[Bug 1259153] Re: [MIR] schroot

Colin Watson cjwatson at canonical.com
Wed Apr 2 01:52:41 UTC 2014


Moved to main per #9 and #10, now that the hardening fixes are in place.

** Changed in: schroot (Ubuntu)
       Status: Incomplete => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to lockdev in Ubuntu.
https://bugs.launchpad.net/bugs/1259153

Title:
  [MIR] schroot

Status in “lockdev” package in Ubuntu:
  Invalid
Status in “schroot” package in Ubuntu:
  Fix Released

Bug description:
  Availability: In universe for all architectures.
  Rationale: Already in widespread use by developers as a dependency of sbuild and for general testing; I was very surprised to find this in universe rather than in main.  We use it extensively in the Canonical datacentre.  click-dev now recommends schroot, pulling it into main.
  Security: One local DoS from 2009 (https://secunia.com/advisories/34971/); schroot is necessarily setuid root.
  QA: In my experience it Just Works and is maintained as well as is needed.  It ships a test suite, run during the build, albeit at a slightly unusual point due to requiring fakeroot.
  Dependencies: Requires lockdev; this is pretty tiny so I'll just make it another task on this bug.
  Standards compliance: Seems to be fairly straightforward dh7-style packaging.
  Maintenance: We occasionally have to poke this for new versions of boost, but aside from that it seems adequate to just keep it synced with Debian.  I've set foundations-bugs as a bug contact.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lockdev/+bug/1259153/+subscriptions



More information about the foundations-bugs mailing list