Re: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-08-16 Thread Russ Allbery
) is very interesting. I've personally learned quite a bit from it, have now introduced reallocarray in my own code, and am planning on introducing strtonum. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ

Re: Standardizing the layout of git packaging repositories

2014-08-15 Thread Russ Allbery
want to be able to check out a git repository and do packaging work and an upload, without having to pull any external artifacts from somewhere else. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org

Re: Standardizing the layout of git packaging repositories

2014-08-15 Thread Russ Allbery
the tarballs in the revision control system is. Never again.) -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https

Re: Reverting to GNOME for jessie's default desktop

2014-08-12 Thread Russ Allbery
USB disk mounting, and do not want to be forced to install that package on my Xfce system. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas

Re: Time to drop debcheck on optional/extra and arch:all?

2014-08-10 Thread Russ Allbery
to restrict which arches list arch-independent packages in their package lists. That would be very nice. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble

Re: Reverting to GNOME for jessie's default desktop

2014-08-10 Thread Russ Allbery
of people use systemd without being fans of, or particularly interested in, GNOME, myself included. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas

Re: Why are the gcc-*-base packages priority:required?

2014-08-08 Thread Russ Allbery
Cyril Brulebois k...@debian.org writes: I'd therefore contact the relevant maintainers to make sure, probably through a bug report asking for a priority downgrade. It looks like the only remaining purpose for gcc-4.9-base is to create the /usr/lib/gcc/arch/4.9.1 symlink? -- Russ Allbery (r

Re: Bug#753589: systemd: missing pre-dependencies for runlevel(8) etc.

2014-08-04 Thread Russ Allbery
about 1.5MB to essential. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87oaw0w5sw

Bug#756947: general: unble to re-enable wifi/bt after hardware or software disable

2014-08-03 Thread Russ Allbery
as the various firmware-* packages. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/874mxtcpjv

Re: Bug#729203: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-07-31 Thread Russ Allbery
updates might represent more work than 100 *really* minor security updates. How is it better to have libav, which does a lot less security bugfixing, in? It's not. However, what was proposed was having *both* of them, not dropping libav in favor of FFmpeg. -- Russ Allbery (r...@debian.org

Re: Bug#729203: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-07-31 Thread Russ Allbery
there's probably another side to the story that hasn't been stated here yet. Based purely on security evaluations by others that I was able to find on the web, FFmpeg appears to be better at the moment than libav on the security front (although libav appears to be trying to catch up). -- Russ Allbery

Re: Bug#729203: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-07-30 Thread Russ Allbery
to FFmpeg as well, but it's not a happy situation to be in. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https

Re: Bug#729203: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-07-29 Thread Russ Allbery
unhelpful attitude towards security patches. And we're still talking about rather fewer security vulnerabilities than this, I believe. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject

Re: Bug#729203: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-07-29 Thread Russ Allbery
to do, but that's a lot of work for them. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org

Re: Bug#729203: [FFmpeg-devel] Reintroducing FFmpeg to Debian

2014-07-29 Thread Russ Allbery
Russ Allbery r...@debian.org writes: Is upstream aware that this is a really bad track record and trying to do something proactive to increase the quality of the code, like comprehensive auditing, or proactive rewrites to use more secure coding practices such as some of the work

Accepted webauth 4.6.1-1 (source i386 all) into unstable, unstable

2014-07-29 Thread Russ Allbery
webauth-tests webauth-utils webauth-weblogin Architecture: source i386 all Version: 4.6.1-1 Distribution: unstable Urgency: medium Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r...@debian.org Description: libapache2-mod-webauth - Apache module for WebAuth authentication libapache2

Re: Bug#756172: ITP: ssh-cron -- cron-like job scheduler than handles ssh key passphrases

2014-07-27 Thread Russ Allbery
. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87egx666gu@windlord.stanford.edu

Re: Bug#756172: ITP: ssh-cron -- cron-like job scheduler than handles ssh key passphrases

2014-07-27 Thread Russ Allbery
Bastian Blank wa...@debian.org writes: On Sun, Jul 27, 2014 at 10:45:37AM -0700, Russ Allbery wrote: Bastian Blank wa...@debian.org writes: We got the advice to always use which with comma and that without comma. Especially for non-native speakers the number of variations with slightly

Re: systemd-sysv/shim in testing

2014-07-27 Thread Russ Allbery
of the maintainers of the relevant packages taken into account. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https

Accepted libafs-pag-perl 1.02-1 (source amd64)

2014-07-27 Thread Russ Allbery
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 27 Jul 2014 17:10:18 -0700 Source: libafs-pag-perl Binary: libafs-pag-perl Architecture: source amd64 Version: 1.02-1 Distribution: unstable Urgency: medium Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r

Re: Let's shrink Packages.xz

2014-07-25 Thread Russ Allbery
corresponds to a package, without the complexity of artificial lumping together of packages that are actually distinct. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe

Re: systemd now appears to be only possible init system in testing

2014-07-25 Thread Russ Allbery
by people's apparent belief that this happening during a major upgrade is some sort of regression. Having those buttons not work after a major component upgrade, until the X session was restarted, has been typical behavior for as long as I've been using Debian with a desktop environment. -- Russ Allbery

Re: systemd now appears to be only possible init system in testing

2014-07-25 Thread Russ Allbery
experience. Ah, *that's* what you're getting at. Yes, while we can argue about severity, I agree that's a regression from the previous state of things. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org

Re: systemd now appears to be only possible init system in testing

2014-07-25 Thread Russ Allbery
Steve Langasek vor...@debian.org writes: On Fri, Jul 25, 2014 at 11:42:16AM -0700, Russ Allbery wrote: I continue to be baffled by people's apparent belief that this happening during a major upgrade is some sort of regression. Having those buttons not work after a major component upgrade

Re: systemd now appears to be only possible init system in testing

2014-07-25 Thread Russ Allbery
the correct exit codes. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87egx9jc0h

Re: systemd now appears to be only possible init system in testing

2014-07-25 Thread Russ Allbery
cgmanager is installed? No, I'm not going to reupload the package to declare an incompatibility with a version of a dependency that was in unstable less than a day before getting fixed. I concur -- not every bug is worth tightening dependencies. -- Russ Allbery (r...@debian.org

Re: systemd now appears to be only possible init system in testing

2014-07-25 Thread Russ Allbery
a look. It does not, at least not the way that you're calling it. If you used --oknodo in a few places, it might be closer, but take a look at /etc/init.d/skeleton and look at the exit status remapping that it does. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle

Re: all modern desktops need systemd, either send patches or life with it (Re: systemd now appears to be only possible init system in testing)

2014-07-23 Thread Russ Allbery
users to be logged in before it starts the system? No, of course not. The tool that you're using isn't only for use during early boot, and you're using it in a way that is incorrect for use during early boot. The solution is to use the tool correctly. -- Russ Allbery (r...@debian.org

Re: all modern desktops need systemd, either send patches or life with it (Re: systemd now appears to be only possible init system in testing)

2014-07-23 Thread Russ Allbery
Vincent Lefevre vinc...@vinc17.net writes: On 2014-07-22 19:54:10 -0700, Russ Allbery wrote: logind is also not mandatory in Debian now. It's just required, upstream, by all the major desktop environments. Not just by all the major desktop environments. It is also needed by hplip via

Re: all modern desktops need systemd, either send patches or life with it (Re: systemd now appears to be only possible init system in testing)

2014-07-22 Thread Russ Allbery
with a tty. Take a look at systemd.exec(5) at the TTY* options for the systemd unit file. I suspect you need to write a unit file corresponding to your init script that runs systemd-ask-password and uses TTYPath=/dev/tty1. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle

Re: all modern desktops need systemd, either send patches or life with it (Re: systemd now appears to be only possible init system in testing)

2014-07-22 Thread Russ Allbery
. I think one point Holger was making is that *desktop environments* are not mandatory in Debian. I have lots of Debian systems, including my desktop, that don't run any desktop environment at all. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE

Re: Let's shrink Packages.xz

2014-07-16 Thread Russ Allbery
packages while not making the problem any worse than it is today. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https

Re: let missing-debian-source-format lintian tag be a warning!

2014-07-16 Thread Russ Allbery
merging Git branches and using single-debian-patch, so I'm not sure if I'll ever get to the point where I do this with all of my packages. But it has more merits than I saw initially. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian

Re: Bug#754513: ITP: libressl -- SSL library, forked from OpenSSL

2014-07-16 Thread Russ Allbery
to have a reliable kernel interface for getting randomness rather than relying on proper chroot configuration. I'm not sure sysctl should be that mechanism, but I'm quite sympathetic to the LibreSSL developers here. Relying on a device being present in a chroot seems rather dubious. -- Russ Allbery (r

Re: Bug#754513: ITP: libressl -- SSL library, forked from OpenSSL

2014-07-16 Thread Russ Allbery
Ben Hutchings b...@decadent.org.uk writes: On Wed, 2014-07-16 at 12:47 -0700, Russ Allbery wrote: It would be nice to have a reliable kernel interface for getting randomness rather than relying on proper chroot configuration. There is such an interface. It happens to be a char device

Accepted libnet-duo-perl 1.00-1 (source all)

2014-07-16 Thread Russ Allbery
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Fri, 11 Jul 2014 13:01:30 -0700 Source: libnet-duo-perl Binary: libnet-duo-perl Architecture: source all Version: 1.00-1 Distribution: unstable Urgency: medium Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r

Re: let missing-debian-source-format lintian tag be a warning!

2014-07-15 Thread Russ Allbery
to control and interpret debian/patches. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org

Re: Solutions for the Apache upgrade hell

2014-07-14 Thread Russ Allbery
not particularly hard to turn this rune into a real script with error checking, but it would be nice to have this functionality built into apt somehow, but to not have to do it at the same time as the upgrade due to issues such as those on this thread. -- Russ Allbery (r...@debian.org

Re: Let's shrink Packages.xz

2014-07-14 Thread Russ Allbery
compatibility; otherwise, it's the obvious one to drop. If we were going to keep only one, we should keep SHA256, as that's the most robust from a cryptographic standpoint at this point (SHA-3 may get there, but is still too new), but obviously all the clients have to support that. -- Russ Allbery

Re: Let's shrink Packages.xz

2014-07-14 Thread Russ Allbery
Peter Palfrader wea...@debian.org writes: On Mon, 14 Jul 2014, Russ Allbery wrote: Using multiple hashes gives us some theoretical robustness against a break in one of the hash functions provided that all clients check all the hashes and the hashes would fail independently (which is likely

Re: Let's shrink Packages.xz

2014-07-14 Thread Russ Allbery
in depth argument, coupled with the argument that the special construction of a file to create a collision for one hash function may be incompatible with the special construction of a file required to create a collision with the other hash function. -- Russ Allbery (r...@debian.org

Re: Bug#754513: ITP: libressl -- SSL library, forked from OpenSSL

2014-07-14 Thread Russ Allbery
(the situation Russ Allbery described). I'm not sure that I understand your argument. In fact, this seems like a rather strong argument *against* using LibreSSL. Currently, GPL software can link with BSD software without any trouble. It can't link with OpenSSL software without a license

Re: Let's shrink Packages.xz

2014-07-14 Thread Russ Allbery
yes, other than backward compatibility, I see no reason to keep any hash other than the hash we're also using for the GnuPG signature. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject

Re: Bug#754513: ITP: libressl -- SSL library, forked from OpenSSL

2014-07-12 Thread Russ Allbery
amount of building key packages with the other implementation (like we do now with libpam-heimdal and libsasl2-modules-gssapi-heimdal), but that's both tricky and quite limited. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel

Re: Bug#754551: ITP: node-ms -- milliseconds conversion utility

2014-07-12 Thread Russ Allbery
. Although if someone came up with a really elegant and scalable solution to merging multiple upstream releases into a Debian source package, that may work too. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ

Re: Bug#754551: ITP: node-ms -- milliseconds conversion utility

2014-07-12 Thread Russ Allbery
different, as I understand it, because our actual upstream is TeXLive, which is already doing that merging for us and provides us with a clear upstream to use. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ

Re: Bootstrapping also increases the package count

2014-07-12 Thread Russ Allbery
Johannes Schauer j.scha...@email.de writes: Quoting Russ Allbery (2014-07-12 19:19:16) I'd really like to see us solve this problem by figuring out a better metadata distribution system (and IIRC some progress was made on that front recently) than in making life more difficult for packagers

Re: Bug#754513: ITP: libressl -- SSL library, forked from OpenSSL

2014-07-12 Thread Russ Allbery
John D. Hendrickson and Sara Darnell johnandsa...@cox.net writes: Russ Allbery wrote: OpenSSL ABI implementation to another is something of an all-or-nothing affair. You can do a small amount of building key packages with the other ? rhetorically i'm unsure there's a problem. I have some

Bug#754503: ITP: libnet-duo-perl -- Perl API for Duo multifactor authentication service

2014-07-11 Thread Russ Allbery
Package: wnpp Severity: wishlist Owner: Russ Allbery r...@debian.org * Package name: libnet-duo-perl Version : 1.00 Upstream Author : Russ Allbery r...@cpan.org * URL : http://www.eyrie.org/~eagle/software/net-duo/ * License : Expat Programming Lang: Perl

Re: Proposal to avoid executable naming conflicts

2014-07-08 Thread Russ Allbery
think that point was relevant to both git and node. (I made this argument at the time, with respect to node, in the TC, so this is probably not a new viewpoint to folks.) -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ

Re: Bug#752075: daemontools-run: Add systemd support

2014-07-04 Thread Russ Allbery
inferior to what's available with very little additional work using the native configuration format, and the regular inittab jobs are provided by regularly-configured services. Yes, that is a disruptive change for people who were using inittab to run other things. -- Russ Allbery (r...@debian.org

Re: RFH: Re: Bug#752075: daemontools-run: Add systemd support

2014-07-04 Thread Russ Allbery
that. There's no reason to switch away from inittab for sysvinit. For systemd, a unit file can easily do everything that you would get from inittab. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org

Re: systemd is here to stay, get over it now

2014-07-04 Thread Russ Allbery
and confirmed that the bug was already fixed and closed it accordingly. You have a legitimate cause for complaint, which I think has already been heard and registered, that the response was too terse and that you didn't realize this is what the response meant, but the problem was not dismissed. -- Russ

Re: systemd is here to stay, get over it now

2014-07-03 Thread Russ Allbery
with. If you feel that's an appropriate political response, more power to you, but you are going to find it very, very hard to entirely avoid Red-Hat-developed free software in the Linux ecosystem. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE

Re: sysvinit is still here, and here to stay for jessie (was Re: systemd is here to stay, get over it now)

2014-07-03 Thread Russ Allbery
, and has been for quite some time. If you haven't noticed, I suspect that you don't have as high of a sensitivity to things breaking than you might think. Or, at least, things you care about have not broken. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle

Accepted remctl 3.9-1 (source i386)

2014-07-02 Thread Russ Allbery
Urgency: medium Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r...@debian.org Description: libnet-remctl-perl - Perl client for Kerberos-authenticated command execution libremctl-dev - Development files for Kerberos-authenticated command execution libremctl1 - Library

Accepted webauth 4.6.0-4 (source i386 all)

2014-07-02 Thread Russ Allbery
webauth-tests webauth-utils webauth-weblogin Architecture: source i386 all Version: 4.6.0-4 Distribution: unstable Urgency: medium Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r...@debian.org Description: libapache2-mod-webauth - Apache module for WebAuth authentication libapache2

Re: Sources licensed under PHP License and not being PHP are not distributable

2014-07-01 Thread Russ Allbery
make a pretty strong argument that estoppel applies to any attempt to enforce the license literally at this point. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble

Re: How to avoid stealth installation of systemd?

2014-07-01 Thread Russ Allbery
solves a whole ton of important problems that are quite interesting to servers. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Re: How to avoid stealth installation of systemd?

2014-07-01 Thread Russ Allbery
unimportant that it wasn't worth my time to write up a bug report. I expect to have to reboot the system cleanly after a variety of types of upgrades (kernel upgrades, for example, obviously); a few more isn't something I even notice. -- Russ Allbery (r...@debian.org) http://www.eyrie.org

Re: MATE 1.8 has now fully arrived in Debian

2014-06-27 Thread Russ Allbery
Thorsten Glaser t...@debian.org writes: Russ Allbery wrote: Thorsten Glaser t...@debian.org writes: Yes, I fully agree. But _please_ also realise that there are people, a non-neglibile number of them, for whom these frameworks are not an improvement, and who wish to be not forced to use them

Re: MATE 1.8 has now fully arrived in Debian

2014-06-26 Thread Russ Allbery
be happy with them. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87fvisxd0r

Re: MATE 1.8 has now fully arrived in Debian

2014-06-26 Thread Russ Allbery
, and here are patches to GNOME to make it work properly. Which is why no one's done that yet. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas

Re: SV: MATE 1.8 has now fully arrived in Debian

2014-06-25 Thread Russ Allbery
with Ctrl+Alt+Fn, press Ctrl+C and they're in your shell session. This doesn't change anything else that you point out, but that's why you run startx and then log out of the virtual console. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email

Re: QA page showing git error

2014-06-22 Thread Russ Allbery
, following the syntax of the git clone command. If no branch is specified, the packaging should be on the default branch. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject

Re: New project goal: Get rid of Berkeley DB (post jessie)

2014-06-19 Thread Russ Allbery
and is therefore unambiguously under a good license. Maybe someone could fork just this portion of Berkeley DB without all the complex transaction stuff and take over upstream maintenance of just that? -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email

Re: HTTPS everywhere!

2014-06-18 Thread Russ Allbery
with X.509. The trust model and key management properties of X.509 are inherently inferior for our purposes. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble

Re: HTTPS everywhere!

2014-06-18 Thread Russ Allbery
Luca Filipozzi lfili...@debian.org writes: On Wed, Jun 18, 2014 at 10:05:32AM -0700, Russ Allbery wrote: This is only true if the root CA is maintained with the same level of security as the PGP signing key for the archive. While that's something that we could probably do (although it's

Re: Password Protecting GPG Keys

2014-06-17 Thread Russ Allbery
is substantially worse than many other countries in this regard.) -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive

Re: use of RDRAND in $random_library

2014-06-16 Thread Russ Allbery
to reduce the total entropy created by the the other entropy sources. The worst they should be able to do is add zero entropy. Cryptography Engineering has an excellent chapter on pseudorandom number generators that gets into the issues here. -- Russ Allbery (r...@debian.org) http

Re: use of RDRAND in $random_library

2014-06-12 Thread Russ Allbery
no idea what the hardware random number generator is doing, it would be quite possible to insert a mathematical back door into it, and there's no way to audit it, I understand why people want to put a software randomization layer that we *can* audit in front of it. -- Russ Allbery (r...@debian.org

Re: use of RDRAND in $random_library

2014-06-12 Thread Russ Allbery
the number stream while still passing statistical randomness checks, and (b) the use case for random number generators is very narrow and this sort of backdoor won't be revealed as a bug by other normal use. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle

Re: use of RDRAND in $random_library

2014-06-12 Thread Russ Allbery
Gunnar Wolf gw...@gwolf.org writes: Russ Allbery dijo [Thu, Jun 12, 2014 at 07:08:40PM -0700]: I would certainly hope that the mixing algorithm of any decent random number source is better than just xor. And given that, I don't believe the mathematics supports your assertion here. It's

Re: use of RDRAND in $random_library

2014-06-12 Thread Russ Allbery
Ugh, sorry to follow up to myself, but I got a key part of this wrong. Russ Allbery r...@debian.org writes: At least based on my understanding of the theory, I think that mixing a backdoored entropy source with other entropy sources in a random number generator like Fortuna (which is based

Accepted openafs 1.6.9-1 (source i386 all)

2014-06-12 Thread Russ Allbery
-modules-source openafs-modules-dkms libpam-openafs-kaserver openafs-dbg Architecture: source i386 all Version: 1.6.9-1 Distribution: unstable Urgency: high Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r...@debian.org Description: libafsauthent1 - AFS distributed file system runtime

Re: Proposed mass bug filing: /usr/lib/perl5 is changing with Perl 5.20

2014-06-01 Thread Russ Allbery
backporting. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87r438o4nt

Re: Proposed mass bug filing: /usr/lib/perl5 is changing with Perl 5.20

2014-06-01 Thread Russ Allbery
Kurt Roeckx k...@roeckx.be writes: On Sun, Jun 01, 2014 at 11:39:34AM -0700, Russ Allbery wrote: Build-Depends on perl (= 5.20) would make the transition smooth for users and the buildds. The only drawback I can think of is that you'd have to revert that and the path change when backporting

Re: Why not 03 ?

2014-05-29 Thread Russ Allbery
fixed in GCC, but that's probably much of the historical reason. My impression is that most people using GCC use -O2, so it's the best-tested path. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org

Accepted openafs 1.6.8-1 (source i386 all)

2014-05-24 Thread Russ Allbery
-modules-source openafs-modules-dkms libpam-openafs-kaserver openafs-dbg Architecture: source i386 all Version: 1.6.8-1 Distribution: unstable Urgency: medium Maintainer: Russ Allbery r...@debian.org Changed-By: Russ Allbery r...@debian.org Description: libafsauthent1 - AFS distributed file system

Re: Bits from the Debian GNU/Hurd porters

2014-05-22 Thread Russ Allbery
project update. I admire the work that both went into all the porting that you've accomplished and into producing such a nice summary for the rest of the project. Thank you! -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel

Re: Redefining critical bug severity

2014-05-20 Thread Russ Allbery
is important. Maybe some stuff that would currently be critical is instead grave. I guess I have a hard time getting that excited about that; clarity seems better. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ

Re: Redefining critical bug severity

2014-05-20 Thread Russ Allbery
Arto Jantunen vi...@debian.org writes: Because a package that doesn't work at all (and thus breaks rdeps) isn't as broken as a package that wipes the root fs on installation. Note that the latter breaks the whole system, and hence is critical regardless of this distinction. -- Russ Allbery

Redefining critical bug severity (was: how to deal with a missed so bump already uploaded ?)

2014-05-17 Thread Russ Allbery
a security hole on systems where you install the package is closer to how we actually use the severity, and would avoid some of these bug severity arguments. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org

Re: Dealing with emacs21 (and related) bugs [was: Re: ignoring bugs with no maintainer]

2014-05-15 Thread Russ Allbery
of that this morning before I have to go do other work. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org

Re: Dealing with emacs21 (and related) bugs [was: Re: ignoring bugs with no maintainer]

2014-05-15 Thread Russ Allbery
be important to track that emacs23 is currently buggy, may be something stable users need to know about, etc. But given that this is an ancient bug stranded on the emacs21 package, I would just take the simplest approach. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle

Re: systemd-fsck?

2014-05-14 Thread Russ Allbery
for that?). Right. And I think it does, although I'm not sure. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive

Re: systemd-fsck?

2014-05-14 Thread Russ Allbery
if you run . /etc/profile.d/bash_completion.sh first. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https

Re: systemd-fsck?

2014-05-14 Thread Russ Allbery
]; then . $i fi done unset i fi See /etc/profile.d/bash_completion.sh. However, I agree with the rest of your analysis. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject

Re: MBF (Re: correct use of su)

2014-05-13 Thread Russ Allbery
Le 13 mai 2014 03:01, Michael Biebl bi...@debian.org a =C3=A9crit : Am 13.05.2014 02:54, schrieb Russ Allbery: Yeah, that's just what I was thinking. Any software that doesn't honor an invoke-rc.d policy is RC-buggy anyway, and it would be good to catch and fix that. Could you also open

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
On Mon, May 12, 2014 at 07:01:14PM -0700, Russ Allbery wrote: Dependency-based boot, the change to /bin/sh, and UUID-based mounting were all not drop-in replacements by that criteria. Note that also none of them were forced on existing installations. The change of /bin/sh to dash (which

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
sort of an interesting question as to whether you want to set up a new session when running a single command. I'm a little surprised that su does this as opposed to only calling setcred. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
-i. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87k39pzn55@windlord.stanford.edu

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
to, but which will involve way more work for us) and moving to Puppet 3.x. Compared to those, the minor bits of fiddling required to make sure systemd works properly is noise. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
was going on. It should be fixed now (although I'm having to get used to the ugly --text follows this line-- marker again). -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
with the idea that there are other smart people in the world who have access to all of the same data that you have and yet come to different conclusions that you come to, you're in for a very frustrating and difficult time. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle

Re: systemd-fsck?

2014-05-13 Thread Russ Allbery
imagination, then, huh? -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87tx8ttuy5

Re: [OT] Re: systemd-fsck?

2014-05-12 Thread Russ Allbery
has a valid criticism to make, the maintainers time and patience has been spent up by others. Message filters are a solution to this. I hate to post a simple me too message, but this is so well put that I just have to. This, exactly. -- Russ Allbery (r...@debian.org) http

Re: correct use of su

2014-05-12 Thread Russ Allbery
that doesn't honor an invoke-rc.d policy is RC-buggy anyway, and it would be good to catch and fix that. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas

Re: systemd-fsck?

2014-05-12 Thread Russ Allbery
and look for filesystems that aren't set noauto or nofail but that aren't mounted and warn the user with debconf that behavior may change. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject

Re: Avoiding systemd

2014-05-11 Thread Russ Allbery
to breaking this cycle. -- Russ Allbery (r...@debian.org) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/87ha4wguge

<    6   7   8   9   10   11   12   13   14   15   >