before we've even put the
code through its paces in unstable.
Happy Hacking,
--
Steve Langasek
postmodern programmer
pgp2ZJtPRfxv8.pgp
Description: PGP signature
let you know
soon when we think this baby is due.
Cheers,
--
Steve Langasek [EMAIL PROTECTED]
Debian Release Assistant, on behalf of the release team
signature.asc
Description: Digital signature
not much sense in releasing
a second debian-installer release candidate until this decision has
been finalized.
As always, please address any concerns about the release to
[EMAIL PROTECTED]
Cheers,
--
Steve Langasek [EMAIL PROTECTED]
Debian Release Team
[1
become aware of them, and we'll
continue striving to get update emails out to you on a semi-regular
basis.
Cheers,
--
Steve Langasek [EMAIL PROTECTED]
Debian Release Team
[1] http://bjorn.haxx.se/debian/stalls.html
[2] http://lists.debian.org/debian-boot/2004/09
has been signed off on by:
Steve Langasek (Release Manager)
Colin Watson (Release Manager)
Andreas Barth (Release Assistant)
Joey Hess (Release Assistant)
Frank Lichtenheld (Release Assistant)
James Troup (ftpmaster)
Ryan Murray (ftpmaster)
Anthony Towns (ftpmaster)
The following
if we can
stick to this schedule!
Cheers,
--
Steve Langasek and Colin Watson
Debian Release Managers
http://release.debian.org/
[1] http://lists.debian.org/debian-devel-announce/2005/05/msg0.html
signature.asc
Description: Digital signature
be happy to put you to work.
Cheers,
--
Steve Langasek [EMAIL PROTECTED]
Debian Release Team
[1] http://lists.debian.org/debian-devel-announce/2005/05/msg1.html
signature.asc
Description: Digital signature
, but it's not completely out of the question -- we just need to
pick up the pace a bit.
Cheers,
--
Steve Langasek [EMAIL PROTECTED]
http://release.debian.org/
[1] http://lists.debian.org/debian-devel-announce/2005/05/msg1.html
[2] http://lists.debian.org
etch transitions are
now hooked together, but if you have other packages that aren't yet part of
the tangle, ask before you upload and maybe you'll save yourself some
trouble.
Cheers,
--
Steve Langasek
postmodern programmer
[1] http://lists.debian.org/debian-devel-announce/2005/07/msg1.html
you're blocking out two hours on your weekend calendar, or
just stopping in, we look forward to seeing you on #debian-tech this
weekend!
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world
following the sarge release, we're ready to
move etch into full swing. Look forward to more of these emails from
the release team periodically from here on out, chock-full of release-y
goodness!
--
Steve Langasek [EMAIL PROTECTED]
Debian Release Team
[0] http
paquet est offensif, la
solution est très simple: ne l'installez pas.
Sans le nom, pornview est un lecteur d'image comme tout autre.
--
Steve Langasek
postmodern programmer
pgprayA2vcC2L.pgp
Description: PGP signature
evenutuellement de la sécurité) du systeme...
Du coup, a-t-on une chance de voir un jour des paquets samba3 pour woody
stable ? j'ai l'impression que non ;-/
Simò Sorce (du Samba Team) a des paquets pour woody à
ftp://it.samba.org/pub/samba/bin-pkgs/Debian experimental main.
--
Steve Langasek
.
On a similar note some of our boxes are currently overloaded and
services are generally inelegantly distributed; there's certainly
going to be some juggling of them coming up. It's not decided
what/when/where/how yet though, more details before it happens.
--
Steve Langasek
postmodern programmer
l'archive, ça serait vraiment
un bogue.
Cheers,
--
Steve Langasek
postmodern programmer
pgpN9eoJCrzvR.pgp
Description: PGP signature
On Fri, Jan 16, 2004 at 10:22:06PM +0100, Alexandre Pineau wrote:
On Fri, 16 Jan 2004 14:34:42 -0600
Steve Langasek [EMAIL PROTECTED] wrote:
Mais, g++-3.2 ne fait pas partie de build-essential; c'est g++ qui
apparait dans la liste, et si on a besoin d'un autre compilateur(?), ça
.
Cheers,
--
Steve Langasek
postmodern programmer
signature.asc
Description: Digital signature
contribution à la prochaine edition de Debian ne passera
pas inaperçue.
--
Steve Langasek
postmodern programmer
signature.asc
Description: Digital signature
entre les deux groupes de machines? P.e.,
est-ce que les trois premières machines ont des claviers USB, et la
quatrième un clavier PS/2?
Cheers,
--
Steve Langasek
postmodern programmer
signature.asc
Description: Digital signature
défaut des installations françaises sur une locale
UTF-8. Le passage en UTF-8 est un des objectifs d'etch, pour mémoire.
À vrai dire, je ne comprends pas pourquoi ça n'a pas été fait pour
sarge.
Parce que zsh manquait de support pour UTF-8 ;)
--
Steve Langasek Give me a lever
bibliothèques...
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
de
voir automatiquement la compatibilité (ou pas) de licence entre deux
paquets.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developerhttp
them unconditionally. Package indices that grow without bounds are
one way that choices that may be good for a subset of users come with a cost
for the rest of our users.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set
in the Free Software
community.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
[0] Wwhen an open organization such as Debian
://ftp-master.debian.org/~vorlon/transition-binnmus.txt rather than
the wiki, a wiki would be overkill.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
has such a lax spam policy and
that (b) Debian developers cannot choose to make their @debian.org
address unuseable other than by the Debian system administrators.
... procmail?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer
On Sat, Nov 05, 2005 at 12:17:29AM +0100, Henning Makholm wrote:
Scripsit Steve Langasek [EMAIL PROTECTED]
If you're interested in making this happen I'll be happy to give
you any info I can;
2) Any advice on how to test patches to ftp-master code before
submitting them? My own
On Tue, Nov 15, 2005 at 05:15:28PM -0500, Adam C Powell IV wrote:
On Mon, 2005-11-14 at 23:59 -0800, Steve Langasek wrote:
I understand that, and the whole proposal. And it will break a lot of
things for many of my users, who need to use old versions of the -dev
packages at the same
On Wed, Nov 16, 2005 at 01:46:04AM -0600, Peter Samuelson wrote:
[Steve Langasek]
python-dev provides an interface that packages can build-depend on
which gives them both /usr/bin/python, and a set of development tools
from the corresponding version of python. This is not analogous
.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
.
Why would you need to bounce instead of discarding? If it's not a valid
contact address for you, I don't see why you would be so concerned about
sending notifications to people trying to use it. That was relevant 5-10
years ago; today it's a waste of resources.
--
Steve Langasek
On Thu, Nov 17, 2005 at 01:41:31PM +0100, Frank Küster wrote:
Steve Langasek [EMAIL PROTECTED] wrote:
No: there is nothing proper about rejecting mail from a host that you
have
configured to forward mail for you.
Nearly all of this mail flow is invalid in one way or another
being error output that can be
used for debugging a test failure.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org
libxpm4 libxp6 libxt6
libxmu6 libxi6 libsm6 xlibs
Given that I can remove xlibs from my system and not take any of these other
libs along, this looks like a false positive (probably as a result of the
many or'ed deps on xlibs).
Cheers,
--
Steve Langasek Give me a lever long enough
at this point.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
/share/pkg should be shipped in package
pkg-data. (I misread this the first time, too. :)
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http
?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
On Sun, Nov 20, 2005 at 11:50:55PM +, Joerg Sommer wrote:
Steve Langasek [EMAIL PROTECTED] wrote:
On Sun, Nov 20, 2005 at 10:23:58AM +, Joerg Sommer wrote:
I've got a bug report (#336527) my package bootchart-view do not work
with j2re1.3. But j2re1.3 is not in Debian. Can I set
for versioned -dev packages (e.g.
Thomas Viehmann's precedent, Junichi's libpkg-guide),
No, actually, there are vocal *proponents* of versioned -dev packages.
That's not the same thing as broad consensus.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian
(and one is in the works) so that auric
isn't doing double-duty as a porter machine and buildd.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
of just working on getting amd64 into the archive?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
would have an
official message saying so. Why do we have the reputation of being so
secure?
It's an elaborate hoax we put together in order to see how you would react
when you found out it wasn't true.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian
source package.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital
On Thu, Nov 24, 2005 at 01:25:07AM +0100, Henning Makholm wrote:
Scripsit Steve Langasek [EMAIL PROTECTED]
* Don't use other *-config tools.
While many libraries these days use pkg-config, there are also other
libs which ship their own tools for querying library and header include
paths
On Thu, Nov 24, 2005 at 03:12:46PM +0100, Daniel Schepler wrote:
Le Jeudi 24 Novembre 2005 14:43, Peter Eisentraut a écrit :
Steve Langasek wrote:
* Use Debian's libtool.
I took one affected package (kmldonkey) from your list, relibtoolized
it as described, and rebuilt it, which failed
is completely unrealistic.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
by the time etch releases. If we can survive
this, I don't think that putting a mailing list address in a changelog
(wrong though I think it is) would be grounds for delaying the release or
removing the package from the release (the definition of RC).
--
Steve Langasek Give me a lever
On Fri, Nov 25, 2005 at 02:57:36PM +0100, Goswin von Brederlow wrote:
Steve Langasek [EMAIL PROTECTED] writes:
On Thu, Nov 24, 2005 at 07:17:06PM +0100, Goswin von Brederlow wrote:
That's easy: you trust the Packages file to be correct when using apt,
and it's not verified at all by per
, though in the short
term doing it per binary package means less confusing noise.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
is being
renamed *only* because of the C++ ABI change, being consistent is important
because there way be other packages in the wild named libatlas-cpp-0.6-0c2
which *aren't* using the final mt allocator ABI.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
On Tue, Nov 29, 2005 at 11:38:32AM +0100, Stephan Hermann wrote:
Hi Ming, Steve, others,
On Tuesday 29 November 2005 11:03, Steve Langasek wrote:
On Mon, Nov 28, 2005 at 10:09:00AM -0600, Ming Hua wrote:
On Tue, Nov 15, 2005 at 06:28:05AM +0100, Matthias Klose wrote:
* Rename
to be around for a while, though, for my part I think it's
worthwhile to get the package name consistent across distros where possible;
and in that case, the c2a name should be preferred since that's the name
specified in the published transition plan.
Cheers,
--
Steve Langasek
, plus a shell texlive package depending on it?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description
with debian in them with a fairly high degree of confidence that
upstream won't collide with them.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
On Sat, Dec 03, 2005 at 10:16:38AM +0100, Mike Hommey wrote:
On Sat, Dec 03, 2005 at 12:28:36AM -0800, Steve Langasek [EMAIL PROTECTED]
wrote:
On Sat, Dec 03, 2005 at 08:58:45AM +0100, Mike Hommey wrote:
So my idea is the following :
- First, I want to provide the libs
,
it probably comes from SDL itself; if you have -lartsc hard-coded in the
non-auto-generated Makefile (or Makefile.in, Makefile.am...), it's that
package's problem.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can
if the
problem description is pile of maybe-failed packages.
Wonderful. Nice to see that you think P-a-s entries are somebody else's
problem that should be handled centrally.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I
On Tue, Dec 06, 2005 at 11:03:40AM +0100, Thiemo Seufer wrote:
Steve Langasek wrote:
[snip]
So those should get added to P-a-s instead.
Well, but that'd be something for the buildd-admin to collect.
(Or maintainers of the packages, but that doesn't seem to fashionable
nowadays
Just because it's only built for these archs now doesn't mean this has to be
true long-term.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
obvious (and account for the majority of failures, as it
should be).
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org
On Tue, Dec 06, 2005 at 02:33:34PM +0100, Thiemo Seufer wrote:
Steve Langasek wrote:
[snip]
-grub2: !hppa !ia64 m68k#
bootloader
+grub2: !hppa !ia64 !m68k !alpha !mips !mipsel !s390 !sparc #
bootloader for i386/powerpc
On Wed, Dec 07, 2005 at 04:48:24PM -0600, Bill Allombert wrote:
On Tue, Dec 06, 2005 at 01:14:00AM -0800, Steve Langasek wrote:
Saying that's the buildd admin's job about tasks that don't *need* to be
done by the buildd admin is a pretty effective way of encouraging the
problems
c688e5da5ee3aa6a1b2377545d97a4e1 317340 pcsx_1.6df.orig.tar.gz
006f2f71b0dcc24ec2c76821504f03ec 2540 pcsx_1.6df-1.diff.gz
wanna-build already filters the Architecture field of sources.
No, it does not. It goes to the buildds with every sourceful upload, and
fails when sbuild checks the architecture list.
--
Steve
maintenance and buildd
administration.
What problems are there today with buildd administration, please?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
On Thu, Dec 08, 2005 at 01:52:51PM +0100, Goswin von Brederlow wrote:
Steve Langasek [EMAIL PROTECTED] writes:
On Thu, Dec 08, 2005 at 10:41:51AM +0100, Goswin von Brederlow wrote:
[EMAIL PROTECTED] (Aaron M. Ucko) writes:
Thomas Viehmann [EMAIL PROTECTED] writes:
+pcsx: i386
-- via porter NMU if necessary.
So as you have the list of these packages, as a porter you can proceed with
figuring out which of the two categories each falls into, and take the
necessary action without worrying about the Failed state, yes?
Cheers,
--
Steve Langasek Give me
On Sun, Dec 11, 2005 at 02:38:35PM +0100, Jeroen van Wolffelaar wrote:
On Sun, Dec 11, 2005 at 12:35:26AM -0800, Steve Langasek wrote:
On Sat, Dec 10, 2005 at 06:53:47AM -0800, Blars Blarson wrote:
FAILED
But FAILED is an advisory state anyway; it doesn't directly benefit the
port
On Sun, Dec 11, 2005 at 08:52:04AM -0800, Russ Allbery wrote:
Steve Langasek [EMAIL PROTECTED] writes:
On Sat, Dec 10, 2005 at 06:53:47AM -0800, Blars Blarson wrote:
Again: what can I do with such a list? See the list below.
Changes to the P-a-s list should be sent to the contacts listed
On Sun, Dec 11, 2005 at 11:17:51AM -0500, Benjamin Mesing wrote:
today I've tried to address the issue raised by Steve Langasek regarding
inherited dependencies [1].
As I am unexperienced with the whole linking and dependency process I
was not able to deduce the consequences
On Sun, Dec 11, 2005 at 11:17:51AM -0500, Benjamin Mesing wrote:
today I've tried to address the issue raised by Steve Langasek regarding
inherited dependencies [1].
As I am unexperienced with the whole linking and dependency process I
was not able to deduce the consequences
documentation of maintainer policies that
indicates that one must clear an RC bug as soon as possible, for
unreleased packages, to push them into testing before the maintainer
thinks they are ready.
Rather, it seems much more likely that we would want to push such packages
*out* of unstable.
--
Steve
to specify a policy for mounting any particular
filesystem on /run, but merely mount /run early iff it's present in
/etc/fstab and leave the implementation details to the local admin.)
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer
On Sun, Dec 18, 2005 at 03:57:35AM +, Matthew Garrett wrote:
Steve Langasek [EMAIL PROTECTED] wrote:
The principle is the same: /lib is used only for the minimal system required
for booting, and everything else should go in /usr/lib. /run should be used
only for junk that needs
On Sun, Dec 18, 2005 at 04:50:33AM +, Matthew Garrett wrote:
Steve Langasek [EMAIL PROTECTED] wrote:
On Sun, Dec 18, 2005 at 03:57:35AM +, Matthew Garrett wrote:
Under Linux, can't all of this be done with mount --move anyway? I'm not
convinced that we actually need a /run any more
or not it's in the release notes.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital
On Mon, Dec 19, 2005 at 09:13:01AM +0100, Marco d'Itri wrote:
On Dec 19, Steve Langasek [EMAIL PROTECTED] wrote:
Is there some reason we should be unable to provide a smooth upgrade path
for users of sarge? Having your network devices scramble themselves on
reboot is a Big Deal, whether
On Sun, Dec 18, 2005 at 01:26:45PM +0100, [EMAIL PROTECTED] wrote:
Steve Langasek wrote:
(We also shouldn't need to specify a policy for mounting any
particular filesystem on /run, but merely mount /run early iff it's
present in /etc/fstab and leave the implementation details
On Sat, Dec 17, 2005 at 10:13:35PM -0600, Peter Samuelson wrote:
[Steve Langasek]
Given the reality of /lib, is there any need for a separate /usr/lib?
The principle is the same: /lib is used only for the minimal system
required for booting, and everything else should go in /usr/lib
On Mon, Dec 19, 2005 at 12:23:00PM +0100, Thomas Hood wrote:
Steve Langasek wrote:
Are there really any init scripts that need to write out data prior
to checkroot.sh (the point at which /run would be writeable by
default on the rootfs)?
Well, it would be nice if fsck logs could be stored
, including the call for a more
proactive QA team.
Cheers,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
in the environment which prevents debconf-using children
from successfully restarting the frontend. STOP should only be used when
you need to force-kill the frontend because of other processes that will
otherwise leave dangling file descriptors open to it after your scripts
exit.
--
Steve Langasek
have abuse headers to track, or (probably easier)
just blacklist the domain...
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http
NMUs are encouraged
-- you don't need an RC bug as an excuse to fix a package for your
architecture! Wouldn't it be great to have zero bugs on that page two
months from now? :)
Thanks,
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer
.
Comments and other ideas are welcome.
What will provide this for systems upgraded from sarge?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
manually install some additional software is not.
Given the sort of solution that needs to be implemented here to address the
second, I don't see any reason why the first should be acceptable either.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer
other than swap vi alternative priorities and swap important-optional
priorities?
Why swap the vi alternative priorities?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
step 2) happen.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
On Tue, Jan 03, 2006 at 08:58:49AM -0600, Steve Greenland wrote:
On 03-Jan-06, 00:46 (CST), Steve Langasek [EMAIL PROTECTED] wrote:
On Mon, Jan 02, 2006 at 11:47:05AM -0600, Steve Greenland wrote:
If you agree with the change, do Stefano and I need to do anything
other than swap vi
that the majority of the work involved
falls into the automatable category.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http
.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
that same
period.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org/
signature.asc
Description: Digital signature
packages already support
ephemeral /var/run.
BUT, if you do, don't ship /var/run inside the deb.
Why?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
regarding how to cope with a
key compromise revocation, though.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED] http://www.debian.org
On Thu, Jan 05, 2006 at 04:43:13PM -0800, Thomas Bushnell BSG wrote:
Steve Langasek [EMAIL PROTECTED] writes:
AIUI, Ubuntu isn't rotating their archive keys -- something else that their
centralized model more readily affords them.
I'm a little confused about why we do rotate the keys. I'm
On Thu, Jan 05, 2006 at 09:07:58AM -0200, Henrique de Moraes Holschuh wrote:
On Wed, 04 Jan 2006, Steve Langasek wrote:
On Wed, Jan 04, 2006 at 10:43:57PM -0200, Henrique de Moraes Holschuh wrote:
initscripts co-maintainer hat on
Do it. We are *heavly* considering support for ephemeral
compromised both merkel and your network
(pushing matching, invalid keys to you via merkel and a MITM of
http://ftp-master.debian.org), and trusting that the propagation from
ftp-master to merkel is secure.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian
On Fri, Jan 06, 2006 at 09:44:35AM -0200, Henrique de Moraes Holschuh wrote:
On Thu, 05 Jan 2006, Steve Langasek wrote:
BUT, if you do, don't ship /var/run inside the deb.
Why?
Because:
1. It will go away on reboot and if your service isn't enabled, it won't
be re-created
On Fri, Jan 06, 2006 at 02:04:49PM +0100, Florian Weimer wrote:
* Steve Langasek:
I would encourage you to log into merkel and verify, directly and
securely, the key at /org/ftp.debian.org/web/ziyi_key_2006.asc; sign it; and
upload your signature to the public keyservers as well, if you
is to check for the
executable and defer configuration to the postinst if it's not yet unpacked.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
[EMAIL PROTECTED
1 - 100 of 3867 matches
Mail list logo
