Bug#610272: pu: package refpolicy/2:0.2.20100524-6

2011-01-17 Thread Philipp Kern 
On Sun, Jan 16, 2011 at 11:57:36PM +, Adam D. Barratt wrote:
 On Mon, 2011-01-17 at 10:06 +1100, Russell Coker wrote:
  The following patch fixes many issues with the SE Linux policy that were
  discovered after the release of Lenny.  It also supports using the Squeeze
  kernel which is really useful for virtual servers that have Lenny DomU and
  Squeeze Dom0.
 The basic standard for a stable update is that it fixes important bugs
 and does so in the most minimal way possible.

That's one of them.  The other one is don't break existing systems, which I
fear might happen for users of refpolicy if it's upgraded behind their back,
no?

 comprising 2.5 years of uploads really meets that criteria, particularly
 for what may be the last point release for lenny as the stable release.

I tend to say it's too late for this change.  In this particular case people
will already have been accustomed to the bugs it entails, and fixed them
locally if they need to.  Suddenly introducing a new policy without a very
strong reason (aka breaks the system, security problems, etc.) doesn't look
like a sane thing to do to me.

Kind regards
Philipp Kern


signature.asc
Description: Digital signature

Bug#610272: pu: package refpolicy/2:0.2.20100524-6

2011-01-16 Thread Adam D. Barratt 
On Mon, 2011-01-17 at 10:06 +1100, Russell Coker wrote:
 The following patch fixes many issues with the SE Linux policy that were
 discovered after the release of Lenny.  It also supports using the Squeeze
 kernel which is really useful for virtual servers that have Lenny DomU and
 Squeeze Dom0.

The basic standard for a stable update is that it fixes important bugs
and does so in the most minimal way possible.  I'm not sure that

 114 files changed, 2188 insertions(+), 280 deletions(-)

comprising 2.5 years of uploads really meets that criteria, particularly
for what may be the last point release for lenny as the stable release.

Is it possible to isolate the changes relevant to the Squeeze kernel use
and any other particularly important fixes?

 diff -u refpolicy-0.0.20080702/debian/changelog 
 refpolicy-0.0.20080702/debian/changelog
 --- refpolicy-0.0.20080702/debian/changelog
 +++ refpolicy-0.0.20080702/debian/changelog
 @@ -1,3 +1,276 @@
 +refpolicy (2:0.0.20080702-21) unstable; urgency=low

Even if we were to accept all of the changes from the previous unstable
uploads, the new upload would be to stable so there's a new stanza
missing here.  (Also, the version number in the subject is intended to
relate to the version of the package in stable, not the one you have
installed).

Regards,

Adam




-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org