nmap: help wanted?

Lukas Schwaighofer lukas at schwaighofer.name
Sun Aug 27 17:24:38 UTC 2017


Hi,

thanks for the fast reply and I'm glad you're open to
contributions :) .  I've pushed a few changes to git already, I'm
always happy about comments and/or corrections. I  will continue to
work on this in the upcoming week.

I started on converting the copyright to the machine readable DEP-5
format.  Due to the high amount of other code included in the source
package, this turned out to be a quite tedious task…

On Sun, 27 Aug 2017 16:04:14 +0200
Hilko Bengen <bengen at debian.org> wrote:

> Let's see:
> 
> - description-synopsis-starts-with-article: This should just be
>   overridden, "the network mapper" is a good, concise description.
> - windows-devel-file-in-package: I would not to remove the files, this
>   warning can also be overridden.

Fair enough, I added those overrides.  For the windows devel files I may
eventually follow Samuel's suggestion asking upstream if this is still
needed.

> - manpage-has-errors-from-man: If you have solutions for those, please
>   provide a patch

Well, the responsible strings are:
* The --script-args example:
  'user=foo,pass=",{}=bar",whois={whodb=nofollow+ripe},xmpp-info.server_name=localhost
* The DARPA CINDER program URL:
  https://www.fbo.gov/index?s=opportunity&mode=form&id=585e02a51f77af5cb3c9e06b9cc82c48&tab=core&_cview=1
both are simply too long to fit into 80 characters minus the paragraph
indent made by man.  I don't think there is anything we can do about
it.

> - debug-file-with-no-debug-symbols: This happens because the upstream
>   build system strips nmap and friends so there are no debug symbols
>   left to copy to the -dbgsym package.

I passed
    STRIP=/bin/true
to dh_auto_configure, which prevents upstream's build system from
stripping the binaries (and allows the Debian toolchain to perform that
task).  Now we have proper dbgsym packages :) .

I have one lintian warning which I'm not sure if we should act upon:
"arch-dep-package-has-big-usr-share 19613kB 84%". Do you think it's
worth creating a nmap-common (architecture-independent) package for the
contents of /usr/share/nmap to reduce the size?

> > * nmap has accumulated quite a number of bugs; at least some of them
> >   can be closed by now…  
> 
> Yeah, it has been quite a while since I have done some housekeeping in
> that area.

Ok, I'll start working on that soon as well.

Regards
Lukas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-security-team/attachments/20170827/bf88ca78/attachment.sig>


More information about the Pkg-security-team mailing list