Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Casey Allen Shobe
On Thursday 21 July 2005 00:32, Mike Frysinger wrote: > how is that not common operation ? SMTP AUTH is a pretty > critical feature imho It's not a supported on included part of qmail, which has not been modified in a number of years. The functionality is provided only via unofficial patches.

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Robin H. Johnson
On Thu, Jul 21, 2005 at 12:28:31AM +, Casey Allen Shobe wrote: > > chsh has also been vetted for security problems a LOT more > > closely than vchkpw. I don't trust vchkpw with suid-root. > Then use suidctl? I do on my production machines. > > The postfix maintainers were asked about it once b

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Mike Frysinger
On Wednesday 20 July 2005 03:04 am, Robin H. Johnson wrote: > On Wed, Jul 20, 2005 at 05:37:19AM +, Casey Allen Shobe wrote: > > I can confirm that - bincimap and qmail-pop3d run as root, so the > > setuid bit is not necessary. I believe this is also the case for > > dovecot 1.0 beta releases,

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Casey Allen Shobe
On Wednesday 20 July 2005 07:04, Robin H. Johnson wrote: > For common operation of qmail-smtpd, vchkpw is NOT required. SMTP > AUTH is the only reason qmail-smtpd would call vchkpw. True. Sorry for not realizing that. > chsh has also been vetted for security problems a LOT more > closely than vc

Re: [gentoo-dev] New Dev Bjarke istrup Pedersen (Gurligebis)

2005-07-20 Thread Bjarke Istrup Pedersen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sune Kloppenborg Jeppesen skrev: > On Wednesday 20 July 2005 20:21, Jochen Maes wrote: > >> Hey all, >> >> >> bjarke, our new dev from the vast lands off Denmark, has been >> added to the team! > > Another member for the Danish conspiracy:-) > > Welc

Re: [gentoo-dev] /etc/profile.d/

2005-07-20 Thread Herbert Fischer
Ops... sorry. On 7/20/05, Mike Frysinger <[EMAIL PROTECTED]> wrote: > On Wednesday 20 July 2005 06:46 pm, Herbert Fischer wrote: > > Doing a grep on portage I found this another package with profile.d > > things: dev-util/aegis > > if you read back about 8 e-mails in this thread you'll see i note

Re: [gentoo-dev] /etc/profile.d/

2005-07-20 Thread Mike Frysinger
On Wednesday 20 July 2005 06:46 pm, Herbert Fischer wrote: > Doing a grep on portage I found this another package with profile.d > things: dev-util/aegis if you read back about 8 e-mails in this thread you'll see i noted this already but it should be ok as the package looks like it's removing the

Re: [gentoo-dev] /etc/profile.d/

2005-07-20 Thread Herbert Fischer
Great! Doing a grep on portage I found this another package with profile.d things: dev-util/aegis Thanks! On 7/20/05, Mike Frysinger <[EMAIL PROTECTED]> wrote: > On Wednesday 20 July 2005 03:27 pm, Herbert Fischer wrote: > > So... profile.d have future on Gentoo? If yes, any idea on when this >

Re: [gentoo-dev] net community servers, in what category?

2005-07-20 Thread Christian Parpart
On Thursday 21 July 2005 00:09, Chris Gianelloni wrote: > So you're splitting this into separate ebuilds, or it comes that way > from upstream? Well, upstream is me, however, the package gets released in a big tarball containing a global level configure script that can handle a all-at-once insta

Re: [gentoo-dev] upgrade's and rc-scripts

2005-07-20 Thread Brian D. Harring
On Wed, Jul 20, 2005 at 06:10:31PM -0400, Chris Gianelloni wrote: > On Wed, 2005-07-20 at 16:54 -0500, Brian D. Harring wrote: > > Out of curiousity, has any put any thought into some automated method > > or hook for allowing restarting of rc-scripts on upgrade/re-emerge of > > a package? > > >

Re: [gentoo-dev] upgrade's and rc-scripts

2005-07-20 Thread Mike Frysinger
On Wednesday 20 July 2005 05:54 pm, Brian D. Harring wrote: > Out of curiousity, has any put any thought into some automated method > or hook for allowing restarting of rc-scripts on upgrade/re-emerge of > a package? such a completely automated thing is a bad idea ... detecting and warning though

Re: [gentoo-dev] upgrade's and rc-scripts

2005-07-20 Thread Chris Gianelloni
On Wed, 2005-07-20 at 16:54 -0500, Brian D. Harring wrote: > Out of curiousity, has any put any thought into some automated method > or hook for allowing restarting of rc-scripts on upgrade/re-emerge of > a package? > > Other question is if any such hook is even needed. > So... thoughts? I don'

Re: [gentoo-dev] net community servers, in what category?

2005-07-20 Thread Chris Gianelloni
On Wed, 2005-07-20 at 23:58 +0200, Christian Parpart wrote: > Hi all, > > I wanted to create some ebuilds for at least one community server > (represented > by a bunch of ebuilds); > > So, I was looking for the right category for all of those ebuilds that belong > to this software, however, I

Re: [gentoo-dev] net community servers, in what category?

2005-07-20 Thread Olivier Crete
On Wed, 2005-20-07 at 23:58 +0200, Christian Parpart wrote: > community-libs/libyacs > community-server/yacsd > community-server/yacs-meta > So, finally, in what category could those packages be placed in? What about net-libs and net-misc ? -- Olivier Crête [EMAIL PROTECTED] Gentoo Developer x8

Re: [gentoo-dev] net community servers, in what category?

2005-07-20 Thread Christian Parpart
On Wednesday 20 July 2005 23:58, Christian Parpart wrote: > dev-libs/libyacsutil > - the support library (client/server) > community-libs/libyacs > - the YaCS core framework library (server) > community-server/yacsd > - the UNIX daemon process finally serving the community > app-admin/y

[gentoo-dev] upgrade's and rc-scripts

2005-07-20 Thread Brian D. Harring
Out of curiousity, has any put any thought into some automated method or hook for allowing restarting of rc-scripts on upgrade/re-emerge of a package? Other question is if any such hook is even needed. So... thoughts? I don't really have any input on it, aside from I'd like to gather what peop

[gentoo-dev] net community servers, in what category?

2005-07-20 Thread Christian Parpart
Hi all, I wanted to create some ebuilds for at least one community server (represented by a bunch of ebuilds); So, I was looking for the right category for all of those ebuilds that belong to this software, however, I didn't find a proper category for each of them at all :( The software I am

Re: [gentoo-dev] New Dev Bjarke istrup Pedersen (Gurligebis)

2005-07-20 Thread Sune Kloppenborg Jeppesen
On Wednesday 20 July 2005 20:21, Jochen Maes wrote: > Hey all, > > > bjarke, our new dev from the vast lands off Denmark, has been added to > the team! Another member for the Danish conspiracy:-) Welcome on board Bjarke! -- Sune Kloppenborg Jeppesen Gentoo Linux Security Team pgpUiIRELDSNt.

Re: [gentoo-dev] /etc/profile.d/

2005-07-20 Thread Mike Frysinger
On Wednesday 20 July 2005 03:27 pm, Herbert Fischer wrote: > So... profile.d have future on Gentoo? If yes, any idea on when this > will become part of baselayout. yes, we will add it when i can get all remaining packages cleared of profile.d we have bash-completion and tcsh left -mike -- gentoo

Re: [gentoo-dev] /etc/profile.d/

2005-07-20 Thread Herbert Fischer
So... profile.d have future on Gentoo? If yes, any idea on when this will become part of baselayout. Please, I'm not compelling... just curious. On 7/18/05, Donnie Berkholz <[EMAIL PROTECTED]> wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Mike Frysinger wrote: > | On Monday 18 July

Re: [gentoo-dev] New Dev Bjarke istrup Pedersen (Gurligebis)

2005-07-20 Thread Bjarke Istrup Pedersen
Jochen Maes skrev: > Hey all, > > > bjarke, our new dev from the vast lands off Denmark, has been added to > the team! > He's been working on the bugday website and has been helping out a lot > for bugday. > > his intro: > "I'm a 20 year old guy from Denmark studying software development. > I like

[gentoo-dev] New Dev Bjarke istrup Pedersen (Gurligebis)

2005-07-20 Thread Jochen Maes
Hey all, bjarke, our new dev from the vast lands off Denmark, has been added to the team! He's been working on the bugday website and has been helping out a lot for bugday. his intro: "I'm a 20 year old guy from Denmark studying software development. I like spending my time with my friends a

Re: [gentoo-dev] Realistic AT goals [WAS] Re: Bugzilla isn't just for bugs [reminder]

2005-07-20 Thread Jan Kundrát
Robin H. Johnson wrote: > On Wed, Jul 20, 2005 at 10:32:29AM -0700, Donnie Berkholz wrote: > >>Duncan wrote: >>| The AT guidelines (available for amd64 ATs here: >>| http://www.gentoo.org/proj/en/base/amd64/tests/index.xml ) specifically >>| mention testing "every conceivable permutation", >>That'

Re: [gentoo-dev] Realistic AT goals [WAS] Re: Bugzilla isn't just for bugs [reminder]

2005-07-20 Thread Robin H. Johnson
On Wed, Jul 20, 2005 at 10:32:29AM -0700, Donnie Berkholz wrote: > Duncan wrote: > | The AT guidelines (available for amd64 ATs here: > | http://www.gentoo.org/proj/en/base/amd64/tests/index.xml ) specifically > | mention testing "every conceivable permutation", > That's an absolute joke for reason

Re: [gentoo-dev] Realistic AT goals [WAS] Re: Bugzilla isn't just for bugs [reminder]

2005-07-20 Thread Donnie Berkholz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Duncan wrote: | The AT guidelines (available for amd64 ATs here: | http://www.gentoo.org/proj/en/base/amd64/tests/index.xml ) specifically | mention testing "every conceivable permutation", That's an absolute joke for reasonably large packages with s

Re: [gentoo-dev] QA feedback

2005-07-20 Thread Chris Gianelloni
On Wed, 2005-07-20 at 01:43 -0400, Mike Frysinger wrote: > > This sounds like a request for the QA team. I tend to stay away > > from most ~arch packages simply because most of our systems are > > live production servers, but I'd be happy to test-drive new ebuilds > > of vpopmail if it would help

[gentoo-dev] Re: Bugzilla isn't just for bugs [reminder]

2005-07-20 Thread Duncan
Michael Cummings posted <[EMAIL PROTECTED]>, excerpted below, on Wed, 20 Jul 2005 07:59:42 -0400: > I can't speak for other developers or herd maintainers, but if you have > been using a perl package that is ~arch masked and think its as good as it > gets, please file a 'bug' on bugzilla saying s

[gentoo-dev] Bugzilla isn't just for bugs [reminder]

2005-07-20 Thread Michael Cummings
Recent thread on vpopmail had a few developers make this comment (quoting robbat2): From: <[EMAIL PROTECTED]> To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] VPopmail - SUID vchkpw >In the absence of a proper QA team, users are some of the best >large-scale QA available. All I'm asking

[gentoo-dev] Re: VPopmail - SUID vchkpw

2005-07-20 Thread Duncan
Robin H. Johnson posted <[EMAIL PROTECTED]>, excerpted below, on Wed, 20 Jul 2005 00:04:57 -0700: >> > And as I've mentioned before I'd like MORE reports of packages working >> > well before they are moved to stable arch. Without those stable >> > working reports I don't have any means to judge j

[gentoo-dev] Re: Abuse by gentoo developer

2005-07-20 Thread Duncan
Casey Allen Shobe posted <[EMAIL PROTECTED]>, excerpted below, on Wed, 20 Jul 2005 01:32:30 +: > Hello all, I'm sorry to bring this here, but I don't know where else to > take it, and feel that I was treated really unfairly. > > As you know, I recently inquired about ebuild development on th

Re: [gentoo-dev] VPopmail - SUID vchkpw

2005-07-20 Thread Robin H. Johnson
On Wed, Jul 20, 2005 at 05:37:19AM +, Casey Allen Shobe wrote: > > So if this is still a problem in arch, but works in ~arch, you > > SHOULD file a bug report. > Why not just wait for the newer releases to make it to arch? See my note as to why they haven't moved yet, and consider testing them