Bug#939818: new magic: OpenSSH Key Revocation List (KRL)

2019-09-09 Thread Trent W. Buck
Package: file Version: 1:5.37-5 Severity: wishlist Long, long ago, Debian accidentally made weak SSH keys. As part of the fix, Debian patched OpenSSH to blacklist those bad keys: https://sources.debian.org/src/openssh-blacklist/ Much later, equivalent functionality landed upstream in

Bug#935948: can't start containers with different names but same prefix (xxxxxxxxxxx-1 and xxxxxxxxxxx-2)

2019-08-28 Thread Trent W. Buck
Michael Biebl wrote: > Am 28.08.19 um 13:11 schrieb Trent W. Buck: > > > If this is an unavoidable limitation due to Linux, please at least > > warn about it in the systemd-nspawn manpage. > > I've forwarded this upstream to > https://github.com/systemd/systemd/issues/1

Bug#935948: can't start containers with different names but same prefix (xxxxxxxxxxx-1 and xxxxxxxxxxx-2)

2019-08-28 Thread Trent W. Buck
Package: systemd-container Version: 242-4 Severity: minor Due to IFNAMSIZ, nspawn's network interfaces names are truncated. The possibility of collisions should be clearly documented. My test containers have reasonably long names: root@not-omega:~# ls -l /var/lib/machines/ total 75

Bug#935495: [PATCH 1/2] Try "busybox ip route" when "ip route" is not available.

2019-08-26 Thread Trent W. Buck
ASED; urgency=medium + + * Try "busybox ip route" when "ip route" is not available. + +Even though iproute2 is Priority: important, busybox is more common +according to https://popcon.debian.org/by_inst.gz, probably due to +initramfs-tools Recommends: busybox. + + --

Bug#935495: [PATCH 2/2] Use apt-helper to find apt proxy via _apt_proxy._tcp DNS record.

2019-08-26 Thread Trent W. Buck
en though iproute2 is Priority: important, busybox is more common according to https://popcon.debian.org/by_inst.gz, probably due to initramfs-tools Recommends: busybox. + * Use apt-helper to find apt proxy via _apt_proxy._tcp DNS record. -- Trent W. Buck Mon, 26 Aug 2019 13:31:23 +1000 diff -

Bug#935495: Support handwritten (not avahi) SRV record

2019-08-23 Thread Trent W. Buck
Antonio Terceiro wrote: >> if stdout=$(/usr/lib/apt/apt-helper srv-lookup _http._tcp."$(hostname >> --domain)") && > s/_http/_apt_proxy/ ? Oops, yes. >> # The response came from apt-cacher or apt-cacher-ng or approx. >> grep -q -i "$tmpfile" -e 'Apt-cacher' -e >>

Bug#935495: Support handwritten (not avahi) SRV record

2019-08-23 Thread Trent W. Buck
Package: auto-apt-proxy Version: 11 Severity: wishlist Tags: patch Currently auto-apt-proxy doesn't work for me because I run apt-cacher-ng on a dedicated host, which is neither the client's localhost, nor the client's default gateway. Currently squid-deb-proxy-client doesn't work for me because

Bug#929923: missing dictionaries.xcu confuses non-US English locales (e.g. en_AU)

2019-08-21 Thread Trent W. Buck
Rene Engelhard wrote: > On Wed, Aug 21, 2019 at 03:44:36PM +1000, Trent W. Buck wrote: > > I still advocate solving only MY problem, with a simple change: > > > > > > https://bugs.debian.org/cgi-bin/bugreport.cgi?att=2;bug=929923;filename=929923.patch;

Bug#929923: missing dictionaries.xcu confuses non-US English locales (e.g. en_AU)

2019-08-20 Thread Trent W. Buck
ted on an ad-hoc basis. This script tries to fully automate that process, so that 1. there is less work for the Debian maintainer; and 2. more consistent behaviour between Debian and upstream. ---Trent W. Buck, Aug 2019, https://bugs.debian.org/929923 """ import sys import

Bug#934803: /usr/share/postfix/main.cf.tls: remove smtpd_tls_session_cache_database?

2019-08-15 Thread Trent W. Buck
Package: postfix Version: 3.4.5-1 Severity: minor File: /usr/share/postfix/main.cf.tls In a fresh Debian 10 with postfix, I didn't recognize these options in main.cf: smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database =

Bug#934676: Please clarify that systemd-nspawn(1) --port= is IPv4-only (no IPv6)

2019-08-13 Thread Trent W. Buck
Package: systemd-container Version: 241-5 Severity: wishlist systemd-nspawn --port=tcp:2022:22 redirects port 2022/tcp (on the host) to port 22/tcp (on the guest). (This is equivalent to "-net user,hostfwd=::2022-:22" in qemu VMs.) AFAICT systemd-nspawn only does this for IPv4 (not IPv6). This

Bug#934584: IPMasquerade=yes uses iptables (not nftables)

2019-08-12 Thread Trent W. Buck
Package: systemd Version: 241-5 Severity: normal File: /lib/systemd/network/80-container-ve.network Debian 10 defaults to nftables: https://www.debian.org/releases/stable/amd64/release-notes/ch-whats-new.en.html#nftables ...but systemd doesn't for IPMasquerade=, see below. AFAICT the

Bug#934199: mmdebstrap confused when ! -t STDIN

2019-08-07 Thread Trent W. Buck
Package: mmdebstrap Version: 0.4.1-3 Severity: normal File: /usr/bin/mmdebstrap I regularly debootstrap on the far end of an SSH connection. This is approximately ssh otherplace debootstrap buster /tmp/x http://apt/debian When I try this with mmdebstrap, it hangs forever waiting for a

Bug#933621: BUG: invalid expression type concat on invalid input "iifname . oifname p . q"

2019-07-31 Thread Trent W. Buck
Package: nftables Version: 0.9.1-2 Severity: minor I found a parser bug when experimenting with concatenations: # nft 'flush ruleset; table a; chain a b; a b iifname . oifname p . q; list ruleset' BUG: invalid expression type concat nft: evaluate.c:1726: expr_evaluate_relational:

Bug#933531: accept hostnames with one IPv4 address and one IPv6 address in single-stack chain?

2019-07-31 Thread Trent W. Buck
Package: nftables Version: 0.9.1-2 Severity: wishlist In iptables-restore, if a hostname has 3 addresses, you will end up with 3 rules, e.g. -A INPUT -d www -j ACCEPT --expands to--> -A INPUT -d 127.0.0.1 -j ACCEPT -A INPUT -d 10.0.0.1 -j ACCEPT -A INPUT -d 172.16.0.1

Bug#933510: nfs-kernel-server: nproc manpage description confuses me

2019-07-30 Thread Trent W. Buck
Package: nfs-kernel-server Version: 1:1.3.4-2.5 Severity: minor File: /usr/share/man/man8/rpc.nfsd.8.gz The manpage says: > nproc > > specify the number of NFS server threads. > By default, just one thread is started. > However, for optimum performance several threads should be used.

Bug#932845: TS-219 RTC issue with Debian Buster

2019-07-26 Thread Trent Piepho
On Fri, 2019-07-26 at 12:53 +0200, Oliver Hartkopp wrote: > Just a thought: > > There are some of these rtc drivers that set > > rtc->rtc->uie_unsupported = 1; > > in the case that they can't assign an irq line. > > But others set > > rtc->rtc->uie_unsupported = 1; > > when they don't

Bug#932899: iptables-translate silently discards --ctstate DNAT

2019-07-24 Thread Trent W. Buck
Package: iptables Version: 1.8.2-4 Severity: minor This appears to be wrong -- the DNAT is "eaten": root@not-omega:~# iptables-translate -t filter -A INPUT -m conntrack --ctstate DNAT -j ACCEPT nft add rule ip filter INPUT ct state counter accept root@not-omega:~#

Bug#932880: invalid octals silently parsed as zero

2019-07-23 Thread Trent W. Buck
Package: nftables Version: 0.9.1-2 Severity: important I was aligning literal numbers with leading zeroes (instead of spaces). I found that nft treats "010" as an octal number, i.e. 010 = 8. Fine. But nft also thinks that 099 = 0! nft should error out when it encounters such an invalid octal.

Bug#932878: nft segfault on overlapping intervals

2019-07-23 Thread Trent W. Buck
Package: nftables Version: 0.9.1-2 Severity: normal While studying RFC 4890 I ran into parsing problems. I have narrowed it down to the ruleset below. Note the typo ("174" should be "147") results in overlapping intervals with conflicting verdicts. I think this should result in an error rather

Bug#932877: parser rejects blank/comment lines in literal sets/maps

2019-07-23 Thread Trent W. Buck
Package: nftables Version: 0.9.1-2 Severity: minor The nftables file parser allows newlines in literal sets and maps. It allows comments in them -- but it doesn't allow comments on their own line. I think this is a mistake, and the parser should be changed to allow them. A simple example ruleset

Bug#931753: DefaultDependencies=no ignores PrivateTmp=yes, but honors its implied RequiresMountsFor=

2019-07-13 Thread Trent W. Buck
Michael Biebl wrote: > Am 10.07.19 um 07:12 schrieb Trent W. Buck: > > > "systemd-analyze security systemd-resolved" claims for that > > PrivateTmp= "does not apply", though it clearly does. > > I guess this is the essence of the bug report then and t

Bug#931753: DefaultDependencies=no ignores PrivateTmp=yes, but honors its implied RequiresMountsFor=

2019-07-09 Thread Trent W. Buck
Trent W. Buck wrote: > But I also noticed that "systemd-analyze security" says that PrivateTmp=yes > will be ignored: > > # SYSTEMD_PAGER='grep apply' systemd-analyze security procps.service > PrivateTmp= Servic

Bug#931753: DefaultDependencies=no ignores PrivateTmp=yes, but honors its implied RequiresMountsFor=

2019-07-09 Thread Trent W. Buck
Package: systemd Version: 241-5 Severity: minor After discovering "systemd-analyze security", I went around adding systemd-level confinement to units, e.g. remove modprobe privileges from all units that don't modprobe. I noticed that adding PrivateTmp=yes to keyboard-setup.service and

Bug#484055: dropbear should support openssh-blacklist-* integration

2019-07-09 Thread Trent W. Buck
FTR, Vincent Lefevre wrote: > On 2008-06-02 05:30:11 +, Matthew Hall wrote: > > Package: dropbear > > Version: 0.51-1 > > Severity: normal > > Tags: security > > > > The dropbear server should include support for disallowing the usage of > > blacklisted SSH keys generated on systems which

Bug#931679: /sbin/e2scrub_all: e2scrub_all -r passes the snapshot, but e2scrub -r expects the original

2019-07-09 Thread Trent W. Buck
Package: e2fsprogs Version: 1.45.2-1 Severity: minor File: /sbin/e2scrub_all e2scrub_all calls e2scrub with the wrong argument: root@not-omega:~# e2scrub_all -A -r -n Would execute: /sbin/e2scrub -r /dev/VG0/e2scrub-test-lv.e2scrub root@not-omega:~# /sbin/e2scrub -r

Bug#931399: zram-setup@ ConditionPathExists= (only run when zram is configured by udisks2)

2019-07-03 Thread Trent W. Buck
Package: udisks2 Version: 2.8.1-4 Severity: minor File: /lib/systemd/system/zram-setup@.service Tags: patch The core package (i.e. udisk2, not udisks2-zram) ships a udev rule and a systemd unit to configure zram. These fire on "modprobe zram", even when udisks2-zram isn't installed, and

Bug#930817: Nice=19 IOSchedulingClass=idle (not alsactl -n19 -c)

2019-06-21 Thread Trent W. Buck
Package: alsa-utils Version: 1.1.8-2 Severity: wishlist File: /lib/systemd/system/alsa-state.service Tags: patch alsa-state.service tells alsactl to lower its own priority. This can be done "natively" in systemd. This allows us to use seccomp-bpf to completely block access to those syscalls

Bug#930767: systemd-analyze security mis-detects blacklist-only SystemCallFilter=~@foo

2019-06-20 Thread Trent W. Buck
Michael Biebl wrote: > Hi > > Am 20.06.19 um 09:57 schrieb Trent W. Buck: > > Package: systemd > > Version: 241-5 > > Severity: minor > > File: /usr/bin/systemd-analyze > > > > Below are two units which both block @debug syscalls (confirmed by strace &

Bug#930767: systemd-analyze security mis-detects blacklist-only SystemCallFilter=~@foo

2019-06-20 Thread Trent W. Buck
Package: systemd Version: 241-5 Severity: minor File: /usr/bin/systemd-analyze Below are two units which both block @debug syscalls (confirmed by strace crashing). systemd-analyze incorrectly claims @debug is allowed in one of them. It seems a "blacklist-only" SystemCallFilter= results in a

Bug#929923: missing dictionaries.xcu confuses non-US English locales (e.g. en_AU)

2019-06-08 Thread Trent W. Buck
Mattia Rizzolo wrote: > On Tue, Jun 04, 2019 at 07:13:37AM +0200, Rene Engelhard wrote: > > > c. make some crappy symlinks th_en_XX_v2.dic -> th_en_US_v2.dic. > > > This works for me. > > > > > > The downside is that debian/*.links and > > > dictionaries/*/dictionaries.xcu can get

Bug#929256: systemd lockdown for ntpsec-rotate-stats.service

2019-06-05 Thread Trent W. Buck
I just noticed I broke gzip(1) by blocking fchown(2). Attached is what I'm using now (see especially SystemCallFilter=). # FIXME: convince upstream to use logrotate instead of an equivalent sh script! [Service] PrivateNetwork=yes User=ntpsec PrivateUsers=yes PrivateNetwork=yes

Bug#929923: missing dictionaries.xcu confuses non-US English locales (e.g. en_AU)

2019-06-03 Thread Trent W. Buck
Rene Engelhard wrote: > On Mon, Jun 03, 2019 at 10:04:02PM +0200, Rene Engelhard wrote: > > $ apt-cache show mythes-en-us > > Package: mythes-en-us > > Source: libreoffice-dictionaries > > Sorry, edited and sent too fast. This is the key point here. This mythes > dict is *exactly* what gets

Bug#929923: missing dictionaries.xcu confuses non-US English locales (e.g. en_AU)

2019-06-03 Thread Trent W. Buck
tag 929923 + patch thanks Rene Engelhard wrote: > On Mon, Jun 03, 2019 at 07:21:47PM +1000, Trent W. Buck wrote: >> Upstream, LibreOffice uses a dictionaries.xcu file to say "use the en_US >> thesaurus for ALL en locales". >> AFAICT Debian doesn't ship

Bug#929923: missing dictionaries.xcu confuses non-US English locales (e.g. en_AU)

2019-06-03 Thread Trent W. Buck
Package: mythes-en-us Version: 1:5.2.5-1 Severity: normal Hi Rene et al. My users are in en_AU.UTF-8 locale. They reported that Tools > Thesaurus doesn't work with mythes-en-us installed. Debian has a mythes-en-au, but it's a REALLY old one (2011) that predates LibreOffice. Upstream,

Bug#929763: runs backup files

2019-05-30 Thread Trent W. Buck
Package: systemd-cron Version: 1.5.14-2 Severity: normal This log strongly indicates systemd-cron is trying to "do things" with backup files: 2019-05-31T01:29:30+1000 not-omega systemd[1]: cron.target: Wants dependency dropin

Bug#929756: Appease systemd-cron by doing "if P;then C;fi" (not "P&") in crontab

2019-05-30 Thread Trent W. Buck
Package: ntpsec Version: 1.1.3+dfsg1-2 Severity: wishlist Tags: patch When using systemd and systemd-cron (instead of ISC vixie cron), your cron jobs are marked as "failing" by systemd, because they have non-zero exit status. This is because you do test1 && test2 && do something So if

Bug#525579: fails with misleading error if it cannot write backup

2019-05-29 Thread Trent W. Buck
e(s) in volume group "VG0" now active That last one wasn't an error; it succeeded. Description: Backup to /var/backup/lvm/ (not /etc/lvm/) by default. See also discussion on https://bugs.debian.org/525579 (This patch does NOT fix that bug, though!) Author: Trent W. Buck --- The infor

Bug#929295: Acknowledgement (fstrim.service: fstrim -a (not -A) or add ConditionPathExists=/etc/fstab)

2019-05-20 Thread Trent W. Buck
> Why not use "fstrim --all --verbose" instead? I knew there would be a reason, I just didn't know what it was. The reason is to avoid trimming on ad-hoc mounted devices:

Bug#929295: fstrim.service: fstrim -a (not -A) or add ConditionPathExists=/etc/fstab

2019-05-20 Thread Trent W. Buck
Package: util-linux Version: 2.33.1-0.1 Severity: wishlist File: /lib/systemd/system/fstrim.service Currently fstrim.service runs "fstrim --fstab --verbose", so it silently ignores * Stuff mounted via hand-written systemd.mount units (e.g. /usr/share/systemd/tmp.mount); * ZFS datasets

Bug#929256: systemd lockdown for ntpsec-rotate-stats.service

2019-05-20 Thread Trent W. Buck
PS: one thing "systemd-analyze security" doesn't cover AT ALL is service denial attacks. For example, one day I mounted a backup drive (full of snapshots) on /mnt instead of /media, and the overnight mlocate updatedb cron job tried to scan it, flushing all the real disk's blocks from the page

Bug#929256: systemd lockdown for ntpsec-rotate-stats.service

2019-05-20 Thread Trent W. Buck
Richard Laager wrote: > As a side note that has nothing to do with you, it's too bad that > systemd-analyze security does not work on a unit _file_, but only > installed units. Otherwise, this would be a great thing for someone to > hook into Lintian. I 100% agree, and I mentioned that in

Bug#929256: systemd lockdown for ntpsec-rotate-stats.service

2019-05-19 Thread Trent W. Buck
Package: ntpsec Version: 1.1.3+dfsg1-2 Severity: wishlist Tags: patch Hello! systemd includes a huge amount of security features, which are off by default. "systemd-analyze security" tells you about many of them. I thought "let's try to fix this!" and used

Bug#920317: DEB822 .sources confused by comment-only paragraph

2019-01-23 Thread Trent W. Buck
Package: apt Version: 1.8.0~alpha3.1 Severity: minor When using the new DEB822 .sources format, if you have a paragraph with only comments in it, apt interprets this as a stanza with no values in it. An example "broken.sources" is attached. -- Package-specific info: -- apt-config dump -- APT

Bug#918756: Broken by .txt.gz

2019-01-08 Thread Trent W. Buck
Package: dodgy Version: 0.1.9-3 Severity: important File: /usr/lib/python3/dist-packages/dodgy/run.py dodgy basically does this: • recursively find all regular files under ./ • for each file, • if its MIME type appears to be text/*, • assume it is UTF-8 • assume it

Bug#917047: avahi: CVE-2018-1000845: DNS amplification and reflection to spoofed addresses

2018-12-21 Thread Trent Lloyd
I have pushed a fix upstream for the issue here: https://github.com/lathiat/avahi/commit/e111def44a7df4624a4aa3f85fe98054bffb6b4f I have only performed basic validation so far, however the following scapy query now fails: send(IP(src="1.1.1.1",dst="DEST_IP")/UDP(sport=53,

Bug#906533: mkfs.ntfs --label=X sets the label to "--label=X" not "X"

2018-08-17 Thread Trent W. Buck
Package: ntfs-3g Version: 1:2017.3.23-2 Severity: minor File: /sbin/mkfs.ntfs This behaviour is clearly silly: twb@odin:~$ sudo mkfs.ntfs --label=MBB-2007 --fast --enable-compression /dev/sdd1 Cluster size has been automatically set to 4096 bytes. Creating NTFS volume structures.

Bug#905235: purge + install (not just upgrade) is broken

2018-08-05 Thread Trent W. Buck
Just in case it's not obvious, • emacs/testing & emacs-goodies/testing are installed • purge emacs-goodies-el/testing • install emacs-goodies-el/unstable …has the same behaviour as • emacs/testing & emacs-goodies/testing are installed • upgrade emacs-goodies-el from /testing to

Bug#845034: marked as done (initramfs-tools: please ensure initrd images are reproducible)

2018-07-18 Thread Trent W. Buck
Debian Bug Tracking System wrote: > + LC_ALL=C sort > [and similar LC_ALL=C elsewhere] I think you can dial that back from LC_ALL=C to just LC_COLLATE=C. Informal proof: bash4$ printf %s\\n README ReadMe readme | LC_COLLATE=en_AU.UTF-8 sort readme ReadMe README

Bug#900277: Found the issue

2018-05-30 Thread Trent W. Buck
Peter van Dijk wrote: > I can reproduce this ‘hang’ (actually it’s a very busy read() loop). A > simpler ‘echo 1,2,3 > test2.csv’ does work, so this is just exposing a bug > in the CSV implementation. You're right --- it looks like ext/misc/csv.c is broken for one-column CSV tables. I can

Bug#900277: Enable csv (like json1 is already)

2018-05-29 Thread Trent W. Buck
László Böszörményi (GCS) wrote: > On Mon, May 28, 2018 at 1:33 PM Trent W. Buck wrote: >> Per /usr/share/doc/sqlite3-doc/csv.html & https://sqlite.org/csv.html >> >> sqlite> CREATE VIRTUAL TABLE temp.t1 USING csv(filename='thefile.csv'); >> Error: no such

Bug#900277: Enable csv (like json1 is already)

2018-05-28 Thread Trent W. Buck
Package: sqlite3 Version: 3.23.1-1 Severity: wishlist Per /usr/share/doc/sqlite3-doc/csv.html, upstream sqlite3 includes a CSV loadable extension. AFAICT it's not available in Debian, where e.g. the json1 module already works with no .load required: (BUILDROOT:BUSTER)root@zygon:/# sqlite3

Bug#898240: import_environment = … LANG=C.UTF-8 not LANG=C

2018-05-08 Thread Trent W. Buck
Package: postfix Version: 3.3.0-1 Severity: normal I just noticed that I bounced 400 legitimate emails since February, due to a combination of root@tweak:~# postconf -d import_environment export_environment import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY

Bug#898167: backward symlink(s) --- localepurge breaks gnucash-docs

2018-05-08 Thread Trent W. Buck
Package: gnucash-docs Version: 2.6.15-1 Severity: normal gnucash-docs breaks when localpurge is used (to save disk space). Here you can see localepurge configured for English only (to save disk space): # grep help /etc/dpkg/dpkg.cfg.d/*

Bug#898038: caused by host

2018-05-07 Thread Trent Lloyd
with the latest nss-mdns updates that have migrated to testing, as I believe that should ignore multi-label .local queries from memory (would have to be verified), e.g. queries for a.b.local will pass through mdns into the normal resolver stack. - Trent

Bug#898038: caused by host

2018-05-06 Thread Trent Lloyd
and I can reproduce it on demand. - Trent

Bug#894666: Simplify backports - manpage should suggest >=11~ not >=11

2018-04-03 Thread Trent W. Buck
Mattia Rizzolo wrote: > On Tue, Apr 03, 2018 at 02:30:02PM +1000, Trent W. Buck wrote: > > When backporting libpam-mount from experimental to stable, the only change > > I needed was > > > > -Build-Depends: debhelper (>= 11), … > > +Build-Depends: debh

Bug#799752: pmt_already_mounted() broken when server="nfs"

2018-04-02 Thread Trent W. Buck
2.16-4 fixes the problem, thanks. Trent W. Buck wrote: > Jochen Sprickerhof wrote: > > a long time ago you opened a bug in the Debian package libpam-mount. > > Recently > > I took over maintenance of this package and added a patch to address this. > > You > > c

Bug#894666: Simplify backports - manpage should suggest >=11~ not >=11

2018-04-02 Thread Trent W. Buck
Package: debhelper Version: 11.1.6 Severity: wishlist When backporting libpam-mount from experimental to stable, the only change I needed was -Build-Depends: debhelper (>= 11), … +Build-Depends: debhelper (>= 11~), … The tilde allows ~bpo versions of debhelper to satisfy the

Bug#799752: pmt_already_mounted() broken when server="nfs"

2018-04-02 Thread Trent W. Buck
Jochen Sprickerhof wrote: > a long time ago you opened a bug in the Debian package libpam-mount. Recently > I took over maintenance of this package and added a patch to address this. You > can find the new version in Debian experimental, would be great if you could > try it and report back if it

Bug#846377: discovered likely cause of this issue

2018-03-08 Thread Trent Lloyd
d most of this same info in my bug for Ubuntu here, including for reference: https://bugs.launchpad.net/ubuntu/+source/systemd/+bug/1754270 Regards, Trent

Bug#694068: netcfg: Wireless connectivity present during an install but absent afterwards

2018-03-05 Thread Trent W. Buck
Brian Potkin wrote: > The number of users affected by this issue over the years is not > insignificant. Not a single one has written in support of the > situation. This issue has bitten me at least twice so far. This issue's history seems to be bogged down on whether interfaces(5) can be mode

Bug#638024: user story --- bad Default-Release breaks unattended-upgrades

2018-01-29 Thread Trent W. Buck
David Kalnischkies wrote: > On Wed, Jan 24, 2018 at 02:10:43PM +1100, Trent W. Buck wrote: > > As part of my Best Current Practice I set Default-Release "stretch", > > to prevent accidental dist-upgrades when sources.list is in an unusual > > state. > > (For T

Bug#638024: user story --- bad Default-Release breaks unattended-upgrades

2018-01-23 Thread Trent W. Buck
Hi, I have a user story relevant to #638024. TL;DR version: When Default-Release is set and /var/lib/apt/lists is empty, apt-get check errors, and unattended-upgrades silently fail. Boring backstory follows. I'm making headless servers to be deployed in the homes of non-technical users. To

Bug#882291: RFP: fonts-mplus-ttf -- condensed monospace font

2017-11-21 Thread Trent W. Buck
Package: wnpp Severity: wishlist * Package name: fonts-mplus-ttf Version : TESTFLIGHT-0.6.3 (2017-10-25) Upstream Author : Copyright (C) 2002-2016 M+ FONTS PROJECT * URL : https://osdn.net/projects/mplus-fonts/ * License : These fonts are free software.

Bug#706691: closed by Laurent Bigonville <bi...@debian.org> (Re: In rc0.d, sendsigs stops before rpcbind stops)

2017-10-26 Thread Trent W. Buck
Re: In rc0.d, sendsigs stops before rpcbind stops > Message-ID: <5eaf5b96-9f76-ca62-9951-a1bafa406...@debian.org> > User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 > Thunderbird/52.4.0 > > On Fri, 3 May 2013 22:07:19 +1000 "Trent W. Buck" <tr

Bug#763321: progress on Kiwix RFPs?

2017-09-25 Thread Trent W. Buck
For the record, In 2017, Kunal wrote: > Currently this is blocked by #868641: Upgrade libzim to 2.0.0. Once that > is resolved, Vasudev has offered to sponsor the initial upload. zimlib 2.x landed in sid last month (August 2017): https://tracker.debian.org/pkg/zimlib In 2015, Elena wrote:

Bug#873472: udhcpc (not uchcpc) in debian/tree/udhcpc/etc/udhcpc/default.script

2017-08-28 Thread Trent W. Buck
Package: udhcpc Version: 1:1.22.0-19 Severity: minor Tags: patch There is a one-letter typo in the syslog tag in debian/tree/udhcpc/etc/udhcpc/default.script: log() { - logger -t "uchcpc[$PPID]" -p daemon.$1 "$interface: $2" + logger -t "udhcpc[$PPID]" -p daemon.$1 "$interface:

Bug#856311: avahi-daemon: Won't start due to rlimit nproc, confused by lxc containers

2017-08-16 Thread Trent Lloyd
leave it up to the system to impose any limits they desire as part of the init settings - but really it was just some kind of poor anti-DoS measure. It would not be unreasonable to backport this change to stable in my view, and intend to SRU the same change to stable in Ubuntu. - Trent

Bug#834129: pgadmin4 needs flask_htmlmin

2017-07-31 Thread Trent W. Buck
I spent an hour trying to roll a barebones deb from pgadmin4.git. I got stuck here: Exception occurred: File "/tmp/pgadmin4-X/web/pgadmin/__init__.py", line 19, in from flask_htmlmin import HTMLMIN ImportError: No module named flask_htmlmin According to apt-file,

Bug#866213: open-iscsi: iBFT network setup does not populate PROTO (e.g. PROTO=dhcp, or static) in /run/net-*.conf

2017-06-28 Thread Trent Lloyd
&& set username x && set password x && sanhook --drive 0x80 iscsi:100.64.1.254::3261:0:iqn.2017-04.net.lathiat:target1 || prompt ; autoboot Cheers, Trent -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd

Bug#865605: missing Recommends: libghc-filestore-data, pandoc-data

2017-06-22 Thread Trent W. Buck
Package: gitit Version: 0.12.1.1+dfsg-6+b3 Severity: normal If I just do "apt install gitit", and run "gitit" in an empty directory, it crashes: root@slime:~/my_gitit# gitit gitit: /usr/share/filestore/extra/post-update: openBinaryFile: does not exist (No such file or directory) If I

Bug#862225: draft patch

2017-05-09 Thread Trent W. Buck
it experimentally because my pam-mounts aren't authenticated. ☹ >From f4b3f64158e8a65a44c76a97ca5951cba86023b0 Mon Sep 17 00:00:00 2001 From: "Trent W. Buck" <trentb...@gmail.com> Date: Wed, 10 May 2017 10:01:03 +1000 Subject: [PATCH] (EXPERIMENTAL) after expired-password reset, mount

Bug#841275: linux: Logitech Unifying Receiver shows devices that aren't connected

2017-04-17 Thread Trent Gamblin
I've found more info about this. You were right that it was remembering previously paired devices. Logitech has a utility that allows removing pairings (for Windows) and I was able to remove the keyboard.

Bug#860143: rmdir: failed to remove '/usr/share/doc/cm-super': No such file or directory

2017-04-12 Thread Trent W. Buck
Package: cm-super Version: 0.3.4-9 Severity: minor Hi, cm-super can't be installed when dpkg.cfg contains path-exclude=/usr/share/doc/* because the postinst crashes while trying to remove /usr/share/doc/cm-super. Debian Policy says that packages should work without /usr/share/doc/.

Bug#860002: Add *.squashfs to DEFAULT_DONT_COMPRESS

2017-04-10 Thread Trent W. Buck
Package: rsync Version: 3.1.2-2 Severity: wishlist Rsync maintains a default list of file extensions that don't benefit from rsync's own compression: v3.1.2:loadparm.c:#define DEFAULT_DONT_COMPRESS "*.gz *.zip *.z *.rpm *.deb *.iso *.bz2" \ v3.1.2:loadparm.c- " *.t[gb]z *.7z

Bug#858606: RFP: k2pdf -- PDF Reflow tool

2017-03-24 Thread Trent W. Buck
Package: wnpp Severity: wishlist * Package name: k2pdf Version : 2.41 Upstream Author : willus.com (no "normal" human name I can find) * URL : http://www.willus.com/k2pdfopt/ * License : Affero GPL 3+ Programming Lang: C Description : PDF Reflow tool

Bug#816063: emacs24: TLS certificate validation is silently broken

2017-02-22 Thread Trent W. Buck
Antoine Beaupre wrote: > tags -1 -unreproducible > > I can reproduce issues with certification verification in Emacs 24.5+1-8 > in Debian Stretch. As documented here: > > [...] > > I am not sure what changed between Emacs 24 and 25, but it seems to me > Emacs 24 should absolutely be fixed before

Bug#855357: rsyncable tweaks for find|cpio|gzip; add cpio --reproducible

2017-02-16 Thread Trent W. Buck
Package: initramfs-tools Version: 0.120+deb8u2 Severity: wishlist File: /usr/sbin/mkinitramfs Several times a month I build Debian Live images and rsync them to remote sites that use them on diskless kiosk farms. I was annoyed because if there have been few security updates, rsync will take a

Bug#850771: include doc/keys.en.html in binary package

2017-01-09 Thread Trent W. Buck
Package: inkscape Version: 0.92.0-2 Severity: wishlist The Inkscape "Help" menu needs internet access to work. This is annoying for airgapped users. IIRC most of the menu items link to non-DFSG content, but one menu item is easy to fix: inkscape_help_keys.inx. The inkscape source package

Bug#850096: Make git snapshot? (2011 → 2016)

2017-01-03 Thread Trent W. Buck
Package: gargoyle-free Version: 2011.1a-2 Severity: wishlist It's been a LONG time since upstream garglk had a stable release. The current git master includes major interpreter upgrades (below), as well as bugfixes for some specific games. Is it worth Debian releasing a version like

Bug#850090: Backstory suggestion

2017-01-03 Thread Trent W. Buck
Package: qonk Version: 0.3.1-3.1+b1 Severity: wishlist Tags: patch Hi, I ship qonk to prison inmates, who (by policy) aren't allowed access to manpages. To help them get started with qonk, and to provide a basic backstory, I wrote a tiny wrapper script with a paragraph of prose (attached). It

Bug#849043: privacy-breach-w3c-valid-html: incorrect lowercase "Icon" in path

2016-12-21 Thread Trent W. Buck
debhelper export NAME='Trent W. Buck' EMAIL=t...@cyber.com.au # used by dch dch --create --package foo -v0~1 -Dstable 'Initial release.' >debian/compat echo 9 >debian/source/format echo '3.0 (native)' >debian/install echo '*.html usr/foo/' >foo.html

Bug#795701: ITP: trojita -- Fast Qt IMAP e-mail client.

2016-12-08 Thread Trent W. Buck
Alf, Alf Gaida wrote: > The packaging is in good shape - the sources are not. > So trojita isn't fit for sid, maybe for experimental. > But trojita becomes better with every commit. It sounds like you have a working Debian source package (.dsc and .debian.tar.xz) for trojita. Where can I find

Bug#846066: Acknowledgement (Please patch Mono/CLR to allow apt install without /proc.)

2016-11-28 Thread Trent W. Buck
20:52 twb: https://gist.github.com/josteink/18c7249e6e0d15053f6435b673ba5b08 20:52 twb: feel free to send that to the debian guys Also attached, title is/was "Getting your own process without using procfs on Linux". // Shamelessly copied from Stack Overflow //

Bug#846066: Please patch Mono/CLR to allow apt install without /proc.

2016-11-28 Thread Trent W. Buck
Package: cli-common Version: 0.9+nmu1 Severity: wishlist [I'm not sure which package to report this against, so I'm guessing. Please reassign as appropriate.] I build Debian Live environments using debootstrap and then chroot + apt. I deliberate don't mount /proc inside the chroot, because

Bug#519640: Bug still exists

2016-10-31 Thread Trent Gamblin
This bug still exists for me. apt-get upgrade just pulled in a ghostscript update today but it still crashes. If you need any info let me know.

Bug#842480: avahi-daemon: boot and RAM sleep end with dnscrypt-proxy port covering.

2016-10-29 Thread Trent Lloyd
that if you spent a fraction of the amount of time you spent complaining about systemd, you'll have figured out how to disable both avahi's service and it's dbus activated service. If that's too hard, I guess you could uninstall the avahi-daemon package. Not a bug. Regards, Trent On 30/10/16

Bug#842133: postinst now fails when preseeding postfix/main_mailer_type: No configuration

2016-10-26 Thread Trent W. Buck
Package: postfix Version: 3.1.3-1 Severity: normal I provide my own main.cf in a separate .deb via config-package-dev. So I preseed postfix to disable postinst's main.cf: debconf-set-selections <<< 'postfix postfix/main_mailer_type select No configuration' This worked (with some

Bug#841373: mv: cannot stat 'unpackchrome/opt/google/chrome/PepperFlash/libpepflashplayer.so': No such file or directory

2016-10-20 Thread Trent W. Buck
This is the same bug at Ubuntu; it has more analysis: https://bugs.launchpad.net/ubuntu/+source/pepperflashplugin-nonfree/+bug/1632870 In short: * Google Chrome 54+ does not bundle libpepflashplayer.so. * pepperflashplugin-nonfree will have to get it from somewhere else; either

Bug#841373: mv: cannot stat 'unpackchrome/opt/google/chrome/PepperFlash/libpepflashplayer.so': No such file or directory

2016-10-19 Thread Trent W. Buck
Package: pepperflashplugin-nonfree Version: 1.8.1+deb8u1 Severity: critical Install is currently failing. Maybe the paths within the upstream deb have changed? Here's what the postinst said: Setting up pepperflashplugin-nonfree (1.8.1+deb8u1) ... converted

Bug#841275: linux: Logitech Unifying Receiver shows devices that aren't connected

2016-10-19 Thread Trent Gamblin
wrote: Control: tag -1 moreinfo On Wed, 2016-10-19 at 02:42 -0600, Trent Gamblin wrote: Source: linux Severity: normal Dear Maintainer, I have a PC with a mouse connected by a Logitech Unifying Receiver, and an Android TV box with a keyboard connected by a separate Unifying Receiver. The keyboard

Bug#841275: Screenshot of Mate battery applet

2016-10-19 Thread Trent Gamblin

Bug#841275: linux: Logitech Unifying Receiver shows devices that aren't connected

2016-10-19 Thread Trent Gamblin
Source: linux Severity: normal Dear Maintainer, I have a PC with a mouse connected by a Logitech Unifying Receiver, and an Android TV box with a keyboard connected by a separate Unifying Receiver. The keyboard shows up on the Linux box with a message in dmesg: [3.120080] usb 5-2.1: new

Bug#839123: on-screen keyboard (OSK) keys overlap at large font sizes

2016-09-29 Thread Trent W. Buck
Package: klavaro Version: 3.01-1 Severity: minor By default my XFCE4 desktop uses a font "Sans-12". I opened klavaro and clicked "Introduction". The on-screen keyboard and related text were quite small - about two-thirds of my screen was unused. I wanted bigger keys & letters, so I would not

Bug#838346: Please include game name in WM_CLASS property

2016-09-20 Thread Trent W. Buck
Package: scummvm Version: 1.7.0+dfsg-2 Severity: wishlist I use WM_CLASS to collect statistics about which apps my users run most/least. (use the xprop(1) command to view WM_CLASS). Right now, scummvm sets both "name" and "class" attributes of WM_CLASS to "scummvm". Please arrange for WM_CLASS

Bug#834580: Typo at officecfg/registry/data/org/openoffice/VCL.xcu:111 - Tinos not Tino

2016-08-17 Thread Trent W. Buck
Package: libreoffice Version: 1:5.2.0-2 Severity: wishlist Tags: patch upstream There is a simple typo in: officecfg/registry/data/org/openoffice/VCL.xcu:111 in the property: VCL/DefaultFonts/SERIF It says "Tino" but it should say "Tinos". This line is otherwise identical to the

Bug#830764: Missing caret (^) in logcheck rule

2016-07-11 Thread Trent W. Buck
Package: libsasl2-modules Version: 2.1.26.dfsg1-15 Severity: minor Almost all logcheck rules start like this: ^\w{3} [ :0-9]{11} ^\w{3} [ :[:digit:]]{11} But this one is missing the leading caret: \w{3} [ :0-9]{11} [._[:alnum:]-]+ [._[:alnum:]-]+: DIGEST-MD5 common mech free

Bug#812103: Patch

2016-07-05 Thread Trent Lloyd
at@ubuntu:~/src/lp1575220$ curl -s -H "X-Test-Dash-Header: Yes" -H "X_Test_Underscore_header: Yes" http://10.48.134.78/|grep -i test ** New Proposed Patch ** lathiat@ubuntu:~/src/lp1575220$ curl -s -H "X-Test-Dash-Header: Yes" -H "X_Test_Underscore_header: Yes&quo

Bug#828942: new version available (6.0.2)

2016-06-29 Thread Trent W. Buck
Source: cherrypy3 Version: 3.5.0-2 Severity: wishlist The current version described by upstream cherrypy.org as "stable" is v6.0.2, commit ca684b38. Is there a good reason for Debian to only ship 3.5.0 ? There are a lot of changes: $ git clone --bare https://github.com/cherrypy/cherrypy

<    1   2   3   4   5   6   7   8   9   10   >