NSA's Secure Linux Distribution

2000-12-22 Thread Brent Fulgham
No doubt most of you have seen the NSA's secure linux posting
on Slashdot this morning.

Looking at:
http://www.nsa.gov/selinux/docs.html

there appears to be several utilities that have been updated
to provide enhanced security.

Should we be merging these patches into Debian, assuming they
appear to be compatible with our policy, etc.?

Thanks,

-Brent





Restarting Build on a Package

2000-09-12 Thread Brent Fulgham
This is a stupid question, but I've never figured it out:

Is there a way to restart a build of a package *AND* still
be able to generate the source tarball and diff?

I've tried the -nc option to dpkg-buildpackage, but it always
omits the orig.tar.gz.

I'm trying to bootstrap a program that takes quite a while
to build, and if it dies during configuration and I have to
rebuild it again I'm going to pull my hair out.

Thanks,

-Brent


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



ITS: Gwydion Dylan

2000-09-11 Thread Brent Fulgham
ITS:  Intent to Sponsor ;-)

 It appears that these were never officially part of Debian. Those
 packages originated from ftp://folk.federated.com/pub/gd/DEB/potato
 and http://www.gwydiondylan.org/downloading.phtml is what pointed
 me there. It looks like you might be in good shape, though I'm
 quite far from anything like a final say on this matter.
 Sorry I didn't do more fact checking before posting previously.
 

The mystery is solved.  I'm not sure who created these initial
packages, but currently there are CVS entries for packaging up through
the current 2.3.3 version of Dylan.  These were created by a
fellow who is in the new maintainer queue.

I'm going to sponsor his packages until he gets accepted into Debian
and can start uploading himself.

Thanks,

-Brent


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



ITP: Gwydion Dylan

2000-09-08 Thread Brent Fulgham
I need to work with Gwydion Dylan, and noticed we don't currently
have a package for it.

I vaguely remember someone talking about it long ago, but don't
remember what became of it.

I intend to package this Dylan implementation unless someone else
is already doing so.  I don't see any mention in WNPP or the
mailing list archives.

Thanks,

-Brent


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



RE: ITP: Gwydion Dylan

2000-09-08 Thread Brent Fulgham
 I believe someone's already packaged Gwydion Dylan.
 ii  gwydion-dylan  2.3.1-1A Dylan-to-C batch compiler.
 ii  gwydion-dylan- 2.3.1-1Tools used for recompiling 
 Gwydion Dylan.
 ii  mindy  2.3.1-1A Dylan interpreter.
 
 But hey, I'm glad someone else is interested in advanced languages.
 

I believe these are old libc5 packages.  The Gwydion team is
certainly not aware of any current Debian packaging activities,
certainly since they moved to 2.3.3/2.4pre1.

I'd be happy to be proved wrong -- but I can't find Dylan in the
potato or woody FTP archives, WNPP, bug tracking, or in our
mailing list entries.

Anyone know if this was orphaned?

Thanks,

-Brent


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



RE: ANNOUNCE: Project to weld a specially-built perl-5.6.0 to aol server

2000-09-05 Thread Brent Fulgham

 I have been working on a project to bring aolserver and perl 
 together for the past 2-3 weeks, and it has passed what I 
 consider to be all its proof-of-concept stages: with the 
 preliminary code I have written, an aolserver
 which receives a request from a browser can respond by 
 running a perl script.

 The perl script can then send content back to the browser. 
 
 A statement of progress in a bit more detail can presently be found at
 
 http://openacs.org/bboard/q-and-a-fetch-msg.tcl?msg_id=Tb;
 topic_id=OpenACStopic=
 
 In my opinion, this makes the project a success as it stands.

Hi Jim,

Congratulations on your Perl effort.  I've been working on a
similar project, and have achieved about the same level of
success you have.

I based my work on the Python embed project I did (see
http://pywx.idyll.org).  It is not as far along as our Python
implementation, but it would be a short effort to do so.

If you want, we could pool resources on this one to accelerate
development.  We can continue this off-list since it's probably
of limited interest to others

Thanks,

-Brent


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



FW: Firewall Project

2000-08-21 Thread Brent Fulgham
The technical leadership at my wife's work are back-pedalling from
using a Linux firewall between an AS/400 system and remotely-connected
PC's based on the following argument:

 To all Network Administrators:
 
 Problem: AS/400 can only communicate with active packets to and from the
 client. Any type of passive packet exchange will result in a loss of
 connectivity and invoke a Winsock error. 
 
 Solution: Use an active firewall scheme 
 

This active firewall will most likely consist of a windows-based
solution.  

Can anyone comment on why Linux would be unsuitable for firewall use
in this configuration?

Thanks,

-Brent




RE: FW: Firewall Project

2000-08-21 Thread Brent Fulgham
  Can anyone comment on why Linux would be unsuitable for firewall use
  in this configuration?
 
 Can you explain what an `active' packet is?
 

That's my question as well.  I can't find any reference to an active
packet definition.  Could he mean some kind of keep-alive configuration?

Or is it some weird AS/400 thing?

-Brent




Encryption Builds

2000-03-29 Thread Brent Fulgham
Can anyone refresh my memory as to the legality of encryption-enabled builds
of software inside the U.S.  Did we (like Kernel.org) decide it was okay to
host this in U.S.-based servers, or are we still recommending
that members of the free world do such builds?

If the answer is to not build inside the U.S., I need a non-US developer
to help me build a SSL module for AOLserver.

Thanks,

-Brent



RE: PPP on Potato

2000-03-25 Thread Brent Fulgham
 also failed.  Has ppp changed between  slink and
 potato?  (ATTWorldnet uses chap for login).
 
Were you using the Slink-an-a-half, or the original 
Slink?  The original slink was based on the 2.0 Kernel,
and I believe with Potato some of the settings for
chat changed.  Unfortunately, I can't remember them off
the top of my head.

Perhaps someone else can remember?

-Brent



RE: Mozilla

2000-03-10 Thread Brent Fulgham
Title: RE: Mozilla





The Mozilla M14 readme clearly states that the M13 preferences
are not compatible. Most likely their install script removes
the preferences automatically or similar, but I view this as
a fix for a temporary problem and not worth implementing for
Debian.


 -Original Message-
 From: Will Barton [mailto:[EMAIL PROTECTED]]
 Sent: Thursday, March 09, 2000 5:03 PM
 To: debian-devel@lists.debian.org
 Subject: Re: Mozilla
 
 
 I dont believe that this is a problem with Mozilla itself, 
 because the binary tarball of
 M14 works fine with M13 prefrences. Its only after you 
 install the deb that this go crazy.
 
 Has anyone else used both the deb and the binary version of 
 M14 and had similar results?
 
 --
 Will Barton
 
 
 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact 
 [EMAIL PROTECTED]
 





RE: Time to rewrite dpkg

1999-05-20 Thread Brent Fulgham
 * Ossama Othman said:
 
Why? Tell me how I pass a C++ object to C, Fortran or Pascal. 
  
  The same way you pass fortran to C: use wrappers, for 
 example.  Here is
  one way of passing a static C++ method to a C function (e.g. signal
  system call) in C++ code:
  
  extern C void
  Base_cleanup (void *object, void *)
  {
Base::cleanup (object, 0);
  }
  
  Simple. :-)
 Perhaps, but not clean. And doesn't make sense in this 
 particular case...
 Remember the rule of the Ockham's Razor I think it should 
 be obeyed
 here...
 

I think the real problem is in trying to export a language-specific
construct to another language which does not support it.  C does not support
objects.  Yes, yes.  I realize that a good C programmer can bliff and
blaff, etc., to achieve an object-oriented design that will be worthy of a
Nobel prize and the Pulitzer prize simultaneously, etc. etc..

However, the fact is that C is designed primarily for procedural style
programming, and does not have features in place to handle
C++/Java/Python/etc. objects.

A better question is how a revised C++-ish library might interoperate with
an object-oriented language designed to make use of polymorphism,
abstraction, etc.  Say, how Python might work as a front end, or how you
might use Java, etc.

Asking how to pass a C++ object to C is like asking how to cast a float to a
byte field in assembly.  

Ideally, a library would (in addition to it's C++ functionality) have a C
interface that doesn't really deal with the issue of objects.  Say,
something that would accept some standard C types and structs, and return
same.

-Brent



RE: evan leibovitch and the LPI certification tests

1999-05-19 Thread Brent Fulgham
Title: RE: evan leibovitch and the LPI certification tests






  RedCrap already has everyone where they want them; in their back
  pocket, filling their wallet more and more everyday. Alongside VA
  Research.
 
I find it offensive that you attack VA research,
who provides many of the resources we enjoy
as Debian developers.


Regards,


-Brent





RE: Release Plans (1999-05-10)

1999-05-14 Thread Brent Fulgham
Title: RE: Release Plans (1999-05-10)





 
 Yes, ...
 
 but mozilla is pretty big, 17MB i think, so the compile will 
 use lots of disk
 space and compile time, so i prefer to know if it should 
 work, or if there
 should be major problems to it, and not discover after a 
 night's compile time
 what went wrong. Also a list of source dependencies would be nice.
 
 Or even to know before i start downloading and compiling that 
 it will not work
 anyway.
 
 Also the mozilla web pages are not very informative about non-i386
 compilability, but then maybe i didn't search in the right place ...
 
 Friendly,
 
 Sven LUTHER
 


Yes -- it took nearly 3 hours over a 33.3 phone connection to download
CVS. A tarball would have been much faster.


It actually builds fairly quickly -- on the order of 40 minutes on my
K6-2. I could attempt to build it on faure and see what happens.


If we can get the configuration scripts to work cleanly (they are 
pretty close now) we should be able to let the various build daemons
do the boring work later.


-Brent





RE: Release Plans (1999-05-10)

1999-05-13 Thread Brent Fulgham
   (ask Brent Fulgham, maybe there were more),
  
  Would it be possible to at least have one of those in potato?
 
 Maybe. Question is - do we want another five thousand 
 wishlist bug reports
 from users screaming for something 'better'? ;(
 
 I think you should look in http://va.debian.org/~bfulgham/ 
 and download
 the version of mozilla that is (hopefully) still there. If it 
 works, and
 if more people agree with it, I'll put it in potato.
 
The only problem I had with the versions in my home directory
is that they were somewhat slow.  They were not built using
optimization, so they suffer some performance hits.

Everything seems to build fine according to Tinderbox.  Let's
try another build Josip and see how it works out.  If we can't
get it to build cleanly, I will pull CVS over my phone line at
home and try building on my Potato system there...

-Brent



RE: [Fwd: [Jikes-License] Jikes Parser Generator now available i

1999-01-27 Thread Brent Fulgham




Try Japhar/Classpath:

www.japhar.org -- free JDK (compiler, runtime, debugger, etc.)
www.classpath.org -- free implementation of the essential java libraries

-Brent

 -Original Message-
 From: Shaleh [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, January 27, 1999 1:22 PM
 To: Mike Goldman
 Subject: RE: [Fwd: [Jikes-License] Jikes Parser Generator now 
 available
 i
 
 
 Now we need a free JDK and off we go (=
 
 
 -- 
 To UNSUBSCRIBE, email to [EMAIL PROTECTED]
 with a subject of unsubscribe. Trouble? Contact 
 [EMAIL PROTECTED]
 





Re: getting kernel 2.2 into slink

1999-01-22 Thread Brent Fulgham
 2.2. diald/ppp in slink does not work with 2.2.0-pre7 (on my box, at
 least).  I am sure that there are other things as well.

I'm sure you were aware that you have to upgrade your pppd to work with any
of the higher-order 2.1.X kernels?  You might want to check the kernel
source's Documents/CHANGES file.

-Brent



RE: getting kernel 2.2 into slink

1999-01-22 Thread Brent Fulgham
 It's Changes and yes I have read it:

  master:/home/wind# pppd -v
  pppd: unrecognized option '-v'
  pppd version 2.3 patch level 5

 The issue being that there IS a problem - e.g. are we going to provide
 ppp1 and ppp2?  That sounds like trouble to me.

Real Question (not a snipe):  Is there any reason everyone couldn't use a
current pppd that would be compatible with the new kernel image?  Why have
two packages?

-Brent



RE: getting kernel 2.2 into slink

1999-01-21 Thread Brent Fulgham




I say let's make the 2.2 image a high-profile aspect of slink's release. The kernel is very stable, and I've been running my Debian system on it since 2.1.120. Plus, it would be a great technical feature of our distribution that might give us some bragging rights over the other distros.

-Brent






RE: getting kernel 2.2 into slink

1999-01-21 Thread Brent Fulgham





 I think we should include it, as a service to people who don't want to
 download the whole thing, but attach a note saying As 2.2 was
 released just before we released slink, we are including it, but there
 may be problems, it might eat your computer... we are not responsible
 for anything at all...
 
I have absolutely no problem with that. Seems like a prudent and advisable way to proceed.

-Brent





Re: 1FA: problem still in hamm disks

1998-10-16 Thread Brent Fulgham
I'd like to chime in --

It's a real annoyance that the base disks don't set up lilo to let you
boot into multiple operating systems.  Couldn't it ask if you want to
dual-boot with windows, or whatever, and generate an appropriate lilo.conf
file?

This is an area where RedHat has a significant lead over us.  One of the
guys I work with is a huge RedHat fan because he can just pop a RH CD
into the drive, windows will autorun it, and RedHat install starts.  It sets
up
almost everything for the user.

I know we support far more configurations, etc. etc. etc., but for the
average
Joe New-User this is a large hurdle.

-Brent
-Original Message-
From: Ben Gertzfield [EMAIL PROTECTED]
To: Enrique Zanardi [EMAIL PROTECTED]
Cc: Duncan Thomson [EMAIL PROTECTED];
debian-devel@lists.debian.org debian-devel@lists.debian.org
Date: Friday, October 16, 1998 10:31 AM
Subject: Re: 1FA: problem still in hamm disks


Enrique Zanardi [EMAIL PROTECTED] writes:


 On Fri, Oct 16, 1998 at 09:18:23AM +, Duncan Thomson wrote:
  i've seen postings about this before, but as yet no solution (either as
  a message or in the boot disks).
 
  when debian is made bootable from the hard disk on certain systems, the
  prompt 1FA: comes up, but the system will not boot off partition 1.
  the disk controller is AHA-2940.  any solutions to this problem?

 Where does it stops? Does it shows the typical LI message?

Enrique, the problem is that our special mbr tool *REQUIRES* that
one of the partitions on your drive be marked Bootable under cfdisk
or fdisk.

However, the current boot-floppies do not require this; in fact, they
don't even check if any partitions are marked Bootable or not.

I suggest you add a test (I'm not sure how you would do it) to see if
the partition LILO is to go on is marked bootable by cfdisk before you
let the user leave the partitioning step.

Ben

--
Brought to you by the letters Y and P and the number 1.
Nerd. Loser. Jerk. Moron. Worm. Scum. Idiot. Fool. -- Pkunk, SCII
Debian GNU/Linux -- where do you want to go tomorrow?
http://www.debian.org/
I'm on FurryMUCK as Che, and EFNet and YiffNet IRC as Che_Fox.


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]



Re: Re: Linus is on a powertrip..

1998-10-05 Thread Brent Fulgham
This is from the linux kernel mailing list. I find it pretty completly sums
op my thoughts on all the new constitution and voting and policy voting
stuff that we've been setting up. I haven't been vocal about this, but I
think we've been moving in the wrong direction.

Of course, this came up on linux kernel because Linus is showing signs of
burnout - just like Bruce burnt out. The benevolent dicator system isn't
perfect.



The problem is that no matter what system we have, it will make some people
unhappy.  Even if we all could agree on someone to be the benevolent
dictator, as soon as he/she made a decision contrary to some group of
developers, there would be claims of tyranny and some developers would
take their bat and balls and go home.

Witness the latest bloodletting that involved three of the founding project
members leaving after shouts of lawsuits and other hysteria against them.

We should probably just try out the less-efficient voting system and see if
that proves to be more popular.

My $0.02

-Brent