Accepted cockpit 179-1 (source) into unstable

2018-10-04 Thread Martin Pitt
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 14:10:59 + Source: cockpit Binary: cockpit cockpit-bridge cockpit-dashboard cockpit-doc cockpit-docker cockpit-machines cockpit-networkmanager cockpit-pcp cockpit-packagekit cockpit-storaged cockpit-system

Accepted at-spi2-atk 2.30.0-2 (source) into unstable

2018-10-04 Thread Jeremy Bicha
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 10:24:31 -0400 Source: at-spi2-atk Binary: libatk-adaptor libatk-adaptor-udeb libatk-bridge2.0-0 libatk-bridge-2.0-0-udeb libatk-bridge2.0-dev Architecture: source Version: 2.30.0-2 Distribution: unstable Urgency:

Bug#910294: ITP: python-tld -- Extract the top level domain (TLD) from a given URL

2018-10-04 Thread Sophie Brun
Package: wnpp Severity: wishlist Owner: Sophie Brun * Package name: python-tld Version : 0.9.1 Upstream Author : Artur Barseghyan * URL : https://github.com/barseghyanartur/tld * License : MPL-1.1/GPL-2/LGPL-2.1+ Programming Lang: Python Description :

Re: Limiting the power of packages

2018-10-04 Thread intrigeri
Paul Wise: > On Thu, Oct 4, 2018 at 11:31 AM Antoine Beaupré wrote: >> Beyond this issue, what I'm mostly concerned about these days is >> isolation between different apps. Our only solution on the desktop right >> now is Qubes and it seems rather overengineered for my needs. > Our solution here

Bug#910290: ITP: schroedinger-maeparser -- parser for the Maestro (.mae) file format

2018-10-04 Thread Steffen Moeller
Package: wnpp Severity: wishlist Owner: Steffen Moeller * Package name: schroedinger-maeparser Version : 1.0.1 Upstream Author : Schroedinger * URL : https://github.com/schrodinger/maeparser * License : BSD-like Programming Lang: C++ Description :

Accepted python-darkslide 4.0.1-1 (source) into unstable

2018-10-04 Thread Andrej Shadura
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 15:37:52 +0200 Source: python-darkslide Binary: darkslide Architecture: source Version: 4.0.1-1 Distribution: unstable Urgency: medium Maintainer: Andrej Shadura Changed-By: Andrej Shadura Description: darkslide

Accepted haskell-hsopenssl 0.11.4.15-2 (source) into unstable

2018-10-04 Thread Ilias Tsitsimpis
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 14:01:47 +0300 Source: haskell-hsopenssl Binary: libghc-hsopenssl-dev libghc-hsopenssl-prof libghc-hsopenssl-doc Architecture: source Version: 0.11.4.15-2 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted ubuntu-packaging-guide 1.0.1 (source) into unstable

2018-10-04 Thread Dmitry Shachnev
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 16:26:43 +0300 Source: ubuntu-packaging-guide Binary: ubuntu-packaging-guide ubuntu-packaging-guide-common ubuntu-packaging-guide-html ubuntu-packaging-guide-pdf ubuntu-packaging-guide-epub

Accepted haskell-foundation 0.0.21-2 (source) into unstable

2018-10-04 Thread Ilias Tsitsimpis
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 13:32:30 +0300 Source: haskell-foundation Binary: libghc-foundation-dev libghc-foundation-prof libghc-foundation-doc Architecture: source Version: 0.0.21-2 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted haskell-ed25519 0.0.5.0-12 (source) into unstable

2018-10-04 Thread Ilias Tsitsimpis
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 16:29:17 +0300 Source: haskell-ed25519 Binary: libghc-ed25519-dev libghc-ed25519-prof libghc-ed25519-doc Architecture: source Version: 0.0.5.0-12 Distribution: unstable Urgency: medium Maintainer: Debian Haskell

Accepted haskell-monadplus 1.4.2-6 (source) into unstable

2018-10-04 Thread Dmitry Bogatov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 12:01:12 + Source: haskell-monadplus Binary: libghc-monadplus-dev libghc-monadplus-prof libghc-monadplus-doc Architecture: source Version: 1.4.2-6 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted bisonc++ 6.02.02-1 (source) into unstable

2018-10-04 Thread Frank B. Brokken
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 03 Oct 2018 21:50:02 +0200 Source: bisonc++ Binary: bisonc++ bisonc++-doc Architecture: source Version: 6.02.02-1 Distribution: unstable Urgency: low Maintainer: Frank B. Brokken Changed-By: Frank B. Brokken Description:

Accepted bnfc 2.8.1-6 (source) into unstable

2018-10-04 Thread Ilias Tsitsimpis
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 14:53:27 +0300 Source: bnfc Binary: bnfc Architecture: source Version: 2.8.1-6 Distribution: unstable Urgency: medium Maintainer: Debian Haskell Group Changed-By: Ilias Tsitsimpis Description: bnfc -

Accepted thepeg 1.8.0-4 (source) into unstable

2018-10-04 Thread Emmanuel Bourg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 15:12:10 +0200 Source: thepeg Binary: thepeg thepeg-gui libthepeg15 libthepeg-dev thepeg-reference Architecture: source Version: 1.8.0-4 Distribution: unstable Urgency: medium Maintainer: Debian Science Maintainers

Accepted haskell-parsec-numbers 0.1.0-2 (source) into unstable

2018-10-04 Thread Dmitry Bogatov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 01:54:45 + Source: haskell-parsec-numbers Binary: libghc-parsec-numbers-dev libghc-parsec-numbers-prof libghc-parsec-numbers-doc Architecture: source Version: 0.1.0-2 Distribution: unstable Urgency: medium

Re: Problem sending my key to keyring.debian.org

2018-10-04 Thread Shengjing Zhu
On Wed, Oct 3, 2018 at 9:28 AM Joseph Herlant wrote: > > Hi, > > On Tue, Oct 2, 2018 at 6:10 PM Seth Arnold wrote: > > Two thoughts: first, give it another try. I was able to refresh my > > keyring using the debian keyserver a few seconds ago: > > > > $ gpg --refresh-keys --keyserver

Accepted haskell-presburger 1.3.1-6 (source) into unstable

2018-10-04 Thread Dmitry Bogatov
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 03 Oct 2018 20:59:01 -0400 Source: haskell-presburger Binary: libghc-presburger-dev libghc-presburger-prof libghc-presburger-doc Architecture: source Version: 1.3.1-6 Distribution: unstable Urgency: medium Maintainer: Debian

Accepted wise 2.4.1-21 (source) into unstable

2018-10-04 Thread Andreas Tille
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 14:49:55 +0200 Source: wise Binary: wise wise-doc wise-data Architecture: source Version: 2.4.1-21 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By: Andreas Tille

Accepted dnaclust 3-6 (source) into unstable

2018-10-04 Thread Andreas Tille
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 14:53:24 +0200 Source: dnaclust Binary: dnaclust Architecture: source Version: 3-6 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By: Andreas Tille Description: dnaclust

Accepted black 18.9b0-1-2 (source all) into unstable

2018-10-04 Thread Neil Williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 12:47:58 +0100 Source: black Binary: black python-black-doc Architecture: source all Version: 18.9b0-1-2 Distribution: unstable Urgency: medium Maintainer: Neil Williams Changed-By: Neil Williams Description:

Accepted python-shodan 1.7.7-1 (source all) into unstable, unstable

2018-10-04 Thread Samuel Henrique
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 03 Oct 2018 19:38:37 -0300 Source: python-shodan Binary: python-shodan python3-shodan python-shodan-doc Architecture: source all Version: 1.7.7-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Modules Team

Accepted linux 4.19~rc6-1~exp1 (all source) into experimental, experimental

2018-10-04 Thread Ben Hutchings
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 03 Oct 2018 18:57:08 +0100 Source: linux Binary: linux-source-4.19 linux-support-4.19.0-rc6 linux-doc-4.19 linux-cpupower libcpupower1 libcpupower-dev usbip hyperv-daemons lockdep liblockdep4.19 liblockdep-dev

Accepted lava 2018.5.post1-3 (source all amd64) into unstable

2018-10-04 Thread Neil Williams
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 13:03:22 +0100 Source: lava Binary: lava-dispatcher lava-server lava-common lava lava-lxc-mocker lava-dev lava-server-doc Architecture: source all amd64 Version: 2018.5.post1-3 Distribution: unstable Urgency:

Accepted abacas 1.3.1-5 (source) into unstable

2018-10-04 Thread Andreas Tille
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 14:07:23 +0200 Source: abacas Binary: abacas Architecture: source Version: 1.3.1-5 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By: Andreas Tille Description: abacas

Re: Limiting the power of packages

2018-10-04 Thread Philipp Kern
On 04.10.2018 13:17, Enrico Weigelt, metux IT consult wrote: >> (Note that I'm not saying Microsoft or Google are doing something >> nefarious here: > > But I do think that. If they really wanted to do that in a reasonably > secure and safe way (assuming they're not completely incompetent), >

Accepted sword 1.7.3.1+dfsg-1 (source) into unstable

2018-10-04 Thread Teus Benschop
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 13:52:16 +0200 Source: sword Binary: libsword11v5 libsword-dev libsword-common libsword-utils libsword-dbg diatheke Architecture: source Version: 1.7.3.1+dfsg-1 Distribution: unstable Urgency: medium Maintainer:

Accepted python-fusepy 3.0.1-1 (source all) into unstable

2018-10-04 Thread Sascha Steinbiss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 13:40:35 +0200 Source: python-fusepy Binary: python-fusepy python3-fusepy Architecture: source all Version: 3.0.1-1 Distribution: unstable Urgency: medium Maintainer: Sascha Steinbiss Changed-By: Sascha Steinbiss

Accepted libsdl2 2.0.8+dfsg1-4 (source) into unstable

2018-10-04 Thread Gianfranco Costamagna
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Mon, 01 Oct 2018 12:54:23 +0200 Source: libsdl2 Binary: libsdl2-2.0-0 libsdl2-dev libsdl2-doc Architecture: source Version: 2.0.8+dfsg1-4 Distribution: unstable Urgency: medium Maintainer: Debian SDL packages maintainers

Re: Limiting the power of packages

2018-10-04 Thread Xavier
Le 04/10/2018 à 13:20, Paride Legovini a écrit : > Lars Wirzenius wrote on 03/10/2018: >> The problem: when a .deb package is installed, upgraded, or removed, >> the maintainer scripts are run as root and can thus do anything. >> >> Sometimes what they do is an unwelcome surprise to the user. For

Re: Limiting the power of packages

2018-10-04 Thread Enrico Weigelt, metux IT consult
On 04.10.2018 01:19, Carl-Valentin Schmitt wrote: > It would be a possibility, for safety to create a new directory only for > brandy 3rd-party-software like skype, Google Chrome, Swift, and else > Software where huge companies are Sponsors. >   > This would then mean, to create a second sources

Bug#910283: ITP: kamcli -- Kamailio Command Line Interface Control Tool

2018-10-04 Thread Victor Seva
Package: wnpp Severity: wishlist Owner: Victor Seva -BEGIN PGP SIGNED MESSAGE- Hash: SHA512 * Package name: kamcli Version : 1.1.0 Upstream Author : Daniel-Constantin Mierla * URL : https://github.com/kamailio/kamcli * License : GPL-2+ Programming

Re: Limiting the power of packages

2018-10-04 Thread Paride Legovini
Lars Wirzenius wrote on 03/10/2018: > The problem: when a .deb package is installed, upgraded, or removed, > the maintainer scripts are run as root and can thus do anything. > > Sometimes what they do is an unwelcome surprise to the user. For > example, the Microsoft Skype .deb and the Google

Re: Limiting the power of packages

2018-10-04 Thread Enrico Weigelt, metux IT consult
On 03.10.2018 19:19, Lars Wirzenius wrote: > Sometimes what they do is an unwelcome surprise to the user. For > example, the Microsoft Skype .deb and the Google Chrome .deb add to > the APT sources lists and APT accepted signing keys. Some users do not > realise this, and are unpleasantly

Accepted segyio 1.7.0-1 (source) into unstable

2018-10-04 Thread Jørgen Kvalsvik
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Wed, 26 Sep 2018 15:23:14 +0200 Source: segyio Binary: libsegyio1 libsegyio-dev segyio-bin python3-segyio Architecture: source Version: 1.7.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Science Maintainers

Bug#910279: ITP: optimesh -- Mesh optimization, mesh smoothing.

2018-10-04 Thread Drew Parsons
Package: wnpp Severity: wishlist Owner: Drew Parsons * Package name: optimesh Version : 0.4.3 Upstream Author : Nico Schlömer * URL : optimesh * License : MIT Programming Lang: Python Description : Mesh optimization, mesh smoothing. Several mesh

Accepted schleuder 3.3.0-4 (source) into unstable

2018-10-04 Thread Georg Faerber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 10:07:21 + Source: schleuder Binary: schleuder Architecture: source Version: 3.3.0-4 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers Changed-By: Georg Faerber Description:

Accepted sitesummary 0.1.36 (source) into unstable

2018-10-04 Thread Holger Levsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 11:17:51 +0100 Source: sitesummary Binary: sitesummary sitesummary-client Architecture: source Version: 0.1.36 Distribution: unstable Urgency: medium Maintainer: Debian Edu Developers Changed-By: Holger Levsen

Bug#910278: ITP: pygalmesh -- a Python frontend to CGAL's 3D mesh generators

2018-10-04 Thread Drew Parsons
Package: wnpp Severity: wishlist Owner: Drew Parsons * Package name: pygalmesh Version : 0.2.5 Upstream Author : Nico Schlömer * URL : https://github.com/nschloe/pygalmesh * License : MIT Programming Lang: Python Description : a Python frontend to

Re: Limiting the power of packages

2018-10-04 Thread Jonathan Dowland
On Thu, Oct 04, 2018 at 12:09:05PM +0200, Thomas Goirand wrote: And prevent stuff like with the bumblebee uninstall disaster because of an added space, for example: rm -rf /usr /share/foo/bar.conf Yes, or the similar bug in steam-for-linux steam.sh. Although neither made it into the Debian

Accepted rust-toml 0.4.8-1 (source) into unstable

2018-10-04 Thread Wolfgang Silbermayr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 11:49:40 +0200 Source: rust-toml Binary: librust-toml-dev Architecture: source Version: 0.4.8-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Wolfgang Silbermayr

Accepted rust-rand 0.5.5-1 (source) into unstable

2018-10-04 Thread Wolfgang Silbermayr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 11:55:16 +0200 Source: rust-rand Binary: librust-rand-dev librust-rand+alloc-dev librust-rand+cloudabi-dev librust-rand+fuchsia-zircon-dev librust-rand+libc-dev librust-rand+log-dev librust-rand+serde-dev

Re: Limiting the power of packages

2018-10-04 Thread Jonathan Dowland
On Thu, Oct 04, 2018 at 01:19:43AM +0200, Carl-Valentin Schmitt wrote: It would be a possibility, for safety to create a new directory only for brandy 3rd-party-software like skype, Google Chrome, Swift, and else Software where huge companies are Sponsors. This would then mean, to create a

Re: Limiting the power of packages

2018-10-04 Thread Thomas Goirand
On 10/4/18 10:06 AM, Jonathan Dowland wrote: > On Wed, Oct 03, 2018 at 11:30:40PM -0400, Antoine Beaupré wrote: >> Yet I still think we should start fixing those problems. > > +1 > >> Yes, there are a billion things that could go wrong in the current >> approach, but if we had *some* safety

Accepted rust-winapi 0.3.6-1 (source) into unstable

2018-10-04 Thread Wolfgang Silbermayr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 11:43:01 +0200 Source: rust-winapi Binary: librust-winapi-dev Architecture: source Version: 0.3.6-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Wolfgang Silbermayr

Accepted python-django 2:2.1.2-2 (source all) into experimental

2018-10-04 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 10:22:37 +0100 Source: python-django Binary: python3-django python-django-doc Built-For-Profiles: nocheck Architecture: source all Version: 2:2.1.2-2 Distribution: experimental Urgency: medium Maintainer: Debian

Accepted rdp-classifier 2.10.2-3 (source) into unstable

2018-10-04 Thread Andreas Tille
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 11:23:04 +0200 Source: rdp-classifier Binary: rdp-classifier rdp-classifier-doc Architecture: source Version: 2.10.2-3 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team Changed-By:

Accepted rust-vcpkg 0.2.6-1 (source) into unstable

2018-10-04 Thread Wolfgang Silbermayr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 11:47:23 +0200 Source: rust-vcpkg Binary: librust-vcpkg-dev Architecture: source Version: 0.2.6-1 Distribution: unstable Urgency: medium Maintainer: Debian Rust Maintainers Changed-By: Wolfgang Silbermayr

Accepted python-django 1:1.11.16-3 (source all) into unstable

2018-10-04 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 10:38:34 +0100 Source: python-django Binary: python-django python-django-common python-django-doc python3-django Built-For-Profiles: nocheck Architecture: source all Version: 1:1.11.16-3 Distribution: unstable

Accepted libinput 1.12.1-1 (source) into unstable

2018-10-04 Thread Timo Aaltonen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 12:47:10 +0300 Source: libinput Binary: libinput10 libinput-bin libinput10-udeb libinput-dev libinput-tools Architecture: source Version: 1.12.1-1 Distribution: unstable Urgency: medium Maintainer: Debian X Strike

Accepted debian-edu-config 2.10.39 (source) into unstable

2018-10-04 Thread Holger Levsen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 10:51:01 +0100 Source: debian-edu-config Binary: debian-edu-config Architecture: source Version: 2.10.39 Distribution: unstable Urgency: medium Maintainer: Debian Edu Developers Changed-By: Holger Levsen

Accepted strip-nondeterminism 0.043-1 (source all) into unstable

2018-10-04 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 10:32:11 +0100 Source: strip-nondeterminism Binary: libfile-stripnondeterminism-perl strip-nondeterminism dh-strip-nondeterminism Architecture: source all Version: 0.043-1 Distribution: unstable Urgency: medium

Re: Limiting the power of packages

2018-10-04 Thread Thomas Goirand
On 10/4/18 1:19 AM, Carl-Valentin Schmitt wrote: > It would be a possibility, for safety to create a new directory only for > brandy 3rd-party-software like skype, Google Chrome, Swift, and else > Software where huge companies are Sponsors. >   > This would then mean, to create a second sources

Accepted qtwayland-opensource-src 5.11.2-1 (source) into experimental

2018-10-04 Thread Dmitry Shachnev
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 11:58:56 +0300 Source: qtwayland-opensource-src Binary: qtwayland5-examples libqt5waylandclient5 libqt5waylandcompositor5 qml-module-qtwayland-compositor libqt5waylandcompositor5-dev libqt5waylandclient5-dev

Accepted python-botocore 1.12.16+repack-1 (source all) into unstable

2018-10-04 Thread TANIGUCHI Takaki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 17:45:35 +0900 Source: python-botocore Binary: python-botocore python3-botocore Architecture: source all Version: 1.12.16+repack-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Modules Team

Accepted awscli 1.16.26-1 (source all) into unstable

2018-10-04 Thread TANIGUCHI Takaki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 18:10:30 +0900 Source: awscli Binary: awscli Architecture: source all Version: 1.16.26-1 Distribution: unstable Urgency: medium Maintainer: Debian Python Modules Team Changed-By: TANIGUCHI Takaki Description:

Re: Limiting the power of packages

2018-10-04 Thread W. Martin Borgert
On 2018-10-03 23:30, Antoine Beaupré wrote: > There > are somewhat low-hanging fruits in there like declarative maintainer > scripts. I am very much in favour of declarative maintainer scripts! AFAIK, Niels Thykier has done a lot of work there, while Ralf Treinen and colleagues are analysing

Accepted lombok 1.16.22-3 (source) into unstable

2018-10-04 Thread Markus Koschany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 10:39:22 +0200 Source: lombok Binary: liblombok-java Architecture: source Version: 1.16.22-3 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers Changed-By: Markus Koschany Description:

Accepted lombok-patcher 0.28-1 (source) into unstable

2018-10-04 Thread Markus Koschany
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 10:44:29 +0200 Source: lombok-patcher Binary: liblombok-patcher-java Architecture: source Version: 0.28-1 Distribution: unstable Urgency: medium Maintainer: Debian Java Maintainers Changed-By: Markus Koschany

Re: Limiting the power of packages

2018-10-04 Thread W. Martin Borgert
On 2018-10-04 09:06, Jonathan Dowland wrote: > What about running Chromium as root? Certainly not recommended, but what > are the user's expectations if they try it anyway? With nowadays web, I would disallow this by default. If root types their sentence ("Yes, I know..."), they can shoot

Accepted python-django 1:1.11.16-2 (source all) into unstable

2018-10-04 Thread Chris Lamb
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 09:31:33 +0100 Source: python-django Binary: python-django python-django-common python-django-doc python3-django Built-For-Profiles: nocheck Architecture: source all Version: 1:1.11.16-2 Distribution: unstable

Accepted gauche 0.9.6-3 (source) into unstable

2018-10-04 Thread NIIBE Yutaka
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 14:19:37 +0900 Source: gauche Binary: gauche libgauche-0.9-0 gauche-gdbm gauche-zlib gauche-dev gauche-doc Architecture: source Version: 0.9.6-3 Distribution: unstable Urgency: medium Maintainer: NIIBE Yutaka

Re: Limiting the power of packages

2018-10-04 Thread Florian Weimer
* Simon McVittie: > On Thu, 04 Oct 2018 at 08:34:15 +0200, Florian Weimer wrote: >> * Paul Wise: >> > To fully solve the problem you need a whitelist based approach that >> > ends up something completely different like Flatpak. >> >> Flatpaks don't work this way. Try installing gedit and open a

Re: Limiting the power of packages

2018-10-04 Thread Jonathan Dowland
On Wed, Oct 03, 2018 at 11:30:40PM -0400, Antoine Beaupré wrote: Yet I still think we should start fixing those problems. +1 Yes, there are a billion things that could go wrong in the current approach, but if we had *some* safety net, controlled in the sources.list file, we could at least

Bug#910265: ITP: python-yaswfp -- Python SWF parser

2018-10-04 Thread Sophie Brun
Package: wnpp Severity: wishlist Owner: Sophie Brun * Package name: python-yaswfp Version : 0.9.3 Upstream Author : Facundo Batista * URL : http://github.com/facundobatista/yaswfp * License : GPL-3 Programming Lang: Python Description : Python SWF

Accepted gumbo-parser 0.10.1+dfsg-2.3 (source amd64 all) into unstable

2018-10-04 Thread Sergei Golovan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 02 Oct 2018 07:50:58 +0300 Source: gumbo-parser Binary: libgumbo-dev libgumbo1 python-gumbo python3-gumbo Architecture: source amd64 all Version: 0.10.1+dfsg-2.3 Distribution: unstable Urgency: medium Maintainer: Onur Aslan

Re: Limiting the power of packages

2018-10-04 Thread Simon McVittie
On Thu, 04 Oct 2018 at 08:34:15 +0200, Florian Weimer wrote: > * Paul Wise: > > To fully solve the problem you need a whitelist based approach that > > ends up something completely different like Flatpak. > > Flatpaks don't work this way. Try installing gedit and open a file > like ~/.ssh/id_rsa

Re: Limiting the power of packages

2018-10-04 Thread Paul Wise
On Thu, Oct 4, 2018 at 3:24 PM Florian Weimer wrote: > Flatpaks don't work this way. Try installing gedit and open a file > like ~/.ssh/id_rsa with it. There are no security prompts whatsoever, > yet the software in a flatpak can read your SSH private key. AFAIK, the only way a Flatpak can

Re: News from devscripts

2018-10-04 Thread Cyr Bol
>- a "searchmode=plain" line option can be used to parse the full > content of a web page instead of searching only tags > (#897382), useful for JSON contents. Example: Cool, I just wrote a hack for such a functionality in one of my project :-) Cyr On Wed, Oct 3, 2018 at 5:42 PM Xavier

Re: Re-evaluating architecture inclusion in unstable/experimental

2018-10-04 Thread Philipp Kern
On 03.10.2018 18:01, John Paul Adrian Glaubitz wrote: >> For s390x I can say that the port was driven without any commercial >> interest on both Aurelien's and my side > The question is though: Is there quantifiable amount of users that is > running Debian on such big iron instead of one of the

Re: Limiting the power of packages

2018-10-04 Thread Florian Weimer
* Paul Wise: > To fully solve the problem you need a whitelist based approach that > ends up something completely different like Flatpak. Flatpaks don't work this way. Try installing gedit and open a file like ~/.ssh/id_rsa with it. There are no security prompts whatsoever, yet the software in

Accepted gcc-snapshot 1:20181004-1 (source) into unstable

2018-10-04 Thread Matthias Klose
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 08:48:26 +0200 Source: gcc-snapshot Binary: gcc-snapshot Architecture: source Version: 1:20181004-1 Distribution: unstable Urgency: medium Maintainer: Debian GCC Maintainers Changed-By: Matthias Klose Description

Accepted eztrace 1.1-8-2 (source) into unstable

2018-10-04 Thread Samuel Thibault
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Fri, 28 Sep 2018 11:08:02 +0200 Source: eztrace Binary: eztrace libeztrace-dev libeztrace0 Architecture: source Version: 1.1-8-2 Distribution: unstable Urgency: medium Maintainer: Samuel Thibault Changed-By: Samuel Thibault

Re: Limiting the power of packages

2018-10-04 Thread Paul Wise
On Thu, Oct 4, 2018 at 11:31 AM Antoine Beaupré wrote: > Yes well, we *could* consider rewriting Debian to be based on > appimage/flatpak/snappy, but that would be a rather controversial > change. I think there are smaller, incremental steps we can take before > that to improve the situation

Accepted tdiary-contrib 5.0.10-1 (source all) into unstable

2018-10-04 Thread Youhei SASAKI
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 15:17:24 +0900 Source: tdiary-contrib Binary: tdiary-contrib tdiary-mode Architecture: source all Version: 5.0.10-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers Changed-By:

Accepted tdiary-theme 5.0.10-1 (source all) into unstable

2018-10-04 Thread Youhei SASAKI
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 15:01:06 +0900 Source: tdiary-theme Binary: tdiary-theme Architecture: source all Version: 5.0.10-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers Changed-By: Youhei SASAKI

Accepted r-cran-data.table 1.11.8+dfsg-1 (source) into unstable

2018-10-04 Thread Dylan Aïssi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 07:44:06 +0200 Source: r-cran-data.table Binary: r-cran-data.table Architecture: source Version: 1.11.8+dfsg-1 Distribution: unstable Urgency: medium Maintainer: Debian R Packages Maintainers Changed-By: Dylan

Accepted r-cran-commonmark 1.6-1 (source) into unstable

2018-10-04 Thread Dylan Aïssi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 07:30:57 +0200 Source: r-cran-commonmark Binary: r-cran-commonmark Architecture: source Version: 1.6-1 Distribution: unstable Urgency: medium Maintainer: Debian R Packages Maintainers Changed-By: Dylan Aïssi

Accepted tdiary 5.0.10-1 (source all) into unstable

2018-10-04 Thread Youhei SASAKI
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Format: 1.8 Date: Thu, 04 Oct 2018 14:45:12 +0900 Source: tdiary Binary: tdiary-core tdiary Architecture: source all Version: 5.0.10-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers Changed-By: Youhei SASAKI

Accepted ruby-gir-ffi 0.14.1-1 (source all) into unstable

2018-10-04 Thread TANIGUCHI Takaki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Thu, 04 Oct 2018 14:49:49 +0900 Source: ruby-gir-ffi Binary: ruby-gir-ffi Architecture: source all Version: 0.14.1-1 Distribution: unstable Urgency: medium Maintainer: Debian Ruby Extras Maintainers Changed-By: TANIGUCHI Takaki

<    1   2