Re: Security updates for sarge?

2004-10-25 Thread Andres Salomon
On Sat, 23 Oct 2004 05:10:26 +0200, Sven Mueller wrote: Heck, If I were a DD, I would be glad to help whereever needed. The most pressing bits seem to be (from my POV): 1) buildd network (especially because of sarge/security) 2) ftpmaster (seems to be overwhelmed in work for months now) 3)

Re: Security updates for sarge?

2004-10-25 Thread Bartosz Fenski aka fEnIo
On Mon, Oct 25, 2004 at 12:19:05AM -0400, Andres Salomon wrote: 4) security team (though I'm not sure how bad the situation is) So, if my help is wanted with one of the first three of those, I will gladly file a NM application immediately. Afaict, James processes NM apps

Re: Security updates for sarge?

2004-10-24 Thread Manoj Srivastava
On Sat, 23 Oct 2004 22:40:58 +0200, Matthias Urlichs [EMAIL PROTECTED] said: Hi, Manoj Srivastava wrote: Again, are you volunteering to go out and learn how to do it? Or is this yet another time wasting rant? Heck, If I were a DD, I would be glad to help whereever needed. The Ah. Just

Re: Security updates for sarge?

2004-10-24 Thread Manoj Srivastava
On Sun, 24 Oct 2004 00:30:37 +0200, Sven Mueller [EMAIL PROTECTED] said: Manoj Srivastava [u] wrote on 23/10/2004 21:43: I must admit I thought something similar: Why the hell are there only two people who know how to do it, when two people doesn't seem to be enough? Are you volunteering to

Re: Security updates for sarge?

2004-10-24 Thread Ingo Juergensmann
On Sun, Oct 24, 2004 at 03:29:35AM +0100, Matthew Garrett wrote: But I think you're right... it's not about getting work done, it's about politics and a orwellian all users are equal, DDs are more equal nonsense. With every day passing by, it seems even more clearly to me that Debian has

Re: Security updates for sarge?

2004-10-24 Thread Matthias Urlichs
Hi, Manoj Srivastava wrote: Are you, then, setting up a system for the security team to be able to build packages for testing? (you did mention you needed no further help from anybody). Is there a reason you are not indeed putting things in place? I already have, as far as

Re: Security updates for sarge?

2004-10-24 Thread Matthew Garrett
Ingo Juergensmann [EMAIL PROTECTED] wrote: IIRC, you're one of those Ubuntus, right? No more to be said then... I am not an employee of Canonical, and nor have I ever been. -- Matthew Garrett | [EMAIL PROTECTED]

Re: Security updates for sarge?

2004-10-24 Thread Ingo Juergensmann
On Sun, Oct 24, 2004 at 01:14:25PM +0100, Matthew Garrett wrote: IIRC, you're one of those Ubuntus, right? No more to be said then... I am not an employee of Canonical, and nor have I ever been. Ok, sorry then for that point. -- Ciao... // Ingo \X/

Re: Security updates for sarge?

2004-10-24 Thread Andrew Pollock
On Sat, Oct 23, 2004 at 02:43:18PM -0500, Manoj Srivastava wrote: On Sat, 23 Oct 2004 05:10:26 +0200, Sven Mueller [EMAIL PROTECTED] said: Ingo Juergensmann [u] wrote on 22/10/2004 18:35: On Fri, Oct 22, 2004 at 06:13:46PM +0200, Martin Schulze wrote: Because they have set up and

Re: Security updates for sarge?

2004-10-23 Thread Don Armstrong
On Fri, 22 Oct 2004, Martin Schulze wrote: Jan Niehusmann wrote: Question to the security team: What's holding back security support for sarge? (This is not a complaint - I'm just curious) It still (as written on -project one or two weeks ago) lacks the infrastructure as in a working

Re: Security updates for sarge?

2004-10-23 Thread Petter Reinholdtsen
[Don Armstrong] Is there anything that those of us who are not these two people can do to help with this, short of not bothering them about it? I'm not sure how to help on the infrastructure. But if you want to help with securing sarge/testing, you can help Joey Hess and the rest of us

Re: Security updates for sarge?

2004-10-23 Thread Anthony Towns
On Fri, Oct 22, 2004 at 10:34:07PM -0700, Don Armstrong wrote: Is there anything that those of us who are not these two people can do to help with this, short of not bothering them about it? I'm not sure where the two people figure comes from; I assume it's supposed to be referring to James and

Re: Security updates for sarge?

2004-10-23 Thread Sven Mueller
Ingo Juergensmann [u] wrote on 22/10/2004 18:35: On Fri, Oct 22, 2004 at 06:13:46PM +0200, Martin Schulze wrote: Because they have set up and maintain the buildd network. Yes, nice, well done, thank them for their initial work, but it seems as if it's up for others now to take over that job,

Re: Security updates for sarge?

2004-10-23 Thread Ingo Juergensmann
On Sat, Oct 23, 2004 at 05:10:26AM +0200, Sven Mueller wrote: Because they have set up and maintain the buildd network. Yes, nice, well done, thank them for their initial work, but it seems as if it's up for others now to take over that job, because they obviously failing continuously doing

Re: Security updates for sarge?

2004-10-23 Thread Manoj Srivastava
On Sat, 23 Oct 2004 05:10:26 +0200, Sven Mueller [EMAIL PROTECTED] said: Ingo Juergensmann [u] wrote on 22/10/2004 18:35: On Fri, Oct 22, 2004 at 06:13:46PM +0200, Martin Schulze wrote: Because they have set up and maintain the buildd network. Yes, nice, well done, thank them for their

Re: Security updates for sarge?

2004-10-23 Thread Matthias Urlichs
Hi, Manoj Srivastava wrote: Again, are you volunteering to go out and learn how to do it? Or is this yet another time wasting rant? Heck, If I were a DD, I would be glad to help whereever needed. The Ah. Just a spectator, booing and hissing at the people who have stood up

Re: Security updates for sarge?

2004-10-23 Thread Matthias Urlichs
Hi, Anthony Towns wrote: doing the work /first/ is the obvious way of demonstrating that the offer will actually get followed up; ... assuming that there's any work that *can* be done without having access. Case in point: I would very much like to set up the required buildd environments on

Re: Security updates for sarge?

2004-10-23 Thread Ingo Juergensmann
On Sat, Oct 23, 2004 at 10:52:27PM +0200, Matthias Urlichs wrote: You want to help? Start by buying your own mips machine! isn't going to cut it. Besides, I already (and gladly) did that, for m68k. You don't need to do that. There're plenty of machines available - albeit outside the debian.org

Re: Security updates for sarge?

2004-10-23 Thread Matthias Urlichs
Hi, Ingo Juergensmann wrote: You don't need to do that. There're plenty of machines available - albeit outside the debian.org domain... Ingo, this is about the *security* autobuilders. There's a reason why Debian cannot do that with machines it doesn't control. -- Matthias Urlichs |

Re: Security updates for sarge?

2004-10-23 Thread Ingo Juergensmann
On Sun, Oct 24, 2004 at 12:01:46AM +0200, Matthias Urlichs wrote: You don't need to do that. There're plenty of machines available - albeit outside the debian.org domain... Ingo, this is about the *security* autobuilders. There's a reason why Debian cannot do that with machines it doesn't

Re: Security updates for sarge?

2004-10-23 Thread Matthias Urlichs
Hi, Ingo Juergensmann wrote: Funny. Arrakis were used heavily in the past for security builds as well. Otherweise I have no idea where all those security team logins on arrakis come from? I'd assume that there's a *slight* difference between somebody, who doesn't (necessarily) have any

Re: Security updates for sarge?

2004-10-23 Thread Ingo Juergensmann
, who doesn't (necessarily) have any privileges, logs on and specifically builds something, and an unattended autobuilder. Well, the main difference I see is, that there are still no security updates for sarge/testing. For the user it's irrelevant if the security updates was built by a person

Re: Security updates for sarge?

2004-10-23 Thread Sven Mueller
Manoj Srivastava [u] wrote on 23/10/2004 21:43: I must admit I thought something similar: Why the hell are there only two people who know how to do it, when two people doesn't seem to be enough? Are you volunteering to go out and better educate yourself to take on this work? You know

Re: Security updates for sarge?

2004-10-23 Thread Ben Burton
And without starting a flamewar, ... Yep, I thought it looked too good to be true. b.

Re: Security updates for sarge?

2004-10-23 Thread Matthew Garrett
Ingo Juergensmann [EMAIL PROTECTED] wrote: But I think you're right... it's not about getting work done, it's about politics and a orwellian all users are equal, DDs are more equal nonsense. With every day passing by, it seems even more clearly to me that Debian has lost its basics and has

Security updates for sarge? (was: Ubuntu discussion at planet.debian.org)

2004-10-22 Thread Jan Niehusmann
On Fri, Oct 22, 2004 at 10:20:51AM +0200, Jérôme Marant wrote: Debian developers, on the contrary, run unstable and rarely run testing, which means that they don't really know about the shape of what they release. I would immediately upgrade at least one, probably more, woody machines to sarge

Re: Security updates for sarge?

2004-10-22 Thread Petter Reinholdtsen
[Jan Niehusmann] Question to the security team: What's holding back security support for sarge? (This is not a complaint - I'm just curious) Debian-edu is trying to form a separate security team for debian/testing, working on keeping the testing distribution secure in paralell with the

Re: Security updates for sarge? (was: Ubuntu discussion at planet.debian.org)

2004-10-22 Thread Andreas Barth
* Jan Niehusmann ([EMAIL PROTECTED]) [041022 11:10]: Question to the security team: What's holding back security support for sarge? (This is not a complaint - I'm just curious) There are no autobuilders for testing-security. See the latest release update

Re: Security updates for sarge?

2004-10-22 Thread Martin Schulze
Jan Niehusmann wrote: Question to the security team: What's holding back security support for sarge? (This is not a complaint - I'm just curious) It still (as written on -project one or two weeks ago) lacks the infrastructure as in a working buildd network that processes the target

Re: Security updates for sarge?

2004-10-22 Thread Steve McIntyre
Joey writes: Jan Niehusmann wrote: Question to the security team: What's holding back security support for sarge? (This is not a complaint - I'm just curious) It still (as written on -project one or two weeks ago) lacks the infrastructure as in a working buildd network that processes the target

Re: Security updates for sarge?

2004-10-22 Thread Florian Weimer
* Andreas Barth: There are no autobuilders for testing-security. So what's missing at this stage? Machines? An active local system administrator? Or someone who is trusted enough to integrate the buildds into the security build infrastructure? If it's machines or the local system

Re: Security updates for sarge?

2004-10-22 Thread Josselin Mouette
Le vendredi 22 octobre 2004 11:26 +0200, Martin Schulze a crit : It still (as written on -project one or two weeks ago) lacks the infrastructure as in a working buildd network that processes the target ``testing-security''. This is something that two people in Debian can set up. (This is

Re: Security updates for sarge?

2004-10-22 Thread Martin Schulze
Josselin Mouette wrote: Le vendredi 22 octobre 2004 à 11:26 +0200, Martin Schulze a écrit : It still (as written on -project one or two weeks ago) lacks the infrastructure as in a working buildd network that processes the target ``testing-security''. This is something that two people in

Re: Security updates for sarge?

2004-10-22 Thread Ingo Juergensmann
On Fri, Oct 22, 2004 at 06:13:46PM +0200, Martin Schulze wrote: Because they have set up and maintain the buildd network. Yes, nice, well done, thank them for their initial work, but it seems as if it's up for others now to take over that job, because they obviously failing continuously doing

Re: Security updates for sarge?

2004-10-22 Thread Matthias Urlichs
Hi, Martin Schulze wrote: Because they have set up and maintain the buildd network. Other people have set up, and are maintaining, their very own buildd networks, and thus might be assumed to be qualified to add t-s support and/or whatever else is missing. Me, for example. (I think I've