Bug 1822671 - Please stop shipping rdist
Summary: Please stop shipping rdist
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora
Classification: Fedora
Component: rdist
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Michal Ruprich
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-04-09 15:11 UTC by Robbie Harwood
Modified: 2020-08-05 09:58 UTC (History)
6 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-08-05 09:58:56 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Robbie Harwood 2020-04-09 15:11:16 UTC
Hi, you also maintain rsync, so hopefully you appreciate how legacy rdist is at this point :)

It's built on the rlogin protocol, which is wildly insecure at this point.  The last functional change to this package was made in 2006 (i.e., 13+ years ago now).

Comment 1 Michal Ruprich 2020-04-22 08:56:58 UTC
I have no problem with dropping this package, I don't think there is anything that this package can do that is not achievable with rsync. However, one other package depend on rdist:

# dnf repoquery --enablerepo=* --whatrequires rdist
rssh-0:2.3.4-14.fc31.src
rssh-0:2.3.4-16.fc31.src

Comment 2 Tomáš Hozza 2020-04-22 09:14:24 UTC
The package is still shipped in supported versions of RHEL and for this reason we keep these packages also in Fedora, to be able to leverage existing user base for testing any potential future fixes.


Note You need to log in before you can comment on or make changes to this bug.