From jan-oliver.wagner at intevation.de Thu Jun 5 15:03:12 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Thu, 5 Jun 2008 15:03:12 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? Message-ID: <200806051503.14288.jan-oliver.wagner@intevation.de> Hello, I am a bit worried about the slow uptake of the OpenVAS components in Debian. Currently openvas-libnasl is in the queue, but may get reviewed only 2 or 3 weeks from now. In case it gets rejected it will be probably another 4 weeks. Even if it gets accepted, openvas-server has to go the minimum 4 weeks. And then openvas-plugins. Wouldn't it make sense to add openvas-server and -plugins already to the list? Should I contact Debian guys to argue that a quicker uptake is important for lenny? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From timb at nth-dimension.org.uk Thu Jun 5 15:20:53 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Thu, 5 Jun 2008 14:20:53 +0100 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806051503.14288.jan-oliver.wagner@intevation.de> References: <200806051503.14288.jan-oliver.wagner@intevation.de> Message-ID: <200806051420.53963.timb@nth-dimension.org.uk> On Thursday 05 June 2008 14:03:12 Jan-Oliver Wagner wrote: > Hello, > > I am a bit worried about the slow uptake of the OpenVAS components in > Debian. > > Currently openvas-libnasl is in the queue, but may get reviewed only 2 or 3 > weeks from now. In case it gets rejected it will be probably another 4 > weeks. > Even if it gets accepted, openvas-server has to go the minimum 4 weeks. > And then openvas-plugins. > > Wouldn't it make sense to add openvas-server and -plugins already to the > list? openvas-server should be, but I don't think jfs has reviewed it yet. plugins is less critical since it will likely change frequently anyway. Of course it would be nice to get it in stable/volatile, but it's not such a concern. I'm not sure how best to approach the FTP masters about libnasl though. Cheers, Tim -- Tim Brown From jan-oliver.wagner at intevation.de Fri Jun 6 20:55:11 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Fri, 6 Jun 2008 20:55:11 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806051420.53963.timb@nth-dimension.org.uk> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806051420.53963.timb@nth-dimension.org.uk> Message-ID: <200806062055.13486.jan-oliver.wagner@intevation.de> On Thursday 05 June 2008 15:20, Tim Brown wrote: > On Thursday 05 June 2008 14:03:12 Jan-Oliver Wagner wrote: > > I am a bit worried about the slow uptake of the OpenVAS components in > > Debian. > > > > Currently openvas-libnasl is in the queue, but may get reviewed only 2 or > > 3 weeks from now. In case it gets rejected it will be probably another 4 > > weeks. > > Even if it gets accepted, openvas-server has to go the minimum 4 weeks. > > And then openvas-plugins. > > > > Wouldn't it make sense to add openvas-server and -plugins already to the > > list? > > openvas-server should be, but I don't think jfs has reviewed it yet. Javier: Could you have a look? > plugins is less critical since it will likely change frequently anyway. Of > course it would be nice to get it in stable/volatile, but it's not such a > concern. I'm not sure how best to approach the FTP masters about libnasl > though. Isn't openvas-plugins as important as openvas-server? This plugins package contains the nvt sync script and the some base C-implemented plugins. Indeed the contents of this one will outdate over time, but the sync script is able to retrieve any non-C plugin later on. So, better have openvas-plugins prepared and uploaded as soon as possible as well (1.0.1 just release :-) Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jan-oliver.wagner at intevation.de Wed Jun 11 09:21:40 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Wed, 11 Jun 2008 09:21:40 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806051503.14288.jan-oliver.wagner@intevation.de> References: <200806051503.14288.jan-oliver.wagner@intevation.de> Message-ID: <200806110921.44718.jan-oliver.wagner@intevation.de> On Donnerstag, 5. Juni 2008, Jan-Oliver Wagner wrote: > I am a bit worried about the slow uptake of the OpenVAS components in Debian. > > Currently openvas-libnasl is in the queue, but may get reviewed only 2 or 3 weeks from now. > In case it gets rejected it will be probably another 4 weeks. > Even if it gets accepted, openvas-server has to go the minimum 4 weeks. > And then openvas-plugins. > > Wouldn't it make sense to add openvas-server and -plugins already to the list? seems openvas-libnasl has been rejected, again. Tim, Javier: did you receive any rationale? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jan-oliver.wagner at intevation.de Wed Jun 11 09:28:38 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Wed, 11 Jun 2008 09:28:38 +0200 Subject: [Openvas-distro] [Openvas-devel] openSUSE 10.3 RPMs, a few comments & a suggestion In-Reply-To: References: <200806102035.07996.timb@nth-dimension.org.uk> Message-ID: <200806110928.42423.jan-oliver.wagner@intevation.de> Hello Stephan, (please not that we have an extra mailing list for packaging/distribution here: http://lists.wald.intevation.org/mailman/listinfo/openvas-distro. I am CCing to that list, to move this thread over there) On Mittwoch, 11. Juni 2008, Stephan Kleine wrote: > > > 1. I used the 10.2 src.rpms as base and just cleaned up the spec files > > and > > > added missing dependencies. The only needed patches were the $DESTDIR > > ones. > > > > Are the dependencies release specific or are we missing some? > > I don't think that they are release specific but more because the build root > is pretty much stripped down so it doesn't contain stuff which you might > consider normally available. E.g.: > > (your Requires vs. mine Requires) > * openvas-client: openssl-devel gtk2-devel gettext-devel gcc-c++ vs. > gtk2-devel openssl-devel > * openvas-libnasl: openvas-libraries-devel vs. bison gnutls-devel > libgcrypt-devel libgpgme-devel libpcap-devel openvas-libraries-devel > texlive-latex > * openvas-libraries: gnutls-devel vs. libpcap-devel gnutls-devel > * openvas-plugins: openvas-server-devel vs. gnutls-devel libpcap-devel > openvas-libraries-devel openvas-server-devel > * openvas-server: openvas-libnasl-devel vs. gnutls-devel libgcrypt-devel > libpcap-devel openvas-libnasl-devel openvas-libraries-devel I kept the dependencies to the minimum (trusting in subsequent dependencies), but if the OpenSUSE RPM-Spec policy wants to have it more explicit I am all OL with it. > The rest was just writing init & logrotate files for openvasd and general > cleanup in the spec files (e.g. install instead of mkdir & cp, macros > instead of commands, adding ldconfig et al to PreReq) and so on. We'd appreciate to if you could provide the spec file and all the patches. Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From bitdealer at gmail.com Wed Jun 11 16:10:36 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Wed, 11 Jun 2008 16:10:36 +0200 Subject: [Openvas-distro] [Openvas-devel] openSUSE 10.3 RPMs, a few comments & a suggestion Message-ID: My apologies for sending the initial mail to the wrong list. My .spec files are the following: openvas-libnasl: http://pastebin.ca/1044861 openvas-libraries: http://pastebin.ca/1044863 openvas-server: http://pastebin.ca/1044866 openvas-plugins: http://pastebin.ca/1044869 openvas-client: http://pastebin.ca/1044870 openvas-manual: http://pastebin.ca/1044872 The only applied patches where the ones inserting DESTDIR and the one from openvas-plugins. All of them are an exact copy of the ones contained in your 10.2 src.rpms. Regarding the certificate location: I had some time to think about this and putting them in /usr/com is wrong as well as my hack with "--sharedstatedir=%{_localstatedir}/lib". The problem is that openvas-mkcert gets configured during build to put the certificates into the sharedstatedir (which is /usr/com) instead of putting them in either the sysconfdir (/etc) or the localstatedir (/var) - personally I would vote for /etc since this is where ssh & apache store their certificates too. So this is a bug which needs to be fixed until Tim is right and it already is fixed in trunk (and yes, I applied the patch contained in the 10.2 src.rpm but it still creates the directories in sharedstatedir (line 62-64 in said patch)). Regarding the logo: My suggestion would be to just take that circle / sun left of the O in OpenVAS. I had done it myself but, to look good, it needs a transparent background and with my crappy Gimp skills it would take ages and look bad but if the person who created the logo still has an editable one which can be saved with transparent background it should be a matter of a few minutes. Regarding the manual location: Since its only about the client I would put it into the clients doc directory. IMHO a configurable location (as in "%_make manualDirectory=/where/ever) during the build process instead of an hard coded location would be the best since it would offer the most flexibility so everyone is happy. best regards Stephan -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080611/b570f921/attachment.html From timb at nth-dimension.org.uk Thu Jun 12 12:33:49 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Thu, 12 Jun 2008 11:33:49 +0100 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: References: Message-ID: <200806121133.49945.timb@nth-dimension.org.uk> All, I got the following rejection: > unfortunately there seems to be copyright and licensing > information missing (and a problem as well) that make > this packages still a candidate for REJECTion: > - one of the files has a 4-clause-BSD as a license, > ? that is GPL-incompatible (= BAD for our purposes). > - you are missing a copyright notice at least for the > ? Regents of the U of Califonia. These both relate to nasl/lfind.c. Looking around, sudo at least has the same code under the 3 clause variation of the BSD license. I am going to replace ours with theirs. > - for "see PKT_LICENSE for the license details" in the > ? header you should at least explain that we do not > ? ship the file and reproduce (or point to if it's > ? a common one) the license. Does anyone have a copy of this file? We appear to have lost it. > On a minor note, it would be good if you could indicate > that the OpenSSL-exception does not apply to all packages > more clearly (e.g. by writing something to this end just > above it and indenting). I will make this change. Cheers, Tim -- Tim Brown From jan-oliver.wagner at intevation.de Thu Jun 12 15:09:34 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Thu, 12 Jun 2008 15:09:34 +0200 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: <200806121133.49945.timb@nth-dimension.org.uk> References: <200806121133.49945.timb@nth-dimension.org.uk> Message-ID: <200806121509.36495.jan-oliver.wagner@intevation.de> On Donnerstag, 12. Juni 2008, Tim Brown wrote: > > unfortunately there seems to be copyright and licensing > > information missing (and a problem as well) that make > > this packages still a candidate for REJECTion: > > - one of the files has a 4-clause-BSD as a license, > > ? that is GPL-incompatible (= BAD for our purposes). > > - you are missing a copyright notice at least for the > > ? Regents of the U of Califonia. > > These both relate to nasl/lfind.c. Looking around, sudo at least has the same > code under the 3 clause variation of the BSD license. I am going to replace > ours with theirs. good. > > - for "see PKT_LICENSE for the license details" in the > > ? header you should at least explain that we do not > > ? ship the file and reproduce (or point to if it's > > ? a common one) the license. > > Does anyone have a copy of this file? We appear to have lost it. No, Nessus has lost it. Or never included it. Well, I did not check any version of Nessus' libnasl, but in the ones I looked at, there is no such file. The file isn't really big nor clever. I could easily write it anew. But since it is so simple if would look pretty much the same and Renaud probably will accuse me of violating his copyright (such as "you have only changed 3 lines, this does not justify a copyright and license change"). Goolge finds this cite "NASL comes from a private project called "pkt_forge", which was written in late 1998 by Renaud Deraison and which was an interactive shell to forge and send raw IP packets". and it appears to me it is a forgotten left-over. So, how to solve the problem? Perhaps add such a text that explains the situation: " This phrase citing the PKT_LICENSE was already present in Nessus and the file not shipped with Nessus either. The PKT_LICENSE was not found via Internet search engines nor is found the software "pkt_forge" which seems to be origin. In fact it is said that pkt_forge formed a part of NASL. Thus we do believe it is a accidental left-over, but we do not have a clearifing statement by the author. " > > On a minor note, it would be good if you could indicate > > that the OpenSSL-exception does not apply to all packages > > more clearly (e.g. by writing something to this end just > > above it and indenting). > > I will make this change. thanks! Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From timb at nth-dimension.org.uk Thu Jun 12 17:21:59 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Thu, 12 Jun 2008 16:21:59 +0100 Subject: [Openvas-distro] [Openvas-discuss] OpenVAS is in FreeBSD ports tree In-Reply-To: <20080608180815.GA1117@x60.i.trombik.org> References: <20080608180815.GA1117@x60.i.trombik.org> Message-ID: <200806121621.59614.timb@nth-dimension.org.uk> On Sunday 08 June 2008 19:08:16 Tomoyuki Sakurai wrote: > OpenVAS suite is now available in FreeBSD ports tree. > http://www.freshports.org/security/openvas-server Hey thats great. If you want to push your patches back to us, we'll see that they get into trunk (where applicable). I've moved this conversation to openvas-distro as it's the designated channel for distribution chatter. Cheers, Tim -- Tim Brown From bitdealer at gmail.com Thu Jun 12 17:42:40 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Thu, 12 Jun 2008 17:42:40 +0200 Subject: [Openvas-distro] openSUSE repository Message-ID: Hello, I created a new repository which should contain rpms for 10.2, 10.3 and 11.0 and is accessible at http://download.opensuse.org/repositories/home:/bitshuffler:/openvas/ The current state is: - 10.2: everything except the manual builds. See http://pastebin.ca/1046058 for the 32bit log (the 64 one fails for the same reason). - 10.3: everything builds & works (I only run 10.3 so I can't test other versions) - 11.0: openvas-server fails and therefore I don't know if -plugins would build. See http://pastebin.ca/1046062 for the full log (64bit fails for the same reason). The error is: In function 'open', inlined from 'detached_new_session' at detached.c:419: /usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode' declared with attribute error: open with O_CREAT in second argument needs 3 arguments The reason for this seems to be that 11.0 contains glibc-devel-2.8 while 10.3 contains glibc-devel-2.6. I can't help you with that since I lack the knowledge to dig into the source but I would happily apply a suggested patch or give you access to that repository so you can try on your own (the later would be preferred since it would free me from the error reporting middleman role). Don't be afraid it s really easy ;) Last but not least I would like to ask which list is the correct one to post bugs / "it doesn't build cause of ..." reports? best regards Stephan PS: Note that rpmlint found quite a few errors in the spec files I posted yesterday. For an updated version see the https://build.opensuse.org/project/show?project=home%3Abitshuffler%3Aopenvas (you need an account) but please keep in mind that it is kinda work in progress. From waja at cyconet.org Fri Jun 13 12:46:33 2008 From: waja at cyconet.org (Jan Wagner) Date: Fri, 13 Jun 2008 12:46:33 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806110921.44718.jan-oliver.wagner@intevation.de> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806110921.44718.jan-oliver.wagner@intevation.de> Message-ID: <200806131246.37319.waja@cyconet.org> Hi there, On Wednesday 11 June 2008 09:21, you wrote: > On Donnerstag, 5. Juni 2008, Jan-Oliver Wagner wrote: > > I am a bit worried about the slow uptake of the OpenVAS components in > > Debian. > > > > Currently openvas-libnasl is in the queue, but may get reviewed only 2 or > > 3 weeks from now. In case it gets rejected it will be probably another 4 > > weeks. > > Even if it gets accepted, openvas-server has to go the minimum 4 weeks. > > And then openvas-plugins. > > > > Wouldn't it make sense to add openvas-server and -plugins already to the > > list? > > seems openvas-libnasl has been rejected, again. > > Tim, Javier: did you receive any rationale? is there anywhere the recent debian/ for openvas-libnasl, openvas-server and openvas-plugins available? At least the one for openvas-libnasl is horrible broken and outdated. Thanks and with kind regards, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080613/ee7569dd/attachment.pgp From timb at nth-dimension.org.uk Fri Jun 13 18:17:11 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Fri, 13 Jun 2008 17:17:11 +0100 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806131246.37319.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806110921.44718.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> Message-ID: <200806131717.11886.timb@nth-dimension.org.uk> On Friday 13 June 2008 11:46:33 Jan Wagner wrote: > is there anywhere the recent debian/ for openvas-libnasl, openvas-server > and openvas-plugins available? At least the one for openvas-libnasl is > horrible broken and outdated. > > Thanks and with kind regards, Jan. Jan(2) packaging/debian/* is up to date for each of them is up to date in trunk. Barring the latest round of updates for openvas-libnasl which I will have to commit in a moment. I'll also be dropping it onto mentors tonight. Really, I should work on the packaging in the tagged release, but in practice I take packaging/debian from trunk and apply it to the downloaded tarball. As a side note, openvas-plugins does not have a packaging/debian just yet. Just for the record, I'm currently going through DD and jfs and I jointly maintain the packages. Tim (2) This will be a cause for confusion - two Jan Wagner's on the same list ;) -- Tim Brown From waja at cyconet.org Fri Jun 13 23:11:35 2008 From: waja at cyconet.org (Jan Wagner) Date: Fri, 13 Jun 2008 23:11:35 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806131717.11886.timb@nth-dimension.org.uk> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> <200806131717.11886.timb@nth-dimension.org.uk> Message-ID: <200806132311.39950.waja@cyconet.org> Hi Tim On Friday 13 June 2008 18:17, Tim Brown wrote: > packaging/debian/* is up to date for each of them is up to date in trunk. > Barring the latest round of updates for openvas-libnasl which I will have > to commit in a moment. I'll also be dropping it onto mentors tonight. > Really, I should work on the packaging in the tagged release, but in > practice I take packaging/debian from trunk and apply it to the downloaded > tarball. As a side note, openvas-plugins does not have a packaging/debian > just yet. Just for the record, I'm currently going through DD and jfs and > I jointly maintain the packages. going through DD? You are talking about NM? Have fun with P&P1! :) Right out of https://svn.wald.intevation.org/svn/openvas/trunk/openvas-libnasl/packaging/debian/control: Build-Depends: debhelper (>= 5), autotools-dev, libopenvas1-dev, libgpgme11-dev Which seems not enought. At least on etch the follwoing is needed: Build-Depends: debhelper (>= 5), autotools-dev, libopenvas1-dev, libgpgme11-dev (>= 1.1.5), bison, libpcap0.8-dev, libgcrypt11-dev, libgnutls-dev building the package in a etch chroot leads me to the following error: make[2]: Leaving directory `/home/waja/openvas-libnasl-1.0.0/nasl' test -d /usr/include/openvas || /usr/bin/install -c -d -m 755 /usr/include/openvas /usr/bin/install -c -c -m 0444 include/nasl.h /usr/include/openvas /usr/bin/install: cannot create regular file `/usr/include/openvas/nasl.h': Permission denied make[1]: *** [install] Error 1 make[1]: Leaving directory `/home/waja/openvas-libnasl-1.0.0' make: *** [install] Error 2 debuild: fatal error at line 1228: fakeroot debian/rules binary failed Looking into debian/rules: $(MAKE) install DESTDIR=$(tmp)/ It seems "DESTDIR=$(tmp)/" has no effect and it's tried to install into /. I didn't looked deeper into the issue, but maybe I did anything wrong? 1) download openvas-libnasl-1.0.0.tar.gz 2) unzip it 3) fetch https://svn.wald.intevation.org/svn/openvas/trunk/openvas-libnasl/packaging/debian/ into the created dir 4a) readjust Build-Depends 4) debuild -sa Thanks and with kind regards, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080613/96fb97c3/attachment.pgp From waja at cyconet.org Fri Jun 13 23:32:04 2008 From: waja at cyconet.org (Jan Wagner) Date: Fri, 13 Jun 2008 23:32:04 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806132311.39950.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806131717.11886.timb@nth-dimension.org.uk> <200806132311.39950.waja@cyconet.org> Message-ID: <200806132332.09762.waja@cyconet.org> On Friday 13 June 2008 23:11, Jan Wagner wrote: > going through DD? You are talking about NM? Have fun with P&P1! :) While we are at it, maybe you did read http://people.debian.org/~mpalmer/debian-mentors_FAQ.html. It would be nice, if you could fill for every package you (intend to) work on. So you can maybe get help. Even if you didn't fill an ITP and anybody else do, he would have the privilege to maintain this package into debian. So you are encouraged to fill an ITP, which has many other positive effects[1]. Thanks and with kind regards, Jan. [1] http://www.debian.org/doc/developers-reference/ch-pkgs.en.html#s-newpackage -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080613/c55cdf0c/attachment.pgp From waja at cyconet.org Mon Jun 16 20:56:06 2008 From: waja at cyconet.org (Jan Wagner) Date: Mon, 16 Jun 2008 20:56:06 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806131246.37319.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806110921.44718.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> Message-ID: <200806162056.10071.waja@cyconet.org> Hi there, On Friday 13 June 2008 12:46, Jan Wagner wrote: > is there anywhere the recent debian/ for openvas-libnasl, openvas-server > and openvas-plugins available? At least the one for openvas-libnasl is > horrible broken and outdated. at following changes against latest svn was needed to compile it under etch. With kind regards, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: nasl_debian.diff Type: text/x-diff Size: 1052 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080616/61032ef9/nasl_debian.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080616/61032ef9/attachment.pgp From jan-oliver.wagner at intevation.de Mon Jun 16 22:24:31 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Mon, 16 Jun 2008 22:24:31 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806132311.39950.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806131717.11886.timb@nth-dimension.org.uk> <200806132311.39950.waja@cyconet.org> Message-ID: <200806162224.34770.jan-oliver.wagner@intevation.de> On Friday 13 June 2008 23:11, Jan Wagner wrote: >... > $(MAKE) install DESTDIR=$(tmp)/ > > It seems "DESTDIR=$(tmp)/" has no effect and it's tried to install into /. > > I didn't looked deeper into the issue, but maybe I did anything wrong? > > 1) download openvas-libnasl-1.0.0.tar.gz > 2) unzip it > 3) fetch > https://svn.wald.intevation.org/svn/openvas/trunk/openvas-libnasl/packaging >/debian/ into the created dir > 4a) readjust Build-Depends > 4) debuild -sa unless you do the DESTDIR patches on your own, it won't work with 1.0.0 as the DESTDIR fix was only in later done in SVN. The debian/ files appear to assume the already patched version, i.e. the SVN current. Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From waja at cyconet.org Mon Jun 16 22:54:15 2008 From: waja at cyconet.org (Jan Wagner) Date: Mon, 16 Jun 2008 22:54:15 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806131246.37319.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806110921.44718.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> Message-ID: <200806162254.19367.waja@cyconet.org> Hi, On Friday 13 June 2008 12:46, Jan Wagner wrote: > is there anywhere the recent debian/ for openvas-libnasl, openvas-server > and openvas-plugins available? At least the one for openvas-libnasl is > horrible broken and outdated. compiling openvas-server in a clean (etch-) chroot required the following changes. With kind regards, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: openvas-server_debian.diff Type: text/x-diff Size: 623 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080616/fdfaaae7/openvas-server_debian.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080616/fdfaaae7/attachment.pgp From waja at cyconet.org Mon Jun 16 22:57:15 2008 From: waja at cyconet.org (Jan Wagner) Date: Mon, 16 Jun 2008 22:57:15 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806162224.34770.jan-oliver.wagner@intevation.de> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806132311.39950.waja@cyconet.org> <200806162224.34770.jan-oliver.wagner@intevation.de> Message-ID: <200806162257.23786.waja@cyconet.org> On Monday 16 June 2008 22:24, Jan-Oliver Wagner wrote: > unless you do the DESTDIR patches on your own, it won't work with 1.0.0 > as the DESTDIR fix was only in later done in SVN. > > The debian/ files appear to assume the already patched version, i.e. the > SVN current. Okay .. sounds reasonable .. did checked svn source. But build depencies needs to be modified anyways since the package wouldn't build on the debian buildds without correct once. With kind regards, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080616/a334f1a9/attachment.pgp From jan-oliver.wagner at intevation.de Tue Jun 17 00:27:39 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Tue, 17 Jun 2008 00:27:39 +0200 Subject: [Openvas-distro] openSUSE repository In-Reply-To: References: Message-ID: <200806170027.46267.jan-oliver.wagner@intevation.de> Hello Stephan, On Thursday 12 June 2008 17:42, Stephan Kleine wrote: > I created a new repository which should contain rpms for 10.2, 10.3 > and 11.0 and is accessible at > http://download.opensuse.org/repositories/home:/bitshuffler:/openvas/ great. > The current state is: > > - 10.2: everything except the manual builds. See > http://pastebin.ca/1046058 for the 32bit log (the 64 one fails for the > same reason). the manual causes some headache (not only the build technology but also the authorship). I am prepared to dump it and start something completely new. > - 10.3: everything builds & works (I only run 10.3 so I can't test > other versions) nice ;-) Could give a quick howto for getting OpenVAS onto ones OpenSUSE 10.3. I would like to add this to http://www.openvas.org/openvas-client.html and http://www.openvas.org/openvas-server.html > - 11.0: openvas-server fails and therefore I don't know if -plugins > would build. See http://pastebin.ca/1046062 for the full log (64bit > fails for the same reason). The error is: > > > In function 'open', > inlined from 'detached_new_session' at detached.c:419: > /usr/include/bits/fcntl2.h:51: error: call to '__open_missing_mode' > declared with attribute error: open with O_CREAT in second argument > needs 3 arguments > > > The reason for this seems to be that 11.0 contains glibc-devel-2.8 > while 10.3 contains glibc-devel-2.6. I can't help you with that since > I lack the knowledge to dig into the source but I would happily apply > a suggested patch or give you access to that repository so you can try > on your own (the later would be preferred since it would free me from > the error reporting middleman role). Don't be afraid it s really easy > ;) my guess is that this solves the problem: Index: detached.c =================================================================== --- detached.c (revision 911) +++ detached.c (working copy) @@ -417,7 +417,7 @@ char * target; { char * fname = detached_fname(globals); - int f = open(fname, O_CREAT|O_WRONLY|O_TRUNC); + int f = open(fname, O_CREAT|O_WRONLY|O_TRUNC, S_IRUSR|S_IWUSR); if(f >= 0) { write(f, target, strlen(target)); In fact, it is already wrong with glibc 2.6 to not specify mode if O_CREAT is used. See the man page. But appararently it tolerates the wrong usage. Since I do not have a glibc 2.8 system ready at hand, can you test this patch? > Last but not least I would like to ask which list is the correct one > to post bugs / "it doesn't build cause of ..." reports? If it happened while trying to get some packaging working somewhere: yes. However, openvas-devel is also a good point where bugs can be discussed. (The problem is that you sometimes do not know whether it is a problem related to a specific system or a plain general porblem). Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jan-oliver.wagner at intevation.de Tue Jun 17 22:16:21 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Tue, 17 Jun 2008 22:16:21 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806162254.19367.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> <200806162254.19367.waja@cyconet.org> Message-ID: <200806172216.25220.jan-oliver.wagner@intevation.de> Jan, thanks for the patch. Tim, Javier: I do not date to patch in this realm. Can you merge this into the Debian stuff? Best Jan On Monday 16 June 2008 22:54, Jan Wagner wrote: > Hi, > > On Friday 13 June 2008 12:46, Jan Wagner wrote: > > is there anywhere the recent debian/ for openvas-libnasl, openvas-server > > and openvas-plugins available? At least the one for openvas-libnasl is > > horrible broken and outdated. > > compiling openvas-server in a clean (etch-) chroot required the following > changes. > > With kind regards, Jan. -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From bitdealer at gmail.com Tue Jun 17 22:25:32 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Tue, 17 Jun 2008 22:25:32 +0200 Subject: [Openvas-distro] openSUSE repository Message-ID: Moin Jan, I applied the patch you suggested and now openvas-server builds just fine for 11.0 as well - although I haven't tested (as in run on 11.0) it yet. Regarding openvas-plugins rpmlint complained that /usr/lib/openvas/plugins/ssh_func.inc and /usr/lib/openvas/plugins/ss_ssh_func.inc (scripts/ss_ssh_func.inc and scripts/ssh_func.inc in the soure archive) are identical so you might want to get rid of one of them. Regarding an installation How-To I would just drop a line like: There is an _unofficial_ repository containing RPMs for 10.2, 10.3 and 11.0 at http://download.opensuse.org/repositories/home:/bitshuffler:/openvas/ And if you think that docs how to add a repository & use it are necessary as well: See http://en.opensuse.org/Add_Package_Repositories_to_YaST for how to add a repository and http://opensuse-community.org/Installing_Software for how to install Software with Yast. But mostly the repository URL is pretty self explanatory since those repos are pretty known. One question remains: does openvas-server rely in any way upon /usr/bin/openvas-nasl? I'm asking because I had to split up openvas-libnasl into a main package (containing openvas-nasl and the docs) and a sub package containing the shared library and therefore only the sub package is automatically added to the openvas-sersers "Requires". best regards Stephan From timb at nth-dimension.org.uk Thu Jun 19 01:40:55 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Thu, 19 Jun 2008 00:40:55 +0100 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806162254.19367.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> <200806162254.19367.waja@cyconet.org> Message-ID: <200806190040.55841.timb@nth-dimension.org.uk> On Monday 16 June 2008 21:54:15 Jan Wagner wrote: > compiling openvas-server in a clean (etch-) chroot required the following > changes. Merged into trunk. Tim -- Tim Brown From jan-oliver.wagner at intevation.de Fri Jun 20 21:15:10 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Fri, 20 Jun 2008 21:15:10 +0200 Subject: [Openvas-distro] openSUSE repository In-Reply-To: References: Message-ID: <200806202115.13970.jan-oliver.wagner@intevation.de> Hi Stephan, On Tuesday 17 June 2008 22:25, Stephan Kleine wrote: > Regarding openvas-plugins rpmlint complained that > /usr/lib/openvas/plugins/ssh_func.inc and > /usr/lib/openvas/plugins/ss_ssh_func.inc (scripts/ss_ssh_func.inc and > scripts/ssh_func.inc in the soure archive) are identical so you might > want to get rid of one of them. that is currently a concenience to cover the debian local security checks contributed by Security Space. Indeed eventually we should remove one of them. > Regarding an installation How-To I would just drop a line like: > There is an _unofficial_ repository containing RPMs for 10.2, 10.3 and > 11.0 at > http://download.opensuse.org/repositories/home:/bitshuffler:/openvas/ > > And if you think that docs how to add a repository & use it are > necessary as well: > See http://en.opensuse.org/Add_Package_Repositories_to_YaST for how to > add a repository and http://opensuse-community.org/Installing_Software > for how to install Software with Yast. thanks. I just added this to the respective pages for server and client. > One question remains: does openvas-server rely in any way upon > /usr/bin/openvas-nasl? I'm asking because I had to split up > openvas-libnasl into a main package (containing openvas-nasl and the > docs) and a sub package containing the shared library and therefore > only the sub package is automatically added to the openvas-sersers > "Requires". openvas-nasl is a standalone tool basically for debugging. At least to my understanding. So it might fit best in the -devel package? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From bitdealer at gmail.com Sun Jun 22 21:40:11 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Sun, 22 Jun 2008 21:40:11 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages Message-ID: Moin, since one of the reasons I was advertising the openSUSE build service to you was that it enables you to build packages for different distributions from one spec file / source package and I had a bit free time in the last days I gave it a try. The current state is: * CentOS & RHEL don't have a gpgme package * SLE <= SP2 provides only gpgme 1.0.3 which seems to old * Mandriva 2007 fails. Logs are http://pastebin.ca/1053047 (i586) and http://pastebin.ca/1053048 (x86_64) * Mandriva 2008 builds * Fedora 8 builds * Fedora 9 builds partially (i586 builds but x86_64 fails: http://pastebin.ca/1053051) * the manual fails for all except the the most recent openSUSE versions and even there sometimes but I wont care since it's imho not worth the trouble & you intend to rewrite it anyways. And please, do not use lyx but plain latex if you rewrite it ;) So please have a look at the logs of the failed builds to see if you can come up with a patch to get it build for Mandriva 2007 & Fedora 9 (x86_64) as well. Also I still would happily add some of you as maintainers so you can try on your own. Also note that those packages are entirely untested since I don't use any of those distributions. If you do, try them out and test them. best regards Stephan From jan-oliver.wagner at intevation.de Tue Jun 24 11:50:13 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Tue, 24 Jun 2008 11:50:13 +0200 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: <200806121133.49945.timb@nth-dimension.org.uk> References: <200806121133.49945.timb@nth-dimension.org.uk> Message-ID: <200806241150.16640.jan-oliver.wagner@intevation.de> Hi Tim, have you resubmitted openvas-libnasl? What about openvas-server and openvas-plugins? Lenny is approaching and OpenVAS won't be in Debian for a couple of years if we do not make it. Best Jan On Donnerstag, 12. Juni 2008, Tim Brown wrote: > I got the following rejection: > > > unfortunately there seems to be copyright and licensing > > information missing (and a problem as well) that make > > this packages still a candidate for REJECTion: > > - one of the files has a 4-clause-BSD as a license, > > ? that is GPL-incompatible (= BAD for our purposes). > > - you are missing a copyright notice at least for the > > ? Regents of the U of Califonia. > > These both relate to nasl/lfind.c. Looking around, sudo at least has the same > code under the 3 clause variation of the BSD license. I am going to replace > ours with theirs. > > > - for "see PKT_LICENSE for the license details" in the > > ? header you should at least explain that we do not > > ? ship the file and reproduce (or point to if it's > > ? a common one) the license. > > Does anyone have a copy of this file? We appear to have lost it. > > > On a minor note, it would be good if you could indicate > > that the OpenSSL-exception does not apply to all packages > > more clearly (e.g. by writing something to this end just > > above it and indenting). > > I will make this change. -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From timb at nth-dimension.org.uk Tue Jun 24 12:16:28 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Tue, 24 Jun 2008 11:16:28 +0100 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: <200806241150.16640.jan-oliver.wagner@intevation.de> References: <200806121133.49945.timb@nth-dimension.org.uk> <200806241150.16640.jan-oliver.wagner@intevation.de> Message-ID: <200806241116.28990.timb@nth-dimension.org.uk> On Tuesday 24 June 2008 10:50:13 Jan-Oliver Wagner wrote: > Hi Tim, > > have you resubmitted openvas-libnasl? > > What about openvas-server and openvas-plugins? > > Lenny is approaching and OpenVAS won't be in Debian > for a couple of years if we do not make it. > openvas-libnasl has been resubmitted to mentors, as has openvas-server. I don't think jfs has uploaded openvas-libnasl or looked at openvas-server yet though. Cheers, Tim -- Tim Brown From waja at cyconet.org Tue Jun 24 12:30:54 2008 From: waja at cyconet.org (Jan Wagner) Date: Tue, 24 Jun 2008 12:30:54 +0200 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: <200806241116.28990.timb@nth-dimension.org.uk> References: <200806241150.16640.jan-oliver.wagner@intevation.de> <200806241116.28990.timb@nth-dimension.org.uk> Message-ID: <200806241231.01544.waja@cyconet.org> Hi Tim, On Tuesday 24 June 2008 12:16, Tim Brown wrote: > openvas-libnasl has been resubmitted to mentors, as has openvas-server. I > don't think jfs has uploaded openvas-libnasl or looked at openvas-server > yet though. Can you provide me the links to the source packages of libnasl and server you "resubmitted to mentors"? Thanks, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080624/110600ce/attachment.pgp From timb at nth-dimension.org.uk Tue Jun 24 13:09:00 2008 From: timb at nth-dimension.org.uk (Tim Brown) Date: Tue, 24 Jun 2008 12:09:00 +0100 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: <200806241231.01544.waja@cyconet.org> References: <200806241116.28990.timb@nth-dimension.org.uk> <200806241231.01544.waja@cyconet.org> Message-ID: <200806241209.01060.timb@nth-dimension.org.uk> On Tuesday 24 June 2008 11:30:54 Jan Wagner wrote: > Hi Tim, > > On Tuesday 24 June 2008 12:16, Tim Brown wrote: > > openvas-libnasl has been resubmitted to mentors, as has openvas-server. > > I don't think jfs has uploaded openvas-libnasl or looked at > > openvas-server yet though. > > Can you provide me the links to the source packages of libnasl and server > you "resubmitted to mentors"? Hi Jan, http://mentors.debian.net/debian/pool/main/o/openvas-libnasl/openvas-libnasl_1.0.0-6.dsc, the only hold up for this has been some toing and froing regarding debian/copyright, which hopefully I have now resolved. Regarding openvas-server, there isn't actually a build on mentors ATM, as I still have a number of new lintian problems to resolve. Once I have these nailed I'll commit to trunk and build a package for mentors. Cheers, Tim -- Tim Brown From jan-oliver.wagner at intevation.de Thu Jun 26 16:50:22 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Thu, 26 Jun 2008 16:50:22 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: References: Message-ID: <200806261650.24962.jan-oliver.wagner@intevation.de> Hello Stephan, On Sonntag, 22. Juni 2008, Stephan Kleine wrote: > since one of the reasons I was advertising the openSUSE build service > to you was that it enables you to build packages for different > distributions from one spec file / source package and I had a bit free > time in the last days I gave it a try. > > The current state is: > > * CentOS & RHEL don't have a gpgme package interesting. > * SLE <= SP2 provides only gpgme 1.0.3 which seems to old You mean SLES9? > * Mandriva 2007 fails. Logs are http://pastebin.ca/1053047 (i586) and not sure why it does not find the .o files. It reads like the .o files are created. Really stange. I never oberved such on one of my tests systems. > http://pastebin.ca/1053048 (x86_64) not sure about this. Seems I should grab one of our 64bit machines and play around there. > * Mandriva 2008 builds > * Fedora 8 builds good :-) > * Fedora 9 builds partially (i586 builds but x86_64 fails: > http://pastebin.ca/1053051) more 64bit issues. Hm. > * the manual fails for all except the the most recent openSUSE > versions and even there sometimes but I wont care since it's imho not > worth the trouble & you intend to rewrite it anyways. And please, do > not use lyx but plain latex if you rewrite it ;) plain latex is currently planned :-) > So please have a look at the logs of the failed builds to see if you > can come up with a patch to get it build for Mandriva 2007 & Fedora 9 > (x86_64) as well. Also I still would happily add some of you as > maintainers so you can try on your own. > > Also note that those packages are entirely untested since I don't use > any of those distributions. If you do, try them out and test them. I think it is indeed important to have such a system directly under your hands to find out about the reported problems. Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From bitdealer at gmail.com Thu Jun 26 21:07:10 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Thu, 26 Jun 2008 21:07:10 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: <200806261650.24962.jan-oliver.wagner@intevation.de> References: <200806261650.24962.jan-oliver.wagner@intevation.de> Message-ID: Moin Jan, >> * SLE <= SP2 provides only gpgme 1.0.3 which seems to old > > You mean SLES9? I haven't looked at SLE9 but SLE10 including SP2 contains only gpgme 1.0.3 (iirc the build service contains SLES but it should be the same for SLED). >> * Mandriva 2007 fails. [...] > not sure about this. Seems I should grab one of our 64bit machines and > play around there. This would be great. For your reference, the used spec file, patches, ... can be found at https://build.opensuse.org/project/show?project=home%3Abitshuffler%3Aopenvas >> * Fedora 9 builds partially (i586 builds but x86_64 fails: >> http://pastebin.ca/1053051) > > more 64bit issues. Hm. Fedora 9 x86_64 builds now too thanks to Ales' patches which he sent to openvas-devel. (fyi: here "libopenvas-config --cflags" returns "-I/usr/include/openvas" which is correct for our packages / configuration) >> * the manual fails for all except the the most recent openSUSE >> versions and even there sometimes but I wont care since it's imho not >> worth the trouble & you intend to rewrite it anyways. And please, do >> not use lyx but plain latex if you rewrite it ;) > > plain latex is currently planned :-) Great to hear ;) best regards Stephan From jan-oliver.wagner at intevation.de Thu Jun 26 22:36:00 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Thu, 26 Jun 2008 22:36:00 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: References: <200806261650.24962.jan-oliver.wagner@intevation.de> Message-ID: <200806262236.04946.jan-oliver.wagner@intevation.de> On Thursday 26 June 2008 21:07, Stephan Kleine wrote: > >> * Fedora 9 builds partially (i586 builds but x86_64 fails: > >> http://pastebin.ca/1053051) > > > > more 64bit issues. Hm. > > Fedora 9 x86_64 builds now too thanks to Ales' patches which he sent > to openvas-devel. > (fyi: here "libopenvas-config --cflags" returns > "-I/usr/include/openvas" which is correct for our packages / > configuration) does it still if you do apply any prefix during configuration? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From bitdealer at gmail.com Fri Jun 27 03:11:38 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Fri, 27 Jun 2008 03:11:38 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: <200806262236.04946.jan-oliver.wagner@intevation.de> References: <200806261650.24962.jan-oliver.wagner@intevation.de> <200806262236.04946.jan-oliver.wagner@intevation.de> Message-ID: On Thu, Jun 26, 2008 at 10:36 PM, Jan-Oliver Wagner wrote: > On Thursday 26 June 2008 21:07, Stephan Kleine wrote: >> >> * Fedora 9 builds partially (i586 builds but x86_64 fails: >> >> http://pastebin.ca/1053051) >> > >> > more 64bit issues. Hm. >> >> Fedora 9 x86_64 builds now too thanks to Ales' patches which he sent >> to openvas-devel. >> (fyi: here "libopenvas-config --cflags" returns >> "-I/usr/include/openvas" which is correct for our packages / >> configuration) > > does it still if you do apply any prefix during configuration? If I compile it with "configure --prefix=/home/foo/usr" and Ales' patches "/home/foo/usr/bin/libopenvas-config --cflags" returns "-I/include/openvas" while the same configure call returns "-I/home/foo/usr/include/openvas" without his patches. On the other hand, if I call configure with the parameters to which %configure expands but always adapt them to reflect the new prefix - e.g.: "./configure --host=i686-suse-linux-gnu --build=i686-suse-linux-gnu --target=i586-suse-linux --program-prefix= --prefix=/home/foo/usr --exec-prefix=/home/foo/usr --bindir=/ho me/foo/usr/bin --sbindir=/home/foo/usr/sbin --sysconfdir=/home/foo/etc --datadir=/home/foo/usr/share --includedir=/home/foo/usr/include --libdir=/home/foo/usr/lib --libexecdir=/home/foo/usr/lib --localstatedir=/home/foo/var --sharedstatedir=/home/foo/usr/com --mandir=/home/foo/usr/share/man --infodir=/home/foo/usr/share/info --disable-static" - then "/home/foo/usr/bin/libopenvas-config --cflags" returns the correct stuff "-I/home/foo/usr/include/openvas" (with Ales' patches applied). Also, according to "configure --help", the includedir normally should get prefixed with PREFIX (for configure --prefix=PREFIX) automatically which is not the case here. So there is definitely something going wrong here and, as it works for other projects, my first guess would be that it is openvas specific - e.g. you overwrite / set it manually somewhere else - but I don't know much about this stuff so it's more guessing & stabbing in the dark. best regards Stephan PS: Ales I added you as CC since you probably know loads more about this than me. From jan-oliver.wagner at intevation.de Fri Jun 27 11:55:58 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Fri, 27 Jun 2008 11:55:58 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: References: <200806262236.04946.jan-oliver.wagner@intevation.de> Message-ID: <200806271156.01334.jan-oliver.wagner@intevation.de> On Freitag, 27. Juni 2008, Stephan Kleine wrote: > On Thu, Jun 26, 2008 at 10:36 PM, Jan-Oliver Wagner > So there is definitely something going wrong here and, as it works for > other projects, my first guess would be that it is openvas specific - > e.g. you overwrite / set it manually somewhere else - but I don't know > much about this stuff so it's more guessing & stabbing in the dark. this patch solves it: Index: libopenvas-config.in =================================================================== --- libopenvas-config.in (Revision 971) +++ libopenvas-config.in (Arbeitskopie) @@ -27,9 +27,13 @@ # it under the terms of the GNU General Public License version 2, # as published by the Free Software Foundation -PREFIX=@prefix@ -LIBDIR=$PREFIX/lib -INCLUDEDIR=$PREFIX/include +# these two are necessary to suffice the replacements +# for libdir and includedir +prefix=@prefix@ +exec_prefix=@exec_prefix@ + +LIBDIR=@libdir@ +INCLUDEDIR=@includedir@ VERSION=@version@ EXTRA="@EXTRA@ @llib@" EGDPATH="@egdpath@" -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From bitdealer at gmail.com Fri Jun 27 15:19:40 2008 From: bitdealer at gmail.com (Stephan Kleine) Date: Fri, 27 Jun 2008 15:19:40 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: <200806271156.01334.jan-oliver.wagner@intevation.de> References: <200806262236.04946.jan-oliver.wagner@intevation.de> <200806271156.01334.jan-oliver.wagner@intevation.de> Message-ID: Moin, I just wanted to confirm that the changed patch solves it here too. best regards Stephan From waja at cyconet.org Fri Jun 27 18:38:42 2008 From: waja at cyconet.org (Jan Wagner) Date: Fri, 27 Jun 2008 18:38:42 +0200 Subject: [Openvas-distro] Debian packaging: how to accelerate uptake? In-Reply-To: <200806162254.19367.waja@cyconet.org> References: <200806051503.14288.jan-oliver.wagner@intevation.de> <200806131246.37319.waja@cyconet.org> <200806162254.19367.waja@cyconet.org> Message-ID: <200806271838.45925.waja@cyconet.org> Hi, On Monday 16 June 2008 22:54, Jan Wagner wrote: > compiling openvas-server in a clean (etch-) chroot required the following > changes. I did split out a openvas-server-dev, since openvas-server shipped headers which was required for building -plugins. A rudimentary patch is attached. With kind regards, Jan. P.S. I'm working also on -plugin package -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: openvas-server_split.diff Type: text/x-diff Size: 2744 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080627/04ab2635/openvas-server_split.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080627/04ab2635/attachment.pgp From waja at cyconet.org Fri Jun 27 23:49:24 2008 From: waja at cyconet.org (Jan Wagner) Date: Fri, 27 Jun 2008 23:49:24 +0200 Subject: [Openvas-distro] updated debian/ for openvas-plugins Message-ID: <200806272349.28305.waja@cyconet.org> Hi there, the attached patch updates debian/ of openvas-plugins so it can be build again and with some major fixes. There are some issues left for you, but it builds with 1.0.1 cleanly. As you see in the changelog, I build against etch, but it should also work on unstable, maybe you have to adjust some builddeps (other name of packages). With kind regards, Jan. -- Never write mail to , you have been warned! -----BEGIN GEEK CODE BLOCK----- Version: 3.1 GIT d-- s+: a- C+++ UL++++ P+ L+++ E- W+++ N+++ o++ K++ w--- O M V- PS PE Y++ PGP++ t-- 5 X R tv- b+ DI- D++ G++ e++ h-- r+++ y+++ ------END GEEK CODE BLOCK------ -------------- next part -------------- A non-text attachment was scrubbed... Name: openvas-plugins_debian.diff Type: text/x-diff Size: 10644 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080627/d74e119c/openvas-plugins_debian.bin -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.wald.intevation.org/pipermail/openvas-distro/attachments/20080627/d74e119c/attachment.pgp From jan-oliver.wagner at intevation.de Fri Jun 27 23:52:00 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Fri, 27 Jun 2008 23:52:00 +0200 Subject: [Openvas-distro] Fedora & Mandriva packages In-Reply-To: References: <200806271156.01334.jan-oliver.wagner@intevation.de> Message-ID: <200806272352.05122.jan-oliver.wagner@intevation.de> On Friday 27 June 2008 15:19, Stephan Kleine wrote: > I just wanted to confirm that the changed patch solves it here too. great. I now applied the patches to openvas-libnasl and openvas-server as well. Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jan-oliver.wagner at intevation.de Sat Jun 28 00:01:39 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Sat, 28 Jun 2008 00:01:39 +0200 Subject: [Openvas-distro] updated debian/ for openvas-plugins In-Reply-To: <200806272349.28305.waja@cyconet.org> References: <200806272349.28305.waja@cyconet.org> Message-ID: <200806280001.42076.jan-oliver.wagner@intevation.de> Hello, On Friday 27 June 2008 23:49, Jan Wagner wrote: > the attached patch updates debian/ of openvas-plugins so it can be build > again and with some major fixes. There are some issues left for you, but it > builds with 1.0.1 cleanly. > As you see in the changelog, I build against etch, but it should also work > on unstable, maybe you have to adjust some builddeps (other name of > packages). thanks a lot! I do not dare to add the patches to SVN myself for this area. Tim, Javier: Can you review and add the patches since you have worked on the debian files so far ? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner From jan-oliver.wagner at intevation.de Mon Jun 30 15:43:32 2008 From: jan-oliver.wagner at intevation.de (Jan-Oliver Wagner) Date: Mon, 30 Jun 2008 15:43:32 +0200 Subject: [Openvas-distro] openvas-libnasl_1.0.0-5_i386.changes REJECTED In-Reply-To: <200806241209.01060.timb@nth-dimension.org.uk> References: <200806241231.01544.waja@cyconet.org> <200806241209.01060.timb@nth-dimension.org.uk> Message-ID: <200806301543.35178.jan-oliver.wagner@intevation.de> On Dienstag, 24. Juni 2008, Tim Brown wrote: > http://mentors.debian.net/debian/pool/main/o/openvas-libnasl/openvas-libnasl_1.0.0-6.dsc, > the only hold up for this has been some toing and froing regarding > debian/copyright, which hopefully I have now resolved. so, the blocker is that we need a mentor to approve? Perhaps Javier is on vacation or in other way too busy. What do the Debian people usually do in such cases? Is there a procedure how to ask another mentor to do the upload? > Regarding openvas-server, there isn't actually a build on mentors ATM, as I > still have a number of new lintian problems to resolve. Once I have these > nailed I'll commit to trunk and build a package for mentors. The other Jan has done some work in the packages -server and -plugins. This might help to speed up things. Have you had a look at it so far? Best Jan -- Dr. Jan-Oliver Wagner Intevation GmbH, Osnabr?ck Amtsgericht Osnabr?ck, HR B 18998 http://www.intevation.de/ Gesch?ftsf?hrer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner