Bug#679828: libc6: No easy way of enabling DNSSEC validation aka RES_USE_DNSSEC
* Matthew Grant: From my investigations this can only be enabled by recompiling each bit of software to set the RES_USE_DNSSEC flag in _res.options, as well as RES_USE_EDNS0. (Please see racoon bug #679483). The enablement method is from openssh 6.0p1, openbsd-compat/getrrsetbyname.c This does not actually activate DNSSEC, it just tells the recursive resolver that the application is able to process DNSSEC records. The application would still have to validate them. Applications should never need to set the RES_USE_DNSSEC flag because it does not make sense to treat DNSSEC-signed data differently from unsigned data. Please create a resolv.conf flag so that RES_USE_DNSSEC is available to the systems administrator, and maybe a debconf screen to select it. This alone wouldn't make any difference to the spoofing problem. libc is not the correct place to put DNSSEC validation because many processes are shortlived and would have to fetch all key material and signatures from DNS, beginning at the root. This would turn a single name resolution into six or more DNS queries, which is excessive. At this stage, you should run a BIND or Unbound process restricted to localhost which performs the validation. This validation will happen even for applications which do not set the RES_USE_DNSSEC flag. -- To UNSUBSCRIBE, email to debian-glibc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/87sjdau1uj@mid.deneb.enyo.de
Processed: severity of 679828 is wishlist
Processing commands for cont...@bugs.debian.org: severity 679828 wishlist Bug #679828 [libc6] libc6: No easy way of enabling DNSSEC validation aka RES_USE_DNSSEC Severity set to 'wishlist' from 'serious' thanks Stopping processing here. Please contact me if you need assistance. -- 679828: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=679828 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems -- To UNSUBSCRIBE, email to debian-glibc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/handler.s.c.134121139132059.transcr...@bugs.debian.org
Bug#555168: Unclear license situation for (e)glibc locales provided by you
Hello Dr. Kreutzmann I have absolutely no objections to the statement being modified to allow for modification and re-licensed. Pablo contacted me for help so I have included his updated e-mail in the reply too. As long as the locale can be updated, modified and distributed freely for the benefit of everyone I have no objections :) If you require anything else from me please do not hesitate to ask. Regards Shehzad Date: Sat, 30 Jun 2012 15:22:30 +0200 From: deb...@helgefjell.de To: shehzadas...@hotmail.com; pa...@mandrakesoft.com CC: 555...@bugs.debian.org Subject: Unclear license situation for (e)glibc locales provided by you Hello, you are listed as contact person/author of the following locale: ur_PK This locale comes with a statement % Distribution and use is free, also % for commercial purposes. Thus it does not allow modification; it is unclear, however, if this statement was meant as a license. As discussed in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555168 this locale could strictly speaking not be part of Debian which would be a great loss. (Currently it is allowed pending investigation). To properly resolve this, I would like to ask you the following question: Would you be willing to relicense this locale to a proper license, e.g. (L)GPL v2 or higher or another free software license of your choice? If you have any questions regarding this issue, do not hesitate to contact me (via the reply-to address set). Thanks for helping to resolve this! Helge -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/
Bug#555168: Unclear license situation for (e)glibc locales provided by you
Hello Shehzad, thanks for your answer. Just to make sure I understand you correctly: The license (L)GPL v2 or higher is fine for you, correct? Also thanks for the new address of Pablo, unfortunately, it also does not work. Greetings Helge On Mon, Jul 02, 2012 at 03:56:55PM +0100, Shehzad Ali wrote: Hello Dr. Kreutzmann I have absolutely no objections to the statement being modified to allow for modification and re-licensed. Pablo contacted me for help so I have included his updated e-mail in the reply too. As long as the locale can be updated, modified and distributed freely for the benefit of everyone I have no objections :) If you require anything else from me please do not hesitate to ask. Regards Shehzad Date: Sat, 30 Jun 2012 15:22:30 +0200 From: deb...@helgefjell.de To: shehzadas...@hotmail.com; pa...@mandrakesoft.com CC: 555...@bugs.debian.org Subject: Unclear license situation for (e)glibc locales provided by you Hello, you are listed as contact person/author of the following locale: ur_PK This locale comes with a statement % Distribution and use is free, also % for commercial purposes. Thus it does not allow modification; it is unclear, however, if this statement was meant as a license. As discussed in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555168 this locale could strictly speaking not be part of Debian which would be a great loss. (Currently it is allowed pending investigation). To properly resolve this, I would like to ask you the following question: Would you be willing to relicense this locale to a proper license, e.g. (L)GPL v2 or higher or another free software license of your choice? If you have any questions regarding this issue, do not hesitate to contact me (via the reply-to address set). Thanks for helping to resolve this! Helge -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/ signature.asc Description: Digital signature
Bug#555168: Unclear license situation for (e)glibc locales provided by you
Hello Dr. Kreutzmann Yes, the license (L)GPL v2 or higher is fine for me. Pablo works at Mandriva now according to his LinkedIn profile. Their is another e-mail on his website. Would you like me to find that for you? Regards Shehzad -Original Message- From: Helge Kreutzmann deb...@helgefjell.de Date: Mon, 2 Jul 2012 15:36:08 To: shehzadas...@hotmail.com Cc: pa...@mandrakesoft.com; pa...@mandriva.com; shehzadas...@yahoo.com; 555...@bugs.debian.org Subject: Re: Bug#555168: Unclear license situation for (e)glibc locales provided by you Hello Shehzad, thanks for your answer. Just to make sure I understand you correctly: The license (L)GPL v2 or higher is fine for you, correct? Also thanks for the new address of Pablo, unfortunately, it also does not work. Greetings Helge On Mon, Jul 02, 2012 at 03:56:55PM +0100, Shehzad Ali wrote: Hello Dr. Kreutzmann I have absolutely no objections to the statement being modified to allow for modification and re-licensed. Pablo contacted me for help so I have included his updated e-mail in the reply too. As long as the locale can be updated, modified and distributed freely for the benefit of everyone I have no objections :) If you require anything else from me please do not hesitate to ask. Regards Shehzad Date: Sat, 30 Jun 2012 15:22:30 +0200 From: deb...@helgefjell.de To: shehzadas...@hotmail.com; pa...@mandrakesoft.com CC: 555...@bugs.debian.org Subject: Unclear license situation for (e)glibc locales provided by you Hello, you are listed as contact person/author of the following locale: ur_PK This locale comes with a statement % Distribution and use is free, also % for commercial purposes. Thus it does not allow modification; it is unclear, however, if this statement was meant as a license. As discussed in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555168 this locale could strictly speaking not be part of Debian which would be a great loss. (Currently it is allowed pending investigation). To properly resolve this, I would like to ask you the following question: Would you be willing to relicense this locale to a proper license, e.g. (L)GPL v2 or higher or another free software license of your choice? If you have any questions regarding this issue, do not hesitate to contact me (via the reply-to address set). Thanks for helping to resolve this! Helge -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/ -- To UNSUBSCRIBE, email to debian-glibc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/snt126-ds55ff10647962318e35314c4...@phx.gbl
Bug#555168: Unclear license situation for (e)glibc locales provided by you
Hello Shehzad, On Mon, Jul 02, 2012 at 03:49:50PM +, Shehzad Ali wrote: Yes, the license (L)GPL v2 or higher is fine for me. Thanks. Pablo works at Mandriva now according to his LinkedIn profile. Their is another e-mail on his website. Would you like me to find that for you? That would be great if you could find out that other e-mail address, this would help a lot! Thank you Helge Regards Shehzad -Original Message- From: Helge Kreutzmann deb...@helgefjell.de Date: Mon, 2 Jul 2012 15:36:08 To: shehzadas...@hotmail.com Cc: pa...@mandrakesoft.com; pa...@mandriva.com; shehzadas...@yahoo.com; 555...@bugs.debian.org Subject: Re: Bug#555168: Unclear license situation for (e)glibc locales provided by you Hello Shehzad, thanks for your answer. Just to make sure I understand you correctly: The license (L)GPL v2 or higher is fine for you, correct? Also thanks for the new address of Pablo, unfortunately, it also does not work. Greetings Helge On Mon, Jul 02, 2012 at 03:56:55PM +0100, Shehzad Ali wrote: Hello Dr. Kreutzmann I have absolutely no objections to the statement being modified to allow for modification and re-licensed. Pablo contacted me for help so I have included his updated e-mail in the reply too. As long as the locale can be updated, modified and distributed freely for the benefit of everyone I have no objections :) If you require anything else from me please do not hesitate to ask. Regards Shehzad Date: Sat, 30 Jun 2012 15:22:30 +0200 From: deb...@helgefjell.de To: shehzadas...@hotmail.com; pa...@mandrakesoft.com CC: 555...@bugs.debian.org Subject: Unclear license situation for (e)glibc locales provided by you Hello, you are listed as contact person/author of the following locale: ur_PK This locale comes with a statement % Distribution and use is free, also % for commercial purposes. Thus it does not allow modification; it is unclear, however, if this statement was meant as a license. As discussed in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555168 this locale could strictly speaking not be part of Debian which would be a great loss. (Currently it is allowed pending investigation). To properly resolve this, I would like to ask you the following question: Would you be willing to relicense this locale to a proper license, e.g. (L)GPL v2 or higher or another free software license of your choice? If you have any questions regarding this issue, do not hesitate to contact me (via the reply-to address set). Thanks for helping to resolve this! Helge -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/ -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/ signature.asc Description: Digital signature
Bug#555168: Unclear license situation for (e)glibc locales provided by you
According to Pablo's website: http://chanae.walon.org/~srtxg/ . He has two e-mail addresses on this website: sr...@chanae.walon.org and pa...@walon.org which I have also included in this e-mail. Hopefully either of these should work. Regards Shehzad Date: Mon, 2 Jul 2012 17:52:46 +0200 From: deb...@helgefjell.de To: shehzadas...@hotmail.com CC: pa...@mandrakesoft.com; pa...@mandriva.com; shehzadas...@yahoo.com; 555...@bugs.debian.org Subject: Re: Bug#555168: Unclear license situation for (e)glibc locales provided by you Hello Shehzad, On Mon, Jul 02, 2012 at 03:49:50PM +, Shehzad Ali wrote: Yes, the license (L)GPL v2 or higher is fine for me. Thanks. Pablo works at Mandriva now according to his LinkedIn profile. Their is another e-mail on his website. Would you like me to find that for you? That would be great if you could find out that other e-mail address, this would help a lot! Thank you Helge Regards Shehzad -Original Message- From: Helge Kreutzmann deb...@helgefjell.de Date: Mon, 2 Jul 2012 15:36:08 To: shehzadas...@hotmail.com Cc: pa...@mandrakesoft.com; pa...@mandriva.com; shehzadas...@yahoo.com; 555...@bugs.debian.org Subject: Re: Bug#555168: Unclear license situation for (e)glibc locales provided by you Hello Shehzad, thanks for your answer. Just to make sure I understand you correctly: The license (L)GPL v2 or higher is fine for you, correct? Also thanks for the new address of Pablo, unfortunately, it also does not work. Greetings Helge On Mon, Jul 02, 2012 at 03:56:55PM +0100, Shehzad Ali wrote: Hello Dr. Kreutzmann I have absolutely no objections to the statement being modified to allow for modification and re-licensed. Pablo contacted me for help so I have included his updated e-mail in the reply too. As long as the locale can be updated, modified and distributed freely for the benefit of everyone I have no objections :) If you require anything else from me please do not hesitate to ask. Regards Shehzad Date: Sat, 30 Jun 2012 15:22:30 +0200 From: deb...@helgefjell.de To: shehzadas...@hotmail.com; pa...@mandrakesoft.com CC: 555...@bugs.debian.org Subject: Unclear license situation for (e)glibc locales provided by you Hello, you are listed as contact person/author of the following locale: ur_PK This locale comes with a statement % Distribution and use is free, also % for commercial purposes. Thus it does not allow modification; it is unclear, however, if this statement was meant as a license. As discussed in http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=555168 this locale could strictly speaking not be part of Debian which would be a great loss. (Currently it is allowed pending investigation). To properly resolve this, I would like to ask you the following question: Would you be willing to relicense this locale to a proper license, e.g. (L)GPL v2 or higher or another free software license of your choice? If you have any questions regarding this issue, do not hesitate to contact me (via the reply-to address set). Thanks for helping to resolve this! Helge -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/ -- Dr. Helge Kreutzmann deb...@helgefjell.de Dipl.-Phys. http://www.helgefjell.de/debian.php 64bit GNU powered gpg signed mail preferred Help keep free software libre: http://www.ffii.de/
Bug#555168: Unclear license situation for (e)glibc locales provided by you
Jonathan, Yes, that's fine. Raphael Does that mean something like % This file has been put in the public domain. % You can do whatever you want with this file. % % 2003-08-16: corrections from Raphael Finkel raph...@cs.uky.edu % for locales/yi_US would be okay with you if Pablo Saratxaga is ok with it? -- To UNSUBSCRIBE, email to debian-glibc-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/20120702130619.gh2...@cs.uky.edu