Joerg Jaspert [Sat, 1 Nov 2008 18:56:31 +0000 (19:56 +0100)]
Merge branch 'master' into security
* master: (182 commits)
Remove / Deactivate oldstable
ignore EPERM as a result of the chmod of a .dak file
EVIL SINGLE TAB CHARACTER IN LAST COMMIT EMERGENCY FIX
changelog
bug #
produce changes without signature, fix delay calculation also for status
add machine-readable status
show_deferred
config for show-deferred
whitespace sanitizing
move config to config
message massage
logfiles
move show-deferred to dak
move show-deferred to dak
implement public access to deferred
fix remaining days, some style
spaces in uploader names
validtime
Valid-Until
...
Philipp Kern [Tue, 21 Oct 2008 08:44:17 +0000 (10:44 +0200)]
ignore EPERM as a result of the chmod of a .dak file
2008-10-21 Philipp Kern <pkern@debian.org>
* daklib/queue.py: reintroduce James' check for EPERM after
the chmod'ing of dak files and ignore it; just fubar if the file is
world writable, which should really never happen
Joerg Jaspert [Tue, 14 Oct 2008 19:41:17 +0000 (21:41 +0200)]
Merge commit 'tomv_w/master' into merge
* commit 'tomv_w/master':
EVIL SINGLE TAB CHARACTER IN LAST COMMIT EMERGENCY FIX
changelog
bug #
produce changes without signature, fix delay calculation also for status
Joerg Jaspert [Tue, 7 Oct 2008 20:12:54 +0000 (22:12 +0200)]
Merge commit 'tomv_w/master' into merge
* commit 'tomv_w/master':
move config to config
message massage
move show-deferred to dak
move show-deferred to dak
implement public access to deferred
fix remaining days, some style
* commit 'sec-merge':
cater for uid_email None in sponsor notification
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
* commit 'sec-merge':
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Tell bzr that dak.py should be executable
Use "import daklib.foo as foo" style
Use "import daklib.foo as foo" style
Cleanup
* commit 'sec-merge': (29 commits)
Cleanup
Cleanup
Cleanup in check_archives
pychecker cleanup
"Fake" a changelog entry for Mark
Do not allow o-p-u-new to break dinstall
WTF? rm -f ? WTF?
Revert examine_package.py, which was broken
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
clean up pychecker warnings
fix the simpler of the pychecker errors
...
Add a Valid-Until "header" to the generated Release files.
Meaning "$receiver shouldn't trust this files after that date".
Should be used by apt and similar tools to detect some kind of MITM attacks,
see #499897 for more information.
Currently set to "7 days from now".
Only check md5sums after transfering stuff to the target if we are
configured to do this. We can't do this via ftp, as the files on
ftp.upload.debian.org aren't readable for us (vsftpd runs as a user
not allowed to read them).
Also, no need to check them - if the files are really broken then the
next queued will detect that and mail the maintainer anyways. So it
wont get broken files near the archive.
* commit 'tomv_w/master':
* Redo: Name it DEFERRED
split 'cancel' command off rm, use DELAYED/#-day/ prefixes, and rename 'mv' to 'reschedule'
* fix fatal typo
Thomas Viehmann [Tue, 16 Sep 2008 18:58:45 +0000 (18:58 +0000)]
* Redo: Name it DEFERRED
* Redo: Oi, Wow, that should have been committed centuries ago.
* Redo: Small changes
Remove lotsa old cvs history
Change maintainer name
Modify config to use the path we want
* Redo: Merge commit 'tomv_w/master' into merge
* commit 'tomv_w/master':
* no / in x-day
* fix bug in .commands rm-handling
* add delayed aging, extend is_on_target to consider all files
* debianqueued: finish new-style command handling
* debianqueued: allow removal from target delayed queue
* debianqueued/config: add delayed fields to sample config
Philipp Kern [Sat, 13 Sep 2008 14:21:13 +0000 (16:21 +0200)]
make .dak files world-readable
2008-09-13 Philipp Kern <pkern@debian.org>
* dak/queue.py (dump_vars): make .dak u,g=rw,o=r; James'
assumption (as stated in 2002-05-18's ChangeLog entry)
was that people will use the information therein albeit
it is "just" a duplication of information present in
other control files; people should still not use it
as source of information but access to those files makes
dak debugging easier and there is no leak of sensitive
information involved
Philipp Kern [Sun, 7 Sep 2008 21:46:51 +0000 (21:46 +0000)]
do not check for superfluous checksums-* entries for now
The current check for additional entries in checksums-* which are not
covered by entries in files is flawed because files could be modified
by autobyhand or sometimes when the file's already in the pool.
We need to rework this to look into the original files dict instead.
Philipp Kern [Sun, 7 Sep 2008 20:50:06 +0000 (22:50 +0200)]
dak/process_accepted.py (install): use dsc_file instead of file
* dak/process_accepted.py (install): better use dsc_file
instead of the (for the loop iteration) static file
variable
Signed-off-by: Philipp Kern <pkern@debian.org>
# Please enter the commit message for your changes.
# (Comment lines starting with '#' will not be included)
# On branch new-master
# Changes to be committed:
# (use "git reset HEAD <file>..." to unstage)
#
# modified: ChangeLog
# modified: dak/process_accepted.py
#
# Changed but not updated:
# (use "git add <file>..." to update what will be committed)
#
# modified: daklib/database.py
#
# Untracked files:
# (use "git add <file>..." to include in what will be committed)
#
# config/asterix/
# diff
# ftp/
# incoming/
# lock/
# log/
# queue/
# web/removals.txt
projects / dak.git / log