[mlmmj] pkg-mlmmj on alioth.debian.org

[mlmmj] pkg-mlmmj on alioth.debian.org

[Thomas Goirand]

Daniel, Ben and others,

I've been granted administrator access to the pkg-mlmmj project in
Alioth. This was created a long time ago, but it has never been used, so
it wasn't an issue to give me the admin rights.

I've also put the current Lenny and Squeeze/SID debian package into the
git.debian.org (which is also in Alioth).

Daniel, please go on Alioth, and ask to join the pkg-mlmmj project. If
you don't have an account yet, then I would suggest you to create one
using walrond-guest (if you aren't a Debian Developer, -guest will be
added automatically). Once that's done, let me know, and I'll accept you in.

Ben, what's up with the git bridge? Any progress? I would have love to
help, but having no access to the server behind mlmmj.org, there's not
much I can do... Having the possibility to "git pull" from you guys,
would really help, as I don't know hg at all, and that most projects in
Debian are moving to Git (including all my packages).

Also, I saw in the release notes for 1.2.17.1 few scary things that made
me push the security alarm button in Debian (eg: I sent a release
critical bug against the mlmmj package). Then I had a look into the hg
log, and didn't find any issue, but the one that I fixed with the php
admin. Can you confirm that there's nothing serious impacting security
that I should add in the Debian package made for Squeeze? If possible,
I'd like to avoid doing any modification so close to the release of
Debian (we might send the 1.2.17.1 to proposed-updates later on
though...). Please let me know.

One last thing, I still receive very often a mail from MLMMJ with in the
subject line: "Commands available for dtcdev@gplhost.sg", telling me how
to subscribe / unsubscribe, etc. Could it be possible that this was
generated by some spams, as I've configured my list to have a footer
with: "To unsubscribe, send a mail to dtcdev-unsubscribe@gplhost.sg" in
each email? I would really like to avoid receiving this, as it has been
annoying me for years...

Cheers,

Thomas Goirand

Re: [mlmmj] pkg-mlmmj on alioth.debian.org

[Robin H. Johnson]

[-- Attachment #1: Type: text/plain, Size: 1930 bytes --]

On Sun, Sep 19, 2010 at 02:27:01AM +0800, Thomas Goirand wrote:
> One last thing, I still receive very often a mail from MLMMJ with in the
> subject line: "Commands available for dtcdev@gplhost.sg", telling me how
> to subscribe / unsubscribe, etc. Could it be possible that this was
> generated by some spams, as I've configured my list to have a footer
> with: "To unsubscribe, send a mail to dtcdev-unsubscribe@gplhost.sg" in
> each email? I would really like to avoid receiving this, as it has been
> annoying me for years...
I think I asked about this a while ago, but didn't see any response.
The command interface mails don't include 'Precedence: bulk' or anything
else in the headers that mark them as mailing list messages, and they
often triggered by spammers with forged addresses. I get dozens of them
each day as the 'owner' for all of the @lists.gentoo.org instances.

I've considered a patch to include control/customheaders in the bulk
mails, but I only want some of the headers.

Consider this set of customheaders (For gentoo-dev@lists.gentoo.org)
====
Precedence: bulk
List-Post: <mailto:gentoo-dev@lists.gentoo.org>
List-Help: <mailto:gentoo-dev+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-dev+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-dev+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-dev.gentoo.org>
X-BeenThere: gentoo-dev@lists.gentoo.org
Reply-To: gentoo-dev@lists.gentoo.org
====

Precedence and List-* headers do belong on the command mails, but X-BeenThere
and Reply-To do not. (I'm not going to get into the debate re Reply-To
considered harmful at this juncture).

Maybe a custom control/commandcustomheaders, control/commanddelheaders?

-- 
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail     : robbat2@gentoo.org
GnuPG FP   : 11AC BA4F 4778 E3F6 E4ED  F38E B27B 944E 3488 4E85

[-- Attachment #2: Type: application/pgp-signature, Size: 330 bytes --]

Re: [mlmmj] pkg-mlmmj on alioth.debian.org

[Ben Schmidt]

Call-response time!

On 19/09/10 4:27 AM, Thomas Goirand wrote:
> Daniel, Ben and others,

Hi, Thomas.

I don't believe I've met you yet, Daniel, but hi to you too, and thanks
for the effort you put in to maintaining mlmmj downstream.

> I've been granted administrator access to the pkg-mlmmj project in
> Alioth. This was created a long time ago, but it has never been used, so
> it wasn't an issue to give me the admin rights.

Sounds great.

> [...]

> Ben, what's up with the git bridge? Any progress? I would have love to
> help, but having no access to the server behind mlmmj.org, there's not
> much I can do... Having the possibility to "git pull" from you guys,
> would really help, as I don't know hg at all, and that most projects in
> Debian are moving to Git (including all my packages).

I was kinda hoping you and Wolf would collaborate on that and set it up
without involving me. I'll give Wolf a nudge; he's got some git
experience, so may be cool to sort it all out himself, and if not, he
can ask you for a hand.

> Also, I saw in the release notes for 1.2.17.1 few scary things that made
> me push the security alarm button in Debian (eg: I sent a release
> critical bug against the mlmmj package). Then I had a look into the hg
> log, and didn't find any issue, but the one that I fixed with the php
> admin. Can you confirm that there's nothing serious impacting security
> that I should add in the Debian package made for Squeeze? If possible,
> I'd like to avoid doing any modification so close to the release of
> Debian (we might send the 1.2.17.1 to proposed-updates later on
> though...). Please let me know.

Yes, the only real security bug is that php-admin one that took two
commits to actually fix right (with your fix being the better one). The
rest are just small bugs that I didn't feel needed significant testing.

> [...]

Cheers,

Ben.