Re: Intro + Re: Heads up: Bug#981055: O: john -- active password cracking tool
Hello Axel,
> sorry for the late reply.
No worries, it wasn't late and I don't mind if you take your time :)
> Will hopefully finish that part this night and upload. Didn't find
> much time for packaging the past few days.
Awesome,
> I though do _not_ intent to import 1.9.0 or the Jumbo patch before
> Bullseye. There are quite some reverse dependencies to john and I do
> not want to break any of them at this stage of the freeze as I don't
> know that much about the Jumbo patch. I just know that Kali already
> has it (and 1.9.0) packaged.
>
> I also have not much of an idea how well the licenses of the Jumbo
> patch have been reviewed for inclusion in Debian, which could pose
> another source for RC bugs.
I was about to send an email talking about this, I started working on
it myself to get an idea of how much work will be needed and I totally
gave up trying to get it for bullseye (especially considering the
deadline for NEW is tomorrow).
> * Check how much the packaging from Kali and Debian differs.
> * Check how well debian/copyright was maintained in Kali for the jumbo
> patch part.
> * Eventually merge the two packagings and upload the result to
> Experimental (at least if we're still in the freeze then).
I agree with your plan of action.
Here are a few notes I got from my quick look at it:
* d/rules is still complex and quite different, so reviewing them will
take a good chunk of time.
* d/patches does not change much, it will be easier to sync from kali
(assuming we won't need more patches on top of it).
* d/copyright from kali looks good but there's still about 4 hours of
work needed to finish it (as debmake -k shows me). I have started it
but it's a slow process because it's the most boring thing ever. So
far I haven't spotted any license incompatibility but I'm afraid there
might be some binaries on the sources (haven't confirmed it yet).
* d/watch from kali is pointing to github, I changed my local version
to keep using upstream's website as the signatures are only provided
there, it was an easy change.
* testing will have to be extensive, considering the scope of the
changes and how john has all sorts of tweaks for different
architectures
> In other news: I just uploaded plaso with the last RC bug fixed.
Great, thanks for joining the team :)
--
Samuel Henrique <samueloph>
Reply to: