[aur-general] Signoff report for [community-testing]
=== Signoff report for [community-testing] === https://www.archlinux.org/packages/signoffs/ There are currently: * 6 new packages in last 24 hours * 0 known bad packages * 0 packages not accepting signoffs * 0 fully signed off packages * 40 packages missing signoffs * 20 packages older than 14 days (Note: the word 'package' as used here refers to packages as grouped by pkgbase, architecture, and repository; e.g., one PKGBUILD produces one package per architecture, even if it is a split package.) == New packages in [community-testing] in last 24 hours (6 total) == * gambas2-2.24.0-9 (i686) * gambas3-3.3.4-3 (i686) * pdf2djvu-0.7.16-1 (i686) * gambas2-2.24.0-9 (x86_64) * gambas3-3.3.4-3 (x86_64) * pdf2djvu-0.7.16-1 (x86_64) == Incomplete signoffs for [community] (36 total) == * blender-6:2.65a-3 (i686) 0/2 signoffs * catalyst-dkms-12.11-3 (i686) 0/2 signoffs * catalyst-utils-12.11-2 (i686) 0/2 signoffs * cdfs-2.6.27-34 (i686) 0/2 signoffs * fatrat-1.2.0_beta2-3 (i686) 0/2 signoffs * fcron-3.1.1-1 (i686) 0/2 signoffs * gambas2-2.24.0-9 (i686) 0/2 signoffs * gambas3-3.3.4-3 (i686) 0/2 signoffs * ndiswrapper-1.57-27 (i686) 0/2 signoffs * open-vm-tools-modules-1:9.2.2-2 (i686) 0/2 signoffs * openimageio-1.1.2-1 (i686) 0/2 signoffs * pdf2djvu-0.7.16-1 (i686) 0/2 signoffs * r8168-8.034.00-2 (i686) 0/2 signoffs * rt3562sta-2.4.1.1-21 (i686) 0/2 signoffs * tp_smapi-0.41-12 (i686) 0/2 signoffs * vhba-module-20120422-15 (i686) 0/2 signoffs * virtualbox-modules-4.2.6-4 (i686) 0/2 signoffs * virtualbox-modules-lts-4.2.6-4 (i686) 0/2 signoffs * blender-6:2.65a-3 (x86_64) 0/2 signoffs * catalyst-dkms-12.11-3 (x86_64) 0/2 signoffs * catalyst-utils-12.11-2 (x86_64) 0/2 signoffs * cdfs-2.6.27-34 (x86_64) 0/2 signoffs * fatrat-1.2.0_beta2-3 (x86_64) 0/2 signoffs * fcron-3.1.1-1 (x86_64) 0/2 signoffs * gambas2-2.24.0-9 (x86_64) 0/2 signoffs * gambas3-3.3.4-3 (x86_64) 0/2 signoffs * ndiswrapper-1.57-27 (x86_64) 0/2 signoffs * open-vm-tools-modules-1:9.2.2-2 (x86_64) 0/2 signoffs * openimageio-1.1.2-1 (x86_64) 0/2 signoffs * pdf2djvu-0.7.16-1 (x86_64) 0/2 signoffs * r8168-8.034.00-2 (x86_64) 0/2 signoffs * rt3562sta-2.4.1.1-21 (x86_64) 0/2 signoffs * tp_smapi-0.41-12 (x86_64) 0/2 signoffs * vhba-module-20120422-15 (x86_64) 0/2 signoffs * virtualbox-modules-4.2.6-4 (x86_64) 0/2 signoffs * virtualbox-modules-lts-4.2.6-4 (x86_64) 0/2 signoffs == Incomplete signoffs for [unknown] (4 total) == * llvm-amdgpu-snapshot-20130104-1 (i686) 0/2 signoffs * openshadinglanguage-1.2.1-1 (i686) 0/2 signoffs * llvm-amdgpu-snapshot-20130104-1 (x86_64) 0/2 signoffs * openshadinglanguage-1.2.1-1 (x86_64) 0/2 signoffs == All packages in [community-testing] for more than 14 days (20 total) == * catalyst-utils-12.11-2 (i686), since 2012-12-05 * catalyst-utils-12.11-2 (x86_64), since 2012-12-05 * vhba-module-20120422-15 (i686), since 2012-12-11 * vhba-module-20120422-15 (x86_64), since 2012-12-11 * rt3562sta-2.4.1.1-21 (x86_64), since 2012-12-11 * rt3562sta-2.4.1.1-21 (i686), since 2012-12-11 * open-vm-tools-modules-1:9.2.2-2 (i686), since 2012-12-11 * open-vm-tools-modules-1:9.2.2-2 (x86_64), since 2012-12-11 * tp_smapi-0.41-12 (x86_64), since 2012-12-11 * tp_smapi-0.41-12 (i686), since 2012-12-11 * cdfs-2.6.27-34 (x86_64), since 2012-12-11 * cdfs-2.6.27-34 (i686), since 2012-12-11 * r8168-8.034.00-2 (i686), since 2012-12-11 * r8168-8.034.00-2 (x86_64), since 2012-12-11 * catalyst-dkms-12.11-3 (i686), since 2012-12-14 * catalyst-dkms-12.11-3 (x86_64), since 2012-12-14 * virtualbox-modules-4.2.6-4 (i686), since 2012-12-25 * virtualbox-modules-4.2.6-4 (x86_64), since 2012-12-25 * virtualbox-modules-lts-4.2.6-4 (x86_64), since 2012-12-25 * virtualbox-modules-lts-4.2.6-4 (i686), since 2012-12-25 == Top five in signoffs in last 24 hours ==
[aur-general] Delete Request: tp_smapi-builder
This package[0] has been in the AUR for almost a year and a half, and the maintainer posted in the comments that it should be deleted then disowned the package. [0] https://aur.archlinux.org/packages/tp_smapi-builder/ Thank you, -- William Giokas | KaiSforza GnuPG Key: 0xE99A7F0F Fingerprint: F078 CFF2 45E8 1E72 6D5A 8653 CDF5 E7A5 E99A 7F0F pgp3b_Ve8U5BR.pgp Description: PGP signature
Re: [aur-general] Delete Request: tp_smapi-builder
On Thursday, January 10, 2013 03:25:53 AM William Giokas wrote: This package[0] has been in the AUR for almost a year and a half, and the maintainer posted in the comments that it should be deleted then disowned the package. [0] https://aur.archlinux.org/packages/tp_smapi-builder/ Thank you, Removed, thanks. -- Felix Yan Twitter: @felixonmars Wiki: http://felixc.at signature.asc Description: This is a digitally signed message part.
[aur-general] Software packaging - Security question
Hi
I am trying to create a package for the subvein[1] game.
Installation instructions[2] of the game tell to simply uncompress the
tar.gz archive in a folder and run the Subvein program.
No problem with that. But then when running the game, it tries to store
information in it's data folder (logs, configuration, user
profiles...). We have a permission problem.
To workaround this problem, I:
- Create a group named subvein;
- set the setgid bit for the game data folder and all it's sub-folders;
- set the game data folder and all it's content group writable;
- set the group of the game data folder to the subvein group.
- Created a wrapper bash script that changes the umask to 002 and then
launches the game.
This way, all the contents created by the game will belong to the
subvein group and will be group writable, so that anyone can use the game.
Is this a valid way of doing it? Are there any security concerns I need
to take into account?
The game has also a server part. I still didn't started to handle this
in the package, but was thinking to do the following:
- Create a user names subvein that belongs only to the subvein group.
- Create a systemd .service file that runs the server program as the
subvein user.
Does this seems OK as approach?
Thank you for your help.
P.S. You can find my draft of the PKGBUILD, the install script and the
bash wrapper attached.
[1] http://subvein.net/
[2] http://subvein.net/download.php
--
Nuno Araujo nuno.ara...@russo79.com
#! /bin/sh
cd /opt/subvein
umask 002
./Subvein
post_install() {
if [ ! `grep subvein /etc/group` ]; then
groupadd subvein /dev/null;
fi
chgrp -R subvein /opt/subvein/data
echoAdd yourself to the subvein group to run the game.
}
post_upgrade() {
post_install
}
pre_remove() {
groupdel subvein /dev/null
}
# Maintainer: Nuno Araujo nuno.ara...@russo79.com
pkgname=subvein
pkgver=0.73
pkgrel=1
pkgdesc=Free multiplayer action game
arch=('i686' 'x86_64')
url=http://subvein.net;
license=('GPL')
depends=()
if [[ $CARCH == x86_64 ]]; then
depends+=('lib32-glu' 'lib32-libxrandr' 'lib32-libgl' 'lib32-openal'
'lib32-freealut')
else
depends+=('glu' 'libxrandr' 'libgl' 'openal' 'freealut')
fi
optdepends=()
install=subvein.install
source=(http://subvein.net/downloads/Subvein0730.tar.gz;
subvein)
md5sums=('76845fa4502363c02362954a6ae6c6c6'
'f0741d0f778acb0ef2422c51b2a0e587')
package() {
mkdir -p $pkgdir/opt/subvein
cp -r $srcdir/Subvein/. $pkgdir/opt/subvein
rm -rf $pkgdir/opt/subvein/lib
chmod -R g+w $pkgdir/opt/subvein
find $pkgdir/opt/subvein/ -type d -exec chmod g+s {} \;
install -m 755 -D $srcdir/subvein $pkgdir/usr/bin/subvein
}
# vim:set ts=2 sw=2 et:
signature.asc
Description: OpenPGP digital signature
Re: [aur-general] Software packaging - Security question
On Thursday, January 10, 2013 11:36:25 AM Nuno Araujo wrote: Hi I am trying to create a package for the subvein[1] game. Installation instructions[2] of the game tell to simply uncompress the tar.gz archive in a folder and run the Subvein program. No problem with that. But then when running the game, it tries to store information in it's data folder (logs, configuration, user profiles...). We have a permission problem. To workaround this problem, I: - Create a group named subvein; - set the setgid bit for the game data folder and all it's sub-folders; - set the game data folder and all it's content group writable; - set the group of the game data folder to the subvein group. - Created a wrapper bash script that changes the umask to 002 and then launches the game. This way, all the contents created by the game will belong to the subvein group and will be group writable, so that anyone can use the game. Is this a valid way of doing it? Are there any security concerns I need to take into account? In a multi-user environment this would fail, so the game save _should_ be kept under $HOME. Don't know if there's a good way to do it, though, maybe someone else could help with this. The game has also a server part. I still didn't started to handle this in the package, but was thinking to do the following: - Create a user names subvein that belongs only to the subvein group. - Create a systemd .service file that runs the server program as the subvein user. Does this seems OK as approach? I think this part is OK and nice :) Thank you for your help. P.S. You can find my draft of the PKGBUILD, the install script and the bash wrapper attached. [1] http://subvein.net/ [2] http://subvein.net/download.php -- Felix Yan Twitter: @felixonmars Wiki: http://felixc.at signature.asc Description: This is a digitally signed message part.
Re: [aur-general] Software packaging - Security question
On 10. 01. 13 11:43, Felix Yan wrote: This way, all the contents created by the game will belong to the subvein group and will be group writable, so that anyone can use the game. Is this a valid way of doing it? Are there any security concerns I need to take into account? In a multi-user environment this would fail, so the game save _should_ be kept under $HOME. Don't know if there's a good way to do it, though, maybe someone else could help with this. When you say this would fail in a multi-user environment, do you refer to some technical issue or it's just because (and I agree with you), things shouldn't be this way? The game has also a server part. I still didn't started to handle this in the package, but was thinking to do the following: - Create a user names subvein that belongs only to the subvein group. - Create a systemd .service file that runs the server program as the subvein user. Does this seems OK as approach? I think this part is OK and nice :) Great, thanks :-) -- Nuno Araujo nuno.ara...@russo79.com signature.asc Description: OpenPGP digital signature
Re: [aur-general] Software packaging - Security question
On Thursday, January 10, 2013 11:59:22 AM Nuno Araujo wrote: On 10. 01. 13 11:43, Felix Yan wrote: This way, all the contents created by the game will belong to the subvein group and will be group writable, so that anyone can use the game. Is this a valid way of doing it? Are there any security concerns I need to take into account? In a multi-user environment this would fail, so the game save _should_ be kept under $HOME. Don't know if there's a good way to do it, though, maybe someone else could help with this. When you say this would fail in a multi-user environment, do you refer to some technical issue or it's just because (and I agree with you), things shouldn't be this way? I think game saves of one user should not be accessible by others, as most games nowadays treat it this way :) -- Felix Yan Twitter: @felixonmars Wiki: http://felixc.at signature.asc Description: This is a digitally signed message part.
Re: [aur-general] Software packaging - Security question
On 10 January 2013 11:43, Felix Yan felixonm...@gmail.com wrote: On Thursday, January 10, 2013 11:36:25 AM Nuno Araujo wrote: Is this a valid way of doing it? Are there any security concerns I need to take into account? In a multi-user environment this would fail, so the game save _should_ be kept under $HOME. Don't know if there's a good way to do it, though, maybe someone else could help with this. I think UnionFs can be used for this. I never actually tried it, but it should allow you to mount the data directory read only and then mount a RW directory from $HOME on top of, so all changes will be stored in the home directory.
[aur-general] Delete request: gstreamer0.10-good-slim
The package has been orphaned for more than one year. The maintainer posted in the comments that it is not needed any more. https://aur.archlinux.org/packages/gstreamer0.10-good-slim/ -- Regards, Wang Jiajun
Re: [aur-general] Delete request: gstreamer0.10-good-slim
On 10 January 2013 15:16, Jiajun Wang amesi...@gmail.com wrote: The package has been orphaned for more than one year. The maintainer posted in the comments that it is not needed any more. https://aur.archlinux.org/packages/gstreamer0.10-good-slim/ Removed, thanks.
Re: [aur-general] Software packaging - Security question
On 10. 01. 13 12:25, Lukas Jirkovsky wrote: I think UnionFs can be used for this. I never actually tried it, but it should allow you to mount the data directory read only and then mount a RW directory from $HOME on top of, so all changes will be stored in the home directory. Thanks Lukas! I just tried it (manually, not yet packaged? and it works perfectly! :-) It bothers me to have to add a dependency on an fully unrelated package, but I think this is cleaner and safer than my previous solution. The only concern that I have with this approach, it's when the package gets upgraded. subvein seems to update some of it's own packaged files (at least translation files) when running. If suddenly, there is a new version of the modified files when upgrading, they won't be taken into account, since the priority will be given to those in the user $HOME. Well, I can display a warning message when upgrading the package, so that the user removes the files in it's $HOME folder. After all, this is Arch Linux, a distribution who targets and accommodates competent GNU/Linux users by giving them complete control and responsibility over the system. :-) Thank you for your help everyone! -- Nuno Araujo nuno.ara...@russo79.com signature.asc Description: OpenPGP digital signature
[aur-general] Package Merging
Couldmuffin-wm be merged into muffin, as the latter has not been updated for over a year an a half and has been out of date for six months?
Re: [aur-general] Only lower case letters?
On Thursday, January 10, 2013 04:19:56 PM Jorge Barroso wrote: Hello I'm making a package of iceweasel's translations with help of firefox' pkgbuild, but when I try to upload it aur throws an error that says Invalid name: only lowercase letters are allowed. What does that error exactly means? This is my pkgbuild http://pastebin.com/U37MwGri AUR do not support splitted packages. See [1] for more info. [1] https://bugs.archlinux.org/task/16394 -- Felix Yan Twitter: @felixonmars Wiki: http://felixc.at signature.asc Description: This is a digitally signed message part.
Re: [aur-general] Package Merging
On Thursday, January 10, 2013 01:57:12 PM Jagmjp Janpgm wrote: Couldmuffin-wm be merged into muffin, as the latter has not been updated for over a year an a half and has been out of date for six months? An email to each maintainer (if you are not one of them) and 2 weeks' wait are still required before the merging could happen. Also, please include links to packages you mentioned next time, thanks. -- Felix Yan Twitter: @felixonmars Wiki: http://felixc.at signature.asc Description: This is a digitally signed message part.
Re: [aur-general] Only lower case letters?
2013/1/10 Jorge Barroso jorge.barroso...@gmail.com: 2013/1/10 Felix Yan felixonm...@gmail.com AUR do not support splitted packages. See [1] for more info. [1] https://bugs.archlinux.org/task/16394 So what can I do? :S Create one PKGBUILD for each package. I suggest a shell script to make this creation/maintainance task more automatic.
Re: [aur-general] Only lower case letters?
On Thursday, January 10, 2013 05:41:01 PM Jorge Barroso wrote:
2013/1/10 Felix Yan felixonm...@gmail.com
AUR do not support splitted packages. See [1] for more info.
[1] https://bugs.archlinux.org/task/16394
So what can I do? :S
A workaround I saw is
pkgname=yourpkgbase
true pkgname=('one' 'two' 'three' ...)
hope this helps :)
--
Felix Yan
Twitter: @felixonmars
Wiki: http://felixc.at
signature.asc
Description: This is a digitally signed message part.
Re: [aur-general] Only lower case letters?
2013/1/10 rafael ff1 rafael.f...@gmail.com
Create one PKGBUILD for each package. I suggest a shell script to make
this creation/maintainance task more automatic.
2013/1/10 Felix Yan felixonm...@gmail.com
A workaround I saw is
pkgname=yourpkgbase
true pkgname=('one' 'two' 'three' ...)
hope this helps :)
I'll try what you said felix :D rafael I did so, but there was a TU
(Barthalion) that removed all the packages and told me to make a split
package, and also that he'll suspend my account if I do it again :S
Re: [aur-general] Only lower case letters?
2013/1/10 Jorge Barroso jorge.barroso...@gmail.com:
2013/1/10 rafael ff1 rafael.f...@gmail.com
Create one PKGBUILD for each package. I suggest a shell script to make
this creation/maintainance task more automatic.
2013/1/10 Felix Yan felixonm...@gmail.com
A workaround I saw is
pkgname=yourpkgbase
true pkgname=('one' 'two' 'three' ...)
hope this helps :)
I'll try what you said felix :D rafael I did so, but there was a TU
(Barthalion) that removed all the packages and told me to make a split
package, and also that he'll suspend my account if I do it again :S
... and AUR don't support split packages. Awesome situation. In this
case, better got with Felix's suggestion.
Re: [aur-general] Only lower case letters?
On 01/10/2013 06:18 PM, rafael ff1 wrote:
2013/1/10 Jorge Barroso jorge.barroso...@gmail.com:
2013/1/10 rafael ff1 rafael.f...@gmail.com
Create one PKGBUILD for each package. I suggest a shell script to make
this creation/maintainance task more automatic.
2013/1/10 Felix Yan felixonm...@gmail.com
A workaround I saw is
pkgname=yourpkgbase
true pkgname=('one' 'two' 'three' ...)
hope this helps :)
I'll try what you said felix :D rafael I did so, but there was a TU
(Barthalion) that removed all the packages and told me to make a split
package, and also that he'll suspend my account if I do it again :S
... and AUR don't support split packages. Awesome situation. In this
case, better got with Felix's suggestion.
It doesn't support them directly, but many packagers use Felix'
workaround. If you are going to spam AUR like Jorge did, I'll be in
really wild mood, trust me.
--
Bartłomiej Piotrowski
Arch Linux Trusted User
http://archlinux.org/
signature.asc
Description: OpenPGP digital signature
Re: [aur-general] Only lower case letters?
2013/1/10 Bartłomiej Piotrowski b...@bpiotrowski.pl:
On 01/10/2013 06:18 PM, rafael ff1 wrote:
2013/1/10 Jorge Barroso jorge.barroso...@gmail.com:
2013/1/10 rafael ff1 rafael.f...@gmail.com
Create one PKGBUILD for each package. I suggest a shell script to make
this creation/maintainance task more automatic.
2013/1/10 Felix Yan felixonm...@gmail.com
A workaround I saw is
pkgname=yourpkgbase
true pkgname=('one' 'two' 'three' ...)
hope this helps :)
I'll try what you said felix :D rafael I did so, but there was a TU
(Barthalion) that removed all the packages and told me to make a split
package, and also that he'll suspend my account if I do it again :S
... and AUR don't support split packages. Awesome situation. In this
case, better got with Felix's suggestion.
It doesn't support them directly, but many packagers use Felix'
workaround. If you are going to spam AUR like Jorge did, I'll be in
really wild mood, trust me.
--
Bartłomiej Piotrowski
Arch Linux Trusted User
http://archlinux.org/
I didn't said that I think your decision was wrong. Chill out. ;)
Re: [aur-general] merge request
On Thu, Jan 10, 2013 at 01:33:50AM +0100, Lone_Wolf wrote: Hi, Last weekend i added radeonSI to my mesa-git packages, and decided this was a good time to change the packagenames to more accurately reflect the chipsets they are intended for. please merge mesa-r600g-git [1] into mesa-r300-r600-radeonsi-git [2] lib32-mesa-r600g-git [3] into lib32-mesa-r300-r600-radeonsi-git [4] . Thanks in advance. [1] https://aur.archlinux.org/packages/mesa-r600g-git/ [2] https://aur.archlinux.org/packages/mesa-r300-r600-radeonsi-git/ [3] https://aur.archlinux.org/packages/lib32-mesa-r600g-git/ [4] https://aur.archlinux.org/packages/lib32-mesa-r300-r600-radeonsi-git/ Why does the AUR need 3 different PKGBUILDs for mesa-git? Actually there are a lot more mesa git versions then 3, do an aur search for mesa and check how many mention git in the description. Apart from which drivers are built, different configure flags are used and the structure of the packages differs a lot (some are split packages). The biggest difference is probably the configure flags. My mesa-git packages f.e tends to have experimental radeon settings enabled very soon after they are enabled in mesa git master.
Re: [aur-general] Only lower case letters?
2013/1/10 Bartłomiej Piotrowski b...@bpiotrowski.pl It doesn't support them directly, but many packagers use Felix' workaround. If you are going to spam AUR like Jorge did, I'll be in really wild mood, trust me. Ok Bartłomiej, it wasn't my intention to offend you, sorry, I was just describing my situation, and... yes, I've had no time until now, but I'm going to try and let's see what can I do. Although, I don't think I was spamming... but, you command...
Re: [aur-general] Package Merging
On Thursday, January 10, 2013 01:57:12 PM Jagmjp Janpgm wrote: Couldmuffin-wm be merged into muffin, as the latter has not been updated for over a year an a half and has been out of date for six months? good to hear human input from that direction... ;-) welcome back to the living. cheers! mar77i
Re: [aur-general] Only lower case letters?
Bartłomiej Piotrowski wrote: It doesn't support them directly, but many packagers use Felix' workaround. If you are going to spam AUR like Jorge did, I'll be in really wild mood, trust me. What did he do that you consider spamming?
