Re: Disabling the patch system from packages
On Fri, 22 May 2009, Bernhard R. Link wrote: * Michel Dänzer daen...@debian.org [090522 11:09]: I think disabling the patch system also makes life harder for the security team. Does it? I'd have guessed it makes it easier. Why would it do that? Having a patch system in place allows them to just add the patch and be done with it. I'm pretty sure they have to deal with every patch system out there (so they know quilt), but setting one up might not be in their best interest. -- Timo Aaltonen Systems Specialist IT Services, Helsinki University of Technology -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Disabling the patch system from packages
* Timo Aaltonen tjaal...@cc.hut.fi [090525 08:51]: Why would it do that? Having a patch system in place allows them to just add the patch and be done with it. Which means you have to deal with a patch system. Without a patch system you can just unpack the package, apply the patch, edit the changelog and build the package. I don't know how the security team thinks about those things, but I personaly found packages without any patch system to be much easier to deal with and to modify it. Hochachtungsvoll, Bernhard R. Link -- Never contain programs so few bugs, as when no debugging tools are available! Niklaus Wirth -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Disabling the patch system from packages
On Mon, 25 May 2009, Bernhard R. Link wrote: * Timo Aaltonen tjaal...@cc.hut.fi [090525 08:51]: Why would it do that? Having a patch system in place allows them to just add the patch and be done with it. Which means you have to deal with a patch system. Without a patch system you can just unpack the package, apply the patch, edit the changelog and build the package. I don't know how the security team thinks about those things, but I personaly found packages without any patch system to be much easier to deal with and to modify it. Like I said, they probably have to deal with them anyway, so it's not a barrier of entry. And in practise, these are prepared in cooperation with the XSF so that they are pushed to the appropriate git branch on git.d.o. -- Timo Aaltonen Systems Specialist IT Services, Helsinki University of Technology -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Disabling the patch system from packages
Bernhard R. Link wrote: * Timo Aaltonen tjaal...@cc.hut.fi [090525 08:51]: Why would it do that? Having a patch system in place allows them to just add the patch and be done with it. Which means you have to deal with a patch system. Without a patch system you can just unpack the package, apply the patch, edit the changelog and build the package. I don't know how the security team thinks about those things, but I personaly found packages without any patch system to be much easier to deal with and to modify it. The patch target is now standardized in policy, so our system shouldn't present any major surprises. With the massive increase in the use of quilt across the distro over the past year or two (it's obvious if you've been reading the changelogs) it's pretty clear that it's a standard tool at this point and shouldn't be shied away from by anyone in Debian. Furthermore, if they're willing to patch X, then they're surely brave enough to add a patch to the quilt stack. We should probably start shipping a standardized debian/README.source in all our packages to fully comply with policy though. I'm personally also fine with leaving the patch system enabled by default, since quilt has been quite reliable for years now. If it actively helps out our downstreams then all the better. - David Nusinow -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Disabling the patch system from packages
On Fri, 2009-05-22 at 11:09 +0300, Timo Aaltonen wrote: I'd like to kindly ask not to disable the patch system from a package when it no longer has any patches. It's not too uncommon for Ubuntu to add patches when trying to stabilize after feature-freeze, and while it's not hard to make the package use quilt again, it's still an extra step to take care of. Besides, it doesn't add much to the build time. Thoughts? I think disabling the patch system also makes life harder for the security team. -- Earthling Michel Dänzer |http://www.vmware.com Libre software enthusiast | Debian, X and DRI developer -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Disabling the patch system from packages
Hi! I'd like to kindly ask not to disable the patch system from a package when it no longer has any patches. It's not too uncommon for Ubuntu to add patches when trying to stabilize after feature-freeze, and while it's not hard to make the package use quilt again, it's still an extra step to take care of. Besides, it doesn't add much to the build time. Thoughts? thanks :) -- Timo Aaltonen Systems Specialist IT Services, Helsinki University of Technology -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Re: Disabling the patch system from packages
* Michel Dänzer daen...@debian.org [090522 11:09]: I think disabling the patch system also makes life harder for the security team. Does it? I'd have guessed it makes it easier. Hochachtungsvoll, Bernhard R. Link -- To UNSUBSCRIBE, email to debian-x-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
