Work-needing packages report for Nov 3, 2006

2006-11-02 Thread wnpp
The following is a listing of packages for which help has been requested through the WNPP (Work-Needing and Prospective Packages) system in the last week. Total number of orphaned packages: 320 (new: 3) Total number of packages offered up for adoption: 100 (new: 3) Total number of packages request

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Fri, Nov 03, 2006 at 07:43:36AM +0100, Jean-Christophe Dubacq <[EMAIL PROTECTED]> wrote: > I remember that since the change, I had to make changes to several php > applications, because at the same time the default configuration did not > include any configuration in the case where php is not i

Re: release critical bug in apache2.2?

2006-11-02 Thread Jean-Christophe Dubacq
On Thu, Nov 02, 2006 at 07:20:12PM +0100, Mike Hommey wrote: > On Thu, Nov 02, 2006 at 03:32:39PM +0100, Bastian Venthur <[EMAIL PROTECTED]> > wrote: > > Hi > > > > I've just upgraded #393913 from minor to important. > > > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=393913 > > > > Someb

Bug#396801: ITP: haskell-hxt -- Haskell XML Toolbox libraries

2006-11-02 Thread Arjan Oosting
Package: wnpp Severity: wishlist Owner: Arjan Oosting <[EMAIL PROTECTED]> -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 * Package name: haskell-hxt Version : 6.1 Upstream Author : Uwe Schmidt <[EMAIL PROTECTED]> * URL : http://www.fh-wedel.de/~si/HXmlToolbox/ * Licens

Re: Bug#396611: ITP: mach -- make a chroot of a rpm-based distribution

2006-11-02 Thread Guillem Jover
On Wed, 2006-11-01 at 19:00:03 +0100, Loïc Minier wrote: > Package: wnpp > Severity: wishlist > Owner: Loic Minier <[EMAIL PROTECTED]> > > * Package name: mach > Version : 0.9.0.2 It's unfortunate that they chose the same name as the microkernel. regards, guillem -- To UNSUBSCRI

Re: release critical bug in apache2.2?

2006-11-02 Thread Brian May
> "Mike" == Mike Hommey <[EMAIL PROTECTED]> writes: Mike> Auto-indexes are enabled only in /var/www/apache2-default and Mike> /usr/share/apache2/icons by default, so it is not likely to leak any Mike> unexpected file list. ... on my system autoindexes were enabled by default in my

Re: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Peter Samuelson
[Manoj Srivastava] > > We're not talking about sabotage, we're talking about extra effort. > > Not really an answer I expected from a DD. I don't mind putting in extra effort when there is some gain to be had. I'm not so excited about putting in extra effort when there is no gain to be h

testRe: An Urgent Plea For Help

2006-11-02 Thread brian . burns1
test

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Thu, Nov 02, 2006 at 10:08:46PM +0100, Bastian Venthur <[EMAIL PROTECTED]> wrote: > Mike Hommey wrote: > > There has never been index.php in the DirectoryIndex configuration from > > apache. Adding it is part of the php installation procedure. > > Maybe I'm just confusing something but the bug

Re: release critical bug in apache2.2?

2006-11-02 Thread Bastian Venthur
Mike Hommey wrote: > There has never been index.php in the DirectoryIndex configuration from > apache. Adding it is part of the php installation procedure. Maybe I'm just confusing something but the bugreport claims that the following line was present in apache2.conf before the upgrade to 2.2 but

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Thu, Nov 02, 2006 at 09:39:39PM +0100, Mike Hommey <[EMAIL PROTECTED]> wrote: > On Thu, Nov 02, 2006 at 08:05:08PM +0100, Bastian Venthur <[EMAIL PROTECTED]> > wrote: > > Mike Hommey wrote: > > > On Thu, Nov 02, 2006 at 03:32:39PM +0100, Bastian Venthur <[EMAIL > > > PROTECTED]> wrote: > > > D

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Thu, Nov 02, 2006 at 09:50:09PM +0100, Bastian Venthur <[EMAIL PROTECTED]> wrote: > Mike Hommey wrote: > >>> The default value for DirectoryIndex is index.html, which > >>> obviously forgets index.php. But that doesn't mean index.php will be > >>> readable as source. It only means that the auto

Re: release critical bug in apache2.2?

2006-11-02 Thread Bastian Venthur
Mike Hommey wrote: >>> The default value for DirectoryIndex is index.html, which >>> obviously forgets index.php. But that doesn't mean index.php will be >>> readable as source. It only means that the auto index will be displayed >>> if no index.html is present and if allowed to. >> Is this upstrea

Re: release critical bug in apache2.2?

2006-11-02 Thread Kris Deugau
sean finney wrote: > i imagine the apache maintainers will argue that it should be either (a) > the webapp package or (b) the php apache module's repsonsibility > to specify the additional DirectoryIndex. > > iirc DirectoryIndex does/can append to the list of index files, right? This is exactly w

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Thu, Nov 02, 2006 at 08:05:08PM +0100, Bastian Venthur <[EMAIL PROTECTED]> wrote: > Mike Hommey wrote: > > On Thu, Nov 02, 2006 at 03:32:39PM +0100, Bastian Venthur <[EMAIL > > PROTECTED]> wrote: > > DirectoryIndex tells apache which file(s) it may use when the url points > > to a directory, i

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Thu, Nov 02, 2006 at 08:16:46PM +0100, sean finney <[EMAIL PROTECTED]> wrote: > On Thu, 2006-11-02 at 19:20 +0100, Mike Hommey wrote: > > Auto-indexes are enabled only in /var/www/apache2-default and > > /usr/share/apache2/icons by default, so it is not likely to leak any > > unexpected file lis

Re: release critical bug in apache2.2?

2006-11-02 Thread Bastian Venthur
Mike Hommey wrote: > On Thu, Nov 02, 2006 at 03:32:39PM +0100, Bastian Venthur <[EMAIL PROTECTED]> > wrote: > DirectoryIndex tells apache which file(s) it may use when the url points > to a directory, instead of creating an index of the directory itself, if > allowed to. > > The default value for

Re: release critical bug in apache2.2?

2006-11-02 Thread sean finney
On Thu, 2006-11-02 at 19:20 +0100, Mike Hommey wrote: > Auto-indexes are enabled only in /var/www/apache2-default and > /usr/share/apache2/icons by default, so it is not likely to leak any > unexpected file list. > > So no, that doesn't grant an RC bug for these reasons. > > On the other hand, it

Re: More accurate package classification

2006-11-02 Thread George Danchev
On Thursday 02 November 2006 12:36, Mgr. Peter Tuharsky wrote: > Hi all Hello, > Sometimes I spend hours just reading Debian's package repository, and > everytime I found interesting packages. The Debian is extremely large > and juicy, but in contrary, it is really difficult sometimes to ju

Re: release critical bug in apache2.2?

2006-11-02 Thread Mike Hommey
On Thu, Nov 02, 2006 at 03:32:39PM +0100, Bastian Venthur <[EMAIL PROTECTED]> wrote: > Hi > > I've just upgraded #393913 from minor to important. > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=393913 > > Somebody just mailed me that this bug is release critical since it > allows to read/

Re: Upgrading the priority of ucf

2006-11-02 Thread Manoj Srivastava
On Thu, 02 Nov 2006 11:06:21 +0100, Goswin von Brederlow <[EMAIL PROTECTED]> said: > "Steinar H. Gunderson" <[EMAIL PROTECTED]> writes: >> Hi, >> >> It has recently come to my attention that nfs-utils (which is >> priority standard) cannot depend on ucf, since ucf is of priority >> optional. >>

Re: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Manoj Srivastava
On Thu, 2 Nov 2006 03:59:17 -0600, Peter Samuelson <[EMAIL PROTECTED]> said: > [Goswin von Brederlow] >> > Your unspoken premise is that there is a _reason_ to support >> > building packages as root. Why? I think it is better just to >> > tell people not to do that. >> >> My premise is that th

release critical bug in apache2.2?

2006-11-02 Thread Bastian Venthur
Hi I've just upgraded #393913 from minor to important. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=393913 Somebody just mailed me that this bug is release critical since it allows to read/download php-scripts (like index.php). Can somebody confirm that this bug is RC or should I just keep

Re: How to remove imapproxy?

2006-11-02 Thread Arjan Oosting
Op do, 02-11-2006 te 12:09 +0100, schreef [EMAIL PROTECTED]: > Hi > > How can I uninstall imapproxy? > > I tried: > > # dpkg --purge imapproxy > (Reading database ... 64607 files and directories currently > installed.) > Removing imapproxy ... > Stopping IMAP proxy: invoke-rc.d: initscript imapp

Re: Bug#396648: ITP: rt73 -- Linux device driver for Ralink RT73 a/b/g WLAN Card

2006-11-02 Thread Jon Dowland
On Thu, Nov 02, 2006 at 10:39:55AM +0100, Piotr Roszatycki wrote: > Those driver from rt2x00 project simply *does* *not* work, > at least for Ad-Hoc mode with WEP key enabled. How common is your hardware? Do the current maintainers in the rt2x00 project know that it does not work, and if so, have

Re: ca-certificates symlinks out of /etc

2006-11-02 Thread martin f krafft
also sprach Gabor Gombas <[EMAIL PROTECTED]> [2006.11.02.1345 +0100]: > Symlinks just make _sense_. It's the idiocy of other OSes to duplicate > data because they have no proper notion of symlinks. I always hate > arguments like this to "make things worse for people who know UNIX > because there ar

Re: ca-certificates symlinks out of /etc

2006-11-02 Thread martin f krafft
also sprach Gabor Gombas <[EMAIL PROTECTED]> [2006.11.02.1443 +0100]: > Certificates are not configuration files so they should not be in > /etc. > > On the other hand, the decision of which certificate files should > be USED _is_ a configuration decision, so that information should > be under /etc

Re: ca-certificates symlinks out of /etc

2006-11-02 Thread Gabor Gombas
On Thu, Nov 02, 2006 at 02:24:33PM +0100, martin f krafft wrote: > Why do the files need to be in /usr/share at all? Why not provide > /etc/ssl/certs and /etc/ssl/certs/disabled and let the user use > /bin/mv to enable/disable them. Certificates are not configuration files so they should not be i

Re: Bug#396648: ITP: rt73 -- Linux device driver for Ralink RT73 a/b/g WLAN Card

2006-11-02 Thread Josh Triplett
Piotr Roszatycki wrote: > The driver loads firmware from separate file and has included > the blob with the default firmware if separate file is not available. > > I think the driver can go to contrib with removed the blob from its sources Yes. > and with the firmware rt73.bin file can go to non

Downgrading the priority of nfs-utils [was: Re: Upgrading the priority of ucf]

2006-11-02 Thread Josh Triplett
Steinar H. Gunderson wrote: > It has recently come to my attention that nfs-utils (which is priority > standard) cannot depend on ucf, since ucf is of priority optional. > > I can only see four solutions for this: > > a) Ignore the problem for etch, figure out what do to afterwards. > b) Downgr

Re: Upgrading the priority of ucf

2006-11-02 Thread Henrique de Moraes Holschuh
On Thu, 02 Nov 2006, Goswin von Brederlow wrote: > "Steinar H. Gunderson" <[EMAIL PROTECTED]> writes: > > It has recently come to my attention that nfs-utils (which is priority > > standard) cannot depend on ucf, since ucf is of priority optional. > > > > I can only see four solutions for this: > >

Re: ca-certificates symlinks out of /etc

2006-11-02 Thread Gabor Gombas
On Thu, Nov 02, 2006 at 12:01:12PM +0100, martin f krafft wrote: > Anyway, thanks for the discussion. I don't think I heard a single > argument for using symlinks, other than to save 440k of space in > /etc. Symlinks just make _sense_. It's the idiocy of other OSes to duplicate data because they

Re: More accurate package classification

2006-11-02 Thread Thomas Perl
Hello, Peter! On Thu, 02 Nov 2006 11:36:48 +0100 Mgr. Peter Tuharsky wrote: > More and more, I miss some more accurate system for package > classification. > [...] > I'm sure something like that has already been discussed. I'm just > adding, that such kind of structure is NECESSARRY for such a g

Re: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Goswin von Brederlow
Peter Samuelson <[EMAIL PROTECTED]> writes: > [Goswin von Brederlow] >> > Your unspoken premise is that there is a _reason_ to support >> > building packages as root. Why? I think it is better just to tell >> > people not to do that. >> >> My premise is that there is no reason to sabotage build

How to remove imapproxy?

2006-11-02 Thread kurt
Hi How can I uninstall imapproxy? I tried: # dpkg --purge imapproxy (Reading database ... 64607 files and directories currently installed.) Removing imapproxy ... Stopping IMAP proxy: invoke-rc.d: initscript imapproxy, action "stop" failed. dpkg: error processing imapproxy (--purge): subprocess

Re: ca-certificates symlinks out of /etc

2006-11-02 Thread martin f krafft
also sprach Stephen Frost <[EMAIL PROTECTED]> [2006.11.01.1605 +0100]: > > The package allows the user to cherry-pick the certificates to > > enable anyway; why preselect? > > Because it's much more common for users to want at least some set > of certificates enabled on installation. Of course. B

Re: More accurate package classification

2006-11-02 Thread Michal Čihař
Hi On Thu, 02 Nov 2006 11:36:48 +0100 "Mgr. Peter Tuharsky" <[EMAIL PROTECTED]> wrote: > For example, just the cathegories "X11" and "GNOME" both contain bunch > of excellent software of many kinds. The same goes for other cathegories > too -sound, video,... > > New sub-cathegories should be c

More accurate package classification

2006-11-02 Thread Mgr. Peter Tuharsky
Hi all Sometimes I spend hours just reading Debian's package repository, and everytime I found interesting packages. The Debian is extremely large and juicy, but in contrary, it is really difficult sometimes to just find the "right" tool when needed. More and more, I miss some more

Bug#396689: ITP: mediawiki-extensions -- set of extensions for MediaWiki

2006-11-02 Thread Romain Beauxis
Package: wnpp Severity: wishlist Owner: Romain Beauxis <[EMAIL PROTECTED]> * Package name: mediawiki-extensions Version : 0.1 Upstream Author : collection of extensions from the net * URL : http://www.example.org/ * License : GPL, public domain and "Anyone is al

Re: Building in a directory named "something:something"

2006-11-02 Thread Gabor Gombas
On Thu, Nov 02, 2006 at 11:13:30AM +0100, Goswin von Brederlow wrote: > I'm not sure what to do about it. Should one guard against this? > Should sources use the absolute path instead of relative ones? Ideas > are welcome. I think yes. Having ':' in the file name is no different than having ' ' i

Building in a directory named "something:something"

2006-11-02 Thread Goswin von Brederlow
Hi, I recently run a simple shell script to test build a bunch of packages with debuild. The script basically did the following: mkdir package_version cd package_version apt-get build-dep apt-get source cd */ debuild A bunch of sources then failed to build with strange make erors because the ver

Re: ca-certificates symlinks out of /etc

2006-11-02 Thread Gabor Gombas
On Tue, Oct 31, 2006 at 07:10:45PM +0100, martin f krafft wrote: > cat /etc/ssl/certs/cacert-class3.pem >> /etc/ssl/certs/cacert.pem > > on systems that needed access to all of CACert's certificates. Btw., mounting /usr read-only is a good way to prevent stupid bugs like this. You can configur

Re: Bug#395262: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Thiemo Seufer
Sven Luther wrote: > On Wed, Nov 01, 2006 at 11:53:32PM -0600, Peter Samuelson wrote: > > > > > Robert Collins <[EMAIL PROTECTED]> writes: > > > > I can also note why bazaar wont build as root: its test suite > > > > includes a test for the ability to handle read only directories > > > > correctly

Re: Upgrading the priority of ucf

2006-11-02 Thread Goswin von Brederlow
"Steinar H. Gunderson" <[EMAIL PROTECTED]> writes: > Hi, > > It has recently come to my attention that nfs-utils (which is priority > standard) cannot depend on ucf, since ucf is of priority optional. > > I can only see four solutions for this: > > a) Ignore the problem for etch, figure out what

Re: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Peter Samuelson
[Goswin von Brederlow] > > Your unspoken premise is that there is a _reason_ to support > > building packages as root. Why? I think it is better just to tell > > people not to do that. > > My premise is that there is no reason to sabotage building as > root. Nearly all sources do build as root

Re: Bug#396648: ITP: rt73 -- Linux device driver for Ralink RT73 a/b/g WLAN Card

2006-11-02 Thread Piotr Roszatycki
Dnia czwartek, 2 listopada 2006 08:50, Kel Modderman napisał: > > I want to provide rt73-source package which is compatible with > > module-assistant. The resulting package (rt73-module-$VERSION) contains > > rt73.ko driver. The driver loads firmware from separate file and has > > included the blob

Re: Bug#395262: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Peter Samuelson
[Goswin von Brederlow] > Real or fake makes no difference. Anything that test id or file > permissions will (hopefully) behave the same with fakeroot. Ahh, the difference between theory and practice. fakeroot does not emulate the access(2) system call, which is one obvious thing to use when test

Re: Bug#396611: ITP: mach -- make a chroot of a rpm-based distribution

2006-11-02 Thread Loïc Minier
> This sounds like rpmstrap? > ... though with much better coverage. Check the "features" bullet points. The biggest differentiating features are probably: - based on yum or apt-rpm-client (I think rpmstrap calls rpm directly), both to bootstrap and to resolve build-requires - has logic to

Re: Bug#396618: ITP: dns-flood-detector -- DNS Flood Detector was developed to detect abusive usage levels on high traffic nameservers and to enable quick response in halting the use of one's nameserv

2006-11-02 Thread Andrea Bolognani
On Thu, 2 Nov 2006 09:43:54 +0100 Jan Wagner <[EMAIL PROTECTED]> wrote: > Hi Andrea, > > On Wednesday 01 November 2006 23:03, Andrea Bolognani wrote: > > Jan Wagner <[EMAIL PROTECTED]> wrote: > > > Description : DNS Flood Detector was developed to detect abusive > > > usage levels on high tr

Re: Bug#395262: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Goswin von Brederlow
Sven Luther <[EMAIL PROTECTED]> writes: > On Wed, Nov 01, 2006 at 11:53:32PM -0600, Peter Samuelson wrote: >> >> > Robert Collins <[EMAIL PROTECTED]> writes: >> > > I can also note why bazaar wont build as root: its test suite >> > > includes a test for the ability to handle read only directories

Re: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Goswin von Brederlow
Peter Samuelson <[EMAIL PROTECTED]> writes: >> Robert Collins <[EMAIL PROTECTED]> writes: >> > I can also note why bazaar wont build as root: its test suite >> > includes a test for the ability to handle read only directories >> > correctly. As root, anything is writable, so this test fails. > > [

Re: Bug#396618: ITP: dns-flood-detector -- DNS Flood Detector was developed to detect abusive usage levels on high traffic nameservers and to enable quick response in halting the use of one's nameserv

2006-11-02 Thread Magnus Holmgren
On Thursday 02 November 2006 09:43, Jan Wagner took the opportunity to say: > Hi Andrea, > > On Wednesday 01 November 2006 23:03, Andrea Bolognani wrote: > > Jan Wagner <[EMAIL PROTECTED]> wrote: > > > Description : DNS Flood Detector was developed to detect abusive > > > usage levels on high

Re: Bug#396618: ITP: dns-flood-detector -- DNS Flood Detector was developed to detect abusive usage levels on high traffic nameservers and to enable quick response in halting the use of one's nameserv

2006-11-02 Thread Hendrik Sattler
Am Donnerstag 02 November 2006 09:43 schrieb Jan Wagner: > Hi Andrea, > > On Wednesday 01 November 2006 23:03, Andrea Bolognani wrote: > > Jan Wagner <[EMAIL PROTECTED]> wrote: > > > Description : DNS Flood Detector was developed to detect abusive > > > usage levels on high traffic nameserver

Re: .ssh/authorized_keys on alioth is disappearing

2006-11-02 Thread Raphael Hertzog
Hi, On Wed, 01 Nov 2006, Peter Samuelson wrote: > > [Norbert Preining] > > | The SSH keys are not synchronized between alioth.debian.org and > > | svn.debian.org. > > > > so this seems to be outdated. > > Correct - svn.debian.org _is_ alioth.debian.org, as of last Friday. I updated the wiki pa

Re: Bug#396618: ITP: dns-flood-detector -- DNS Flood Detector was developed to detect abusive usage levels on high traffic nameservers and to enable quick response in halting the use of one's nameserv

2006-11-02 Thread Jan Wagner
Hi Andrea, On Wednesday 01 November 2006 23:03, Andrea Bolognani wrote: > Jan Wagner <[EMAIL PROTECTED]> wrote: > > Description : DNS Flood Detector was developed to detect abusive > > usage levels on high traffic nameservers and to enable quick response in > > halting the use of one's names

Re: Bug#395262: "Arch: all" package FTBFS due to test needing network access - RC?

2006-11-02 Thread Steve Langasek
On Thu, Nov 02, 2006 at 08:42:50AM +0100, Sven Luther wrote: > On Wed, Nov 01, 2006 at 11:53:32PM -0600, Peter Samuelson wrote: > > > Robert Collins <[EMAIL PROTECTED]> writes: > > > > I can also note why bazaar wont build as root: its test suite > > > > includes a test for the ability to handle r