Bug#761878: sysv-rc: policy-rc.d should live under /etc

[Ansgar Burchardt]

Package: sysv-rc
Version: 2.88dsf-53.4
Severity: normal

policy-rc.d is supposed to be configured (and thus edited) by the
local admin. It should thus not live in /usr/sbin.

Please support using a policy-rc.d located under /etc (and leave
/usr/sbin/policy-rc.d as a legacy location).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#761880: sysv-rc: support init scripts in /lib/init.d (or similar)

[Ansgar Burchardt]

Package: sysv-rc
Version: 2.88dsf-53.4
Severity: normal

Please support init scripts in /lib/init.d (or a similar
location). Init scripts are not configuration and as such should not
be installed into /etc (though I doubt we can drop support for that).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#761878: [Pkg-sysvinit-devel] Bug#761878: sysv-rc: policy-rc.d should live under /etc

[Ansgar Burchardt]

Henrique de Moraes Holschuh  writes:
> On Tue, 16 Sep 2014, Ansgar Burchardt wrote:
>> policy-rc.d is supposed to be configured (and thus edited) by the
>> local admin. It should thus not live in /usr/sbin.
>
> It is supposed to be supplied under the Debian alternatives subsystem or
> something equivalent, which will install a symlink there.  In fact, it will
> install a symlink to /etc/alternatives/policy-rc.d, which will be another
> symlink there to the active "alternative".

But nobody ever does that.

> The /usr/sbin/policy-rc.d symlink would be created and managed by the
> packages providing policy-rc.d, through /usr/sbin/update-alternatives.  The
> local admin can do the same if he wants.  Or he can just add a real file in
> /usr/sbin/policy-rc.d, and update-alternatives should leave it alone.
>
> Nobody ever found a reason to package a general-use policy-rc.d, although
> the feature is directly used by some tools that create private chroots, such
> as pbuilder.

That's the most common use (also by d-i as far as I remember). And
sometimes people write their own policy-rc.d.

In all cases, it's a configuration choice and not shipped by a package,
and so belongs below /etc.

>> Please support using a policy-rc.d located under /etc (and leave
>> /usr/sbin/policy-rc.d as a legacy location).
>
> AFAIK, there is no strong technical reason to change the policy-rc.d ABI at
> this time, so I will downgrade this to wishlist and tag it wontfix.

Well, it doesn't break any old use. It's an ABI-compatible change ;)

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#761880: [Pkg-sysvinit-devel] Bug#761880: sysv-rc: support init scripts in /lib/init.d (or similar)

[Ansgar Burchardt]

Henrique de Moraes Holschuh  writes:
> On Tue, 16 Sep 2014, Ansgar Burchardt wrote:
>> Please support init scripts in /lib/init.d (or a similar
>> location). Init scripts are not configuration and as such should not
>> be installed into /etc (though I doubt we can drop support for that).
>
> No.
>
> We would have to support a "shadow" system, where anything in /etc/init.d
> would override the same named script in /lib/init.d, for no gain over what
> we currently have.
>
> And we are not breaking a 30-year old ABI _and_ adding undue complexity to
> sysv-rc without very strong reasons.
>
> Also, system initscripts *are* system configuration items, and are seldom
> modified by the local sysadmin.

The symlinks in /etc/rc?.d/* and /etc/default/* are configuration files,
but init script themselves are not (and if admins are supposed to modify
them, I would call them buggy).

Local sysadmins also seldom modify files below /usr (and not in
/usr/local)...

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#754120: ITP: python-gnupg-ng -- A Python wrapper for GnuPG

[Ansgar Burchardt]

Hi,

Ben Carrillo  writes:
> This is a fork of python-gnupg (from version 0.3.2), patched to
> sanitize untrusted inputs, due to the necessity of executing
> subprocess.Popen([...], shell=True) in order to communicate with GnuPG.

Why exactly should shell=True be necessary?

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#754453: ttt: maintainer address bounces

[Ansgar Burchardt]

Source: ttt
Version: 1.7-3.5
Severity: serious
X-Debbugs-Cc: thomas.scheffc...@m1234.de, sgolo...@debian.org

The maintainer address for ttt bounces:

On 07/11/2014 11:39, Mail Delivery System wrote:
> This message was created automatically by mail delivery software.
> 
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
> 
>   thomas.scheffc...@verwaltung.uni-mainz.de
> SMTP error from remote mail server after RCPT 
> TO::
> host mailgate-01.zdv.uni-mainz.de [2001:4c80:40:62d:203::fe5d:b2f1]:
> 550 #5.1.0 Address rejected.

Given the maintainer is looking for someone to adopt the package since
2008[1], I wonder if it still makes sense to keep this package in the
archive...

  [1] 

Sergei, you did the last two uploads in 2013 and 2014. Are you
interested in the package?

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#752221: [axiom] Some sources are not included in your package

[Ansgar Burchardt]

Control: reopen -1

Camm Maguire  writes:
>>> The file alleged to be problematic:
>>>
>>> src/axiom-website/axiomgraph/js/arbor.js
>>
>> I respectfully disagree according to source it is minified from at least:
>>
>> *   etc.js
>> *   kernel.js
>> *  atoms.js
>> *  system.js
>> *  physics.js
> Greetings!  Respectfully, comments /* etc.js */ are proof of no such
> thing.

Umm, the very comments that says which files it is generated from is
proof that it is not a generated file?

Also please take a look at [1]. That might be the actual source for the
line with "/* kernel.js */" (minus version and so on).

  [1] 

Note that the source version has whitespace, informative variable names
and comments. These are all stripped by the minimization "compiler"
(which translates Javascript into Javascript).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#754929: pcp: maintainer address bounces

[Ansgar Burchardt]

Source: pcp
Severity: serious
Tags: sid
X-Debbugs-Cc: Nathan Scott 

The maintainer address for pcp bounces:

Mail Delivery System  writes:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   p...@mail.performancecopilot.org
> SMTP error from remote mail server after RCPT 
> TO::
> host cuda-allmx.sgi.com [192.48.157.12]: 550 No such domain at this 
> location

Regards,
Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#754910: cgmanager: two different maintainers

[Ansgar Burchardt]

Hi,

there are currently two different versions of cgmanager in NEW, packaged
by two different maintainers... It might be a good idea for you to agree
on how to proceed.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746241: transition: enet

[Ansgar Burchardt]

Hi,

Emilio Pozuelo Monfort  writes:
> On 28/04/14 14:46, Ansgar Burchardt wrote:
>> enet had a soname change (just accepted into experimental) and needs a
>> transition. The ABI changes should be unproblematic (just new members
>> in a public struct). There also are only a few rdeps.
>
> Please go ahead and upload to unstable. Let me know when enet has been built
> everywhere in order to schedule the binnmus.

enet is now built everywhere with the exception of sparc (which seems to
be lagging quite a bit).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#749920: libvtk6: improper SOVERSION

[Ansgar Burchardt]

On 05/30/2014 18:11, Mathieu Malaterre wrote:
> libvtk6 package is a bad copy/paste from libvtk5 package. It does not
> use proper SOVERSION naming as required by debian policy
> 
> https://www.debian.org/doc/debian-policy/ch-sharedlibs.html#s-sharedlibs-runtime
> [...]
> The run-time shared library must be placed in a package whose name
> changes whenever the SONAME of the shared library changes.

That is possible even when the package name doesn't include the full
soversion as long as it changes with the next ABI break, for example
libvtk6 -> libvtk6.2.  There is no need to rename libvtk6 to libvtk6.1
(and rebuild rdeps) just for the sake of giving it a different name.

> Please rename package to libvtk6.1, I believe this also affects
> libvtk6-dev package.

-dev package names really shouldn't depend on the ABI version (except in
very care cases). It just cases unneccessary work on transitions as one
needs sourceful uploads to update the Build-Depends field in all rdeps.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#736481: nettoe: FTBFS due to test suite failures

[Ansgar Burchardt]

Hi,

On 03/26/2014 14:39, Aníbal Monsalve Salazar wrote:
> --- nettoe-1.5/debian/changelog   2014-01-10 11:39:53.0 +
> +++ nettoe-1.5/debian/changelog   2014-03-25 12:39:27.0 +
> @@ -1,3 +1,12 @@
> +nettoe (1.5-1.1) unstable; urgency=medium
> +
> +  * Non-maintainer upload.
> +  * If TERM isn't defined, pass --without-terminfo to configure
> +Patch by Dejan Latinovic
> +Closes: #736481
> +
> + -- Anibal Monsalve Salazar   Tue, 25 Mar 2014 12:38:31 
> +

Changing options passed to ./configure depending on the build
environment looks fairly wrong to me.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#736481: nettoe: FTBFS due to test suite failures

[Ansgar Burchardt]

Aníbal Monsalve Salazar  writes:
> On Wed, 2014-03-26 14:51:08 +0100, Ansgar Burchardt wrote:
>> Changing options passed to ./configure depending on the build
>> environment looks fairly wrong to me.
>
> The objective of ./configure is to change the build/compile settings
> dependending on the environment.

However source packages in Debian should *not* change depending on the
environment they are built in. Passing different options to ./configure
depending on the environment does the exact opposite...

> If you object Dejan's patch, there is another approach. To set TERM to
> to some value like linux, xterm, unknow, etc, to pass `make
> check-TESTS`. But that could be wrong.
>
> Mats Erik Andersson, upstream author of Nettoe said the "FTBFS is caused
> by a build environment lacking a defined TERM".  The way to tell
> ./configure that TERM is not defined is to pass --without-terminfo to it.
>
> We decided that it was better to pass --without-terminfo to ./configure
> than to set TERM to something that could be incorrect.

Well, then just always pass --without-terminfo to it?

Ansgar


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#742909: RM: camlpdf -- moving from non-free to main

[Ansgar Burchardt]

Package: ftp.debian.org

Stéphane Glondu  writes:
> Le 28/03/2014 17:00, Debian FTP Masters a écrit :
>> An exception was raised while processing the package:
>> Traceback (most recent call last):
>>   File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 98, in 
>> wrapper
>> function(upload, srcqueue, comments, transaction)
>>   File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 150, in 
>> comment_accept
>> transaction.copy_source(upload.source, suite, 
>> source_component_func(upload.source), allow_tainted=allow_tainted)
>>   File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 142, in 
>> source_component_func
>> .join(Component).one()
>>   File "/usr/lib/python2.7/dist-packages/sqlalchemy/orm/query.py", line 
>> 2193, in one
>> "Multiple rows were found for one()")
>> MultipleResultsFound: Multiple rows were found for one()
>> 
>> Original comments:
>> [nothing]
>
> Is that normal? I've seen #742881, but I wonder what's the point of
> reporting a bug against a package that is not in the archive whereas
> there is a natural channel (the REJECTED message) for this kind of thing...

dak gets confused by having overrides for multiple components (here:
main and non-free) in the same suite at the same time. The error message
could be nicer, but then dak could be made to handle this case too.

Removing the old package before accepting the new one works around the
problem. So let's go for that.

Ansgar


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#743632: gnome-control-center: no option for IPv6 privacy extension

[Ansgar Burchardt]

Package: gnome-control-center
Version: 1:3.8.3-4
Severity: wishlist
Tags: upstream

The network panel in gnome-control-center has no option for the IPv6
privacy extensions. These are already supported by NetworkManager, but
I couldn't find a way in GNOME to change the setting.

For reference, with NM I could activate them in the connection setting
file in /etc/NetworkManager/system-connections by making sure

[ipv6]
method=auto
ip6-privacy=2

is in there (the "ip6-privacy=2" line).

It would be nice if this setting could be controlled via GNOME's
graphical interface as well.

Ansgar

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable'), (100, 'unstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnome-control-center depends on:
ii  accountsservice0.6.34-2
ii  apg2.2.3.dfsg.1-2
ii  colord 1.0.6-1
ii  desktop-file-utils 0.22-1
ii  gnome-control-center-data  1:3.8.3-4
ii  gnome-desktop3-data3.8.4-2
ii  gnome-icon-theme   3.12.0-1
ii  gnome-icon-theme-symbolic  3.12.0-1
ii  gnome-menus3.8.0-2
ii  gnome-settings-daemon  3.8.5-2
ii  gsettings-desktop-schemas  3.8.2-2
ii  libaccountsservice00.6.34-2
ii  libatk1.0-02.10.0-2
ii  libc6  2.18-4
ii  libcairo2  1.12.16-2
ii  libcanberra-gtk3-0 0.30-2
ii  libcanberra0   0.30-2
ii  libcheese-gtk233.10.1-1sid1+b1
ii  libcheese7 3.10.1-1sid1+b1
ii  libclutter-gtk-1.0-0   1.4.4-3+b1
ii  libcolord-gtk1 0.1.25-1.1
ii  libcolord1 1.0.6-1
ii  libcups2   1.7.1-10
ii  libdbus-glib-1-2   0.102-1
ii  libfontconfig1 2.11.0-2
ii  libgdk-pixbuf2.0-0 2.30.6-1
ii  libgl1-mesa-glx [libgl1]   10.1.0-4
ii  libglib2.0-0   2.38.2-5
ii  libgnome-bluetooth11   3.8.1-2
ii  libgnome-desktop-3-7   3.8.4-2
ii  libgoa-1.0-0   3.8.3-2
ii  libgtk-3-0 3.10.7-1
ii  libgtop2-7 2.28.5-2
ii  libibus-1.0-5  1.5.5-1
ii  libkrb5-3  1.12.1+dfsg-1
ii  libnm-glib-vpn10.9.8.0-5
ii  libnm-glib40.9.8.0-5
ii  libnm-gtk0 0.9.8.8-1
ii  libnm-util20.9.8.0-5
ii  libpango-1.0-0 1.36.3-1
ii  libpangocairo-1.0-01.36.3-1
ii  libpolkit-gobject-1-0  0.105-4
ii  libpulse-mainloop-glib04.0-6+b1
ii  libpulse0  4.0-6+b1
ii  libpwquality1  1.2.3-1
ii  libsmbclient   2:4.1.6+dfsg-1
ii  libsocialweb-client2   0.25.20-6
ii  libupower-glib10.9.23-2+b1
ii  libwacom2  0.8-1
ii  libx11-6   2:1.6.2-1
ii  libxi6 2:1.7.2-1
ii  libxml22.9.1+dfsg1-3

Versions of packages gnome-control-center recommends:
ii  cups-pk-helper 0.2.5-2
ii  gkbd-capplet   3.6.0-1
ii  gnome-online-accounts  3.8.3-2
ii  gnome-user-guide   3.8.2-1
ii  gnome-user-share   3.8.3-1
ii  iso-codes  3.51-1
pn  mesa-utils 
ii  mousetweaks3.12.0-1
ii  network-manager-gnome  0.9.8.8-1
pn  ntp
ii  policykit-1-gnome  0.105-2
ii  rygel  0.20.3-1
pn  system-config-printer  

Versions of packages gnome-control-center suggests:
ii  gnome-screensaver3.6.1-1
ii  gstreamer1.0-pulseaudio  1.2.3-1
pn  libcanberra-gtk-module   
pn  libcanberra-gtk3-module  
ii  x11-xserver-utils7.7+2
ii  xscreensaver 5.26-1

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757006: rrdtool: maintainer address bounces

[Ansgar Burchardt]

Source: rrdtool
Severity: serious
Tags: sid
X-Debbugs-Cc: tok...@debian.org, formo...@debian.org, b...@debian.org

The maintainer address for rrdtool bounces, see below.

Ansgar

On 08/04/2014 13:30, Mail Delivery System wrote:
> This message was created automatically by mail delivery software.
> 
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
> 
>   rrdt...@ml.snow-crash.org
> SMTP error from remote mail server after RCPT 
> TO::
> host apu.snow-crash.org [2a01:4f8:130:53c9::2]:
> 550 5.1.1 : Recipient address rejected:
> User unknown in local recipient table
> 
> -- This is a copy of the message, including all the headers. --
> 
> Return-path: 
> Received: from franck.debian.org ([138.16.160.12])
>   from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP 
> CA,CN=franck.debian.org,EMAIL=hostmas...@franck.debian.org (verified)
>   by mailly.debian.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128)
>   (Exim 4.80)
>   (envelope-from )
>   id 1XEGTf-0006iw-4b
>   for rrdt...@ml.snow-crash.org; Mon, 04 Aug 2014 11:30:55 +
> Received: from dak-unpriv by franck.debian.org with local (Exim 4.80)
>   (envelope-from )
>   id 1XEGTd-0007uk-Mu
>   for rrdt...@ml.snow-crash.org; Mon, 04 Aug 2014 11:30:53 +
> To: rrdt...@ml.snow-crash.org
> From: Debian FTP Masters 
> Subject: Processing of rrdtool_1.4.8-1.1_amd64.changes
> Date: Mon, 04 Aug 2014 11:30:53 +
> X-Debian: DAK
> X-DAK: DAK
> Precedence: bulk
> Auto-Submitted: auto-generated
> X-Debian-Package: rrdtool
> Message-Id: 
> Sender: unprivileged ftp-master role account 
> 
> rrdtool_1.4.8-1.1_amd64.changes uploaded successfully to localhost
> along with the files:
>   rrdtool_1.4.8-1.1_amd64.deb
>   rrdcached_1.4.8-1.1_amd64.deb
>   rrdtool-dbg_1.4.8-1.1_amd64.deb
>   librrd4_1.4.8-1.1_amd64.deb
>   librrd-dev_1.4.8-1.1_amd64.deb
>   librrds-perl_1.4.8-1.1_amd64.deb
>   rrdtool-tcl_1.4.8-1.1_amd64.deb
>   python-rrdtool_1.4.8-1.1_amd64.deb
>   ruby-rrd_1.4.8-1.1_amd64.deb
>   liblua5.1-rrd0_1.4.8-1.1_amd64.deb
>   liblua5.1-rrd-dev_1.4.8-1.1_amd64.deb
>   librrdp-perl_1.4.8-1.1_all.deb
>   librrd-ruby_1.4.8-1.1_all.deb
>   librrd-ruby1.8_1.4.8-1.1_all.deb
>   librrd-ruby1.9.1_1.4.8-1.1_all.deb
>   rrdtool_1.4.8-1.1.dsc
>   rrdtool_1.4.8-1.1.diff.gz
> 
> Greetings,
> 
>   Your Debian queue daemon (running on host franck.debian.org)
> 


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#756047: cron: diff for NMU version 3.0pl1-124.2

[Ansgar Burchardt]

tags 756047 + patch
tags 756047 + pending
thanks

Dear maintainer,

I've prepared an NMU for cron (versioned as 3.0pl1-124.2) and
uploaded it to DELAYED/5. Please feel free to tell me if I
should delay it longer.

Regards.
diff -u cron-3.0pl1/debian/changelog cron-3.0pl1/debian/changelog
--- cron-3.0pl1/debian/changelog
+++ cron-3.0pl1/debian/changelog
@@ -1,3 +1,11 @@
+cron (3.0pl1-124.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * debian/cron.service: Set IgnoreSIGPIPE=false. (Closes: #756047)
+  * debian/cron.service: Add Documentation field.
+
+ -- Ansgar Burchardt   Mon, 04 Aug 2014 21:44:00 +0200
+
 cron (3.0pl1-124.1) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -u cron-3.0pl1/debian/cron.service cron-3.0pl1/debian/cron.service
--- cron-3.0pl1/debian/cron.service
+++ cron-3.0pl1/debian/cron.service
@@ -1,8 +1,10 @@
 [Unit]
 Description=Regular background program processing daemon
+Documentation=man:cron(8)
 
 [Service]
 ExecStart=/usr/sbin/cron -f
+IgnoreSIGPIPE=false
 
 [Install]
 WantedBy=multi-user.target

Bug#752024: amanda, libprelude, libpreludedb: Regenerate SWIG files at build time

[Ansgar Burchardt]

Hi,

it looks like the build system for these three packages already supports
regenerating the SWIG-generated files. One just has to remove them
before build (and afterwards in the clean target).

I tried doing so and all packages built fine, but I haven't done any
further tests. amanda needs an additional build-dependency on swig.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757088: override: libalberta2-dev:oldlibs/extra

[Ansgar Burchardt]

Package: ftp.debian.org
Severity: normal

Please move libalberta2-dev to oldlibs/extra. It is now a transitional
package for libalberta-dev.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757126: emacs24: server mode creates /tmp/emacs even when using socket in a different directory

[Ansgar Burchardt]

Package: emacs24
Version: 24.3+1-4+b1
Severity: minor

Hi,

I start emacs (via systemd) as

  $ /usr/bin/emacs --daemon=/run/user/1000/emacs

but /tmp/emacs1000 is still created even though the socket is created
in /run/user/1000 as requested.

I'm also wondering if emacs shouldn't default to creating the server
mode socket in XDG_RUNTIME_DIR[1] or a subdirectory thereof if the
environment variable is set.

Ansgar

  [1] That is usually /run/user/.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages emacs24 depends on:
ii  emacs24-bin-common   24.3+1-4+b1
ii  gconf-service3.2.6-2
ii  libasound2   1.0.28-1
ii  libatk1.0-0  2.12.0-1
ii  libc62.19-7
ii  libcairo-gobject21.12.16-2
ii  libcairo21.12.16-2
ii  libdbus-1-3  1.8.6-1
ii  libfontconfig1   2.11.0-5
ii  libfreetype6 2.5.2-1
ii  libgconf-2-4 3.2.6-2
ii  libgdk-pixbuf2.0-0   2.30.7-1
ii  libgif4  4.1.6-11
ii  libglib2.0-0 2.40.0-3
ii  libgnutls-deb0-283.2.16-1
ii  libgomp1 4.9.1-1
ii  libgpm2  1.20.4-6.1
ii  libgtk-3-0   3.12.2-1+b1
ii  libice6  2:1.0.9-1
ii  libjpeg8 8d1-1
ii  libm17n-01.6.4-2
ii  libmagickcore5   8:6.7.7.10+dfsg-4
ii  libmagickwand5   8:6.7.7.10+dfsg-4
ii  libotf0  0.9.13-1
ii  libpango-1.0-0   1.36.3-1
ii  libpangocairo-1.0-0  1.36.3-1
ii  libpng12-0   1.2.50-2
ii  librsvg2-2   2.40.2-1
ii  libselinux1  2.3-1
ii  libsm6   2:1.2.2-1
ii  libtiff5 4.0.3-9
ii  libtinfo55.9+20140712-2
ii  libx11-6 2:1.6.2-2
ii  libxft2  2.3.2-1
ii  libxml2  2.9.1+dfsg1-4
ii  libxpm4  1:3.5.11-1
ii  libxrender1  1:0.9.8-1
ii  zlib1g   1:1.2.8.dfsg-1

emacs24 recommends no packages.

Versions of packages emacs24 suggests:
pn  emacs24-common-non-dfsg  

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#752333: libprelude: diff for NMU version 1.0.0-11.3

[Ansgar Burchardt]

tags 752333 + patch
tags 752333 + pending
tags 752334 + patch
tags 752334 + pending
thanks

Dear maintainer,

I've prepared an NMU for libprelude (versioned as 1.0.0-11.3) and
uploaded it to DELAYED/2. Please feel free to tell me if I
should delay it longer.

Regards.
diff -Nru libprelude-1.0.0/debian/changelog libprelude-1.0.0/debian/changelog
--- libprelude-1.0.0/debian/changelog	2014-05-25 15:58:53.0 +0200
+++ libprelude-1.0.0/debian/changelog	2014-08-05 19:29:12.0 +0200
@@ -1,3 +1,15 @@
+libprelude (1.0.0-11.3) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Force swig to regenerate bindings/low-level/perl/Prelude.c by
+removing it before building and in the clean target.
+(Closes: #752333)
+  * debian/libprelude-perl.install: Use perl's $Config{vendorarch} instead
+of /usr/lib/perl5. Thanks to Niko Tyni for the patch.
+(Closes: #752334)
+
+ -- Ansgar Burchardt   Tue, 05 Aug 2014 19:29:09 +0200
+
 libprelude (1.0.0-11.2) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -Nru libprelude-1.0.0/debian/clean libprelude-1.0.0/debian/clean
--- libprelude-1.0.0/debian/clean	1970-01-01 01:00:00.0 +0100
+++ libprelude-1.0.0/debian/clean	2014-08-05 19:31:31.0 +0200
@@ -0,0 +1 @@
+bindings/low-level/perl/Prelude.c
diff -Nru libprelude-1.0.0/debian/libprelude-perl.install libprelude-1.0.0/debian/libprelude-perl.install
--- libprelude-1.0.0/debian/libprelude-perl.install	2014-05-25 15:58:53.0 +0200
+++ libprelude-1.0.0/debian/libprelude-perl.install	2014-08-05 19:31:31.0 +0200
@@ -1 +1,4 @@
-usr/lib/perl*
+#!/usr/bin/perl
+use warnings;
+use Config;
+print $Config{vendorarch}, "\n";
diff -Nru libprelude-1.0.0/debian/rules libprelude-1.0.0/debian/rules
--- libprelude-1.0.0/debian/rules	2014-05-25 15:58:53.0 +0200
+++ libprelude-1.0.0/debian/rules	2014-08-05 19:31:31.0 +0200
@@ -15,6 +15,8 @@
 override_dh_auto_build: build-core $(PYVERS:%=build-python%)
 
 build-core:
+	# Force swig to regenerate Prelude.c, cf. https://bugs.debian.org/752333
+	rm -f bindings/low-level/perl/Prelude.c
 	dh_auto_build
 
 build-python%:

Bug#752335: libpreludedb: diff for NMU version 1.0.0-2.2

[Ansgar Burchardt]

tags 752335 + patch
tags 752335 + pending
tags 752336 + patch
tags 752336 + pending
thanks

Dear maintainer,

I've prepared an NMU for libpreludedb (versioned as 1.0.0-2.2) and
uploaded it to DELAYED/2. Please feel free to tell me if I
should delay it longer.

Regards.
diff -u libpreludedb-1.0.0/debian/rules libpreludedb-1.0.0/debian/rules
--- libpreludedb-1.0.0/debian/rules
+++ libpreludedb-1.0.0/debian/rules
@@ -7,6 +7,8 @@
 
 PYVERS=$(shell pyversions -vr)
 
+ARCHLIB := $(shell perl -MConfig -e 'print $$Config{vendorarch}')
+
 TMPDIR=debian/tmp
 
 prefix=$(CURDIR)/debian/tmp/usr
@@ -20,6 +22,8 @@
 build: configure-stamp build-stamp $(PYVERS:%=build-python%)
 build-stamp:
 	dh_testdir
+	# Force swig to regenerate PreludeDB.c, cf. https://bugs.debian.org/752335
+	rm -f bindings/perl/PreludeDB.c
 	$(MAKE)
 	
 	touch build-stamp
@@ -35,6 +39,8 @@
 	[ ! -f bindings/perl/Makefile ] || $(MAKE) -C bindings/perl realclean
 	[ ! -f Makefile ] || $(MAKE) distclean
 	rm -rf bindings/python/build
+	rm -f bindings/perl/PreludeDB.c
+	rm -f debian/libpreludedb-perl.install
 	dh_clean
 
 install: install-core $(PYVERS:%=install-python%)
@@ -48,6 +54,7 @@
 	$(MAKE) install DESTDIR=$(CURDIR)/debian/tmp
 	find $(CURDIR)/debian/tmp -name \*.pyc -exec rm -f {} \;
 	find $(CURDIR)/debian/tmp -name \*.la -delete
+	sed -e 's,$${archlib},$(ARCHLIB),g' debian/libpreludedb-perl.install.in > debian/libpreludedb-perl.install
 #	$(INSTALLD) $(TMPDIR)/etc/prelude/	\
 #		$(TMPDIR)/etc/prelude/default/	\
 #		$(TMPDIR)/etc/prelude/profile/	\
diff -u libpreludedb-1.0.0/debian/changelog libpreludedb-1.0.0/debian/changelog
--- libpreludedb-1.0.0/debian/changelog
+++ libpreludedb-1.0.0/debian/changelog
@@ -1,3 +1,13 @@
+libpreludedb (1.0.0-2.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Force swig to regenerate bindings/perl/PreludeDB.c by removing it
+before building and in the clean target. (Closes: #752335)
+  * Use perl's $Config{vendorarch} instead of /usr/lib/perl5. Thanks
+to Niko Tyni for the patch. (Closes: #752336)
+
+ -- Ansgar Burchardt   Tue, 05 Aug 2014 22:27:33 +0200
+
 libpreludedb (1.0.0-2.1) unstable; urgency=low
 
   * Non-maintainer upload.
reverted:
--- libpreludedb-1.0.0/debian/libpreludedb-perl.install
+++ libpreludedb-1.0.0.orig/debian/libpreludedb-perl.install
@@ -1 +0,0 @@
-debian/tmp/usr/lib/perl*
only in patch2:
unchanged:
--- libpreludedb-1.0.0.orig/debian/libpreludedb-perl.install.in
+++ libpreludedb-1.0.0/debian/libpreludedb-perl.install.in
@@ -0,0 +1 @@
+debian/tmp/${archlib}

Bug#757335: postgresql-debversion: No package for postgresql 9.4

[Ansgar Burchardt]

Source: postgresql-debversion
Version: 1.0.7-3
Severity: serious
X-Debbugs-Cc: pkg-postgresql-pub...@lists.alioth.debian.org

[ CCed the PostgreSQL maintainers as I remembering them updating other
  extensions. ]

The default version for PostgreSQL in Jessie is 9.4, but the debversion
extension is only available for version 9.3.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757366: task-desktop: should no longer Recommands: alsa-base

[Ansgar Burchardt]

Source: task-desktop
Version: 3.20
Severity: normal

Hi,

task-desktop currently Recommends: alsa-base which no longer does
anything useful on its own:

+---
| Package: alsa-base
| Version: 1.0.27+1
| ...
| Description-en: dummy package to ease purging of obsolete conffiles
|  This is an empty dummy package with the only purpose of ensuring
|  obsolete kmod files will be removed from the system. This functionality
|  is now shipped in kmod.
+---

As kmod is already Priority: important the recommendation of alsa-base
could just be dropped.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757652: O: qpid-cpp -- cross-platform enterprise messaging system

[Ansgar Burchardt]

Package: wnpp

The current maintainer of qpid-cpp, Cajus Pollmeier, retired from
Debian. Therefore, I orphan this package now.

Maintaining a package requires time and skills. Please only adopt this
package if you will have enough time and attention to work on it.

If you want to be the new maintainer, please see
http://www.debian.org/devel/wnpp/index.html#howto-o for detailed
instructions how to adopt a package properly.

More information about this package:
http://packages.qa.debian.org/qpid-cpp

Source: qpid-cpp

Package: qpidd
Description: enterprise messaging system - AMQP broker
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the AMQP broker.

Package: qpid-client
Description: enterprise messaging system - AMQP client
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the AMQP client support.

Package: libqmf1
Description: enterprise messaging system - QMF libraries
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the Qpid Management Framework libraries.

Package: libqmf-dev
Description: enterprise messaging system - QMF development files
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the Qpid Management Framework development files.

Package: libqmf2-1
Description: enterprise messaging system - QMF2 libraries
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the QMF2 libraries.

Package: libqmf2-dev
Description: enterprise messaging system - QMF2 development files
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the QMF2 development files.

Package: libqmfconsole2
Description: enterprise messaging system - QMF console library
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the QMF console library.

Package: libqmfconsole2-dev
Description: enterprise messaging system - QMF console development files
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the QMF console development files.

Package: libqpidmessaging2
Description: enterprise messaging system - AMQP messaging libraries
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the AMQP messaging libraries.

Package: libqpidmessaging2-dev
Description: enterprise messaging system - AMQP messaging development files
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the AMQP messaging development files.

Package: libsslcommon2
Description: enterprise messaging system - common SSL libraries
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in C++ and Java, along with clients for C++, Java JMS, .Net, Python,
 and Ruby.
 .
 This package provides the AMQP SSL libraries.

Package: libsslcommon2-dev
Description: enterprise messaging system - common SSL development files
 Apache Qpid is a cross-platform enterprise messaging system which implements
 the Advanced Message Queuing Protocol (AMQP), providing message brokers
 written in 

Bug#757654: RM: rhmessaging -- RoQA; unmaintained, FTBFS for >1 year

[Ansgar Burchardt]

Package: ftp.debian.org
User: ftp.debian@packages.debian.org
Usertag: rm

Please remove rhmessaging from the archive. It fails to build from
source for over a year (#718110).

The maintainer retired from Debian a year ago as well (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757655: O: qpid-qmf -- Python bindings for qpid/mlib

[Ansgar Burchardt]

Package: wnpp

The current maintainer of qpid-qmf, Cajus Pollmeier, retired from
Debian. Therefore, I orphan this package now.

Maintaining a package requires time and skills. Please only adopt this
package if you will have enough time and attention to work on it.

If you want to be the new maintainer, please see
http://www.debian.org/devel/wnpp/index.html#howto-o for detailed
instructions how to adopt a package properly.

More information about this package:
http://packages.qa.debian.org/qpid-qmf

Source: qpid-qmf

Package: python-qpid-extras-qmf
Description: Python bindings for qpid/mlib
 Qpid/C++ is a C++ implementation of the AMQP protocol described at
 http://amqp.org/
 .
 This package contains the qpid python bindings.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757657: ldap2zone: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: ldap2zone
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757656: qpid-tools: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: qpid-tools
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757659: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: goto-fai
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757660: goto-common: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: goto-common
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757658: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: goto-fai-backend
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757668: gosa: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: gosa
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757667: gosa-perl: Please remove Cajus Pollmeier from Uploaders

[Ansgar Burchardt]

Source: gosa-perl
Severity: minor
Tags: sid

Please remove Cajus Pollmeier from Uploaders. He retired from Debian in
April 2013 (RT #4274).

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757670: cadabra: maintainer address bounces

[Ansgar Burchardt]

Source: cadabra
Version: 1.29-1
Tags: sid
Severity: serious
X-Debbugs-Cc: iul...@ubuntu.com, kasper.peet...@aei.mpg.de

The maintainer address for cadabra bounces, see below.

Ansgar

Mail Delivery System  writes:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   iul...@linux.com
> SMTP error from remote mail server after RCPT TO::
> host smtp1.linuxfoundation.org [140.211.169.13]:
> 550 5.1.1 : Recipient address rejected:
> User unknown in virtual alias table
>
> -- This is a copy of the message, including all the headers. --
>
> Return-path: 
> Received: from franck.debian.org ([138.16.160.12])
>   from C=NA,ST=NA,L=Ankh Morpork,O=Debian SMTP,OU=Debian SMTP 
> CA,CN=franck.debian.org,EMAIL=hostmas...@franck.debian.org (verified)
>   by mailly.debian.org with esmtps (TLS1.2:DHE_RSA_AES_128_CBC_SHA1:128)
>   (Exim 4.80)
>   (envelope-from )
>   id 1XG5NI-000181-Oi; Sat, 09 Aug 2014 12:03:52 +
> Received: from dak by franck.debian.org with local (Exim 4.80)
>   (envelope-from )
>   id 1XG5NH-0004Vl-7a; Sat, 09 Aug 2014 12:03:51 +
> From: Debian FTP Masters 
> To: Iulian Udrea , Matthias Klose 
> X-DAK: dak process-upload
> X-Debian: DAK
> X-Debian-Package: cadabra
> Precedence: bulk
> Auto-Submitted: auto-generated
> MIME-Version: 1.0
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: 8bit
> Subject: cadabra_1.39-0.1_i386.changes ACCEPTED into unstable
> Message-Id: 
> Sender: Archive Administrator 
> Date: Sat, 09 Aug 2014 12:03:51 +
>
>
>
> Accepted:
>
> Format: 1.8
> Date: Sat, 09 Aug 2014 13:35:27 +0200
> Source: cadabra
> Binary: cadabra
> Architecture: source i386
> Version: 1.39-0.1
> Distribution: unstable
> Urgency: medium
> Maintainer: Iulian Udrea 
> Changed-By: Matthias Klose 
> Description:
>  cadabra- field-theory motivated computer algebra system
> Closes: 746833
> Changes:
>  cadabra (1.39-0.1) unstable; urgency=medium
>  .
>* Non-maintainer upload.
>* New upstream release.
>  - Builds with GCC 4.9. Closes: #746833.
>* Use dpkg-buildflags.
> Checksums-Sha1:
>  810ee4f7eee12d2b310d46f057b3cc9b24398603 1373 cadabra_1.39-0.1.dsc
>  558a249e8e8e08bef4c769ce9aaed2f53b5ba855 1377279 cadabra_1.39.orig.tar.gz
>  93b47334f50a438c17b73fde296d1e8b4dde0c47 9552 cadabra_1.39-0.1.debian.tar.xz
>  50084fdbcfa8c101d5d24280ae940baea33aced8 572476 cadabra_1.39-0.1_i386.deb
> Checksums-Sha256:
>  25249870764484bf225327b19686ef8596b6c674e85badfd958f84639be28115 1373 
> cadabra_1.39-0.1.dsc
>  a1fda2f9c43b3b56c3cfcd0e6fce2a692b3f4fb2941fd7e2a0033c39fe013507 1377279 
> cadabra_1.39.orig.tar.gz
>  37fad6b349e0756530385f2823849700f85255f8dd59b16053361910378ee1ad 9552 
> cadabra_1.39-0.1.debian.tar.xz
>  bf460f006b826ac4df5eaf97bd2ed12a18c28605b64dc0426d1173b561d629c0 572476 
> cadabra_1.39-0.1_i386.deb
> Files:
>  c7aea7572d6f50f4aea9a2ec53577bac 572476 math optional 
> cadabra_1.39-0.1_i386.deb
>  dbb40f0230fb837bfc1cde6b19f0f12d 1373 math optional cadabra_1.39-0.1.dsc
>  0edfdb86be25d0e22809a6e0705a5222 1377279 math optional 
> cadabra_1.39.orig.tar.gz
>  fb9a63af41282eb64ced58031fe0c151 9552 math optional 
> cadabra_1.39-0.1.debian.tar.xz
>
>
>
> Thank you for your contribution to Debian.


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757676: src:orthanc: full license text of CC-BY not included

[Ansgar Burchardt]

Source: orthanc
Version: 0.7.6+dfsg-1
Severity: serious

Hi,

d/copyright states

+---
| License: CC-BY
|  CC 3.0 Attribution.  May be relicensed without permission/notifcation.
+---

but the full license text is not included (and CC-BY-3.0 is not in
/usr/share/common-liceses). Please include the full text in your next
upload.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757710: debian-installer: disable all fsync calls in dpkg during installation

[Ansgar Burchardt]

Source: debian-installer
Severity: wishlist

It would be nice if all of dpkg's safe I/O code invoking fsync and
friends would be disabled during installation. From what I remember,
dpkg's --force-unsafe-io disables only some of them.

I think it would be possible to either use the eatmydata wrapper or
convince the dpkg maintainers to introduce a --force-really-unsafe-io
option that disables all fsync calls. (The additional option in dpkg is
probably the cleaner solution.)

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757729: upload to ftp.eu.upload.debian.org broken

[Ansgar Burchardt]

Martin Godisch  writes:
> uploading to ftp.eu.upload.debian.org is somehow broken:

Right, looks like the directory permissions were wrong. Could you please
try again?

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757775: RM: redeclipse, redeclipse-data -- moving to main

[Ansgar Burchardt]

Package: ftp.debian.org
User: ftp.debian@packages.debian.org
Usertag: rm
X-Debbugs-Cc: vch...@debian.org, pkg-games-de...@lists.alioth.debian.org

Vincent Cheng  writes:
> On Sun, Aug 10, 2014 at 9:00 PM, Debian FTP Masters
>  wrote:
>> An exception was raised while processing the package:
>> Traceback (most recent call last):
>>   File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 98, in 
>> wrapper
>> function(upload, srcqueue, comments, transaction)
>>   File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 150, in 
>> comment_accept
>> transaction.copy_source(upload.source, suite, 
>> source_component_func(upload.source), allow_tainted=allow_tainted)
>>   File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 142, in 
>> source_component_func
>> .join(Component).one()
>>   File "/usr/lib/python2.7/dist-packages/sqlalchemy/orm/query.py", line 
>> 2193, in one
>> "Multiple rows were found for one()")
>> MultipleResultsFound: Multiple rows were found for one()
>
> Was redeclipse-data rejected because of an issue with the package
> (please explain), or is dak just not having a good day (should I
> re-upload the package)?

There is a bug in dak that doesn't allow having a package in two
components at once. So redeclipse{,-data} need to be removed from the
archive before they can move to main.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757912: accountsservice: passes (encrypted) passwords as commandline arguments

[Ansgar Burchardt]

Package: accountsservice
Version: 0.6.37-3
Severity: normal
Tags: security

Hi,

accountsservice passes (encrypted) passwords as command line arguments
to usermod:

+---
| argv[0] = "/usr/sbin/usermod";
| argv[1] = "-p";
| argv[2] = strings[0];
+---[ src/user.c ]

Command line arguments, and thus the (encrypted) password, are by
default readable by every local user.

Please use some other means to set passwords that do not involve
passing them as command line arguments, for example by using chpasswd
which allows passing user name and password via stdin.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#757947: debian-edu-archive-keyring: does not remove keys on removal

[Ansgar Burchardt]

Package: debian-edu-archive-keyring
Version: 2014.02.27

debian-edu-archive-keyring uses apt-key add to add keys to apt's list of
trusted keys, but does not remove them again when the package is removed.

The easiest way to fix this is probably to just ship the keys in
trusted.gpg.d instead as debian-archive-keyring does.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#758100: perl: adopt versioned provides

[Ansgar Burchardt]

Hi,

On 08/14/2014 11:18, Niko Tyni wrote:
> dpkg (1.17.11) unstable; urgency=low
> [...]
> * Add versioned Provides support:
> - Add a new dpkg --assert-versioned-provides command.
> - Packages can provide a specific version, “virtual (= 1.0)” which will
>   be honored, previously it would just be accepted when parsing.
> - Non-versioned virtual packages will not satisfy versioned dependencies.
> - Versioned virtual packages will satisfy non-versioned dependencies.
> Based on skeletal code by Ben Collins .
> Closes: #7330, #24934, #112131, #134582, #180316
> 
> I expect this will be very useful for us and will put an end to the
> mess with 'perl (>= 5.18.0) | libdual-life-module (>= x.x)' dependencies.
> AIUI, 'libdual-life-module (>= x.x)' should be enough in the future.
> 
> Assuming dpkg in wheezy already accepts the versioned provides when
> parsing, I suppose we could put them in the perl package straight away
> and start cleaning the dependencies after jessie.

Does APT support this already?

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#758107: tracker.debian.org: do not display section and priority of source packages

[Ansgar Burchardt]

Package: tracker.debian.org
Severity: minor

tracker.debian.org shows the priority and section of the source package
in the upper left corner (under "General").  We don't really care about
these and all new source packages get the arbitrary value misc:extra (or
contrib/misc:extra, non-free/misc:extra).  Old packages still might have
different values, including "Priority: source" for many packages...

It might not be helpful for tracker.d.o to show these.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#759689: systemd: ProtectSystem= should cover /bin, /sbin, /lib on Debian

[Ansgar Burchardt]

Package: systemd
Version: 214-1
Severity: normal
Tags: patch

systemd's ProtectSystem= option should cover /bin, /sbin, /lib and
/lib64 (if it exists) on Debian systems where these are not symlinks
to /usr.

A patch is attached.

Please also backport 0f625d0b87139fc18cd565c9b6da05c53a0eb7ab.
Otherwise ProtectSystem=full is broken (and treated as
ProtectSystem=false).

Ansgar
From: Ansgar Burchardt 
Date: Thu, 24 Jul 2014 19:38:07 +0200
Subject: Include additional directories in ProtectSystem

--- a/src/core/namespace.c
+++ b/src/core/namespace.c
@@ -371,7 +371,7 @@
 strv_length(inaccessible_dirs) +
 private_dev +
 (protect_home != PROTECT_HOME_NO ? 3 : 0) +
-(protect_system != PROTECT_SYSTEM_NO ? 2 : 0) +
+(protect_system != PROTECT_SYSTEM_NO ? 6 : 0) +
 (protect_system == PROTECT_SYSTEM_FULL ? 1 : 0);
 
 if (n > 0) {
@@ -413,7 +413,7 @@
 }
 
 if (protect_system != PROTECT_SYSTEM_NO) {
-r = append_mounts(&m, protect_system == PROTECT_SYSTEM_FULL ? STRV_MAKE("/usr", "-/boot", "/etc") : STRV_MAKE("/usr", "-/boot"), READONLY);
+r = append_mounts(&m, protect_system == PROTECT_SYSTEM_FULL ? STRV_MAKE("/usr", "/bin", "/sbin", "/lib", "-/lib64", "-/boot", "/etc") : STRV_MAKE("/usr", "/bin", "/sbin", "/lib", "-/lib64", "-/boot"), READONLY);
 if (r < 0)
 return r;
 }

Bug#760070: logind : error at login and logout

[Ansgar Burchardt]

Erwan David  writes:
> When I login I get following messages
> [   21.563380] systemd-logind[2908]: Failed to start unit user@1000.service: 
> Unknown unit: user@1000.service
> [   21.563408] systemd-logind[2908]: Failed to start user service: Unknown 
> unit: user@1000.service
>
>
> When I logout I get the following ones
> [  329.910312] systemd-logind[2908]: Failed to abandon scope session-2.scope
> [  329.910345] systemd-logind[2908]: Failed to abandon session scope: No such 
> interface 'org.freedesktop.systemd1.Scope' on object at path 
> /org/freedesktop/systemd1/unid/session_2d2_2escope
>
> Those messages are in no log file.

Are you using systemd as init, or some other init and systemd-shim?

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#760087: systemd-timesyncd not working without systemd-network also running

[Ansgar Burchardt]

Package: systemd
Version: 214-1
Tags: upstream fixed-upstream

systemd-timesyncd will not function without systemd-networkd also
running as it queries networkd about network connection state. To allow
using timesyncd on systems w/o networkd, this has been changed upstream:
timesyncd now just assumes networking should work when networkd is not
running.

On IRC grawity said commits v215-576-gcedc8c4 and v215-629-gc572db3
should be the relevant changes upstream. Please consider backporting
them.

To verify, start systemd-timesyncd on a system w/o systemd-networkd. It
should then mention something like

  Status: "Using Time Server 88.198.180.55:123 (1.debian.pool.ntp.org)."

in the "systemctl status systemd-timesyncd" output.
  
Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#760206: dak cruft-report: recent source-only uploads should not be listed as obsolete

[Ansgar Burchardt]

Package: ftp.debian.org
User: ftp.debian@packages.debian.org
Usertags: dak

Cyril Brulebois  writes:
> Steven Chamberlain  (2014-09-01):
>> On 31/08/14 20:18, Debian FTP Masters wrote:
>> >  kfreebsd-kernel-headers (10.1~1) experimental; urgency=medium
>> >  .
>> >* Update for 10.1
>> >* Add myself to uploaders
>> 
>> This package seems to have disappeared from wanna-build?  It was in
>> Needs-Build state for several hours, the build depends should be
>> satisfiable, but it just disappeared from the queue and there is no log?
>> 
>> It was a source-only upload to experimental, was never held in the NEW
>> queue, and does not build any arch-indep packages.  Could anyone explain
>> where it went?

removals.822 says:

| Date: Mon, 01 Sep 2014 11:10:59 +
| Ftpmaster: Scott Kitterman
| Suite: experimental
| Sources:
|  kfreebsd-kernel-headers_10.1~1
| Reason: [auto-cruft] obsolete source package

So cruft-report was of the opinion this source package was obsolete as
it has no associated binary packages.

We should probably fix cruft-report to not consider recently uploaded
source packages as obsolete.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#760354: gnupg: --faked-system-time option documented, but not understood

[Ansgar Burchardt]

Package: gnupg
Version: 1.4.18-2
Severity: minor
Tags: upstream

man:gpg(1) documents a --faked-system-time option, but gpg doesn't
understand the option:

% gpg --faked-system-time 0
gpg: Invalid option "--faked-system-time"

Grepping through the source package only found hits for
"faked-system-time" in the documentation.

I wanted to use the option to create keys that expired in the past and
used faketime instead.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#760584: debian-keyring: debian-role-keys.gpg has deprecated keys

[Ansgar Burchardt]

Package: debian-keyring
Version: 2014.08.31

debian-role-keys.gpg has a bunch of deprecated (and expired) keys, i.e.
all of the archive-related ones and 0-2 of the CD signing keys.

Please move them to a seperate keyring (debian-removed-role-keys.gpg?).
Some are also included in the debian-archive-removed-keys.gpg keyring
from the debian-archive-keyring package and could probably just be dropped.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#760585: debian-keyring: include security team key in debian-role-keys.gpg

[Ansgar Burchardt]

Package: debian-keyring
Version: 2014.08.31
Severity: wishlist

Please include the key used by the security team in
debian-role-keys.gpg. It can be found on [1].

  [1] 

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#745938: decide on the future of sparc in unstable

[Ansgar Burchardt]

Hi,

Philipp Kern  writes:
> now that sparc has been dropped from testing, please decide on the fate
> of sparc in unstable.

Are there still people interested in the current sparc port?

I don't remember seeing any replies to the release team's concers
regarding sparc, so my first impression is that people are no longer
working on it... In that case I don't think we should keep it in the
archive much longer.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746241: transition: enet

[Ansgar Burchardt]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: transition

Hi,

enet had a soname change (just accepted into experimental) and needs a
transition. The ABI changes should be unproblematic (just new members
in a public struct). There also are only a few rdeps.

Ansgar

Ben file:

title = "enet";
is_affected = .depends ~ "libenet2a" | .depends ~ "libenet7";
is_good = .depends ~ "libenet7";
is_bad = .depends ~ "libenet2a";


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746242: systemd-shim: breaks systemd's systemctl, even when removed

[Ansgar Burchardt]

Package: systemd-shim
Severity: important

Having systemd-shim installed or removed (but not purged) breaks
systemd's systemctl with permission errors. I didn't check if it
breaks more.

Ansgar

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (500, 'testing'), (100, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.13-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages systemd-shim depends on:
ii  libc6 2.18-4
ii  libglib2.0-0  2.40.0-2

systemd-shim recommends no packages.

Versions of packages systemd-shim suggests:
pn  pm-utils  


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#745938: FWIW -- I consider sparc useful, pity if its support ends completely

[Ansgar Burchardt]

Hi,

On 04/29/2014 04:14 AM, Yaroslav Halchenko wrote:
> With Debian dropping support for sparc unfortunately I would need to
> stop  providing similar "unique" testing opportunity for those projects,
> which would not be the end of the world, but kinda a pity since sparcs
> seems to be quite nice and which helped to gain more "geeky gratitude"
> for Debian being somewhat unique in its spread of support.

Having people find the sparc port useful or using it is however not
enough to maintain it. There needs to be a commitment to fix issues and
to respond to inquiries about the current status. However there is
currently *nobody* doing this as demonstrated by the lack of replies to
the release teams concerns (see all the "bits from the release team"
mails on debian-devel-announce@ since the Wheezy release).

Axel Beckert was the only one who stepped up as a porter for sparc, but
he cannot look into the (existing) toolchain and kernel issues[1].

  [1] 

This needs to change or it is not realistic for Debian to be able to
keep this port (and I'm not sure sparc64 is in a much better state as a
possible replacement).

> P.S. I wondered now if somehow we could attract students taking some
> 'advanced computer architecture' courses at the universities...

I personally would be more interested in an architecture where one can
actually purchase current hardware (sparc servers on oracle.com seem to
start at ~20k USD). There are quite a lot of those for what I
understand: arm*, mips*, ...

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746967: buildd.debian.org: d-i daily builds happen with unsigned code from alioth

[Ansgar Burchardt]

Hi,

Cyril Brulebois  writes:
> I think I already proposed pushing d-i master to some other machine
> with less liberal access than alioth's. Would that help? If so, which
> machine? dillon? Would pulling from there over https help? Be
> sufficient? Otherwise, what else?

I think the buildds building stuff for the offical archive should only
do that. This includes not building for other archives (ports) or daily
images for d-i (no matter the source).

Of course there needs to be a solution for the daily d-i images.

Maybe they could be built on dedicated buildds that are not building
packages for the main archive? Though that would require more hardware.

Or run the daily d-i build as a job on the porter boxes?

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746967: buildd.debian.org: d-i daily builds happen with unsigned code from alioth

[Ansgar Burchardt]

Mehdi Dogguy  writes:
> Le 2014-05-04 15:04, Ansgar Burchardt a écrit :
>> I think the buildds building stuff for the offical archive should only
>> do that. This includes not building for other archives (ports) or
>> daily
>> images for d-i (no matter the source).
>
> IMHO, if we want to initiate a change there, we should at least say
> why it is so important to separate those builds. From my POV, the only
> difference between the content of the Debian archive and an alioth
> repository is a GPG signature. Having that in mind, would it be
> acceptable to require a GPG-signed tag to initiate a build from?

Sure: one problem is that repositories on Alioth should not be
trusted. It's quite easy to get a shell account there, so it might get
compromised at some time. This should not result in buildds being
potentially compromised as well (by running code obtained from Alioth
during a build).

Signed tags would be an improvement[1], but still have issues: it's an
extra entry point into the buildd network and certain attacks are still
possible: assume a buggy version of d-i does unsafe things via network
during the build, but has a signed tag. One would have to make sure an
attacker cannot make the buildd network repeat the build for this old
version.

  [1] Minus minor things like being effectively limited to SHA1 in Git.

Uploading signed .changes would also address these problems, but I don't
know if that would fit into the workflow the d-i team uses.
  
> RedHat has been doing that for years and didn't hear about any major
> issue with that. Besides, we can also require that buildds building
> for d-i are configured with throwaway chroots (but i think this became
> the default now?).

Throwaway chroots don't help against processes breaking out of the
chroot, see #661037.

> The problem is not about running blindly code coming from
> elsewhere. We are already doing that (DDs can upload anything to build
> on buildds... they can also upload/test exploits).

Sure, but those are at least signed by a developer's key. Those are
hopefully better protected than a host more or less open to the general
public.

> So, we have to find better arguments
> before changing
> this workflow and propose a sustainable alternative plan to build d-i.
>
>> Maybe they could be built on dedicated buildds that are not building
>> packages for the main archive? Though that would require more
>> hardware.
>
> This doesn't seem doable for all architectures.

For which architectures would it be a problem to get additional
hardware/VMs?

>> Or run the daily d-i build as a job on the porter boxes?
>
> Can we please define what porter boxes are for and stick to that? They
> are not "available hardware to do any stuff".

Well, the same question applies to buildds. As I said I would really
like buildds building packages for the main archive to stick to just
doing that. (And the list of things they do in addition to that seems to
currently include at least two items: d-i images and building stuff for
inofficial archives/ports.d.o. No idea if they do even more.)

Ansgar


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746772: dune-grid: FTBFS on mipsel

[Ansgar Burchardt]

On 05/03/2014 14:11, Ivo De Decker wrote:
> The binnmu of dune-grid on mipsel failed twice:
> 
> https://buildd.debian.org/status/logs.php?pkg=dune-grid&arch=mipsel

mayer.debian.org has only 1 GB RAM (+ 0.5 GB swap), but is configured to
build in parallel with 2 processes. dune-grid however needs more RAM per
core to build sccessfully.

The package is now blacklisted on that buildd and built successfully on
eysler.debian.org[1].

  [1]


Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#746715: the foreseeable outcome of the TC vote on init systems

[Ansgar Burchardt]

Hi,

Ian Jackson  writes:
> Can we stop the general commentary on Daniel Baumann's performance as
> maintainer ?  I don't think it's helpful or relevant to the discussion
> about tftp-hpa and upstart.

Is there still anything left to discuss on tftp-hpa/upstart or could
this issue be closed? The last upload restored support for upstart[1].

  [1] 

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733351: src:user-mode-linux: build-depends on linux-source-3.11 which is gone

[Ansgar Burchardt]

Package: src:user-mode-linux
Version: 3.11-1um-2
Severity: serious

user-mode-linux build-depends on linux-source-3.11 which is gone. Please
update the dependency.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733739: upstart should support cgroups

[Ansgar Burchardt]

Package: upstart
Severity: normal

cgroups are a useful way to group processes by service. They can be
used to limit resources per service (instead of per process with
ulimit). Using cgroups also allows to reliably terminate a service,
even when it spawns helper processes.

It would be nice if upstart could optionally contain services in
cgroups.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733741: upstart: implement additional security features

[Ansgar Burchardt]

Package: upstart

Upstart should provide additional security features, such as isolating
processes from the network using network namespaces, restricting file
system access, preventing the processes to regain privileges, system
call filters, private /tmp and limiting device access.

See also this part of Russ' mail on -ctte:

Russ Allbery  writes:
> * Security defense in depth.  Both upstart and systemd support the basics
>   (setting the user and group, process limits, and so forth).  However,
>   systemd adds a multitude of additional defense in depth features,
>   ranging from capability limits to private namespaces or the ability to
>   deny a job access to the network.  This is just a simple matter of
>   programming on the upstart side, but it still contributes to the general
>   feature deficit; the capabilities in systemd exist today.  I'm sure I'm
>   not the only systems administrator who is expecting security features
>   and this sort of defense in depth to become increasingly important over
>   the next few years.
>
>   Here again, I think we have an opportunity for Debian to be more
>   innovative and forward-looking in what we attempt to accomplish in the
>   archive by adopting frameworks that let us incorporate the principles of
>   least privilege and defense in depth into our standard daemon
>   configurations.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#727708: init system other points, and conclusion

[Ansgar Burchardt]

Ian Jackson  writes:
> intrigeri writes ("Bug#727708: init system other points, and conclusion"):
>> The difference lies in who are the people who "need" to do this work
>> "anyway", and who else may instead dedicate their time to other tasks,
>> lead by their own desires and needs.
>
> I think that it is right that the costs of undoing systemd's bundling,
> be borne by the systemd community (including systemd's advocates and
> maintainers in Debian) rather than by Debian (or the rest of the Free
> Software world) at large.

What about the cgroup management functionality that newer versions of
logind require? Should the systemd maintainers also reimplement it in
upstart?

And if upstart wants to use parts of systemd, why shouldn't the upstart
maintainer do the work for this? Or they could fork logind which they
suggested before... This would also allow having a newer systemd in
Debian.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733818: nmu: gdb-avr_7.4-1

[Ansgar Burchardt]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Please schedule a binNMU for gdb-avr. The version currently in the
archive is built using gdb-source 7.4really-1 or 7.4.1-3, but the
current version is 7.6.1.

nmu gdb-avr_7.4-1 . ALL . -m "Rebuilt against gdb 7.6.1."

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#727708: init system thoughts

[Ansgar Burchardt]

Hi,

Colin Watson  writes:
> Reservations with systemd
> -
[...]
> Basically, systemd would be more compelling to me if it tried to do
> less.  I don't expect to persuade systemd advocates of this, as I think
> it amounts to different basic views of the world, but the basic approach
> here is probably the single biggest factor influencing my position.

On the other hand even when using upstart as an init replacement, we'll
continue to use large chunks of systemd (logind, other dbus
services). I personally think "less is more" would only be a convincing
argument if we actually would not need the aditional features.

I also have one question: your mail doesn't mention the integration
problems with logind into a system that uses upstart and not systemd as
init. Do you think this will not be an issue? Given it means ongoing
work instead of a one-time investment, this is one of my main gripes
with upstart. I feel that minor technical differences between the init
replacements are not work committing to long-time maintaince of a
systemd-logind branch that works outside of systemd. There are more
interesting areas we can invest our resources into.

Note that this might also include session management functions in the
future. As you mentioned yourself in [1], DEs are looking into using
advanced session supervision. So far both kwin and GNOME seem to target
systemd for this. So this would be another area that we would need to
invest resources into to maintain an upstart replacement.

  [1] 

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733490: RM: unicon -- RoQA; orphaned, unused, dead upstream

[Ansgar Burchardt]

Control: tag -1 moreinfo

Moritz Muehlenhoff  writes:
> please remove unicon. It's orphaned for more than a year, dead upstream
> and popcon is very low. It's also affected by several of the bugs found
> by the Mayhem project.

The package still has a reverse dependency:

# Broken Depends:
zhcon: zhcon [...]

# Broken Build-Depends:
zhcon: unicon-imc2

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733705: RM: automake1.4 -- ROM; old, obsolete automake package

[Ansgar Burchardt]

Control: tag -1 moreinfo

Eric Dorland  writes:
> There are only two remaining packages build depending on automake1.4 and
> they both have patches (see http://bugs.debian.org/724002 and
> http://bugs.debian.org/724010). Once it's removed I'll upgrade the severity
> of these bugs and upload delayed NMU uploads.

There is a third package build-depending on automake1.4: gcc-3.3.

I also think it's better to fix the packages before removing the
automake1.4 package.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733929: exim4-base: anacron instead of cron should be enough

[Ansgar Burchardt]

Package: exim4-base
Version: 4.82-3
Severity: normal

exim4-base currently depends on cron | fcron, but it looks like it
only needs jobs in /etc/cron.daily to be processed. These are also
processed by anacron.

So please add anacron as an alternative dependency.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733929: exim4-base: anacron instead of cron should be enough

[Ansgar Burchardt]

Marc Haber  writes:
> On Thu, Jan 02, 2014 at 11:33:25AM +0100, Ansgar Burchardt wrote:
>> exim4-base currently depends on cron | fcron, but it looks like it
>> only needs jobs in /etc/cron.daily to be processed. These are also
>> processed by anacron.
>> 
>> So please add anacron as an alternative dependency.
>
> anacron pulls in cron anyway, so what is this change going to buy us?

anacron only recommends cron. exim4 is the only package preventing me
from removing cron from my desktop system.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733929: exim4-base: anacron instead of cron should be enough

[Ansgar Burchardt]

Marc Haber  writes:
> On Thu, Jan 02, 2014 at 11:53:06AM +0100, Ansgar Burchardt wrote:
>> anacron only recommends cron. exim4 is the only package preventing me
>> from removing cron from my desktop system.
>
> Out of curiosity, how is anacron invoked if not from cron?

At system startup via the init script (or systemd service or upstart
job) or using systemd timers (tough this isn't shipped with the anacron
package).

systemd itself ships systemd-tmpfiles-clean.timer which runs a daily
job, similar to how anacron itself works:

+-
| [Unit]
| Description=Daily Cleanup of Temporary Directories
| Documentation=man:tmpfiles.d(5) man:systemd-tmpfiles(8)
|
| [Timer]
| OnBootSec=15min
| OnUnitActiveSec=1d
+[file:///lib/systemd/system/systemd-tmpfiles-clean.timer]

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#733929: exim4-base: anacron instead of cron should be enough

[Ansgar Burchardt]

Marc Haber  writes:
> On Thu, Jan 02, 2014 at 01:08:23PM +0100, Ansgar Burchardt wrote:
>> Marc Haber  writes:
>> > On Thu, Jan 02, 2014 at 11:53:06AM +0100, Ansgar Burchardt wrote:
>> >> anacron only recommends cron. exim4 is the only package preventing me
>> >> from removing cron from my desktop system.
>> >
>> > Out of curiosity, how is anacron invoked if not from cron?
>> 
>> At system startup via the init script (or systemd service or upstart
>> job) or using systemd timers (tough this isn't shipped with the anacron
>> package).
>
> So this is actually a patch making systemd migration easier. Thanks
> for clarifying that.

No, it's not. I just want to get rid of cron which I don't need on my
desktop system. Running anacron jobs at startup is enough anyway as I
restart it daily so it doesn't matter to me if someone does more
integration with systemd or not.

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#712185: at: add upstart init support

[Ansgar Burchardt]

Control: tag -1 moreinfo

Dmitrijs Ledkovs  writes:
> From my point of view, including/installing upstart job with
> dh_installinit is the only piece that is required to integrate your
> package correctly with both upstart & sysv init at the same time.
> Leaving out modifications to the init.d script.

Just installing the job file should cause no harm, but I'll probably
wait for the tech-ctte decision.

Also Colin Watson[1] and Ian Jackson[2] suggested that "expect fork"
might not be a good idea. The upstart job should probably do what
Type=simple in systemd[3] does, i.e. ask atd not to fork and don't
expect anything special to happen to signal readiness.

  [1] 
  [2] 
  [3] 

Ansgar


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#795963: dune-istl: FTBFS: bcrsimplicitbuild.cc:269:51: error: no match for 'operator<<'

[Ansgar Burchardt]

Control: tag -1 upstream fixed-upstream
Control: fixed -1 2.4~20150506gee6e5f6-1

> dune-istl fails to build from source on unstable/amd64:
>
>   [..]
>
>   bcrsimplicitbuild.cc: In function 'int testEntryConsistency()':
>   bcrsimplicitbuild.cc:269:51: error: no match for 'operator<<' (operand
>   types are 'std::basic_ostream' and 'std::ostream {aka
>   std::basic_ostream}')
>std::cerr<<"ERROR: Entries are not consistent"<
Date:   Sat Nov 29 07:59:44 2014 +0100

Fix wrong std::cerr at end of output.

It should be std::endl.
Courtesy of GCC 5-svn, it refuses to compile these.

Ansgar

Bug#759401: dak accepting upstream signature .asc files?

[Ansgar Burchardt]

Daniel Kahn Gillmor  writes:
> Just a ping on #759401 -- can dak accept upstream signature .asc files
> yet?

I don't know if it works, but you are welcome to try. I did at least a
few changes that might make it work already.

Ansgar

Bug#796389: systemd should depend on a newer version of mount

[Ansgar Burchardt]

Package: systemd
Version: 224-1
Severity: minor

systemd seems to need a newer version of mount that it currently depends on:

  Aug 14 10:39:24 xyz swapon[457]: /sbin/swapon: invalid option -- 'o'

The fstab entry in question is

  /dev/mapper/xyz-swap none swap sw 0 0

Ansgar

-- System Information:
Debian Release: 8.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable'), (300, 'unstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages systemd depends on:
ii  adduser 3.113+nmu3
ii  libacl1 2.2.52-2
ii  libapparmor12.9.2-3
ii  libaudit1   1:2.4-1+b1
ii  libblkid1   2.25.2-6
ii  libc6   2.19-18
ii  libcap2 1:2.24-8
ii  libcap2-bin 1:2.24-8
ii  libcryptsetup4  2:1.6.6-5
ii  libgcrypt20 1.6.3-2
ii  libkmod218-3
ii  liblzma55.1.1alpha+20120614-2+b3
ii  libmount1   2.25.2-6
ii  libpam0g1.1.8-3.1
ii  libseccomp2 2.1.1-1
ii  libselinux1 2.3-2
ii  libsystemd0 224-1
ii  mount   2.25.2-6
ii  sysv-rc 2.88dsf-59
ii  udev215-17+deb8u1
ii  util-linux  2.26.2-9

Versions of packages systemd recommends:
ii  dbus1.9.12-1
ii  libpam-systemd  224-1

Versions of packages systemd suggests:
pn  systemd-ui  

-- no debconf information

Bug#796548: emdebian-archive-keyring: should be in Priority: extra

[Ansgar Burchardt]

Package: emdebian-archive-keyring
Version: 2.0.5
Severity: normal

emdebian-archive-keyring should *not* be Priority: important. I
changed its priority in the archive to "extra", please make the binary
package match this.

Ansgar

Bug#798413: ftp.debian.org: Source-only uploads which FTBFS on Arch: all buildd require NEW processing in next upload

[Ansgar Burchardt]

Control: retitle -1 dak cruft-report should check Package-List field
Control: severity -1 normal

Santiago Vila  writes:
> When a source-only upload fails to build from source in the
> "Arch: all" autobuilder [1], the system seems to think that the source
> does no longer provide such Arch: all packages.

The cruft report does think so after some time (meh, heuristics are bad)
and packages are then removed by the ftp team after some time.

The proper solution is probably to have the cruft-report check the
source package's Package-List field that lists all packages built (and
on which architecture they are built).

Ansgar

Bug#798817: emacs24: gnus displays remote html content by default

[Ansgar Burchardt]

Package: emacs24
Version: 24.5+1-1
Severity: important

Gnus displays remote HTML content, such as (tracking) images, by
default. I noticed this when reading [1] on debian-user@l.d.o.

Most other mail clients (Evolution, Icedove) disallow remote content
by default and require explicit confirmation. I think gnus should
follow this example.

Ansgar

  [1] 
https://lists.debian.org/55f42a0a712cf_70bf3fc4828aabc09192...@prod-rs-r13.mail

-- System Information:
Debian Release: 8.2
  APT prefers stable
  APT policy: (500, 'stable'), (100, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages emacs24 depends on:
ii  emacs24-bin-common 24.5+1-1
ii  gconf-service  3.2.6-3
ii  libacl12.2.52-2
ii  libasound2 1.0.28-1
ii  libatk1.0-02.14.0-1
ii  libc6  2.19-18+deb8u1
ii  libcairo-gobject2  1.14.0-2.1
ii  libcairo2  1.14.0-2.1
ii  libdbus-1-31.8.20-0+deb8u1
ii  libfontconfig1 2.11.0-6.3
ii  libfreetype6   2.5.2-3
ii  libgconf-2-4   3.2.6-3
ii  libgdk-pixbuf2.0-0 2.31.1-2+deb8u2
ii  libgif44.1.6-11
ii  libglib2.0-0   2.42.1-1
ii  libgnutls-deb0-28  3.3.8-6+deb8u3
ii  libgomp1   5.1.1-14
ii  libgpm21.20.4-6.1+b2
ii  libgtk-3-0 3.14.5-1+deb8u1
ii  libice62:1.0.9-1+b1
ii  libjpeg62-turbo1:1.3.1-12
ii  libm17n-0  1.6.4-3
ii  libmagickcore-6.q16-2  8:6.8.9.9-5
ii  libmagickwand-6.q16-2  8:6.8.9.9-5
ii  libotf00.9.13-2
ii  libpango-1.0-0 1.36.8-3
ii  libpangocairo-1.0-01.36.8-3
ii  libpng12-0 1.2.50-2+b2
ii  librsvg2-2 2.40.5-1
ii  libselinux12.3-2
ii  libsm6 2:1.2.2-1+b1
ii  libtiff5   4.0.3-12.3
ii  libtinfo5  5.9+20140913-1+b1
ii  libx11-6   2:1.6.2-3
ii  libxft22.3.2-1
ii  libxinerama1   2:1.1.3-1+b1
ii  libxml22.9.1+dfsg1-5
ii  libxpm41:3.5.11-1+b1
ii  libxrandr2 2:1.4.2-1+b1
ii  libxrender11:0.9.8-1+b1
ii  zlib1g 1:1.2.8.dfsg-2+b1

emacs24 recommends no packages.

Versions of packages emacs24 suggests:
ii  emacs24-common-non-dfsg  24.4+1-2

-- no debconf information

Bug#798952: RM: libdune-grid-2.3.1 libdune-grid-dbg libdune-grid-dev libdune-grid-glue-2.3.0 libdune-grid-glue-dbg libdune-grid-glue-dev libdune-pdelab-2.0.0 libdune-pdelab-dev [mips mipsel] -- ROM; d

[Ansgar Burchardt]

Package: ftp.debian.org
Severity: normal

dune-grid fails to build on mips[1] and mipsel[2] due to buildds not
having enough RAM. Please remove the outdated binaries of dune-grid
and their reverse dependencies from unstable.

Ansgar

  [1] 

  [2] 

Bug#799046: dpkg-architecture: please mention "target machine" applies to cross-compilers only

[Ansgar Burchardt]

Package: dpkg-dev
Version: 1.17.25
Severity: minor
File: /usr/bin/dpkg-architecture

Hi,

I was wondering what the difference between "host machine" and "target
machine" is. Clearly the compiler has to build binaries for the target
machine.

>From dpkg's changelog I understand that "target machine" is the target
architecture when building cross-compilers. It would be nice if
man:dpkg-architecture(1) would mention this (i.e. that "target
machine" only applies for cross-compilers).

Ansgar

Bug#798024: typo in clblas-ppc64el patch ?

[Ansgar Burchardt]

Ghislain Vaillant  writes:
> In the patch you provided, d/rules is modified with:
>
>  # Uncomment this to turn on verbose mode.
>  #export DH_VERBOSE=1
>
> +DEB_HOST_ARCH=$(shell dpkg-architecture -qDEB_HOST_ARCH)
> +
>  export DEB_BUILD_MAINT_OPTIONS = hardening=+all
>  export DEB_CFLAGS_MAINT_APPEND = -Wall -pedantic
>  export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
>
> +ifeq ($(DEB_BUILD_ARCH), ppc64el)
> +DEB_CFLAGS_MAINT_APPEND += -mno-altivec
> +endif
> +
>  %:
>   dh $@ --sourcedirectory=src \
>   --buildsystem=cmake \
>
> Isn't it s/DEB_HOST_ARCH/DEB_BUILD_ARCH at the beginning?

I think it should be DEB_HOST_ARCH (also below).
>From man:dpkg-architecture(1):

| build machine: The machine the package is built on.
| host machine: The machine the package is built for.

and I assume this is not for some helper programs intended to be run as
part of the build (on the build machine), but for the binaries that
should end up in the package.

Ansgar

Bug#799560: RM: libdune-typetree-2.3.1 -- NBS; dune-typetree no longer builds a shared library

[Ansgar Burchardt]

Package: ftp.debian.org
Severity: normal

Please remove libdune-typetree-2.3.1. It is no longer built by the
package as the shared library was dropped upstream: dune-typetree is
now a pure header library.

Ansgar

Bug#799567: RM: pennmush -- RoQA; unmaintained in Debian; FTBFS

[Ansgar Burchardt]

Package: ftp.debian.org
Severity: normal

Hi,

please consider removing pennmush from Debian. It is not maintained in
Debian (though upstream is still active[1]): the last maintainer
upload was in 2008 with a NMU to fix a build failure in 2012.
Currently it FTBFS again[2].

Ansgar

  [1] 
  [2] 

Bug#799549: systemd: Provide system-log-daemon

[Ansgar Burchardt]

Josh Triplett  writes:
> I'd actually suggest *two* tiny packages: a systemd-journal-persistent
> package that ships /var/log/journal and provides/conflicts
> system-log-daemon, and a systemd-journal-transient package that
> pointedly doesn't ship /var/log/journal (or in the future if "auto" mode
> goes away, explicitly configures transient mode) and provides/conflicts
> system-log-daemon.  That way, someone who really does want in-memory
> logging only can install systemd-journal-transient to make that choice
> explicitly, satisfying other packages that need a system-log-daemon.

I admit not liking (ab)using packages to configure systems as I don't
like tiny packages and don't think this approach scales well.

If you really want packages handling configuration, there is debconf
(which can be preseeded). Or people can use puppet and the like.

Ansgar

Bug#800582: nmu: dune-grid-glue_2.4~20150723gd6e4c74-2

[Ansgar Burchardt]

Package: release.debian.org
Severity: normal
User: release.debian@packages.debian.org
Usertags: binnmu

Hi,

dune-grid-glue needs to be rebuild against the DUNE 2.4.0
release. Please schedule a binNMU.

nmu dune-grid-glue_2.4~20150723gd6e4c74-2 . ALL . -m "Rebuild against DUNE 
2.4.0."

Ansgar

Bug#800744: setuptools-scm: maintainer address bounces

[Ansgar Burchardt]

Source: setuptools-scm
Version: 1.8.0-1
Tags: sid
Severity: serious
X-Debbugs-Cc: Tristan Seligmann 

[ CC'ed the sponsor. ]

The maintainer address for setuptools-scm bounces, see below.

Ansgar

Mail Delivery System  writes:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   julien.pu...@laposte.net
> retry timeout exceeded
>
> -- This is a copy of the message, including all the headers. --
>
[...]
> To: Julien Puydt , 
> X-DAK: dak process-upload
> X-Debian: DAK
> X-Debian-Package: setuptools-scm
> Precedence: bulk
> Auto-Submitted: auto-generated
> MIME-Version: 1.0
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: 8bit
> Subject: setuptools-scm_1.8.0-1_amd64.changes ACCEPTED into unstable
> Message-Id: 
> Date: Fri, 02 Oct 2015 09:22:14 +
>
>
>
> Accepted:
>
> Format: 1.8
> Date: Fri, 02 Oct 2015 11:02:33 +0200
> Source: setuptools-scm
> Binary: python-setuptools-scm python3-setuptools-scm
> Architecture: source all
> Version: 1.8.0-1
> Distribution: unstable
> Urgency: medium
> Maintainer: Julien Puydt 
> Changed-By: Julien Puydt 
> Description:
>  python-setuptools-scm - blessed package to manage your versions by scm tags 
> for Python 2
>  python3-setuptools-scm - blessed package to manage your versions by scm tags 
> for Python 3
> Changes:
>  setuptools-scm (1.8.0-1) unstable; urgency=medium
>  .
>* New upstream release.
>* Put myself as sole maintainer.
> Checksums-Sha1:
>  3affc1728a7a2c01b0180ba18857c05f88867aeb 1904 setuptools-scm_1.8.0-1.dsc
>  03fdbb5f2023407c23ef38080a823cb195e51e01 14491 
> setuptools-scm_1.8.0.orig.tar.bz2
>  4faf34d58e69c4e2b24c0d4d6eaaeb96d72a84b6 1980 
> setuptools-scm_1.8.0-1.debian.tar.xz
>  852d03ad9087e845acb59a04d0c42747894bc330 11162 
> python-setuptools-scm_1.8.0-1_all.deb
>  336c4ec992aa760a01362f86226e7432ac5dbe57 11222 
> python3-setuptools-scm_1.8.0-1_all.deb
> Checksums-Sha256:
>  3d0544e1c27aa0f3daa29ab937630670d8202f768d72dae999ab7dd95dfee067 1904 
> setuptools-scm_1.8.0-1.dsc
>  ddbf365e60e5f8e3f86fe117edeee4a7e1dd8ce7a9337951c9c163e7c506e602 14491 
> setuptools-scm_1.8.0.orig.tar.bz2
>  f9d59eb303a38938fd4e6711ada750e22f0a59a7e9740e9355a1575d4e5730f1 1980 
> setuptools-scm_1.8.0-1.debian.tar.xz
>  07536d6b29950962ce5d2d1a7a55df578687a85de42ba0ef0a7d102e29a1de5d 11162 
> python-setuptools-scm_1.8.0-1_all.deb
>  9ad126c0eb8a41b03026ec3c1e62047627c8541483f9eb9d55fdf78ed9e296ed 11222 
> python3-setuptools-scm_1.8.0-1_all.deb
> Files:
>  f3e9b52ce3a3284431e19ca82aa65718 1904 python optional 
> setuptools-scm_1.8.0-1.dsc
>  49e83e8fee9ac1d356a634707a62e294 14491 python optional 
> setuptools-scm_1.8.0.orig.tar.bz2
>  c78a7e983d26861795f71cf5963ac69e 1980 python optional 
> setuptools-scm_1.8.0-1.debian.tar.xz
>  df8b0b1ce185038c5985752eaf0947cb 11162 python optional 
> python-setuptools-scm_1.8.0-1_all.deb
>  c41c236a261172aa8d7cf0ff7041a375 11222 python optional 
> python3-setuptools-scm_1.8.0-1_all.deb
>
>
>
> Thank you for your contribution to Debian.

Bug#795241: source package contains *.exe without source

[Ansgar Burchardt]

Package: src:coin3
Version: 3.1.4~abc9f50-9
Severity: serious

The source package contains *.exe files for which the source seems to
be missing. Please make sure the source is included or exclude them
from the upstream tarball.

  coin3-3.1.4~abc9f50/cfg/*.exe

Ansgar

Bug#795242: incomplete copyright information

[Ansgar Burchardt]

Package: src:coin3
Version: 3.1.4~abc9f50-9
Severity: serious

debian/copyright is incomplete. At least the license and copyright
information for the embedded copy of expat that lintian warns about is
missing.

Ansgar

Bug#795573: mergechanges: option to strip all binary packages

[Ansgar Burchardt]

Package: devscripts
Version: 2.15.8
Severity: wishlist
File: /usr/bin/mergechanges

mergechanges recently got an option to strip arch-dep packages from
the .changes. It would be nice if there was also an option to remove
*all* binary packages from the .changes, keeping only the source.

Ansgar

Bug#795573: mergechanges: option to strip all binary packages

[Ansgar Burchardt]

Control: tag -1 + patch

Ansgar Burchardt  writes:
> mergechanges recently got an option to strip arch-dep packages from
> the .changes. It would be nice if there was also an option to remove
> *all* binary packages from the .changes, keeping only the source.

The attached patch seems to work for me. It also fixes a bug that
prevented showing the usage message (use "cat <27c27
< echo "Usage: $PROGNAME [-h|--help|--version] [-d] [-i|--indep] [-f]   [ ...]"
---
> echo "Usage: $PROGNAME [-h|--help|--version] [-d] [-S|--source] [-i|--indep] [-f]   [ ...]"
32c32
< echo < cat <   are included in the output.
>   If -S is given, only the source package is included in the output.
54c55,56
< INDEP_ONLY=0
---
> REMOVE_ARCHDEP=0
> REMOVE_INDEP=0
75c77
< 	INDEP_ONLY=1
---
> 	REMOVE_ARCHDEP=1
77a80,84
> -S|--source)
> REMOVE_ARCHDEP=1
> REMOVE_INDEP=1
> shift
> ;;
107c114
< if test ${INDEP_ONLY} = 1; then
---
> if test ${REMOVE_ARCHDEP} = 1; then
109a117,119
> if test ${REMOVE_INDEP} = 1; then
> ARCHS=$(echo "$ARCHS" | grep -vxF all)
> fi
115c125
< if test ${INDEP_ONLY} = 1; then
---
> if test ${REMOVE_ARCHDEP} = 1 -o ${REMOVE_INDEP} = 1; then
118,119c128,129
< (*.dsc|*.diff.gz|*.tar.*|*_all.deb|*_all.udeb)
< # source or architecture-independent
---
> (*.dsc|*.diff.gz|*.tar.*)
> # source
121a132,137
> (*_all.deb|*_all.udeb)
> # architecture-indep
> if test ${REMOVE_INDEP} = 0; then
> echo "$line"
> fi
> ;;
123c139,142
< # architecture-specific, ignore
---
> # architecture-specific
> if test ${REMOVE_ARCHDEP} = 0; then
> echo "$line"
> fi

Bug#795783: Applications should not use socket below $HOME by default

[Ansgar Burchardt]

Package: debian-policy

User-level applications should not use sockets below $HOME by default: the
filesystem used for $HOME might not support them, as is the case for NFS
or OpenAFS.

They should use XDG_RUNTIME_DIR (if set) or as a fallback a temporary
directory below /tmp; any location below $HOME should only be used as a
fallback.

I'm not sure where in policy such a requirement would belong: we don't
seem to have requirements for either socket use nor what user-level
applications should be doing so far.

See also [1].

Ansgar

  [1] 

Bug#797937: src:company-mode: maintainer address bounces

[Ansgar Burchardt]

Source: company-mode
Source-Version: 0.8.12-1
Severity: serious
X-Debbugs-Cc: David Bremner 

The maintainer address bounces. I guess the mailing list is
@lists.*alioth*.d.o, not @lists.d.o

Ansgar

Mail Delivery System  writes:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   pkg-emacsen-add...@lists.debian.org
> SMTP error from remote mail server after RCPT 
> TO::
> host bendel.debian.org [2001:41b8:202:deb:216:36ff:fe40:4002]:
> 550 5.1.1 :
> Recipient address rejected: User unknown in virtual alias table
>
> -- This is a copy of the message, including all the headers. --
>
> Return-path: 
[...]
> To: Debian Emacs addons team , David 
> Bremner 
> X-DAK: dak process-policy
> X-Debian: DAK
> X-Debian-Package: company-mode
> Precedence: bulk
> Auto-Submitted: auto-generated
> MIME-Version: 1.0
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: 8bit
> Subject: company-mode_0.8.12-1_amd64.changes ACCEPTED into unstable, unstable
> Message-Id: 
> Date: Wed, 02 Sep 2015 11:00:09 +
>
>
>
> Accepted:
>
> Format: 1.8
> Date: Fri, 21 Aug 2015 08:49:22 +0200
> Source: company-mode
> Binary: elpa-company
> Architecture: source all
> Version: 0.8.12-1
> Distribution: unstable
> Urgency: low
> Maintainer: Debian Emacs addons team 
> Changed-By: David Bremner 
> Description:
>  elpa-company - Modular in-buffer completion framework for Emacs
> Changes:
>  company-mode (0.8.12-1) unstable; urgency=low
>  .
>* Initial release
> Checksums-Sha1:
>  f0bd5eb142b188af633e25977e8d2db32957a3f5 1786 company-mode_0.8.12-1.dsc
>  0860d609f9104d44cc7cb9eb77483d9e2ad039d7 70379 
> company-mode_0.8.12.orig.tar.gz
>  feb789ffdf148afc174bffd3233466d50ecf07cb 2124 
> company-mode_0.8.12-1.debian.tar.xz
>  c7b280175261cc9e6b926c227d962044e4032152 59064 elpa-company_0.8.12-1_all.deb
> Checksums-Sha256:
>  f2505da463ec877e39e79000bcea4074205707b5fa4a9d5ce05f8b9f08371ea1 1786 
> company-mode_0.8.12-1.dsc
>  67937eda92a617f29091874b00aed04b4b48e8f18accf7bcb56ec64287f3d07d 70379 
> company-mode_0.8.12.orig.tar.gz
>  9e2864dd3165d60550d62fe4cbdb44eb51f2a41b2ffe77d3f1e79160df60 2124 
> company-mode_0.8.12-1.debian.tar.xz
>  d9fb689cb40f74cc494e3b3bf5cd16310dfddd9acd5470fcdefb64d18b2866b0 59064 
> elpa-company_0.8.12-1_all.deb
> Files:
>  445341b13c4df78b91f46edc555448c0 1786 lisp optional company-mode_0.8.12-1.dsc
>  2b4a286d666ca0e00c62b94aa52e7984 70379 lisp optional 
> company-mode_0.8.12.orig.tar.gz
>  4d8f36367727501b8f14bc2bb36a9f76 2124 lisp optional 
> company-mode_0.8.12-1.debian.tar.xz
>  b65e72310ee229009eb84f7d3c287f18 59064 lisp optional 
> elpa-company_0.8.12-1_all.deb
>
>
>
> Thank you for your contribution to Debian.

Bug#797940: src:dh-elpa: maintainer address bounces

[Ansgar Burchardt]

Source: dh-elpa
Source-Version: 0.0.5
Severity: serious
X-Debbugs-Cc: David Bremner 

The maintainer address bounces. I guess the list is on
@lists.*alioth*.d.o, not @lists.d.o.

Ansgar

Mail Delivery System  writes:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   pkg-emacsen-add...@lists.debian.org
> SMTP error from remote mail server after RCPT 
> TO::
> host bendel.debian.org [2001:41b8:202:deb:216:36ff:fe40:4002]:
> 550 5.1.1 :
> Recipient address rejected: User unknown in virtual alias table
>
> -- This is a copy of the message, including all the headers. --
>
[...]
> To: Debian Emacs addons team , David 
> Bremner 
> X-DAK: dak process-upload
> X-Debian: DAK
> X-Debian-Package: dh-elpa
> Precedence: bulk
> Auto-Submitted: auto-generated
> MIME-Version: 1.0
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: 8bit
> Subject: dh-elpa_0.0.5_amd64.changes ACCEPTED into unstable
> Message-Id: 
> Date: Tue, 01 Sep 2015 22:48:40 +
>
>
>
> Accepted:
>
> Format: 1.8
> Date: Tue, 01 Sep 2015 19:09:51 -0300
> Source: dh-elpa
> Binary: dh-elpa
> Architecture: source all
> Version: 0.0.5
> Distribution: unstable
> Urgency: medium
> Maintainer: Debian Emacs addons team 
> Changed-By: David Bremner 
> Description:
>  dh-elpa- Debian helper tools for packaging emacs lisp extensions
> Changes:
>  dh-elpa (0.0.5) unstable; urgency=medium
>  .
>* Use debian/.debhelper/elpa for temp files. This allows easier
>  debugging.
>* Add a check for ${elpa_name}-pkg.el in multi-file packages
>* Link all top level files/directories into flavour directory, not
>  just *.el
> Checksums-Sha1:
>  420e8199d3209bf93e9d0638850115225c2f397c 1322 dh-elpa_0.0.5.dsc
>  b9186e0a45e93b7b866be9b1dc35f4e323d7516b 6538 dh-elpa_0.0.5.tar.gz
>  96a54ce03351565dbdf677517dd63a5d3cd4072e 9168 dh-elpa_0.0.5_all.deb
> Checksums-Sha256:
>  7eedff75b9bccfefab070b50c65cee8285407f86b8ac5ac7fe3b595795ffc226 1322 
> dh-elpa_0.0.5.dsc
>  6a271064ef771a37e5294fc8aecdde5c704002e75d452cf15e692f076db2601d 6538 
> dh-elpa_0.0.5.tar.gz
>  15d36252953837d9479b7ce2323e3984732ede8b0ac6eac6b5e87816998b486e 9168 
> dh-elpa_0.0.5_all.deb
> Files:
>  79a210e59db78409cdbad319021e3285 1322 devel optional dh-elpa_0.0.5.dsc
>  a9528cafcfb0db785d409287c12c26e4 6538 devel optional dh-elpa_0.0.5.tar.gz
>  3a823e8fa1341519abb0b30e760e34ce 9168 devel optional dh-elpa_0.0.5_all.deb
>
>
>
> Thank you for your contribution to Debian.

Bug#797941: src:pbnj: maintainer address bounces

[Ansgar Burchardt]

Source: pbnj
Severity: serious
Tags: sid

The maintainer address for pbnj bounces, see below.

Given the package was last uploaded by the maintainer in 2007, maybe the
package should be orphaned?

Ansgar

Mail Delivery System  writes:
> This message was created automatically by mail delivery software.
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   ja...@ccs.neu.edu
> SMTP error from remote mail server after RCPT TO::
> host amber.ccs.neu.edu [129.10.116.51]: 550 unknown user
>
> -- This is a copy of the message, including all the headers. --
>
[...]
> To: ja...@ccs.neu.edu (Joshua D. Abraham), gregor herrmann 
> X-DAK: dak process-upload
> X-Debian: DAK
> X-Debian-Package: pbnj
> Precedence: bulk
> Auto-Submitted: auto-generated
> MIME-Version: 1.0
> Content-Type: text/plain; charset="utf-8"
> Content-Transfer-Encoding: 8bit
> Subject: pbnj_2.04-4.1_sourceonly.changes ACCEPTED into unstable
> Message-Id: 
> Date: Mon, 31 Aug 2015 17:23:33 +
>
>
>
> Accepted:
>
> Format: 1.8
> Date: Wed, 26 Aug 2015 18:37:26 +0200
> Source: pbnj
> Binary: pbnj
> Architecture: source
> Version: 2.04-4.1
> Distribution: unstable
> Urgency: medium
> Maintainer: Joshua D. Abraham 
> Changed-By: gregor herrmann 
> Closes: 795637
> Description: 
>  pbnj   - a suite of tools to monitor changes on a network
> Changes:
>  pbnj (2.04-4.1) unstable; urgency=medium
>  .
>* Non-maintainer upload.
>* Fix "FTBFS with perl 5.22 in experimental (MakeMaker changes)":
>  use DESTDIR in debian/rules.
>  (Closes: #795637)
> Checksums-Sha1: 
>  e639e9d6ffbf13ce22995a8d5dc3f98846f2d7d1 1959 pbnj_2.04-4.1.dsc
>  0a497e7c312526937613ff9238cbb7be0562293f 2841 pbnj_2.04-4.1.diff.gz
> Checksums-Sha256: 
>  717239508ec532f3f59e5f520efb511aa9e756680c358ca22237cdba294ab572 1959 
> pbnj_2.04-4.1.dsc
>  16f0653da19de1b6e2819ebd67a59fb047196320927b4674af612ce8d1594821 2841 
> pbnj_2.04-4.1.diff.gz
> Files: 
>  3563b6f8fab4f91601346ce046338bcb 1959 net optional pbnj_2.04-4.1.dsc
>  6b6fd5e1386e11c477ffa7647c632485 2841 net optional pbnj_2.04-4.1.diff.gz
>
>
>
> Thank you for your contribution to Debian.

Bug#802654: geoclue: crashes if avahi is not running

[Ansgar Burchardt]

Package: geoclue-2.0
Version: 2.3.0-2
Severity: minor
Tags: upstream

geoclue crashes with an assertation failure if it cannot connect to avahi:

+---
| systemd[1]: Starting Location Lookup Service...
| geoclue[2452]: (geoclue:2452): Geoclue-WARNING **: Failed to connect to avahi 
service: Daemon not running
| systemd[1]: Started Location Lookup Service.
| geoclue[2452]: geoclue: client.c:626: avahi_client_free: Assertion `client' 
failed.
| systemd[1]: geoclue.service: Main process exited, code=killed, status=6/ABRT
| systemd[1]: geoclue.service: Unit entered failed state.
| systemd[1]: geoclue.service: Failed with result 'signal'.
+---

I disabled (as in "systemctl mask") avahi as I don't have a use for it
on my desktop system. I don't mind geoclue not working either, but it
should probably not just crash.

Ansgar

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable'), (100, 'unstable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages geoclue-2.0 depends on:
ii  adduser 3.113+nmu3
ii  libavahi-client30.6.31-5
ii  libavahi-common30.6.31-5
ii  libavahi-glib1  0.6.31-5
ii  libc6   2.19-22
ii  libglib2.0-02.46.1-1
ii  libjson-glib-1.0-0  1.0.4-2
ii  libmm-glib0 1.4.12-1
ii  libsoup2.4-12.52.1-1

Versions of packages geoclue-2.0 recommends:
ii  avahi-daemon  0.6.31-5
pn  iio-sensor-proxy  
pn  modemmanager  
ii  wpasupplicant 2.3-2.1

geoclue-2.0 suggests no packages.

-- no debconf information

Bug#568374: debian-policy: section "8.4 Development files" not explicit enough regarding libraryname[soversion]-dev

[Ansgar Burchardt]

Hi,

I suggest to change

| If there are development files associated with a shared
| library, the source package needs to generate a binary
| development package named librarynamesoversion-dev, or if you
| prefer only to support one development version at a time,
| libraryname-dev.

to

| If there are development files associated with a shared
| library, the source package needs to generate a binary
| development package named libraryname-dev, or if you
| need to support multiple development versions at a time,
| librarynameAPIVERSION-dev.

The changes are:

Recommend unversioned -dev packages over versioned ones.

For versioned -dev packages, use APIVERSION instead of SONAMEVERSION as
API and ABI can change independently.  This matches current practice: as
a random example: libgweather-3-dev + libgweather-3-6

Ansgar

Bug#781952: RFS:complexity/1.2-1 [ITP] -- tool for analyzing the complexity of C program functions

[Ansgar Burchardt]

Gianfranco Costamagna wrote:
> Hi, according to [1] [2] [3] FDL with the "no invariant" section is
not considered DFSG.
[...]
> [1] https://wiki.debian.org/DFSGLicenses#GNU_Free_Documentation_Licen
se_.28GFDL.29
> [2] https://wiki.debian.org/qa.debian.org/gfdlinvariant
> 
> [3] https://www.debian.org/vote/2006/vote_001

To quote from the first link:

  "Data licensed under the FDL with no invariant sections are
   considered DFSG-free as of GR 2006-001"

The problem Debian has with the GFDL are invariant sections as they
restrict modification. Having no invariant sections (and no mandatory
back- and frontcover texts) avoids these restrictions thus Debian has
no problem with them.

Ansgar

Bug#804770: debootstrap: please don't install nfacct and related libs

[Ansgar Burchardt]

Hi,

On Wed, 2015-11-11 at 14:49 +0100, Cyril Brulebois wrote:
> Arturo Borrero Gonzalez  (2015-11-11):
> > Yesterday I noticed that debootstrap is installing nfacct and
> > related libs
> > by default.
[...]
> #758229 was apparently about fixing the package priority, which is
> exactly what triggers debootstrap's installing it. A priority change
> has
> to happen at the ftpmaster level in addition to the package level
> (through the overrides mechanism). I'm therefore adding ftpmaster@ to
> the loop (along with the NMUer and the maintainer).

For stretch, nfacct's priority was already reduced to optional[1] and
it should no longer be included in the default install.

If the priority should be changed for the stable release, that would be
something for the stable release team to decide. I personally don't
care enough to consider asking them myself.

Ansgar

  [1] 

Bug#805344: systemd: ListenStream=6566 in saned.socket only causes systemd to listen on [::]:6566

[Ansgar Burchardt]

Jens Georg  writes:
> I was trying to run sane network scanning through socket activation, but
> with the provided saned.socket file systemd only listens on a v6 socket.
> I have to explicitly change ListenStream to 0.0.0.0:6656 to make it
> listen on v4.

Did you check if it is actually not reachable over IPv4? IPv6 sockets
can also accept IPv4 connections unless configured not to do so. This is
controlled system-wide via /proc/sys/net/ipv6/bindv6only which is "0" on
my computer (which is the default according to man:systemd.socket(5)).

systemd by default binds only to IPv6, but uses the system-wide default
above to also accept IPv4 connections; the default can also be
overridden per-service via BindIPv6Only= (see man:systemd.socket(5)).

Ansgar

Bug#805610: python-lamson: maintainer address bounces

[Ansgar Burchardt]

Source: python-lamson
Tags: sid
Severity: serious
X-Debbugs-Cc: David Watson 

The maintainer address for python-lamson bounces:

+---
| This message was created automatically by mail delivery software.
|
| A message that you sent could not be delivered to one or more of its
| recipients. This is a permanent error. The following address(es) failed:
|
|   da...@kutoken.com
| Unrouteable address
+---

Ansgar

Bug#801223: evolution: please consider not rendering HTML messages by default

[Ansgar Burchardt]

Package: evolution
Version: 3.18.0-2
Severity: important

Control: found -1 3.12.9~git20141130.241663-1

Hi,

Evolution displays HTML messages by default, but (as far as I
understand) the engine used to do so it not well-maintained security
wise.  [1] was mentioned on IRC.

Please consider disabling rendering of HTML by default. Currently
users can disable this manually: Edit -> Preferences -> Mail
Preferences -> HTML Messages -> Plain Text Mode: HTML Mode -> Only
ever show plain text.

If you consider this request valid, it might also make sense to
implement the same change in Jessie. I marked the bug as found in
Jessie's version of evolution to keep track of this.

Ansgar

  [1]