Second cut for -mobile promotions

[Steve Kowalik]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This is the smaller set of packages to look at for promotion to main for
Ubuntu Mobile in Hardy. All of these packages are directly seeded by
either mobile or mobile-dev, and all of the Depends and Build-Depends
should already be in main.

 affects ubuntu/fbreader
 affects ubuntu/galculator
 affects ubuntu/hildon-control-panel
 affects ubuntu/marquee-plugins
 affects ubuntu/mobile-basic-flash
 affects ubuntu/python-hildon
 affects ubuntu/sapwood
 affects ubuntu/sdk-default-icons
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFH9cB3CfB0CMh//C8RAj7MAJ4+ohyC8bFPuadHtUDb6E9KpgsiKACePHjD
AllGR5IQuG0ZgXfoBf3H1ag=
=erkp
-----END PGP SIGNATURE-----

[Matthias Klose (doko)]

please add the inclusion reports.

[Bill Filler (bfiller)]

added hildon-desktop and libhildon as newer versions have been pushed to the UME PPA. Would be nice to get these into Hardy.

[Bill Filler (bfiller)]

sorry, wrong bug, this does not affect hildon-desktop

[Bill Filler (bfiller)]

libhildon is not affected either, wrong bug

[Steve Kowalik (stevenk)]

MIR for fbreader

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/f/fbreader; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=FBReader
   * No history in Secunia: http://secunia.com/search/?search=FBReader
   * No suid/sgid binaries or daemons.
   * Only network access is very GIO/GVFS.
   * It directly processes various e-book formats.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * No showstopper or relevant open bugs in the Debian BTS: http://bugs.debian.org/src:fbreader
   * Maintenance in Debian is calm.
   * Upstream is calm/vigorous.
   * Upstream bug tracker is at http://www.fbreader.org/mantis/view_all_bug_page.php ; no showstoppers
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * It provides a few libraries, and complies with Debian library packaging guide.
   * Straight debhelper, no patch system or oddities.
6. Dependencies:
   * The fbreader package depends on a bunch of libraries that provided by the source package itself.
   * All Build-Depends and Depends are in main.
7. Background information:
   * Upstream call this software "FBReader", with the capitalization.

[Steve Kowalik (stevenk)]

MIR for galculator

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/g/galculator; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=galculator
   * No history in Secunia: http://secunia.com/search/?search=galculator
   * No suid/sgid binaries or daemons.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * No showstopper or relevant open bugs in the Debian BTS: http://bugs.debian.org/src:galculator
   * Maintenance in Debian is calm.
   * Upstream is calm.
   * Upstream bug tracker is at https://sourceforge.net/tracker/?func=add&group_id=80471&atid=559874 ; no showstoppers
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * CDBS using debhelper, CDBS's patch system and no oddities.
6. Dependencies:
   * All Build-Depends and Depends are in main.

[Steve Kowalik (stevenk)]

MIR for hildon-control-panel

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/h/hildon-control-panel; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=hildon-control-panel
   * No history in Secunia: http://secunia.com/search/?search=hildon-control-panel
   * No suid/sgid binaries or daemons.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * Package is not in Debian.
   * Upstream is calm.
   * Upstream bug tracker is at https://bugs.maemo.org/buglist.cgi?quicksearch=hildon-control-panel ; no showstoppers
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * CDBS using debhelper, no patch system or oddities.
6. Dependencies:
   * All Build-Depends and Depends are in main.

[Steve Kowalik (stevenk)]

MIR for marquee-plugins

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/m/marquee-plugins; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=marquee-plugins
   * No history in Secunia: http://secunia.com/search/?search=marquee-plugins
   * No suid/sgid binaries or daemons.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * Package is not in Debian.
   * Upstream is vigorous.
   * Upstream is Intel, and they use Launchpad for bug reports.
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * CDBS using debhelper, no patch system or oddities.
6. Dependencies:
   * All Build-Depends and Depends aside from libxul and friends are in main. I will sort that out directly.

[Steve Kowalik (stevenk)]

MIR for mobile-basic-flash

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/m/mobile-basic-flash; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=mobile-basic-flash
   * No history in Secunia: http://secunia.com/search/?search=mobile-basic-flash
   * No suid/sgid binaries or daemons.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * Package is not in Debian.
   * Upstream is vigorous.
   * Upstream is Intel, and they use Launchpad for bug reports.
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * CDBS using debhelper, no patch system or oddities.
6. Dependencies:
   * All Build-Depends and Depends aside from libxul and friends are in main. I will sort that out directly.

[Steve Kowalik (stevenk)]

MIR for python-hildon

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/p/python-hildon; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=python-hildon
   * No history in Secunia: http://secunia.com/search/?search=python-hildon
   * No suid/sgid binaries or daemons.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * Package is not in Debian.
   * Upstream is calm.
   * Upstream bug tracker is at https://garage.maemo.org/tracker/?atid=229&group_id=40&func=browse ; no showstoppers
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * CDBS using debhelper, no patch system or oddities.
6. Dependencies:
   * All Build-Depends and Depends are in main.

[Steve Kowalik (stevenk)]

MIR for sapwood

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/s/sapwood; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=sapwood
   * No history in Secunia: http://secunia.com/search/?search=sapwood
   * No suid/sgid binaries or daemons.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * No showstopper or relevant open bugs in the Debian BTS: http://bugs.debian.org/src:sapwood
   * Maintenance in Debian is calm.
   * Upstream is calm.
   * Upstream bug tracker is at https://bugs.maemo.org/buglist.cgi?quicksearch=sapwood ; no showstoppers
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * CDBS using debhelper, no patch system or oddities.
6. Dependencies:
   * All Build-Depends and Depends are in main.

[Steve Kowalik (stevenk)]

MIR for sdk-default-icons

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/s/sdk-default-icons; available for all supported architectures
2. Rationale: Seeded by mobile.
3. Security:
   * No CVE entries: It's a bunch of icons.
   * No history in Secunia: As for CVE.
   * No binaries at all.
   * No network access.
4. Quality assurance:
   * Package works out of the box.
   * No debconf questions.
   * Package isn't in Debian.
   * Upstream is calm.
   * I can't find any mention of sdk-default-icons in Maemo's bugtracker.
   * Does not deal with hardware directly.
   * No test suite.
5. Standards compliance:
   * Compiles with FHS, and Debian Policy.
   * Debhelper, no patch system or oddities.
6. Dependencies:
   * No Depends, all Build-Depends in main.

[Steve Kowalik (stevenk)]

Sapwood is straight debhelper, not CDBS.

[Steve Kowalik (stevenk)]

libhildon is already in main

[Matthias Klose (doko)]

for the future, please use separate reports

[Matthias Klose (doko)]

python-hildon is ok to promote to main

[Matthias Klose (doko)]

ok for promotion to main, although hildon-control-panel-l10n is not in main as stated in the MIR. looks trivial, added as well.

[Matthias Klose (doko)]

the sdk-default-icons packaging looks ok, but the license reads:
You are free:

    * to Share <E2><80><94> to copy, distribute, display, and perform the work
    * to Remix <E2><80><94> to make derivative works

which doesn't allow modification of the work. IMO this has to go to multiverse instead.
setting the release milestone to resolve this.

[Matthias Klose (doko)]

fbreader is ok for promotion to main

[Matthias Klose (doko)]

galculator is ready for promotion to main

[Matthias Klose (doko)]

sapwood:
 - there is a final release, instead of the current beta: http://packages.debian.org/source/sapwood
   does it make sense to upgrade this one? At least this is a theme which will be available on all
   other architectures as well
 - the packages itself looks ok.

[Matthias Klose (doko)]

fbreader:
 - debian is meanwhile at 0.8.17-1

[Matthias Klose (doko)]

marquee-plugins is ok for promotion to main

[Matthias Klose (doko)]

mobile-basic-flash:
 - needs to use xulrunner-1.9-dev instead of libxul-dev

[Matthias Klose (doko)]

Bill Filler schrieb:
> added hildon-desktop and libhildon as newer versions have been pushed to
> the UME PPA. Would be nice to get these into Hardy.

please create a separate report for both of these (probably needing an upstream
version exception?)

[Jonathan Riddell (jr)]

2008-04-08 20:11:44 INFO Override Component to: 'main'
2008-04-08 20:11:44 INFO 'fbreader - 0.8.14-1ubuntu1/main/text' source overridden

[Jonathan Riddell (jr)]

2008-04-08 20:12:46 INFO 'galculator - 1.2.5.2-1ubuntu2/main/math' source overridden

[Jonathan Riddell (jr)]

2008-04-08 20:15:06 INFO 'hildon-control-panel - 1:1.9.5-1ubuntu6/main/x11' source overridden

[Jonathan Riddell (jr)]

2008-04-08 20:16:51 INFO 'marquee-plugins - 0.4/main/libs' source overridden

[Jonathan Riddell (jr)]

2008-04-08 20:17:52 INFO 'python-hildon - 0.8.8-1ubuntu2/main/python' source overridden

[Steve Kowalik (stevenk)]

sapwood 3.0.0.debian.1-2 has been synced from Debian, and has built on every arch aside from hppa.

[Matthias Klose (doko)]

sapwood; ok for promotion

[Martin Pitt (pitti)]

sapwood promoted

[Steve Kowalik (stevenk)]

New mobile-basic-flash uploaded that uses xulrunner-1.9, please recheck.

[Martin Pitt (pitti)]

sdk-default-icons demoted to multiverse, since it is non-free (CC 2.5, no modification).

The package is much worse, though:

 - The .deb does not ship copyright
 - It is a native tar.gz, although it is not an in-house production
 - upstream does not ship any copyright statement, license document
 - debian/copyright does not show any download location

Please get this fixed in the next days. I'll remove the current version from the archive on, say, next Tuesday.

[Matthias Klose (doko)]

the mobile-basic-flash packages contains binary flash code without providing the source, but is licensed under the LGPL. in the current form we have to remove that package from the archive.

[Matthias Klose (doko)]

<lool> doko: These are actually the files which are being opened in the GUI to edit these
<lool> doko: So this is the preferred form of modification and use and these files were made under the same license
<doko> lool: ohh, really? point taken
<lool> doko: Nobody likes the files, and they are said to have some bugs; it would be best to move to something else, but we also use the package for pure html UIs
<doko> lool: did somebody look at the source code? I can't review this :-/
<lool> doko: Consider them like .pngs
<doko> ok

ready for promotion

[Martin Pitt (pitti)]

mobile-basic-flash promoted.

[Steve Kowalik (stevenk)]

It looks like sdk-default-icons is not needed, and should be removed from the archive. Setting sdk-default-icons' task to Confirmed and subscribing ubuntu-archive.

[Martin Pitt (pitti)]

2008-04-22 07:04:09 INFO Removing candidates:
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy amd64
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy hppa
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy i386
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy ia64
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy lpia
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy powerpc
2008-04-22 07:04:09 INFO sdk-default-icons 2.0-4.1ubuntu3 in hardy sparc
2008-04-22 07:04:09 INFO Removed-by: Martin Pitt
2008-04-22 07:04:09 INFO Comment: not needed by mobile, non-free, #211675
2008-04-22 07:04:09 INFO 8 packages successfully removed.

[Steve Kowalik (stevenk)]

mobile-basic-flash's xul 1.9 port is incomplete and doesn't look to be working. I have gotten mobile-basic-flash demoted, and will upload a new version that moves it back to libxul-dev.