Re: How to debug - apachetop

2006-01-11 Thread Steve Kemp
On Wed, Jan 11, 2006 at 11:10:51AM -0600, Alejandro Bonilla wrote: After the actual error I got with apachetop: debian:~# apachetop -f /var/log/apache/access.log *** glibc detected *** free(): invalid pointer: 0xb7da08c8 *** Aborted I want to learn how to debug and see what went wrong. How

Re: ITP: moleinvasion -- Jump'n run game with Tux

2006-03-14 Thread Steve Kemp
On Tue, Mar 14, 2006 at 10:51:51AM +0100, G?rkan wrote: * Package name: moleinvasion Version : 0.2 Upstream Author : Guillaume Chambraud [EMAIL PROTECTED] * URL : http://moleinvasion.tuxfamily.org/ * License : GNU General Public License, version 2

Re: md5 checksums

2003-04-21 Thread Steve Kemp
On Mon, Apr 21, 2003 at 09:05:58AM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: It doesn't tackle the issue of dpkg _not_ storing filesystem permissions. This makes it not feasible to easily recover the system after a 'chmod -R go-rwx /' besides reinstalling all the packages (that's why I

Re: md5 checksums

2003-04-21 Thread Steve Kemp
On Mon, Apr 21, 2003 at 07:16:01PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: That's what Tiger calls 'signatures'. It's pretty easy to do at the moment, but I have not updated signatures for Debian for quite some time. If you intend to keep a database you also have to consider that for

Re: md5 checksums

2003-04-21 Thread Steve Kemp
On Mon, Apr 21, 2003 at 07:50:11PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: Missed that mail. I remember the discussion on what should checksecurity include though. Please notice I have include many of the modules we wanted in Tiger. It may have been a private mail; the way I remember

Re: Do we need policy changes?

2003-04-21 Thread Steve Kemp
On Mon, Apr 21, 2003 at 10:11:48PM +0200, Martin Schulze wrote: Maybe the maintainer just has no clue about how UTF should work in that particular application and can't do much about it other than wait until upstream has a clue and implements it. I'm in this position, I'm upstream and

Re: security in testing

2003-05-14 Thread Steve Kemp
On Wed, May 14, 2003 at 03:04:10PM +0300, Kalle Kivimaa wrote: Why not? Testing would be my personal choice for running a desktop (or laptop) Linux, were I not otherwise involved with Debian development. The only bad thing is the non-existent security (I could live with occasional critical

Re: security in testing

2003-05-14 Thread Steve Kemp
On Wed, May 14, 2003 at 02:20:51PM +0100, Colin Watson wrote: I haven't seen it be shot down. I've seen people saying the infrastructure's there, it's just that nobody's actually doing the updates, though. Yes I've seen this mentioned previously also. If it's a matter of finding people it

Re: security in testing

2003-05-14 Thread Steve Kemp
On Wed, May 14, 2003 at 05:24:03PM +0300, Kalle Kivimaa wrote: Pre-plans in this case means that two people (one DD and one NM) have been talking about it seriously. So, if you want to shoot the idea down, go ahead, no harm done :) And if someone else is thinking about picking up the ball, go

Re: Packages up for adoption: ap-utils, igal, tcpflow

2003-05-16 Thread Steve Kemp
On Thu, May 15, 2003 at 09:39:54PM +0100, Robert McQueen wrote: Just a brief note to draw people's attention to the following RFAs I filed a few days ago: #193116 ap-utils -- Access Point SNMP Utils for Linux #193117 igal -- online image gallery generator #193118 tcpflow -- TCP flow

Re: security in testing

2003-05-16 Thread Steve Kemp
On Fri, May 16, 2003 at 01:39:20PM -0400, Matt Zimmerman wrote: If a member of the sec-team says Yes, we are actively trying to find new members, but finding competent and responsive people who have the time and will to help is very difficult, then I'm happy and shut up. Well,

Re: setuid/setgid binaries contained in the Debian repository.

2003-07-31 Thread Steve Kemp
A long time ago[1] I asked if there was a list of all the setuid/setgid binaries contained in the previous Debian stable release. As there still isn't such a list I've created one and placed it online with a simple search form. (This is the list that my recent spate of bug reporting

Re: setuid/setgid binaries contained in the Debian repository.

2003-07-31 Thread Steve Kemp
On Thu, Jul 31, 2003 at 05:30:11PM +0300, Richard Braakman wrote: If you're just scanning for binaries with s bits set, then you'll probably miss all the ones that use whatever that tool was (suidmanager?) that was used by some packages before we had dpkg-statoverride. Yes I know that I'm

Re: setuid/setgid binaries contained in the Debian repository.

2003-07-31 Thread Steve Kemp
On Thu, Jul 31, 2003 at 12:55:28PM -0400, Joey Hess wrote: I'd like to see us move all of our setgid games (except, perhaps, nethack) away from using global score files by default. I think that should be a good option, but I can see several games that might suffer by it. I'm loath to

Re: setuid/setgid binaries contained in the Debian repository.

2003-08-01 Thread Steve Kemp
On Fri, Aug 01, 2003 at 08:20:08AM +0200, Tollef Fog Heen wrote: what's wrong with a low-priority debconf question with a sane default? Absolutely nothing at all, but it's a slippery slope, and I thought we were tending towards less interactivity in installations? Steve --

Re: setuid/setgid binaries contained in the Debian repository.

2003-08-01 Thread Steve Kemp
On Fri, Aug 01, 2003 at 11:18:53AM -0400, Matt Zimmerman wrote: I also think it would be a good idea for policy to require all setuid/gid bit grants to go through this or another list for peer review, much as pre-depends are supposed to. I absolutely support this idea. All set[ug]id

Re: setuid/setgid binaries contained in the Debian repository.

2003-08-02 Thread Steve Kemp
On Fri, Aug 01, 2003 at 09:16:25PM -0400, Joey Hess wrote: Only because Steve Kemp is doing some good work on auditing our games. I suspect he would have just as much luck finding security holes in some other areas. I've mostly covered the games now, there's not too many left that I

Re: setuid/setgid binaries contained in the Debian repository.

2003-08-03 Thread Steve Kemp
On Sat, Aug 02, 2003 at 08:58:00PM -0500, Manoj Srivastava wrote: Given the last review of a setgid program, I wonder if two people are enough. The mistake was simple, human, and undesrtandable, but the review does not in fact talk about any flaws in the current version of angband

Re: setuid/setgid binaries contained in the Debian repository.

2003-08-03 Thread Steve Kemp
On Sun, Aug 03, 2003 at 03:14:23AM -0400, Matt Zimmerman wrote: Surely two people would be an improvement over the current situation, where there is no review at all. Our demonstration has shown how one person can discover some common flaws with a relatively brief review. *Exactly*. Well

Re: About NM and Next Release

2003-08-07 Thread Steve Kemp
On Thu, Aug 07, 2003 at 09:44:07AM +0200, Goswin von Brederlow wrote: I don't know the current average time for a NM to get through the queue but I would guess at it being around 3-4 months. How can that be with the DAM only accepting a few people every 6 month or so? Whats the average

Re: J?rg Schilling is damage; the community should route around him

2004-10-10 Thread Steve Kemp
On Sat, Oct 09, 2004 at 01:18:50PM +0200, Jose Carlos Garcia Sogo wrote: El s??b, 09-10-2004 a las 00:04 -0500, Branden Robinson escribi??: It's time to fork. Let us work with the rest of the community to standardize on a new set of tools based on the last free version of cdrtools, thank

Re: Package idea, Debian-Firewall.

2004-10-13 Thread Steve Kemp
On Wed, Oct 13, 2004 at 06:13:36AM +0200, nicklas (smurfd) wrote: I have had a package idea, for a long time now. The idea, was a package, containing a Flush-all firewall script. Adding this script to be ran at bootup. Just for the simplicity. I tend to keep forgetting to add it myself. I

Re: Intent to mass-file bugs: FDL/incorrect copyright files

2004-11-17 Thread Steve Kemp
On Wed, Nov 17, 2004 at 06:49:21PM +, Brian M. Carlson wrote: This is an intent to mass-file bugs as required per custom. Bugs will be filed: 1) on packages that include GNU Free Documentation Licensed-material; 2) on packages in 1) that do not include the copyright or license of

Re: Bug#285234: ITP: unlzx -- unarchiver for *.lzx archives

2004-12-11 Thread Steve Kemp
On Sat, Dec 11, 2004 at 04:37:01PM -0600, Graham Wilson wrote: On Sat, Dec 11, 2004 at 10:53:10PM +0100, Marcin Orlowski wrote: Package: wnpp Severity: wishlist * Package name: unlzx Version : x.y.z Upstream Author : Name [EMAIL PROTECTED] * URL :

Re: dselect survey

2004-12-11 Thread Steve Kemp
On Sun, Dec 12, 2004 at 11:35:22AM +1100, Paul Hampson wrote: apt-get and apt-cache are my friends, and I love them for letting me specify what I want to do in a way that is intuitive to me. Altough I wish I could tab-complete package names sometimes. ^_^ If you're running bash you can

Re: Bug#285625: ITP: expocity -- An enanced Window Manager based on metacity

2004-12-14 Thread Steve Kemp
On Tue, Dec 14, 2004 at 04:43:11PM +0100, Christian Surchi wrote: == Date: Tue, 14 Dec 2004 16:33:43 +0100 From: martin f krafft [EMAIL PROTECTED] To: debian-devel@lists.debian.org Subject: Re: Bug#285625: ITP: expocity -- An enanced Window Manager based on

Re: installing a source tree?

2004-12-15 Thread Steve Kemp
On Wed, Dec 15, 2004 at 12:01:24PM -0500, Chasecreek Systemhouse wrote: So, I humbly request suggestions or hints as to a direction I can follow to be able to get the source cod and development tree (READ Not CVS Tree) of say package PostgresSQL. I have tried variations of - apt-get

Re: Who could be able to help SW vendors to support Debian?

2005-02-01 Thread Steve Kemp
On Tue, Feb 01, 2005 at 10:57:08PM +0100, Christian Perrier wrote: Well, I'm not the software vendor here..:-) As far as I've inderstood, this product induces some interaction at kernel-level and the vendor developers may have concerns about the kernel on the distribution they want to

Re: /etc under svk

2005-02-11 Thread Steve Kemp
On Fri, Feb 11, 2005 at 06:36:04PM +0100, Enrico Zini wrote: And a question: where do we collect this kind of tips? wiki.debian.net debian-administration.org debianplanet.org debianhelp.org And any page that's accessible to google! Steve -- -- To UNSUBSCRIBE, email to [EMAIL

Re: Tips wanted for debugging and testing Debian

2005-02-25 Thread Steve Kemp
On Thu, Feb 24, 2005 at 09:39:51PM +0100, Michael Tautschnig wrote: You can browse our bug database at http://bugs.debian.org/. A good way to start is to search for any bugs in software you regularly use, and to see if you can help out. But what could one do, if the maintainer doesn't

Re: Tips wanted for debugging and testing Debian

2005-02-25 Thread Steve Kemp
On Fri, Feb 25, 2005 at 02:41:48PM +0100, Michael Tautschnig wrote: If a bug is serious, and not a trivial thing, and if a patch has been filed then a NMU could be applied. But only a Debian developer can do so, right? Usually, but I've sponsored NMU uploads by non-DDs before. When

Re: Snort: Mass Bug Closing

2003-08-24 Thread Steve Kemp
On Mon, Aug 25, 2003 at 01:33:37AM +0200, Goswin von Brederlow wrote: Why don't you add an option to load newer rulesets and/or update information to snort. Once a day/week/month snort you probe some url for a signed ruleset or news file and report to the user about any updates. That way

Re: apt-get internals help

2003-09-06 Thread Steve Kemp
On Sat, Sep 06, 2003 at 09:50:14AM -0400, Neil Roeth wrote: I did not realize the full context of what you were trying to do from your initial question. You're proposing a fundamental change from a process that is static and noninteractive (so that build daemons will work, package building is

Re: Rotation of /var/log/mail.log

2003-09-23 Thread Steve Kemp
On Tue, Sep 23, 2003 at 11:18:27PM +0200, [EMAIL PROTECTED] wrote: While /var/log/mail.log is rotated nicely on my (woody) boxes, I have no idea which package is responsible for that. Any suggestions ? /etc/cron.weekly/sysklogd This script rotates all the files which are output from

Re: Package verification

2003-10-07 Thread Steve Kemp
On Wed, Oct 08, 2003 at 12:24:37AM +1000, Kim Lester wrote: There is no way to verify/correct the MODE, USER, GROUP, TYPE of any files installed in a pkg. That appears to be the case, partly because permissions may be changed from those files which are contained withing the .deb file via

Re: Bug#214036: im: imput doesn't work with Perl 5.8.1

2003-10-20 Thread Steve Kemp
On Tue, Oct 21, 2003 at 01:13:49AM +0900, Tatsuya Kinoshita wrote: With the perl 5.8.1 package, the line input operator () causes Bad file descriptor. This problem is reproducible by the following sample code. #!/usr/bin/perl $file = /etc/debian_version; open(FH, $file) or die

Re: A case study of a new user turned off debian

2003-11-03 Thread Steve Kemp
On Mon, Nov 03, 2003 at 03:05:56PM -0500, Greg Stark wrote: All he had to do was install an older version of libc6 and every other package would have been happy. All the infrastructure is there to do this, the old packages are all on the ftp/http sites, the package may even be sitting in

Re: Bug#219139: ITP: cdcat -- a graphical (QT based) catalog program

2003-11-04 Thread Steve Kemp
On Tue, Nov 04, 2003 at 04:20:26PM +0100, Jorge Bernal (Koke) wrote: Package: wnpp Version: unavailable; reported 2003-11-04 Severity: wishlist * Package name: cdcat Version : 0.92 Upstream Author : Peter Deak [EMAIL PROTECTED] * URL : http://cdcat.sf.net *

Re: RFA: A lot of packages

2003-11-15 Thread Steve Kemp
On Fri, Nov 14, 2003 at 05:03:59PM +0100, Simon Richter wrote: - uptimed (sponsor needed for Daniel Gubser, who helped out) I will sponsor Daniel; or failing that I'd take it over myself. Whichever you both prefer. Steve --

Re: [debian enterprise] sub-project planning

2003-12-01 Thread Steve Kemp
On Tue, Dec 02, 2003 at 06:24:58AM +1100, Zenaan Harkness wrote: Great to hear. I started a web page at http://debian-enterprise.org/. Aren't we still waiting for clarification on the use of Debian in domain names, etc? As highlighted by the Adamantix name changed? And as I put on the web

Re: development environment question

2003-12-03 Thread Steve Kemp
On Wed, Dec 03, 2003 at 10:48:57AM -0800, bruce wrote: Our goals: * Provide Project Management * Provide a Development Network of Servers * Provide Test Servers * Allow users to configure Test Servers as Required * Allow users to build/execute/test their code on the Test Servers

Building a distribution from source?

2003-12-04 Thread Steve Kemp
I wasn't going to post this, but it might be relevent to the ongoing custom distribution stuff that's happening. I've been experimenting with producing a hardened Debian derivitive as a small piece of paid work. This mostly means compiling things with a stackguard compiler, using

Re: Building a distribution from source?

2003-12-04 Thread Steve Kemp
On Fri, Dec 05, 2003 at 12:10:44PM +1100, Russell Coker wrote: On Fri, 5 Dec 2003 10:39, Steve Kemp [EMAIL PROTECTED] wrote: ? I've been experimenting with producing a hardened Debian derivitive ?as a small piece of paid work. ?This mostly means compiling things with ?a stackguard compiler

Re: Building a distribution from source?

2003-12-05 Thread Steve Kemp
On Thu, Dec 04, 2003 at 10:42:28PM -0500, Joey Hess wrote: That's what the debian-cd package is for. Thanks, that was exactly what I was looking for :) Steve -- Will code for food.

Re: Building a distribution from source?

2003-12-05 Thread Steve Kemp
On Fri, Dec 05, 2003 at 10:20:19AM +0100, Javier Fern?ndez-Sanguino Pe?a wrote: I believe that our GCC packages already have propolice patched in but not enabled. Therefore it should be a much easier change to make for it to be included. This is true, debian/patches has a line for

Re: Building a distribution from source?

2003-12-05 Thread Steve Kemp
On Fri, Dec 05, 2003 at 06:37:47PM +0100, Jakob Lell wrote: maybe Adamantix is what you are wanting to do. It is based on Debian woody and uses kernel and gcc patches to improve security. At the moment you need to install a normal Debian woody and then upgrade. However, you might create

Re: how to handle multiple upstream changelogs

2003-12-07 Thread Steve Kemp
On Sun, Dec 07, 2003 at 03:18:54PM +0100, Tommaso Moroni wrote: The only idea I've come up with is to put the name of the corresponding subdirectory before each changelog. Is there anyone who has resolved this problem in another way? I just took the main one and used that. Some

Re: Need help: Idle X-user?

2003-12-08 Thread Steve Kemp
On Mon, Dec 08, 2003 at 07:09:59PM +0100, Dennis Stampfer wrote: Is there any way to querry how long a X-user is idle? If not, do you think it's okay to write something like IDLE-Logout does not work with X into Readme.Debian and into the config-file(,manpage, ...)? I'm not sure to be

Re: Building a distribution from source?

2003-12-10 Thread Steve Kemp
On Wed, Dec 10, 2003 at 07:44:55PM +0100, Peter Busser wrote: ``We''? Who is ``we''? It is unlikely that you are one of them royal people, so I take it you meant to say: Adamantix is not what I want to do, what I want to do is to improve Debian. That is correct, I agree with Russell.

Re: Building a distribution from source?

2003-12-12 Thread Steve Kemp
On Thu, Dec 11, 2003 at 12:10:06PM +1100, Russell Coker wrote: Let me know when you have an apt repository that's in a usable state and I'll recommend it on my SE Linux web pages. I expect that anyone who is interested in SE Linux will be interested in your work as well. This work has

Announce - SSP/ProPolice compiler for Woody

2003-12-16 Thread Steve Kemp
Hi, Following the interest in my recent post about rebuilding Debian from source using a patched compiler I thought I'd announce the availability of gcc-3.3 with the SSP patches. (SSP is the new name for the work formerly called ProPolice). The packages may be downloaded via the

Re: Debian Mini-distro: how to recompile base-system and remove Java?

2006-05-29 Thread Steve Kemp
On Mon, May 29, 2006 at 07:53:02PM -0300, Daniel Ruoso wrote: In fact, I want it to work as a native debian system. This way, buildroot causes a lot of problems Isn't this what 'apt-build' can be used for? http://julien.danjou.info/article-apt-build.html That allows you to rebuild

Bug#370722: ITP: libnet-httpserver-perl -- An extensible HTTP server framework for perl

2006-06-06 Thread Steve Kemp
Package: wnpp Severity: wishlist Owner: Steve Kemp [EMAIL PROTECTED] * Package name: libnet-httpserver-perl Version : 1.1.1. Upstream Author : Ryan Eatmon [EMAIL PROTECTED] * URL : http://search.cpan.org/~reatmon/Net-HTTPServer/ * License : LGPL Description

Bug#376419: ITP: libapache2-mod-ifier -- Filter or reject incoming client requests

2006-07-02 Thread Steve Kemp
Package: wnpp Severity: wishlist Owner: Steve Kemp [EMAIL PROTECTED] * Package name: libapache2-mod-ifier Version : 0.2 Upstream Author : Steve Kemp [EMAIL PROTECTED] * URL : http://www.steve.org.uk/Software/mod_ifier/ * License : GPL + Apache and SSL linking

Re: A question on setting setuid bit

2006-07-05 Thread Steve Kemp
On Tue, Jul 04, 2006 at 08:37:52PM -0400, LEE, Yui-wah (Clement) wrote: I am building a package in which one of the binary has to have the setuid and setgid bits set. I wonder which one of the following two is the more appropriate method to use? It looks like you've got the answer to this

Re: how to deal with packages depending on mysql-server

2006-07-25 Thread Steve Kemp
On Tue, Jul 25, 2006 at 10:21:03AM +0200, Michal ??iha?? wrote: My proposal to satisfy both use-cases was, to provide two versions of wordpress: (1) wordpress -- depends on mysql-server (2) wordpress-remotesql -- does not How about: Depends: mysql-remote-server | mysql-server

Re: Why does Ubuntu have all the ideas?

2006-07-28 Thread Steve Kemp
On Fri, Jul 28, 2006 at 09:02:57AM -0600, Katrina Jackson wrote: A. Ubuntu seems like it can get hardware support immeadiatly, but that support never seems to quickly get to Debian. I have been using Ubuntu since Debian doesn't wok on my laptop. Suspend doesn't work and my

Re: Why does Ubuntu have all the ideas?

2006-07-28 Thread Steve Kemp
On Fri, Jul 28, 2006 at 05:37:11PM +0100, Matthew Garrett wrote: Steve Kemp [EMAIL PROTECTED] wrote: Neither Ubuntu nor Debian do anything special to get hardware support that is provided by the kernel proper and tools that neither group created. That's not actually true. I do

Re: Why does Ubuntu have all the ideas?

2006-07-28 Thread Steve Kemp
On Fri, Jul 28, 2006 at 06:55:26PM +0200, Fabio Tranchitella wrote: How many Debian maintainers think the same? I'm sure there are a lot of them who do not soffer of the this is my package, go away syndrome. There is a small list of some people who accept them here:

Re: thedebianuser.org started

2006-08-03 Thread Steve Kemp
On Thu, Aug 03, 2006 at 08:26:57AM -0600, Joseph Smidt wrote: Wolfgang, I think that is a great idea. You should make a post on forums.debian.net to since that is another place many of the community hang out. That's just my two cents. Seconded. I put a simple advert on

Re: thedebianuser.org started

2006-08-03 Thread Steve Kemp
On Thu, Aug 03, 2006 at 08:26:41PM +0200, Eduard Bloch wrote: Why don't you create a web ring and place banners everywhere? (seriously) There is a promote debian ring already: http://spreaddebian.com/ I like to see related sites linking to each other, and I like to see friendly

Re: Howto: Package for Debain the ???Easy??? Way

2006-08-05 Thread Steve Kemp
On Sat, Aug 05, 2006 at 09:18:39AM -0600, Joseph Smidt wrote: I just posted a blog: blog.thedebianuser.org/?p=13, where I outline how I feel: that working through examples using .diff files teaches how to package better then trying to learn from documentation alone. The blog

setuid/setgid binaries contained in the Debian repository.

2002-11-25 Thread Steve Kemp
Hi, I was wondering if there was a definitive list of all the setuid/setgid binaries which may be installed from the Debian archives. (Such a list would be very useful in prioritizing any examination of source code). I've partially worked my way through the list of packages which are

Re: ..last mirror update was a week ago, what's going on???

2005-07-28 Thread Steve Kemp
On Fri, Jul 29, 2005 at 02:31:01AM +0200, Arnt Karlsen wrote: ..last mirror update was a week ago, what's going on??? ..and, yeah, gg:Debian mirror update 21-Jul-2005 etc finds _lotsa_ noise. ..whether this mirror update lapse is planned or not, a wee mention here on d-m and and on

Re: Steve Kemp [EMAIL PROTECTED] Please check your Debian E-Mail.

2005-08-03 Thread Steve Kemp
On Tue, Aug 02, 2005 at 03:58:33PM -0400, Greg Folkert wrote: I was finally able to acquire an SSP Build Host for you. If you are still interest. Please contact me. A bit quick off the mark there, Greg! I think I've replied to all your previous mails within a day or two...? Anyway for

Re: Steve Kemp [EMAIL PROTECTED] Please check your Debian E-Mail.

2005-08-07 Thread Steve Kemp
On Sun, Aug 07, 2005 at 10:12:56PM -0400, Daniel Jacobowitz wrote: The SSP compiler is a patch against GCC and offers Stack Smashing Protection. In short it gives protection against buffer overflow bugs, and attacks. Steve, you are aware that GCC 4.1 will include a complete

Re: [SECURITY] [DSA 810-1] New Mozilla packages fix several vulnerabilities

2005-09-13 Thread Steve Kemp
On Tue, Sep 13, 2005 at 09:25:22AM -0400, Roberto C. Sanchez wrote: I am concerned that a version of Mozilla claiming to be an earlier will eventually break user-installed extensions. .. There really has to be a better way. The time to make suggestions was probably when Joey asked for

Re: apply to NM? ha!

2005-01-25 Thread Steve Kemp
On Tue, Jan 25, 2005 at 09:48:04AM +0100, Ingo Juergensmann wrote: On Tue, Jan 25, 2005 at 09:17:32AM +0100, Goswin von Brederlow wrote: I wish more women would join Debian and the lists. My experience is that usually there's not that much aggressiveness when there are women around.

Re: advice needed on handling network port conflicts

2005-04-21 Thread Steve Kemp
On Thu, Apr 21, 2005 at 12:07:26PM -0400, Eric Cooper wrote: But if apt-proxy is still installed and running when apt-proxy starts up, it will fail because the port is in use. Should I make the approx package conflict with apt-proxy? Both packages allow the port to be changed to something

Re: Greylisting for @debian.org email, please

2005-06-18 Thread Steve Kemp
On Sat, Jun 18, 2005 at 05:39:10PM -0400, Glenn Maynard wrote: Email is realtime. I receive mails much more quickly than five minutes on average; within seconds, typically, even for round-trips to many mailing lists. Email may appear to be realtime, and you may even expect it to be

Re: Greylisting for @debian.org email, please

2005-06-18 Thread Steve Kemp
On Sat, Jun 18, 2005 at 03:08:38PM -0700, Thomas Bushnell BSG wrote: Steve Kemp [EMAIL PROTECTED] writes: Email may appear to be realtime, and you may even expect it to be because this is frequently how it works. But this is not guaranteed. The RFC requires best effort. Sure

Re: Orphaning debmirror

2009-07-31 Thread Steve Kemp
On Fri Jul 31, 2009 at 18:47:58 +0200, Siggy Brentrup wrote: Who wrote debmirror? Without installing I can't find out since only maintainers are listed in the PTS. Look at the copyright file: e.g.

Re: I don't understand Debian

2007-06-22 Thread Steve Kemp
On Fri Jun 22, 2007 at 20:24:22 +0200, ignatius wrote: - Why it's Debian that fixes bugs and security holes? Why it isn't upstream developers? Generally upstream developers *will* fix security holes, however Debian users generally get their software from *us*. So if we're shipping

Re: Intend to orphan pscan.

2007-06-30 Thread Steve Kemp
On Sat Jun 30, 2007 at 18:43:36 +0900, Charles Plessy wrote: I would like to know if it is OK that I orphan pscan and open a discussion about its removal. I think it would be grossly rude to attempt to orphan a package which you do not maintain which has no bugs against it. (Except the

Re: screenshots.debian.net goes beta

2008-11-11 Thread Steve Kemp
On Tue Nov 11, 2008 at 01:02:42 +0100, Christoph Haas wrote: * There are 14 pages and the navigation is truncated to 'Page: 1 2 3 .. 14 '. Could you (optionally) display links to all pages? Or alter the number of results per page (increase, or make user configurable)? I'll change

Re: SmellyWerewolf.com perfume make-up discount

2008-11-23 Thread Steve Kemp
On Sun Nov 23, 2008 at 17:59:13 +0100, Josselin Mouette wrote: - Send your private Debian GPG Key to [EMAIL PROTECTED] Include the brand of your perfume and the color of the make-up. I find it disappointing to see this posted, and in bad taste. I'm sure I'm not alone. Steve --

Re: SmellyWerewolf.com perfume make-up discount

2008-11-23 Thread Steve Kemp
On Sun Nov 23, 2008 at 19:52:46 +0200, Antti-Juhani Kaijanaho wrote: - Send your private Debian GPG Key to [EMAIL PROTECTED] Include the brand of your perfume and the color of the make-up. I find it disappointing to see this posted, and in bad taste. I found it generally

Re: For those who care about lesbians reloaded (Was: SmellyWerewolf.com perfume make-up discount)

2008-11-23 Thread Steve Kemp
On Sun Nov 23, 2008 at 22:17:44 +0100, Pierre Habouzit wrote: FWIW we had this discussion already: http://lists.debian.org/debian-devel/2006/01/msg00920.html Could we fucking stop repeating the same old discussions over and over and over ? every two year we troll about firmwares, bad

Re: Adoption of Nix?

2008-12-24 Thread Steve Kemp
Yes, you are probably right: I don't understand how Nix may be useful for Debian (and for GNU/Linux also). That's too bad for you. Shallow thinking doesn't get you anywhere. As promoter/recommender surely the onus is upon you to demonstrate: 1. Nix is good. 2. Nix is better than

Re: Bug#519339: ITP: tmux -- an alternative to screen, licensed under 3-BSD

2009-03-12 Thread Steve Kemp
On Thu Mar 12, 2009 at 22:37:41 +0100, Karl Ferdinand Ebert wrote: - a more usable status line syntax, with the ability to display the first line of output of a specific command; That is also possible in GNU Screen. - a cleaner, modern, easily extended, BSD-licensed codebase. That

Re: libpango update broke iceape synaptic and more

2007-09-04 Thread Steve Kemp
On Tue Sep 04, 2007 at 11:54:23 -0500, Don wrote: I am using sid and yesterday my update/upgrade broke iceape, synaptic, and some others. I've had problems with libpango before, but this one has me stumped. I don't see anyone else having this problem, so I must conclude something is

Re: libpango update broke iceape synaptic and more

2007-09-04 Thread Steve Kemp
On Wed Sep 05, 2007 at 00:43:46 +0200, Julien Cristau wrote: [EMAIL PROTECTED]:~$ firefox /usr/lib/iceweasel/firefox-bin: symbol lookup error: /usr/lib/libpangoft2-1.0.so.0: undefined symbol: g_once_init_enter_impl Interestingly the symbol is defined: [EMAIL PROTECTED]:~$

Re: Bits from the Security Team

2007-10-19 Thread Steve Kemp
On Fri Oct 19, 2007 at 17:36:21 +0200, Adrian von Bidder wrote: Allow me to point out the message at http://blog.steve.org.uk/articles/2007/10/19/as-i-move-on-through-the-year which is really a Bits from the Security Team. Why is - once again - a message that I'd consider appropriate for

Re: Bits from the Security Team

2007-10-20 Thread Steve Kemp
On Sat Oct 20, 2007 at 12:00:23 +0300, Lars Wirzenius wrote: pe, 2007-10-19 kello 18:29 +0200, Adrian von Bidder kirjoitti: Seriously: I think exactly this kind of not really much new stuff going on, but here's what we're continuing to do kind of information should be more visible,

Re: Bits from the Security Team

2007-10-20 Thread Steve Kemp
On Fri Oct 19, 2007 at 18:29:46 +0200, Adrian von Bidder wrote: That you like pies is important. :) Though in the specific case of the security team, the flow of security updates is an indication that the team is working Yes, this is what I think too. Could've cc:ed you at least.

Re: Is openssl actually safe now? (was: debian infrastructure ssh key logins disabled, passwords reset)

2008-05-14 Thread Steve Kemp
On Wed May 14, 2008 at 10:21:18 +0200, BALLABIO GERARDO wrote: If so, and if that was the ONLY entropy source used in generating keys, then upstream openssl is (and has always been) just as broken as the patched Debian package. It wasn't. Steve -- Debian GNU/Linux System Administration

Re: Packaging a module that overwrites kernel-provided files

2008-06-18 Thread Steve Kemp
On Wed Jun 18, 2008 at 10:41:13 -0430, Ernesto Hernandez-Novich wrote: Been there, done that, doesnt't work for these machines. The problem has to do with the interaction of the card with IBM's IPMI controller, and requires the latest Broadcom drivers. What you want to do is install the

Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

2008-08-11 Thread Steve Kemp
On Mon Aug 11, 2008 at 10:57:56 +0400, Dmitry E. Oboukhov wrote: I set Severity into grave for this bug. The tableof discovered problems is below. Great work. I don't think there should be any objection to a mass-filing for security sensitive bugs - and from the sounds of

Re: Possible mass bug filing: The possibility of attack with the help of symlinks in some Debian packages

2008-08-11 Thread Steve Kemp
Great work. If you have the time to see if any of these are included in stable (etch) please could you do so? It might be that we'd need to release a security update, or at least a package for the next point release. (I guess severity grave and a tag of security will ensure the same

Re: Packages that download/install unsecured files

2009-09-17 Thread Steve Kemp
On Thu Sep 17, 2009 at 21:26:38 +0200, Christoph Anton Mitterer wrote: CURRENT SITUATION: One can differ between three classes of packages: 0) Packages who do not download anything from the web. 1) Packages which download stuff but this is just normal data like pidgin, firefox (I mean html

Re: Is archive this list?

2010-01-10 Thread Steve Kemp
On Sun Jan 10, 2010 at 21:16:04 +0100, Andrzej Borucki wrote: Exists archive debian-devel@lists.debian.org ?Steve http://lists.debian.org/debian-devel/ Steve -- http://www.steve.org.uk/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe.

Re: Quickcam pro 4000, pwc problem

2006-08-22 Thread Steve Kemp
On Tue, Aug 22, 2006 at 02:45:38PM +0100, John Talbut wrote: Can anyone explain the official Debian set up for pwc based web cams? .. The only Debian package for pwc is pwc-source . According to the copyright information fro this package: I've got one of these devices and found it

Re: Orphaning my packages

2006-09-18 Thread Steve Kemp
On Mon, Sep 18, 2006 at 10:58:31AM -0400, Nathanael Nerode wrote: The ones which haven't been picked up either with ITAs or in this thread, and which aren't lib*-perl or lib*-ruby, are: * I'll take since it hasn't been claimed. Steve -- Debian GNU/Linux System Administration

Re: Orphaning my packages

2006-09-18 Thread Steve Kemp
On Mon, Sep 18, 2006 at 06:13:23PM +0100, James Westby wrote: I'll take since it hasn't been claimed. I claimes it via ITA straight away, perhaps I should have emailed the list as well sorry. No problem, it was my fault for trusting the mail and not checking. I'm always happy

Packages up for adoption

2006-10-10 Thread Steve Kemp
I've recently orphaned all my packages whilst being on a bit of hiatus from project work. Several packages are still unclaimed, although people have offered on some of them. Please take a look at the list if you're interested: * debian-builder[O][O] * driftnet * dsniff *

Re: Packages up for adoption

2006-10-14 Thread Steve Kemp
On Sat, Oct 14, 2006 at 10:52:41PM +0200, Uwe Hermann wrote: Hi Steve, On Tue, Oct 10, 2006 at 08:25:26PM +0100, Steve Kemp wrote: * flawfinder * pscan As I haven't gotten around to do too much audit work, I'll at least take care of a few audit tools: flawfinder and pscan

Re: LWN subscription

2006-11-09 Thread Steve Kemp
On Thu, Nov 09, 2006 at 06:22:14PM +0300, Al Nikolov wrote: Is it possible for developers to subscribe to LWN as described in [1]? My messages to [EMAIL PROTECTED] stay without any answer. [1] http://lwn.net/Articles/13797/ Yes. Though it might take a while to get processed. Steve --

Re: Bash /dev/tcp and /dev/udp

2006-11-23 Thread Steve Kemp
On Thu, Nov 23, 2006 at 12:30:09PM +0100, Klaus Ethgen wrote: For this feature there are several scripts and tools around which use this feature. Moreover if you want to make a net boot image where you need to contact a other host easy there is no way to do this with debian Linux so I have to

Re: Etch, apache-perl and php5 needs manual config

2006-11-30 Thread Steve Kemp
On Thu, Nov 30, 2006 at 07:48:40PM +0100, Patrick Frank wrote: But I have to manually edit /etc/apache-perl/httpd.conf and enable AddType application/x-httpd-php .php aswell as /etc/apache-perl/modules.conf to add LoadModule php5_module /usr/lib/apache/1.3/libphp5.so. Why do

Re: RFC: Proposal for official screenshot repo

2007-01-05 Thread Steve Kemp
On Fri, Jan 05, 2007 at 12:16:25PM +0100, Jorge Salamero Sanz wrote: On Friday 05 January 2007 11:55, Andrea Bolognani wrote: What I don't really get is, why would we want a similar service in Debian? We should already be pointing to the upstream site with the Homepage: pseudo-header, and

  1   2   3   4   5   >