Bug#510275: ITP: krypt -- KDE GUI for managing volumes encrypted with LUKS

2008-12-30 Thread Stefanos Harhalakis
Package: wnpp Severity: wishlist Owner: Stefanos Harhalakis * Package name: krypt Version : 0.2 Upstream Author : Jakub Schmidtke * URL : http://krypt.berlios.de/ * License : GPL Programming Lang: C++ Description : KDE GUI for managing volumes encrypt

Re: Override changes standard -> optional

2008-12-30 Thread Frans Pop
> Joerg Jaspert writes: > > python-support > > This one is probably not *directly* useful to users of a standard > system, but I'm not sure what effect the change in priority has for > the presence of this package on installation media. If it is correctly defined as a dependency of other packages

Re: Override changes standard -> optional

2008-12-30 Thread Frans Pop
Russell Coker wrote: > Frans Pop wrote: > > Not really. SELinux is not even close to functional after a standard > > installation. For one thing, it gets installed *after* the initrd gets > > generated and the initrd does not get regenerated, so the admin has to > > do that manually after rebooting

Re: Override changes standard -> optional

2008-12-30 Thread Daniel Jacobowitz
On Tue, Dec 30, 2008 at 10:48:04PM +, Neil Williams wrote: > I'd rather see strace and gdb leave Standard. If one has to stay, let > it *not* be gdb. > > It's not as if there is a gdb-tiny. Agreed. There could be a gdb-tiny - but it would still be about 3.5MB installed, as opposed to the 8MB

Bug#510266: ITP: python-libasyncns -- Python wrapper around the libasyncns asynchronous name service query library

2008-12-30 Thread asterix
Package: wnpp Severity: wishlist Owner: Yann Leboulanger * Package name: python-libasyncns Version : 0.7 Upstream Author : Damien Thébault * URL : https://launchpad.net/libasyncns-python * License : GPL Programming Lang: C Description : Python wrapper

Re: Override changes standard -> optional

2008-12-30 Thread Ben Finney
Joerg Jaspert writes: > python-support This one is probably not *directly* useful to users of a standard system, but I'm not sure what effect the change in priority has for the presence of this package on installation media. Since this package is a ‘Depends’ requirement for installation of a gr

Re: Override changes standard -> optional

2008-12-30 Thread Neil Williams
On Tue, 30 Dec 2008 23:33:41 +0100 Cyril Brulebois wrote: > Steve Langasek (30/12/2008): > > > strace > > > mtr-tiny > > > > I think these are useful troubleshooting tools that we ought to > > install by default. mtr-tiny is the only traceroute tool included in > > standard currently. > > I co

Re: Override changes standard -> optional

2008-12-30 Thread Cyril Brulebois
Steve Langasek (30/12/2008): > > strace > > mtr-tiny > > I think these are useful troubleshooting tools that we ought to > install by default. mtr-tiny is the only traceroute tool included in > standard currently. I concur for strace (at least). > I think we ought to even consider adding gdb in

Re: Override changes standard -> optional

2008-12-30 Thread Steve Langasek
On Tue, Dec 30, 2008 at 09:31:40PM +0100, Michael Tautschnig wrote: > > > strace > > > mtr-tiny > > I think these are useful troubleshooting tools that we ought to install by > > default. mtr-tiny is the only traceroute tool included in standard > > currently. > > For comparison, both of these p

Re: Override changes standard -> optional

2008-12-30 Thread Loïc Minier
On Tue, Dec 30, 2008, Joerg Jaspert wrote: > > It's difficult to see how any of these packages fail the *definition* of > > standard. > Its difficult to see how any of these packages fulfill the *definition* > of standard. > > The definition is wide enough to let us discuss without end. Yet you

Re: Override changes standard -> optional

2008-12-30 Thread Steve Langasek
On Tue, Dec 30, 2008 at 10:11:08PM +0100, Joerg Jaspert wrote: > > The policy definition of 'standard' is: > > These packages provide a reasonably small but not too limited > > character-mode system. This is what will be installed by default > > if the user doesn't s

Re: Override changes standard -> optional

2008-12-30 Thread Russell Coker
On Wednesday 31 December 2008 08:09, Frans Pop wrote: > > I think this needs to be at Priority: standard as a necessary step in > > SELinux bootstrapping, but I realize this is contentious. > > Not really. SELinux is not even close to functional after a standard > installation. For one thing, it g

Bug#510260: ITP: qmpdclient-ne -- QMPDClient is an easy to use MPD client written in Qt 4.

2008-12-30 Thread Harald Gutmann
Package: wnpp Severity: wishlist Owner: Harald Gutmann * Package name: qmpdclient-ne Version : 20081230 Upstream Author : Voker57 * URL : http://github.com/Voker57/qmpdclient-ne/tree/master * License : (GPL) Programming Lang: (C++) Description

Re: Override changes standard -> optional

2008-12-30 Thread Agustin Martin
On Tue, Dec 30, 2008 at 09:00:04PM +0100, Frans Pop wrote: > > For that reason I suggest that ispell, iamerican and ibritish entries > > be modified *right now* to be optional instead of standard. wbritish > > seems to be already optional. > > For most languages tasksel will automatically install

Re: Override changes standard -> optional

2008-12-30 Thread Joerg Jaspert
> Is there any rationale from these internal discussions about why these tools > have been demoted? It's hard to refute an argument that hasn't been > presented. It was a discussion taking some time with us looking at the packages and then seeing how many of us are in favour. > The policy defin

Re: Override changes standard -> optional

2008-12-30 Thread Frans Pop
Steve Langasek wrote: >> selinux-policy-default > > I think this needs to be at Priority: standard as a necessary step in > SELinux bootstrapping, but I realize this is contentious. Not really. SELinux is not even close to functional after a standard installation. For one thing, it gets installe

Re: Override changes standard -> optional

2008-12-30 Thread Russ Allbery
Mike Bird writes: > Every system with a network uses mtr or traceroute. If the system's > owner doesn't use them then the sysadmin does. Well, YMMV. I'm a professional sysadmin and I hardly ever use traceroute. I don't really care if it's installed or not, but it's not particularly useful in a

Re: Override changes standard -> optional

2008-12-30 Thread Mike Bird
On Tue December 30 2008 12:31:40 Michael Tautschnig wrote: > Is "standard" in some sense also targeted at those who do lots of stuff > other than hacking with their computer systems? If so, I doubt that the the > output of strace will be very useful to those, and neither will those have > any idea

Re: Override changes standard -> optional

2008-12-30 Thread Michael Tautschnig
[...] > > The policy definition of 'standard' is: > > These packages provide a reasonably small but not too limited > character-mode system. This is what will be installed by default > if the user doesn't select anything else. It doesn't include > many la

Re: Override changes standard -> optional

2008-12-30 Thread Russ Allbery
Kalle Kivimaa writes: > Agustin Martin writes: >> There was the opinion that there should be a wordlist of standard >> priority, and that the best for that was wamerican, formerly >> wenglish. So wamerican may be left with standard priority. > Why does standard need an English wordlist? Becaus

Re: Override changes standard -> optional

2008-12-30 Thread Steve Langasek
On Tue, Dec 30, 2008 at 01:34:35PM +0100, Joerg Jaspert wrote: > after some discussion within the ftpteam we just modified a few override > entries (15 to be exact). The following packages moved from standard to > optional: > In case you see a good reason why the above is wrong, feel free to repl

Re: Override changes standard -> optional

2008-12-30 Thread Frans Pop
> For that reason I suggest that ispell, iamerican and ibritish entries > be modified *right now* to be optional instead of standard. wbritish > seems to be already optional. For most languages tasksel will automatically install relevant dictionaries. It currently does not do so for English _beca

Re: mass bug filing for undefined sn?printf use

2008-12-30 Thread Arthur de Jong
On Tue, 2008-12-30 at 10:41 -0600, Steve Langasek wrote: > On Tue, Dec 30, 2008 at 10:06:41AM +0100, Arthur de Jong wrote: > > On Sun, 2008-12-28 at 12:02 -0600, Steve Langasek wrote: > > > I don't know whether these are also a problem in practice - but if so, > > > using sprintf(buf + strlen(buf)

Re: Override changes standard -> optional

2008-12-30 Thread Kalle Kivimaa
Agustin Martin writes: > There was the opinion that there should be a wordlist of standard priority, > and that the best for that was wamerican, formerly wenglish. So wamerican > may be left with standard priority. Why does standard need an English wordlist? -- * Sufficiently advanced magic is

Re: Override changes standard -> optional

2008-12-30 Thread Agustin Martin
On Tue, Dec 30, 2008 at 01:34:35PM +0100, Joerg Jaspert wrote: > after some discussion within the ftpteam we just modified a few override > entries (15 to be exact). The following packages moved from standard to > optional: ... > > For the time right after the release we also intend to move ispell

Re: mass bug filing for undefined sn?printf use

2008-12-30 Thread Steve Langasek
On Tue, Dec 30, 2008 at 10:06:41AM +0100, Arthur de Jong wrote: > On Sun, 2008-12-28 at 12:02 -0600, Steve Langasek wrote: > > I don't know whether these are also a problem in practice - but if so, > > using sprintf(buf + strlen(buf) [...]) is definitely wrong. > I don't know if any of my code use

Bug#510207: ITP: pqstego -- Console tool to embed secret messages in JPEG images

2008-12-30 Thread Christian Kuka
Package: wnpp Severity: wishlist Owner: Christian Kuka * Package name: pqstego Version : 0.0.0 Upstream Author : Christian Kuka * URL : https://sourceforge.net/projects/pqstego/ * License : GPL Programming Lang: C Description : Console tool to embed s

Bug#510202: ITP: libpqstego -- a library for perturbed quantization steganography

2008-12-30 Thread Christian Kuka
Package: wnpp Severity: wishlist Owner: Christian Kuka * Package name: libpqstego Version : 0.0.0 Upstream Author : Christian Kuka * URL : https://sourceforge.net/projects/pqstego/ * License : GPL Programming Lang: C Description : A library for pertur

Override changes standard -> optional

2008-12-30 Thread Joerg Jaspert
Hi after some discussion within the ftpteam we just modified a few override entries (15 to be exact). The following packages moved from standard to optional: strace sharutils policycoreutils tcsh python-support python-newt mtools mtr-tiny finger libustr-1.0-1 libsemanage1 libdb4.7 python-semanage

Re: mass bug filing for undefined sn?printf use

2008-12-30 Thread Arthur de Jong
On Sun, 2008-12-28 at 12:02 -0600, Steve Langasek wrote: > I don't know whether these are also a problem in practice - but if so, > using sprintf(buf + strlen(buf) [...]) is definitely wrong. I don't know if any of my code uses such a construct but why is that wrong as long as [...] doesn't contai

Re: CVE-2008-5378: possible symlink attacks

2008-12-30 Thread Andreas Tille
On Mon, 29 Dec 2008, Russ Allbery wrote: Right, mkstemp gives you a file name that you can then safely open. In code where I didn't want to break the existing flow, I've used the following pattern many times: fd = mkstemp(filename); if (fd < 0) { perror("mkstemp"); return N

Re: CVE-2008-5378: possible symlink attacks

2008-12-30 Thread Andreas Tille
On Tue, 30 Dec 2008, Thomas Viehmann wrote: Also, mkstemp(3): The last six characters of template must be "XX" and these are replaced with a string that makes the filename unique. Since it will be modified, template must not be a string constant, but should be decl