Bug 1822671

Summary:	Please stop shipping rdist
Product:	[Fedora] Fedora	Reporter:	Robbie Harwood <rharwood>
Component:	rdist	Assignee:	Michal Ruprich <mruprich>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	code, jmoskovc, luhliari, mruprich, thozza, vvitek
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-08-05 09:58:56 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Robbie Harwood 2020-04-09 15:11:16 UTC

Hi, you also maintain rsync, so hopefully you appreciate how legacy rdist is at this point :)

It's built on the rlogin protocol, which is wildly insecure at this point.  The last functional change to this package was made in 2006 (i.e., 13+ years ago now).

Comment 1 Michal Ruprich 2020-04-22 08:56:58 UTC

I have no problem with dropping this package, I don't think there is anything that this package can do that is not achievable with rsync. However, one other package depend on rdist:

# dnf repoquery --enablerepo=* --whatrequires rdist
rssh-0:2.3.4-14.fc31.src
rssh-0:2.3.4-16.fc31.src

Comment 2 Tomáš Hozza 2020-04-22 09:14:24 UTC

The package is still shipped in supported versions of RHEL and for this reason we keep these packages also in Fedora, to be able to leverage existing user base for testing any potential future fixes.