Bug#697438: linux-user-chroot Debian packaging
László Böszörményi (GCS) wrote: > Also please note that the current state can be interpreted as some > kind of security threat. Its binary installed as setuid and executable > for everyone. A more safe solution would be a separate group and only > its members would be allowed to execute linux-user-chroot . Yup, I'm not sure how serious the threat may be, but restricting it a bit would fine for me. Note though that the Fedora package does not do that[1] and since it is done by Colin I'm not sure if we want to diverge from it. Asking Colin about the group restriction may be a good a idea. [1] http://pkgs.fedoraproject.org/cgit/linux-user-chroot.git/tree/linux-user-chroot.spec#n32 -- To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1379331466.10352.13.ca...@autarpio.lan
Bug#697438: linux-user-chroot Debian packaging
László Böszörményi (GCS) wrote: > I used the one from Emanuele, as he stated it's an updated one. Will > check yours. Either incorporating changes from him or do the way it > suits best. I took Thomas patch with the debian/ files and cherry-picked it on top of the upstream git history for version 2012.1, and then I updated it to 2013.1. I usually prefer having the upstream history available when upstream uses git, it makes tracking upstream changes easier. Of course by doing so I diverged from the repo on collab-maint, I hope this won't be an issue, either by force-pushing the new commits to collab-maint, or disregarding my repo and cherry-picking my changes on top of Thomas' repo. > I know that I've commit rights to every collab-maint repositories, but > I ask for permission beforehand. As I see, it's not a problem for you > that I'll do the necessary changes. I'm not a DD nor a DM yet, so I don't have special rights. As long as some kind soul will get linux-user-chroot uploaded to Debian, whatever you do is fine for me. :) OOC, what issues you found in my package? Would you mind commenting on Github or making your changes available somewhere? Thanks! Emanuele. -- To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/1379060149.4498.10.ca...@autarpio.lan
Bug#697438: linux-user-chroot Debian packaging
Hi László, On 09/13/2013 08:46 AM, László Böszörményi (GCS) wrote: >> I already had a sponsor but after a couple of weeks he still had no time >> for review and then I had no time to push the sponsoring search forward. > Here I am. Do you allow me to be part of your package (set you as the > maintainer and me as an uploader or vica-versa)? Please go ahead and you can also takeover the maintainership. Thanks! Tom signature.asc Description: OpenPGP digital signature
Bug#697438: linux-user-chroot Debian packaging
Hi Thomas, On Fri, Sep 13, 2013 at 8:11 AM, Thomas Bechtold wrote: > On 09/13/2013 12:09 AM, László Böszörményi (GCS) wrote: >> I wonder who is who in this packaging. Thomas didn't touch packaging >> for eight months now. He put Utopia Maintenance Team to maintainer. No >> idea how they are related. > > That's a bug. The intenion was to have the package under the > collab-maint umbrella. The git repository for packaging is already there > and you can just use it (every DD has write access to the collab-maint > repositories). I used the one from Emanuele, as he stated it's an updated one. Will check yours. Either incorporating changes from him or do the way it suits best. I know that I've commit rights to every collab-maint repositories, but I ask for permission beforehand. As I see, it's not a problem for you that I'll do the necessary changes. > I already had a sponsor but after a couple of weeks he still had no time > for review and then I had no time to push the sponsoring search forward. Here I am. Do you allow me to be part of your package (set you as the maintainer and me as an uploader or vica-versa)? Cheers, Laszlo/GCS -- To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cakjshr0_fvt1vqkvnw6jgfg+w+wkt+9nwfol5cm9mgdholq...@mail.gmail.com
Bug#697438: linux-user-chroot Debian packaging
Hi László, On 09/13/2013 12:09 AM, László Böszörményi (GCS) wrote: > Hi, > > I wonder who is who in this packaging. Thomas didn't touch packaging > for eight months now. He put Utopia Maintenance Team to maintainer. No > idea how they are related. That's a bug. The intenion was to have the package under the collab-maint umbrella. The git repository for packaging is already there and you can just use it (every DD has write access to the collab-maint repositories). I already had a sponsor but after a couple of weeks he still had no time for review and then I had no time to push the sponsoring search forward. Cheers,, Tom signature.asc Description: OpenPGP digital signature
Bug#697438: linux-user-chroot Debian packaging
Hi, I wonder who is who in this packaging. Thomas didn't touch packaging for eight months now. He put Utopia Maintenance Team to maintainer. No idea how they are related. Emanuele updated packaging, which has some problems. I've corrected everything. I'm a Debian Developer, can maintain it by myself. What others would like to do? Also please note that the current state can be interpreted as some kind of security threat. Its binary installed as setuid and executable for everyone. A more safe solution would be a separate group and only its members would be allowed to execute linux-user-chroot . Regards, Laszlo/GCS -- To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: http://lists.debian.org/cakjshr3+9-yokzpkxrg9wqz9cmdkexnoa_pefb+75ohls9c...@mail.gmail.com
