Re: default init on non-Linux platforms

2014-02-21 Thread Simon McVittie
On 20/02/14 19:37, Ondřej Surý wrote: > I have split openrc into openrc and openrc-sysv moving the conflicting > parts to openrc-sysv on my system, and it install just fine If sysv-rc's invoke-rc.d and update-rc.d should be treated as generic glue shared by multiple inits (which they probably shou

Re: default init on non-Linux platforms

2014-02-19 Thread Simon McVittie
On 19/02/14 15:09, Thomas Goirand wrote: > First, yes, OpenRC uses /etc/runlevel, with the folders below that being > the *names* of the runlevel (which IMO is a way more user friendly than > just numbers). FYI, we have: shutdown=0, recovery=1, reboot=6, and > everything-else=default. So we do have

Re: default init on non-Linux platforms

2014-02-18 Thread Simon McVittie
On 18/02/14 14:15, Ondřej Surý wrote: > If we have working OpenRC on kFreeBSD and GNU Hurd, can I do: > > Depends: systemd | openrc > > if I want to get rid of non-declarative init scripts in my daemon > packages? I don't think that's going to be a good migration path from wheezy to jessie. For

Re: OpenRC

2014-02-11 Thread Simon McVittie
On 11/02/14 15:19, Thomas Goirand wrote: > Yes, that's my proposal, and as well deprecate sysv-rc in the favor of > OpenRC, and allow OpenRC runscript files *only* if there's support for > the default init system (because this way the default init system will > not use them, so the runscript format

Re: init.d script not using !/bin/sh

2014-02-10 Thread Simon McVittie
On 10/02/14 14:55, Jonathan Dowland wrote: > On 09/02/2014 13:14, Thomas Goirand wrote: >> Is it too late to fix this as a release goal, so that we get every >> init script to use /bin/sh? > > Whether this is worth the effort or not (and not just *your* effort, the > effort of maintainers of packag

Re: conflict between system user and normal user

2014-02-10 Thread Simon McVittie
On 10/02/14 13:46, Kevin Chadwick wrote: > So I'd agree with the underscore but see the not allowing the local > sysadmin to create accounts easily with it as a bad thing as they could > perfectly well want to avoid collisions with packages as much as a > debian dev. A concrete example, please? If

Re: Two line init.d scripts? Sure, that will work!

2014-02-06 Thread Simon McVittie
On 06/02/14 12:07, Helmut Grohne wrote: > This functionality is entirely orthogonal to the one I was proposing. > You are talking about redirecting the init script invocation to a > running systemd instance. I am talking about sysvinit (as pid 1) to > execute systemd .service descriptions. I'm sur

Re: Bug#736416: ITP: debci -- continuous integration system for Debian

2014-01-23 Thread Simon McVittie
On 23/01/14 16:12, Antonio Terceiro wrote: > On Thu, Jan 23, 2014 at 03:17:46PM +0100, Michael Prokop wrote: >> I'm a bit unhappy about the naming though, because currently >> it's running DEP-8 tests only and "continuous integration system >> for Debian" and its project name "debci" are a bit miss

Re: xpdf removed from testing?

2014-01-16 Thread Simon McVittie
On 15/01/14 21:09, Svante Signell wrote: > I cleaned out the duplicated code between xpdf and poppler (which is a > continuation of xpdf becoming a PDF rendering library). Some more > cleaning is still needed, to actually remove all irrelevant code (and > update relevant code). Is it possible to cr

Re: GnuTLS in Debian

2014-01-12 Thread Simon McVittie
On 11/01/14 17:37, Игорь Пашев wrote: > Do I understand correctly the following: > > Application M under the MIT license linked to LGPL3 library L - ok > Application C under the CDDL license linked to LGPL3 library L - ok > Application G under the GPL3 license linked to LGPL3 library L - ok, > all

Re: translations.launchpad.net: how to get PO for updating Debian packages?

2014-01-09 Thread Simon McVittie
On 09/01/14 13:48, Osamu Aoki wrote: > PS: I also wonder if there is some generic script to update *.desktop > files using PO files. GNOME uses intltool for this. Look at how gnome-terminal generates its .desktop file, for instance: gnome-terminal.desktop.in.in (the actual source) does not contain

Re: Bug#274229: System accounts with valid shells

2014-01-09 Thread Simon McVittie
On 09/01/14 11:23, Colin Watson wrote: > In short, if you're using "su " for any of the affected users > (daemon bin sys games man lp mail news uucp proxy www-data backup list > irc gnats nobody), and you weren't already passing an -s option, you > must add "-s /bin/sh". I wonder whether nonintera

Re: GPLv2-only considered harmful [was Re: GnuTLS in Debian]

2013-12-28 Thread Simon McVittie
On 28/12/13 22:59, Stephen M. Webb wrote: > On 12/28/2013 04:15 PM, Kurt Roeckx wrote: >> On Sat, Dec 28, 2013 at 04:11:18PM -0500, Stephen M. Webb wrote: >>> There are organization who will allow v2 but not v3 because of the >>> tivoizaton and patent clauses. A developer may want >>> his work to

Re: Bug#601455: marked as done (can't stop daemon using /etc/init.d/foo stop when disabled via /etc/default/foo)

2013-12-09 Thread Simon McVittie
On 09/12/13 15:24, Bas Wijnen wrote: >> From: Holger Levsen I've decided to close >> this bug, as this "mis-feature" / bug is actually a main >> characteristic of system V init scripts: they can be+do anything, >> including showing the behaviour which led to this bug report. > > That doesn't mak

Re: virtual/alternative B-D (was Re: libtiff5 transition)

2013-12-07 Thread Simon McVittie
On 06/12/13 20:48, Philipp Kern wrote: > So if you version your -dev package, do not install into an unversioned > place like libtiff5-dev does. :) It seems to me that the good options are: * one unversioned -dev package, on the default gcc include path and/or relying on pkg-config to get the a

Re: virtual/alternative B-D (was Re: libtiff5 transition)

2013-12-06 Thread Simon McVittie
On 06/12/13 10:56, Colin Watson wrote: > On Fri, Dec 06, 2013 at 10:19:14AM +0100, Thorsten Glaser wrote: >> On Thu, 5 Dec 2013, Jay Berkenbilt wrote: >>> * If your package build-depends on libtiff5-dev, you don't HAVE to do >>>anything, but you may be helping yourself in the future if you cha

Re: Release sprint results - team changes, auto-rm and arch status

2013-11-29 Thread Simon McVittie
On 29/11/13 16:36, Ian Jackson wrote: > It seems likely to me that that bug is, at root, a race of some kind. > And it just so happens that the race is lost on kFreeBSD - sometimes. > > Detecting such a race is valuable to the project; it's certainly not a > disbenefit. After all, a race that hap

automatically cross-grading lib32nss-mdns to libnss-mdns:i386?

2013-11-01 Thread Simon McVittie
nss-mdns/unstable is currently available in these flavours: libnss-mdns:any (contains a native binary) lib32nss-mdns:amd64 (contains an i386 binary) My goal is that when amd64 users with both packages do a dist-upgrade to jessie, if they have the i386 foreign architecture, they rece

Re: Bug#727708: tech-ctte: Decide which init system to default to in Debian.

2013-10-31 Thread Simon McVittie
On 31/10/13 13:06, Thorsten Glaser wrote: >> My understanding is that something like `update-rc.d $service disable` > > … isn’t that overwritten by the update-rc.d commands in the > maintainer scripts (postinst) when the package is upgraded? Not in the sysv-rc implementation, at least. `update-rc

Re: Bug#727708: tech-ctte: Decide which init system to default to in Debian.

2013-10-31 Thread Simon McVittie
On 31/10/13 12:27, Thorsten Glaser wrote: > On Thu, 31 Oct 2013, Florian Weimer wrote: > >> Curiously, a lot of system administrators do not do this correctly >> using sysvinit, causing system daemons to start unexpectedly after >> installing package updates. > > What *is* the correct way, anyway

Re: let's split the systemd binary package

2013-10-26 Thread Simon McVittie
On 26/10/13 21:23, Florian Weimer wrote: >> "Session tracking" includes suspending/hibernating, because logind has >> a mechanism to let apps delay suspend, which is necessary for things >> like closing the inherent race condition in "lock the screensaver when >> we suspend... oh, oops, it didn't g

Re: Proposal: let’s have a GR about the init system

2013-10-26 Thread Simon McVittie
On 25/10/13 16:28, Russ Allbery wrote: > Fully supporting an init system means, among other things, writing or > generating native configuration files for that init system so that we can > take full (or at least fuller) advantage of its capabilities. We're > currently not doing that for anything o

Re: let's split the systemd binary package

2013-10-25 Thread Simon McVittie
On 25/10/13 14:39, Paul Tagliamonte wrote: > On Fri, Oct 25, 2013 at 01:40:55PM +0200, Olav Vitters wrote: >> ... a choice between something greatly supported (logind) vs >> something abandoned (ConsoleKit). ... > Since the project (on the whole) is fairly divided, I don't think > we should trivial

Re: let's split the systemd binary package

2013-10-25 Thread Simon McVittie
On 25/10/13 13:57, Dmitrijs Ledkovs wrote: > No, I mean: > > XDG_VTNR=7 > XDG_SESSION_ID=c1 > XDG_SESSION_PATH=/org/freedesktop/DisplayManager/Session0 > XDG_SEAT_PATH=/org/freedesktop/DisplayManager/Seat0 > XDG_SEAT=seat0 Oh, I wasn't aware of those... yes, using that namespace without a XDG spe

Re: let's split the systemd binary package

2013-10-25 Thread Simon McVittie
On 25/10/13 11:52, Dmitrijs Ledkovs wrote: > - using XDG_* environment variables, instead of LOGIND_* or SYSTEMD_* > variables I assume you mainly mean XDG_RUNTIME_DIR here, since the rest are basically user-level rather than system-level. The point of the XDG_* family of variables is that they'

Re: away_0.9.5+ds-0+nmu2_multi.changes ACCEPTED into unstable

2013-10-25 Thread Simon McVittie
On 25/10/13 10:09, Dmitrijs Ledkovs wrote: >>> Changed-By: Andreas Moog I sponsored Andreas' patch as NMU, on my own initiative. I don't think it's appropriate to consider a patch in the BTS to be a request for sponsorship. In future please take responsibility for the decision to upload in the ch

Re: systemd effectively mandatory now due to GNOME

2013-10-24 Thread Simon McVittie
On 24/10/13 16:29, John Paul Adrian Glaubitz wrote: > I haven't tested GNOME on kfreebsd-* for a long time now, but I > assume that the package works if it has been successfully built, > doesn't it? I believe the effect of not having systemd-logind is that the features for which GNOME uses systemd

Re: Proposal: switch default desktop to xfce

2013-10-24 Thread Simon McVittie
On 24/10/13 17:31, Lucas Nussbaum wrote: > What's the the status of XFCE regarding accessibility? > > That was a big strengh of GNOME for a long time, though I've heard > rumors (sorry not to be more specific) that gnome-shell has some > unsolved issues in that regard, which is a problem since GNO

Re: Two new DNS virtual packages (authoritative-name-server & recursive-name-server)

2013-10-22 Thread Simon McVittie
On 22/10/13 14:43, Ondřej Surý wrote: > The proposed names are: > > authoritative-name-server - authoritative domain name server > recursive-name-server - recursive domain name server > > Any objections? If you depend on one of these, what functionality can you rely on having "out of the box"? W

Re: Bits from the Release Team (Jessie freeze info)

2013-10-13 Thread Simon McVittie
On 13/10/13 19:47, Niels Thykier wrote: > We picked the 5th over another date in November because it was believed > the 5th would be easier to remember[1]. ... > (Not sure of the origins of the rime; I remember it being used in "V > from Vendetta" though.)

Re: [RFC] multiarch and virtual packages

2013-10-03 Thread Simon McVittie
On 03/10/13 10:54, Vincent Danjean wrote: > The only "problem" is that it is not currently possible to install > an ICD Loader:i386 from one vendor and an ICD Loader:amd64 from another > vendor. Is there a valid reason to do that, other than "because I can"? If nobody would actually want to do t

Re: update-menus silently failing with Gnome?

2013-09-29 Thread Simon McVittie
On 29/09/13 21:01, Daniel Pocock wrote: > - Debian appears to have a perfectly good menu tool and it is not clear > why it has to be ditched. Upstreams often ship desktop files; menu files are Debian-specific; and if a GUI environment has Debian-specific infrastructure to display both, it will eit

Re: lintian: what means pkg-config-multi-arch-wrong-dir?

2013-09-29 Thread Simon McVittie
On 29/09/13 14:32, Bastien ROUCARIES wrote: > On Sun, Sep 29, 2013 at 2:20 PM, Olе Streicher >> Thank you very much. But why is it enabled even if I do not announce my >> package a being multiarch? (My reason to upgrade to compat level 9 was to >> get the hardening flags propagated). > > Ok, I hav

Re: Bug#709758: Replacing a binary package by another one(was: Communication issue?)

2013-09-06 Thread Simon McVittie
On 06/09/13 10:17, David Kalnischkies wrote: > For example, you made mplayer2 now an upgrade for mplayer. > I am not sure that is what their maintainers/upstreams intend. > (maybe it is, but I am not keen on letting foo2/foo-ng maintainer > decide what is a good upgrade path for foo – that should

Re: Longer maintainance for (former) stable releases of Debian (Re: Dreamhost dumps Debian)

2013-08-27 Thread Simon McVittie
On 27/08/13 14:32, Pau Garcia i Quiles wrote: > What do you do with the 1 year of support Debian currently gives to > oldstable? It's also 1 year you stopped using that version, so no > technical challenge either. There does need to be some amount of overlap, because people can't necessarily upgra

Re: /etc/hosts and resolving of the local host/domainname - 127.0.0.1 vs. 127.0.1.1

2013-07-30 Thread Simon McVittie
On 30/07/13 22:54, Christoph Anton Mitterer wrote: > Consider an application which only accept packets originating from > as a security measure.. If you only want to accept packets from yourself, use 127.0.0.1 (or ::1, or a Unix socket). Anything else has more possible failure modes. S --

Re: /etc/hosts and resolving of the local host/domainname - 127.0.0.1 vs. 127.0.1.1

2013-07-30 Thread Simon McVittie
On 30/07/13 21:43, Christoph Anton Mitterer wrote: > - Back then, Thomas pointed out several ides on who the resolution could > be done (e.g. with a small nsswitch module) libnss-myhostname is basically this, and is packaged. It tries to return a public address if possible, only falling back to 12

Re: Survey answers part 3: systemd is not portable and what this means for our ports

2013-07-18 Thread Simon McVittie
On 18/07/13 12:12, John Paul Adrian Glaubitz wrote: > And systemd has a graphical user interface? Yes, systemadm(1) in systemd-ui. It was recently split into a separate (upstream and Debian source) package. It's hardly comprehensive, but it exists. S -- To UNSUBSCRIBE, email to debian-dev

Re: Systemd support in Debian packages: how to help

2013-07-16 Thread Simon McVittie
On 16/07/13 13:50, Lucas Nussbaum wrote: > Is there a way to list services installed on my system that are managed > via service files, vs those that are managed using legacy init scripts? If your pid 1 is systemd, "systemctl list-units | grep LSB:" should be either the correct list or pretty clos

Re: Survey answers part 3: systemd is not portable and what this means for our ports

2013-07-15 Thread Simon McVittie
On 15/07/13 14:38, Helmut Grohne wrote: > Indeed we are out of luck with Type=forking. In the presence of a decent > init system daemonizing is the job of the init system. It is uselessly > duplicated code. Let's rip that code out of daemons and turn them into > "simple" ones. It does matter where

Re: 7.0-> 7.1: any reasons for switching from {4,5,6}.0.x scheme?

2013-06-17 Thread Simon McVittie
On 17/06/13 17:33, Marc Haber wrote: > On Mon, 17 Jun 2013 12:14:57 +0100, Neil McGovern > wrote: >> Given that the middle '0' was redundant, and we now do X.0 for all >> major releases, it was simply removed. > > So sarge was a point release of woody? Neil did say "now". sarge was 8 years ago.

Re: security policy / root passwords

2013-06-10 Thread Simon McVittie
On 10/06/13 15:36, Timo Juhani Lindfors wrote: > Simon McVittie writes: >> * ability to use system-modal prompting or a secure input path >> (partially done by PK under GNOME Shell, likely to get better >> under Wayland, not supported by sudo or su) >

Re: security policy / root passwords

2013-06-10 Thread Simon McVittie
On 10/06/13 13:54, Daniel Pocock wrote: > That screenshot appears to be Gnome 3. I log in with Gnome Classic so > maybe I'm experiencing something different. I did say "GNOME Shell". The "fallback" GNOME 3.4 session (which might well be called "Classic" in the UI in wheezy) doesn't use Shell, so

Re: security policy / root passwords

2013-06-10 Thread Simon McVittie
On 10/06/13 12:34, Daniel Pocock wrote: > a) a web site displaying a "PolicyKit" popup that resembles the wording > of the Debian popup GNOME Shell does mitigate this by using a distinctive UI for "system-modal dialogs", which makes use of the fact that the Shell is the window compositor in order

Re: Debian systemd survey

2013-06-02 Thread Simon McVittie
On 02/06/13 13:15, Vincent Lefevre wrote: > Most config files are not really user-editable under Debian. ... > So, splitting config files is a > way to avoid that, not in all cases but in most cases (this is not > specific to sysvinit, apparently just a consequence of the old > wishlist bug 32877,

Re: Multi-Arch for plugin packages

2013-05-30 Thread Simon McVittie
On 30/05/13 16:02, John Paul Adrian Glaubitz wrote: > I am maintaining one of the gkrellm2 plugin packages, namely > gkrellm2-cpufreq. All of these gkrellm2 plugin packages install their > plugins into /usr/lib/gkrellm2/plugins, including mine. This seems appropriate. > However, I was wondering w

Re: Debian systemd survey

2013-05-30 Thread Simon McVittie
On 30/05/13 11:19, Marc Haber wrote: > On Wed, 29 May 2013 13:10:57 -0700, Russ Allbery > wrote: >> Using an imperative language for a descriptive purpose is a bad mismatch >> of tools and has been ever since the practical effect of init scripts has >> become fairly standardized. > > Some init sc

Re: default MTA

2013-05-29 Thread Simon McVittie
On 28/05/13 16:42, Thomas Goirand wrote: > On 05/28/2013 08:05 PM, Simon McVittie wrote: >> I'm quite prepared to believe that *our* Unix systems - and in >> particular, servers and development machines - need an MTA, but my >> parents' laptops really shouldn'

Re: Switching to mozilla ESR in stable-security

2013-05-28 Thread Simon McVittie
On 29/05/13 00:17, John Paul Adrian Glaubitz wrote: > Also, if anyone of the GNOME package maintainers is reading this, > why does the gnome meta package depend on xul-ext-adblock-plus? "For feature parity with the previous meta-gnome3 web browser", it appears: meta-gnome3 (1:3.4+3) unstable; urg

Re: default MTA

2013-05-28 Thread Simon McVittie
On 28/05/13 12:25, Redalert Commander wrote: > 2013/5/28 Josselin Mouette : >> And on desktop systems, nobody reads local email. We might want to think >> of a better notification system, but email is definitely not fit for >> that anymore. > > I don't think that is true at all. Personally, I use

Re: using upstart in Debian [was, Re: Debian systemd survey]

2013-05-24 Thread Simon McVittie
On 24/05/13 11:29, Dmitrijs Ledkovs wrote: > As far as I understand (correct me if I am wrong), systemd instead of > counting/tracking forks uses cgroups to keep track of the started > processes. systemd uses cgroups to track "which processes are part of this service?", which means the services ma

Re: simplifying running piuparts

2013-05-21 Thread Simon McVittie
On 21/05/13 10:48, Andreas Beckmann wrote: > @all maintainers: How would you like to run piuparts s.t. it easily > integrates into your workflow and allows improving Debian's quality? Ideally, I would like a guide to setting up piuparts in a simple, recommended way, which doesn't assume I already

Re: WebID as passwordless authentication for debian web services

2013-05-17 Thread Simon McVittie
On 17/05/13 17:36, Olivier Berger wrote: >> The only way to prevent this attack in WebID that I see is to either do >> leap-of-faith permanent caching [...] or >> to secure the connection to my identity URI. > > I wonder how OpenID, for instance, is supposed to resist to such > attacks, in compari

Re: Do opaque struct changes break C library ABIs

2013-05-17 Thread Simon McVittie
On 17/05/13 10:43, Chow Loong Jin wrote: > On 17/05/2013 13:17, Guillem Jover wrote: >> I agree dlopen()ing shared libraries in general should not be >> supported (I'd even go further and say this should be outright >> banned, given the pain it causes, and optional library support >> should always

Re: Web ID as passwordless authentication for debian web services

2013-05-16 Thread Simon McVittie
On 16/05/13 16:42, Russ Allbery wrote: > In essence, [WebID] > moves the authentication problem from user authentication to > URI endpoint authentication, under the theory that we already know how to > validate URI endpoints and that such validation is an easier problem. ... or to look at it anoth

Re: jessie release goals

2013-05-13 Thread Simon McVittie
On 13/05/13 18:26, Stephen Kitt wrote: > Yes, but that's not the problem. Take the premise that the target > directory structure is as described above, so most library > development packages ship as many headers as possible in > /usr/include. For now we'll assume all mingw-w64-...-dev headers > are

Re: jessie release goals

2013-05-09 Thread Simon McVittie
On 06/05/13 13:49, Andreas Beckmann wrote: > now might be the right time to start a discussion about release goals > for jessie. Some random "make things less fragile" ideas, from the packages that FTBFS with the new GLib[1]: * Packages intended to reach stable not FTBFSing just because a funct

Re: DPA instead of PPA

2013-05-09 Thread Simon McVittie
On 09/05/13 07:38, Raphael Hertzog wrote: > bikeshed \o/ You probably meant this to be a comment on the discussion rather than a suggested name, but "until it gets uploaded to unstable, you can get GNOME 3.8 from the GNOME Team bikeshed" actually sounds like a reasonable sentence to write. :-) (O

Re: Merging / and /usr (was: jessie release goals)

2013-05-07 Thread Simon McVittie
On 07/05/13 17:17, Jonathan Dowland wrote: > On Tue, May 07, 2013 at 04:56:04PM +0100, Roger Leigh wrote: >> If we do this, I'd prefer to make /usr a symlink to / on new installs > > I've always thought that myself, but it seems most folks who are pro > merge tend to propose going the other way.

Re: Doubts about PPA in Debian

2013-05-07 Thread Simon McVittie
On 07/05/13 15:34, Paul Wise wrote: > On Tue, May 7, 2013 at 10:12 PM, Thomas Goirand wrote: >> Debian backports offers me *one* repository. I need 3 of them: >> - stable -1 (currently OpenStack Folsom) > > Ignore, is there any reason why an old version is interesting? Because Debian testing has

Re: Bug#602034: jpeg8 vs jpeg-turbo

2013-04-26 Thread Simon McVittie
On 25/04/13 20:39, Pau Garcia i Quiles wrote: > It boils down to "jpeg6-2 is the only important thing. Forget about > jpeg8 and jpeg9, which bring incompatible changes". There are other features in newer libjpeg that packages do need, even when not using exotic JPEG-like formats. For instance, ioq

Re: Question about proper archive area for packages that require big data for operation

2013-04-24 Thread Simon McVittie
On 23/04/13 10:48, Laszlo Kajan wrote: > free packages that depend on big (e.g. >400MB) free data outside 'main' This comes up in the Games Team, too. Here are some possibilities you might not have considered: * Package a small "demo" data-set (enough to test that the package is working correc

Re: Bug#706014: ITP: re-name -- mass rename tool using regular expression

2013-04-23 Thread Simon McVittie
On 23/04/13 15:27, Joao Eriberto Mota Filho wrote: > Re-name (regular expression (re)name) is a tool to rename files. It can > change, lowercase and uppercase a batch of files, or modify their ownership. Is this significantly better than the rename(1) (aka prename(1)) tool that's supplied with P

Re: Bug#705324: ITP: alacarte -- tile renderer for OpenStreetMap using Cairo and MapCSS

2013-04-15 Thread Simon McVittie
On 13/04/13 07:22, Cyril Brulebois wrote: >> * Package name: alacarte > > alacarte | 0.13.2-1 |stable | source, all ... which is the (unrelated) GNOME menu editor. Call this new thing alacarte-maps after its github username, perhaps? S -- To UNSUBSCRIBE, email to debian-deve

Re: alternative debian/rules

2013-04-05 Thread Simon McVittie
On 05/04/13 12:32, Игорь Пашев wrote: > I've just realized that debian/rules might not be a makefile, but can > be a script in any language. This is technically possible (dpkg allows it), but not acceptable for Debian packages (Debian Policy requires that debian/rules is an executable makefile).

Re: Bootstrapping: list of 81 self-cycles in Debian Sid

2013-03-05 Thread Simon McVittie
On 05/03/13 11:22, Johannes Schauer wrote: > Since self-cycles in Debian are often unintuitive, maintainers might be > unaware > that the source packages they maintain are actually forming a self cycle. This is useful information. Is there any way in which the maintainers of these packages can sa

Re: git dangerous operations on alioth

2013-02-28 Thread Simon McVittie
On 28/02/13 09:39, Daniel Pocock wrote: > Has anybody had experience controlling access to git repositories, for > example, to give users access but prevent some of the following > dangerous operations? Do you consider this to be a strong security measure against malicious changes, or a weak safet

Re: upstream advise page about circular dependencies (bootstrapping)

2013-02-13 Thread Simon McVittie
On 12/02/13 17:55, Wookey wrote: > There is a patch for the necessary Build-profile foo here: > > http://people.debian.org/~wookey/bootstrap/patches/ This is currently only suitable for Ubuntu, since it's based on their patched src:dbus. For Debian, I've pushed some changes to the 'experimental'

Re: upstream advise page about circular dependencies (bootstrapping)

2013-02-12 Thread Simon McVittie
On 12/02/13 12:40, Johannes Schauer wrote: > But besides those simple cycles there are other cycles of length 2 when > taking whole installation sets into account. For example src:pkg-config > indirectly build depends on pkg-config because src:pkg-config build > depends on libglib2.0-dev which depe

Re: socket-based activation has unmaintainable security?

2013-02-07 Thread Simon McVittie
On 07/02/13 09:39, Philipp Kern wrote: >> If you want to permit a daemon to bind to exactly one reserved >> port and no others then it seems that the options are systemd (if >> the daemon supports socket based activation) and SE Linux. > > (x)inetd, no? For completeness: the systemd socket-activa

Re: Backports upgrade policy (ButAutomaticUpdates:yes)

2013-01-24 Thread Simon McVittie
On 24/01/13 07:48, martin f krafft wrote: > also sprach Joerg Jaspert [2013.01.24.2017 > +1300]: >>> And say that a year later 2.3 comes out and it's the bee's >>> knees because it fully replaces 1.1 except that the >>> configuration cannot be automatically migrated, and all the >>> power users on

Re: Bootstrappable Debian - proposal of needed changes

2013-01-17 Thread Simon McVittie
On 17/01/13 01:35, Charles Plessy wrote: > for the packages I maintain, I am now replacing the regression tests that > were ran during the build process by autopkgtest test suites. ... > If this eventually becomes the norm, then we will not need "nocheck" build > option or profile anymore. Not nec

Re: Bootstrappable Debian - proposal of needed changes

2013-01-17 Thread Simon McVittie
On 17/01/13 03:18, Wookey wrote: > +++ Matthias Klose [2013-01-16 21:09 +0100]: >> Even if there are a few more, I like it better to make the profiles more >> granular, and then letting the people doing a bootstrap decide what to >> include >> in a stage1 or stage2 build. > > I can see some logic

Re: Bug#697433: Is the Package-List field necessary for uploads ?

2013-01-11 Thread Simon McVittie
On 11/01/13 12:05, Charles Plessy wrote: > + separated by spaces. Other space-separated values may be added. Who may add (define) them? I assume the intention here is that (using RFC 2119 language for clarity) readers of a .dsc MUST allow (and ignore) fifth and subsequent space-separat

Re: hardening for binaries/libraries packages

2013-01-10 Thread Simon McVittie
On 10/01/13 18:02, Nick Andrik wrote: > I'm trying to work with a source package that builds packages that > includes both binaries and dynamic libraries. > My question is on how to enable hardening in both of them, but PIE > support only in the binary (since libraries use PIC anyway). Does your l

Re: [RFC] Go (golang) packaging

2013-01-01 Thread Simon McVittie
On 01/01/13 16:14, Michael Stapelberg wrote: > Hi Paul, >> Support dynamic linking? That would avoid the whole rebuild-the-world >> thing that statically-linked languages have. > Only when not using the “official” compiler (gc), e.g. gccgo has support > for dynamic linking. Where does gccgo look f

Re: Candidates for removal from testing (2012-11-30)

2012-12-03 Thread Simon McVittie
On 03/12/12 11:19, José Luis Segura Lucas wrote: > Are all the packages affected by this issue going to be removed > from testing? No, unless you prevent them from being fixed by making uploads that are not suitable for wheezy. (You quoted the full text of the email to which you replied, so presum

Re: Candidates for removal from testing (2012-11-30)

2012-11-30 Thread Simon McVittie
On 30/11/12 11:55, Niels Thykier wrote: > The packages have been selected based on the following criteria: * > The package had at least one RC bug without activity for the past > 14 days. ... > Debian GNOME Maintainers > gnome-dvb-daemon > (U) I have no particular interest in gnome-dvb-daemon, b

Re: the right bug severity in case of mbox formats

2012-11-28 Thread Simon McVittie
On 28/11/12 15:34, Darren Salt wrote: > Having just viewed the raw text of my message (as sent), there's one other > little wrinkle which I already knew but had failed to consider and which > makes testing of this useless: gpg handles any 'From ' lines itself in a > reversible manner, using '- ' as

Re: New virtual packages: lv2-plugin and lv2-host

2012-11-21 Thread Simon McVittie
On 21/11/12 17:27, Russ Allbery wrote: > Without that, it's questionable whether the > virtual package serves any purpose, and indeed you'll find that the CD > ripping packages in Debian don't reference mp3-encoder ... and perhaps more tellingly, only one package Provides it, and that package isn'

Re: Bug#693637: ITP: q3map2 -- a quake 3 map compiler

2012-11-19 Thread Simon McVittie
On 18/11/12 20:17, David Bate wrote: > * Package name: q3map2 > Version : xonotic-v0.6.0 > * URL : http://git.xonotic.org/?p=xonotic/netradiant.git Are there other projects that call themselves q3map2? Would netradiant-q3map2 be a better name? Is the source package going to

Re: Something like nocompress DEB_BUILD_OPTION

2012-11-09 Thread Simon McVittie
On 08/11/12 19:31, Dmitrijs Ledkovs wrote: > I would like to have a nocompress Debian build option that will skip > any compression/optimisation at build time. That seems like mixing two orthogonal things: an uncompressed or fastest-possible-compression .deb or source package, and speeding up comp

Re: Debian should move away from MD5 (and at best also from SHA1) (in secure APT and friends)

2012-10-12 Thread Simon McVittie
On 12/10/12 12:10, David Kalnischkies wrote: > I wonder if it is really a good idea to search for a security checksum > based on the metric that it can be quickly calculated … but off-topic. It depends what you're using it for: security is not magic pixie dust. A hashing algorithm that is faster a

Re: Hijacking^W^W^W^W^W^WSalvaging packages for fun and profit: A proposal

2012-10-01 Thread Simon McVittie
On 01/10/12 09:51, Thijs Kinkhorst wrote: > I've had an NMU in the past for a package when I had a little less time, > but the change was sound and correct. So I didn't bother to make an > (empty) MU just to acknowledge it - I think that should be OK and not > 'punished' by taking it as a sign of a

Re: rm -rf /usr/somedir in maintainer scripts?

2012-10-01 Thread Simon McVittie
On 01/10/12 07:51, Tollef Fog Heen wrote: > Now that we have well working bind mounts, we could actually deprecate > [sysadmins moving directories to a less full filesystem and leaving > symlinks behind] and just tell people to use bind mounts instead. At least > if our non-Linux ports has decent

Re: ${HOME} vs. g_get_home_dir ()

2012-09-28 Thread Simon McVittie
On 27/09/12 22:53, Josselin Mouette wrote: > Le jeudi 27 septembre 2012 à 14:39 -0700, Josh Triplett a écrit : >> "sudo foo" leaves $HOME set to the user's >> home directory rather than root > > This is a bug in sudo. There can be very dangerous things in $HOME It's configurable, because each of

Re: ${HOME} vs. g_get_home_dir ()

2012-09-26 Thread Simon McVittie
On 26/09/12 18:15, Ivan Shmakov wrote: >>>>>> Simon McVittie writes: > > Please research previous discussion to check that you're not missing > > arguments that have happened in the past, > > Any particular pointers? Following the git hist

Re: ${HOME} vs. g_get_home_dir ()

2012-09-26 Thread Simon McVittie
On 26/09/12 17:12, Ivan Shmakov wrote: > (Want to use the > all-defaults configuration for a program? Just start it like: > $ HOME="$(mktemp -dt -- foo.)" foo) Debian's GLib has been patched, and actually has this precedence: G_HOME > getpwent > HOME. This was originally inten

Re: Bug#687624: ITP: libdvdcss-pkg -- automated installer for libdvdcss

2012-09-14 Thread Simon McVittie
On 14/09/12 13:09, Thomas Koch wrote: > From my head I know these similar packages: flash-installer-nonfree, some > microsoft fonts downloader, java-package (for sun's java), ...? game-data-packager, although that one is a bit different: it supports a relatively large number of game-data packages

Bug#687258: ITP: mpdris2 -- media player interface (MPRIS2) bridge for MPD

2012-09-13 Thread Simon McVittie
Package: wnpp Severity: wishlist Owner: Simon McVittie * Package name: mpdris2 Version : 0.2+git2012.08.14 Upstream Author : Jean-Philippe Braun, Mantas Mikulėnas * URL : https://github.com/eonpatapon/mpDris2 * License : GPL-3+ Programming Lang: Python

Re: Bug#687001: ITP: optional-dev -- fake (empty) dev package

2012-09-08 Thread Simon McVittie
On 08/09/12 08:08, Dmitry Smirnov wrote: > Often some development libraries are not available on all architectures > in which case maintainer should know beforehand which architectures may > satisfy this dependency and maintain an up-to-date list of architectures > for such packages, like in the fo

Re: Stuff from /bin, /sbin, /lib depending on /usr/lib libraries

2012-08-31 Thread Simon McVittie
On 31/08/12 04:39, Serge wrote: > thus it reduces flexibility, breaking use cases, that were working before. Please name them. "The ability to mount my /usr requires user interaction via a UI in /usr" doesn't count, because it has never worked, and is logically impossible. > For example if filesy

Re: Proposal: Making Debian compiler agnostic

2012-08-29 Thread Simon McVittie
On 29/08/12 09:22, Sylvestre Ledru wrote: > Le 29/08/2012 10:00, Simon McVittie a écrit : >> Autoconf 2.69 in sid documents support for: >> [some languages] > > Great list. You constructed yourself or it is part of the autoconf > documentation ? Both. :-) It's

Re: uscan enhancement take 3: script hook

2012-08-29 Thread Simon McVittie
On 29/08/12 07:55, Andreas Tille wrote: > When trying to get rid of some get-orig-source > scripts I noticed that besided some file removals I need to execute > some extra code. This is basically fetching some extra files like > sources for documentation, uncompressed JS files etc from external >

Re: Proposal: Making Debian compiler agnostic

2012-08-29 Thread Simon McVittie
On 28/08/12 16:54, Mathieu Malaterre wrote: > On Tue, Aug 28, 2012 at 5:53 PM, Mathieu Malaterre wrote: >> At least from cmake point of view, a user need to provide an env var >> 'FC' for the fortran compiler and sets 'FLAGS'. > > Missing one 'F', it should read 'FFLAGS' Unfortunately, this isn'

Re: Depends: hicolor-icon-theme: shouldn't it be Recommends: instead?

2012-08-17 Thread Simon McVittie
On 17/08/12 10:07, Ivan Shmakov wrote: > Unsurprisingly, all of them were able to install and run, but > while openteacher is seemingly unaffected by the absence of the > data in question, the rest have had obvious issues: almost all > of the icons were absent, resulting in

Re: Multilicense `debian/copyright` file

2012-07-16 Thread Simon McVittie
On 14/07/12 07:25, Craig Small wrote: > Have a look at src/dataset/unsigned.Set.cc: > > [...] you can redistribute it and/or modify it under the terms of > the GNU Library General Public License [...] > > I have no idea why they have parts of the C library in the source code. The extra permissio

Re: Moving changelog and copyright files to control tarball, or merging control and data tarballs ?

2012-07-14 Thread Simon McVittie
On 14/07/12 01:48, Charles Plessy wrote: > This would not prevent dpkg to store the metadata somewhere else than > /var/lib/dpkg later, as it would be easy to intercept the files and treat them > appropriately, similar to what is being done with files in usr/share/doc with > multi-arch packages. /

Re: bits from the DPL: June 2012

2012-07-04 Thread Simon McVittie
On 04/07/12 16:17, Jakub Wilk wrote: > * Stefano Zacchiroli , 2012-07-03, 21:24: >> Since [OIN][19] was seeking comments on their [Linux System >> definition][12] [...] > Why do we care? What's the point of such definition? "Patents owned by Open Invention Network® are available royalty-free to an

Re: Bug#679853: general: Too much downtime during a big dist-upgrade - avoidable with snapshots

2012-07-02 Thread Simon McVittie
On 02/07/12 15:27, Alexander E. Patrakov wrote: > The quoted solution is easier and it > seems to work well enough. But for some reason, freedesktop folks > invented this for desktop systems: > http://fedoraproject.org/wiki/Features/OfflineSystemUpdates . I think you mean "Fedora folks". freedeskt

<    5   6   7   8   9   10   11   12   >