[Pkg-awstats-devel] Awstats - Debian squeeze
Jonas Smedegaard
dr at jones.dk
Sun Aug 23 23:33:55 UTC 2009
Hi Andreas and others,
On Mon, Jul 20, 2009 at 11:44:50PM +0200, Andreas Henriksson wrote:
>On mån, 2009-07-20 at 23:10 +0200, Andreas Westvik wrote:
>It seems to be overlooked that the graphapplet.pm plugin needs the
>awgraphapplet.jar file you mentioned and the file simply isn't getting
>installed in the package. Please file a bug about that.
>
>simply installing a *binary* provided by the "source" tarball probably
>isn't the best idea. The source for wwwroot/classes/awgraphapplet.jar
>seems to be available in wwwroot/classes/src/, so possibly we'd get
>away with it w.r.t. the debian policy for free software, but the
>security team might hate us if we don't actually build from source.
Even if not written explicitly in Debian Policy, shipping binary code
not generated from its source is a gross error: How do you know for sure
that the code shipped is really produced from that source - i.e. is not
malware?!?
>Someone will need to investigate if we can build the jar from the
>provided source, hook that up to the package build system, and ship the
>freshly complied jar...
Indeed.
- Jonas
--
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
[x] quote me freely [ ] ask before reusing [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-awstats-devel/attachments/20090824/d83f82ea/attachment.pgp>
More information about the Pkg-awstats-devel
mailing list