Bug#885219: /lib64 provision added in 9.1.1 prohibits multilib libc

2017-12-27 Thread Russ Allbery
Control: tags -1 = pending Jonathan Nieder <jrnie...@gmail.com> writes: > Russ Allbery wrote: >> Allow libc to install files in /lib64 >> diff --git a/policy/ch-opersys.rst b/policy/ch-opersys.rst >> index 7d9e20a..d7c4956 100644 >> --- a/policy/ch-opersys.r

Bug#885432: bugs-field-does-not-refer-to-debian-infrastructure for non-Debian packages

2017-12-27 Thread Russ Allbery
Yeah, the problem I have is that I do want all the checks when uploading to Debian. I suspect the right thing for me to do is make my own profile, and then just remember to use that profile for local packages. It's a little bit awkward, but it's not too bad. -- Russ Allbery (r...@debian.org

Bug#885432: bugs-field-does-not-refer-to-debian-infrastructure for non-Debian packages

2017-12-26 Thread Russ Allbery
s would definitely work. I wonder if it would make sense to have a file in debian/source that indicates the profile in some way? -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#885432: bugs-field-does-not-refer-to-debian-infrastructure for non-Debian packages

2017-12-26 Thread Russ Allbery
Package: lintian Version: 2.5.66 Severity: normal The new tag bugs-field-does-not-refer-to-debian-infrastructure added in the most recent version of Lintian is a false positive for non-Debian packages. I have a pile of personal packages that I maintain in a separate archive, but prefer to use

Bug#880992: debian-policy should not recommend running editor using absolute path

2017-12-26 Thread Russ Allbery
Control: tags -1 = pending Sean Whitton <spwhit...@spwhitton.name> writes: > On Mon, Dec 25 2017, Russ Allbery wrote: >>> not set, the commands "editor" and "pager" should be used, >>> respectively. These commands can be invoked explicitly

Bug#874090: debian-policy: Clarify wording of some passages

2017-12-25 Thread Russ Allbery
Thanks, these all look good to me. Applied. And many thanks for the clear, separated patches! That made review very easy. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#873456: debian-policy: missing anchor: document-index

2017-12-25 Thread Russ Allbery
tml/index.html:   href="index.html#document-index">Table Of Contents > /usr/share/doc/debian-policy/policy.html/index.html: class="nav-item nav-item-0">Debian Policy > Manual v4.1.0.0   This appears to be more breakage in Sphinx singlehtml output. E

Bug#874095: copyright-format: Use the “synopsis” term established in the definition

2017-12-25 Thread Russ Allbery
Control: tags -1 pending Ben Finney <bign...@debian.org> writes: > The term “synopsis” is established in the definition of “Formatted > Text”. This attached patch uses that term more consistently in the > document. Thanks, looks good to me. Applied. -- Russ Allbery (

Bug#880992: debian-policy should not recommend running editor using absolute path

2017-12-25 Thread Russ Allbery
not set, the commands "editor" and "pager" should be used, > respectively. These commands can be invoked explicitly (e.g. > as /usr/bin/editor), or through a $PATH search (e.g. as > editor). > ? This wording seems fine to me. Seconded.

Bug#879048: debian-policy: footnote links pointing to wrong location

2017-12-25 Thread Russ Allbery
the > target is some wrong location in section 4.12. Yeah, this is because sphinx -M singlehtml is broken with footnotes. :( The multi-page version in the debian-policy package is correct. Also see the discussion in #876075. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#876075: Anchors are non-unique in the single-HTML version

2017-12-25 Thread Russ Allbery
ve been a failed experiment, at least pending further work on Sphinx, and we should just publish the multi-page version. What do other people think? (Adding debian-www for their opinion as well.) Not having working footnotes feels to me like kind of a showstopper. -- Russ Allbery (r...@debi

Bug#876241: debian-policy: Produce HTML output that doesn't try to load any JavaScript

2017-12-25 Thread Russ Allbery
l like avoiding Javascript here is excessively conservative. I'd prefer one of the solutions that pulls the Javascript from the current Debian unstable packages. Given the small use that Sphinx makes of it, I find it unlikely that there will be any practical security issues with this. --

Bug#601455: Steps towards a patch to document disabling a daemon upon installation

2017-12-25 Thread Russ Allbery
ice, services with a dependency on this service will be started even though the service isn't running, and init system status commands may incorrectly claim that the service was started. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#885219: /lib64 provision added in 9.1.1 prohibits multilib libc

2017-12-25 Thread Russ Allbery
Control: tags -1 patch Russ Allbery <r...@debian.org> writes: > As explained by Aurelian Jarno: >>> 9.1.1 >>> Only the dynamic linker may install files to /lib64/. >> How is that supposed to work for the multilib glibc? For example >> libc6-amd64:i386

Bug#688251: #688251: Built-Using description too aggressive

2017-12-25 Thread Russ Allbery
The relations ``<`` and ``>`` were previously allowed, but they were > confusingly defined to mean earlier/later or equal rather than Seconded the above change and with or without the wording change discussed in the other part of this thread. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#688251: #688251: Built-Using description too aggressive

2017-12-25 Thread Russ Allbery
urpose. I personally don't think the DFSG is as strict there, and would be satisfied with any working and practically equivalent version. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#885219: /lib64 provision added in 9.1.1 prohibits multilib libc

2017-12-25 Thread Russ Allbery
Package: debian-policy Version: 4.1.2.0 Severity: important As explained by Aurelian Jarno: >> 9.1.1 >> Only the dynamic linker may install files to /lib64/. > How is that supposed to work for the multilib glibc? For example > libc6-amd64:i386 installs all its libraries into /lib64. We

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-12-25 Thread Russ Allbery
Control: tags -1 = pending Holger Levsen <hol...@layer-acht.org> writes: > On Wed, Aug 23, 2017 at 09:20:39PM -0700, Russ Allbery wrote: >> --- a/policy/ch-controlfields.rst >> +++ b/policy/ch-controlfields.rst >> @@ -962,6 +962,10 @@ repository where the Debian

Bug#682347: mark 'editor' virtual package name as obsolete

2017-12-25 Thread Russ Allbery
default base system /usr/bin/editor (*) + editor suitable /usr/bin/editor (*) flexmem anything that can access flexible memory via the OBEX Protocol foomatic-data PPD printer description files -- Russ Allbery (r...@

Bug#884646: No commands in dgit-maint-gbp appear to work with 3.0 (quilt) packages

2017-12-23 Thread Russ Allbery
tribution unstable dpkg-buildpackage: info: source changed by Russ Allbery <r...@debian.org> dpkg-buildpackage: info: host architecture amd64 debian/rules clean dh clean dh_clean gbp:error: You have uncommitted changes in your source tree: gbp:error: On branch debian/master Your branch is up to da

Bug#885042: Check inclusion of Apache 2.0 NOTICE files

2017-12-23 Thread Russ Allbery
Chris Lamb <la...@debian.org> writes: > Good catch. Fixed in Git: > > https://anonscm.debian.org/git/lintian/lintian.git/commit/?id=6110e0f1185e26d903dd0ed8a7a8edaae14cf905 I suspect you want package.docs in the long description of the tag instead of package.install. --

Bug#885042: Check inclusion of Apache 2.0 NOTICE files

2017-12-22 Thread Russ Allbery
Package: lintian Version: 2.5.65 Severity: wishlist Apache 2.0 requires distributing any NOTICE file along with derivative works, but this is easy to forget. In many cases, we have effectively the same information in debian/copyright, but even if this is the case for a specific release, it's not

Bug#884646: No commands in dgit-maint-gbp appear to work with 3.0 (quilt) packages

2017-12-18 Thread Russ Allbery
rors that I got in the initial message that I opened this bug with, when trying to build the package with gbp? Those were odd -- attempts to touch files in non-existent subdirectories of .git. I wasn't sure what to make of that. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#884646: No commands in dgit-maint-gbp appear to work with 3.0 (quilt) packages

2017-12-18 Thread Russ Allbery
Ian Jackson <ijack...@chiark.greenend.org.uk> writes: > Russ Allbery writes: >> It really feels like something is broken with the interpretation of >> patches-unapplied 3.0 (quilt) trees. (conf_convert is a script added >> by one of the patches.) > Can you please

Bug#884646: No commands in dgit-maint-gbp appear to work with 3.0 (quilt) packages

2017-12-17 Thread Russ Allbery
Russ Allbery <r...@debian.org> writes: > After building with dgit --quilt=gbp sbuild, dgit --quilt=gbp push also > fails: dgit --gbp quilt-fixup makes things get farther, but then I get: $ dgit --quilt=gbp push --overwrite canonical suite name for unstable is sid down

Bug#884646: No commands in dgit-maint-gbp appear to work with 3.0 (quilt) packages

2017-12-17 Thread Russ Allbery
Russ Allbery <r...@debian.org> writes: > I must be doing something wrong, but I cannot get any of the documented > workflow in dgit-maint-gbp to work with a package in 3.0 (quilt), > patches-unapplied. After building with dgit --quilt=gbp sbuild, dgit --quilt=gbp push also fails:

Bug#884646: No commands in dgit-maint-gbp appear to work with 3.0 (quilt) packages

2017-12-17 Thread Russ Allbery
Package: dgit Version: 4.1 Severity: normal I must be doing something wrong, but I cannot get any of the documented workflow in dgit-maint-gbp to work with a package in 3.0 (quilt), patches-unapplied. Starting from the current rssh source (debcheckout should get you the same thing I'm working

Bug#884227: debian-policy: please add zlib to common licenses

2017-12-13 Thread Russ Allbery
s significant time. I'm less opposed to this one than to the MIT or BSD licenses that have substantial variation in wording, but I still don't think it's a good idea. common-licenses has the most benefit for very long licenses that people then copy verbatim. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#883966: debian-policy: please add MIT/Expat to common licenses

2017-12-12 Thread Russ Allbery
Markus Koschany <a...@debian.org> writes: > Am 12.12.2017 um 03:39 schrieb Russ Allbery: >> The binaries built from the source code are a "substantial portion of >> the Software." We have to include the license and copyright statement >> with the bina

Bug#883966: debian-policy: please add MIT/Expat to common licenses

2017-12-11 Thread Russ Allbery
s don't contain the source code and the original license notices. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#883966: debian-policy: please add MIT/Expat to common licenses

2017-12-11 Thread Russ Allbery
T-Expat > license in Debian. I understand this desire for longer licenses. This one is three paragraphs long. I really don't get why it's such a problem to reproduce that in debian/copyright. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#883966: debian-policy: please add MIT/Expat to common licenses

2017-12-10 Thread Russ Allbery
of this license between different packages, and any version that doesn't exactly match the wording that we include in common-licenses still legally needs to be reproduced in the package's copyright file. And this is an error that's very hard to find with Lintian. -- Russ Allbery (r...@debian.

Bug#883852: wrong error for usr-share-doc-symlink-without-dependency with qualified :any packages

2017-12-08 Thread Russ Allbery
s is fallout from the requirement that packages include a changelog for that specific version of the package. It's in Policy, but it's semi-hidden in a footnote (and it looks like the current www.debian.org publication of Policy has broken all the footnote links because the multi-page Policy document isn't

Bug#883855: [nnrpd-ssl]: Does not send intermediate certificates

2017-12-08 Thread Russ Allbery
saying we shouldn't change this to also support a cert chain in the cert file, but that will probably get this working for you.) -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#459427: changelog vs. NEWS handling

2017-11-30 Thread Russ Allbery
ht reach different cost/benefit tradeoffs. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#614807: debian-policy: Please document autobuilder-imposed build-dependency alternative restrictions

2017-11-30 Thread Russ Allbery
rts dist that > didn't include 'a'. The package built against 'b'. Was this an > autobuilder bug? Yeah, that's a great question. How does this work for backports? -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#459427: changelog vs. NEWS handling

2017-11-30 Thread Russ Allbery
continue to do so, and I think it's extremely valuable. I also read all debian/changelog files for all packages I install on my system, and find that incredibly useful when maintainers put real information in them. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#459427: changelog vs. NEWS handling

2017-11-30 Thread Russ Allbery
his is a *minor* bug and people shouldn't harass maintainers about it, but we'd like to sort out this historic mess and switch to consistent usage of these two files. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#683495: Mandating use of /usr/bin/perl in Policy

2017-11-28 Thread Russ Allbery
ackages need to be fixed ? https://lintian.debian.org/tags/wrong-path-for-interpreter.html says none. The one hit there is for a module shipped with Perl that is doing something weird with #! in a file that isn't an executable. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#882600: Allow maintainers to use different email addresses without raising NMU warnings

2017-11-24 Thread Russ Allbery
n/changelog or debian/control. (See also #820523 for the reverse > problem where the real name differs.) > What would the lintian maintainers suggest? For packages where you also do uploads from work, why not add your work address to Uploaders? It's a little odd to list yourself twice with two d

Bug#881597: krb5-multidev: Please make the package multi-arch installable

2017-11-16 Thread Russ Allbery
variable in all the ways krb5-config is called now. But at least we do have a fighting chance of picking up the correct compiler, and worst case we fall back to the default compiler. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#881597: krb5-multidev: Please make the package multi-arch installable

2017-11-15 Thread Russ Allbery
rb5-config.mit > * have that be a script that calls krb5-config.mit.tripple > * Each package only includes krb5-config.mit.tripple for the appropriate > architecture. Yeah, I was trying to figure out how to make something like that work, and I think that might be the best approach.

Bug#881597: krb5-multidev: Please make the package multi-arch installable

2017-11-13 Thread Russ Allbery
ted Autoconf machinery to know the target architecture and then use the correct pkgconfig files for that architecture, although I haven't played with it enough to know exactly how (or if) that's wired together. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#881597: krb5-multidev: Please make the package multi-arch installable

2017-11-13 Thread Russ Allbery
Benjamin Kaduk <ka...@mit.edu> writes: > On Mon, Nov 13, 2017 at 10:51:10AM -0800, Russ Allbery wrote: >> I'm not sure how best to fix this other than no longer using >> krb5-config and shipping a pkgconfig script or something. One could >> move the krb5-config

Bug#881597: krb5-multidev: Please make the package multi-arch installable

2017-11-13 Thread Russ Allbery
oves the problem to a different area (how to find the right krb5-config script to use). -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#880920: Document Rules-Requires-Root field

2017-11-08 Thread Russ Allbery
uld rather not block incorporation of this new spec into > Debian's official document set, on the task of reformatting it into > docbook. Policy is now reStructuredText, so hopefully the reformatting for any future specs will be much, much easier. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#881166: log files, postrotate example: start-stop-daemon or invoke-rc.d?

2017-11-08 Thread Russ Allbery
umber was, though. I agree that the behavior you're describing seems broken. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#880802: No documented way to pass a command into cowbuilder execute

2017-11-04 Thread Russ Allbery
Thorsten Glaser <t...@mirbsd.de> writes: > Mattia Rizzolo dixit: >> On Sat, Nov 04, 2017 at 01:45:59PM -0700, Russ Allbery wrote: >> executable (be it binary or script), copy it inside the chroot, and >> execute it. Where do you pass the name of the executable, th

Bug#880802: No documented way to pass a command into cowbuilder execute

2017-11-04 Thread Russ Allbery
Package: cowbuilder Version: 0.85 Severity: normal The cowbuilder man page claims to support an execute operation, but I cannot figure out how to pass in the command and there's no example. I tried all of: $ cowbuilder execute apt update --basepath /var/cache/pbuilder/base-experimental.cow $

Bug#878967: debian-policy: clarify purpose of debian/changelog

2017-10-19 Thread Russ Allbery
Sean Whitton <spwhit...@spwhitton.name> writes: > On Wed, Oct 18 2017, Russ Allbery wrote: >> It's probably worth noting here that while debian-mentors has >> converged to a very strong consensus that unreleased versions of >> packages should not appear in debian/cha

Bug#878967: debian-policy: clarify purpose of debian/changelog

2017-10-19 Thread Russ Allbery
es, indeed, that's a very good point, and I'm not sure whether we've adequately documented that wrinkle. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#878967: debian-policy: clarify purpose of debian/changelog

2017-10-18 Thread Russ Allbery
free software developer, but in general I prefer to see a higher bar for inclusion in Policy than aesthetics. As long as variance of practice doesn't *break* anything, I'd generally prefer to keep it out of Policy and in other, more informative guides to best practice, such as the Developer's Referen

Bug#828475: openssh: Please migrate to openssl1.1 in Buster

2017-10-16 Thread Russ Allbery
evelopment energy is with the current upstream. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#878626: ssh-krb5: Remove obsolete transitional package; replace with debconf prompt?

2017-10-15 Thread Russ Allbery
enssh-server, and in that case it makes logical sense that they'll need to explicitly enable GSS-API. I think it's fine to just remove the package. It long ago served its purpose, and the few remaining people who may be using it as a shortcut will hopefully be able to figure out the right th

Bug#877023: debian-policy: No section numbers in policy.txt.gz

2017-09-27 Thread Russ Allbery
same thing you did, and definitely want to fix this sooner rather than later. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#876196: libpam-krb5: login/unlock-screen/sudo waits VERY long time for DNS response

2017-09-19 Thread Russ Allbery
t modules and the second skips one. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#876196: libpam-krb5: login/unlock-screen/sudo waits VERY long time for DNS response

2017-09-19 Thread Russ Allbery
uld be to use sssd, which is a more complex system that does local caching of the Kerberos authentication credentials and is designed specifically to handle this use case. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#876055: Environment variable handling for reproducible builds

2017-09-18 Thread Russ Allbery
Daniel Kahn Gillmor <d...@fifthhorseman.net> writes: > On Sun 2017-09-17 16:26:25 -0700, Russ Allbery wrote: >> I personally lean towards 2, which is consistent with what's in Policy >> right now, but I can see definite merits in 3. I believe the >> reproducible build

Bug#876055: Environment variable handling for reproducible builds

2017-09-17 Thread Russ Allbery
Package: debian-policy Version: 4.1.0.0 Severity: normal Currently, Debian Policy requires all environment variables be held the same across builds for the build to be expected to be reproducible. However, the current approach of some reproducible build tools is to instead enumerate a set of

Bug#869506: Please don't drop environment variables

2017-09-17 Thread Russ Allbery
software. There's a transition for people who are used to typing DIST=stable gbp buildpackage instead of gbp buildpackage --git-dist=stable, but a note in NEWS.Debian is probably sufficient. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872943: libpam-heimdal: Cannot configure credential cache file

2017-09-17 Thread Russ Allbery
Control: severity -1 wishlist Control: tags -1 pending Matthew Gabeler-Lee <chee...@fastcat.org> writes: > On Wed, 23 Aug 2017, Russ Allbery wrote: >> And let me know if there's a way that I can make this information >> easier to find in the man page. > A possible wo

Bug#872944: www.debian.org: Debian Policy Manual not fully published

2017-09-17 Thread Russ Allbery
of Javascript is just the search box. I don't really want to do a lot of meddling with the Sphinx output (since part of the goal is to let Sphinx take care of the details of output), but this doesn't look like a ton of work and looks likely to continue to be supported. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#873125: debian-policy: FTBFS with Sphinx 1.6: Needs build-dep on latexmk

2017-09-17 Thread Russ Allbery
> make[2]: *** [policy.pdf] Error 127 > Since Sphinx 1.6, latexmk is required to build the LaTeX documentation [1]. > Adding a build-dependency on latexmk should help. Thanks, fixed in Git. We'll need to make a new upload shortly. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#876048: Incorrect return status in sphinx-build

2017-09-17 Thread Russ Allbery
Package: python3-sphinx Version: 1.6.3-2 Severity: normal sphinx-build is not exiting with a non-zero status when building PDF documentation fails. This makes it harder to find build errors. mithrandir:~/dvl/debian/policy$ sphinx-build -M latexpdf policy policy/_build Running Sphinx v1.6.3

Bug#875899: licensecheck cannot detect MIT variant license

2017-09-15 Thread Russ Allbery
s variant. I would consider this a unique and separate license. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#873753: GnuPG Perl bindings in Debian [Re: Bug#873753: O: libcrypt-gpg-perl -- An Object Oriented Interface to GnuPG]

2017-09-10 Thread Russ Allbery
te it properly. It's best ignored for the purposes of finding a good general solution in Debian. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#874206: debian-policy: allow a trailing comma in package relationship fields

2017-09-06 Thread Russ Allbery
.dsc files either.) That means that it doesn't matter if tools that operate only on the archive support it, since they won't see it; only package building tools that operate on debian/control need to support it, and they all seem to. (wrap-and-sort -t adds the trailing commas and is very widely used, so i

Bug#874381: lintian: false-positive source-is-missing bug for css_browser_selector.js

2017-09-05 Thread Russ Allbery
e just adding an additional condition. I'd be inclined to just whitelist this particular file as an oddity. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#874381: lintian: false-positive source-is-missing bug for css_browser_selector.js

2017-09-05 Thread Russ Allbery
on about procmail, though. Some developers have very... odd code preferences. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-31 Thread Russ Allbery
ption anyway, but hopefully no one will think that it implies that https is providing strong authentication of the Git server here. There's non-zero authentication, but it's pretty weak. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#760021: lintian: check for not wrap-and-sort formatted files

2017-08-31 Thread Russ Allbery
ld make to make people comfortable with this as an option. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-31 Thread Russ Allbery
Jonathan Nieder <jrnie...@gmail.com> writes: > Russ Allbery wrote: >> (That said, my understanding is that you don't get any meaningful >> integrity protection for Git from using https over http.) > As discussed elsewhere in this thread, it depends on how much you >

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-30 Thread Russ Allbery
I guess it is. Ideally I'd like myon to feel comfortable with this proposed outcome, and the proposed wording hasn't gotten enough seconds yet. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#610083: Remove requirement to document upstream source location in debian/copyright ?

2017-08-27 Thread Russ Allbery
Sean Whitton <spwhit...@spwhitton.name> writes: > On Sat, Aug 26 2017, Russ Allbery wrote: >> Well, it doesn't, exactly... it says that it can be a web forum or >> bugtracker, but doesn't say anything about being a URL. Hm. >> >> Something about this sits wron

Bug#610083: Remove requirement to document upstream source location in debian/copyright ?

2017-08-26 Thread Russ Allbery
Sean Whitton <spwhit...@spwhitton.name> writes: > On Sat, Aug 26 2017, Russ Allbery wrote: >> Seconded with or without the following nit. >> Minor wording nit: I would put a period after "obtained" and make the >> next part a separate sentence. ("T

Bug#679751: Patch to close out this bug

2017-08-26 Thread Russ Allbery
y > +set to this value. > + > +The Debian autobuilders set HOME to ``/nonexistent`` so that packages > +which try to write to a home directory will fail to build. > + > .. _s-sysvinit: > > System run levels and ``init.d`` scripts Seconded. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#610083: Remove requirement to document upstream source location in debian/copyright ?

2017-08-26 Thread Russ Allbery
ng that the copyright file can only omit the upstream source information if the URL pointed to by Homepage includes name or contact information, but (a) that's not the point of your change, and (b) we want that contact information to always be in the copyright file if available because upstr

Bug#870915: debian-policy: [5.6.30] Testsuite: There are much more defined values

2017-08-26 Thread Russ Allbery
gh it would be nice to be more specific about when this is used and what its allowable values are. But I'm also okay with leaving that for future work. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-24 Thread Russ Allbery
he Policy language. People just shouldn't assume this provides any meaningful integrity protection in the semantic sense. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
ho came up as providing editor (using grep-aptavail). I didn't include the list in one of the bug messages but probably should have. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
Jonathan Nieder <jrnie...@gmail.com> writes: > Russ Allbery wrote: >> +++ b/policy/ch-customized-programs.rst >> @@ -93,19 +93,21 @@ page. > [...] >> -It is not required for a package to depend on ``editor`` and ``pager``, >> -nor is it required for a package

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-24 Thread Russ Allbery
Sean Whitton <spwhit...@spwhitton.name> writes: > On Wed, Aug 23 2017, Russ Allbery wrote: >> --- a/policy/ch-controlfields.rst >> +++ b/policy/ch-controlfields.rst >> @@ -962,6 +962,10 @@ repository where the Debian source package is developed. >> >&g

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
Dropping Artem, whose email address no longer works. Brendan O'Dea <b...@debian.org> writes: > On Wed, Aug 23, 2017 at 11:03:23PM -0700, Russ Allbery wrote: >> In previous discussions, no one seemed to feel that it was helpful as a >> virtual package. Virtual pac

Bug#682347: mark 'editor' virtual package name as obsolete

2017-08-24 Thread Russ Allbery
alternative, removed in November 1996 because + this was not useful for dependencies and was + never used except in Provides Changelog - @@ -363,3 +365,6 @@ Russ Allbery: virtual-mysql-server-core vi

Bug#661928: debian-policy: recipe for determining shlib package name

2017-08-23 Thread Russ Allbery
Russ Allbery <r...@debian.org> writes: > Jakub Wilk <jw...@debian.org> writes: >> The actualy lintian code is: >> foreach my $expected_name (@sonames) { >> $expected_name =~ s/([0-9])\.so\./$1-/; >> $expected_name =~ s/\.so(?:\.|\z)//; >>

Bug#810381: debian-policy: Update wording of 5.6.26 VCS-* fields to reflect the need for security

2017-08-23 Thread Russ Allbery
Control: tags -1 patch Scott Kitterman <deb...@kitterman.com> writes: > On January 8, 2016 12:26:24 PM EST, Russ Allbery <r...@debian.org> wrote: >> Scott Kitterman <deb...@kitterman.com> writes: >>> As is currently being discussed on #debian-devel,

Bug#871534: debian-policy: Clarify whether mailing lists in Maintainers/Uploaders may be moderated

2017-08-23 Thread Russ Allbery
missing some aspect of your original bug report? Russ Allbery <r...@debian.org> writes: > My personal feeling is that the current vagueness is a feature rather > than a bug. I think a moderated mailing list is fine *if* the > moderation queue is very promptly processe

Bug#872943: libpam-heimdal: Cannot configure credential cache file

2017-08-23 Thread Russ Allbery
be more familiar with the pros and cons). Anyway, that's the reason why I've always written my Kerberos-related PAM modules such that all configuration that makes any sense to set globally on the system can be set in krb5.conf. That avoids the problem by not requiring anything modify the PAM configura

Bug#873001: [debian-policy] get-orig-source documentation should include a pointer to devref and a minimal example

2017-08-23 Thread Russ Allbery
s the right one, and then we can put something much simpler in Policy that assumes the dpkg-dev interface. That doesn't solve the problem for packages older than that version of dpkg-dev, but we can probably just note that. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#873001: [debian-policy] get-orig-source documentation should include a pointer to devref and a minimal example

2017-08-23 Thread Russ Allbery
ke, and I still have absolutely no idea what that does. Is there any way that we could help people out and have the correct thing to do be much, much simpler? Just a single command invocation? -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872896: debian-policy: An html.tar.gz has leaked into the .deb?

2017-08-22 Thread Russ Allbery
; on the changelog. It looks at least a bit redundant. Fixed. Thanks! -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872900: debian-policy: Very generic info file name

2017-08-22 Thread Russ Allbery
emely generic name, for something that is a > global resource. I think it should be renamed to debian-policy. Fixed in Git. Thanks! -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872950: debian-policy: Too much indirection in info file menus

2017-08-22 Thread Russ Allbery
ns a one-liner. It would be nicer if Contents > would get expanded into the main Menu. I managed to fix this as well by leaving out the section headings in the top-level document. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872893: debian-policy: Chapters, sections, appendices and numbering

2017-08-22 Thread Russ Allbery
specific bug number against Policy by fixing the numbering and nesting for the main chapters, since I think the appendix numbering is liveable, but we'll definitely fix this if some solution materializes. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872893: debian-policy: Chapters, sections, appendices and numbering

2017-08-22 Thread Russ Allbery
d to be appendix B, now it's 2, but on the > info file it's 14. Yeah, both the info and PDF documentation have that issue, but HTML doesn't. I haven't looked at epub, but it's probably just the HTML output in another form. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872893: debian-policy: Chapters, sections, appendices and numbering

2017-08-22 Thread Russ Allbery
hink could be just left as a final section of the document. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872944: www.debian.org: Debian Policy Manual not fully published

2017-08-22 Thread Russ Allbery
h chaotic for a bit as we work through finishing this reStructuredText conversion. Apologies for the extra work! We think the long-term result will be worth it both in terms of better output and in terms of a more maintainable Policy document. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872895: debian-policy: Split html for policy lost

2017-08-22 Thread Russ Allbery
tory because single-file from Sphinx isn't strictly single file (and we have images now), but I think it should all work. The tricky part will be on the debian-www side in copying things over. I'll give them a warning that more changes are coming. -- Russ Allbery (r...@debian.org)

Bug#872893: debian-policy: Chapters, sections, appendices and numbering

2017-08-22 Thread Russ Allbery
mbering. It's counting the top-level document as having three sections and embedding the contents in section "2" and pushing everything down. This is the same problem the info documentation is having. I'll take a look and try to figure out some solution. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

Bug#872943: libpam-heimdal: Cannot configure credential cache file

2017-08-22 Thread Russ Allbery
hopefully I can fix 1 and that will resolve your issue. -- Russ Allbery (r...@debian.org) <http://www.eyrie.org/~eagle/>

<    2   3   4   5   6   7   8   9   10   11   >