est and
most actively exploited attack surfaces of any package in Debian, and I
suspect the security team will be very wary of introducing another version
of Firefox into the archive unless the security update story is very
well-understood.
--
Russ Allbery (r...@debian.org) <http:
Paul Wise <p...@debian.org> writes:
> On Wed, Sep 2, 2015 at 11:47 PM, Russ Allbery wrote:
>> If *no one* has access to anything better than a binary file, then
>> possession of that binary file puts you on an equal footing with
>> everyone else in the world, which
.
If *no one* has access to anything better than a binary file, then
possession of that binary file puts you on an equal footing with everyone
else in the world, which I think is all that we can reasonably ask.
--
Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>
thing that people in Debian could work on fixing, to
make it much more likely that we can properly package these tools.
--
Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>
ugs of
sufficient urgency to warrant a debate on debian-devel seem, to me at
least, to be in whatever makes use of that infrastructure without giving
the user enough advanced warning. Which, to repeat, appear to have
already been identified and fixed?
--
Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>
, they think no more about
adding new dependencies than we think about installing some application
with apt that happens to require a bunch of shared libraries.
In other words, the people developing and using this tool don't see this
as a problem, and therefore don't care about fixing it.
--
Russ Allbery (r
clear to me that we're really in a position to claim the
moral high ground here.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
packages? Maybe someone has fixed this in Doxygen
somehow?
This is typical of the sorts of problems that I would expect. It would
surprise me if this were a smaller project than the GFDL purging. It
might be quite a bit larger.
--
Russ Allbery (r...@debian.org) http
understanding of just what we're
asking of packagers and the extent to which we're swimming upstream here.
Maybe there's some pragmatic approach that I haven't thought of yet that
will make this less painful. That's what I'm hoping for.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org
a lot of packages, instead of
putting the conflicting packages on hold.
unattended-upgrades would be my guess. It's the only package in Debian
that I know of that does things like that. (It's independent of init
systems; it would do the same if you were running upstart or sysvinit.)
--
Russ
options, which is
great. The question, in my mind, is why you're getting surprised with
something using the method that you don't prefer.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
, this means a *lot*.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
do that? My
remaining i386 systems, and I'm sure I'm not the only one, are systems
that I've been continuously dist-upgrading for some time precisely because
I don't want to rebuild a system from scratch.
If cross-grading were supported, I'd just do that and switch to amd64.
--
Russ Allbery (r
webauth-tests webauth-utils webauth-weblogin
Architecture: source amd64 all
Version: 4.7.0-3
Distribution: unstable
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ Allbery r...@debian.org
Description:
libapache2-mod-webauth - Apache module for WebAuth authentication
libapache2
to get particularly excited about doing work to try to enable it, and
it feels really dubious to do it by breaking the command-line option
everyone is used to using.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Tue, 18 Aug 2015 21:45:35 -0700
Source: krb5-sync
Binary: krb5-sync-plugin krb5-sync-tools
Architecture: source amd64
Version: 3.1-1
Distribution: unstable
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ
remove the timestamp line and not
bother with it. It's not worth manually updating. It's not required;
having it there is just a convention.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Sun, 16 Aug 2015 12:01:54 -0700
Source: libnet-duo-perl
Binary: libnet-duo-perl
Architecture: source all
Version: 1.01-1
Distribution: unstable
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ Allbery r
of capitalism in general,
you're probably not a big fan of this manifestation of it, but it's
certainly not illegal and, by capitalism rules, not unethical.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
, is to figure out what version you want
with apt-cache show and then specify it with the = syntax.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
the higher social cost than developer effort), and I think
the chances of Playboy ever caring about uses of this picture at this
point is so low as to be ignorable.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ Allbery r...@debian.org
Description:
libnet-remctl-perl - Perl client for Kerberos-authenticated command execution
libremctl-dev - Development files for Kerberos-authenticated command execution
libremctl1 - Library
purposes.
So regardless of the merits or drawbacks of such a feature, it's rather
irrelevant to the discussion that we're having here.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject
is obviously wrong.
Also, anyone who describes their own format as flawless raises HUGE red
flags for me. It indicates some really scary hubris.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
are there primarily to fix the version if it
was closed with an incorrect version or with no version.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas
have yet to break. :)
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87oaiww4qh
comprehensive advantages
specifically for our binary package format over existing compression
methods.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble
of attacking hosts.
GitHub recommend using SSH key passphrases, which provide a degree of
protection against machine compromise:
https://help.github.com/articles/working-with-ssh-key-passphrases/
Which protects only against a tiny fraction of those attacks.
--
Russ Allbery (r...@debian.org
there that aren't
free software, but that's not the role that Debian plays in the world.
The whole *point* of this project is to develop and use free software.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
of different styles of tread. It looks
like you maintain daemon, in fact. :)
This is a little like uploading yet another MTA. People are reasonably
asking do we need *another* one?
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel
Vincent Lefevre vinc...@vinc17.net writes:
On 2015-06-16 09:12:36 -0700, Russ Allbery wrote:
There are a lot of really complex things you can do with versioning and
cases where that version number is meaningful, but for the vast
majority of libraries, I recommend not worrying about
Hendrik Sattler p...@hendrik-sattler.de writes:
Am 18. Juni 2015 03:54:56 MESZ, schrieb Russ Allbery r...@debian.org:
Shared library symbol versioning makes the problem go away. Package
dependencies try to solve the problem at the wrong level.
The problem is rather that the package
when I changed SONAMEs anyway, and could have saved a lot of
maintenance overhead by just using this approach. I wasn't getting much
benefit from being more precise.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ
symbol@LOW1).
I'm pretty sure Russ was indeed talking about versioned symbols at DSO
level. Having debian/symbols doesn't solve the issue at hand here.
Yup, I was talking about the DSO level. debian/symbols doesn't help
(although it's certainly nice for other things).
--
Russ Allbery (r
Thomas Goirand z...@debian.org writes:
Did you try using the same pristine-tar xz thing but with a different
version of xz-utils, for example the one in Trusty vs the one in Sid?
Yup, I do this all the time.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
, and way more different compression
formats than there are actually meaningful distinguishing features that
could only be implemented in that format, because everyone seems to want
to write their own thing.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE
for a lot of edge packages
where the upstream maintainers are building shared libraries without
really understanding how they work, but it's so hard to properly manage
library upgrades without symbol versioning.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
for other reasons, and that's worthwhile.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org
then assuming we have some control over the client. I was assuming a
general client where we'd have to play nice with the normal CA roots.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
into a worthwhile security protocol. It's not
exactly trivial to work out the UI and integration problems, and it
doesn't help for people not coming from a Debian system (at least as
much), but it might be worth considering.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
security means.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87pp5l5l8p@hope.eyrie.org
webauth-tests webauth-utils webauth-weblogin
Architecture: source amd64 all
Version: 4.7.0-2
Distribution: unstable
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ Allbery r...@debian.org
Description:
libapache2-mod-webauth - Apache module for WebAuth authentication
libapache2
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Sun, 26 Apr 2015 17:15:58 -0700
Source: lbcd
Binary: lbcd
Architecture: source amd64
Version: 3.5.2-1
Distribution: unstable
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ Allbery r...@debian.org
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Sun, 26 Apr 2015 20:23:59 -0700
Source: libpam-krb5
Binary: libpam-krb5 libpam-heimdal
Architecture: source amd64
Version: 4.7-2
Distribution: unstable
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ
contributions via email or git request-pull.
AOL.
Oh, certainly. (Well, like Neil, I've never heard of git request-pull
before this thread and have never seen anyone use it, but if someone did,
it would be an interesting learning opportunity.)
--
Russ Allbery (r...@debian.org) http
.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87lhhot4ey@hope.eyrie.org
in the long run
than if they'd tried to support both bzar and Git (and Mercurial and the
other ones that were looking viable) at the start.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject
Russell Stuart russell-deb...@stuart.id.au writes:
On Thu, 2015-04-16 at 23:13 -0700, Russ Allbery wrote:
However, I still stand by the decision to only support a single VCS, at
least when you start, because you can move a lot faster and implement a
lot more functionality that people care
more
towards the GitHub pull and fork model than the Gerrit up-front code
review model.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas
Ben Finney ben+deb...@benfinney.id.au writes:
Russ Allbery r...@debian.org writes:
Funny, this is why I don't get why people are so upset that some use
GitHub. Because of how Git works, the impact of lock-in is pretty much
limited to the non-repository stuff (issues and so forth).
Yet
/pull model) running on a service like Alioth would be very
neat.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive
workflows, etc.
+1. VCS agnosticism means you waste a bunch of time making each new
feature work with every supported VCS, which can include trying to
shoehorn pretty foreign workflows into the model of some other VCS.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
non-free area is not part of the
Debian system...
It's RC for the package, but not for Debian. In other words, if the bug
isn't fixed, the package would be pulled from the release, but it's pretty
unlikely that it would hold up the release itself.
--
Russ Allbery (r...@debian.org
.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/871tk3eqa5@hope.eyrie.org
Setting it up is a little like trying to set up dak yourself: it's
possible, and people have done it, but it's not common, so it's not
painless and may require a fair bit of elbow grease and some swearing.
But it is possible; I know people who have done it.
--
Russ Allbery (r...@debian.org
Bernhard R. Link brl...@debian.org writes:
* Russ Allbery r...@debian.org [150222 21:51]:
It won't with something more complex on all architectures. I think
there are architectures (i386, maybe?) where you can link non-PIC code
into a shared library with a performance penalty
to time in various upstream projects where I
wanted to assemble a shared library from various internal helper
libraries. Take a look at all the work that Libtool does to handle
convenience libraries for exactly this reason.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
option or something. As upstream, it's already easy to tell all my code
that's systemd-aware to stub out that stuff if wanted.
But, as you say, I think it's unlikely that this is really the low-hanging
fruit for very resource-constrained embedded environments.
--
Russ Allbery (r...@debian.org
could even say
that it's a primary *purpose* of that library. So, yay, I guess? The
world is much better than you had thought and already as good as the
compromise position you thought you could get!
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE
.
Or, alternately, you could research how and why one would use shared
libraries in a binary distribution to support optional features. But
that's boring, prosaic, and nowhere near as much fun to write about.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE
the last word.)
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87lhk5ueu9
Package: wnpp
Severity: wishlist
Owner: Russ Allbery r...@debian.org
* Package name: python-moto
Version : 0.4.0
Upstream Author : Steve Pulec
* URL : https://github.com/spulec/moto
* License : Apache 2.0
Programming Lang: Python
Description : Mock
Russ Allbery r...@debian.org writes:
Package: wnpp
Severity: wishlist
Owner: Russ Allbery r...@debian.org
* Package name: python-dicttoxml
Version : 1.5.8
Upstream Author : Ryan McGreal r...@quandyfactory.com
* URL : https://pypi.python.org/pypi/dicttoxml
Package: wnpp
Severity: wishlist
Owner: Russ Allbery r...@debian.org
* Package name: python-dicttoxml
Version : 1.5.8
Upstream Author : Ryan McGreal r...@quandyfactory.com
* URL : https://pypi.python.org/pypi/dicttoxml
* License : GPL 2.0
Programming Lang
pam_motd with pam_issue. Unless that module does something different than
what its man page says it does, I don't believe this is possible.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject
to the man
page for pam_issue. If you log in with public key authentication, does it
even show anything? I bet it doesn't.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe
with
PasswordAuthentication (as opposed to ChallengeResponseAuthentication).
If it's instead a different variation on pam_motd, that's better. But I
think it would still be even better to make the login flow as stupid and
simple as possible, not do a bunch of dynamic string expansion in C.
--
Russ Allbery
should do by default. We
certainly shouldn't remove the code that lets people do more complicated
stuff if they really want.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe
installed six weeks ago but never
used?
I suggested a cron job, but maybe there are better ways, like apt hooks,
dpkg triggers, etc.
A cron job is strictly worse than running it at boot in every metric that
I can think of.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org
%)
%= text -%
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/877fwcostv@hope.eyrie.org
is the
upstream default).
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87d263o2wc@hope.eyrie.org
to
be doing; each site can handle that.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org
systems require at least a weak authentication step before
letting you comment on a bug, so there's some reasonable binding of
identity of the person commenting with an email address. This is not true
for the Debian BTS.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/871tmu46yn@hope.eyrie.org
release, and should be fixed shortly. See:
http://womble.decadent.org.uk/blog/linux-suspendresume-regression-in-debian-78.html
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject
the right package. And having at least *some* description
for humans to view with a pager and forward search is really nice.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe
Christoph Anton Mitterer cales...@scientia.net writes:
On Wed, 2014-12-31 at 12:04 -0800, Russ Allbery wrote:
I think UsePAM yes is the only sane default for Debian, though, and
people who choose to change that default are legitimately on their own.
I've used UsePAM no for many years
handling, so you lose Kerberos ticket setup, may lose account
locking and expiration, and all sorts of other stuff that is managed via
PAM.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Format: 1.8
Date: Thu, 25 Dec 2014 19:36:00 -0800
Source: libpam-krb5
Binary: libpam-krb5 libpam-heimdal
Architecture: source amd64
Version: 4.7-1
Distribution: experimental
Urgency: medium
Maintainer: Russ Allbery r...@debian.org
Changed-By: Russ
to occasionally get wiped out.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/87h9wwdebi
bcron, handle this?
It feels cleaner to me to have cron be aware that systemd-cron (or some
other package) has taken over those files, instead of making other
packages do edits of the package metadata.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE
can certainly document this in the release notes even if it
doesn't get better before the release. We should definitely sort out
the exact working instructions for what we ship with jessie and get
them into the release notes before we release.
--
Russ Allbery (r...@debian.org
very frustrated by the GPL-only tags on various keyring
features, but that's another argument).
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas
, and I'm quite happy about it,
although it's going to be a few years before it propagates into my current
work (where we're using Ubuntu LTS for complicated reasons).
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ
of standard CGI (merits of allowing that aside -- it's hard
to turn insecure things off when tens of thousands of people have written
lots and lots of web sites assuming that behavior).
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email
for the motivation
for systemd to them again, a kitten dies. Please, think of the kittens.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas
, this has always been custom, replacing /etc/inittab with a local
configuration file, so the analysis isn't trivial.)
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe
that assertion. Not just a gut feeling.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org
institution server, let
alone companies with more locked-down production environments.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas
but can't start ssh. In theory, that's possible
with a split / and /usr, but as we've discussed in other threads, that's
an extremely unusual configuration these days.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ
Jonas Smedegaard d...@jones.dk writes:
Quoting Russ Allbery (2014-11-22 18:01:12)
I also like the idea of not having ssh depend on all local file systems
to be mounted. I think it's going to be pretty rare to have a system
that has /lib and /etc mounted but can't start ssh. In theory
that declare a dependency on mounted file
systems never start because the file systems aren't successfully mounted.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe
Bastien ROUCARIES roucaries.bast...@gmail.com writes:
Le 19 nov. 2014 21:33, Russ Allbery r...@debian.org a écrit :
Yes, absolutely. Likewise for cron jobs, etc. That's something that I
don't think we're doing a great job of right now, and really should
improve.
Could lintian help here
tool or not.
Personally (and this is just a wishlist), I'd love to have functionality
similar to apt-listchanges that would (optionally) show me a report of
every change to any unit file that I've overridden on each upgrade.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org
that mount points that are defined but
always fail will be handled differently under systemd.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas
correct that policy.d is the
only mechanism to achieve that.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: https
will be circumvented when
cron triggers log rotation.
Yes, absolutely. Likewise for cron jobs, etc. That's something that I
don't think we're doing a great job of right now, and really should
improve.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle
and won't start a service that's not
already running, otherwise something specifically crafted for that service
that has the right semantics.
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject
, and sometimes dpkg-maintscript-helper) will be of limited
help.
I think I'd be inclined to do this, as a one-time migration,
Yeah, this seems like the right solution to me too. Drop a configuration
fragment in /etc/systemd that overrides the user and group and then don't
touch it again.
--
Russ
situations than using invoke-rc.d. Maybe in
cases where the daemon is running but policy.d says it shouldn't be?
--
Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/
--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble
801 - 900 of 4312 matches
Mail list logo