20170101-1+b1 Severity: normal git-annex importfeed prints out ("link", url) debugging lines. This debug print was accidentially shipped in this version of git-annex, a62802af087e5c06f23a654a9d7023e3ae8df956 is a patch to remove it. -- System Information: Debian

Bug#861780: README does not mention pause key combo

2017-05-03 Thread Joey Hess
Package: kazam Version: 1.4.5-2 Severity: normal The README documents some keyboard shortcuts, but no the one for pausing which is SUPER-CTRL-P -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture:

Bug#800134: new version

2017-04-29 Thread Joey Hess
Turns out wotsap 0.3 file format supports 16 length ids. http://pgp.cs.uu.nl/archive/wot-0.3/latest.wot The version of wotsap in debian does not support that format. I feel that this is a security problem; the current wotsap provides a false sense of security to any users given that the whole

Bug#800134: +1

2017-04-29 Thread Joey Hess
This makes wotsap not secure enough for use by the program I had wanted to use it. Short key ids are too easily spoofed to be useful. IMHO, wotsap should support full length key fingerprints, I don't want to use any form of truncated ids when finding trust paths. -- see shy jo signature.asc

Bug#776424: [kgb-maintainers] Bug#776424: can be crashed by some network traffic

2017-04-05 Thread Joey Hess
Antoine Beaupre wrote: > Joey, did you manage to reproduce this issue without an external > attacker? Can you still reproduce in 1.34? Just saw the issue again with 1..34-2 -- see shy jo signature.asc Description: PGP signature

Bug#858288: -n option does not behave as documented (or as it does in other shells)

2017-03-20 Thread Joey Hess
Package: dash Version: 0.5.8-2.4 Severity: normal joey@darkstar:~>dash -n -c 'echo hi' hi joey@darkstar:~>bash -n -c 'echo hi' joey@darkstar:~>posh -n -c 'echo hi' joey@darkstar:~> According the man page: -n noexecIf not interactive, read commands but do

Bug#858286: man page -n option documentation

2017-03-20 Thread Joey Hess
Package: bash Version: 4.4-4+b1 Severity: normal The -n option is not very well documented on the bash man page. This is the only mention of it: -DA list of all double-quoted strings preceded by $ is printed on the standard output. These are the strings that are

Bug#855994: password rotation needed field

2017-02-23 Thread Joey Hess
Package: assword Version: 0.10-2 Severity: normal It would be very useful to have a field for each password indicating when it needs to be rotated. assword could then warn when the user uses that password, and have a button to generate a new password, replacing the old one in the db. Given

Bug#852199: /snap is a FHS violation

2017-01-22 Thread Joey Hess
Package: snapd Version: 2.21-1 Severity: normal I am very surprised to see a Debian package violating the FHS so egrariously. -- System Information: Debian Release: 9.0 APT prefers unstable APT policy: (500, 'unstable'), (500, 'testing'), (1, 'experimental') Architecture: amd64 (x86_64)

Bug#846275: Info received (Bug#846275: provide a directory for hidden service socket files)

2016-12-21 Thread Joey Hess
I think I've figured out underlying problem that caused me to get confused about whether tor was able to access the sockets. Dec 21 13:50:16.000 [debug] rend_client_refetch_v2_renddesc(): Fetching v2 rendezvous descriptor for service [scrubbed] Dec 21 13:50:16.000 [info] pick_hsdir(): Could not

Bug#846275: provide a directory for hidden service socket files

2016-12-21 Thread Joey Hess
Peter Palfrader wrote: > Yes, see README.Debian in the most recent upload - > https://gitweb.torproject.org/debian/tor.git/tree/debian/README.Debian > > Please let me know if this is what you had in mind. I'd appreciate any > suggestions (or patches) for improvement :) Looks very good. --

Bug#846275: provide a directory for hidden service socket files

2016-12-20 Thread Joey Hess
Peter Palfrader wrote: > On Sun, 18 Dec 2016, Joey Hess wrote: > > > But, I was able to get it to work using /var/lib/bla/sock > > when I tried once more. > > Ok. I guess that means we don't need any particular package config fu > here. Maybe just some docum

Bug#846275: provide a directory for hidden service socket files

2016-12-18 Thread Joey Hess
Peter Palfrader wrote: > Can you retry with an info level log (see Tor#21019[1]), and maybe > strace -p -e connect the process while you're at it? > > Also, which kernel and which systemd? > > I had tried it on sid, using systemd 232-8, tor 0.2.9.7-rc-dev-.., > and 4.8.0-2-amd64 with apparmor

Bug#848508: fails to work with LANG=C

2016-12-17 Thread Joey Hess
Antoine Beaupré wrote: > That's a good point! However, wouldn't that be a bug with wormhole on OS > X (as opposed to here, on Debian, which supports UTF-8 natively). I think wormhole can be used with either python2 or python3, and the error message says this is a python3 problem, and Debian has

Bug#846275: provide a directory for hidden service socket files

2016-12-17 Thread Joey Hess
Peter Palfrader wrote: > So, maybe I'm doing something wrong, but I have configured a hidden > service socket in /var/lib/bla/sock, and I can access it just fine > without listing that directory in either the apparmor nor the systemd > service file. root@elephant:~> tail -n 2 /etc/tor/torrc

Bug#848508: fails to work with LANG=C

2016-12-17 Thread Joey Hess
Package: magic-wormhole Version: 0.8.1-2 Severity: normal joey@darkstar:~>LANG=C wormhole receive Traceback (most recent call last): File "/usr/bin/wormhole", line 11, in load_entry_point('magic-wormhole==0.8.1', 'console_scripts', 'wormhole')() File

Bug#847677: "unable to decommit memory" data loss

2016-12-10 Thread Joey Hess
Package: ghc Version: 8.0.1-14 Severity: serious git-annex: unable to decommit memory: Invalid argument This happened with a git-annex built with this ghc, and bundled with Debian's glibc (essentially a chroot), on a Fedora system with a 4.4.14 Linux kernel. It apparently then led to memory

Bug#846275: provide a directory for hidden service socket files

2016-12-08 Thread Joey Hess
Peter Palfrader wrote: > If we call it tor_hidden_service_sockets, then the onionshare usecase is > not really covered by that name. However, I'm also not sure that it's a > valid use-case - it probably ought to put the hidden service directory > into /var/lib/tor and use the control interface to

Bug#846275: provide a directory for hidden service socket files

2016-12-08 Thread Joey Hess
Peter Palfrader wrote: > I do like the idea. Do you have any suggestions on naming it? Well, the directory should only contain unix socket files for tor hidden services, so something like /var/lib/tor_hidden_service_sockets? (Path should not be too long due to the severe length limitations on

Bug#846275: FWD: Re: Bug#846275: provide a directory for hidden service socket files

2016-12-08 Thread Joey Hess
Resent as apparently public libraries have smtp-eating proxies now. - Forwarded message from Joey Hess <i...@joeyh.name> - Date: Thu, 8 Dec 2016 12:43:59 -0400 From: Joey Hess <i...@joeyh.name> To: Peter Palfrader <wea...@debian.org> Cc: 846...@bugs.debian.org Subje

Bug#846275: provide a directory for hidden service socket files

2016-12-08 Thread Joey Hess
Joey Hess wrote: > drwxr-xr-x root root /var/lib/tor_hidden_service_sockets > drwxr-x--- joey debian-tor /var/lib/tor_hidden_service_sockets/joeyservice > -rw-r- joey debian-tor > /var/lib/tor_hidden_service_sockets/joeyservice/socket Actually, I can't create a socke

Bug#847418: depends on gstreamer-plugins-bad, which is an ongoing source of security holes

2016-12-07 Thread Joey Hess
Package: libfarstream-0.2-5 Version: 0.2.8-1 Severity: normal gstreamer-plugins-bad has been in the news at least twice recently for security holes. http://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-compromising-linux-desktop.html

Bug#847417: depends on gstreamer-plugins-bad, which is an ongoing source of security holes

2016-12-07 Thread Joey Hess
Package: gnome-video-effects Version: 0.4.1-3 Severity: normal gstreamer-plugins-bad has been in the news at least twice recently for security holes. http://scarybeastsecurity.blogspot.com/2016/11/0day-exploit-compromising-linux-desktop.html

Bug#846275: provide a directory for hidden service socket files

2016-11-29 Thread Joey Hess
Package: tor Version: 0.2.8.9-1 Severity: normal When running a tor hidden service, it's desirable to run it as a different user than debian-tor, and it's safer to use a unix socket than it is to run the hidden service on a localhost port. However, when a unix socket file is used for

Bug#844598: not fixed

2016-11-24 Thread Joey Hess
Still experiencing build failures using stack until I make the workarounds to ghc's settings file described in this bug. ii ghc8.0.1-14 amd64The Glasgow Haskell Compilation sy ii haskell-stack 1.1.2-7 amd64The Haskell Tool Stack Packages using lts-6.12

Bug#840516: doesn't work with django 1.10

2016-11-14 Thread Joey Hess
I suppose this is the problem that this bug report is about: root@ia-bak:/usr/local/propellor# graphite-manage Traceback (most recent call last): File "/usr/bin/graphite-manage", line 15, in execute_from_command_line(sys.argv) File

Bug#843522: Hardcoding Tor SOCKS proxy

2016-11-10 Thread Joey Hess
Sean Whitton wrote: > Keysafe hardcodes the Tor SOCKS proxy as 127.0.0.1:9050. Do you intend > to make this configurable, or are there security reasons for forcing > localhost? > > This will determine whether the Debian package depends on tor or merely > recommends it. I feel that it should

Bug#839759: locale-gen (and localedef) read from files in current directory

2016-10-04 Thread Joey Hess
Package: locales Version: 2.24-3 Severity: normal File: /usr/sbin/locale-gen Tags: security While stracing localedef, I noticed this behavior: open("i18n", O_RDONLY) = -1 ENOENT (No such file or directory) open("/usr/share/i18n/locales/i18n", O_RDONLY) = 4 There's no chdir;

Bug#837968: key generation blocks gpg signing with another already existing key

2016-09-15 Thread Joey Hess
Package: gnupg Version: 2.1.15-2 Severity: normal I was running gpg --full-gen-key in one terminal, and it was taking a while to find enough entropy. In another terminal, I tried to make a git commit, and this hung. git was running gpg -bsau, signing using a differeny key that already exists,

Bug#836351: new mac address randomization breaks r8723au

2016-09-01 Thread Joey Hess
Package: network-manager Version: 1.4.0-3 Severity: normal My Lenovo Yoga laptop uses the r8723au kernel driver. This driver is low quality, and one of its bugs is that when asked to change the mac address, the system call succeeds, but the address is not actually changed (see #774898):

Bug#836136: new note crash related to tidy

2016-08-30 Thread Joey Hess
Package: pumpa Version: 0.9.2-1+b1 Severity: normal pumpa is crashing when I click on New Note pumpa: /build/tidy-html5-kAYBhq/tidy-html5-5.2.0/src/config.c:409: prvTidySetOptionBool: Assertion `option_defs[ optId ].type == TidyBoolean' failed. Aborted -- System Information: Debian Release:

Bug#834869: ITP: keysafe -- back up secret keys to cloud servers

2016-08-19 Thread Joey Hess
It would be fine to package keysafe now, but please be sure to note that it has not been fully security reviewed yet. It would probably make sense to keep it in experimental until version 1.x. -- see shy jo signature.asc Description: PGP signature

Bug#828779: Info received (Illegal instruction: me too)

2016-08-06 Thread Joey Hess
Unsurprisingly, building the package from source got a working program. -- see shy jo signature.asc Description: PGP signature

Bug#828779: Illegal instruction: me too

2016-08-06 Thread Joey Hess
Package: libargon2-0 Version: 0~20160406-2 Severity: normal Both the command line program argon2 and the library fail with SIGILL on my laptop. processor : 0 vendor_id : GenuineIntel cpu family : 6 model : 69 model name : Intel(R) Core(TM) i5-4210Y CPU @ 1.50GHz

Bug#799745: still not fixed...

2016-07-30 Thread Joey Hess
Over 1 year and not fixed? FWIW, the changes in 0.4.4-1 cause dh_systemd_enable to run, but there's no debian/udevil.service file, so that's a no-op. You may find dh_systemd_enable(1) useful reading. The ADD_SYSTEMD=0 business does not prevent the Makefile from installing the service file (in

Bug#825772: seems to ignore SIGHUP sometimes/somehow

2016-05-29 Thread Joey Hess
Package: alpine Version: 2.20+dfsg1-2 Severity: normal I have a server with some users who ssh in to run alpine, and often find alpine processes left behind after the users have presumably closed their terminal window or perhaps shut off their computer. I'm quite sure these nontchnical users are

Bug#825394: shim screen etc?

2016-05-28 Thread Joey Hess
Since the number of commands that start such a process is limited to screen/tmux/nohup, these could just be shimmed to do whatever's needed to let them keep running past logout. Course it would make more sense to have a proper API that such programs can use themselves. I have tried to develop

Bug#824042: gets into kill/restart loop

2016-05-11 Thread Joey Hess
Package: clamav-daemon Version: 0.99.1+dfsg-1+b2 Severity: normal clamav-daemon got into a loop on my server where it was being killed and restarting multiple times per second. This spiked load to 100. Basically a weak fork bomb. I tried systemctl stop clamav but it just started right up again.

Bug#823558: synaptics stopped being used on Lenovo Yoga laptop

2016-05-05 Thread Joey Hess
Package: xserver-xorg-input-synaptics Version: 1.8.3-1+b1 Severity: normal I rebooted today with the touchpad working fine and it came back up with it messed up (bad accelleration, no tap click). For some reason, X stopped using the synaptics driver for it and fell back to libinput instead.

Bug#820823: too many mboxes

2016-04-12 Thread Joey Hess
Package: mairix Version: 0.23+git20131125-0.4 Severity: normal Too many mboxes (max 65536, you have 71571) Well yes, I have a lot of mboxes. I'm not quite sure where mairix is getting the 71571 figure from, since my ~/mail contains only 19734 files and some of those are git repository stuff and

Bug#819365: assword gui fails to start when stderr is closed

2016-03-27 Thread Joey Hess
The reason my WM did not have stderr/stdout available is, I had started it from a terminal, disowned it, and then closed the terminal. So, stderr was pointing at /dev/pts/2, which had been deallocated. That's probably not an entirely original way to shoot oneself in the foot; I'm sure I've done

Bug#819365: assword gui fails to start when stderr is closed

2016-03-27 Thread Joey Hess
Package: assword Version: 0.8-2.1 Severity: normal Had a weird thing where my window manager's hotkey to start assword gui stopped doing anything. Apparently assword is trying to print out a warning (WARNING: could not validate OpenPGP signature on db file) and for some reason stderr is closed,

Bug#818428: lost wlan0 (r8723au) on upgrade

2016-03-20 Thread Joey Hess
Package: network-manager Version: 1.1.91-3 Severity: normal nmcli list no longer lists my wlan0 device. It's still there in iwconfig. Other (external) wifi devices are still listed and work. This was caused by the upgrade to this version of network-manager. Downgrading to 1.1.90-6 got it

Bug#818428: Acknowledgement (lost wlan0 (r8723au) on upgrade)

2016-03-18 Thread Joey Hess
Seem to be able to reproduce the problem by upgrading and rebooting. -- see shy jo signature.asc Description: PGP signature

Bug#817067: clamscan large archive DOS protection could be used to hide virus

2016-03-07 Thread Joey Hess
Package: clamav Version: 0.99+dfsg-2 Severity: important Tags: security Any script relying on clamscan's exit status can probably be tricked with a file that contains a virus, but that uses clamscan's DOS protection to trick clamscan into not scanning it in full. Unfortunately, when a file is

Bug#816860: stable backport, please

2016-03-05 Thread Joey Hess
Package: haskell-stack Version: 0.1.10.0-1 Severity: normal There's currently no way to get stack installed on stable w/o downloading a binary from a third party, without any means of verification. The source depends on a newer base than stable's ghc currently has. So, it might be somewhat

Bug#816837: dropped .ed.date.gz files in cwd

2016-03-05 Thread Joey Hess
Package: apt Version: 1.2.3 Severity: normal Tags: security I ran sudo apt-get update in a directory (~/src/git-annex), interrupted it, and noticed all these temp files, which contain ed diffs to Packages. -rw-r--r-- 1 root root 29 Feb 23 23:06 .ed.2016-02-24-0258.17.gz -rw-r--r-- 1 root root

Bug#815674: no indication when not connected

2016-02-23 Thread Joey Hess
Package: hexchat Version: 2.10.2-1+b3 Severity: normal I often find myself typing into a channel when hexchat is not connected to the server. In this situation, there is no indication that ones's words are vanishing into the void. For example, this morning I opened my laptop at the coffee shop,

Bug#815103: memory use increases with more files; OOM

2016-02-20 Thread Joey Hess
> 366 added objects in 5 minutes, and the memory increased by 55 mb. The meliae dumps for that time period grew from 807 mb to 813 mb. I don't know if that 6 mb of serialized data could use 55 mb in memory or not. Of the 3556035 lines in the last meliae dump, 3394078 were of type: str. The

Bug#815103: memory use increases with more files; OOM

2016-02-20 Thread Joey Hess
Lars Wirzenius wrote: > Hmm. The number of Python objects seems to be pretty steady, but the > memory use keeps going up. That seems to indicate a memory leak > somewhere. Well, the number of objects seems to be going up over time. 366 added objects in 5 minutes, and the memory increased by 55

Bug#815103: correction

2016-02-19 Thread Joey Hess
System has 2gb of memory, but 1gb is in use, so obnam "only" grows to 1gb. -- see shy jo signature.asc Description: PGP signature

Bug#815103: memory use increases with more files; OOM

2016-02-18 Thread Joey Hess
Package: obnam Version: 1.19.1-1 Severity: normal obnam grows in size to fill all 2 gb of memory on the system and OOMs. Memory use seems to increase the more files are backed up. I did try setting lru-size to half of the default, but this did not change much memory use. I have a meliae profile

Bug#814257: debug logging support

2016-02-09 Thread Joey Hess
Source: haskell-dav Severity: wishlist It would be helpful if there were a way to cause http requests made by this library to be fed into logging machinery. http protocol dumps can be super useful in debugging the kind of protocol issues that seem to plague DAV. -- System Information: Debian

Bug#814052: should delete .well-known/acme-challenge when it's done with it

2016-02-07 Thread Joey Hess
Package: letsencrypt Version: 0.2.0-1 Severity: normal Running letsencrypt creates .well-known/acme-challenge/ in the web root. After it's done, this directory is left, empty. It would be better for both directories to be deleted, unless something else happens to be in them. It violates least

Bug#814055: has broken binding to libgnutls-deb0.so.28

2016-02-07 Thread Joey Hess
Yaroslav Halchenko wrote: > # ldd > /usr/lib/haskell-packages/ghc/lib/x86_64-linux-ghc-7.10.3/network-protocol-xmpp-0.4.8-AArRa3ialU19Kz62aVPiMC/libHSnetwork-protocol-xmpp-0.4.8-AArRa3ialU19Kz62aVPiMC-ghc7.10.3.so > | grep gnutls-deb > libgnutls-deb0.so.28 => not found

Bug#813844: depend on xz-utils, gcc

2016-02-05 Thread Joey Hess
Package: haskell-stack Version: 0.1.10.0-1 Severity: normal stack setup fails in a clean chroot, until xz-utils and gcc are installed. I suggest making these be dependencies. -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (1,

Bug#812380: apt warns about /apt/apt.conf.d/50unattended-upgrades.ucf-dist

2016-01-22 Thread Joey Hess
Package: unattended-upgrades Version: 0.86.5+build1 Severity: normal Since I have the config file modified, every upgrade of unattended-upgrades drops a .ucf-dist copy, which causes every run of apt to warn about the file being ignored. -- System Information: Debian Release: stretch/sid APT

Bug#807968: RFP: haskell-gitlib-libgit2 -- Libgit2 backend for gitlib (haskell)

2015-12-14 Thread Joey Hess
Package: wnpp Severity: wishlist * Package name: haskell-gitlib-libgit2 * URL : http://hackage.haskell.org/package/gitlib-libgit2 * License : BSD Programming Lang: haskell Description : Libgit2 backend for gitlib (haskell) Debian includes haskell-gitlib, but that

Bug#807592: lease update to 0.13.0

2015-12-10 Thread Joey Hess
Source: haskell-aws Version: 0.11.4 Severity: normal 0.13.0 adds support for the STANDARD_IA storage class, as well as google nearline. git-annex users would like to save money by using these features. -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500,

Bug#806644: Fwd: Bug#806644: git-annex: can't add files with names >= 127 characters

2015-11-29 Thread Joey Hess
When people complain of 127 characters and filesystems, my first thought is "encfs" and my second thought is an expletive. -- see shy jo signature.asc Description: PGP signature

Bug#806677: prompts unncessarily for password for fish:// login

2015-11-29 Thread Joey Hess
Package: lftp Version: 4.6.3a-1 Severity: normal When the ssh server is configured to allow login via authorized_keys, using lftp to connect to it with fish:// results in it prompting for a password despite no password being needed. The password entered is never used. -- System Information:

Bug#806163: d-i's hardcoded list of groups should be moved to this package

2015-11-24 Thread Joey Hess
Package: base-passwd Version: 3.5.38 Severity: normal Suggest that user-setup's list of groups in its passwd/user-default-groups debconf template be moved (or copied) to base-passwd. This list does not currently seem to be available anywhere on an installed Debian system. This makes it

Bug#803405: worakaround

2015-11-02 Thread Joey Hess
Since this was getting very annoying, I wrote this script: #!/bin/sh /usr/bin/mutt "$@" ret="$?" /bin/echo -e '\e[0m' exit "$ret" Which also shows that a SGR reset is all that's missing. -- see shy jo signature.asc Description: PGP signature

Bug#803405: does not properly restore console colors on exit anymore

2015-10-29 Thread Joey Hess
Package: mutt Version: 1.5.24-1 Severity: normal Before upgrading to mutt 1.5.24, I could run mutt, press 'q' and the shell prompt was the same color as it was before mutt ran. Now, after quitting mutt, the color setting is apparently left at light grey on black. I have to run `reset` to fix it.

Bug#803406: does not properly restore console colors on exit anymore

2015-10-29 Thread Joey Hess
Package: mutt Version: 1.5.24-1 Severity: normal Before upgrading mutt to this version, running mutt and then exiting returned the terminal to how it was before. As of this version, the screen colors are not restored. Workaround: reset See attached screenshot. -- Package-specific info: Mutt

Bug#786549: much simpler approach: rsyncd package

2015-10-22 Thread Joey Hess
I'm at this bug because my rsync server, which was working, failed to start rsyncd on reboot. Apparently the systemd service is disabled, the instuctions I had followed to enable the daemon are out of date, etc. This is a silly amount of complexity and growing. Just split out a rsyncd package for

Bug#802717: nexpected os-prober when setting up grub in a disk image

2015-10-22 Thread Joey Hess
Package: grub-pc Version: 2.02~beta2-28 Severity: normal I'm creating a disk image, which I want to be bootable using grub. Unexpectedly, update-grub runs os-prober which probes the host system and adds unwanted entries for it. In the transcript below, /mnt is a loop mounted filesystem from my

Bug#800067: should depend on xz-utils

2015-09-26 Thread Joey Hess
Package: haskell-stack Version: 0.1.2.0-1 Severity: normal stack setup fails in a fresh sid chroot: Downloaded ghc-7.10.2. The following executables are missing and must be installed: xz -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable')

Bug#800068: should depend on gcc or clang

2015-09-26 Thread Joey Hess
Package: haskell-stack Version: 0.1.2.0-1 Severity: normal stack setup fails in a fresh sid choot: checking for gcc... no checking for clang... no configure: error: cannot find gcc nor clang in your PATH -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy:

Bug#800066: depends on ca-certificates

2015-09-26 Thread Joey Hess
Package: haskell-stack Version: 0.1.2.0-1 Severity: normal Using stack setup in a fresh sid chroot fails: TlsException (HandshakeFailed (Error_Protocol ("certificate has unknown CA",True,UnknownCa))) It needs to depend on ca-certificates. -- System Information: Debian Release: stretch/sid

Bug#800065: new upstream release

2015-09-26 Thread Joey Hess
Package: haskell-stack Version: 0.1.2.0-1 Severity: normal This version is probably considerably behind the current upstream 0.1.5.0 release. In particular, I am looking for the --local-bin-path option; it's annoying to not be able to direct debian users of stack to use this option. -- System

Bug#776424: debug output

2015-09-22 Thread Joey Hess
My kgb bot didn't crash again until now, when I've had 2 crashes over 4 days, with debug enabled: 2015.09.18 07:26:35: irc_raw_out 'PONG :irc.teksavvy.ca' 2015.09.18 07:27:24: irc_raw 'PING :kornbluth.freenode.net' 2015.09.18 07:27:24: irc_ping 'kornbluth.freenode.net' 2015.09.18 07:27:24:

Bug#799286: setup puts auth token in ~/.git/config

2015-09-17 Thread Joey Hess
Package: git-hub Version: 0.9.0-1 Severity: normal I have my home in git, and running git hub setup put the auth in ~/.git/config. This prevented git hub clone from working, since I ran it elsewhere and it didn't look at that config. Moving the auth token to ~/.gitconfig worked. Suggest passing

Bug#799111: classic tiles page forgets file:/// urls

2015-09-15 Thread Joey Hess
Package: iceweasel Version: 38.1.0esr-3 Severity: normal I have a file:/// url I access every day. That showed up in the new tab tiles as expected. It's even pinned there. Recently, that tile has gone missing from the page, a blank space is where it should be. If I manually open the file:///

Bug#569150: Amavis never cleans its virusmail jail

2015-09-12 Thread Joey Hess
I installed amavis to delete viruses. After a year, I noticed /var/lib/amavis/virusmails was where all my system's disk space had gone. After grepping through all the documentation, I have yet to find anything that documents this package behaves this way. Is the admin supposed to learn about this

Bug#796899: Acknowledgement (interesting segfault)

2015-09-10 Thread Joey Hess
By comparing stack traces under ld-linux.so and not, I was able to determine that the NULL is coming from global->errors, which is supposed to get initialized to STDERR but somehow isn't when ld-linux.so runs curl. While playing with that, I noticed that trying to printf the address of global

Bug#796899: Acknowledgement (interesting segfault)

2015-09-10 Thread Joey Hess
> int main(int argc, char *argv[]) > { > fprintf(stdout, "HELLO\n"); > } Even fdopen(1, 'w') crashes the same way. Maybe whatever initialization is needed for the stream functions to work isn't happening under ld-linux.so. -- see shy jo signature.asc Description: Digital signature

<    1   2   3   4   5   6   7   8   9   10   >