- Aur-general - lists.archlinux.org

[aur-general] Deletion request : nmapsi4-svn
by Jekyll Wu 06 Sep '11

06 Sep '11

This package[1] is orphaned and the upstream[2] uses git now. [1] http://aur.archlinux.org/packages.php?ID=32628 [2] http://www.nmapsi4.org/node/5

2 1

[aur-general] Securing the AUR website
by Pierre Schmitz 05 Sep '11

05 Sep '11

Hi TUs, the AUR still handles user logins and sessions in a insecure way that can easily be exploited. The last approach to use https by default was denied a long time ago. But I hope you guys will reconsider this decision. To prevent session hijacking, mtm attacks or whatnot I'd recommend the following: * Redirect all http traffic to https by default * Set session.cookie_secure = 1 in your php.ini * If you use setcookie() make sure to set the secure parameter to true * If you don't require any javascript to access your session data it's also a good idea to set all cookie to httponly (again via php.ini and if you use setcookie() directly) The optional https access as we have now wont work here. Even if you never forget to add the s to http when you login session data is also transferred via http. So once you click a non-https link to the AUR it would be possible for an attacker to hijack your session. Greetings, Pierre -- Pierre Schmitz, https://users.archlinux.de/~pierre

19 73

[aur-general] [Deletion request] amule-remote-cvs
by Jekyll Wu 05 Sep '11

05 Sep '11

This package[1] is outdated and orphaned, and the tarball is old, non-official and un-reachable(at least for me). [1] http://aur.archlinux.org/packages.php?ID=10606

2 1

[aur-general] Removal request (ptscotch)
by Michele Mocciola 05 Sep '11

05 Sep '11

Please, remove ptscotch package (http://aur.archlinux.org/packages.php?ID=23389) it's a duplicate of ptscotch-mpich2. Thanks!

2 1

[aur-general] Ayatana cleanup
by Balló György 05 Sep '11

05 Sep '11

Hi TUs, please delete the following packages: - fixed_appmenu-qt - https://aur.archlinux.org/packages.php?ID=50325 - duplicate of appmenu-qt - fixed_qt-appmenu - https://aur.archlinux.org/packages.php?ID=50314 - duplicate of qt-appmenu - bamf-bin - https://aur.archlinux.org/packages.php?ID=51288 - duplicate of bamf - bamf-daemon - https://aur.archlinux.org/packages.php?ID=48687 - duplicate of bamf - plasma-message-indicator - https://aur.archlinux.org/packages.php?ID=45498 - I uploaded it in a new name: plasma-widget-message-indicator - unity-place-applications - https://aur.archlinux.org/packages.php?ID=45670- renamed to unity-lens-applications - unity-place-files - https://aur.archlinux.org/packages.php?ID=45753 - renamed to unity-lens-files And please orphan the following packages, because they are outdated, and the maintainer (Gianfrix<https://aur.archlinux.org/account.php?Action=AccountInfo&ID=14295>) not responded for my e-mail more than one weeks: - indicator-messages - https://aur.archlinux.org/packages.php?ID=32052 - gnome-session-ubuntu - https://aur.archlinux.org/packages.php?ID=44214 -- Thanks, City-busz

2 2

[aur-general] [Deletion request] fcitx4 and fcitx4vim
by Jekyll Wu 04 Sep '11

04 Sep '11

fcitx4[1] is outdated and orphaned, and fcitx-4.1.0 is already in [extra] . fcitx4vim[2] is orphaned and based upon fcitx-3, and AFAIK the patch has already been merged into upstream. [1] - http://aur.archlinux.org/packages.php?ID=43279 [2] - http://aur.archlinux.org/packages.php?ID=31246

2 1

[aur-general] VCS Packages
by gadget3000 03 Sep '11

03 Sep '11

*Dead repo due to dead project. I can't find any mirrors:* qutim-protocol-icq-git (https://aur.archlinux.org/packages.php?ID=33004) ICQ support is now built into qutim anyway (http://qutim.org/) omvviewer-artwork-git (https://aur.archlinux.org/packages.php?ID=24456) It is now built into omvviewer anyway ( http://git.byteme.org.uk/cgi-bin/gitweb.cgi?p=snowglobe.git;a=summary) bash-view-git (https://aur.archlinux.org/packages.php?ID=34592) *Repo has moved:* mcabber-module-ping-git (https://aur.archlinux.org/packages.php?ID=31820) had moved to mercurial but is now included in mcabber-hg ( https://aur.archlinux.org/packages.php?ID=26873) anyway All mcabber-module-*-git packages have moved to mercurial. Some may also be built into mcabber-hg now as well. pastebin-cli-git (https://aur.archlinux.org/packages.php?ID=46621) now uses svn. pastebin-cli-svn does not yet exist so I've left a comment on the package. thunar-actions-plugin-git (https://aur.archlinux.org/packages.php?ID=30184) now uses svn. thunar-actions-plugin-svn does not yet exist. lingo-dictionary-git (https://aur.archlinux.org/packages.php?ID=49590) now uses bzr and has been replaced by lingo-dictionary-bzr ( https://aur.archlinux.org/packages.php?ID=49764) python-commons-git (https://aur.archlinux.org/packages.php?ID=47324) now uses svn. python-commons-svn does not exist yet. *Unmaintained repos:* eee-control-git (https://aur.archlinux.org/packages.php?ID=25437) The PKGBUILD uses a dead repo but there is a mirror here ( https://github.com/amorozov/eee-control) though upstream hasn't been updated since 2009 (Is this long enough to wait before considering it as unmaintained?). No votes or maintainer. eee-control ( https://aur.archlinux.org/packages.php?ID=22076) still exists. *Other requests:* caw (https://aur.archlinux.org/packages.php?ID=28856) is the same as caw-git (https://aur.archlinux.org/packages.php?ID=29425) Upstream is no longer in development. Gadget3000

3 6

Re: [aur-general] TU Application
by Ronald van Haren 03 Sep '11

03 Sep '11

Op 3 sep. 2011 18:14 schreef "Alexander Rødseth" <rodseth(a)gmail.com> het volgende: > > Hello, > > My name is Alexander Rødseth. I'm from Oslo, Norway, am 29 years old > for two more months and have been using Arch for a couple of years. > > My first taste of Linux was a brief acquaintance with Red Hat over a > decade ago, followed by Slackware and then Debian for a few years. Now > I use Arch Linux both at home and at work, and it's my absolute > favorite so far. > > My 62 AUR packages [1] have a total of 2519 votes, where 32% of the > votes are for packages I submitted, while the rest are for previously > orphaned packages, that needed a warm and caring home. > > I like how Arch tries to avoid fixing things behind your back, which I > think is evident from the installation process, the package manager > and the love for simplicity I've found in Arch users and developers > alike. > > I enjoy programming in Go, Haskell, Python and C, try to contribute to > open source projects with bug reports and the occasional patch (here > is one for Blender [2] and one for Firefox [3]). When I was younger, I > wrote a program for drawing icons and animating sprites. [4] I have a > wacky homepage where I experiment with HTML5 and upload small CLI > programs as I see fit. [5] > > I'm currently employed in Hue AS [6], a company that (roughly > explained) sells a software engine for converting sound to > 3D-graphics. I mainly work with developing and maintaining the > internal systems for keeping track of licenses, builds and issues with > the code (mostly written in Python). Luckily, I only program a minimum > of C++. ;) > > I started working with programming before studying computer science, > and I am on a lifelong track of continuing to learn stuff on my own. > > At least one of my AUR packages has been moved to [community] > (lib32-libasyncns, moved by Jan Steffens in 2010, only have the e-mail > as reference) and I've contributed to at least one package in [extra] > [7]. > > I hang out and answer questions on #archlinux as often as I can. > > My goal with becoming a TU is first and foremost to help out with > maintaining packages for the distro that I love and use. > > If I can find a bug to fix or a feature to add to pacman, or any other > arch-centric application, I would like to do so. (Could an option for > pacman to list all system-files that are not owned by a package be > something?) > > I am grumpy before the first cup of coffee in the morning, other than > that I'm generally happy, helpful and benevolent. I try to get a > minimum of exercise and I'm in a stable relationship. I like the game > of Go and creating music with jack, MIDI-synths and Arch, of course. > > Evangelos Foutras was kind enough to sponsor me for applying to become a TU. > > -- > Humble regards, > Alexander Rødseth > (xyproto on IRC, trontonic on AUR) > > > [1] https://aur.archlinux.org/packages.php?SeB=m&K=trontonic&PP=128&SO=d&O=0&SB… > [2] http://www.3dmodellering.no/beckmann/ > [3] https://bugzilla.mozilla.org/show_bug.cgi?id=78414 (ctrl-f, "patch") > [4] http://burn.sf.net > [5] http://roboticoverlords.org > [6] http://hue.no > [7] http://projects.archlinux.org/svntogit/packages.git/tree/crypto%2B%2B/trunk/ Thanks for your interest in becoming a TU. Your application is well written so I have good hopes for your packages. I'll check them when I have some more time...and a computer, at hand. In the meantime, what kind of packages are you interested in maintaining in [community]? Do you plan do adopt any orphans? Do you plan to move any new packages into [community]? Cheers, Ronald

2 1

Re: [aur-general] TU Resignation
by Ronald van Haren 03 Sep '11

03 Sep '11

Op 31 aug. 2011 03:11 schreef "Loui Chang" <louipc.ist(a)gmail.com> het volgende: > > Hello everyone! > > I haven't been very involved with the AUR for a long while, and I don't > really see that changing much. Since I only have a few packages I think > it's time for me to resign as a TU. I may still throw a few patches > around if I find the time. I've asked Lukas Fleischer to assume my duty > of adding new TUs. > > It was a pleasure to work with you folks. See you around! > > My former packages which I've recently disowned: > esmtp > libesmtp (dependency of balsa, collectd, and esmtp) > mhwaveedit > oldstand-font > tig > > Cheers. > Did I mis the farewell party? Thanks for your awesome work! Hope to see you around in the future. Cheers, Ronald

1 0

[aur-general] Orphan Request
by Alex Ferrando 03 Sep '11

03 Sep '11

If it there is a chance that thunderbird-firetray-svn [1] could be orphaned from its current maintainer, please do. I ask this because this package is unmaintained since January and the current maintainer doesn't answer to e-mail. With the current version of Thunderbird this package needs to get its PKGBUILD updated every time a new version of thunderbird gets out in order to work. Currently I'm posting comments with modified PKGBUILDS in the AUR package page so people can get it to work. If it gets orphaned I will gladly adopt it. [1]: https://aur.archlinux.org/packages.php?ID=45910 Regards. Alex Ferrando

2 1