** Description changed:
+ Availability: ipmitool is in universe in Precise, Trusty and Xenial.
+
+ Rationale: ipmitool is a new Recommends of cluster-glue, which is in
+ Main. Additionally, ipmitool is a reasonably common program for systems
+ management, and it makes some sense for it to be in Main.
+
+ Security: The security history for the ipmitool package is fairly quiet.
+
+ Reviewing CVEs for ipmitool, I found only one relevant one:
+ http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4339 which was
+ fixed in Debian.
+
+ ipmitool installs one binary to /usr/sbin:
+
+ /usr/sbin/ipmievd
+
+ and one corresponding service:
+
+ /etc/init.d/ipmievd
+ /lib/systemd/system/ipmievd.service
+
+ ipmievd itself is a logging daemon that transfer logs from a BMC to
+ syslog and seems like a low exposure (accounting for the afore-mentioned
+ CVE).
+
+ Quality assurance:
+
+ Installation of ipmitool results in an immediately working package.
+ Site-specific options for accessing a BMC may be necessary, but are
+ documented in the man-page.
+
+ No debconf questions are asked during installation.
+
+ https://bugs.launchpad.net/ubuntu/+source/ipmitool indicates no
+ outstanding long-term bugs exist for ipmitool.
+
+ Debian's bug tracker implies no significant bugs exist, excepting possibly
related to whether ipmievd should start by default (due to dependencies on
particular kernel modules).
+ https://bugs.debian.org/cgi-bin/pkgreport.cgi?pkg=ipmitool
+
+ The upstream bug tracker
+ https://sourceforge.net/p/ipmitool/bugs/?source=navbar mostly contains
+ feature requests.
+
+ ipmitool is well-maintained in Debian and Ubuntu.
+
+ ipmitool does not ship a test suite; any test suite it shipped would
+ also have strict hardware dependencies, I think.
+
+ ipmitool uses a debian/watch file and uscan/uupdate function currently.
+
+ I am not sure that the end-user application (ipmitool itself) has been
+ internationalized yet. Nor does there appear to be a desktop file, but
+ ipmitool would primarily be used on servers.
+
+ Dependencies:
+
+ All build and binary dependencies (including Recommends:) are
+ satisfyable in main.
+
+ Standards compliance: The package meets the FHS and Debian Policy
+ standards.
+
+ Maintenance: The Ubuntu Server team will maintain this package.
+
+ Background information:
+
+ The package descriptions correctly explain the general purpose and
+ context of the package.
+
+ == Original report ==
+
cluster-glue has added a recommends: against ipmitool, currently in
universe. This looks to me like a reasonable thing to have in main, but
needs to go through the MIR process.
cluster-glue is owned by the server team.
** Changed in: ipmitool (Ubuntu)
Status: Incomplete => New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1576812
Title:
[MIR] ipmitool
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipmitool/+bug/1576812/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
