Re: Python rexec and Bastion flaws

2003-01-21 Thread Carey Evans
Martin Schulze wrote: I'd rather know about the vulnerability (and maybe doko is able to implement a fix) than to blindly castrate software. Theo d.R. already taught us that blindly releasing updates are not good. Here's some relevant links for the bugs: Deleting __builtins__:

Re: python-central 0.4

2002-09-30 Thread Carey Evans
Donovan Baarda wrote: But this is redundant... if the package is installed, the corresponding *.py files _should_ be unpacked. How is testing for the existance of a file any better indication than testing for installation of the package? True... I think I'll try to blame my flawed argument on lack

Re: (2nd try) Final draft of Python Policy (hopefully ;-)

2001-10-28 Thread Carey Evans
to conflict with packages that depend on python-base. I think the first `python-base' needs to be removed. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Ha ha! Puny receptacle!

Re: Debian Python policy Upgrade Path (draft/proposal)

2001-10-21 Thread Carey Evans
. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Ha ha! Puny receptacle!

Re: Debian Python policy Upgrade Path (draft/proposal)

2001-10-20 Thread Carey Evans
will still be broken. For that matter, just getting everyone using testing to transition over to the new versions properly will be nearly impossible unless there are appropriate conflicts and dependencies to make sure that only working combinations of packages can be installed. -- Carey Evans

Re: Debian Python policy Upgrade Path (draft/proposal)

2001-10-19 Thread Carey Evans
and 2.2, =2.9 and 2.10, etc. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Ha ha! Puny receptacle!

Python 2.1 crypto

2001-10-19 Thread Carey Evans
I notice that python2.1-base depends on libssl0.9.6. I haven't been following the developments in Debian's crypto policy, but doesn't this mean that python2.1-base should have been uploaded to non-US? -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Ha ha

Re: Debian Python Policy [draft]

2001-10-01 Thread Carey Evans
Neil Schemenauer [EMAIL PROTECTED] writes: spam should depend on python not python-2.1. In my original example, spam embeds libpython2.1.so. It would make sense for this to mean it depends on python-api-2.1, though this isn't what the current shlibs file says. -- Carey Evans http

Re: Experimental Python packages

2001-09-06 Thread Carey Evans
that use Python depend on? Presumably python if the maintainer feels optimistic, otherwise python2.1-base. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ You think you know... what's to come... what you are.

Re: Proposal for transition--FRD

2001-09-05 Thread Carey Evans
hardship. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ You think you know... what's to come... what you are.

Re: Proposal for transition--FRD

2001-09-05 Thread Carey Evans
, and it looks like it used to be a real package. Try apt-cache showpkg python. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ You think you know... what's to come... what you are.

Re: Status report on python2 transition (possible solution)

2001-07-14 Thread Carey Evans
. ;) -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Status report on python2 transition (possible solution)

2001-07-13 Thread Carey Evans
an active Debian maintainer or any kind of authority. I'm not really talking just to you, but generally; by all means keep coming up with ideas to improve the Debian Python packages, but please don't keep Python 2.1 out of Debian 3.0! -- Carey Evans http://home.clear.net.nz/pages/c.evans

Re: Status report on python2 transition (possible solution)

2001-07-13 Thread Carey Evans
(), looking in $PATH if necessary. os.system isn't the best in terms of signal handling and return values; you'd probably want os.execv. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Status report on python2 transition

2001-07-12 Thread Carey Evans
. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Status report on python2 transition

2001-07-12 Thread Carey Evans
. As the language changes, adding keywords like yield and div, etc., expecting full forwards compatibility might be a little unreasonable. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Status report on python2 transition

2001-07-12 Thread Carey Evans
upload between releases anyway. IMO, the minimal effort required here isn't worth the black magic. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: /usr/lib vs. /usr/share

2001-07-06 Thread Carey Evans
in sys.path. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Status report on python2 transition

2001-07-06 Thread Carey Evans
a simple depends on a (maybe virtual) package, instead of a versioned depends. (Does dpkg support versioned virtual packages yet?) -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Status report on python2 transition

2001-07-04 Thread Carey Evans
Essential: yes like parts of Perl. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss the humorous conclusion.

Re: Python 2.1 out

2001-04-19 Thread Carey Evans
Sean 'Shaleh' Perry [EMAIL PROTECTED] writes: last I checked it only helped derivatives of python, not python itself. AIUI, the point is that Python 2.1 is a derivative of CNRI Python 1.6.1. -- Carey Evans http://home.clear.net.nz/pages/c.evans/ Quiet, you'll miss