Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Steve Langasek
On Wed, Apr 06, 2005 at 07:18:06PM +0200, Holger Levsen wrote: > On Tuesday 05 April 2005 16:54, Steve Langasek wrote: > > - Nothing in the package (binary or source) uniquely identifies the > > kernel-source patchlevel used (including the added ABI name, since ABI name > > != patchlevel) > as we

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Holger Levsen
resent as I go the debian-security-private-address wrong, please follow reploy-to: Hi, btw, no need to cc: me, i'm subscribed to release, the bug and the package :-) On Tuesday 05 April 2005 16:54, Steve Langasek wrote: > - Nothing in the package (binary or source) uniquely identifies the > ker

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Holger Levsen
Hi, btw, no need to cc: me, i'm subscribed to release, the bug and the package :-) On Tuesday 05 April 2005 16:54, Steve Langasek wrote: > - Nothing in the package (binary or source) uniquely identifies the > kernel-source patchlevel used (including the added ABI name, since ABI name > != patchle

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Martin Schulze
Holger Levsen wrote: > On Wednesday 06 April 2005 12:42, Martin Schulze wrote: > > > Hmmm... the only mail address for stable security support on > > > http://www.debian.org/intro/organization is [EMAIL PROTECTED] - > > > <[EMAIL PROTECTED]> didnt seem appropriate to me. > > What's wrong with that

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Holger Levsen
Hi Joey, On Wednesday 06 April 2005 12:42, Martin Schulze wrote: > > Hmmm... the only mail address for stable security support on > > http://www.debian.org/intro/organization is [EMAIL PROTECTED] - > > <[EMAIL PROTECTED]> didnt seem appropriate to me. > What's wrong with that address? The reason

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Martin Schulze
Holger Levsen wrote: > Hmmm... the only mail address for stable security support on > http://www.debian.org/intro/organization is [EMAIL PROTECTED] - > <[EMAIL PROTECTED]> didnt seem appropriate to me. What's wrong with that address? > Would that have been a better address ? Yes. Regards,

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Holger Levsen
Hi Joey, On Tuesday 05 April 2005 18:26, Martin Schulze wrote: > > Howto handle security fixes for fai-kernels > > --- > > > > fai-kernels uses the kernel-source-2.4.27 and kernel-source-2.6.8 > > packages. If these packages get updated with a security fix,

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-06 Thread Holger Levsen
Hi Steve, On Tuesday 05 April 2005 16:54, Steve Langasek wrote: > To reiterate our discussion on IRC, I don't think this addresses my > concerns, which are that: > > - Nothing in the package (binary or source) uniquely identifies the > kernel-source patchlevel used (including the added ABI name, s

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-05 Thread Martin Schulze
Steve Langasek wrote: > - Nothing in the source or binary package names matches the > kernel.*2\.(4\.27|6\.8) regexp that I've been using so far to identify the > kernel packages requiring attention > > I have no knowledge of how important the latter is to the security team; > they may not be both

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-05 Thread Martin Schulze
Holger Levsen wrote: > Howto handle security fixes for fai-kernels > --- > > fai-kernels uses the kernel-source-2.4.27 and kernel-source-2.6.8 packages. > If these packages get updated with a security fix, fai-kernels needs to be > rebuild. > > The kernel

Re: proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-05 Thread Steve Langasek
Hi Holger, On Tue, Apr 05, 2005 at 12:35:44PM +0200, Holger Levsen wrote: > to fix #297811, which is about adding the kernel abi version number to > fai-kernels (which is only build on i386 currently, powerpc is pending) to be > able to do security support for fai-kernels in sarge, I made the fo

proposed fix to allow security support for fai-kernels in sarge (#297811)

2005-04-05 Thread Holger Levsen
Hi, to fix #297811, which is about adding the kernel abi version number to fai-kernels (which is only build on i386 currently, powerpc is pending) to be able to do security support for fai-kernels in sarge, I made the following changes and I would like to ask on the release managers and securit