Re: RFS: passepartout - GNOME Desktop Publishing Application

2003-10-28 Thread Matthias Urlichs
Hi, Gaudenz Steinlin wrote: I'm looking for a sponsor for passepartout. You can download the source package at http://www.soziologie.ch/~steinlin/passepartout/ I'll have a look at it. -- Matthias Urlichs | {M:U} IT Design @ m-u-it.de | [EMAIL PROTECTED] Disclaimer: The quote was

Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Zenaan Harkness
This is a follow up to the jackd/ dpkg-statoverride thread, and a request for comment on the below. Once informally vetted here, I will post to debiam-multimedia. Input appreciated Zen --- Title: Audio Apps Mini Policy Authors: Zenaan Harkness Version: 0.1 Date: 2003-10-28 Applicability: Audio

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Vincent Danjean
On Tue, 2003-10-28 at 12:47, Steve Kemp wrote: On Tue, Oct 28, 2003 at 09:43:07PM +1100, Zenaan Harkness wrote: Audio applications or applets (ie. executable files) requiring realtime privileges should be installed as follows: - user = root - group = audio - permissions - SUID

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Steve Kemp
On Tue, Oct 28, 2003 at 02:11:47PM +0100, Andreas Metzler wrote: Why read only for other? Given that they can't execute what is presumably a compiled binary I'd treat them as untrusted and not allow them to read it at all. Why? Quoting policy because I can't reason better: They

Re: Could someone check this package (osdsh)?

2003-10-28 Thread Joachim Breitner
Hi, since no objections arose, I uploaded the package today, including your suggestions. Thanks for the help! nomeata Am Mi, den 22.10.2003 schrieb Joachim Breitner um 14:39: Hi, I just became a full Debian Developer, so don't worry, you don't have to sponsor anything and all that goes

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Andreas Metzler
On Tue, Oct 28, 2003 at 12:31:14PM -0500, Matt Zimmerman wrote: [...] I'm actually starting to wonder whether we should have a general facility for these sorts of things. Having apps be setuid root and expecting them to behave responsibility is asking for trouble; it would make much more

ITP Timeframe

2003-10-28 Thread Martin List-Petersen
What would be an appropriate timeframe from the point, where you file an ITP until the first package arrives in sid ? What is custom ? Regards, Martin List-Petersen martin at list-petersen dot se -- You can do this in a number of ways. IBM chose to do all of them. Why do you find that funny? --

Re: ITP Timeframe

2003-10-28 Thread Matthew Palmer
On Wed, Oct 29, 2003 at 12:40:12AM +0100, Martin List-Petersen wrote: What would be an appropriate timeframe from the point, where you file an ITP until the first package arrives in sid ? What is custom ? As soon as practicable. It's hard to put any hard limits on it - you should file the ITP

Re: RFS: passepartout - GNOME Desktop Publishing Application

2003-10-28 Thread Matthias Urlichs
Hi, Gaudenz Steinlin wrote: I'm looking for a sponsor for passepartout. You can download the source package at http://www.soziologie.ch/~steinlin/passepartout/ I'll have a look at it. -- Matthias Urlichs | {M:U} IT Design @ m-u-it.de | [EMAIL PROTECTED] Disclaimer: The quote was

Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Zenaan Harkness
This is a follow up to the jackd/ dpkg-statoverride thread, and a request for comment on the below. Once informally vetted here, I will post to debiam-multimedia. Input appreciated Zen --- Title: Audio Apps Mini Policy Authors: Zenaan Harkness Version: 0.1 Date: 2003-10-28 Applicability: Audio

Re: jackd/ dpkg-statoverride/ audio group question(s)

2003-10-28 Thread Zenaan Harkness
If it requires SUID root, then the package is almost certainly buggy. Please use a privileged audio device user instead; I'm aware of no ^^ reason that audio software should need general root privileges. Sorry to not clarify earlier - it

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Steve Kemp
On Tue, Oct 28, 2003 at 09:43:07PM +1100, Zenaan Harkness wrote: Audio applications or applets (ie. executable files) requiring realtime privileges should be installed as follows: - user = root - group = audio - permissions - SUID root - have a debconf question asking to allow/

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Vincent Danjean
On Tue, 2003-10-28 at 12:47, Steve Kemp wrote: On Tue, Oct 28, 2003 at 09:43:07PM +1100, Zenaan Harkness wrote: Audio applications or applets (ie. executable files) requiring realtime privileges should be installed as follows: - user = root - group = audio - permissions - SUID

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Andreas Metzler
On Tue, Oct 28, 2003 at 11:47:49AM +, Steve Kemp wrote: On Tue, Oct 28, 2003 at 09:43:07PM +1100, Zenaan Harkness wrote: Audio applications or applets (ie. executable files) requiring realtime privileges should be installed as follows: - user = root - group = audio -

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Steve Kemp
On Tue, Oct 28, 2003 at 02:11:47PM +0100, Andreas Metzler wrote: Why read only for other? Given that they can't execute what is presumably a compiled binary I'd treat them as untrusted and not allow them to read it at all. Why? Quoting policy because I can't reason better: They

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Matt Zimmerman
On Tue, Oct 28, 2003 at 09:43:07PM +1100, Zenaan Harkness wrote: This is a follow up to the jackd/ dpkg-statoverride thread, and a request for comment on the below. Once informally vetted here, I will post to debiam-multimedia. Input appreciated Zen --- Title: Audio Apps Mini Policy

Re: jackd/ dpkg-statoverride/ audio group question(s)

2003-10-28 Thread Matt Zimmerman
On Tue, Oct 28, 2003 at 09:52:52PM +1100, Zenaan Harkness wrote: One method is jackd/ jackstart. jackd runs as root, jackstart starts it, and can be run as any user, and uses kernel capabilities to give jackd the required scheduling priority (realitime). Why on earth would a sound server run

Re: Could someone check this package (osdsh)?

2003-10-28 Thread Joachim Breitner
Hi, since no objections arose, I uploaded the package today, including your suggestions. Thanks for the help! nomeata Am Mi, den 22.10.2003 schrieb Joachim Breitner um 14:39: Hi, I just became a full Debian Developer, so don't worry, you don't have to sponsor anything and all that goes

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Andreas Metzler
On Tue, Oct 28, 2003 at 12:31:14PM -0500, Matt Zimmerman wrote: [...] I'm actually starting to wonder whether we should have a general facility for these sorts of things. Having apps be setuid root and expecting them to behave responsibility is asking for trouble; it would make much more

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Matt Zimmerman
On Tue, Oct 28, 2003 at 06:45:08PM +0100, Andreas Metzler wrote: Perhaps execcap(8) can be used as base for the general facility? That sounds useful. For our purposes, though, it would need a setuid wrapper in order to do the other work, and that program could probably just as easily set the

Re: Audio Apps Mini-Policy, v0.1

2003-10-28 Thread Zenaan Harkness
On Tue, 2003-10-28 at 22:47, Steve Kemp wrote: On Tue, Oct 28, 2003 at 09:43:07PM +1100, Zenaan Harkness wrote: Audio applications or applets (ie. executable files) requiring realtime privileges should be installed as follows: - user = root - group = audio - permissions - SUID

ITP Timeframe

2003-10-28 Thread Martin List-Petersen
What would be an appropriate timeframe from the point, where you file an ITP until the first package arrives in sid ? What is custom ? Regards, Martin List-Petersen martin at list-petersen dot se -- You can do this in a number of ways. IBM chose to do all of them. Why do you find that funny? --