* Paul Wise [2021-02-27 23:15]:
I assume folks are wanting a per-user consent to download from
debuginfod services instead of or in addition to the per-system
consent being proposed to add via debconf.
I strongly prefer the debconf solution only.
Companies tend to have policies which police
On Sun, Feb 28, 2021 at 07:22:07AM +, Ian Campbell wrote:
> On Sat, 2021-02-27 at 17:30 -0500, Sergio Durigan Junior wrote:
> > I don't know if I understand the pushback I'm seeing
> > against using a debconf question for this.
>
> FWIW I don't think I've read any actual pushback on that in th
On Sat, 2021-02-27 at 17:30 -0500, Sergio Durigan Junior wrote:
> I don't know if I understand the pushback I'm seeing
> against using a debconf question for this.
FWIW I don't think I've read any actual pushback on that in this thread
although I can see how it might appear that way to another rea
On Saturday, February 27 2021, Paul Wise wrote:
> On Sat, Feb 27, 2021 at 10:31 PM Sergio Durigan Junior wrote:
>
>> Anyway, as I said before, I don't intend to work on this specific idea
>> right away, and I don't know if I understand the pushback I'm seeing
>> against using a debconf question fo
On Sat, Feb 27, 2021 at 10:31 PM Sergio Durigan Junior wrote:
> Anyway, as I said before, I don't intend to work on this specific idea
> right away, and I don't know if I understand the pushback I'm seeing
> against using a debconf question for this. It seems to me that this is
> exactly why debc
On Saturday, February 27 2021, Ian Campbell wrote:
> On Sat, 2021-02-27 at 11:21 -0500, Sergio Durigan Junior wrote:
>> On Saturday, February 27 2021, Ian Campbell wrote:
>> >
>> > FWIW that would be my personal preference too (probably with some sort
>> > of cache, maybe once per library or exec
On Sat, 2021-02-27 at 11:21 -0500, Sergio Durigan Junior wrote:
> On Saturday, February 27 2021, Ian Campbell wrote:
> >
> > FWIW that would be my personal preference too (probably with some sort
> > of cache, maybe once per library or executable or some granularity like
> > that)...
>
> BTW, lib
On Saturday, February 27 2021, Ian Campbell wrote:
> On Sat, 2021-02-27 at 11:47 +0100, Kurt Roeckx wrote:
> On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote:
>> As I said in the announcement message, I have proposed a Merge
>> Request
>> against elfutils in order to enable th
Quoting Johannes Schauer Marin Rodrigues (2021-02-27 15:24:52)
> Quoting Steinar H. Gunderson (2021-02-27 13:46:27)
> > On Sat, Feb 27, 2021 at 12:29:34PM +, Thaddeus H. Black wrote:
> > > I would prefer Kurt's option. Network silence is important.
> > > Network noise would probably be a bug
On Sat, Feb 27, 2021 at 03:24:52PM +0100, Johannes Schauer Marin Rodrigues
wrote:
> No idea why we are still asking whether popcon should be enabled or not
> because
> apparently it's 2021 and it's okay to tell others out there that I just
> installed Debian.
This is a strawman, though. popcon c
Quoting Steinar H. Gunderson (2021-02-27 13:46:27)
> On Sat, Feb 27, 2021 at 12:29:34PM +, Thaddeus H. Black wrote:
> > I would prefer Kurt's option. Network silence is important. Network
> > noise would probably be a bug. A sysadmin should not be made to take
> > special precautions to avoi
On Sat, 2021-02-27 at 11:47 +0100, Kurt Roeckx wrote:
On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote:
> As I said in the announcement message, I have proposed a Merge
> Request
> against elfutils in order to enable the automatic usage of our
> debuginfod server. I know that
On Sat, Feb 27, 2021 at 12:29:34PM +, Thaddeus H. Black wrote:
> I would prefer Kurt's option. Network silence is important. Network
> noise would probably be a bug. A sysadmin should not be made to take
> special precautions to avoid the inadvertent disclosure of the user's
> presence on th
Thanks for consulting us, Sergio, before proceeding.
On Sat, Feb 27, 2021 at 11:47:40AM +0100, Kurt Roeckx wrote:
> On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote:
> > As I said in the announcement message, I have proposed a Merge Request
> > against elfutils in order to ena
On Thu, Feb 25, 2021 at 03:55:17PM -0500, Sergio Durigan Junior wrote:
> As I said in the announcement message, I have proposed a Merge Request
> against elfutils in order to enable the automatic usage of our
> debuginfod server. I know that there are people who are not comfortable
> with having a
Quoting Ian Campbell (2021-02-24 18:50:39)
> What are the security implications for users/clients of using this or more
> importantly enabling it by default?
>
> Presumably clients have to trust that the server is not going to feed
> them malicious debug info. Are the tools which consume this info
On Saturday, February 27 2021, Ian Campbell wrote:
> On Thu, 2021-02-25 at 15:55 -0500, Sergio Durigan Junior wrote:
>> so a possible mitigation to this issue would be to have a debconf
>> question asking whether the user wants to enable system-wide
>> debuginfod usage or not.
>
> ... this sound
Thank you both for your replies.
Frank Ch. Eigler wrote:
> Do these considerations overcome the concerns, so as to provide a
> comfortable out-of-the-box experience for most users?
I'm not totally convinced about silently enabling it by default, but...
On Thu, 2021-02-25 at 15:55 -0500, Sergio D
On Thursday, February 25 2021, Ian Campbell wrote:
>> What about information leakage? apart from debugids does this leak
>> anything else to the server? On a quick look it seems like it might
>> potentially leak source code paths (at least the leaf bits) to things
>> being debugged -- does this me
Frank's original reply didn't make it to the list for some reason and
has also gone missing on his end so resending on his request.
On Wed, 2021-02-24 at 15:23 -0500, Frank Ch. Eigler wrote:
---
Hi, Ian -
ijc wrote:
> [...]
> What are the security implications for users/clients of using this
On Wed, Feb 24, 2021 at 4:03 AM Sergio Durigan Junior
wrote:
>
> Hello there,
>
> I would like to announce a new service that I have just configured for
> Debian: https://debuginfod.debian.net.
Thanks a lot for this. I used it last night to check a coredump for a
ppc64el package and it worked fla
On Wednesday, February 24 2021, Steinar H. Gunderson wrote:
> On Wed, Feb 24, 2021 at 10:25:02AM -0500, Sergio Durigan Junior wrote:
>> Hm, that's a bummer. I mean, you can certainly set up an instance for
>> you, but it takes a lot of time to mirror debian-debug (some days,
>> depending on your
On Wed, Feb 24, 2021 at 10:25:02AM -0500, Sergio Durigan Junior wrote:
> Hm, that's a bummer. I mean, you can certainly set up an instance for
> you, but it takes a lot of time to mirror debian-debug (some days,
> depending on your network connection). I don't know if that would be
> interesting
On Wed, 2021-02-24 at 16:58 +, Ian Campbell wrote:
Ugh, sorry, the quoting seems to have gone quite wrong there, let me
try again...
> On Tue, 2021-02-23 at 22:53 -0500, Sergio Durigan Junior wrote:
> Hello there,
>
> I would like to announce a new service that I have just configured
> for
>
On Tue, 2021-02-23 at 22:53 -0500, Sergio Durigan Junior wrote:
Hello there,
I would like to announce a new service that I have just configured for
Debian: https://debuginfod.debian.net.
debuginfod is a new-ish project whose purpose is to serve
ELF/DWARF/source-code information over HTTP. It is
On Wednesday, February 24 2021, Christoph Berg wrote:
> Re: Sergio Durigan Junior
>> I would like to announce a new service that I have just configured for
>> Debian: https://debuginfod.debian.net.
>
> Very cool!
Thanks!
>> Currently, the elfutils and GDB packages in unstable and testing have
>>
On Wednesday, February 24 2021, Shengjing Zhu wrote:
> On Tue, Feb 23, 2021 at 10:53:14PM -0500, Sergio Durigan Junior wrote:
>> Hello there,
>>
>> I would like to announce a new service that I have just configured for
>> Debian: https://debuginfod.debian.net.
>>
>
> Thanks a lot for this great
Hello Christoph,
On Wed, 24 Feb 2021 at 11:06, Christoph Berg wrote:
> Maybe the service should move to debuginfod.debian.*org* if it's going
> to be a default. (Which I would like to see.)
Yes, that is part of the plan, but it'll take some more time.
Regards
--
Héctor Orón -.. . -... .. .-
Re: Sergio Durigan Junior
> I would like to announce a new service that I have just configured for
> Debian: https://debuginfod.debian.net.
Very cool!
> Currently, the elfutils and GDB packages in unstable and testing have
> native support for using debuginfod. I will soon propose a change to
>
On 24.02.2021 05:53, Sergio Durigan Junior wrote:
Hello there,
I would like to announce a new service that I have just configured for
Debian: https://debuginfod.debian.net.
Congratulations.
This seems like a great help for people debugging code.
Eugen
On Tue, Feb 23, 2021 at 10:53:14PM -0500, Sergio Durigan Junior wrote:
> Hello there,
>
> I would like to announce a new service that I have just configured for
> Debian: https://debuginfod.debian.net.
>
Thanks a lot for this great service.
I have two questions.
1. Do you want to include contr
31 matches
Mail list logo
