[Bug 1259153] Re: [MIR] schroot
Colin Watson
cjwatson at canonical.com
Wed Apr 2 01:52:41 UTC 2014
Moved to main per #9 and #10, now that the hardening fixes are in place.
** Changed in: schroot (Ubuntu)
Status: Incomplete => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to lockdev in Ubuntu.
https://bugs.launchpad.net/bugs/1259153
Title:
[MIR] schroot
Status in “lockdev” package in Ubuntu:
Invalid
Status in “schroot” package in Ubuntu:
Fix Released
Bug description:
Availability: In universe for all architectures.
Rationale: Already in widespread use by developers as a dependency of sbuild and for general testing; I was very surprised to find this in universe rather than in main. We use it extensively in the Canonical datacentre. click-dev now recommends schroot, pulling it into main.
Security: One local DoS from 2009 (https://secunia.com/advisories/34971/); schroot is necessarily setuid root.
QA: In my experience it Just Works and is maintained as well as is needed. It ships a test suite, run during the build, albeit at a slightly unusual point due to requiring fakeroot.
Dependencies: Requires lockdev; this is pretty tiny so I'll just make it another task on this bug.
Standards compliance: Seems to be fairly straightforward dh7-style packaging.
Maintenance: We occasionally have to poke this for new versions of boost, but aside from that it seems adequate to just keep it synced with Debian. I've set foundations-bugs as a bug contact.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lockdev/+bug/1259153/+subscriptions
More information about the foundations-bugs
mailing list