Re: securing/monitoring Debian devel environment

2010-12-22 Thread Timo Juhani Lindfors
Yaroslav Halchenko deb...@onerussian.com writes: script). The only way to completely prevent that would be to develop and build packages in a completely isolated (virtual machine) environment Interesting ideas but don't you also need to run the produced binaries in isolation? If we assume a

Re: Auditing systems for default homedir permissions and other potential security risks and also for overly long subjects and needlessly antagonistic mailing list discussion threads

2011-02-22 Thread Timo Juhani Lindfors
Lars Wirzenius l...@liw.fi writes: The auditor then looks for things in the system, and in home directories, which might be problems. For example, if it's meant to be a mail server with a lot of security, having telnetd installed and running would be a problem for it to flag. Likewise, it

Re: Wanted: maintainer for git's emacs support

2011-02-22 Thread Timo Juhani Lindfors
Rémi Vanicat vani...@debian.org writes: If there should be a change in maintenance of magit, I would be very interested because I'm one of the main upstream developer. Sorry for being quiet about this but see http://lists.debian.org/debian-devel/2010/10/msg00043.html Now that squeeze has

Re: enable/disable flags in /etc/default

2011-03-01 Thread Timo Juhani Lindfors
Tollef Fog Heen tfh...@err.no writes: The problem was at least until update-rc.d grew the «disable» argument that disabling a daemon using update-rc.d was quite hard. update-rc.d foo disable is indeed convenient. update-rc.d and policy-rc.d are currently two separate interfaces. If I want to

Re: enable/disable flags in /etc/default

2011-03-09 Thread Timo Juhani Lindfors
Serafeim Zanikolas s...@debian.org writes: sysv-rc-conf works for any symlink-based system. If you want to make sure that only carefully chosen services are ever running then you still need to maintain your own /usr/sbin/policy-rc.d and keep it in sync with sysv-rc-conf. -- To UNSUBSCRIBE,

Re: Setting file capabilites of files shipped in binary packages

2011-03-14 Thread Timo Juhani Lindfors
Sebastian Harl tok...@debian.org writes: Imho, setting the file capability is a nicer approach than setting the setuid bit. Do you know about any lurking bugs (in udev, dbus, etc?) that could allow one to escalate CAP_NET_RAW to full root privileges in regular squeeze installations? -- To

Re: enable/disable flags in /etc/default

2011-03-20 Thread Timo Juhani Lindfors
Serafeim Zanikolas s...@debian.org writes: On Thu, Mar 10, 2011 at 12:59:46AM +0200, Timo Juhani Lindfors wrote: If you want to make sure that only carefully chosen services are ever running then you still need to maintain your own /usr/sbin/policy-rc.d For symlink-based init systems

Re: enable/disable flags in /etc/default

2011-03-20 Thread Timo Juhani Lindfors
Michael Biebl bi...@debian.org writes: Not true. If a service has been disabled (by renaming S* to K*) invoke-rc.d honours that and does not start the service. Interesting. With $ echo /etc/rc*/*avahi-daemon /etc/rc0.d/K02avahi-daemon /etc/rc1.d/K02avahi-daemon /etc/rc2.d/K02avahi-daemon

Re: Back to technical discussion? Yes!

2011-04-04 Thread Timo Juhani Lindfors
Ben Armstrong sy...@sanctuary.nslug.ns.ca writes: once they manage to make it work, I've *still* seen cafe connections fail on my lovingly hand-crafted wpa_cli + wpa_supplicant setup that succeed when I reboot to a Squeeze GNOME live image with NM. I to this day have not been able to figure

Re: rock around hwclock.sh

2011-04-13 Thread Timo Juhani Lindfors
Andrew O. Shadoura bugzi...@tut.by writes: iii) Also, it would be good to hear opinions about negative consequences of saving the system time to the RTC on frequent basis. My openmoko does a suspend/resume cycle every 10 minutes. RTC time can only be set at one second granularity. If I write to

Re: network-manager as default? No!

2011-04-15 Thread Timo Juhani Lindfors
Bjørn Mork bj...@mork.no writes: So Network-Manager has finally gained basic features like the ability to set a lower than default MTU? How about bridging? VLANs? Unnumbered interfaces? DHCPv6-PD? Disabling IPv6 SLAAC on a specific interface? Multiple uplinks? Multiple routing tables?

Re: aircrack-ng missing!

2011-04-17 Thread Timo Juhani Lindfors
Hans-J. Ullrich hans.ullr...@loop.de writes: waht is the reason, that aircrack-ng is in lenny, but NOT in wheezy, but again in sid? http://release.debian.org/migration/testing.pl?package=aircrack-ng links to http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=588588 aircrack-ng:

Re: network-manager as default? No!

2011-04-17 Thread Timo Juhani Lindfors
Martin Wuertele m...@debian.org writes: iface ethX inet static address x.x.x.x netmask x.x.x.x gateway x.x.x.x up ip rule add downip rule del This means that I need to bring the interface down to change routing? Currently I have post-up

(Vcs-Upstream-)Git support for uscan?

2011-04-19 Thread Timo Juhani Lindfors
Evgeni Golov evg...@debian.org writes: We (lindi, liw and me) had just a short discussion in #-devel, that it would be nice to have some sort of Vcs-Upstream-* in debian/control How many packages are there that are not using a watch file because upstream does not provide usable tarballs (either

Re: bug reporting workflow is outdated

2011-05-23 Thread Timo Juhani Lindfors
sean finney sean...@seanius.net writes: HTTP would be able to provide a super-set of the features of SMTP submission, would not prevent SMTP submission from remaining as an option, and is more likely to work in diverse environments. HTTP could also provide faster feedback on syntax errors in

Re: bug reporting workflow is outdated

2011-05-23 Thread Timo Juhani Lindfors
Henrique de Moraes Holschuh h...@debian.org writes: guarantee a return path for further bug processing Bugzilla and trac do this by allowing the user to register an account and to keep the email address associated with that account up to date. If somebody reopens an archived bug that I've

Bug#628797: ITP: triplane -- a side-scrolling dogfighting game

2011-06-01 Thread Timo Juhani Lindfors
Package: wnpp Severity: wishlist Owner: Timo Juhani Lindfors timo.lindf...@iki.fi User: pkg-games-de...@lists.alioth.debian.org Usertags: wnpp * Package name: triplane Version : 1.0.4 Upstream Author : Dodekaedron Software Creations Oy * URL : http

proper edit-build-install-test cycle with v3 source packages?

2010-04-22 Thread Timo Juhani Lindfors
If I hit a bug in a v1 source package I often do apt-get source foo cd foo-* DEB_BUILD_OPTIONS=noopt debug nostrip dpkg-buildpackage -rfakeroot -us -uc sudo debi ../foo*.changes and then run the program inside M-x gdb RET of emacs. If I want to test a possible fix I then just use the same emacs

Re: proper edit-build-install-test cycle with v3 source packages?

2010-04-22 Thread Timo Juhani Lindfors
Niels Thykier ni...@thykier.net writes: Have you tried adding -b to dpkg-buildpackage as well? Thanks! This seems to work: $ dget http://people.debian.org/~hertzog/packages/debsrc3.0/sample7_1.0-1.dsc $ dpkg-source -x sample*.dsc $ cd sample7-1.0 $ touch -d 1970-01-01 upstream/README $

Re: proper edit-build-install-test cycle with v3 source packages?

2010-04-23 Thread Timo Juhani Lindfors
Raphael Hertzog hert...@debian.org writes: Timo, I'd be glad if you could check whether the attached patch fixes the issue for you. If yes, I'll commit it to dpkg. Doesn't seem to help: $ dget http://people.debian.org/~hertzog/packages/debsrc3.0/sample7_1.0-1.dsc $ dpkg-source -x sample*.dsc $

Re: chromium-browser from experimental has included h.264 by default?

2010-05-10 Thread Timo Juhani Lindfors
Giuseppe Iuculano giuse...@iuculano.it writes: If you can watch youtube html5 video, probably you have installaed libavcodec52, libavformat52 and libavutil50 from debian-multimedia[1] or other third repositories. Hmm? Mplayer in debian unstable plays youtube h.264 just fine. No non-free stuff

Re: UPG and the default umask

2010-05-17 Thread Timo Juhani Lindfors
Santiago Vila sanv...@unex.es writes: In either case, if we plan to set default umask in /etc/login.defs or /etc/login.defs is not read when I login to openssh server and it has UseLogin set to false. If I enable UseLogin then X11 forwarding stops working [1]. To me it seems that login.defs can

Re: UPG and the default umask

2010-05-17 Thread Timo Juhani Lindfors
Santiago Vila sanv...@unex.es writes: Ok, what about PAM? UsePAM no is the default in openssh. I do not know if this is just to reduce the attack surface. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: RFA: a lot of packages

2010-06-19 Thread Timo Juhani Lindfors
Ben Armstrong sy...@sanctuary.nslug.ns.ca writes: Although I cannot take on sole maintainership, I'm interested in the survival of the best VNC server and client in Debian. If a team can be put together, I would be happy to contribute in what small ways I can. I'm a daily user of

Re: Debug output etc, cluttering the terminal

2010-08-15 Thread Timo Juhani Lindfors
Wouter Verhelst wou...@debian.org writes: gets rather large), it generates huge .xsession-errors files that can cause problems for people with low quotas or for people who actually Indeed. I often find the SD card of my PDA (openmoko) filled with a useless .xsession-errors. -- To

Re: Bugs in Backported Packages

2010-09-07 Thread Timo Juhani Lindfors
Michael Gilbert michael.s.gilb...@gmail.com writes: Doing a quick look at the backports mailing list archive, there are less than 10 bugs reported per month on average. That is for hundreds of packages. Doing some fuzzy math, if you have a package that got backported, you may see an

Re: Marius Vollmer [magit] MIA?

2010-10-05 Thread Timo Juhani Lindfors
Miles Bader mi...@gnu.org writes: He's the maintainer of the magit package, which doesn't seem to have received any attention in a long time. Teemu Hukkanen and me are working on packaging a new upstream release. We sent a few patches upstream and upstream agreed to change the build system.

Re: distinguish between core and main?

2011-06-05 Thread Timo Juhani Lindfors
Hi, Philip Hands p...@hands.com writes: On Sun, 05 Jun 2011 08:29:03 +0200, Harald Dunkel ha...@afaics.de wrote: Your pipe-dream of an effortless, stable, and up to date system is just that -- pick any two. I personally prefer stable system with unstable chroot. This gives me best of both

Bug#629404: ITP: qi -- lightweight bootloader for OpenMoko Freerunner

2011-06-06 Thread Timo Juhani Lindfors
Package: wnpp Severity: wishlist Owner: Timo Juhani Lindfors timo.lindf...@iki.fi * Package name: qi Version : 20100107 Upstream Author : OpenMoko inc. * URL : http://wiki.openmoko.org/wiki/Qi * License : GPL-2 Programming Lang: C, assembler Description

Re: oshackers.org: visualizing the operating system developers

2011-06-15 Thread Timo Juhani Lindfors
Sakis Kasampalis f...@dtek.gr writes: You are more than welcomed to register and tell us what you think! Seems extremely slow to me. With iceweasel 3.5.16-5 on Wed Jun 15 20:07:32 UTC 2011 I only see Artic Ocean three times and rest of the map is completely gray. -- To UNSUBSCRIBE, email to

Bug#633652: X-windows programs don't work anymore for root

2011-07-12 Thread Timo Juhani Lindfors
jida...@jidanni.org writes: # emacs -Q g_dbus_connection_real_closed: Remote peer vanished with error: Underlying GIOStream returned 0 bytes on an async read (g-io-error-quark, 0). Exiting. # firefox **

Bug#633652: X-windows programs don't work anymore for root

2011-07-12 Thread Timo Juhani Lindfors
jida...@jidanni.org writes: Yes xclock works. Ok. You really need to describe what sort of setup you are using before it is possible to guess what could be wrong. Are you starting dbus session bus at all? -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of

Bug#633652: X-windows programs don't work anymore for root

2011-07-13 Thread Timo Juhani Lindfors
jida...@jidanni.org writes: |-2*[dbus-daemon] This is probably your dbus system bus. It's hard to say since pstree does not show what arguments were used. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: Removal of systemtap from testing

2011-07-30 Thread Timo Juhani Lindfors
Mehdi Dogguy me...@dogguy.org writes: Systemtap seems in pretty bad shape. Its removal from testing has been requested (See #635543) and will be effective by Saturday if still not fixed. It you still care about systemtap, please step up and offer your help to fix it. Thanks for the warning.

Re: Bug#636262: ITP: kbdd -- Per-window keyboard layout switching daemon for X

2011-08-01 Thread Timo Juhani Lindfors
Stanislav Maslovski stanislav.maslov...@gmail.com writes: Is kbdd mainly targeted for non-GNOME users? Yes. The target group of users of this software are those who are aware of xxkb and friends, but want a tool that also works with nonreparenting window managers. Ok. It might make sense to

Re: A few observations about systemd

2011-08-05 Thread Timo Juhani Lindfors
Lars Wirzenius l...@liw.fi writes: Anyone wanting a change to status quo (easy-but-secure) should probably make the tools to allow a sysadmin to switch to secure-but-easy easily. A patch to update-rc.d to allow overriding My policy asks me what to do with new services:

Bug#639137: general: Freezes when unmounting usb storages (pendrive, hd, etc)

2011-08-24 Thread Timo Juhani Lindfors
reassign 639137 linux-image-2.6.32-5-686 thanks Esteban Santini esant...@mdp.utn.edu.ar writes: The system freezes when unmounting any USB storage in Gnome. The system won't respond at all. No reaction to REISUB. Without further information this is going to be very difficult to fix. Can you

Re: Bug#639420: ITP: xpra -- tool to detach/reattach running X programs

2011-08-27 Thread Timo Juhani Lindfors
Cyril Brulebois k...@debian.org writes: What's the status compared to the original xpra? Last I checked it used to crash all the time, had issues with keymaps (even when both remote and local servers shared the same settings), and wasn't even remotely (no pun intended) usable. Keymaps have

Re: Bug#639420: ITP: xpra -- tool to detach/reattach running X programs

2011-08-27 Thread Timo Juhani Lindfors
Miguel Landaeta mig...@miguel.cc writes: You could check at http://vasks.debian.org/~nomadium-guest/debian/unstable/, should I ask Antoine (from upstream) to link to these packages or is it too early? The most annoying issue that I had to deal with was with keys getting stuck as Timo

Re: Format 3.0 (git)

2011-09-24 Thread Timo Juhani Lindfors
Bernhard R. Link brl...@debian.org writes: It has been better at that than rpm where you always look for another perl script in the net that is able to make a cpio out of that version of source rpm you run into, so you can actually look at what they do. I always just alien --to-tgz

Re: RFC: usb-modeswitch 1.2.0 release embedding jimtcl

2011-10-18 Thread Timo Juhani Lindfors
Didier Raboud o...@debian.org writes: Let's also note as context that the goal of this trick (AFAIUI) is to avoid having a tcl interpreter pulled up to first CDs; The modemmanager package that people typically use with USB 3G modems is already in CD#5. -- To UNSUBSCRIBE, email to

Re: RFC: usb-modeswitch 1.2.0 release embedding jimtcl

2011-10-18 Thread Timo Juhani Lindfors
Ian Jackson ijack...@chiark.greenend.org.uk writes: The modemmanager package that people typically use with USB 3G modems is already in CD#5. Isn't that already a problem ? It is, I just tried to illustrate how bad the situation currently is:

Re: udev: what does it used for in Debian?

2011-10-24 Thread Timo Juhani Lindfors
Ivan Shmakov i...@gray.siamics.net writes: And what the initramfs-tools package has to do with consistent devices' filenames? Initramfs runs udev. This allows you to use e.g. root=/dev/disk/by-id/ata-WDC_WD3200AAJS-65B4A0_WD-WMAT13954017-part1 instead of root=/dev/sda1 to

Re: /tmp as tmpfs and consequence for imaging software

2011-11-13 Thread Timo Juhani Lindfors
Lars Wirzenius l...@liw.fi writes: and b) all software must deal with out-of-disk-space errors in a sensible way (where the exact details may depend on the software). That does not seem to be so easy: http://www.gnu.org/ghm/2011/paris/slides/jim-meyering-goodbye-world.pdf -- To

Re: Increasing minimum 'i386' processor

2011-11-19 Thread Timo Juhani Lindfors
Ben Hutchings b...@decadent.org.uk writes: 5. AMD/NSC Geode GX1, Geode SC1100, Elan SC4xx and SC5xx Does this mean that AMD Geode LX as mentioned in http://pcengines.ch/alix.htm still works? damager:~$ cat /proc/cpuinfo processor : 0 vendor_id : AuthenticAMD cpu family : 5

Re: Increasing minimum 'i386' processor

2011-11-20 Thread Timo Juhani Lindfors
Kai Wasserbäch cu...@debian.org writes: installations with CPUs with an instruction set 586 are still in use? Does popcon collect such information? popcon does not but smolt does. Unfortunately smotl ITP is still stuck. Meanwhile you can look at the data it has collected from opensuse and

Re: from / to /usr/: a summary

2011-12-08 Thread Timo Juhani Lindfors
Wookey woo...@wookware.org writes: this is not waste time with an intramfs that will soon be superceded with a pivot-root. Not really related to the main issue but do note that pivot_root syscall has not been used for quite some time. run-init basically just uses unlink, mount, chroot and

Bug#651575: general: usb drive (automount) has wrong permissions, regular user cannot read/write to device/folder

2011-12-10 Thread Timo Juhani Lindfors
kenneth.h kenne...@airpost.net writes: It appears from web searching that this may have to do with udev rules. Usually, automounting allows user access but I am not able to read/write w/out having to manually changing permissions. 1) What are the permissions? 2) How are you automounting? The

Re: from / to /usr/: a summary

2012-01-01 Thread Timo Juhani Lindfors
Russell Coker russ...@coker.com.au writes: Do we have Debian running on phones with a configuration such that the root filesystem is small but /usr can be bigger? My openmoko has just $ df -h Filesystem Size Used Avail Use% Mounted on rootfs 3.8G 3.0G 626M 83% / tmpfs

Re: Enabling package installation for non-root users

2012-02-23 Thread Timo Juhani Lindfors
Josselin Mouette j...@debian.org writes: (We even have a patch to allow only a subset of packages but it is unfortunately a bit too hackish.) Would be really nice to have some standard sets available (think browser extensions, command-line tools that ship no services or suid binaries). I'd

Re: upstart: please update to latest upstream version

2012-02-23 Thread Timo Juhani Lindfors
Russell Coker russ...@coker.com.au writes: Is there any way of capturing the old text output from /dev/console at a later stage in the boot? I personally use http://iki.fi/lindi/git/vtgrab-initramfs.git/ which starts rvcd (remote virtual console daemon) in the beginning of initramfs and

Re: upstart: please update to latest upstream version

2012-02-24 Thread Timo Juhani Lindfors
Svante Signell svante.sign...@telia.com writes: policy? While at the time supporting non-linux systems (like kFreeBSD and Hurd, and others to come) I understood that Hurd does not use sysvinit either. Is that still the case? -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org

Re: upstart: please update to latest upstream version

2012-02-26 Thread Timo Juhani Lindfors
Josselin Mouette j...@debian.org writes: Or, as has been said countless times otherwise: kFreeBSD should not hinder the improvement of the Linux ports. I agree. I also vaguely recall that we this was the consensus that we reached at the kfreebsd BoF Debconf. -- To UNSUBSCRIBE, email to

Re: Enabling package installation for non-root users

2012-02-26 Thread Timo Juhani Lindfors
Sebastian Heinlein de...@glatzor.de writes: APTDAEMON::Restrict::Users { joe, jane; }; APTDAEMON::Restrict::Tags::Allow { interface::shell; }; APTDAEMON::Restrict::Tags::Deny { interface::daemon; }; Would this be of any help to you? Sounds like a great start. -- To UNSUBSCRIBE, email to

Re: A few questions from a new DD

2012-02-29 Thread Timo Juhani Lindfors
olivier sallou olivier.sal...@gmail.com writes: 1) How can I send email using my @debian.org as origin ? That depends on the software you use. In gnus I have (setq user-mail-address timo.lindf...@iki.fi) In evolution you'd select Edit-Preferences-Mail Accounts-New and just fill the Email

Re: Unofficial repositories on 'debian' domains

2012-03-05 Thread Timo Juhani Lindfors
Reinhard Tartler siret...@gmail.com writes: the libdvdread maintainer removed that really handy script. Not really related but it did have a security issue: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=554772 -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a

Re: On init in Debian

2012-03-17 Thread Timo Juhani Lindfors
Thomas Goirand z...@debian.org writes: taked with a friend working for redhat, and he told me how much he hates it. He told me that if *anything* goes wrong in the boot process, then basically, you're stuck, because the next thing will

Re: On init in Debian

2012-03-21 Thread Timo Juhani Lindfors
Svante Signell svante.sign...@telia.com writes: How on earth would anybody be able to make a decision if there are no comparisons between the alternatives available? I personally decided to install systemd to one of my machines to learn how it works. I'd recommend this to anyone in this thread

Re: On init in Debian

2012-03-23 Thread Timo Juhani Lindfors
Samuel Thibault sthiba...@debian.org writes: the particular script that poses problem. With a deamon like systemd, it's rather all-or-nothing. This gives me the impression that systemd would be a single monolithic binary but isn't vconsole-setup.c that you mention actually part of a small

devotee (debian vote engine): predictable RNG allows recovery of secret monikers

2012-04-24 Thread Timo Juhani Lindfors
Hello, I think I found a bug in devotee (debian vote engine) that breaks the secrecy elections. Devotee can be used in either public or secret mode. Leadership elections are done in the secret mode (constitution 5.2.5). In this mode devotee gives each voter V a secret moniker M and publishes

Re: devotee (debian vote engine): predictable RNG allows recovery of secret monikers

2012-04-24 Thread Timo Juhani Lindfors
Jakub Wilk jw...@debian.org writes: Note that 8 random alphanumeric characters can have at most ~47.6 bits of entropy. So just improving RNG wouldn't help here. True. We need to both fix the RNG and use a longer moniker. Also, I just noticed that rand() is also used to randomize the order of

Re: devotee (debian vote engine): predictable RNG allows recovery of secret monikers

2012-04-26 Thread Timo Juhani Lindfors
Timo Juhani Lindfors timo.lindf...@iki.fi writes: votes in the final tally. If I knew the hashes sufficiently many (maybe 20?) voters I probably could predict the initial state of the RNG and reverse this randomization step completely. It seems that if you know the md5 hashes of only four

Re: thttpd

2012-04-26 Thread Timo Juhani Lindfors
Oleg lego12...@yandex.ru writes: What email i can use to send patch for thttpd to? And is it normal that i cann't see thttpd package in wheezy? From http://packages.qa.debian.org/t/thttpd.html you can see that it has been removed: RoQA; orphaned, RC-buggy, dead upstream, plenty of

Re: devotee (debian vote engine): predictable RNG allows recovery of secret monikers

2012-04-26 Thread Timo Juhani Lindfors
Raphael Geissert geiss...@debian.org writes: print hmac_sha1_hex($v, $m); Yeah that sounds promising. Now we just need to fix the code that tries to randomize the order of entries in the tally. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe.

Re: Wheezy release: CDs are not big enough any more...

2012-05-12 Thread Timo Juhani Lindfors
Steve McIntyre st...@einval.com writes: At this point, I'm skeptical that either of the first two are going to work acceptably with Wheezy. If that's the case, then we should warn people that they will need to use at least one of: I agree. I tried installing debian gnome desktop from CD1

Re: Wheezy release: CDs are not big enough any more...

2012-05-15 Thread Timo Juhani Lindfors
Wookey woo...@wookware.org writes: And the USB-stick process is not as simple as it might be because you have to find the HD-media files and then _also_ find an iso image to put on. It's no wonder newbs are still downloading CD/DVD images. You also need to have root access to some machine to

Re: Wheezy release: CDs are not big enough any more...

2012-05-15 Thread Timo Juhani Lindfors
Ben Armstrong sy...@sanctuary.nslug.ns.ca writes: accomplish as the superuser.) What I wonder, though, is if it is universally true that ordinary users will always have write access to a USB key they've just inserted. Under what circumstances will they not? At least in default debian and

Re: Wheezy release: CDs are not big enough any more...

2012-05-16 Thread Timo Juhani Lindfors
Bjørn Mork bj...@mork.no writes: No, you don't. On a default Debian system you need to be a member of the floppy group. From /lib/udev/rules.d/91-permissions.rules : Yeah but you are not a member of that group by default surely? You mean that they allow you to burn a CD but not write to a

Re: Wheezy release: CDs are not big enough any more...

2012-05-16 Thread Timo Juhani Lindfors
Bjørn Mork bj...@mork.no writes: I fail to see how burning to a local user's CD is any better, but yes, if that is a consideration then they need some system to tie the rights to console access. I believe ConsoleKit and the replacement systemd-loginctl attempts to solve such problems. Yes, I

Re: Wheezy release: CDs are not big enough any more...

2012-05-16 Thread Timo Juhani Lindfors
Jonathan Nieder jrnie...@gmail.com writes: speaking lets each user access media that they have inserted. Last time I checked[1] (a while ago), the same rules did not apply to USB sticks. Yes, this is the point I was trying to make in the first place :) -- To UNSUBSCRIBE, email to

Re: Moving /tmp to tmpfs is fine

2012-05-28 Thread Timo Juhani Lindfors
Miles Bader mi...@gnu.org writes: bazillion packages in debian that blithely cache vast quantities of (often very uninteresting) data in random subdirs of $HOME... and then Fortunately there is some movement towards the use of XDG_CACHE_DIR (defaults to ~/.cache). -- To UNSUBSCRIBE, email to

Re: Starting services automatically after install

2012-06-03 Thread Timo Juhani Lindfors
Aaron Toponce aaron.topo...@gmail.com writes: By default in Debian, when a service package is installed, such as openssh-server, or isc-dhcp-server, it starts the service. This seems counter-intuitive to me. As you mentioned, this is a really old issue. I've documented my personal solution at

Re: gnome is completely f^Mmessed up

2012-06-08 Thread Timo Juhani Lindfors
Florian Reitmeir flor...@reitmeir.org writes: Is this a joke? Are we going to release that in June/July/whenever? i use gnome too, and for me its working very stable, and gnome3 is way better than gnome2. I installed wheezy to my old laptop a few months ago and was very happy with gnome too.

Re: gnome is completely f^Mmessed up

2012-06-11 Thread Timo Juhani Lindfors
Luke Cycon lcy...@gmail.com writes: I have the added issue that GNOME seems to (somehow) manage to spawn in excess of 100 Xserver when I try to log in. http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650183 -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of

Re: [RFC] Add upstream VCS info to control file

2012-06-15 Thread Timo Juhani Lindfors
Gregor Jasny gja...@googlemail.com writes: Does this sound reasonable? Yes. Please also read the earlier thread http://lists.debian.org/debian-devel/2011/04/msg00356.html -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Re: CD sizes again (and BoF reminder!)

2012-07-06 Thread Timo Juhani Lindfors
Steve McIntyre st...@einval.com writes: Back in May I warned about CD sizes[1] for the Wheezy release, pointing out that CD#1 isn't big enough any more to provide usable Gnome or KDE installations. Indeed. CD1 was really problematic in squeeze too:

Re: RFC: Why are so many debian packages outdated?

2012-07-12 Thread Timo Juhani Lindfors
Svante Signell svante.sign...@telia.com writes: NMUs should be made/allowed/encouraged? I know all packaging is made by volunteers at their spare time, but anyway. Debian is one of the best distributions, what about raising the bar a little higher? The only way you can really improve the

Re: Recommends for metapackages

2012-07-13 Thread Timo Juhani Lindfors
Miles Bader mi...@gnu.org writes: issues with NM: it doesn't seem to be tested with much in the way of non-standard setups My personal feeling is that this happens because people who use non-standard setups usually start by purging NM instead of trying to spend weeks reading the source code to

Re: Debian stickers

2012-07-21 Thread Timo Juhani Lindfors
Neil Williams codeh...@debian.org writes: The biggest problem is that none of the arbitrary strings which get printed on the packaging, product specs or even on the hardware itself have any direct link to the actual chipsets used and it is the chipsets which determine support. Most

Re: RFC: Why are so many debian packages outdated?

2012-07-26 Thread Timo Juhani Lindfors
Jon Dowland j...@debian.org writes: I disagree. Maybe my statement was overly general indeed. I certainly agree with There is work to be done to make Debian attract more contributors. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble?

Re: [OT] ifconfig(8)

2012-08-08 Thread Timo Juhani Lindfors
Ivan Shmakov oneing...@gmail.com writes: Curiously enough, ifconfig(8) shows RX/TX byte counts, and, somehow, I didn't manage to get a similar output from iproute. Any pointers? TIA. $ ip -s link show lo 1: lo: LOOPBACK,UP,LOWER_UP mtu 16436 qdisc noqueue state UNKNOWN

Re: Bug#684726: ITP: check_v46 -- Icinga / Nagios plugin for dual stacked (IPv4 / IPv6) hosts

2012-08-29 Thread Timo Juhani Lindfors
Christoph Anton Mitterer cales...@scientia.net writes: Each package depends on exactly what it needs to work and recommends anything which adds e.g. additional features but doesn't cause non-graceful breakage if missing. I guess that really depends on what non-graceful breakage means. I

Re: Stuff from /bin, /sbin, /lib depending on /usr/lib libraries

2012-08-31 Thread Timo Juhani Lindfors
Thomas Goirand z...@debian.org writes: If I need to have /usr mounted before init starts, then I'm more or less dead, and I'll have to get a recovery CD / USB. Not completely. Just boot with break=premount and read /etc/lvm from the initramfs shell. I've done this several times. The cool part

Re: Bug#687103: ITP: maps -- OpenStreetMap client for the GNOME Desktop

2012-09-12 Thread Timo Juhani Lindfors
Wookey woo...@wookware.org writes: And navit and marble and foxtrotGPS and gpsdrive and viking and gpxviewer and memphis. Hey you forgot monav :) -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Re: Mandatory -dbg packages

2012-10-28 Thread Timo Juhani Lindfors
Philip Ashmore cont...@philipashmore.com writes: Debug packages also make back-traces more than useless, and They also allow systemtap to probe userland binaries once http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=691167 is fixed. -- To UNSUBSCRIBE, email to

Bug#693695: general: error while loading shared libraries on system upgrade

2012-11-19 Thread Timo Juhani Lindfors
forcemerge 685243 693695 thanks Victor Porton por...@narod.ru writes: /usr/lib/vlc/vlc-cache-gen: error while loading shared libraries: libvlccore.so.5: cannot open shared object file: No such file or directory I did a google search with libvlccore.so.5: cannot open shared object file you

Re: Mass bug filling about proprietary code of adobe in our type1 fonts

2012-11-25 Thread Timo Juhani Lindfors
Bastien ROUCARIES roucaries.bast...@gmail.com writes: I plan to fill a mass bug filling due to a proprietary code of adobe in fonts hinting that is included in our fonts. If you report them at this stage of the release cycle and there's no easy solution I guess wheezy-ignore could be in order?

Re: Do not CC me

2012-11-25 Thread Timo Juhani Lindfors
Vincent Danjean vincent.danj...@ens-lyon.org writes: Not always. My ISP (French Free/Proxad) seems to filter mail with the same Message-ID sent in a few period of time (a few minutes?) Interesting, this could explain the oddities that I've seen too. -- To UNSUBSCRIBE, email to

Re: unsafe use of gpg

2012-12-14 Thread Timo Juhani Lindfors
Ansgar Burchardt ans...@debian.org writes: I recently looked at several packages using gpg to verify signatures Thanks for your work! Please try to raise this upstream so that they can provide proper interfaces. Is /usr/bin/gpgv --quiet --keyring /etc/myprogram/trusted.gpg file file.sig chmod

Re: unsafe use of gpg

2012-12-14 Thread Timo Juhani Lindfors
Peter Samuelson pe...@p12n.org writes: Note that this adds a keyring to the current list. If the intent is to use the specified keyring alone, use --keyring along with --no-default-keyring. You probably read man gpg but gpgv is simpler: gpgv: Invalid option --no-default-keyring

Re: Linux Future

2013-01-22 Thread Timo Juhani Lindfors
Josselin Mouette j...@debian.org writes: Yet full of misinformation, like the idea that using D-Bus makes a service less scriptable (while the reality is a complete opposite) I was bit puzzled by this part too but I guess the author meant mostly shell scripts here. If one uses e.g. python then

Re: Linux Future

2013-01-23 Thread Timo Juhani Lindfors
Josselin Mouette j...@debian.org writes: You might find this useful: http://np237.livejournal.com/33449.html I made this presentation in the hope to make such things easier to understand for the sysadmin. I read that back then when you originally posted it and I still think it's one of the

Re: tool to create debian/copyright files paragraphs?

2013-01-28 Thread Timo Juhani Lindfors
John Paul Adrian Glaubitz glaub...@physik.fu-berlin.de writes: Has anybody already written a tool to automatically create the files section of the debian/copyright file? The tool should try to keep the files list short by using wildcards. http://lindi.iki.fi/lindi/git/git-copyright-scan.git/

Re: WebRTC has landed

2013-02-23 Thread Timo Juhani Lindfors
Daniel Pocock dan...@pocock.com.au writes: JavaScript and give users of their package the ability to click'n'call other users within the web page. Have you had time to study how the technology works? If both parties are behind a HTTP proxy (for example at an airport or cafe with WIFI) I think

Re: WebRTC has landed

2013-02-23 Thread Timo Juhani Lindfors
Daniel Pocock dan...@pocock.com.au writes: - WebSockets carries the SIP signaling (e.g. to register the user location, find the person you want to call). WebSockets works through HTTP proxies http://en.wikipedia.org/wiki/WebRTC does not mention SIP at all. I assume SIP is just one way to use

Bug#702264: #702264 general: My mouse is a 3-button wheel mouse but system only recognizes 2 buttons (no wheel)

2013-03-04 Thread Timo Juhani Lindfors
Hi, please provide some more information: 1) contents of the file /var/log/Xorg.0.log 2) output of the xev command when you click each button and try to scroll 3) output of the lsusb command Also, you are reporting the bug against debian 6.0.7. It is very unlikely that any bugs are going to

Re: history transparency

2013-03-15 Thread Timo Juhani Lindfors
Philip Ashmore cont...@philipashmore.com writes: Is there a web interface for that, or a script that can do this? debsnap -a arch package version is quite useful. -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact

Bug#704054: /etc/environment.d

2013-03-28 Thread Timo Juhani Lindfors
adrelanos adrela...@riseup.net writes: Thanks, I can think of other solutions, it's just that I find this .d structure really clean, beautiful and simple to use. I personally would rather prefer a library interface so that it is possible to change the storage backend in the future. -- To

Re: devotee (debian vote engine): predictable RNG allows recovery of secret monikers

2013-03-30 Thread Timo Juhani Lindfors
Kurt Roeckx k...@roeckx.be writes: I just pushed a change for this issue to my git repo at: http://anonscm.debian.org/gitweb/?p=users/kroeckx/devotee.git;a=summary I would be grateful if people can review that. commit e7f81870d1f8b18e5dcc855e9a001fab95112c0f (Fix generation of secret key for

Re: devotee (debian vote engine): predictable RNG allows recovery of secret monikers

2013-03-31 Thread Timo Juhani Lindfors
Kurt Roeckx k...@roeckx.be writes: - md5_hex($name $alias obfuscate\n), \n; + hmac_sha256_hex($name, obfuscate), \n; part probably needs some further work. Should it be + hmac_sha256_hex($name, $alias + obfuscate), \n; This is for the dummy sheet. It only

  1   2   >