Re: Why do we have to support tmpfs for /var/run (policy changes in 3.8.1)

2009-04-04 Thread Martin Orr
On 04/04/09 01:22, Steve Langasek wrote:
 On Sat, Apr 04, 2009 at 01:14:51AM +0200, Michael Biebl wrote:
 I provided a list of cons of tmpfs (you could probably also add, that it
 breaks selinux). Is there actually a list of pros?
 
 Probably?  In what case does this break selinux?

It doesn't actually break selinux - the init script just needs to include
[ -x /sbin/restorecon ]  restorecon /var/run/$dir
to ensure that the directory is labelled correctly on selinux systems.

-- 
Martin Orr


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Should selinux be standard?

2008-09-16 Thread Martin Orr
On 16/09/08 13:44, Holger Levsen wrote:
 On Tuesday 16 September 2008 13:40, Reinhard Tartler wrote:
 so an `ls -Z` does not work for you?
 
 It doesnt do anything useful here.
 
 I'm all for enabling selinux per default, but I think it should be done, when 
 it works and such a change shouldnt be done so close before a release. The 
 point is, that libselinux1 is installed everywhere, but not used/enabled on 
 default. So whats the point in installing it everywhere?

I can't see why you're complaining about libselinux1 - it's just a library,
and has to be installed everywhere since e.g. coreutils, sysvinit are linked
against it.  Like many libraries, it is quite happy to sit there doing
nothing.  The question is about installing policycoreutils and
selinux-refpolicy-default.

Was anyone suggesting enabling selinux by default for lenny?  That doesn't
seem sensible at this stage in the release cycle.  Given that, it probably
makes sense to reduce the policy priority, but with the intention of raising
it again after lenny is released and making SELinux enabled by default a
release goal for squeeze.

Best wishes,

-- 
Martin Orr


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Accepted libnet-nbname-perl 0.26-1 (source all)

2006-09-06 Thread Martin Orr
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Tue,  5 Sep 2006 22:24:33 +0100
Source: libnet-nbname-perl
Binary: libnet-nbname-perl
Architecture: source all
Version: 0.26-1
Distribution: unstable
Urgency: low
Maintainer: Martin Orr [EMAIL PROTECTED]
Changed-By: Martin Orr [EMAIL PROTECTED]
Description: 
 libnet-nbname-perl - NetBIOS Name Service Requests
Closes: 378124
Changes: 
 libnet-nbname-perl (0.26-1) unstable; urgency=low
 .
   * New upstream release (Closes: #378124)
 * Fixes handling truncated replies
   * Updated my email address in copyright and control files
   * Updated upstream address and copyright years
   * Moved debhelper and perl from Build-Depends-Indep to Build-Depends, as
 required by lintian and Perl policy
   * Updated Standards-Version to 3.7.2
Files: 
 3532c552739dd4e8e5bad45936d399cb 621 perl extra libnet-nbname-perl_0.26-1.dsc
 411d6cc59d0ace69aac396d5e34541c6 9195 perl extra 
libnet-nbname-perl_0.26.orig.tar.gz
 55bb79a3663529e9014fb083469abd4b 2030 perl extra 
libnet-nbname-perl_0.26-1.diff.gz
 da6dd201c68f7e9438c54747aa19ea48 25150 perl extra 
libnet-nbname-perl_0.26-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFE/va5pdwBkPlyvgMRAoSOAJ4/89O8NN3LV9FX8+aut1U0YEytbgCfVytA
eLbaGA4QnGJguZnvSdaJvNU=
=xlD7
-END PGP SIGNATURE-


Accepted:
libnet-nbname-perl_0.26-1.diff.gz
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.26-1.diff.gz
libnet-nbname-perl_0.26-1.dsc
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.26-1.dsc
libnet-nbname-perl_0.26-1_all.deb
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.26-1_all.deb
libnet-nbname-perl_0.26.orig.tar.gz
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.26.orig.tar.gz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: is xprint still used by mozilla, etc?

2005-03-10 Thread Martin Orr
On Thu, Mar 10, 2005 at 02:45:35PM -0500, Joey Hess wrote:
 Anyway, besides illistrating why new debconf questions can be pretty
 painful to the installation team, I mostly wanted to ask: Is xprintorg
 still needed to print from mozilla, openoffice, firefox, etc, or has
 that been cleared up since january? Should I remove xprt-xprintorg from
 the desktop task again?
 
 I don't have a printer, so I find it hard to keep up with this kind of
 thing. IIRC the last install I did on a system with a printer, 2 weeks
 ago, worked without xprint, but I could be mistaken.

Well I have a box which I installed from d-i RC1 some time ago (when that
was current) with the base system only, and then did nothing with.  Two
weeks ago I started using it as a desktop machine.
I did approximately (with sarge in /etc/apt/sources.list)
apt-get update
apt-get dist-upgrade
apt-get install x-window-system-core kdebase mozilla-firefox openoffice.org
apt-get install cupsys-bsd cupsys-driver-gimpprint gs-esp
and installed a home-compiled 2.6.11 kernel.

I do not have xprt, xprt-common or xprt-xprintorg installed and can print
fine from both Firefox and OOo.

-- 
Martin Orr
Linux Administrator,
Methodist College Belfast


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#293349: ITP: libpam-smb -- Pluggable Authentication Module authenticating from NT server

2005-02-02 Thread Martin Orr
Package: wnpp
Severity: wishlist
Owner: Martin Orr [EMAIL PROTECTED]

  Package name: libpam-smb
  Version : 1.9.9+2.0.0-rc6
  Upstream Author : Dave Airlie [EMAIL PROTECTED]
  URL : http://www.csn.ul.ie/~airlied/pam_smb/
  License : GPL
  Description : Pluggable Authentication Module authenticating from NT 
server

 This is a PAM module, which can verify user passwords from Windows NT
 servers.  It differs from winbind in that it does not require you to have
 administrative access to the NT domain in order to join it, and in that
 it does not contain an NSS module to obtain user account information from
 NT - only passwords.

This package is present in woody (version 1.1.6) but was removed in 2003
following maintainer inactivity, and because Steve Langasek asserted that it
was obsolete.  Certainly winbind is to be preferred in most circumstances
but I at least find this package useful because I am unable to get
administrative access to the relevant NT domain.

My current package is available at
deb http://henry.methody.org/debian sid official

-- System Information:
Debian Release: 3.1
  APT prefers unstable
  APT policy: (990, 'unstable'), (500, 'testing'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.4.29
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)

-- 
Martin Orr
Linux Administrator,
Methodist College Belfast


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: NPTL support in 2.4 kernel series?

2005-01-22 Thread Martin Orr
On Sat, Jan 22, 2005 at 11:31:54AM +, Martin Kittel wrote:
   I still don't like this as the only solution, because by default it
   will break the running setup of people still using 2.4
   kernels. They'll get the update installed and the package is
   broken.
  
  No. They'll see the debconf question, select abort installation, the
  package will not be upgraded, the package will not be broken.
  
 
 They still had to download a useless package and do an interactive update. And
 if I am not mistaken, their running databases will have been stopped during 
 the
 prerm-phase. So all in all, I would not consider this a pleasant experience.

Surely even with a dependency on kernel-image-2.6, this will only cause the
new kernel to be installed and will not magically replace the running 2.4
kernel (or uninstall it).  So the databases will still be stopped until
there is a reboot, and you will need to use debconf to tell the user to
reboot (and to make sure to boot with the new kernel, which may not be the
default - I at least would strongly object to my /boot/vmlinuz{,.old} links
being altered when I didn't expect it).

-- 
Martin Orr
Linux Administrator,
Methodist College Belfast


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Accepted libnet-nbname-perl 0.25-1 (all source)

2004-02-12 Thread Martin Orr
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Format: 1.7
Date: Tue, 10 Feb 2004 17:36:36 +
Source: libnet-nbname-perl
Binary: libnet-nbname-perl
Architecture: source all
Version: 0.25-1
Distribution: unstable
Urgency: low
Maintainer: Martin Orr [EMAIL PROTECTED]
Changed-By: Martin Orr [EMAIL PROTECTED]
Description: 
 libnet-nbname-perl - NetBIOS Name Service Requests
Changes: 
 libnet-nbname-perl (0.25-1) unstable; urgency=low
 .
   * New upstream release
 * Support added for timeouts on requests
   * Updated Standards-Version to 3.6.1 (no changes)
   * Added 2004 to copyright
 .
   * Note that Suggest libnet-nbname-perl below in the 0.24-1 entry should
 read Suggest libnet-netmask-perl
Files: 
 6f662dae38ae170dc1c05bd3f28065ae 631 perl extra libnet-nbname-perl_0.25-1.dsc
 e059e2a368743574bb0eea770409c2f6 8644 perl extra libnet-nbname-perl_0.25.orig.tar.gz
 df3b02d30e0d32cd5df703c7a794f8f4 1913 perl extra libnet-nbname-perl_0.25-1.diff.gz
 e8bbcc626906836e4c7b1b63a56669c6 24838 perl extra libnet-nbname-perl_0.25-1_all.deb

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFALEEBpdwBkPlyvgMRAq+QAJ0ROA7hDQvOv4jlqVWzsi0zGVqpxgCePK/L
aankB2NU6p+aoUwf8j8V1VM=
=8pov
-END PGP SIGNATURE-


Accepted:
libnet-nbname-perl_0.25-1.diff.gz
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.25-1.diff.gz
libnet-nbname-perl_0.25-1.dsc
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.25-1.dsc
libnet-nbname-perl_0.25-1_all.deb
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.25-1_all.deb
libnet-nbname-perl_0.25.orig.tar.gz
  to pool/main/libn/libnet-nbname-perl/libnet-nbname-perl_0.25.orig.tar.gz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]