[Bug 1259153] [NEW] [MIR] schroot (and lockdev)

[Colin Watson]

Public bug reported:

Availability: In universe for all architectures.
Rationale: Already in widespread use by developers as a dependency of sbuild and for general testing; I was very surprised to find this in universe rather than in main.  We use it extensively in the Canonical datacentre.  click-dev now recommends schroot, pulling it into main.
Security: One local DoS from 2009 (https://secunia.com/advisories/34971/); schroot is necessarily setuid root.
QA: In my experience it Just Works and is maintained as well as is needed.  It ships a test suite, run during the build, albeit at a slightly unusual point due to requiring fakeroot.
Dependencies: Requires lockdev; this is pretty tiny so I'll just make it another task on this bug.
Standards compliance: Seems to be fairly straightforward dh7-style packaging.
Maintenance: We occasionally have to poke this for new versions of boost, but aside from that it seems adequate to just keep it synced with Debian.  I've set foundations-bugs as a bug contact.

** Affects: lockdev (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: schroot (Ubuntu)
     Importance: Undecided
         Status: New

** Also affects: lockdev (Ubuntu)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to schroot in Ubuntu.
https://bugs.launchpad.net/bugs/1259153

Title:
  [MIR] schroot (and lockdev)

Status in “lockdev” package in Ubuntu:
  New
Status in “schroot” package in Ubuntu:
  New

Bug description:
  Availability: In universe for all architectures.
  Rationale: Already in widespread use by developers as a dependency of sbuild and for general testing; I was very surprised to find this in universe rather than in main.  We use it extensively in the Canonical datacentre.  click-dev now recommends schroot, pulling it into main.
  Security: One local DoS from 2009 (https://secunia.com/advisories/34971/); schroot is necessarily setuid root.
  QA: In my experience it Just Works and is maintained as well as is needed.  It ships a test suite, run during the build, albeit at a slightly unusual point due to requiring fakeroot.
  Dependencies: Requires lockdev; this is pretty tiny so I'll just make it another task on this bug.
  Standards compliance: Seems to be fairly straightforward dh7-style packaging.
  Maintenance: We occasionally have to poke this for new versions of boost, but aside from that it seems adequate to just keep it synced with Debian.  I've set foundations-bugs as a bug contact.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lockdev/+bug/1259153/+subscriptions