Bug#796374: Add AppArmor profile

2015-08-21 Thread Nicolas Braud-Santoni
2001 From: Nicolas Braud-Santoni nicolas.braud-sant...@iaik.tugraz.at Date: Fri, 21 Aug 2015 16:20:35 +0200 Subject: [PATCH] Add AppArmor profile. Bump to 1.9.1-2 --- debian/apparmor-profile | 22 ++ debian/changelog| 6 ++ debian/control | 2 +- debian

Bug#803787: [strongswan] Enable post-quantum algorithms

2015-11-02 Thread Nicolas Braud-Santoni
Package: strongswan Severity: wishlist X-Debbugs-CC: mich...@mgeb.org --- Please enter the report below this line. --- Dear maintainers, The NTRU and BLISS post-quantum cryptosystems are available in strongswan (releases 5.1.2 and 5.2.2, respectively). Please enable the corresponding

Bug#799084: apparmor-profiles-extra: apparmor is not allowing ntpd to read its config file @ /etc/openntpd/ntpd.conf

2015-11-01 Thread Nicolas Braud-Santoni
Hi, As far as I understand, this profile is meant for the NTP.org daemon, provided by the `ntp` package. OpenNTPd (in sid) ships its own AppArmor profile, and thus currently conflicts with apparmor-profiles-extra (see bug #769146). As mentionned in #769146, the right fix is to move this profile

Bug#804161: /usr/lib/tmpfiles.d/systemd.conf specifies non-existing user

2015-11-05 Thread Nicolas Braud-Santoni
On Thu, Nov 05, 2015 at 04:37:47PM +0100, Michael Biebl wrote: > Hi Nicolas, > [..] > systemd.postinst creates that user. This is from systemd.postinst: > > adduser --quiet --system --group --no-create-home --home > /run/systemd/netif \ > --gecos "systemd Network Management"

Bug#803787: [Pkg-swan-devel] Bug#803787: [strongswan] Enable post-quantum algorithms

2015-11-03 Thread Nicolas Braud-Santoni
Hello, On Mon, Nov 02, 2015 at 09:06:38PM +0100, Yves-Alexis Perez wrote: > On lun., 2015-11-02 at 20:36 +0100, Nicolas Braud-Santoni wrote: > > The NTRU and BLISS post-quantum cryptosystems are available in strongswan > > (releases 5.1.2 and 5.2.2, respectively). > > T

Bug#809828: python-twitter: Upgrade to version 1.3.1 or later

2016-01-04 Thread Nicolas Braud-Santoni
Package: python-twitter X-Debbugs-CC: python-modules-t...@lists.alioth.debian.org Dear maintainers, This issue has been open for almost two years, and there has been significant changes in upstream that applications rely on. It makes it impossible to deploy such applications on Debian

Bug#809828: python-twitter: Upgrade to version 1.3.1 or later

2016-01-04 Thread Nicolas Braud-Santoni
Control: severity -1 wishlist Control: merge -1 745513 pgpcOUnj3l0bs.pgp Description: PGP signature

Bug#824179: haveged should start after AppArmor

2016-05-30 Thread Nicolas Braud-Santoni
Control: tags -1 patch Hi Lunar, Since the collab-maint process is a tad slower than expected, I'm sending you the patch here instead. Best, nicoo From 3b953d9f1ad3c2c4941acf26db1bd25f7fa9ce17 Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: F

Bug#824765: apt-listbugs: segfault on stretch

2016-06-02 Thread Nicolas Braud-Santoni
Hi, First, sorry for not answering earlier, I somehow didn't notice your last message. I had already run memtest86+. However, I didn't notice the first time that it froze after ~3 minutes. I will test again this afternoon with another pair of RAM sticks. Best, nicoo PS: Tag “moreinfo”

Bug#826063: RFS: libu2f-host/1.0.0-2 [NMU] [RC] -- U2F host communication library

2016-06-01 Thread Nicolas Braud-Santoni
Package: sponsorship-requests Severity: important Dear mentors, I am looking for a sponsor for my upload for the libu2f-host package. It fixes the following RC bug: #820686: FTBFS - missing build-dep libglib2.0-dev The package's maintainer team, the Debian Authentication Maintainers, has

Bug#820690: libu2f-server: FTBFS - missing build-dep libglib2.0-dev

2016-06-01 Thread Nicolas Braud-Santoni
Control: tags -1 - patch + pending The patch was merged in the packaging repo a month ago. Please upload the updated package. signature.asc Description: PGP signature

Bug#826060: RFS: libu2f-server/1.0.1-1 [NMU] [RC] -- U2F server communication library

2016-06-01 Thread Nicolas Braud-Santoni
Package: sponsorship-requests Severity: important Dear mentors, I am looking for a sponsor for my upload for the libu2f-server package. It fixes the following RC bug: #820690: FTBFS - missing build-dep libglib2.0-dev The package's maintainer team, the Debian Authentication Maintainers, has

Bug#826063: RFS: libu2f-host/1.0.0-2 [NMU] [RC] -- U2F host communication library

2016-06-24 Thread Nicolas Braud-Santoni
Control: tags -1 - moreinfo Hi Adam, Sorry for having been kept away from this bug for the last few weeks; life happened :( On Thu, Jun 02, 2016 at 06:48:41AM +0200, Adam Borowski wrote: > control: tags -1 moreinfo > > On Thu, Jun 02, 2016 at 01:31:02AM +0200, Nicolas Braud-Sant

Bug#824765: apt-listbugs: segfault on stretch

2016-06-23 Thread Nicolas Braud-Santoni
Control: close -1 Hi, Sorry for the late reply, life somehow got in the way of solving the bug. The machine on which I was encountering the issue died on Friday, and the x230 that replaces it (the system was dd'ed over without modification) does not exhibit the problem anymore, so I will assume

Bug#826063: RFS: libu2f-host/1.0.0-2 [NMU] [RC] -- U2F host communication library

2016-06-25 Thread Nicolas Braud-Santoni
On Fri, Jun 24, 2016 at 11:45:27PM +0200, Adam Borowski wrote: > > I'm afraid that your upload removes data about an upload from the changelog: > > .-- > libu2f-host (1.0.0-1.1) unstable; urgency=medium Yes indeed. It turns out that this upload wasn't commited in the packaging repo, which

Bug#759604: Any problem with making auditd log readable by the adm group?

2016-06-28 Thread Nicolas Braud-Santoni
Hi, On Wed, May 11, 2016 at 08:36:44AM -0400, Steve Grubb wrote: > On Wednesday, May 11, 2016 09:55:33 AM Laurent Bigonville wrote: > > Le 09/05/16 à 21:07, intrigeri a écrit : > > > in Debian, the convention for many log files is to make them readable > > > by members of the adm group. We're

Bug#828686: ITP: no-new-privs -- Set PR_NO_NEW_PRIVS before executing another program

2016-06-26 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> X-Debbugs-Cc: debian-de...@lists.debian.org * Package name: no-new-privs Version : 0.0.2 Upstream Author : Nicolas Braud-Santoni <nico...@braud-santoni.eu> * URL

Bug#828687: RFS: no-new-privs/0.0.2 [ITP] -- sets PR_NO_NEW_PRIVS and execute a program

2016-06-26 Thread Nicolas Braud-Santoni
Package: sponsorship-requests Severity: wishlist Dear mentors, I am looking for a sponsor for my package "no-new-privs": * Package name: no-new-privs Version : 0.0.2-1 Upstream Author : Nicolas Braud-Santoni <nico...@braud-santoni.eu> * URL : ht

Bug#824975: zfs-dkms: Module fails to build without kernel-headers

2016-06-25 Thread Nicolas Braud-Santoni
Control: close -1 Hi, OK, then it was my fault for not installing headers. Best, nicoo On Mon, May 23, 2016 at 02:51:55PM -0500, Richard Laager wrote: > > This is the case with all dkms modules, so the dependency belongs on dkms, > if anywhere. > > I believe it's intentional that it's

Bug#828703: git-buildpackage: Inconsistency in the “Configuration files” section of the gbp-buildpackage(1) manpage

2016-06-26 Thread Nicolas Braud-Santoni
Package: git-buildpackage Version: 0.7.5 Severity: minor Dear Maintainer, In the gbp-buildpackage(1) manpage, I can read the following: > All options in the config files must be specified without the 'git-' > prefix. So e.g. --git-debian-branch=debian/sid becomes in gbp.conf: > >

Bug#803787: [strongswan] Enable post-quantum algorithms

2016-02-21 Thread Nicolas Braud-Santoni
In an out-of-band conversation with corsac, it appeared that I didn't make my point clearly enough, so here is a recap: - It is known that nation-state adversaries, interested in mass surveillance, are currently recording encrypted traffic they observe, in the hope of being able to decrypt

Bug#816446: nginx: Please use systemd confinement features

2016-03-01 Thread Nicolas Braud-Santoni
Control: retitle -1 nginx: Please mention systemd confinement features in the documentation Control: tags -1 - wontfix On Tue, Mar 01, 2016 at 02:35:39PM -0800, Michael Lustfield wrote: > I have three significant issues with adding systemd confinement to > nginx out of the box: They are all

Bug#816446: nginx: Please use systemd confinement features

2016-03-01 Thread Nicolas Braud-Santoni
Oops, the comments were not meant to be in French: > # CAP_KILL : Nginx signals its child processes that have a different UID > # CAP_SETUID CAP_SETGID : Nginx drops privileges > # CAP_NET_BIND_SERVICE : Nginx clearly listens to ports <1024 > # CAP_SYSLOG : Nginx sends logs to syslog >

Bug#820808: haveged should start with DevicePolicy=closed

2016-04-12 Thread Nicolas Braud-Santoni
Package: haveged Version: 1.9.1-3 Severity: wishlist Hi Lunar, I think the unit file for haveged should include DevicePolicy=closed, reducing the impact of it having CAP_SYS_ADMIN. I tested that here, and it works fine. What do you think? Best, nicoo -- System Information: Debian

Bug#819675: request-tracker4: RT4 upgrade from Wheezy to Jessie fails due to missing dependency

2016-04-01 Thread Nicolas Braud-Santoni
Oh, indeed. Thanks a lot for the swift reply, and sorry for the erroneous bug report. Best, nicoo pgpcb93RXAL_x.pgp Description: PGP signature

Bug#819937: ITP: golang-github-jtacoma-uritemplates -- URI Templates (RFC 6570) implemented in Go

2016-04-03 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-jtacoma-uritemplates Version : 0.0~git20151014.16.802b8e2-1 Upstream Author : Joshua Tacoma * URL : https://github.com/jtacoma/uritemplates * L

Bug#819935: ITP: golang-github-jingweno-go-sawyer -- Client library for REST APIs

2016-04-03 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-jingweno-go-sawyer Version : 0.0~git20140729.0.1999ae5-1 Upstream Author : Jingwen Owen Ou * URL : https://github.com/jingweno/go-sawyer * L

Bug#819936: ITP: golang-github-octokit-go-octokit -- Go wrapper for the GitHub API

2016-04-03 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-octokit-go-octokit Version : 0.3.0+git20160312.364.812e91d-1 Upstream Author : * URL : https://github.com/octokit/go-octokit * License

Bug#819934: ITP: golang-github-inconshreveable-go-update -- Build self-updating Golang programs

2016-04-03 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-inconshreveable-go-update Version : 0.0~git20160112.0.8152e7e-1 Upstream Author : Alan Shreve * URL : https://github.com/inconshreveable/go-

Bug#819931: ITP: golang-github-howeyc-gopass -- getpasswd for Go

2016-04-03 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-howeyc-gopass Version : 0.0~git20160303.0.66487b2-1 Upstream Author : Chris Howey * URL : https://github.com/howeyc/gopass * License

Bug#816446: nginx: Please use systemd confinement features

2016-04-05 Thread Nicolas Braud-Santoni
On Thu, Mar 31, 2016 at 10:14:20AM +0300, Christos Trochalakis wrote: > I also believe it makes sense to enable the security features for > systemd users. `ProtectHome` is a bit tricky as it could possibly break > some setups, we could use `read-only` there. > > Currently we are a bit overwhelmed

Bug#824765: apt-listbugs: segfault on stretch

2016-05-20 Thread Nicolas Braud-Santoni
Control: tags -1 - moreinfo Hello Francesco, Sorry for the wrong severity, I'm still somewhat new to contributing to Debian. Here is the test you wanted, which seems to come back clean: > % irb > irb(main):001:0> require 'unicode' > => true > irb(main):002:0> Unicode.width("that is") > => 7 >

Bug#760308: add https for additional, optional security layer

2016-05-19 Thread Nicolas Braud-Santoni
Control: tags -1 moreinfo Holger, what is the expected security improvement? It's not as if a self-signed cert would make impersonating the onion service harder, and forward-secrecy on the exchange is provided by the Tor circuit (using the ntor KEX on Curve25519, if I'm not mistaken).

Bug#824974: grub-pc: grub-probe fails on root-on-ZFS systems

2016-05-21 Thread Nicolas Braud-Santoni
Package: grub-pc Version: 2.02~beta2-36 Severity: normal Dear Maintainer, On my freshly setup Stretch system, update-grub fails with the following error: > /usr/sbin/grub-probe: error: failed to get canonical path of > `/dev/vacuum-crypt'. This led me to having no grub.cfg file (until I wrote

Bug#824975: zfs-dkms: Module fails to build without kernel-headers

2016-05-21 Thread Nicolas Braud-Santoni
Package: zfs-dkms Version: 0.6.5.6-2 Severity: important Dear Maintainer, The zfs-dkms module fails to build without kernel headers, yet there seem to be no dependency set on that package. The problem was encountered while setting up a root-on-ZFS stretch system from scratch (using Debian

Bug#824976: zfs-initramfs: update-initramfs fails without busybox

2016-05-21 Thread Nicolas Braud-Santoni
Package: zfs-initramfs Version: 0.6.5.6-2 Severity: important Dear Maintainer, After having installed zfs-initramfs, update-initramfs started failing, indicating that I need to install either busybox or busybox-static. Installing the later solved the issue. -- System Information: Debian

Bug#754730: [lintian] packages should not depend on AppArmor

2016-05-12 Thread Nicolas Braud-Santoni
X-Debbugs-CC: Bastien Roucaries What's the status on this? Is it really necessary to wait for a policy decision? signature.asc Description: PGP signature

Bug#824120: lxc should not depend on AppArmor

2016-05-12 Thread Nicolas Braud-Santoni
Source: lxc Severity: normal User: pkg-apparmor-t...@lists.alioth.debian.org Usertags: ux Dear Maintainer, Packages should not depend on (or recommend) AppArmor. Please replace the recommendation by a suggestion in future versions. Best, nicoo

Bug#731594: Please make openntpd package priority standard

2016-05-17 Thread Nicolas Braud-Santoni
Hi, It has been 21 months now, and the portable branch upstream seem to be again actively maintained. Is it time to revisit this bug? Regarding packaging in Debian, I use openntpd on most of my systems, and would be very glad to help maintain the package. Best, nicoo signature.asc

Bug#807132: Related issue? unbound not restarted after upgrade

2016-05-16 Thread Nicolas Braud-Santoni
Control: found -1 1.5.8-1~bpo8+1 Hi, I can confirm that this issue prevents systemd from detecting Unbound failing - either at startup (for instance due to bad configuration); - while running; - because it was stopped with unbound-control. Could you expand a bit on what is required, re:

Bug#824179: haveged should start after AppArmor

2016-05-13 Thread Nicolas Braud-Santoni
Package: haveged Version: 1.9.1-3 Severity: important Dear Lunar, systemd starts haveged before AppArmor policies are loaded, making the policy shipped with the package mostly ineffective. (Shame on me for not noticing when #796374 was closed) I will push a patch as soon as I get added to

Bug#820808: haveged should start with DevicePolicy=closed

2016-05-13 Thread Nicolas Braud-Santoni
Control: fixed -1 1.9.1-2 Control: fixed -1 1.9.1-3 Control: close -1 1.9.1-2 thanks Nevermind, this is implicit when PrivateDevices is set. Cf systemd.exec(5) signature.asc Description: PGP signature

Bug#786498: poco: please upgrade to v1.7.1 or later

2016-05-13 Thread Nicolas Braud-Santoni
Control: retitle -1 poco: please upgrade to v1.7.1 or later Hi Rene, I contacted the maintainers. In the absence of any answer, I will push an update to the packaging repo and request a sponsored NMU. Best, nicoo signature.asc Description: PGP signature

Bug#824412: lvm2 fails to start its services after install

2016-05-15 Thread Nicolas Braud-Santoni
Package: lvm2 Version: 2.02.151-1 Severity: important Dear Maintainer, Installing lvm2 and immediately attempting to use it fails. It seems several lvm-related systemd units were installed but not started. Reloading the systemd units and starting those services (and socket units) solved the

Bug#823342: ITP: golang-github-kr-binarydist -- Go implementation of the bspatch algorithm

2016-05-03 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-kr-binarydist Version : 0.0~git20120828.0.9955b0a-1 Upstream Author : Keith Rarick * URL : https://github.com/kr/binarydist * License

Bug#819737: git-remote-gcrypt: Fails to push with “Unable to find remote helper for 'curl'”

2016-05-03 Thread Nicolas Braud-Santoni
control: close -1 Hi, The remote URL was indeed `gcrypt::curl://antartica/pass/`, as I was following some documentation which seems to have been either outdated or plain wrong. Sorry for the spurious bug report. Best, nicoo On Fri, Apr 01, 2016 at 05:30:36PM -0700, Sean Whitton wrote:

Bug#823565: ITP: golang-github-fhs-go-netrc -- netrc file parser for Go programming language.

2016-05-05 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> * Package name: golang-github-fhs-go-netrc Version : 0.0~git20160504.0.4ffed54-1 Upstream Author : Fazlul Shahriar * URL : https://github.com/fhs/go-netrc * License

Bug#823760: openntpd: ship an AppArmor profile again

2016-05-08 Thread Nicolas Braud-Santoni
Package: openntpd Version: 1:5.7p4-4 Severity: wishlist Dear dererk, To resolve #769146, you stopped shipping an AppArmor profile with openntpd. Now that the aa-profiles-extra/ntp snafu has been fixed (cf. #805183), could you ship it again? Best, and thanks for maintaining the openntpd

Bug#816456: openntpd: Please use systemd sandboxing

2016-05-08 Thread Nicolas Braud-Santoni
issue (it wouldn't be sent to stable anyhow). Best, nicoo From 1ebb3d50a35d2163b22a6e514ccb8d4687cbfead Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: Sun, 8 May 2016 19:13:45 +0200 Subject: [PATCH] Use systemd sandboxing --- debian/changelog

Bug#816456: openntpd: Please use systemd sandboxing

2016-05-08 Thread Nicolas Braud-Santoni
PS: I didn't notice #791571. Here is a fixed patch (that assumes the current socket location) On Sun, May 08, 2016 at 07:18:16PM +0200, Nicolas Braud-Santoni wrote: > Control: tags -1 patch > > Dear dererk, > > Here is a patch that implements the suggested change. > Note

Bug#820686: libu2f-host: FTBFS - missing build-dep libglib2.0-dev

2016-05-08 Thread Nicolas Braud-Santoni
cb99d35f7cb0abf91d40403201a66895ee8f6c35 Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: Mon, 9 May 2016 00:23:54 +0200 Subject: [PATCH] Fix dependencies and bump Standards-Version --- debian/changelog | 6 ++ debian/control | 5 +++-- 2 files chan

Bug#820686: libu2f-host: FTBFS - missing build-dep libglib2.0-dev

2016-05-08 Thread Nicolas Braud-Santoni
Control: tags -1 patch The previous patch contained a typo in the changelog. Please find enclosed a fixed version. Best, nicoo From e8a764087c88dc569f5d264cf9e28845499a0efb Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: Mon, 9 May 2016 00:23:54

Bug#820690: libu2f-server: FTBFS - missing build-dep libglib2.0-dev

2016-05-08 Thread Nicolas Braud-Santoni
Control: tags -1 patch Hi, A patch was submitted, as a pull request against the packaging repo[0]. [0] https://github.com/Yubico/libu2f-server-dpkg/pull/1 signature.asc Description: PGP signature

Bug#830907: RFS: pam-u2f/1.0.4-0.1 [NMU]

2016-07-12 Thread Nicolas Braud-Santoni
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "pam-u2f" * Package name: pam-u2f Version : 1.0.4-0.1 Upstream Author : Yubico AG * URL : https://developers.yubico.com/pam-u2f/ * License : BSD

Bug#830908: RFS: libu2f-server/1.0.1-1.3 [NMU]

2016-07-12 Thread Nicolas Braud-Santoni
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for my package "libu2f-server" * Package name: libu2f-server Version : 1.0.1-1.3 Upstream Author : [fill in name and email of upstream] * URL : [fill in URL of upstreams web

Bug#831324: docker.io: /etc/docker is not readable by the docker group

2016-07-14 Thread Nicolas Braud-Santoni
case, and uploaded an updated version of my fix for docker-registry. Best, nicoo From 2f5bdde25ff5145521e749ae1f0199269dda8297 Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: Thu, 14 Jul 2016 16:42:48 +0200 Subject: [PATCH] Fix /etc/docker per

Bug#831324: docker.io: /etc/docker is not readable by the docker group

2016-07-14 Thread Nicolas Braud-Santoni
-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) >From bd4355bce6ccea582bf01226060ac1bc53d34cf9 Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: Thu, 14 Jul 2016 16:42

Bug#830908: RFS: libu2f-server/1.0.1-1.3 [NMU]

2016-07-14 Thread Nicolas Braud-Santoni
Control: tags -1 - moreinfo On Thu, Jul 14, 2016 at 03:39:27PM +, Gianfranco Costamagna wrote: > > I opened an upstream ticket, lets see how they feel about this and in case > I'll sponsor > it (or please ping if they don't reply) Hi Gianfranco, Thanks for taking the time to review and

Bug#830907: RFS: pam-u2f/1.0.4-0.1 [NMU]

2016-07-14 Thread Nicolas Braud-Santoni
Control: tags -1 - moreinfo Hi Gianfranco, Thanks again for reviewing this. I have to admit I wasn't aware special care has to be taken for moving files, now I know! In any case, I uploaded a new version to mentors.debian.net which takes your comments into account. Best, nicoo

Bug#831324: docker.io: /etc/docker is not readable by the docker group

2016-07-14 Thread Nicolas Braud-Santoni
ge is being upgraded from an old version, since: - it is a sane permission; - it should avoid trampling on user-set permissions in most cases. Please find attached a patch that implements this. Best, nicoo From db11b7fe90ed0367cc6728202208a52bc19fb0c3 Mon Sep 17 00:00:00 2001 From: Nicolas Braud-San

Bug#830907: RFS: pam-u2f/1.0.4-0.1 [NMU]

2016-07-14 Thread Nicolas Braud-Santoni
. Thanks again for the review and sponsoring, and thanks to lamby for telling me about incoming.debian.org and what to do in this situation. Best, nicoo On Thu, Jul 14, 2016 at 06:57:43PM +0200, Nicolas Braud-Santoni wrote: > Control: tags -1 - moreinfo > > Hi Gianfranco, > &g

Bug#810890: caddy in Debian

2016-07-21 Thread Nicolas Braud-Santoni
On Thu, Jul 21, 2016 at 05:32:24AM +0200, Zlatan Todoric wrote: > > All sounds fine but I wish you notified me few days earlier before > pushing ITPs. I for example have uploaded the shlex package to mentors > which you seem you're going to duplicate now (it was once in newqueue > and reject

Bug#731400: Future of camlduce (Debian bug #731400)

2016-07-23 Thread Nicolas Braud-Santoni
Hi Stéphane, camlduce is not compilable since 2013, and requires an update upstream to make it work with recent versions of OCaml. Since you are the upstream developer, I would like to ask you if there are any plans to make this happen in the forseeable future. If not, would you be OK with

Bug#813459: Bug #813459: aac-tactics: FTBFS: Error: The constructor vcons (in type vT) expects 2 arguments

2016-07-23 Thread Nicolas Braud-Santoni
Control: tag -1 pending Hi, I prepared an upload for an up-to-date version of aac-tactics, which (obviously) solves the FTBFS. I should push it to alioth in the evening. Best, nicoo

Bug#815684: Bug#813596: coq-float and why cannot be built with Coq 8.5 (Bugs #813596 and #815684)

2016-07-23 Thread Nicolas Braud-Santoni
Control: tag -1 upstream On Sat, Jul 23, 2016 at 08:35:15PM +0200, Ralf Treinen wrote: > > Why also does not compile with the current vesion of why3. I talked > to why upstream about this a few days ago. There will be a new upstream > release of why soon which will fix this. I suspect this will

Bug#742881: Bug #742881: missing license in debian/copyright

2016-07-23 Thread Nicolas Braud-Santoni
Control: tag -1 pending Hi, I prepared an upload for a new upstream version of camlpdf. As part of this, I updated the copyright information. Best, nicoo

Bug#583994: advi: Security bugs in ghostscript

2016-07-23 Thread Nicolas Braud-Santoni
Control: close -1 Hi, Given that advi is meant purely for previewing and presenting DVIs, it is likely called on trusted inputs. In any case, I do not think it makes sense to keep around a 6 years old security bug. Best, nicoo On Tue, Jun 01, 2010 at 11:01:00AM +1000, Paul Szabo wrote: >

Bug#832081: ITP: golang-github-miekg-dns --

2016-07-21 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 813502 by -1 * Package name: golang-github-miekg-dns Version : 0.0~git20160614.0.5d001d0-1 Upstream Author : Miek Gieben <m...@miek.nl> * URL : https:

Bug#832084: ITP: golang-github-jawher-mow.cli --

2016-07-21 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 832080 by -1 * Package name: golang-github-jawher-mow.cli Version : 0.0~git20160720.0.0de8a76-1 Upstream Author : Jawher Moussa * URL : https://github.com/

Bug#832082: ITP: golang-github-ovh-go-ovh --

2016-07-21 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 813502 by -1 * Package name: golang-github-ovh-go-ovh Version : 0.0~git20160604.0.d2b2eae-1 Upstream Author : OVH SAS * URL : https://github.com/ovh/go-ovh * L

Bug#832083: ITP: golang-github-weppos-dnsimple-go --

2016-07-21 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 813502 by -1 * Package name: golang-github-weppos-dnsimple-go Version : 0.0~git20160204.0.65c1ca7-1 Upstream Author : Scott Barron * URL : https://github.com/

Bug#832080: ITP: golang-github-jamesclonk-vultr --

2016-07-21 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 813502 by -1 * Package name: golang-github-jamesclonk-vultr Version : 1.8-1 Upstream Author : Fabio Berchtold * URL : https://github.com/jamesclonk/vultr * L

Bug#806028: galax: FTBFS when built with dpkg-buildpackage -A (No such file or directory)

2016-07-29 Thread Nicolas Braud-Santoni
Control: tags -1 - moreinfo unreproducible On Fri, Jul 29, 2016 at 08:39:33PM +0200, Santiago Vila wrote: > [...] > > You have to do "dpkg-buildpackage -A" in a clean chroot as the bug says. > [...] > Please don't mark this as "unreproducible" unless you are really > unable to reproduce it the

Bug#832877: Bug #832877: mathcomp: FTBFS: build-dependency not installable: libssreflect-coq (>= 1.5)

2016-07-29 Thread Nicolas Braud-Santoni
Hi Lucas, Your report is in essence a duplicate of #832877 (which is assigned to ssreflect). There is an upload pending that solves this issue ;) Best, nicoo PS: I'm not merging those bugs, since they are assigned to different source packages; after the upload, ssreflect will be

Bug#806028: galax: FTBFS when built with dpkg-buildpackage -A (No such file or directory)

2016-07-29 Thread Nicolas Braud-Santoni
On Sat, Jul 30, 2016 at 01:09:27AM +0200, Nicolas Braud-Santoni wrote: > > I fixed those packages and pushed the fixed to the packaging repository. > Now, a DD form pkg-ocaml needs to review and upload those. This should obviously be: > I fixed those packages and pushed the fix to t

Bug#806028: galax: FTBFS when built with dpkg-buildpackage -A (No such file or directory)

2016-07-29 Thread Nicolas Braud-Santoni
Control: tag -1 pending On Fri, Jul 29, 2016 at 11:08:08PM +0200, Santiago Vila wrote: > On Fri, Jul 29, 2016 at 10:06:46PM +0200, Nicolas Braud-Santoni wrote: > > I misunderstood the initial report, sorry about that. > > Surprisingly, it happened several times in this

Bug#833188: RFS: pam-u2f/1.0.4-0.3 [NMU]

2016-08-02 Thread Nicolas Braud-Santoni
Please do not upload right now, I am uploading an updated version to mentors (updated patch metadata & clarified the changelog) signature.asc Description: PGP signature

Bug#833188: RFS: pam-u2f/1.0.4-0.3 [NMU]

2016-08-02 Thread Nicolas Braud-Santoni
On Tue, Aug 02, 2016 at 03:55:58PM +0200, Nicolas Braud-Santoni wrote: > Please do not upload right now, I am uploading an updated version to > mentors (updated patch metadata & clarified the changelog) Updated on mentor. It might take a few monutes for it to show up on the web interfa

Bug#831324: docker.io: /etc/docker is not readable by the docker group

2016-07-20 Thread Nicolas Braud-Santoni
Thanks a bunch. Given that this is blocking for another bug, would it be possible to have a new upload soon-ish? Best, nicoo On Mon, Jul 18, 2016 at 11:15:12AM -0700, Tianon Gravi wrote: > > Thanks! I've applied this in Git, and it'll go out with the next upload. :)

Bug#831988: ITP: golang-github-jimstudt-http-authentication -- Go implementation of RFC 2617 HTTP Authentication: Basic and Digest Access Authentication

2016-07-20 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 810890 by -1 * Package name: golang-github-jimstudt-http-authentication Version : 0.0~git20140401.0.3eca13d-1 Upstream Author : Jim Studt <j...@studt.n

Bug#831986: ITP: lego -- Let's Encrypt client and ACME library written in Go

2016-07-20 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 810890 by -1 * Package name: lego Version : 0.3.1+git20160721.44.b12ce5e-1 Upstream Author : Sebastian Erhart <erh...@lsr.ei.tum.de> * URL : https:

Bug#831987: ITP: golang-github-flynn-archive-go-shlex

2016-07-20 Thread Nicolas Braud-Santoni
Package: wnpp Severity: wishlist Owner: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Control: block 810890 by -1 * Package name: golang-github-flynn-archive-go-shlex Version : 0.0~git20150515.0.3f9db97-1 Upstream Author : Steven Thurgood * URL : https://gith

Bug#810890: caddy in Debian

2016-07-20 Thread Nicolas Braud-Santoni
Hi Zlatan, I'm taking the liberty to start packaging caddy and its dependencies, as part of the pkg-go team. I would be happy to see this package be co-maintained, though, whether it is by you or Iain. Best, nicoo

Bug#824806: golang: random_build_path_by_golang_compiler is #824806

2016-07-16 Thread Nicolas Braud-Santoni
Ping? On Wed, Jul 06, 2016 at 08:05:32PM +0200, Nicolas Braud-Santoni wrote: > > Hi, > > I backported the upstream commit that solves the issue and tested it > (by building the package, then rebuilding the Go compiler and standard > library using the produced compiler). >

Bug#828903: auditd embeds a copy of libev

2016-06-28 Thread Nicolas Braud-Santoni
Source: audit Severity: normal Dear Maintainer, The audit source package ships a (custom, patched) copy of libev. Moreover, it is not listed in the security team's list of code copies: https://anonscm.debian.org/viewvc/secure-testing/data/embedded-code-copies?view=markup I discovered

Bug#759604: Any problem with making auditd log readable by the adm group?

2016-06-28 Thread Nicolas Braud-Santoni
Control: tags -1 patch On Tue, Jun 28, 2016 at 11:06:57AM +0200, Nicolas Braud-Santoni wrote: > > It seems to me we have two issues at play here: > - auditd violating the adm group convention; > - apparmor-notify using a suboptimal mechanism to stream auditd logs. >

Bug#829692: RFS: libu2f-host/1.1.2-0.1 [NMU] -- library for Universal 2nd Factor

2016-07-05 Thread Nicolas Braud-Santoni
X-Debbugs-CC: codeh...@debian.org Package: sponsorship-requests Severity: wishlist Dear mentors, I am looking for a sponsor for a NMU to the package libu2f-host. * Package name: libu2f-host Version : 1.1.2-0.1 Upstream Author : Yubico AG * URL :

Bug#752208: [unison-gtk] Doesn't synchronize windows fat subfolders

2016-07-06 Thread Nicolas Braud-Santoni
Control: tags -1 + moreinfo Control: severity -1 important Control: retitle -1 unison fails to synchronize FS modified under Windows Hi, According to the documentation, only file timestamps are used, not directory timestamps, and fastchecks can be disabled:

Bug#829237: Bug #829237: systemd-docker: FTBFS

2016-07-08 Thread Nicolas Braud-Santoni
Control: block -1 by 830478 Hi, I attempted to fix this, and it seems to be a simple missing Build-Depends. However, I discovered that the dependency installs its source in the wrong directory. The fix is thus blocked on #830478 Best, nicoo

Bug#830478: golang-github-docker-docker-dev installs source to /usr/share/gocode/github.com/docker/docker

2016-07-08 Thread Nicolas Braud-Santoni
Package: golang-github-docker-docker-dev Severity: serious Dear Maintainer, While working on #829237 (FTBFS on systemd-docker), I discovered that golang-github-docker-docker-dev installs its source under /usr/share/gocode/${DH_GOPKG} rather than /usr/share/gocode/src/${DH_GOPKG}. Best,

Bug#830157: dh-make makes obsolete suggestions for Vcs-Git

2016-07-06 Thread Nicolas Braud-Santoni
Package: dh-make Version: 2.201606 Severity: normal Dear Maintainer, When creating a new package with dh-make, it creates in the debian/control file (commented out) entries for Vcs-Git and Vcs-Browser, as follows: #Vcs-Git: git://anonscm.debian.org/collab-maint/foo.git #Vcs-Browser:

Bug#824806: golang: random_build_path_by_golang_compiler is #824806

2016-07-06 Thread Nicolas Braud-Santoni
gt; mwh From 4994af5e5f2020fdfade632e238fe263ac799fc9 Mon Sep 17 00:00:00 2001 From: Nicolas Braud-Santoni <nico...@braud-santoni.eu> Date: Wed, 6 Jul 2016 18:51:41 +0200 Subject: [PATCH 1/2] Make builds deterministic --- ...cmd-go-cmd-link-make-builds-deterministic.patch | 151 + deb

Bug#830075: golang-github-kr-binarydist: please make the build reproducible

2016-07-06 Thread Nicolas Braud-Santoni
Control: tags -1 pending Hi Eduard, I fixed your patch and pushed it to the packaging repo. Thanks a lot for making golang-github-kr-binarydist reproducible. Best, nicoo signature.asc Description: PGP signature

Bug#829692: RFS: libu2f-host/1.1.2-0.1 [NMU] -- library for Universal 2nd Factor

2016-07-08 Thread Nicolas Braud-Santoni
X-Debbugs-CC: codeh...@debian.org, jw...@debian.org, locutusofb...@debian.org Hi, Thanks everyone for the feedback and comments, especially the explanations regarding symbol versionning. Sorry for the time it took to reply in here, DebConf kept me away from my inbox (though I got quite a lot of

Bug#833188: RFS: pam-u2f/1.0.4-0.3 [NMU]

2016-08-05 Thread Nicolas Braud-Santoni
Hi Gianfranco, Thanks a bunch for the sponsored upload. I agree that the situation is not very comfortable, but I have great news: I have been added to pkg-auth, so my next upload on those packages shall be team uploads and not NMUs. ;) However, I will wait for an answer from the Yubico people

Bug#518002: [Pkg-dns-devel] Bug#518002: Add apparmor profile for unbound

2016-08-05 Thread Nicolas Braud-Santoni
an > package. Can you please send a patch that applies to the master branch > of the packaging repository? > > https://anonscm.debian.org/cgit/pkg-dns/unbound.git/ > > -- > Robert Edmonds > edmo...@debian.org > From 9813632bbf8a7200c8a162025a560a6cf9f62687 Mon Sep 17 00

Bug#833188: RFS: pam-u2f/1.0.4-0.3 [NMU]

2016-08-01 Thread Nicolas Braud-Santoni
Package: sponsorship-requests Severity: normal Dear mentors, I am looking for a sponsor for the package "pam-u2f" * Package name: pam-u2f Version : 1.0.4-0.3 Upstream Author : Yubico AG * URL : https://developers.yubico.com/pam-u2f/ * License :

Bug#813596: coq-float and why cannot be built with Coq 8.5 (Bugs #813596 and #815684)

2016-07-23 Thread Nicolas Braud-Santoni
Hi, coq-float and why cannot build under Coq 8.5, leading to two FTBFS bugs. (Note: This is about why, not why3) I confirmed that (beyond some mild build-system breakage) the issues are due to changes in Coq, and neither are still maintained upstream. As such, I would like to suggest we delete

Bug#715070: Bug #715070: Broken library symlink detected in libapron-dev

2016-07-23 Thread Nicolas Braud-Santoni
Control: tag -1 pending Hi, I prepared a patch for this, and will push it to the packaging repo tonight. Best, nicoo

Bug#806028: galax: FTBFS when built with dpkg-buildpackage -A (No such file or directory)

2016-07-29 Thread Nicolas Braud-Santoni
Control: tag -1 unreproducible moreinfo Hi Santiago, I have been unable to reproduce this issue (in a sid pbuilder). Could you confirm it is still ongoing? Best, nicoo On Thu, Jul 14, 2016 at 10:08:57PM +, Santiago Vila wrote: > Greetings. > > I have the ok from the Release Managers

  1   2   3   4   5   6   >