Bug#640873: ITP: libsmack-java -- Easy to use Java XMPP client library

[Martin Quinson]

Package: wnpp
Severity: wishlist
Owner: Martin Quinson 

* Package name: libsmack-java
  Version : 3.2.1
  Upstream Author : Jive Software (http://www.igniterealtime.org/)
* URL : http://www.igniterealtime.org/projects/smack/index.jsp
* License : Apache-2.0
  Programming Lang: Java
  Description : Easy to use Java XMPP client library.

Smack is a XMPP (Jabber) client library for instant messaging and
presence. A pure Java library, it can be embedded into your
applications to create anything from a full XMPP client to simple XMPP
integrations such as sending notification messages and
presence-enabling devices.

Please note that I'm intending to package this as a (new) dependency
to JLM, so this is a blocker to #622324.

-- 
Alvin: Sinon, le polymorphisme en C, c'est trop bô. :)
Emptty: Ca, c'est clair. Le C, j'aime ca. C'est un peu de l'art primitif,
   mais ca te secoue les tripes...



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110908061346.ga...@arthur.loria.fr

Re: Hardening build flags release goal

[Kees Cook]

On Tue, Sep 06, 2011 at 04:01:04PM +, The Fungi wrote:
> On Mon, Sep 05, 2011 at 02:22:39PM -0700, Kees Cook wrote:
> [...]
> > It might be better to extend it further, like "all network daemons
> > using dpkg-buildflags properly and enabling PIE"
> [...]
> 
> And since many network daemons are implemented in interpreted
> languages, it might be nice to include packaged interpreters in the
> list of candidates.

Yeah, that's a good idea. Ubuntu has a list of packages that were
specifically called out to build with PIE (and as a result are well-tested
by now):
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/BuiltPIE

One task I haven't had time to do, related to interpreters, is to benchmark
the python testsuite with PIE. A number of years ago, a 15% performance hit
on i386 (due to so few general registers). I'd really like to see the
numbers across all architectures. A future release goal, I think, would be
to build all of amd64 (and any other archs that don't see a big hit) with
PIE by default. Can someone step up to do this?

-Kees

-- 
Kees Cook@debian.org


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110908010758.gr31...@outflux.net

Re: Hardening build flags release goal

[Kees Cook]

On Mon, Sep 05, 2011 at 07:42:30PM +0200, Moritz Mühlenhoff wrote:
> I'm thinking of something along the lines of
> "all pkgs with priority >= standard" and "all pkgs which had a DSA in the last
> five years" as specific, important sub goals.

Sounds good, I'm happy to help as well.

-Kees

-- 
Kees Cook@debian.org


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110908010421.gq31...@outflux.net

Re: Hardening build flags release goal

[Kees Cook]

On Mon, Sep 05, 2011 at 09:34:37PM +0200, Raphael Hertzog wrote:
> On Mon, 05 Sep 2011, Julien BLACHE wrote:
> > Cyril Brulebois  wrote:
> > > Do we have a proper definition, and sample implementation(s) for “using
> > > dpkg-buildflags properly”? On the top of my hat, it looks like semantics
> > > and recommendations changed a bit over the years, so I kind of lost
> > > count.
> > 
> > On top of that, what's the story with regard to non-gcc compilers?
> 
> No idea, I have only integrated the work others have done in dpkg. I
> have not studied how other compilers support the hardening compilation
> flags.
> 
> What are the compilers you're thinking of?

I'm curious to see what it would take to enable the same features in llvm.
It's an area I've not looked at in any way. It might be cool to have
something familiar with llvm (or other C compilers in use) update
http://wiki.debian.org/Hardening
with the command line arguments needs to enable each feature too.

-Kees

-- 
Kees Cook@debian.org


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110908010018.gp31...@outflux.net

Re: Multiarch in Debian unstable

[Raphael Hertzog]

On Wed, 07 Sep 2011, Stefano Zacchiroli wrote:
> On Tue, Sep 06, 2011 at 09:56:42AM +0200, Cyril Brulebois wrote:
> > Can we give dpkg more exposure than “build from git”? It's been 2+
> > months already since that announcement and one cannot really test
> > “Multiarch in Debian unstable” as written in the subject.
> 
> The following seems to address (part of) your concern:
> 

And in the mean time, there's an APT repo with a multiarch-enabled dpkg
in the dpkg-test repo documented here:
http://wiki.debian.org/Teams/Dpkg/Contribute#Use_the_Git_version_of_dpkg_and_report_problems

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Follow my Debian News ▶ http://RaphaelHertzog.com (English)
  ▶ http://RaphaelHertzog.fr (Français)


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110907184827.gd26...@rivendell.home.ouaza.com

Re: Bug#640721: ITP: xf86-video-omap -- X.Org X server -- OMAP display driver

[Sebastian Reichel]

On Wed, Sep 07, 2011 at 04:07:18PM +0200, Cyril Brulebois wrote:
> Sebastian Reichel  (06/09/2011):
> >   Description : X.Org X server -- OMAP display driver
> 
> FWIW: http://x.debian.net/reference/dependencies.html

Thanks for writing the page. It's very useful.

I would be glad if you can give the package (available from [0]) a
quick review before I upload it to experimental. You can change
Architecture to any if you want to build it on a x86 system for
testing purposes (OMAP chips are ARM based, but the code can be
compiled on other platforms, too).

[0] http://anonscm.debian.org/gitweb/?p=collab-maint/xf86-video-omap.git

-- Sebastian


signature.asc
Description: Digital signature

Re: RFC: Adding "Pre-Depends: libtinfo5" to libncurses5

[Sven Joachim]

On 2011-09-06 22:45 +0200, Clint Adams wrote:

> On Mon, Sep 05, 2011 at 07:17:05PM +0200, Sven Joachim wrote:
>> To rule out this possibility, I would like to add an unversioned
>> "Pre-Depends: libtinfo5" to libncurses5.  In my tests, apt did install
>> libtinfo5 before unpacking the replacement libncurses5 anyway, so this
>> is mostly meant as a safety guard against an unlikely situation.  I do
>> not expect any upgrade problems to arise from that Pre-Dependency.
>
> What about rolling this together with a soname bump that also
> consolidates libncurses and libncursesw into a single wide-only
> library, thereby making the Pre-Depends unnecessary?

I would love to do that, but since ncurses does not provide versioned
symbols and we have rather many libraries linking against libncurses5,
it does not seem to be possible.  See the thread starting at
http://lists.debian.org/debian-devel/2008/09/msg00435.html.

Note that in any case libncurses5 has to be kept for LSB compatibility.

Cheers,
   Sven


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/87sjo8fj6d@turtle.gmx.de

Bug#640807: ITP: plasma-widget-daisy -- KDE plasma widget showing a Mac like dock

[Eshat Cakar]

Package: wnpp
Severity: wishlist
X-Debbugs-CC: debian-devel@lists.debian.org

   Package name: plasma-widget-daisy
Version: 0.0.4.25
Upstream Author: Sandro Leopoldo Garcia 
URL: http://cdlszm.org/
License: GPLv3
Description: KDE plasma widget showing a Mac like dock

-- 
eshat cakar
web: www.eshat.de   gpg-id: 799B 95D5


signature.asc
Description: This is a digitally signed message part.

Re: bits from the DPL for August 2011

[Stefano Zacchiroli]

On Wed, Sep 07, 2011 at 04:18:02PM +0200, Paul Wise wrote:
> > A mildly related discussion has happened on -devel [5]. The bottom line
> > is simple: if you're maintaining a service which has some kind of web
> > interface, please ensure the page footer has links to the source and
> > relevant BTS page
> 
> Added this to the Debian wiki configuration. Also added a link to the
> wiki page for the wiki team.

Great, thanks!

> s/boring/interesting/
> 
> I wonder if you would consider publishing those snippets which are
> publishable onto your microblogging platform of choice?

In principle, yes, I'd love to.

Practically, the main problem in doing so is that I'd lose the advantage
of decoupling those logs with d-d-a reports. I.e. the fact that I can
use the logs as a raw dump, without worrying too much about stuff like
form or whether I'm doing a spoiler for a forthcoming announcement
(risking that the Press team will kill me :-)). I try to post on
identi.ca bits-like stuff tagged with #dpl, but I'm not particularly
good at keeping up with that…

Cheers.
-- 
Stefano Zacchiroli zack@{upsilon.cc,pps.jussieu.fr,debian.org} . o .
Maître de conférences   ..   http://upsilon.cc/zack   ..   . . o
Debian Project Leader...   @zack on identi.ca   ...o o o
« the first rule of tautology club is the first rule of tautology club »


signature.asc
Description: Digital signature

Re: Bug#640721: ITP: xf86-video-omap -- X.Org X server -- OMAP display driver

[Sebastian Reichel]

On Wed, Sep 07, 2011 at 03:32:08PM +0200, Paul Wise wrote:
> On Tue, Sep 6, 2011 at 10:16 PM, Sebastian Reichel wrote:
> 
> >  Description     : X.Org X server -- OMAP display driver
> 
> How does this package related to these two existing packages?
> 
> http://packages.debian.org/sid/xserver-xorg-video-omap3
> http://packages.debian.org/sid/xserver-xorg-video-omapfb

xserver-xorg-video-omapfb is using the omapfb kernel interface, it's
a slighly advanced omap specific version of xserver-xorg-video-fbdev
(which also works on omap). xserver-xorg-video-omap3 is omapfb, but
with enabled NEON instruction set during compilation. It has been
introduced before armhf existed.

None of these support KMS, XRandR or EXA. On x86 you can compare
them with xserver-xorg-video-vesa.

The new driver supports KMS, XRandR, EXA & 3D (but needs a non-free
plugin for some of these tasks, like 3D).

-- Sebastian


signature.asc
Description: Digital signature

Re: bits from the DPL for August 2011

[Paul Wise]

On Wed, Sep 7, 2011 at 3:25 PM, Stefano Zacchiroli wrote:

> A mildly related discussion has happened on -devel [5]. The bottom line
> is simple: if you're maintaining a service which has some kind of web
> interface, please ensure the page footer has links to the source and
> relevant BTS page. It's a small step but fundamental step to: 1) invite
> contributions to our infrastructure (e.g. from people willing to help
> Debian via sw development contributions); and 2) show that our
> infrastructure is Free.

Added this to the Debian wiki configuration. Also added a link to the
wiki page for the wiki team.

> PS as usual, the boring day-to-day activity log is available at
>   

s/boring/interesting/

I wonder if you would consider publishing those snippets which are
publishable onto your microblogging platform of choice?

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/caktje6euv1ghhsuesxvwfjv7br_kzfch2z46k6slcnw5www...@mail.gmail.com

Bug#640798: O: gpscorrelate -- correlates digital photos with GPS data filling EXIF fields (command line)

[Євгеній Мещеряков]

Package: wnpp
Severity: normal

I intend to orphan the gpscorrelate package. I'm not using it anymore.
There were no new releases for some time and the author was interested
in a new maintainer. The package is mostly bug-free, there but are some
reports about crashes.

The package description is:
 gpscorrelate fills EXIF (Exchangeable Image File Format) fields of
 digital photos related to GPS (Global Positioning System) information
 (e.g.: GPSLatitude, GPSLongitude, GPSAltitude, ...). The act of filling
 those fields is referred to as "correlation".
 .
 Inputs of the correlation process are a set of JPEG images and GPS data
 encoded in GPX (GPS Exchange Format) format.
 .
 If GPS data are available at the precise moment the photo was taken
 (with a 1-second granularity) the GPS data are stored unmodified in
 EXIF fields. If they are not linear interpolation of GPS data
 available at moments before and after the photo was taken can be used.
 .
 Both a command line tool (package gpscorrelate) and a GTK+ graphical
 user interface for it (package gpscorrelate-gui) are provided.
 .
 This package contains the command line tool and the documentation in HTML
 format.



-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110907140743.4512.54797.reportbug@localhost

Re: Bug#640721: ITP: xf86-video-omap -- X.Org X server -- OMAP display driver

[Cyril Brulebois]

Hi,

Sebastian Reichel  (06/09/2011):
>   Description : X.Org X server -- OMAP display driver

FWIW: http://x.debian.net/reference/dependencies.html

Mraw,
KiBi.


signature.asc
Description: Digital signature

Re: Bug#640721: ITP: xf86-video-omap -- X.Org X server -- OMAP display driver

[Paul Wise]

On Tue, Sep 6, 2011 at 10:16 PM, Sebastian Reichel wrote:

>  Description     : X.Org X server -- OMAP display driver

How does this package related to these two existing packages?

http://packages.debian.org/sid/xserver-xorg-video-omap3
http://packages.debian.org/sid/xserver-xorg-video-omapfb

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/CAKTje6HA=xzKqf-Z=eyjvctyavzuylcdu41i+_v7hebqa2a...@mail.gmail.com

Re: Need Articles Submitted on EZines for SEO

[Sulabh J]

Hello, I am Sulabh J, Manager Marketing Services eZdia Inc.  
Recently, I came across a post where you havementioned about  
your Article Submission project.Just wanted to know, if you are  
still looking for this service. style="font-family: arial,helvetica,sans-serif;" class="gmail_quote">link="blue" vlink="purple" lang="EN-US">style="margin-bottom: 0.0001pt; line-height: normal;">We  
are doing Article Submission on Ezine style="margin-bottom: 0.0001pt; line-height: normal;">for  
our clients, since 4 years now. style="margin-bottom: 0.0001pt; line-height: normal;">class="MsoNormal" style="margin-bottom: 0.0001pt; line-height:  
normal;">Here is what we can offer you in just $14.90class="MsoNormal" style="margin-bottom: 0.0001pt; line-height:  
normal;">style="margin-bottom: 0.0001pt; line-height: normal;">1. One  
Original SEO article of 400+ wordsstyle="margin-bottom: 0.0001pt; line-height: normal;">size="2">2. Submission of this  
article on the below 5 directories namely, (Best Articles Submission  
Directories over the Internet)class="MsoNormal" style="line-height: normal;">size="2">EZineArticles.com style="line-height: normal;">ArticlesBase.comclass="MsoNormal" style="line-height: normal;">size="2">ArticleSnatch.comstyle="line-height: normal;">Ideamarketers.com &  
size="2">Gather.com 3.  
Guaranteed Publishing 4. Report of Published URLsstyle="color: rgb(51, 51, 255);">Once the articles  
are published on the above websites, it guarantees targeted traffic to  
your website along with high search engine page ranks and Alexa  
ranking.style="color: rgb(0, 0, 0);">size="2">href="http://www.ezdia.com/ma/article-writing-services.htm?utm_source=sj#article-publishing";>Article  
Submission - SEO that Pays >>size="2">size="2">If you are interested, please do not hesitate in writing to me.  
Mail me at sulab...@ezdia.comclass="MsoNormal">Let me know  
any other custom requirement you have in Internet class="MsoNormal">Marketing and SEO. I will be more than  
happy in responding you. size="2">Please  
reply, size="2">Sulabh J  
href="http://www.eZdia.com";  
target="_blank">www.eZdia.comstyle="font-family: arial,helvetica,sans-serif;" size="2">

ITP: convergence -- An agile, distributed, and secure strategy for replacing Certificate Authorities.

[bertagaz]

Package: wnpp
Severity: wishlist
Owner: bertagaz 


* Package name: convergence
  Version : 0.03
  Upstream Author : Moxie Marlinspike 
* URL : http://convergence.io/
* License : GPL
  Programming Lang: Python
  Description : Agile, distributed, secure strategy for replacing CAs.

Convergence is a secure replacement for the Certificate Authority System.
Rather than employing a traditionally hard-coded list of immutable CAs,
Convergence allows you to configure a dynamic set of Notaries which use
network perspective to validate your communication.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/20110907094010.GA26716@localhost

Re: Status of circulars dependencies in unstable

[Dominique Dumont]

Le Tuesday 6 September 2011 08:36:15, Russ Allbery a écrit :
> The problem is that perl and perl-modules really are one package that was
> split apart solely to get the (large) architecture-independent parts into
> an arch: all package.

Then, may be, we should flag them accordingly. Let's imagine a new flag which 
tags perl-modules as a "remora" (*) package. 

As such perl-modules would need to be always installed (or removed) together 
with perl (with the same version). And the dependency resolver algorithm would 
handle only one package (perl) internally.

On the downside, we'd need yet another flag in debian/control.

Thoughts ?

HTH

(*) A remora is a fish that attach itself to bigger fishes to travel
http://en.wikipedia.org/wiki/Remora

Dominique
--
http://config-model.wiki.sourceforge.net/ -o- http://search.cpan.org/~ddumont/
http://www.ohloh.net/accounts/ddumont -o- http://ddumont.wordpress.com/


signature.asc
Description: This is a digitally signed message part.