The dists/ directory should be updated as atomic as possible. Therefore
buildds access a copy that can be updated with two file renames.

Some files in pool locations might not be accessible to the user dak runs
lintian as. So always copy the files and set appropriate permissions.

Bug: http://bugs.debian.org/689598

When checking for reverse dependencies of sourceless arch:all packages
only those rdeps which were also arch-indep were detected.
Signed-off-by: NAdam D. Barratt <adam@adam-barratt.org.uk>
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

People allowed to use dm-{remove,migrate} are the keyring maintainers
and ftp masters for now.

The dm-remove command can be used to remove all DM ACL entries for a
given fingerprint:

  Action: dm-remove
  Fingerprint: ...

The dm-migrate command can be used to migrate all DM ACL entries from
one key to another:

  Action: dm-migrate
  From: ...
  To: ...

Reported-by: NLaszlo Kajan <lkajan@rostlab.org>

When moving the hash validation in e6b1c633
one occurrence of "what" was not changed to "filename".

This caused an error when rejecting an upload with an invalid .dsc.

We also do not want to load the .dsc before we have made sure it matches the
hash from the .changes.

We only need the .dsc here to try and grab any files not included in the
upload. If there is an error loading the .dsc, do not throw an exception here,
but do so later instead.

As we no longer look at the file in the case of a bad signature, we
cannot know the maintainer address and this cannot send a mail about
the bad signature.

Signed-off-by: NTollef Fog Heen <tfheen@varnish-software.com>
Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Reported-by: NJakub Wilk <jwilk@debian.org>
Reference: https://lists.debian.org/debian-dak/2012/12/msg00016.html

We do not want to inspect unsigned files if we can avoid doing so.

This also fixes get_maintainer not making sure the filename is safe to pass to
shell commands by removing the function.

The new pattern is taken from daklib/regexes.py.

Signed-off-by: NJoerg Jaspert <joerg@debian.org>

Address FIXME that talks about pulling Components from the DB.
Signed-off-by: NTollef Fog Heen <tfheen@varnish-software.com>
Signed-off-by: NAnsgar Burchardt <ansgar@debian.org>

The addition of the backports archive on ftp-master broke the assumption
that only one of the backports, ftp-master and security archives exist.

We do not want to accept uploads to squeeze-backports on ftp-master for
now.

drop usage of the DMUA flag, only use the new ACL set, as announced in
https://lists.debian.org/debian-devel-announce/2012/09/msg00012.html
and
https://lists.debian.org/debian-devel-announce/2012/09/msg00008.htmlSigned-off-by: NJoerg Jaspert <joerg@debian.org>