[Bug 412059] Re: MIR for vtun

Loïc Minier lool at dooz.org
Wed Aug 12 08:15:46 BST 2009


Overall packaging looks good but it's quite scary to include this network service; it sounds like a light but less secure VPN.  For instance debian/README.Encryption says:
"This program includes an "encryption" feature intended to protect the tunneled
data as it travels across the network. However, the protocol it uses is known
to be very insecure, and you should not rely on it to deter anyone but a casual
eavesdropper."

Chuck, you mention in the MIR that the software works out of the box but
the README.Debian and default config seems to imply that one needs to
setup vtun manually after install.

Please implement the status action in the init script.

FYI debian/rules isn't make -j safe:
clean: clean-patched unpatch

clean-patched should be listed in .PHONY.

vtun should depend on ${misc:Depends}

Could you explain how it is required to run eucalyptus?  (I didn't it in
jaunty)

I think I'll ask Kees for a security pass afterwards.

** Changed in: vtun (Ubuntu)
     Assignee: (unassigned) => Loïc Minier (lool)

-- 
MIR for vtun
https://bugs.launchpad.net/bugs/412059
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to vtun in ubuntu.



More information about the Ubuntu-server-bugs mailing list