On Thu, Oct 02, 2003 at 12:14:00PM -0400, Rob wrote:
On Thursday 02 October 2003 12:07, Luca Berra wrote:
Do you mean Vincent is right and contrib is to be regarded as
junk? Or are you asking mandrakesoft to provide you thes
I don't think Vincent said contrib is to be regarded as junk. I
think he
On Thu, Oct 02, 2003 at 09:30:59AM -0600, Vincent Danen wrote:
some of the pain could be eased if we had an updated rpm package for
older versions (supported older versions, i mean, not 7.2) that levels
the packaging macros to 9.2
Shouldn't difficult. We've put out rpm macro updates before. And,
On Thursday 02 October 2003 12:07, Luca Berra wrote:
> Do you mean Vincent is right and contrib is to be regarded as
> junk? Or are you asking mandrakesoft to provide you thes
I don't think Vincent said contrib is to be regarded as junk. I
think he's saying contrib is not to be regarded as suppo
On Thu, Oct 02, 2003 at 03:40:23PM +0200, Guillaume Rousse wrote:
Ainsi parlait Luca Berra :
Would other contributors be adverse on taking the commitment of
maintaining 'stable' packages for 'supported' version of mandrake (that
should be 18 months or 3 releases IIRC)?
Yes, unless someone give me t
On 10/02/2003 11:25:10 AM, Vincent Danen wrote:
This is what I meant. =) The above is the cooker wiki... the
community
wiki is http://mandrake.vmlinuz.ca/
Oi, the confusion.
I know the name of qa.mandrakesoft.com/wiki, because I named it, with
Warly's approval.
It's the 'Mandrake Linux Communi
On Thu Oct 02, 2003 at 09:00:57AM +0200, Luca Berra wrote:
> >Some, not all. If packages were done to handle old versions while working
> >with the current, this would be a different story. But this can be very
> >difficult... I have some specs that can rebuild on older distribs and some
> >of
On Thu Oct 02, 2003 at 03:32:46PM +0200, Guillaume Rousse wrote:
> > > > > I don't believe there is anyone enjoying having to mantain 4
> > > > > different packages of the same software when one would suffice.
> > > >
> > > > Probably not. But if you, as a contributor, have a cooker machine and
>
On Thu Oct 02, 2003 at 05:42:22AM -0400, Austin wrote:
> >Ok, then people need to specify which wiki they're talking about. On the
> >expert list, unless otherwise stated, people are talking about the
> >community
> >wiki. On this list, I assume (unless otherwise stated) that they're
> >referri
Ainsi parlait Luca Berra :
> Would other contributors be adverse on taking the commitment of
> maintaining 'stable' packages for 'supported' version of mandrake (that
> should be 18 months or 3 releases IIRC)?
Yes, unless someone give me the means to test those packages. I only run
cooker for my d
On 10/02/2003 01:41:29 AM, Vincent Danen wrote:
Ok, then people need to specify which wiki they're talking about. On the
expert list, unless otherwise stated, people are talking about the community
wiki. On this list, I assume (unless otherwise stated) that they're
referring to the cooker wiki...
Ainsi parlait Vincent Danen :
> On Thu Oct 02, 2003 at 12:47:50AM +0200, Buchan Milne wrote:
> > > > I don't believe there is anyone enjoying having to mantain 4
> > > > different packages of the same software when one would suffice.
> > >
> > > Probably not. But if you, as a contributor, have a c
Buchan Milne wrote:
I have added docs to MandrakeClub, and to the Mandrake Community Wiki,
and I don't think you can compare the two fairly at present. Abusing the
splatt forum for documentation results is a worse tool than a wiki.
I had asked Deno about a wiki for the documentation section on
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eric Fernandez wrote:
>
>
> Buchan Milne wrote:
>
>>
>>
>> If you mean that it's final place should be on a website/wiki, then IMHO
>> http://mandrake.vmlinuz.ca is currently a better place (and you will get
>> a password immediately).
>>
>
> Thanks, I
Buchan Milne wrote:
If you mean that it's final place should be on a website/wiki, then IMHO
http://mandrake.vmlinuz.ca is currently a better place (and you will get
a password immediately).
Thanks, I did not know that one.
Guillaume : I could begin there, and once finished, we could report it
On Wed, Oct 01, 2003 at 04:09:58PM -0600, Vincent Danen wrote:
> On Wed Oct 01, 2003 at 08:53:55PM +0200, Simon Oosthoek wrote:
> > Oh yeah, I know this attitude ;-) I also know where your annoyance comes
> > from. But you shouldn't feel threatened by or superior to cooker people
> > trying to help
On Wed, Oct 01, 2003 at 04:29:11PM -0600, Vincent Danen wrote:
Some, not all. If packages were done to handle old versions while working
with the current, this would be a different story. But this can be very
difficult... I have some specs that can rebuild on older distribs and some
of them are
On Wed Oct 01, 2003 at 04:48:12PM -0400, Austin wrote:
> >The wiki is for cooker, no?
>
> The wiki is the the new 'community-assisted' Mandrake, not just for cooker.
>
> Mind you, that still doesn't mean Joe User will know about it.
Ok, then people need to specify which wiki they're talking abo
On Thu Oct 02, 2003 at 12:47:50AM +0200, Buchan Milne wrote:
> > > I don't believe there is anyone enjoying having to mantain 4 different
> > > packages of the same software when one would suffice.
> >
> > Probably not. But if you, as a contributor, have a cooker machine and
> > compile on cooke
On 10/01/2003 08:37:02 PM, Vincent Danen wrote:
The wiki is for cooker, no?
The wiki is the the new 'community-assisted' Mandrake, not just for cooker.
Mind you, that still doesn't mean Joe User will know about it.
Austin
--
Austin Acton
Synthetic Organic Ch
On Wed Oct 01, 2003 at 06:50:42PM -0400, Rob wrote:
> > Probably not. But if you, as a contributor, have a cooker
> > machine and compile on cooker, how can you possibly know if
> > your package, despite having conditional build macros, will
> > work with an older distrib if you don't take the ti
On Thu Oct 02, 2003 at 01:52:17AM +0200, Guillaume Rousse wrote:
> > It has been said clearly... many many many times. contribs is *entirely*
> > unsupported. I don't know how many different ways I need to say the same
> > thing. =)
> Just create one page on the wiki explaining it ? This way it
On Wed, 1 Oct 2003, Vincent Danen wrote:
>
> It has been said clearly... many many many times. contribs is *entirely*
> unsupported. I don't know how many different ways I need to say the same
> thing. =)
>
Hmm.. i was not clear, i know it is unsupported. I meant, why does nobody
ever says t
On Wed, 1 Oct 2003, Vincent Danen wrote:
>
> How? What exactly do you mean? Or, rather, how is that different from what
> we currently have?
ok, I am bad at explaining things, here goes:
Currently contribs keeps up to date with cooker. We could either:
- have a buildscript rebuild the whole t
Ainsi parlait Vincent Danen :
> It has been said clearly... many many many times. contribs is *entirely*
> unsupported. I don't know how many different ways I need to say the same
> thing. =)
Just create one page on the wiki explaining it ? This way it could become the
"what are x and y section
On Wed, 1 Oct 2003, Vincent Danen wrote:
>
> How? What exactly do you mean? Or, rather, how is that different from what
> we currently have?
ok, I am bad at explaining things, here goes:
Currently contribs keeps up to date with cooker. We could either:
- have a buildscript rebuild the whole tre
On Wednesday 01 October 2003 18:29, Vincent Danen wrote:
> Probably not. But if you, as a contributor, have a cooker
> machine and compile on cooker, how can you possibly know if
> your package, despite having conditional build macros, will
> work with an older distrib if you don't take the time t
On Wed, 1 Oct 2003, Vincent Danen wrote:
> On Wed Oct 01, 2003 at 11:11:28PM +0200, Luca Berra wrote:
>
> > I don't believe there is anyone enjoying having to mantain 4 different
> > packages of the same software when one would suffice.
>
> Probably not. But if you, as a contributor, have a coo
On Wed, 1 Oct 2003, Vincent Danen wrote:
> On Wed Oct 01, 2003 at 09:46:27PM +0200, Guillaume Rousse wrote:
>
> > > Suddenly I'm getting very tired of all of this again. Seems no matter how
> > > hard you try, someone has something negative to say without contributing
> > > something useful.
> >
On Wed Oct 01, 2003 at 11:11:28PM +0200, Luca Berra wrote:
> >>However, i think we should make this distinction between contrib and club
> >>disapear.
> >
> >Fine. This is a starting point. Now you need to think about what needs to
> >change. There will always be a distinction. Want to know w
On Wed Oct 01, 2003 at 08:45:21PM +0200, [EMAIL PROTECTED] wrote:
> > Sure, but they need to be available *where the user can find it
> > conveniently*. It's pointless adding it to yet another site. Maybe there
> > should be an item in MandrakeGalaxy "Install more software"?
>
> wouldn't really h
On Wednesday 01 October 2003 21:40, Guillaume Rousse wrote:
> Even if no wiki is currently available, i really think we should
> better use domain name urpmi.org, and make it the mdk equivalent of
> apt-get.org.
apt-get.org is an aberation.
having to search on a webpage each time people want a p
On Wed Oct 01, 2003 at 09:46:27PM +0200, Guillaume Rousse wrote:
> > Suddenly I'm getting very tired of all of this again. Seems no matter how
> > hard you try, someone has something negative to say without contributing
> > something useful.
> Vincent, i didn't intend to be rude, just to say that
On Wed Oct 01, 2003 at 08:54:40PM +0200, [EMAIL PROTECTED] wrote:
> > My point regarding contribs has been made over and over again. I'm tired of
> > repeating myself. I made a suggestion regarding how "contrib updates" could
> > be distributed and was basically told it was too much work and tha
On Wed Oct 01, 2003 at 08:53:55PM +0200, Simon Oosthoek wrote:
> > Suddenly I'm getting very tired of all of this again. Seems no matter how
> > hard you try, someone has something negative to say without contributing
> > something useful.
>
> Oh yeah, I know this attitude ;-) I also know where
On Wed, Oct 01, 2003 at 12:13:21PM -0600, Vincent Danen wrote:
On Wed Oct 01, 2003 at 07:49:36PM +0200, Guillaume Rousse wrote:
However, i think we should make this distinction between contrib and club
disapear.
Fine. This is a starting point. Now you need to think about what needs to
change. T
Ainsi parlait Vincent Danen :
> Suddenly I'm getting very tired of all of this again. Seems no matter how
> hard you try, someone has something negative to say without contributing
> something useful.
Vincent, i didn't intend to be rude, just to say that we first to have to make
the club work in
Ainsi parlait Buchan Milne :
> Eric Fernandez wrote:
> > Buchan Milne wrote:
> >> Which means that this information needs to be more readily accessible
> >> ... directly. Think about users who hardly have internet access ...
> >>
> >> I really think the documentation aspect (making it easy for newb
On Wed, 1 Oct 2003, Vincent Danen wrote:
> My point regarding contribs has been made over and over again. I'm tired of
> repeating myself. I made a suggestion regarding how "contrib updates" could
> be distributed and was basically told it was too much work and that it was a
> stupid idea. Fine
On Wed, 1 Oct 2003, Buchan Milne wrote:
> Sure, but they need to be available *where the user can find it
> conveniently*. It's pointless adding it to yet another site. Maybe there
> should be an item in MandrakeGalaxy "Install more software"?
wouldn't really help much IMO.
All imho:
the real pro
On Wed, Oct 01, 2003 at 12:06:21PM -0600, Vincent Danen wrote:
> Suddenly I'm getting very tired of all of this again. Seems no matter how
> hard you try, someone has something negative to say without contributing
> something useful.
Oh yeah, I know this attitude ;-) I also know where your annoya
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Vincent Danen wrote:
> On Wed Oct 01, 2003 at 06:58:50PM +0200, Buchan Milne wrote:
>
>
I know all of this, just because i've been there for 4 years now. My
>>
>>point is
>>
that i'm fed up with oral tradition. No one knows about contribs outsi
On Wed Oct 01, 2003 at 07:49:36PM +0200, Guillaume Rousse wrote:
> > > > In my mind, the best solution is to put updates in Club. That way they
> > > > make it to the Club mirrors and everyone can take advantage of them
> > > > since non-Club members can also access them. That would be my best
>
On Wed Oct 01, 2003 at 06:58:50PM +0200, Buchan Milne wrote:
> >>I know all of this, just because i've been there for 4 years now. My
> point is
> >>that i'm fed up with oral tradition. No one knows about contribs outside
> >>cooker communauty. Among the few newbies that know about urpmi, they
> a
Ainsi parlait Vincent Danen :
> On Wed Oct 01, 2003 at 01:50:24PM +0200, Guillaume Rousse wrote:
> > > In my mind, the best solution is to put updates in Club. That way they
> > > make it to the Club mirrors and everyone can take advantage of them
> > > since non-Club members can also access them.
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eric Fernandez wrote:
> Buchan Milne wrote:
>> Which means that this information needs to be more readily accessible
>> ... directly. Think about users who hardly have internet access ...
>>
>> I really think the documentation aspect (making it easy fo
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Vincent Danen wrote:
> On Wed Oct 01, 2003 at 12:08:46PM +0200, Guillaume Rousse wrote:
>
>>I know all of this, just because i've been there for 4 years now. My
point is
>>that i'm fed up with oral tradition. No one knows about contribs outside
>>cooke
Buchan Milne wrote:
http://www.mandrakelinux.com/en/features.php3#5
It's not pushed less than any other feature ...
Right, but they are still missed by many newbies, since they often go to
the club page now. Mandrakelinux page is good for PR announcements and
developers.
Look
at the ques
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eric Fernandez wrote:
> Buchan Milne wrote:
>
>>> Wow ! I think you misunderstood : I wrote "main" applications, most
>>> important in every categories, not every one application in main and
>>> contrib. A presentation of Xine, mplayer in multimedia, e
Buchan Milne wrote:
(why does everything assume everyone has free internet access)
http://www.sulug.sun.ac.za/distros/mandrake/mandrake.html
It is great, yes I would like to create something like that for
Mandrakeclub.
Eric
Buchan Milne wrote:
Wow ! I think you misunderstood : I wrote "main" applications, most
important in every categories, not every one application in main and
contrib. A presentation of Xine, mplayer in multimedia, etc... I never
wrote "all applications in contrib".
A lot of the useful ones are
On Wed Oct 01, 2003 at 01:50:24PM +0200, Guillaume Rousse wrote:
> > In my mind, the best solution is to put updates in Club. That way they
> > make it to the Club mirrors and everyone can take advantage of them since
> > non-Club members can also access them. That would be my best solution and
On Wed Oct 01, 2003 at 12:08:46PM +0200, Guillaume Rousse wrote:
> > > Actually, there is no point just explaining servers in contrib are not
> > > updated. A real explanation of mandrake policy would be far better:
> > > - what is main, what is contrib, and what is update ?
> > > - what does get
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eric Fernandez wrote:
> Buchan Milne wrote:
>> Eric Fernandez wrote:
>>
>>
>>
>> What do you need a "graphical database" for? Do you mean screenshots? Do
>> you know how big a set of screenshots would be for all the applications
>> in contrib? In some
Buchan Milne wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eric Fernandez wrote:
What do you need a "graphical database" for? Do you mean screenshots? Do
you know how big a set of screenshots would be for all the applications
in contrib? In some cases a single screenshot could be larger
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Eric Fernandez wrote:
> I agree we need a good graphical user guide for rpmdrake/urpmi, and a
> graphical database of main applications available (and the way to
> install them).
What do you need a "graphical database" for? Do you mean screenshots? D
Guillaume Rousse wrote:
Ainsi parlait Vincent Danen :
Actually, there is no point just explaining servers in contrib are not
updated. A real explanation of mandrake policy would be far better:
- what is main, what is contrib, and what is update ?
- what does get updated ?
etc...
Good g
Ainsi parlait Vincent Danen :
> In my mind, the best solution is to put updates in Club. That way they
> make it to the Club mirrors and everyone can take advantage of them since
> non-Club members can also access them. That would be my best solution and
> my preference. Then I don't have to get
Ainsi parlait Vincent Danen :
> > Actually, there is no point just explaining servers in contrib are not
> > updated. A real explanation of mandrake policy would be far better:
> > - what is main, what is contrib, and what is update ?
> > - what does get updated ?
> > etc...
>
> Good grief.. everyo
On Saturday 27 Sep 2003 22:27 pm, Vincent Danen wrote:
Fantastic - Adding that now >>
> On Sat Sep 27, 2003 at 06:54:02PM +0100, Stephen Kitchener wrote:
> > Sorry to intrude on this convbut I would use Exim if it was available
> > as a package - upto now I have to compile if from source and i
On Mon Sep 29, 2003 at 06:03:38PM +0200, Buchan Milne wrote:
> > Oh, I know qmail is... I definitely know qmail is. =) I get lots of
> > feedback on the qmail packages, but I've only heard from 2 people on the
> > exim packages. There's probably more than 2 people, but I can't honestly
> > know
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Vincent Danen wrote:
> On Sat Sep 27, 2003 at 03:33:51PM -0400, Brook Humphrey wrote:
>
>
>>>Now you've hit the nail right on the head. =)
>>>
>>>Besides, how many people would want to use exim? I've *never* heard
anyone
>>>request using it before, a
On Sat Sep 27, 2003 at 03:33:51PM -0400, Brook Humphrey wrote:
> > Now you've hit the nail right on the head. =)
> >
> > Besides, how many people would want to use exim? I've *never* heard anyone
> > request using it before, and in fact I only know of one other person who
> > uses my packages.
On Saturday 27 September 2003 11:02 am, Vincent Danen wrote:
> Now you've hit the nail right on the head. =)
>
> Besides, how many people would want to use exim? I've *never* heard anyone
> request using it before, and in fact I only know of one other person who
> uses my packages. If something
On Sat Sep 27, 2003 at 06:54:02PM +0100, Stephen Kitchener wrote:
> Sorry to intrude on this convbut I would use Exim if it was available as a
> package - upto now I have to compile if from source and install it
No need to apologize. And you can use it:
# urpmi.addmedia rpmhelp ftp://f
On Saturday 27 Sep 2003 16:02 pm, Vincent Danen wrote:
Hi Vincent.
Sorry to intrude on this convbut I would use Exim if it was available as a
package - upto now I have to compile if from source and install it
> On Sat Sep 27, 2003 at 12:26:16PM +0200, Michael Scherer wrote:
> > > > can y
On Sat Sep 27, 2003 at 12:26:16PM +0200, Michael Scherer wrote:
> > > can you put exim in contribs at least ?
> >
> > There's never been an interest before. I've been maintining exim
> > packages for about 1.5-2 years now, and I never even knew anyone was
> > interested. IIRC, I had asked about p
On Friday 26 September 2003 22:10, Vincent Danen wrote:
> On Fri Sep 26, 2003 at 08:23:24PM +0200, Michael Scherer wrote:
> > can you put exim in contribs at least ?
>
> There's never been an interest before. I've been maintining exim
> packages for about 1.5-2 years now, and I never even knew any
On Fri Sep 26, 2003 at 08:08:22PM +0200, Han Boetes wrote:
> > Well, that would mean someone has to maintain such a list for
> > contribs. For main, this is easy. Use urpmq to tell you what needs
> > updating in main. For contribs, it's a little more difficult because
> > someone has to maintain t
On Fri Sep 26, 2003 at 08:23:24PM +0200, Michael Scherer wrote:
> > > > Heck, I'm all for it and agree with all your reasons. But the
> > > > example is a touch out... wu-ftpd hasn't been in main since 8.2
> > > > (last version it shipped in main).
> > > >
> > > > Hey, while we're at it, can we t
On Friday 26 September 2003 18:11, Vincent Danen wrote:
>
> Very true. But every openssh vuln hasn't been a crash or DoS. Mind
> you, with openssh a DoS is bad enough. Need to remote admin servers?
> What happens if the server goes down and you're stuck driving a long
> time to get to the machi
On Fri, Sep 26, 2003 at 11:12:26AM +0200, Buchan Milne wrote:
BTW, a lot of the issues could be resolved if there were a standard
mechanism for contrib updates. Vince, I think this was about the time
you said we could start discussing it?
yes, this is a good idea.
many contributors already do packa
On Friday 26 September 2003 12:25 pm, Vincent Danen wrote:
> [... rest of the cool stuff snipped ...]
>
> Wow. I know what I'm doing today. =)
>
> Thanks, Brook. Looks like I've been missing out. With that feature-set, I
> am not at all adverse to making pure-ftpd the default and proftpd as
> o
On Friday 26 September 2003 18:28, Vincent Danen wrote:
> On Fri Sep 26, 2003 at 03:29:28AM -0400, Brook Humphrey wrote:
> > > Heck, I'm all for it and agree with all your reasons. But the
> > > example is a touch out... wu-ftpd hasn't been in main since 8.2
> > > (last version it shipped in main)
Vincent Danen <[EMAIL PROTECTED]> wrote:
> On Fri Sep 26, 2003 at 06:51:59PM +0159, Han Boetes wrote:
> > I agree that mandrake is not responsible for providing updated packages
> > for contribs even when there is a security problem. But I think there
> > is a nice solution:
> >
> > msec makes a da
On Fri Sep 26, 2003 at 07:46:56PM +0200, Michael Scherer wrote:
> > Very true. But every openssh vuln hasn't been a crash or DoS. Mind
> > you, with openssh a DoS is bad enough. Need to remote admin servers?
> > What happens if the server goes down and you're stuck driving a long
> > time to g
On Fri Sep 26, 2003 at 04:17:48AM -0400, Brook Humphrey wrote:
> > I don't mind pure-ftpd being default, although it we want secure I still
> > maintain that vsftpd is what we want. Can't beat it for security. Of
> > course, it's a little spartan on the feature side as well.
>
> I'll admit here
On Fri Sep 26, 2003 at 06:51:59PM +0159, Han Boetes wrote:
> > [snip]
> > Main gets updated. contribs doesn't.
> >
> > I don't see what is so difficult about this. This is how it has
> > *always* been. It hasn't changed. No need for a policy regarding it.
> > This is just how it's done.
>
> I agr
On Fri Sep 26, 2003 at 04:21:49AM -0400, Brook Humphrey wrote:
> > Personally, if pure-ftpd can't authenticate against LDAP (like proftpd
> > can), I'm not overly interested. =) proftpd may have some issues
> > periodically, but you can't beat it for configurability.
>
> Here is only a small po
Vincent Danen <[EMAIL PROTECTED]> wrote:
> [snip]
> Main gets updated. contribs doesn't.
>
> I don't see what is so difficult about this. This is how it has
> *always* been. It hasn't changed. No need for a policy regarding it.
> This is just how it's done.
I agree that mandrake is not responsible
On Fri Sep 26, 2003 at 10:31:58AM +0200, Guillaume Rousse wrote:
> > > On Thu Sep 25, 2003 at 07:59:30PM -0400, Levi Ramsey wrote:
> > > > I think the policy should be that anything which listens on a port
> > > > should not, under any circumstances, be in contribs, as contribs are
> > > > not gen
On Fri Sep 26, 2003 at 03:29:28AM -0400, Brook Humphrey wrote:
> > Heck, I'm all for it and agree with all your reasons. But the example is a
> > touch out... wu-ftpd hasn't been in main since 8.2 (last version it shipped
> > in main).
> >
> > Hey, while we're at it, can we throw sendmail in cont
On Fri Sep 26, 2003 at 11:12:26AM +0200, Buchan Milne wrote:
> > Once more. The size of the hole is more important than how often people
> > require you to patch.
>
> Well, then by it's history over the past year, sendmail should be the
> first kicked out the distro (3 potential remote root vulne
On Fri Sep 26, 2003 at 08:14:36AM +0200, Han Boetes wrote:
> > Of course, I still don't get why we're jumping all over proftpd. It
> > isn't really *that* insecure. As I pointed out to Han regarding wu-
> > ftpd, proftpd is in a similar boat. There is this hole, which should
> > be available in up
On Thursday 25 September 2003 09:12 pm, Vincent Danen wrote:
>
> Personally, if pure-ftpd can't authenticate against LDAP (like proftpd
> can), I'm not overly interested. =) proftpd may have some issues
> periodically, but you can't beat it for configurability.
Here is only a small portion of th
On Thursday 25 September 2003 09:12 pm, Vincent Danen wrote:
> I don't mind pure-ftpd being default, although it we want secure I still
> maintain that vsftpd is what we want. Can't beat it for security. Of
> course, it's a little spartan on the feature side as well.
I'll admit here that I'm not
On Thursday 25 September 2003 06:31 pm, Vincent Danen wrote:
>
> Heck, I'm all for it and agree with all your reasons. But the example is a
> touch out... wu-ftpd hasn't been in main since 8.2 (last version it shipped
> in main).
>
> Hey, while we're at it, can we throw sendmail in contribs? =)
>
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Han Boetes wrote:
> Vincent Danen <[EMAIL PROTECTED]> wrote:
>
>>We can't just throw stuff out the window because it has a hole today
>>and has had one over a year or two years ago. That's just silly. Why
>>aren't we jumping up and down about ditching
Ainsi parlait Han Boetes :
> Vincent Danen <[EMAIL PROTECTED]> wrote:
> > On Thu Sep 25, 2003 at 07:59:30PM -0400, Levi Ramsey wrote:
> > > I think the policy should be that anything which listens on a port
> > > should not, under any circumstances, be in contribs, as contribs are
> > > not general
On Fri, Sep 26, 2003 at 09:21:37AM +0200, Han Boetes wrote:
oh, and before you ask, it is wrapped with capsel, so i don't believe
you can remote root it, even if it were unpatched.
Is the default wu wrapped like that? Or can you adjust the default wu
so that it is wrapped like that?
well, no,
capse
Luca Berra <[EMAIL PROTECTED]> wrote:
> Han Boetes wrote:
> >hmmm, I don't know how many people still insist on using wu.
>
> well, i still do, since i have a system that relies on some
> configuration options in wu-ftpd that i don't know how to reproduce
> with other daemons :(
> oh, and before yo
On Fri, Sep 26, 2003 at 08:06:30AM +0200, Han Boetes wrote:
The same could be said of wu-ftpd, tho. There was the one issue in
July, and previous to that was Nov 2001. So from 11/01->07/03 it was
pretty quiet. I guarantee you in that timeframe sendmail has had more
security issues.
hmmm, I don't kn
James Sparenberg <[EMAIL PROTECTED]> wrote:
>
> They don't have sendmail in the files list. It's postfix there.
I am sorry, you are mistaken. Theo swears to sendmail.
# Han
--
http://www.xs4all.nl/~hanb/software
http://www.xs4all.nl/~hanb/documents/quotingguide.html
Vincent Danen <[EMAIL PROTECTED]> wrote:
> On Thu Sep 25, 2003 at 07:59:30PM -0400, Levi Ramsey wrote:
> > I think the policy should be that anything which listens on a port
> > should not, under any circumstances, be in contribs, as contribs are
> > not generally updated; I'm sure that someone wil
Vincent Danen <[EMAIL PROTECTED]> wrote:
> Of course, I still don't get why we're jumping all over proftpd. It
> isn't really *that* insecure. As I pointed out to Han regarding wu-
> ftpd, proftpd is in a similar boat. There is this hole, which should
> be available in updates RSN, but the last one
On Thu Sep 25, 2003 at 10:33:35PM -0700, James Sparenberg wrote:
> > > > Heck, I'm all for it and agree with all your reasons. But the example
> > > > is a touch out... wu-ftpd hasn't been in main since 8.2 (last version
> > > > it shipped in main).
> > > >
> > > > Hey, while we're at it, can we t
Vincent Danen <[EMAIL PROTECTED]> wrote:
> On Fri Sep 26, 2003 at 01:15:07AM +0200, Han Boetes wrote:
> > > Heck, I'm all for it and agree with all your reasons. But the
> > > example is a touch out... wu-ftpd hasn't been in main since 8.2
> > > (last version it shipped in main).
> > >
> > > Hey, w
On Thu, 2003-09-25 at 18:07, Vincent Danen wrote:
> On Fri Sep 26, 2003 at 01:15:07AM +0200, Han Boetes wrote:
>
> > > Heck, I'm all for it and agree with all your reasons. But the example
> > > is a touch out... wu-ftpd hasn't been in main since 8.2 (last version
> > > it shipped in main).
> > >
On Thu Sep 25, 2003 at 07:59:30PM -0400, Levi Ramsey wrote:
> > Hey, while we're at it, can we throw sendmail in contribs? =)
> >
> > (Serious about killing wu-ftpd altogether, semi-serious about sendmail)
>
> I think the policy should be that anything which listens on a port
> should not, unde
On Thu Sep 25, 2003 at 07:57:30PM -0400, Lyvim Xaphir wrote:
> > > > > Can't we dump wu-ftpd? I mean there are lots of more secure
> > > > > alternatives and this daemon still has regular exploits.
> > > >
> > > > wu-ftpd is only in contribs
> > >
> > > Ok, that's in the good direction. Lets take
On Fri Sep 26, 2003 at 01:15:07AM +0200, Han Boetes wrote:
> > Heck, I'm all for it and agree with all your reasons. But the example
> > is a touch out... wu-ftpd hasn't been in main since 8.2 (last version
> > it shipped in main).
> >
> > Hey, while we're at it, can we throw sendmail in contribs?
1 - 100 of 113 matches
Mail list logo
