[Pkg-privacy-maintainers] Bug#910493: Bug#910493: Handle transition from MAT to MAT2

Georg Faerber georg at riseup.net
Tue Feb 12 14:33:31 GMT 2019


Hi,

On 19-01-27 22:44:24, intrigeri wrote:
> To me this boils down to this question: do we feel more comfortable
> with:
> 
>   a) including mat v1 in Buster (so less technical can use its GUI,
>      even though its Nautilus extension was broken last time I tried),
>      in addition to v2
> 
> or
> 
>   b) only including mat v2, without any GUI at all (and then add
>      Breaks+Replace, get mat v1 removed from testing, and add
>      transitional package if there's enough time to go through NEW).
> 
> ?
> 
> I'm personally very uncomfortable with both options :/
> But I'm leaning towards not including software when its author
> says it's unsupported and has known (security relevant) issues.
> 
> Thoughts?

Both options don't sound good, but I think shipping unsupported software
with known, security relevant, issues is pretty bad. I would vote to
remove mat v1 and ...

> Other data points & ideas:
> 
>  - Given the python-nautilus issue essentially requires a transition,
>    I doubt we'll find some way to provide desktop integration for mat2
>    via buster-backports.
> 
>  - One could quickly patch together a Python 2 Nautilus extension that
>    wraps mat2's CLI, or the simplest possible Python 3 GUI that does
>    not depend on python-nautilus. I'm sure lots of users would be
>    thankful if someone did this. There's very little time left to get
>    this done and through NEW. But it could be an option for
>    buster-backports.

... I would somehow continue what I said and try to tackle option one.
Also, if I'm not mistaken, adding such an extension wouldn't need to
go trough NEW, and IMHO, it is quite easy to justify adding this even
now within the soft freeze: The change isn't that intrusive, we could
test beforehand, and it clearly targets an "isolated" issue.

Any thoughts?

Cheers,
Georg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-privacy-maintainers/attachments/20190212/42075915/attachment.sig>


More information about the Pkg-privacy-maintainers mailing list