Re: buildds: "Authentication warning overridden."

2007-11-09 Thread Raphael Geissert
Michael Banck wrote: > > Won't somebody else stop the attack in their place then, who does check > the signatures? If a mirror is compromised, unless I'm missing something, it won't be updated until ftp-master sends a mirror push. And the period of time between the last mirror push, the compromis

Re: crossbuild support: help2man considered harmful

2007-11-09 Thread Michael Banck
On Fri, Nov 09, 2007 at 10:53:06PM +0100, Josselin Mouette wrote: > BTW, there is another package which does this, and which is likely to > cause you much more trouble: python. The build system compiles the > modules using the generated python binary. Ah, so that is (also) why embedded people don'

Re: buildds: "Authentication warning overridden."

2007-11-09 Thread Michael Banck
On Fri, Nov 09, 2007 at 08:00:15PM -0600, Raphael Geissert wrote: > Steve McIntyre wrote: > > That's all well and good, but the buildds also depend on using > > packages from (for example) incoming, which it is not feasible to > > sign. > > Even tough incoming is not signed, packages require a val

Re: buildds: "Authentication warning overridden."

2007-11-09 Thread Raphael Geissert
[I read the list, no need to reply To me, thanks] Steve McIntyre wrote: > > That's all well and good, but the buildds also depend on using > packages from (for example) incoming, which it is not feasible to > sign. > Even tough incoming is not signed, packages require a valid DD/similar signatu

Re: buildds: "Authentication warning overridden."

2007-11-09 Thread Steve McIntyre
Raphael Geissert wrote: >Hi all, > >It's not uncommon to see buildds (actually build tools) override the >package/Release signature warning. >So I was wondering, what is the point of having such a signatures >verification system if the build systems do not care about them? > >I know the main target

buildds: "Authentication warning overridden."

2007-11-09 Thread Raphael Geissert
Hi all, It's not uncommon to see buildds (actually build tools) override the package/Release signature warning. So I was wondering, what is the point of having such a signatures verification system if the build systems do not care about them? I know the main target is to prevent end users from do

Re: crossbuild support: help2man considered harmful

2007-11-09 Thread Josselin Mouette
Le mercredi 07 novembre 2007 à 17:08 +, Neil Williams a écrit : > One step better would be to only use help2man *upstream* and package > the manpages in the .orig.tar.gz > > IMHO, the best solution is simply not to use help2man at all but use > doclifter and xsltproc or some other method (docb

Re: Translations, locales and gconv

2007-11-09 Thread Josselin Mouette
Hi, Le mardi 06 novembre 2007 à 12:41 +, Neil Williams a écrit : > This thread will seek a sustainable method that separates the > translation files and all gconv and zoneinfo support into a dedicated > structure, outside the normal $mirror/debian main archive layout, such > that Debian can su

Re: dh_installinit

2007-11-09 Thread Russ Allbery
Petter Reinholdtsen <[EMAIL PROTECTED]> writes: > [Russ Allbery] >> Those file descriptor close loops are somewhat controversial. Not >> everyone agrees that they're a good idea, and some upstreams will push >> back on doing it. I find them a bit dubious myself; there are various >> hacks that,

Re: LSB-ize daemon without pidfile handling

2007-11-09 Thread Adeodato Simó
* Petter Reinholdtsen [Fri, 09 Nov 2007 22:00:42 +0100]: > It is not obvious for me. Can you explain why it should be obvious > that you do not plan to patch the daemon to write its own pid file? > For me, the obvious solution for a daemon unable to write its own pid > file is to patch the daemon

Re: Gdk support for SVG

2007-11-09 Thread Josselin Mouette
Le mercredi 07 novembre 2007 à 11:49 +0900, Michal Čihař a écrit : > Josselin Mouette <[EMAIL PROTECTED]> wrote: > > It is in librsvg2-common. > > Shouldn't it be in libgtk2.0-0 suggests? I do not have strong opinion > on this so I'm not filing bug :-). Fixed in the SVN. Cheers, -- .''`. : :'

Re: dh_installinit

2007-11-09 Thread Petter Reinholdtsen
[Russ Allbery] > Those file descriptor close loops are somewhat controversial. Not > everyone agrees that they're a good idea, and some upstreams will > push back on doing it. I find them a bit dubious myself; there are > various hacks that, while hacks, come in very handy but are broken > by da

Re: LSB-ize daemon without pidfile handling

2007-11-09 Thread Petter Reinholdtsen
[Marc Haber] > I do not plan to do so for obvious reasons. It is not obvious for me. Can you explain why it should be obvious that you do not plan to patch the daemon to write its own pid file? For me, the obvious solution for a daemon unable to write its own pid file is to patch the daemon. Ha

Re: Mandatory support for -nocheck in DEB_BUILD_OPTIONS

2007-11-09 Thread Ian Jackson
Loïc Minier writes ("Re: Mandatory support for -nocheck in DEB_BUILD_OPTIONS"): > On Wed, Nov 07, 2007, Ian Jackson wrote: > > What you mean is that you don't want binaries generated at one point > > being executed later during the build. I think it would be better to > > invent an option `cross'

Re: wxwidgets 2.8 needs help !

2007-11-09 Thread Bernd Zeimetz
> > So what about that? 2.8 is around since almost 1 year, and this delay > is not justifiable IMHO. There are now tons of developers and > maintainers that need to build against 2.8, and I doubt a transition > plan from 2.6 has sense due to API and behaviors changes. We have > simply to cope wit

ITP: jclic -- Tool for the development and use of multimedia educational activities

2007-11-09 Thread L. Redrejo
Package: wnpp Severity: wishlist Owner: José L. Redrejo Rodríguez <[EMAIL PROTECTED]> * Package name: jclic Version : 0.1.2.2 Upstream Author : Francesc Busquets <[EMAIL PROTECTED]> * URL : http://clic.xtec.net/ * License : GPL Description : Tool for the d

Re: dh_installinit

2007-11-09 Thread Russ Allbery
Petter Reinholdtsen <[EMAIL PROTECTED]> writes: > This might work, but the correct fix is to get the daemon to close all > file descriptors when it daemonizes. Those file descriptor close loops are somewhat controversial. Not everyone agrees that they're a good idea, and some upstreams will push

Re: debian-infrastructure-announce: please announce it on d-d-a

2007-11-09 Thread Simon Huggins
On Fri, Nov 09, 2007 at 09:19:16AM -0700, Tim Spriggs wrote: > Instead of a mailing list, why not a status/notes page? You can see machine status on db.debian.org e.g. http://db.debian.org/machines.cgi?host=ries (though it's not always updated straight away and things like #debian-devel's topic ar

Re: debian-infrastructure-announce: please announce it on d-d-a

2007-11-09 Thread Tim Spriggs
Instead of a mailing list, why not a status/notes page? Michael Banck wrote: On Fri, Nov 09, 2007 at 11:10:01AM +0100, Stefano Zacchiroli wrote: On Fri, Nov 09, 2007 at 11:01:25AM +0100, Stefano Zacchiroli wrote: But still, please use the appropriate channels to announce such stuff.

Re: Bug#450701: ITP: serverstats -- a simple tool for creating graphs using rrdtool

2007-11-09 Thread Felipe Sateler
Bjoern Boschman wrote: > Description : a simple tool for creating graphs using rrdtool > > Serverstats is a simple tool for creating graphs using > rrdtool. It is a little alternative for cacti. ^^ I'd say small instead. And improve both descriptions. I shouldn't

Re: LSB-ize daemon without pidfile handling

2007-11-09 Thread Marc Haber
On Fri, 9 Nov 2007 14:00:03 +1100, Hamish Moffatt <[EMAIL PROTECTED]> wrote: >On Thu, Nov 08, 2007 at 09:36:24PM +0100, Marc Haber wrote: >> How am I supposed to properly lsb-ize ser2net's init script? Is it ok >> to directly call s-s-d from the init script or do I need other >> workarounds? > >Per

Re: LSB-ize daemon without pidfile handling

2007-11-09 Thread Marc Haber
On Fri, 9 Nov 2007 08:49:22 +0100, Wouter Verhelst <[EMAIL PROTECTED]> wrote: >On Thu, Nov 08, 2007 at 09:36:24PM +0100, Marc Haber wrote: >> How am I supposed to properly lsb-ize ser2net's init script? Is it ok >> to directly call s-s-d from the init script or do I need other >> workarounds? > >Re

Re: wxwidgets 2.8 needs help !

2007-11-09 Thread Loïc Minier
On Fri, Nov 09, 2007, Francesco P. Lovergine wrote: > So what about that? 2.8 is around since almost 1 year, and this delay > is not justifiable IMHO. There are now tons of developers and > maintainers that need to build against 2.8, and I doubt a transition > plan from 2.6 has sense due to API and

Re: debian-infrastructure-announce (was: dupload failed)

2007-11-09 Thread Frank Küster
Holger Levsen layer-acht.org> writes: > > So why should I subscribe to an additional list? > > Because not every infrastructual bit should/needs to be announced on d-d-a?! I didn't see any infrastructure announcement so far on d-d-a that should not have been there. Furthermore - although I agre

Re: dh_installinit

2007-11-09 Thread Petter Reinholdtsen
[Sylvain Garcia] > Thanks all for your answer, It's work. > > I have modify my init script with [pathToTheScriptDaemon] 3> /dev/null This might work, but the correct fix is to get the daemon to close all file descriptors when it daemonizes. Happy hacking, -- Petter Reinholdtsen -- To UNSUBS

Re: wxwidgets 2.8 needs help !

2007-11-09 Thread Francesco P. Lovergine
On Thu, Oct 04, 2007 at 09:00:00PM -0400, Roberto C. Sánchez wrote: > On Fri, Oct 05, 2007 at 02:45:25AM +0200, Pierre THIERRY wrote: > > Scribit Roberto C. Sánchez dies 04/10/2007 hora 18:13: > > > > wxWidgets has been released a long time ago and we're still missing > > > > it. > > > Yes, though

Bug#450701: ITP: serverstats -- a simple tool for creating graphs using rrdtool

2007-11-09 Thread Bjoern Boschman
Package: wnpp Severity: wishlist Owner: Bjoern Boschman <[EMAIL PROTECTED]> * Package name: serverstats Version : 0.8 Upstream Author : David Danier <[EMAIL PROTECTED]> * URL : http://serverstats.berlios.de/ * License : GPL Programming Lang: PHP Description

Re: debian-infrastructure-announce: please announce it on d-d-a

2007-11-09 Thread Michael Banck
On Fri, Nov 09, 2007 at 11:10:01AM +0100, Stefano Zacchiroli wrote: > On Fri, Nov 09, 2007 at 11:01:25AM +0100, Stefano Zacchiroli wrote: > > But still, please use the appropriate channels to announce such stuff. > > With that I meant the mailing list itself. > > That is: I think it is appropriat

debian-infrastructure-announce: please announce it on d-d-a

2007-11-09 Thread Stefano Zacchiroli
Quoting from [1], additional information are available at [2]. > Yesterday, I have finally created the long waiting mailing list for > infrastructure announcements. This list targets both users and > developers who are interested in status changes of public (and > private) .debian.org infrastructu

Re: debian-infrastructure-announce: please announce it on d-d-a

2007-11-09 Thread Stefano Zacchiroli
On Fri, Nov 09, 2007 at 11:01:25AM +0100, Stefano Zacchiroli wrote: > But still, please use the appropriate channels to announce such stuff. ^^ With that I meant the mailing list itself. That is: I think it is appropriate to hav

Re: debian-infrastructure-announce (was: dupload failed)

2007-11-09 Thread Holger Levsen
Hi, On Friday 09 November 2007 10:45, Fabio Tranchitella wrote: > I'd suggest that if ftp-master is down, the message should go to both d-d-a > and the infrastructure list. I'm not sure I see the benefit to also have it on the infrastructure list, when you have to read d-d-a anyway. Maybe for ar

Re: debian-infrastructure-announce (was: dupload failed)

2007-11-09 Thread Fabio Tranchitella
Hi, * 2007-11-09 10:38, Holger Levsen wrote: > > So why should I subscribe to an additional list? > > Because not every infrastructual bit should/needs to be announced on d-d-a?! > > Obviously, if ftp-master is down, this needs to go to d-d-a. But if the 3rd > amd64 porter machine or the swedis

Re: debian-infrastructure-announce (was: dupload failed)

2007-11-09 Thread Holger Levsen
Hi, On Friday 09 November 2007 09:38, Frank Küster wrote: > Err, and what exactly is the reason for this? d-d-a isn't exactly > overloaded, and availability of debian infrastructure is something every DD > and maintainer should know about. It's also not like it would create a > problem if we got m

debian-infrastructure-announce (was: dupload failed)

2007-11-09 Thread Frank Küster
Kevin Mark verizon.net> writes: > > On Thu, Nov 08, 2007 at 10:08:30PM +0100, Christoph Haas wrote: > > On Thu, Nov 08, 2007 at 10:06:01PM +0100, SZALAY Attila wrote: > > > I couldn't upload my package into the incoming queue with dupload > > > because I could not connect to ftp-master.debian.or

Bug#450688: ITP: yap -- YAP Prolog compiler

2007-11-09 Thread Ralf Treinen
Package: wnpp Severity: wishlist Owner: Ralf Treinen <[EMAIL PROTECTED]> * Package name: yap Version : 5.1.1 Upstream Author : Luis Damas and Vitor Santos Costa, plus contributors * URL : http://www.ncc.up.pt/~vsc/Yap/ * License : Artistic Programming Lang: C