Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-09-17 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Fri, Sep 12, 2008 at 09:44:35AM -0600, dann frazier wrote:
>On Fri, Aug 29, 2008 at 11:51:38AM +0200, Jonas Smedegaard wrote:
>> On Tue, Aug 26, 2008 at 10:33:00PM +0200, maximilian attems wrote:
>> >On Mon, 25 Aug 2008, Jonas Smedegaard wrote:
>> >
>> >> +1021_new-style_firewire.patch
>> >
>> >etch+half kernel has old ieee1394, no need for that one.
>> 
>> Thanks for your concern, Max.
>> 
>> I will wait for a response from security or release team before 
>> working more on this.
>
>Jonas,
> Your patch (w/o the firewire changes, as Maks points out), looks
>good to me. Please go ahead and upload to stable.

Thanks for the review.

Uploaded now to stable-proposed-updates (hope that is what you meant).


  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkjRPC8ACgkQn7DbMsAkQLj9aACfUBZYjVj5hm2NymZNN4JBy/gX
IpQAoJUgBR485yB/FjNxSSfuoS/Z9e46
=CK8d
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-08-29 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, Aug 26, 2008 at 10:33:00PM +0200, maximilian attems wrote:
>On Mon, 25 Aug 2008, Jonas Smedegaard wrote:
>
>> +1021_new-style_firewire.patch
>
>etch+half kernel has old ieee1394, no need for that one.

Thanks for your concern, Max.

I will wait for a response from security or release team before working 
more on this.


  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAki3xqoACgkQn7DbMsAkQLjoIgCfZ2mIGyGqz1sTCrxh0nQ6shdj
Q3UAmwRHir0MgOYsn420heV/A8x2dS+t
=Mnyr
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-08-25 Thread Jonas Smedegaard

On Mon, Aug 25, 2008 at 04:43:48PM +0200, Maximilian Attems wrote:

On Mon, Aug 25, 2008 at 12:26 PM, Jonas Smedegaard <[EMAIL PROTECTED]> wrote:


NB! Even if yaird really is "generally too buggy" as judged in 
bug#457177, the current release in unstable is far better than the 
version currently in Etch, (contains no known regressions, and 
actually works out-of-the-box in many cases with recent Linux kernels 
whereas etch release don't).


this diff seems a bit huge for a stable update.


I assume you mean a diff between 0.0.12-18 currently in Etch and 
0.0.13-4 currently in Sid.


Agreed, this is too big.

Attached is a proposed patch with only patches directly related to 
support for the newer Linux kernels.





also considering that lenny is about to be released.


This bugreport concerns Etch. Please keep your abandon-the-past approach 
to the kernel-team - it does not apply here!



as yaird is considered to be working with default etch kernel, that bug 
doesn't need any further action.


Yaird is (possibly contrary to other ramdisk-generators) not only for 
"default" kernel, but generally for Linux kernels.


If our ultimate goal for yaird was to deprecate it, then yes, this bug 
should better bit-rot, to help move all its users to use an alternative 
ramdisk-generator.  But that is not our goal.



  - Jonas

--
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
diff -u yaird-0.0.12/debian/patches/series yaird-0.0.12/debian/patches/series
--- yaird-0.0.12/debian/patches/series
+++ yaird-0.0.12/debian/patches/series
@@ -12,0 +13,5 @@
+1018_ignore_uniq_hint_in_input_devices.patch
+1021_new-style_firewire.patch
+1022_fix_run_init_dashed-options.patch
+1024_thermal_modules.patch
+1025_resolve_eventX_device_links.patch
diff -u yaird-0.0.12/debian/changelog yaird-0.0.12/debian/changelog
--- yaird-0.0.12/debian/changelog
+++ yaird-0.0.12/debian/changelog
@@ -1,3 +1,22 @@
+yaird (0.0.12-18etch1) stable-proposed-updates; urgency=low
+
+  * Add patch 1018 to ignore "uniq" hint in input devices, added in
+Linux 2.6.22. Closes: bug#426728, #431534, #434597, #435227,
+#435268, #435560, thanks to Bin Zhang and lots of others.
+  * Add patch 1021 to support new-style IEEE1394 (Firewire) driver.
+  * Add patch 1022 to fix passing dashed options to run_init. Closes:
+bug#416927, thanks to Michael Biebl and Roderick Schupp.
+This may have been the cause of various other problems passing
+dashed boot options to userspace tools.
+  * Add patch 1024 to load all available thermal modules. Closes:
+Bug#457459, thanks to maximilian attems.
+  * Add patch 1025 to fix resolving sysfs eventX symlinks for devices
+introduced in 2.6.23. Closes: bug#443821, thanks to Jan Echternach
+and others helping to resolve this issue.
+  * Disable local cdbs snippet copyright-check.mk (broken).
+
+ -- Jonas Smedegaard <[EMAIL PROTECTED]>  Mon, 25 Aug 2008 20:57:39 +0200
+
 yaird (0.0.12-18) unstable; urgency=low
 
   * Extend patch 1008 to rely only on UUID (not device name) with mdadm
diff -u yaird-0.0.12/debian/rules yaird-0.0.12/debian/rules
--- yaird-0.0.12/debian/rules
+++ yaird-0.0.12/debian/rules
@@ -10,7 +10,7 @@
 include /usr/share/cdbs/1/class/autotools.mk
 include /usr/share/cdbs/1/rules/patchsys-quilt.mk
 include debian/cdbs/1/rules/buildinfo.mk
-include debian/cdbs/1/rules/copyright-check.mk
+#include debian/cdbs/1/rules/copyright-check.mk
 
 # Yaird is right in respecting $PATH, but for
 # packaging we need to force using packaged perl
only in patch2:
unchanged:
--- yaird-0.0.12.orig/debian/patches/1018_ignore_uniq_hint_in_input_devices.patch
+++ yaird-0.0.12/debian/patches/1018_ignore_uniq_hint_in_input_devices.patch
@@ -0,0 +1,14 @@
+diff -ruN yaird-0.0.12.orig/perl/InputTab.pm yaird-0.0.12/perl/InputTab.pm
+--- yaird-0.0.12.orig/perl/InputTab.pm	2007-08-04 18:00:28.0 +0200
 yaird-0.0.12/perl/InputTab.pm	2007-08-04 17:58:42.0 +0200
+@@ -70,6 +70,10 @@
+ 			# Do not keep track of this.
+ 			# $work->{sysfs} = $1;
+ 		}
++		elsif ($line =~ /^U: Uniq=(.*)$/) {
++			# Do not keep track of this.
++			# $work->{unique} = $1;
++		}
+ 		elsif ($line =~ /^B: ([A-Z]+)=(.*)$/) {
+ 			$work->{capabilities}{$1} = $2;
+ 		}
only in patch2:
unchanged:
--- yaird-0.0.12.orig/debian/patches/1024_thermal_modules.patch
+++ yaird-0.0.12/debian/patches/1024_thermal_modules.patch
@@ -0,0 +1,28 @@
+diff -ruN yaird-0.0.12.orig/templates/Default.cfg.in yaird-0.0.12/templates/Default.cfg.in
+--- yaird-0.0.12.orig/templates/Default.cfg.in	2008-01-15 03:08:35.0 +0100
 yaird-0.0.12/templates/Default.cfg.in	2008-01-15 05:06:40.0 +0100
+@@ -55,6 +55,24 @@
+ 		# as soon as possible, so that you can see error messages.
+ 		OPTIONAL MODULE fbcon
+ 
++		# Load any and all available thermal modules, to a

Re: [Yaird-devel] Bug#496500: yaird: fails to create initrd when running 2.6.24 etchnhalf kernel

2008-08-25 Thread Jonas Smedegaard
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Mon, Aug 25, 2008 at 04:29:39PM +0800, James Andrewartha wrote:
>Package: yaird
>Version: 0.0.12-18
>Severity: important
>
>This is bug 431534, exposed again because stable has an old version of
>yaird but a recent kernel.

Acknowledged.

I see some different approaches to this:

  1. Leave this bug open but do nothing about it.
 * This bug is not a security issue in itself
 * Security-related kernel updates can switch to initramfs-tools
  2. Release 0.0.12-18+etch1 fixing only this specific issue
 * Security-updates must be minimal
  3. Release backport of newest yaird in unstable
 * Linux changes are large already, so "must be minimal" cannot
   apply here
 * Most if not all recent yaird changes are to support the major 
   changes to recent Linux kernels
  4. Drop yaird from etchnhalf
 * Yaird has been dropped from testing (see bug#457177)


If we do 1) when should probably go through and etch-tag all other bugs 
fixed recently.

If we do 3) then a single change must be made compared to current 
package in Sid: LVM workaround must be enabled by default.


Cc'ing release team and security team for input.


NB! Even if yaird really is "generally too buggy" as judged in 
bug#457177, the current release in unstable is far better than the 
version currently in Etch, (contains no known regressions, and actually 
works out-of-the-box in many cases with recent Linux kernels whereas 
etch release don't).


  - Jonas

- -- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkiyiPAACgkQn7DbMsAkQLge4wCfYhhTWaIPnltEgh3ECoUWdZcu
2GcAniQxwrHdWpVuOJcc+6jG0z4rLtxc
=/t+B
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



DSA 992-1 affecting other packages?

2006-03-15 Thread Jonas Smedegaard
Hi,

I noticed today on Debian Weekly News that FFMpeg has had a
security-related bug.

Are you aware that ffmpeg in Debian ships static libraries? If I
understand correctly, this means other packages building against FFMpeg
(Xine, GStreamer and VLC comes to my mind) actually contain a copy of
the libavcodec library rather than linking to it dynamically - and must
then also all of them be rebuilt, pulling in the security-fixed library.

The reason for the static linking, I believe, is that FFMpeg upstream
has recommended to use static linking due to the ABI (or is it API) not
yet stable. I suspect, however, that this could be dealt with
differently for Debian (and I suspect this to be against policy, but
is incapable technically to take up an argument about that).


 - Jonas

-- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

 - Enden er nær: http://www.shibumi.org/eoti.htm


pgp5ZkNw4vq2E.pgp
Description: PGP signature