Bug 908081

Summary: RFE: package journald (http) gatewayd separately
Product: [Fedora] Fedora Reporter: Matthew Miller <mattdm>
Component: systemdAssignee: systemd-maint
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: rawhideCC: harald, herrold, johannbg, lnykryn, metherid, mschmidt, msekleta, notting, plautrba, systemd-maint, vpavlin
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: systemd-204-10.fc20 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-07-16 10:48:39 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 906530    

Description Matthew Miller 2013-02-05 20:12:33 UTC
The journal gatewayd service allows log access of the network (see http://www.freedesktop.org/software/systemd/man/systemd-journal-gatewayd.service.html for details if you're just joining in).

It's off by default, and uses libmicrohttpd. It _doesn't_ provide any filtering or access control.

The dependencies are small, but I think it would still be better to make this a subpackage, because it's feature most people won't need or benefit from, and not including it when not needed reduces the attack surface both for information leaks and possible escalation vulnerabilities.

Comment 1 Matthew Miller 2013-03-26 20:51:22 UTC
In Fedora 19, the dependency chain has grown a little more important, since libmicrohttpd now uses gnutls, and is the only package in the minimal install which does so; this pulls in gnutls and its new dependent libs nettle and hogweed.

I see the interest in this functionality, but I'd really like to see it as a subpackage for F19.

Comment 2 Matthew Miller 2013-05-09 03:40:12 UTC
Ping on this one.

From the closing comments in bug #907551, maybe we should just ship with it not built at all for this release?

Comment 3 Lennart Poettering 2013-05-09 12:49:28 UTC
You really hate that thing don't you? ;-)

I see no problem with shipping it. We shouldn't turn it on by default however, since it's unprotected.

Comment 4 Matthew Miller 2013-05-09 15:01:35 UTC
(In reply to comment #3)
> You really hate that thing don't you? ;-)

Let's just say it concerns me. I have no problem with it as a potential solution for certain cases.

> I see no problem with shipping it. We shouldn't turn it on by default
> however, since it's unprotected.

I don't really mind shipping it as a separate package.  But to quote Kay:

>> I totally see the benefit in general, but we should not offer any unfinished
>> interfaces to the public, also not in anaconda.
>> It's not only insecure by default, it might also change its interfaces in
>> the future. It should not be exposed in its current state, only developers
>> or very specific setups, which are aware of the risks, should use it.

To me, this suggests that separating it is the right thing, for users who might not realize that something installed as part of the core is so experimental. But, I also don't like the dependency creep and particularly additional crypto in @core.

Comment 5 Kay Sievers 2013-06-21 11:48:32 UTC
It should probably just be disabled in the RHEL7 build, if it should not
appear there:
  --disable-microhttpd

Comment 7 Matthew Miller 2013-06-21 13:06:02 UTC
That's fine for RHEL, but this is for Fedora.

When this issue initially came up, Lennart said

 Correspondingly the microhttpd library is only pulled in by the journal
 gateway daemon, which is responsible for the HTTP iface to the journal.
 We thought about splitting this off into an individual package (and it
 would be really easy to still do that), but as the code of libmicrohttpd
 is minimal, and it doesn't pull in any deps beyond what is already in the
 minimal installation set we didn't bother so far.

  https://lists.fedoraproject.org/pipermail/devel/2012-October/172163.html

This is a request to actually do the "really easy to still do that" subpackaging, because as noted above, it actually _does_ pull in deps beyond what is in the minimal installation.

I would also be fine with disabling it completely in Fedora, but it seems more useful to have it as a subpackage so people who do want to experiment with it have it readily available.

Comment 8 Michal Schmidt 2013-07-16 10:48:39 UTC
Forgot to update the BZ...

* Wed Jun 26 2013 Michal Schmidt <mschmidt> 204-10
- Split systemd-journal-gateway subpackage (#908081).