Bug 457888
Summary: | Review Request: fwknop - A Single Packet Authorization (SPA) implementation | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Miloslav Trmač <mitr> |
Component: | Package Review | Assignee: | Adam Tkac <atkac> |
Status: | CLOSED NEXTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | rawhide | CC: | atkac, fedora-package-review, kevin, notting, ovasik, pvrabec |
Target Milestone: | --- | Flags: | atkac:
fedora-review+
kevin: fedora-cvs+ |
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-11-10 16:47:35 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 457543, 457544, 457545, 457546 | ||
Bug Blocks: |
Description
Miloslav Trmač
2008-08-05 08:29:33 UTC
I will take care about this review. Specfile --- - I think that daemons should be compiled with -fpie/-fPIE, shouldn't them? (especially security related daemons) - if you are going to put package only into rawhide please remove BuildRoot definition (see http://wiki.rpm.org/Releases/4.5.90 - it is ignored) ---------------------------- rpmlint --- src.rpm -> OK binary rpm: fwknop.x86_64: W: log-files-without-logrotate /var/log/fwknop - would it be possible add logrotate script? It will prevent endless grow of log file. fwknop.x86_64: W: dangerous-command-in-%post perl - this doesn't look right for me. I think that part of configuration file should be changed by administrator, not by script (or simply put there "localhost" in %install section of spec) It would be nice to have SELinux policy for this package but if it not exists yet I'm not going to block this review. Otherwise package seems fine for me. SRPM: http://people.redhat.com/pvrabec/rpms/fwknop-1.9.6-2.fc9.src.rpm SPEC: http://people.redhat.com/pvrabec/rpms/fwknop.spec PIE: see http://fedoraproject.org/wiki/Security/Features I don't think we need to compile it with -fpie/-fPIE I left BuildRoot in spec file, it doesn't hurt and you can create the packege even on older systems. Everything else was fixed. Package looks fine, reviewed New Package CVS Request ======================= Package Name: fwknop Short Description: A Single Packet Authorization (SPA) implementation Owners: pvrabec,mitr Branches: InitialCC: Cvsextras Commits: yes cvs done. Please make sure to assign the bug to reviewer. Package Change Request ====================== Package Name: fwknop New Branches: F-9 Thanks in advance. cvs done. Package Change Request ====================== Package Name: fwknop New Branches: F-9 I'm afraid I can't see the F-9 branch in a fresh checkout. I see it fine here... Are you sure you are using 'cvs update -d' to get new directories? Right, it's there now - but using exactly the same command, I didn't get a F-9 branch yesterday. Weird. It might have been that something was messed up and the branches were not created, but if so I didn't fix it. Perhaps some other cvsadmin noticed it and fixed it? In any case, sorry for the troubles... |