On Tue, Feb 04, 2020 at 11:49:14PM +0100, Andreas Henriksson wrote:
> Package: sslh
> Version: 1.20-1
> Severity: minor
>
> Dear Maintainer,
>
> There might be room for improving the systemd service file [...]
You can also drop the lsb-base dependency.
The lsb-base
.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/systemd-service-file-missing-hardening-features.html
ing
the service file in maintainer scripts.)
The service file does not replicate the home-brew service enable[2]
from the init script. Please consider dropping that!
Additional improvements related to eg. security hardening[3]
is possible.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.
e a set of recommended
service files (including security hardening settings).
Regards,
Andreas Henriksson
).
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.debian.org/tags/init.d-script-should-always-start-service.html
[3]:
https://lintian.debian.org/tags/systemd-service-file-missing-hardening-features.html
[Unit
then use the --no-start and
--no-enable flags to the relevant debhelpers.
Regards,
Andreas Henriksson
script does. Note that it is completely
untested (as I don't use crtmpserver myself).
Please also get rid of the homebrew enable/disable service[2].
Additional improvements eg. using security hardening[3] could also be
added.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing
Control: tags -1 + pending
This was already fixed in the VCS, just waiting for someone to upload it:
https://salsa.debian.org/gnome-team/gimp-help/commit/b54539899284d510e0d863d9552679ba16552784
Regards,
Andreas Henriksson
.
FWIW I later realized that changing the use of gnome-help to xdg-open
(and thus the Recommends: xdg-utils) is likely not needed.
The only change necessary is changing the URI from ghelp:// to help://
as gnome-help command is still shipped in yelp package and should
work just fine.
Regards,
Andreas Henriksson
automatic.
Please don't hesitate to reach out if you need any assistance. I'm happy
to help if you provide the testing and review (as I don't use radicale
myself).
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.
her improvements like security hardening[2] could be added later.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.debian.org/tags/systemd-service-file-missing-hardening-features.html
diff -Nru snmptt-1.4/debian/change
conversion
of the home-grown state to system-wide so that the new
services maintains their old state.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.debian.org/tags/init.d-script-should-always-start-service.html
n.service -> /dev/null) system service
and then instead provide a user unit.
For more information on system user units, see:
https://wiki.archlinux.org/index.php/Systemd/User
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
:
- implement sd_notify support when running in foreground mode and switch
service to use Type=notify (see src/main.c if (!foreground) ...).
- investigate adding security hardening settings[2].
Regards,
Andreas Henriksson
PS. The DESC field of the init script contains boilerplate text.
[1]:
https
] the service
by restricting what it can access from the system.
Regards,
Andreas Henriksson
PS. You might want to create a /usr/sbin/zookeeper-server symlink
and use that in the service file instead (similar to the other symlinks
you create). And IMHO the /usr/share/zookeeper/bin/* files would feel
more
it apparently is to try to contribute
improvements.
Regards,
Andreas Henriksson
lready fixed in
https://salsa.debian.org/debian/rspamd/merge_requests/2/diffs?commit_id=f5b63c708e57b7803bb8553b62d4e7a7f85fc2ca
I assume !2 is going to be merged and uploaded soon, but if not then
please cherry-pick that particular commit.
Regards,
Andreas Henriksson
Hello Thorsten Glaser,
On Thu, Jan 30, 2020 at 07:17:49PM +0100, Thorsten Glaser wrote:
> On Thu, 30 Jan 2020, Andreas Henriksson wrote:
>
> > the binary packages built from it where downloaded, checked if it
> > had any init script, if it used vars.sh, and if there was
On Thu, Jan 30, 2020 at 02:11:34PM +0100, Andreas Henriksson wrote:
> On Thu, Jan 30, 2020 at 01:06:32PM +0100, Andreas Henriksson wrote:
> > Package: lintian
> > Version: 2.15.0
> > Severity: normal
> >
> > Dear Maintainer,
> >
> > Please consider ex
Control: forcemerge 833067 -1
On Thu, Jan 30, 2020 at 09:24:17PM +0100, Andreas Henriksson wrote:
> Source: uwsgi
> Version: 2.0.18-7
> Severity: normal
>
> Dear Maintainer,
>
> Please consider shipping a native systemd service masking the
> currently shipped init scri
.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]: https://uwsgi-docs.readthedocs.io/en/latest/Systemd.html
additional security hardening[3],
which has been left as a TODO for future improvement.
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.debian.org/tags/init.d-script-should-always-start-service.html
[
://src.fedoraproject.org/rpms/edac-utils/blob/master/f/edac.service
.. and thus didn't investigate further. Do you think their service
file is usable directly or what debian-specific things would our
service file need to cater for?
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd
defaulting to 300 will still apply though,
so you should probably consider changing the default to a higher value
in debconf.)
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.debian.org/tags/init.d-script-sho
enable --now anope`
(rather than knowing about modifying distro and application specific
configuration files).
Regards,
Andreas Henriksson
[1]:
https://lintian.debian.org/tags/missing-systemd-service-for-init.d-script.html
[2]:
https://lintian.debian.org/tags/init.d-script-should-always-start
On Thu, Jan 30, 2020 at 01:06:32PM +0100, Andreas Henriksson wrote:
> Package: lintian
> Version: 2.15.0
> Severity: normal
>
> Dear Maintainer,
>
> Please consider expanding the init.d-script-should-always-start-service
> tag with also matching on NO_START. That shoul
ened, even just basic settings
can likely go a long way as a service running as root exposed on
the network would be a likely candidate for an attacker to try to
penetrate.
Regards,
Andreas Henriksson
[Unit]
Description=Ad-Hoc Configuration Protocol
Documentation=man:ahcpd(8)
After=network.target
tractions is decreased if people duplicate their state and make it
inconsistent.
Regards,
Andreas Henriksson
don't add the right flags to update-rc.d / invoke-rc.d
instead which would be soo much simpler!)
See eg. dropbear
Regards,
Andreas Henriksson
d and
-maxdepth 1 as a replacement for ls and simplify your scripting.
Regards,
Andreas Henriksson
[Unit]
Description=Apache ActiveMQ
After=network.target
[Service]
Type=forking
PIDFile=/run/activemq/%I.pid
RuntimeDirectory=activemq
Environment=INSTANCE=%I
Environment=ACTIVEMQ_BASE=/var/lib/act
On Tue, Jan 28, 2020 at 05:29:44PM +0100, Andreas Henriksson wrote:
> Hi Michael,
>
> On Tue, Jan 28, 2020 at 04:38:36PM +0100, Michael Biebl wrote:
[]
> > /lib/init/vars.sh
>
> From random samples this seems exctusively used from init scripts (and
> examples of i
r systemd-related
lintian checks.)
Regards,
Andreas Henriksson
he normal reasons in debian why being
able to track the dependencies is good, there's also likely value
in bootstrapping as well as more easily being able to build custom
minimal systems.
Regards,
Andreas Henriksson
like to say that any such problem is
already a portability problem as anything that only works with the
sysvinit-utils pidof will not work on non-Debian distributions as
basically everyone is already using procps pidof. It should thus in my
opinion be fixed up in the caller.)
Regards,
Andreas Henriksson
leaf
> viking: gnome-doc-utils (>= 0.3.2) {#947541}
leaf
> xiphos: gnome-doc-utils{#947542}
leaf
>
> Dependency problem found.
Note also that geary {key} is fixed in sid but has not yet migrated to
testing.
Regards,
Andreas Henriksson
nomeGoals/NewDocumentationInfrastructure
[...]
Regards,
Andreas Henriksson
PS. The debian/control changes is: yelp replaces gnome-doc-utils,
yelp-tools has the yelp.m4 file, and xdg-utils is recommended as
xdg-open is now the command used to open the help urls.
--- a/configure.in 2020-01-16 21:28:00.00
result with unstable mawk, but the newer version
in experimental now produces a match for this case!
>
> Probably other {B,E}RE stuff, too, I didn't check all.
>
> Since regular expressions provide a main functionality of AWK, I
> classified it as 'important'.
>
> That may give hints to a problem with the used RE backend.
Regards,
Andreas Henriksson
is. Thanks in advance.
Regards,
Andreas Henriksson
On Sun, Jan 26, 2020 at 11:08:38AM +, Simon McVittie wrote:
> On Sun, 26 Jan 2020 at 10:36:31 +0100, Andreas Henriksson wrote:
> > I've already notified the sole remaining reverse-dependency,
> > parl-desktop, in #888675.
>
> I'm not sure what query you used to find
debian archive.
Regards,
Andreas Henriksson
-tools or should the dependency be dropped?
Regards,
Andreas Henriksson
pages.debian.org/buster/manpages/utmpx.5.en.html#DESCRIPTION
Regards,
Andreas Henriksson
00 \
> --slave /usr/share/man/man1/rename.1.gz rename.1.gz
> /usr/share/man/man1/rename.ul.1.gz
Things might be more complicated than this because util-linux is
an 'Essential: yes' package. More details in debian-policy.
Regards,
Andreas Henriksson
Control: tags -1 + fixed-upstream
https://gitlab.freedesktop.org/poppler/poppler/commit/1fa3cbd729bf16e06678b39d05be12d0ec6fa786
Regards,
Andreas Henriksson
is satisfactory and if you'd like me to
send a merge-request for an updated packaging!
If you happen to see any other outstanding issues you think are blockers
for this please also let me know about those!
Regards,
Andreas Henriksson
Control: forwarded -1 https://github.com/lathiat/avahi/pull/257
On Thu, Jan 02, 2020 at 09:41:50AM +0100, Andreas Henriksson wrote:
[...]
> This is where the actual explosion happens:
> https://sources.debian.org/src/avahi/0.7-5/avahi-daemon/static-services.c/#L630
[...]
I've confir
.c:862
#11 static_service_load (in_chroot=) at static-services.c:919
#12 0xb8b0 in run_server (c=0x55576a20 ) at main.c:1235
#13 main (argc=, argv=) at main.c:1674
(gdb) up
#1 0xf68f in xml_end (el=, data=0x7fffe2a0) at
static-services.c:630
630 value_buf_len = strlen(u->buf);
(gdb) print u
$1 =
(gdb) print u->buf
value has been optimized out
(gdb)
Regards,
Andreas Henriksson
ly, please split out the client parts into a separate
package so that the server and client can be installed separately as
needed.
Regards,
Andreas Henriksson
benefits from skipping over.
Regards,
Andreas Henriksson
PS. sd_notify bindings for erlang can be found at
https://github.com/systemd/erlang-sd_notify which will help you avoid
hackish shell scripting.
hird-party/rabbitmq-server/merge_requests/2/diffs?commit_id=bcc553af69a3d962eeb7cdacc34b64e0c3005178
Regards,
Andreas Henriksson
upload (whoever does that)
Regards,
Andreas Henriksson
2 years ago and AFAIR the progress
on getting the bugs reports closed stopped quite a while ago I think it
would be fair to just go ahead and make fdisk non-pseudo-essential and
then just bumping severity of the remaining bug reports.
Regards,
Andreas Henriksson
PS. Who-ever does the next util-
On Thu, Dec 26, 2019 at 10:26:06AM +0100, Andreas Henriksson wrote:
> Package: strace
> Version: 4.26-0.2
> Severity: wishlist
>
> Dear Maintainer,
>
> Multiple new upstream releases has been cut since the last update
> in Debian. The latest one being 5.4 as of now.
1
FAIL strace-DDD.test (exit status: 1)
Would be nice to have a new version in the archive.
Please tell me if you'd like me to push and/or upload (once the
remaining issue is fixed).
Regards,
Andreas Henriksson
fected by this, so still unsolved there.
Regards,
Andreas Henriksson
ecently been turned on in the debian kernels). If you
issue still exists it would be great to know about it.
Getting an iwmon from while you reproduce this will likely be very
useful.
You might also want to run iwd in debug mode, eg.
/usr/libexec/iwd --debug
Regards,
Andreas Henriksson
ent duplication.
Regards,
Andreas Henriksson
ave been fixed since. If it's still an
issue I'd like to know.
Regards,
Andreas Henriksson
Hello,
I've prepared an updated shadow package a few days ago at:
https://salsa.debian.org/ah/shadow/activity
This update fixes #881889
(The result has so far only been build-tested.)
Would be great to hear something from maintainers soon!
Regards,
Andreas Henriksson
https://github.com/fwupd/fwupd/commit/004a0624d05211e8436060bb7af6b0c6f2d805a3
Regards,
Andreas Henriksson
packages in the future.)
(Fixing #851747 would be even better.)
I'm not sure why you added the dependency but since it's a versioned
dependency a guess might be that you didn't want an older version,
so maybe you wanted to use Conflicts or Breaks: lsb-base (<< 11~)
Regards,
Andreas Henriksson
se instead consider writing a fixer that *removes* lsb-base
dependencies so we can get rid of all the previously introduced
incorrect dependencies.
Regards,
Andreas Henriksson
ct debian/changelog entry will
automatically be generated later.
>From my quick glance your patch looks sane and safe to me.
Regards,
Andreas Henriksson
e and can simply be
dropped, which should be the last nail in the coffin and this bug report
can be closed!
Regards,
Andreas Henriksson
-maintainer upload.
+ * Add debian/patches/no-gdu.patch
+ * Drop build-dependency on deprecated gnome-doc-utils
+
+ -- Andreas Henriksson Tue, 26 Nov 2019 13:48:07 +0100
+
muffin (4.2.2-3) unstable; urgency=medium
[ Fabio Fantoni ]
diff -Nru muffin-4.2.2/debian/control muffin-4.2.2/debian
Control: tags -1 + fixed-upstream
On Sun, Nov 24, 2019 at 01:04:51PM +0100, Andreas Henriksson wrote:
> Hi again,
>
> I figured just switching to itstool might be the most straight forward
> solution and fortunately for someone as lazy as me I found that
> apparently fedora h
formatting issue where
itstool might be more picky to find a match. Would be awesome if someone
familiar with the translation infrastructure here could chime in on how
it works and what might be the problem!
Regards,
Andreas Henriksson
end on itstool) upstream earlier, but possibly
you forgot to drop the obsolete gnome-doc-utils build-dependency.
Please consider dropping the build-dependency on gnome-doc-utils
(or if it's really still needed find another option soon).
Regards,
Andreas Henriksson
rds,
Andreas Henriksson
rds,
Andreas Henriksson
ld-dependency on it. (Oh, I see now you have itstool in
build-deps. That might be enough and explain it.)
Regards,
Andreas Henriksson
ate the snapcraft file
where it's also mentioned.)
Regards,
Andreas Henriksson
you see ninja: fatal: posix_spawn: Argument list too long,
apply https://github.com/mesonbuild/meson/pull/6030 to fix it. Meson
0.52.0 generates a lot of duplicate arguments and it may exceed the
length limit of the kernel."
Regards,
Andreas Henriksson
Package: shotwell
Version: 0.30.7-1
Hello,
It seems to me like your package needlessly build-depends on the
gnome-doc-utils package which has been deprecated for >5 years.
I've tested dropping the build-dependency and your package still
built without problems for me.
Regards,
Andr
ou either want to push for those to get fixed or find
another option than gettext...)
Regards,
Andreas Henriksson
You are currently draggin in gnome-doc-utils into key packages[1]
subset. Please thus consider fixing this issue as soon as possible.
Regards,
Andreas Henriksson
[1]: https://udd.debian.org/cgi-bin/key_packages.yaml.cgi
ile, which seems to be pre-fork era, also explicitly mentions
porting from gnome-doc-utils to yelp.)
You are currently draggin in gnome-doc-utils into key packages[1]
subset. Please thus consider fixing this issue as soon as possible.
Regards,
Andreas Henriksson
[1]: https://udd.debian.org/cgi-
-utils)
* xiphos(for gnome-doc-utils)
I'm raising the severity for more visibility because it's very unlikely
anyone can hope for this package to survive python2 removal. Thus
someone will decide if this is important enough to keep to also keep
python2.
Regards,
Andreas
in the original bug report for how to fix this
issue.
Regards,
Andreas Henriksson
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-tidwall-grect
Version : 0.0~git20161006.ba9a043-1
Upstream Author : Josh Baker
* URL : https://github.com/tidwall/grect
* License : TODO
Programming Lang: Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-tidwall-tinyqueue
Version : 0.0~git20180302.1e39f55-1
Upstream Author : Josh Baker
* URL : https://github.com/tidwall/tinyqueue
* License : ISC
Programming Lang: Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-tidwall-rtree
Version : 0.0~git20180113.6cd4270-1
Upstream Author : Josh Baker
* URL : https://github.com/tidwall/rtree
* License : TODO
Programming Lang: Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-tidwall-pretty
Version : 1.0.0-1
Upstream Author : Josh Baker
* URL : https://github.com/tidwall/pretty
* License : TODO
Programming Lang: Go
Description
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-tidwall-btree
Version : 0.0~git20191029.400434d-1
Upstream Author : Josh Baker
* URL : https://github.com/tidwall/btree
* License : Apache-2.0
Programming Lang: Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: badger
Version : 2.0.0-1
Upstream Author : Dgraph
* URL : https://github.com/dgraph-io/badger
* License : Apache-2.0
Programming Lang: Go
Description : Fast key-value DB in Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-subosito-gotenv
Version : 1.2.0+git20190917.de67a66-1
Upstream Author : Alif Rachmawadi
* URL : https://github.com/subosito/gotenv
* License : TODO
Programming Lang: Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: garagemq
Version : 0.0~git20190703.39811a5+ds-1
Upstream Author : Valinurov Alexander
* URL : https://github.com/valinurovam/garagemq
* License : TODO
Programming Lang: Go
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-tidwall-buntdb
Version : 1.1.0-1
Upstream Author : Josh Baker
* URL : https://github.com/tidwall/buntdb
* License : TODO
Programming Lang: Go
Description
Package: wnpp
Severity: wishlist
Owner: Andreas Henriksson
* Package name: golang-github-dgraph-io-ristretto
Version : 0.0~git20191108.8d6a8a7-1
Upstream Author : Dgraph
* URL : https://github.com/dgraph-io/ristretto
* License : Apache-2.0
Programming Lang
l
Maintainer: Debian Go Packaging Team
--- Reason ---
--
Checking reverse dependencies...
No dependency problem found.
Regards,
Andreas Henriksson
between 1.3.0 and 1.4.0
in https://github.com/stretchr/testify/commit/34c6fa2dc70986bccbbffcc613
Regards,
Andreas Henriksson
idea why shipping yet
another module would be something they would have to think so hard about
or why enabling the option would take more time than talk about it.
.oO( So close, but yet so far away )
Regards,
Andreas Henriksson
reason for gcc doing this is likely that previously
memcpy has been used on ptr, and you probably shouldn't assume using
memcpy(NULL, ) will work. I didn't find any fix for this upstream
so did a quick hack myself for that.
Regards,
Andreas Henriksson
diff -Nru collectd-5.8.1/debian/changelog c
Package: network-manager
Version: 1.20.4-1
Severity: wishlist
Control: block 944069 by -1
Hello,
a new bugfix release was just tagged 1.20.6. Please consider
packaging it. (This bug report mainly to track iwd 1.0 compatibility.)
Regards,
Andreas Henriksson
custom built kernel (module) to fill the gap. So I'm not really
considering removing it.
Regards,
Andreas Henriksson
ing policy (for wifi interfaces), or they get to
apply their personal favourite hack to make iwd slow enough for udev to
win the race.
Unfortunately you can't have both at present.
Regards,
Andreas Henriksson
Package: iwd
Version: 1.0-1
Severity: serious
This bug report was opened to temporarily prevent iwd 1.0 from migrating
to testing to give NetworkManager some time to catch up.
Regards,
Andreas Henriksson
lthough I
don't really see anything to do on the iwd side.
Regards,
Andreas Henriksson
ils to
setuptools.
Maybe there are other hidden gotchas after that as well.
Hope this helps anyway.
Regards,
Andreas Henriksson
gus excuse to me.
Could kicad maintainers please comment on what you think?
Regards,
Andreas Henriksson
301 - 400 of 2994 matches
Mail list logo
