[Pkg-awstats-devel] Awstats - Debian squeeze

[Jonas Smedegaard]

Hi Andreas and others,

On Mon, Jul 20, 2009 at 11:44:50PM +0200, Andreas Henriksson wrote:
>On mån, 2009-07-20 at 23:10 +0200, Andreas Westvik wrote:

>It seems to be overlooked that the graphapplet.pm plugin needs the 
>awgraphapplet.jar file you mentioned and the file simply isn't getting 
>installed in the package. Please file a bug about that.
>
>simply installing a *binary* provided by the "source" tarball probably 
>isn't the best idea. The source for wwwroot/classes/awgraphapplet.jar 
>seems to be available in wwwroot/classes/src/, so possibly we'd get 
>away with it w.r.t. the debian policy for free software, but the 
>security team might hate us if we don't actually build from source.

Even if not written explicitly in Debian Policy, shipping binary code 
not generated from its source is a gross error: How do you know for sure 
that the code shipped is really produced from that source - i.e. is not 
malware?!?


>Someone will need to investigate if we can build the jar from the 
>provided source, hook that up to the package build system, and ship the 
>freshly complied jar...

Indeed.


  - Jonas

-- 
* Jonas Smedegaard - idealist og Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

  [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-awstats-devel/attachments/20090824/d83f82ea/attachment.pgp>