Re: iproute transitional package going away...

2013-09-25 Thread Javier Fernández-Sanguino Peña
On Wed, Sep 25, 2013 at 05:02:58PM +0200, Andreas Henriksson wrote: > Hello! > > I intend to drop the iproute transitional packages in Jessie+1. > > This message is here to give all 68 packages depending/recommending/suggesting > the old iproute package time to simply update their dependencies to

Re: cdn.debian.net as a project service?

2011-03-30 Thread Javier Fernández-Sanguino Peña
On Fri, Mar 11, 2011 at 12:11:40AM +0100, Adam Borowski wrote: > > > > Package: netselect-apt > > > > Description: speed tester for choosing a fast Debian mirror > > Does it actually work for anyone? I just tried it from machines at four > different locations on 3½ ISPs; two with IPv6+IPv4, two I

Re: Introducing the "Debian's Automated Code Analysis" (DACA) project

2010-12-18 Thread Javier Fernández-Sanguino Peña
On Thu, Dec 16, 2010 at 12:00:21PM -0600, Raphael Geissert wrote: > = What is there for everyone? = > > At the moment there are only partial reports from two tools, but the list of > tools to be evaluated and possibly included goes over twenty. I would be glad if the tools included some security

Re: Bug#597202: ITP: kstars-data-extra-tycho2 -- Contains the Tycho2 star catalog for centralized install, avoiding per-user install

2010-09-20 Thread Javier Fernández-Sanguino Peña
On Sun, Sep 19, 2010 at 05:24:38PM +0100, Noel David Torres Taño wrote: > > > * License : GPL > > > > This license is *not* the license the Tycho2 catalog was distributed > > with 10 years ago (8th february 2000). It might be worth clarifying with > > Erik Høg, original author of the c

Re: Bug#597202: ITP: kstars-data-extra-tycho2 -- Contains the Tycho2 star catalog for centralized install, avoiding per-user install

2010-09-19 Thread Javier Fernández-Sanguino Peña
Hi, First of all, please first note there is an informal policy for Stars data catalogues which is available in the 'stardata-common' package (more info at http://alioth.debian.org/projects/stardata-common/). We already provide some star data catalogues (Gliese and Yale which are both non-free) i

Re: Possible mass bug filing: non-doc packages recommending doc packages

2009-05-10 Thread Javier Fernández-Sanguino Peña
On Sun, May 10, 2009 at 06:14:34PM -0400, Travis Crump wrote: > If the documentation is something designed to be viewed in a web browser > and the user has broadband, it is arguably easier to find it on the web. > Even knowing precisely where it is[/usr/share/doc/aptitude is it -doc > or just apti

Re: Override changes standard -> optional

2009-01-06 Thread Javier Fernández-Sanguino Peña
On Fri, Jan 02, 2009 at 01:02:55PM -0800, Russ Allbery wrote: > > ethtool doesn't seem particularly related to tcpdump? > > Oh, sorry, I confused it with a different program. Hm, ethtool I'd put > into the borderline category -- one argument in its favor is that you may > need it in order to fix

Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

2008-09-07 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 12, 2008 at 03:52:14PM -0700, John H. Robinson, IV wrote: > As mktemp and tempfile are both essential[2], they can be relied upon. Essential in Debian, not in other systems. > Is there any scenario where using mktemp or tempfile fails, and sing > $TMPDIR succeeds? Scripts that are wr

Re: What should be on a rescue CD ? (was Re: Debian Live Lenny Beta1)

2008-09-07 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 29, 2008 at 12:58:42AM +0200, Daniel Baumann wrote: > Ian Jackson wrote: > > The current list (which I haven't added even my suggestions to yet) > > is at > > http://git.debian.net/?p=live-helper.git;a=blob;f=lists/rescue > > (I am told - I can't check right now because alioth seems t

Re: Bug#474602: ITP: nikto -- web server security scanner

2008-04-06 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 06, 2008 at 07:29:09PM +0200, Vincent Bernat wrote: > * Package name: nikto Nikto was already packaged for Debian (etch provided version 1.35). It was removed from Debian (see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=434392). Please, include the debian information (includi

Re: [RFC] Changing priority of selinux back to optional

2008-02-11 Thread Javier Fernández-Sanguino Peña
On Wed, Feb 06, 2008 at 12:27:45PM +0100, maximilian attems wrote: > > > The priority of selinux packages was changed from optional to standard, > > fairly shortly before the release of Etch. > > > > I propose to revert that change before Lenny. The basic reason is that > > the selinux packages

Re: List of packages which should probably be Architecture: all

2008-01-05 Thread Javier Fernández-Sanguino Peña
On Wed, Jan 02, 2008 at 01:58:24PM -0600, Raphael Geissert wrote: >clips-common Fixed now, I'm going to upload a new version (6.24-2) making it arch: all Javier signature.asc Description: Digital signature

Re: proposed release goal: DEBIAN/md5sums for all packages

2007-08-28 Thread Javier Fernández-Sanguino Peña
On Mon, Aug 27, 2007 at 12:04:51PM +0200, A Mennucc wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Stefano Zacchiroli ha scritto: > > In an attempt to prevent drift to a well-known counter argument: > > DEBIAN/md5sums (used by debsums) are *not* intended as a mean to counter > > secu

Re: proposed release goal: DEBIAN/md5sums for all packages

2007-08-24 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 24, 2007 at 03:16:28PM +0200, Goswin von Brederlow wrote: > I fail to see any reason to HAVE a md5sums file. It looks like you have not read all the thread, other's have made some good points as to why it's good. Just in case I'm going to voice my opinion here again and see if I can co

Re: proposed release goal: DEBIAN/md5sums for all packages

2007-08-20 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 17, 2007 at 04:47:38PM -0700, Russ Allbery wrote: > Peter Samuelson <[EMAIL PROTECTED]> writes: > > > I'd opt for dpkg generating the checksums upon _extracting_ the .deb > > file. We already claim that the md5sums file isn't supposed to be any > > kind of security thing. Why bother

Md5/sha1sums for all the Release (was Re: proposed release goal: DEBIAN/md5sums for all packages)

2007-08-20 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 17, 2007 at 07:04:39PM -0500, Peter Samuelson wrote: > > [Russ Allbery] > > While it's not the be-all and end-all of security, other OS vendors > > (Sun in particular) have found it useful to make available a central > > database of MD5 checksums of known-good versions of various binar

Re: adduser/deluser on postinst

2007-08-07 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 03, 2007 at 07:39:58AM +0200, Vincent Bernat wrote: > What do you think ? I think that we should standarise user creation/deletion in maintainer scripts. For some code examples which do work (and are used in several packages) see: http://www.debian.org/doc/manuals/securing-debian-howt

MD5sum failure of dpkg 1.14.5 (i386)

2007-08-01 Thread Javier Fernández-Sanguino Peña
I was just doing a pbuider --update, it surprisingly failed due to a mismatch MD5 sum in dpkg. From the Release file: MD5sum: 7f4c3b629592a0ab17c924eff9795c4c SHA1: 40841d015920902a9b0051f1a4296113cc474490 SHA256: 4911981eaaee82b381b513ca0f41dc63a8be2b5c7bf0ba8f6cd6454ee8f3acf0 From the downloa

Re: adding desktop files to misc packages

2007-07-17 Thread Javier Fernández-Sanguino Peña
On Tue, Jul 17, 2007 at 09:02:33AM -0500, Manoj Srivastava wrote: > How easy is it for users to add/remove the debian menu hierarchy > to their GNOME menus? Very easy (if using alacarte). Not possible if using the barebones menu editor (the one you get with gnome-core, don't know the ap

Re: adding desktop files to misc packages

2007-07-17 Thread Javier Fernández-Sanguino Peña
On Tue, Jul 17, 2007 at 09:36:53AM +0200, Josselin Mouette wrote: > Le lundi 16 juillet 2007 à 20:44 +0200, Javier Fernández-Sanguino Peña a > écrit : > > It looks to me like they are properly categorised and its the GNOME menu > > which is misbehaving > > I have indeed

Re: adding desktop files to misc packages

2007-07-17 Thread Javier Fernández-Sanguino Peña
On Tue, Jul 17, 2007 at 09:42:48AM +0200, Josselin Mouette wrote: > > Okay, as long as it can easily be configured, I see no problem in > > disabling it by default. But there should be either a prominent menu > > entry which is easy to find, or a README.Debian in an obvious package. > > If disabl

Lintian test for desktop files (was Re: adding desktop files to misc packages)

2007-07-16 Thread Javier Fernández-Sanguino Peña
On Mon, Jul 16, 2007 at 08:54:47PM +0200, Frans Pop wrote: > On Monday 16 July 2007 20:44, Javier Fernández-Sanguino Peña wrote: > > There are some typos there too ('GameAction', 'ActionGame') which I'm > > going to file bugs now. > > The use of plur

Re: adding desktop files to misc packages

2007-07-16 Thread Javier Fernández-Sanguino Peña
On Mon, Jul 16, 2007 at 08:09:28PM +0200, Josselin Mouette wrote: > Le lundi 16 juillet 2007 à 20:01 +0200, Javier Fernández-Sanguino Peña a > écrit : > > Check this: > > $ find . -name "*desktop" -exec egrep "Categories.*Game.*" \{\} \; | wc -l > > 54

Re: adding desktop files to misc packages

2007-07-16 Thread Javier Fernández-Sanguino Peña
On Mon, Jul 16, 2007 at 04:12:02AM -0700, Don Armstrong wrote: > So it seems like we should do the following: (...) 4. Add i18n support to menu so that it can generate localised menu names, entries and tooltips both when converting desktop -> menu (for WM != KDE/GNOME/Xfce) and when converti

Re: adding desktop files to misc packages

2007-07-16 Thread Javier Fernández-Sanguino Peña
On Fri, Jul 13, 2007 at 10:10:09PM -0400, Joey Hess wrote: > Josselin Mouette wrote: > > We can use additional keywords in the desktop entries to get them sorted > > in sub-menus when appropriate, but many desktop files are not tagged > > correctly. As you can see in the specification [0], all cate

Re: Official presentation template

2007-06-26 Thread Javier Fernández-Sanguino Peña
On Mon, Jun 25, 2007 at 08:52:15AM +0200, Andreas Tille wrote: > [Vor DebConf visitors: I'm just replying into a thread that was started in > Debian-devel list and which concerns more or less the LaTeX beamer BOF > https://penta.debconf.org/~joerg/events/34.en.html ] It would be nice if you upl

Re: Official presentation template

2007-06-23 Thread Javier Fernández-Sanguino Peña
On Sat, Jun 23, 2007 at 03:41:19PM +0100, Mario Iseli wrote: > in a few weeks I will go to give a little talk about Debian packaging > on a swiss CCC event. Having presentations and tell the people > anything about a special Debian topic is a common task for many people > on this list, I think. Now

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-06-08 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 08, 2007 at 09:33:26AM +, Peter Makholm wrote: > But I have no idea where these information come from. According to > /etc/debian_version I'm running'lenny/sid'. This was discussed previously in the thread... > Hmmm, lsb_release seems to parse 'apt-cache policy' and hardcodes the

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-06-05 Thread Javier Fernández-Sanguino Peña
On Mon, Jun 04, 2007 at 04:16:29PM -0400, Lennart Sorensen wrote: > On Sun, Jun 03, 2007 at 11:16:08PM +0200, Javier Fern?ndez-Sanguino Pe?a > wrote: > > Think about Enterprise (non-free) software like Oracle, HP Openview, Tivoli, > > Remedy... Do you expect vendors of this software to understand^

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-06-04 Thread Javier Fernández-Sanguino Peña
On Sun, Jun 03, 2007 at 05:28:24PM -0500, Manoj Srivastava wrote: > Frankly, helping vendors of non-free software lies far below the > ability to provide our users the option to do partial upgrades, > apt-pinning, etc. How does /etc/debian_version of lsb_release hinder that? I'm not sug

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-06-03 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 01, 2007 at 07:14:16PM +0200, Santiago Vila wrote: > On Fri, 1 Jun 2007, Javier Fernández-Sanguino Peña wrote: > > We are not telling the user, we are telling *programs* what environment they > > are in. > > That's the fundamental mistake I see here

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-06-01 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 01, 2007 at 02:26:34PM +0200, Morten Kjeldgaard wrote: > PS: To address the original question: Being a molecular biologist, my > initial idea was to use an approach similar to that used in gene > analysis: look at the entire set of packages installed on a specific > system (package n

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-06-01 Thread Javier Fernández-Sanguino Peña
On Fri, Jun 01, 2007 at 12:55:57AM +0200, Santiago Vila wrote: > I wonder why do we need a file to tell the user about the contents of > his /etc/apt/sources.list file. Have you read "How do I know which > distribution I'm running?" in base-files FAQ? The answer is still > valid for *any* file whic

Re: http://utnubu.alioth.debian.org/scottish/ still used?

2007-05-31 Thread Javier Fernández-Sanguino Peña
On Thu, May 31, 2007 at 02:46:32PM +0200, Daniel Baumann wrote: > In order to find the Debian maintainer, we'd have to have an additional > pass to extract that information -- which would actually be quite > expensive (unpacking 16,000 source packages every hour!)" That's bogus, the maintainer fie

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-05-31 Thread Javier Fernández-Sanguino Peña
On Thu, May 31, 2007 at 02:06:28PM +0200, Santiago Vila wrote: > That would "bless" the abuse of /etc/debian_version. IMHO, it would be > good for Debian if we continue to discourage its use. LSB compliance (which is a release goal) obliges us to provide proper versioning information for releases.

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-05-31 Thread Javier Fernández-Sanguino Peña
On Thu, May 31, 2007 at 12:35:06AM +0200, Santiago Vila wrote: > Hi. > > I believe there is something fundamentally wrong if you *have* to rely > on /etc/debian_version for anything. The number of Debian packages > actually using such file is probably zero (but I could be wrong). Bastille uses it

Re: Is there a way to positively, uniquely identify which Debian release a program is running on?

2007-05-30 Thread Javier Fernández-Sanguino Peña
On Wed, May 30, 2007 at 10:12:38PM +0100, Stephen Gran wrote: > The closest we ship is /etc/debian_version. I use it for several > similar tests at work, you just need to keep a mental map between the > number and the version string. If you can count lsb-release being > installed, that will give

Re: Better documenting what does not work in Etch.

2007-05-30 Thread Javier Fernández-Sanguino Peña
On Wed, May 30, 2007 at 04:33:59PM +0200, Petter Reinholdtsen wrote: > Very good points, and I believe you have a good point. What about > making an errata wiki page for the etch release on > http://wiki.debian.org/>, and add links to the etch bugs in BTS? > It migth form the basis for updating pa

Re: A sane guess at default Debian mirror for pbuilder

2007-05-29 Thread Javier Fernández-Sanguino Peña
On Tue, May 29, 2007 at 07:48:59PM +0200, Josip Rodin wrote: > Well, at least it was different... ftp.debian.org is an even more horrible > default, because that's burdering one single machine maxing out its FE card, > where we have a network of >300 mirrors out there that are mostly happy > to sha

Re: The number of etch installations is rocketing...

2007-04-12 Thread Javier Fernández-Sanguino Peña
On Thu, Apr 12, 2007 at 07:25:02PM +0200, Tshepang Lekhonkhobe wrote: > Please keep on sending these interesting stats, perhaps once-per-week, > to some blog or some mailing list. I'll be real glad. Thanks... Better yet, set up a MRTG-like graph. Everybody loves fancy graphs and they are really us

Re: The number of etch installations is rocketing...

2007-04-12 Thread Javier Fernández-Sanguino Peña
On Thu, Apr 12, 2007 at 05:29:13AM -0400, Joey Hess wrote: > Petter Reinholdtsen wrote: > > Looking at the submission numbers from > > http://popcon.debian.org/>, I am happy to report that the number > > of Etch installations is increasing fast. Here are the number of > > submissions collected by

Re: Ethernet interface numbering in etch

2007-04-01 Thread Javier Fernández-Sanguino Peña
On Sun, Apr 01, 2007 at 10:24:26AM +1100, Russell Coker wrote: > > I disagree. Not only because the bug is not RC, but because you could say > > the same for users running other virtualization technologies (UML? Vmware?) > > with similar behaviours. > > Do they behave in the same way? Well, not t

Re: Ethernet interface numbering in etch

2007-03-30 Thread Javier Fernández-Sanguino Peña
On Fri, Mar 30, 2007 at 05:19:25AM -0400, Nathanael Nerode wrote: > Anyone have any thoughts on where and how this should be documented? > Which documents do we need to make patches for and how detailed should > the description in each document be? I think the appropiate location is the Release No

Re: Ethernet interface numbering in etch

2007-03-30 Thread Javier Fernández-Sanguino Peña
On Thu, Mar 29, 2007 at 11:34:53AM +1100, Russell Coker wrote: > The current functionality in regard to Xen is seriously broken. A reasonable > person will expect that when a Xen virtual machine is configured with a > single Ethernet interface then it can be restarted at any time and get the >

Re: Ethernet interface numbering in etch

2007-03-28 Thread Javier Fernández-Sanguino Peña
On Wed, Mar 28, 2007 at 11:51:15PM +0200, Gabor Gombas wrote: > If you do not have physical access to the machine then serial access is > a must (or some alternative, like IPMI-emulated serial console if you > have the hardware). For example if you have to update the kernel and > something goes wro

Re: Bug#416397: ITP: haproxy -- fast and reliable load balancing reverse proxy

2007-03-28 Thread Javier Fernández-Sanguino Peña
On Wed, Mar 28, 2007 at 10:11:51AM +1100, Russell Coker wrote: > Has this problem been solved for a protocol other than HTTP? In theory you > could have a user-space TCP stack that sends data to the back-end server with > a source address that is the same as that of the origin. Has anyone done

Re: More stuff the installer does which isn't done on upgrade

2007-03-26 Thread Javier Fernández-Sanguino Peña
On Mon, Mar 26, 2007 at 10:45:46AM +0200, Javier Fernández-Sanguino Peña wrote: > On Mon, Mar 26, 2007 at 12:30:30AM -0400, Nathanael Nerode wrote: > > (I would add this to the Wiki page > > http://wiki.debian.org/Sarge2EtchUpgrade but someone made it immutable...) > > The i

Re: More stuff the installer does which isn't done on upgrade

2007-03-26 Thread Javier Fernández-Sanguino Peña
On Mon, Mar 26, 2007 at 12:30:30AM -0400, Nathanael Nerode wrote: > (I would add this to the Wiki page > http://wiki.debian.org/Sarge2EtchUpgrade but someone made it immutable...) The information you posted belongs to release-notes's BTS, not to the wiki (as the wiki tries to track a sarge->etch

Re: future keys

2007-03-19 Thread Javier Fernández-Sanguino Peña
On Mon, Mar 19, 2007 at 10:49:47AM +0100, Adam Borowski wrote: > Whee?! > > While testing Etch upgrades on some old boxes, I noticed that key management > issues get worse and worse, especially if some time happens between upgrades. > Even when ignoring all users of "testing", upgrades between sta

Re: Archive signing key for 2007?

2007-01-18 Thread Javier Fernández-Sanguino Peña
On Fri, Jan 19, 2007 at 01:55:06AM +1100, Anthony Towns wrote: > The key we'll be using (and indeed are already using) is available as: > > http://ftp-master.debian.org/archive-key-4.0.asc Thanks for the info. Maybe I've missed something, but I though there was going to be one key per year

Archive signing key for 2007?

2007-01-11 Thread Javier Fernández-Sanguino Peña
There seems not to be any 2007 archive signing key in the archive yet. That is http://ftp-master.debian.org/ziyi_key_2007.asc does not exist. I thought that the 2007 key was (based on [1]) supposed to be available early in January and available in the debian-archive-keyring package. Which doesn'

Re: RFC: Proposal for official screenshot repo

2007-01-05 Thread Javier Fernández-Sanguino Peña
On Fri, Jan 05, 2007 at 11:55:02AM +0100, Andrea Bolognani wrote: > On Wed, 3 Jan 2007 17:32:52 -0500 > "Roberto C. Sanchez" <[EMAIL PROTECTED]> wrote: > > > I would really appreciate any comments and suggestions on this. > > What I don't really get is, why would we want a similar service in Debi

Re: RFC: Proposal for official screenshot repo

2007-01-05 Thread Javier Fernández-Sanguino Peña
On Fri, Jan 05, 2007 at 01:02:35PM +0100, Andrea Bolognani wrote: > And BTW, I think no one would ever want to upload screenshots of CLI > software ;) Why not? There is some cli software (links, mutt and mp3blaster come to mind) that have nice text-based UIs which can be presented to the user to s

Re: RFC: Proposal for official screenshot repo

2007-01-05 Thread Javier Fernández-Sanguino Peña
On Thu, Jan 04, 2007 at 12:37:53PM -0500, Roberto C. Sanchez wrote: > > - Provide an HTML interface to the pool > > > > If the packages names are the same I don't see the need to add yet another > > line to the debian/control file, packages.debian.org would just need to > > point > > to http://sc

Re: RFC: Proposal for official screenshot repo

2007-01-04 Thread Javier Fernández-Sanguino Peña
On Thu, Jan 04, 2007 at 12:05:03AM +0100, Nico Golde wrote: > Hi, > > this idea has been discussed recently, I just can't remember when > > exactly though, I'd say in the late 6 monthes. Maybe you can grab some > > names of people that were involved in the first proposal there. It may > > have be

Re: RFC: Proposal for official screenshot repo

2007-01-04 Thread Javier Fernández-Sanguino Peña
On Wed, Jan 03, 2007 at 05:32:52PM -0500, Roberto C. Sanchez wrote: > I'd be interested in knowing: > > * Would such an idea be feasible? Yes, it only requires somebody to code in the missing pieces (i.e. all of them) > * Would maintainers be willing to occasionally upload screenshots? I woul

Documentation CD (was Re: Bits from the debian-cd team; more CD/DVDs being built regularly)

2006-12-22 Thread Javier Fernández-Sanguino Peña
On Fri, Dec 22, 2006 at 01:21:01PM +0100, Holger Levsen wrote: > Hi, > > On Friday 22 December 2006 11:07, Javier Fernández-Sanguino Peña wrote: > > I'm not sure if this is done (I assume it's not) but I would really like > > the DVDs / CDs to have a 'documen

Re: Bits from the debian-cd team; more CD/DVDs being built regularly

2006-12-22 Thread Javier Fernández-Sanguino Peña
On Wed, Dec 20, 2006 at 06:29:04PM +, Steve McIntyre wrote: > I'm still expecting to add Live CDs to the list here before we > release. Otherwise, I think we're about set. If there's anything else > you'd like us to do or anything you'd like to ask about, please reply > to this mail - note the

Re: localisation in system wide daemons

2006-12-22 Thread Javier Fernández-Sanguino Peña
On Fri, Dec 22, 2006 at 08:12:52AM +0100, SZALAY Attila wrote: > > Why would you *not* want a locale? If the program has l10n support and it > > provides messages (even in a non-interactive way) there's chances some users > > will benefit from the translated messages. > > In log files, localized m

Re: Downgrading the priority of nfs-utils

2006-12-21 Thread Javier Fernández-Sanguino Peña
On Thu, Dec 21, 2006 at 06:51:58PM +0100, Michelle Konzack wrote: > Am 2006-11-07 04:40:21, schrieb Goswin von Brederlow: > > But wouldn't you be surprised if "mount -tnfs server:/path > > /local/path" suddenly wouldn't work anymore in a fresh install? > > No, it works, but since "portmap" is not

Re: localisation in system wide daemons

2006-12-21 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 29, 2006 at 07:33:20PM +0100, Nico Golde wrote: > Hi, > Adam Cécile reported #400719[0] to the fetchmail package. > > The question is wheter a system wide daemon should care > about the system wide locale configurations or not. I'd say yes, since if the daemon spits out messages (eit

Re: Ifupdown 'extra' package with network ({pre,post}) testing scripts

2006-11-27 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 15, 2006 at 07:41:54PM +0200, Javier Fernández-Sanguino Peña wrote: > > I have written and collected some network testing scripts in a new > 'ifupdown-extra' package which is right now available in > http://people.debian.org/~jfs/ifupdown-extra > > This

Re: Bug#398793: [Adduser-devel] Bug#398793: adduser: Non system wide readable (home) directories should not be 751

2006-11-24 Thread Javier Fernández-Sanguino Peña
On Fri, Nov 17, 2006 at 01:04:31PM +, Stephen Gran wrote: > > As others have pointed out, umask is probably the correct way to make > sure that your files are not world readable. This could trivially be > added to /etc/profile or something. Yes, there are multiple ways to change Debian's def

Re: Bash /dev/tcp and /dev/udp

2006-11-23 Thread Javier Fernández-Sanguino Peña
On Thu, Nov 23, 2006 at 11:02:15PM +0100, Julien Cristau wrote: > On Thu, Nov 23, 2006 at 22:54:59 +0100, Javier Fernández-Sanguino Peña wrote: > > > Then the manpage should be ammended and those things removed. It does not > > make sense to disable things and ship a manpage

Re: Bash /dev/tcp and /dev/udp

2006-11-23 Thread Javier Fernández-Sanguino Peña
On Thu, Nov 23, 2006 at 02:09:33PM +0100, Jan C. Nordholz wrote: > Hi Klaus, > > > >from the bash manpage: > > /dev/tcp/host/port > > /dev/udp/host/port > > This has been discussed several times [1][2], and the outcome was every time > that this should not be a feature

Re: Debian Archive Automatic Signing Key (4.0/etch)?

2006-11-23 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 22, 2006 at 07:22:35AM +0100, Andreas Tille wrote: > But Hendrik Sattler is perfectly right and this knowledge has to be stored > at prominant places like: > >a) installation manual >b) apt-key.8 >c) perhaps somewhere else It is already at the "Securing Debian Manual", see

Re: Lots of (easily recognisible) spam sent to the BTS today

2006-11-04 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 01, 2006 at 03:43:06PM -0800, Don Armstrong wrote: > On Thu, 02 Nov 2006, Javier Fernández-Sanguino Peña wrote: > > a) for mails to -close or to [EMAIL PROTECTED] to prevent a > >spammer/malicious person from closing all the bugs or mangling > >with the B

Re: Lots of (easily recognisible) spam sent to the BTS today

2006-11-01 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 31, 2006 at 11:51:16PM -0700, Bruce Sass wrote: > > Decreasing the score at which we ignore messages is trivial, but it > > means increasing the number of false positives. [And because > > backscatter is bad, these will be messages which just "disappear", > > unless some (massochistic)

Re: Lots of (easily recognisible) spam sent to the BTS today

2006-10-30 Thread Javier Fernández-Sanguino Peña
On Mon, Oct 30, 2006 at 10:50:51PM +0100, Kurt Roeckx wrote: > > If you have an idea for a new spamassassin rule that will get a > > current spam run without triggering on non-spam, send it to > > [EMAIL PROTECTED] Unfortunatly, much spam is now using anti-bayes tecniques > > and is hard to catch

Re: Lots of (easily recognisible) spam sent to the BTS today

2006-10-21 Thread Javier Fernández-Sanguino Peña
On Fri, Oct 20, 2006 at 07:10:20PM -0400, Kevin Mark wrote: > Hi Javier, > On Sat, Oct 21, 2006 at 12:05:58AM +0200, Javier Fernández-Sanguino Peña > wrote: > > > > I'm not sure if anybody else is seeing this but I have seen (just today) 28 > > spam messages sen

Lots of (easily recognisible) spam sent to the BTS today

2006-10-20 Thread Javier Fernández-Sanguino Peña
I'm not sure if anybody else is seeing this but I have seen (just today) 28 spam messages sent to the BTS. I've received them because they were all sent to (at least) the 'www.debian.org' pseudo-package, and I have reported all of them in the BTS' spam interface [1] They also seem to share common

Re: How can the OS autodetect that a user is a newbie and offer help?

2006-10-18 Thread Javier Fernández-Sanguino Peña
On Wed, Oct 18, 2006 at 03:57:26AM -0400, Roberto C. Sanchez wrote: > I agree that a help command and a set of DOS-friendly aliases *should* > be enough, but since MS neutered the command.com interface a long time > ago to the point where it ceased to be useful, I don't see how having > such things

Re: How can the OS autodetect that a user is a newbie and offer help?

2006-10-17 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 17, 2006 at 11:48:33PM -0400, Jason Spiro wrote: > >I remember back in 2000 providing a Debian package called 'ayuda' ('help', > >in > >Spanish) developed by members of my local IEEE Student Branch. This > >package > >included just a simple shell script ('ayuda') and a number of text

Re: How can the OS autodetect that a user is a newbie and offer help?

2006-10-17 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 17, 2006 at 01:02:45PM +, Jason Spiro wrote: > Hi all, Hi there. > For example, when a person types newbie commands like "help" or "kde" > (which is bound to something already) or the DOS commands "del" or "ren" > (which are not), we should point them to more help. (In case anyone

Re: Orphan party, relax...

2006-10-15 Thread Javier Fernández-Sanguino Peña
On Sun, Oct 15, 2006 at 06:38:16AM -0400, Roberto C. Sanchez wrote: > > > > But now, I can stop! There will be people doing my work! And they will > > win money! They will do my translations on debian installation manual, > > on the debconf templates, they are going to close my RC bugs and other >

Re: Help offered

2006-10-12 Thread Javier Fernández-Sanguino Peña
On Fri, Oct 13, 2006 at 12:00:00AM +0200, Daniel Leidert wrote: > HXC wrote: > > > I would like to help with the debian.org website. I have a bachelor > > degree in communication management. Is there help needed and if so where > > do I start / who do I contact? > > A starting point could be to

Re: debian-policy: New virtual package: cron-daemon

2006-10-08 Thread Javier Fernández-Sanguino Peña
On Sun, Oct 08, 2006 at 09:48:01PM +0200, Clément Stenac wrote: > Hi, > > > [ Debian-specific feature ] > > - Correct execution of /etc/cron.{hourly,daily,weekly,monthly} > > Don't we support these by using entries in /etc/crontab and run-parts > for all cron systems, which would make this req

debian-policy: New virtual package: cron-daemon

2006-10-08 Thread Javier Fernández-Sanguino Peña
Package: debian-policy Priority: wishlist Hi all, It was suggested to me (#349170) that we should use a virtual package 'cron-service' to make it easier to people to switch between different cron implementations. Currently in Debian there are three of them available: vixie-cron, which is our cu

Re: apt-findremovable v0.4

2006-10-03 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 03, 2006 at 11:24:14PM +0200, Jan Kechel wrote: > Ron Johnson wrote: > >>> have fun trying it. > > > > Thanks. Is a single perl script worth packaging, though? > > since v0.4 its even seems to be working correctly :) > http://prevalent-digest.de/apt-findremovable/ > > I guess that's

Re: Debian Women Wiki (was: No Config-Files state even though postrm purge failed while purging an installed package?)

2006-10-03 Thread Javier Fernández-Sanguino Peña
On Tue, Oct 03, 2006 at 10:54:02AM -0300, Margarita Manterola wrote: > If you think they are useful, by all means go ahead and put them > somewhere else. It's free documentation, you can do with it whatever > you like. > > I do not feel that it is my duty to put these diagrams in the main > Debia

Re: Debian Women Wiki (was: No Config-Files state even though postrm purge failed while purging an installed package?)

2006-10-02 Thread Javier Fernández-Sanguino Peña
On Mon, Oct 02, 2006 at 10:32:23AM -0300, Margarita Manterola wrote: > >May I ask why information this important is not on the main Debian > >wiki, wiki.debian.org? > > It was born in the Debian Women wiki, because I felt much more > comfortable doing this documenting process inside the Debian Wom

Re: Why are all packages getting so much bigger?

2006-09-24 Thread Javier Fernández-Sanguino Peña
On Fri, Sep 22, 2006 at 02:30:36PM -0400, Nathanael Nerode wrote: > I'm guessing translations. They eat up space really fast. > Is there a way to compare packages after localepurge runs? I would bet on translations and documentation. Maybe it could be possible to automate that analysis and see wh

Re: transitioning config files between two packages

2006-09-13 Thread Javier Fernández-Sanguino Peña
On Tue, Sep 12, 2006 at 05:21:50PM -0700, Steve Langasek wrote: > After an upgrade and answering all of the conffile prompts, does > /var/lib/dpkg/info/nagios-plugins.conffiles still exist and reference these > files? Depending on what dpkg is really doing here, it may well be possible > to handle

Re: Manpages in language-specific packages

2006-09-13 Thread Javier Fernández-Sanguino Peña
On Wed, Sep 13, 2006 at 12:46:19PM -0500, Gunnar Wolf wrote: > Hi, > > I'm adopting liblingua-es-numeros-perl, a Perl module for translating > numbers into their Spanish string representation. One of the first > things I noticed is that the manpage is completely (and only) written > in Spanish. So

Re: Status of inetd for etch

2006-08-31 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 15, 2006 at 10:29:46AM -0400, Jim Crilly wrote: > On 08/15/06 09:49:54AM +0200, Andreas Metzler wrote: > > Hello, > > This seems to be totally overengineered. Having MTA a provide sendmail > > which uses MTA b for remote deliveries is no common usage scenario on > > which any effort sho

Re: Ifupdown 'extra' package with network ({pre,post}) testing scripts

2006-08-16 Thread Javier Fernández-Sanguino Peña
On Wed, Aug 16, 2006 at 02:36:52PM +0200, Emanuele Rocca wrote: > Hello Javier, Hi there. > > This package provides additional scripts for ifupdown to test for some > > common > > problems when setting up interfaces: > > > > - interfaces without a link (admin can have that condition abort

Ifupdown 'extra' package with network ({pre,post}) testing scripts

2006-08-15 Thread Javier Fernández-Sanguino Peña
I have written and collected some network testing scripts in a new 'ifupdown-extra' package which is right now available in http://people.debian.org/~jfs/ifupdown-extra This package provides additional scripts for ifupdown to test for some common problems when setting up interfaces: - interface

Re: New desktop features provided by new version of update-notifier

2006-08-14 Thread Javier Fernández-Sanguino Peña
On Sat, Aug 12, 2006 at 08:29:13PM -0300, Gustavo Noronha Silva wrote: > The second feature is quite cool; update-notifier uses hal to detect > that a new CD/DVD was inserted and tries to figure out whether that is > a Ubuntu CD; I patched the program to also look for Debian CDs, and to > avoid mes

Re: Proposal: searchable d.o/security/

2006-08-14 Thread Javier Fernández-Sanguino Peña
On Sat, Aug 12, 2006 at 12:02:31AM +0200, Nico Golde wrote: > Hi, > today I searched for a specific DSA and its really pain if > you just know the package but no DSA number (correct me if I missed > something). What kind of search are you trying to do? Package to DSA? Bug to DSA? If so, it would

Re: Status of inetd for etch

2006-08-14 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 11, 2006 at 12:46:44AM +0200, Adam Borowski wrote: > > netbase: > critical network configuration. > It has some ancient cruft like /etc/services (which does more ill > than good), but /etc/init.d/networking is not something one wants to > skip. Why do you b

Re: A question on setting setuid bit

2006-07-07 Thread Javier Fernández-Sanguino Peña
On Fri, Jul 07, 2006 at 04:42:47PM -0400, LEE, Yui-wah (Clement) wrote: > Hi, > > This is an experimental package that we built and > evaluate internally (up to this moment). The program > that needs setuid is a cgi-bin program that is invoked > by apache2, which runs as a regular user www-data.

Re: Hidden files

2006-06-08 Thread Javier Fernández-Sanguino Peña
On Tue, Jun 06, 2006 at 05:00:26PM +0300, Linas ??virblis wrote: > Mike Hommey wrote: > > > Could you tell us what kind of harm can do a "hidden" empty file in /usr ? > > First of all, false positives in rootkit and security scanners. And too > many false positives lead to false negatives sooner

Re: Summary of Debconf i18n/l10n activities

2006-06-07 Thread Javier Fernández-Sanguino Peña
On Tue, Jun 06, 2006 at 03:21:45PM -0300, Gustavo Franco wrote: > Nice, thanks. While we're at this subject, what's your view on the > Ubuntu language packs? Are we going to extract the translations from > the packages creating language packs? It has pros and cons, and > the best thing i see is the

Re: [Debconf-discuss] Re: Please revoke your signatures from Martin Kraff's keys

2006-06-07 Thread Javier Fernández-Sanguino Peña
On Wed, Jun 07, 2006 at 01:22:56AM +0100, Wookey wrote: > I have no idea what it would take to persuade you that I am who I say I am, > but if you _only_ accept National Passports then it would appear to be > impossible in my case (which I realise is something of a corner-case). I would probably n

Re: Sun Java available from non-free

2006-06-04 Thread Javier Fernández-Sanguino Peña
On Sun, Jun 04, 2006 at 04:52:22PM +0200, Wouter Verhelst wrote: > > - something it already had (admins who really wanted Sun's Java could > > always go to java.sun.com and install it themselves or use java-package) > > Well, see, *this* is not true. Sure, it's possible to install Java on a > De

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-31 Thread Javier Fernández-Sanguino Peña
On Mon, May 29, 2006 at 02:48:33PM +0200, Wouter Verhelst wrote: > Then there's the issue of tracing who did an actual upload into the real > world. A name on a GPG key is not, by any means, an effective way to do > that, since it does not contain enough information to get out the black > helicopte

Re: Red team attacks vs. cracking

2006-05-30 Thread Javier Fernández-Sanguino Peña
On Tue, May 30, 2006 at 01:40:39PM -0400, Joe Smith wrote: > Is this really a bad thing? He proved that KSP are bad for the web of trust. > A legitimate attacker could abuse the KSP just as easilly as Martin, but > would result in actual damage, and would most likely not have been caught. Ask your

Re: Red team attacks vs. cracking

2006-05-30 Thread Javier Fernández-Sanguino Peña
On Tue, May 30, 2006 at 10:32:15AM -0700, Thomas Bushnell BSG wrote: > I am actually quite ambivalent about whether I think what he did was > wrong; I think to determine that I would need to read carefully what > the KSP organizers said. Martin certainly should follow the protocols > established,

Re: Red team attacks vs. cracking

2006-05-30 Thread Javier Fernández-Sanguino Peña
On Tue, May 30, 2006 at 09:28:19AM -0700, Thomas Bushnell BSG wrote: > Manoj Srivastava <[EMAIL PROTECTED]> writes: > > > This is to forestall those of you who seem to be be arguing > > that the debconf6 KSP crack was a red team attack -- here is how that > > attack differed from a legit

Re: Please revoke your signatures from Martin Kraff's keys

2006-05-28 Thread Javier Fernández-Sanguino Peña
On Sat, May 27, 2006 at 04:47:20PM -0500, martin f krafft wrote: > Dear Manoj, dear fellow DDs, Hi, I'm just going to address the question you made that was directed to me. > also sprach Javier Fernández-Sanguino Peña <[EMAIL PROTECTED]> > [2006.05.25.1300 -0500]: > >

  1   2   3   4   >