[Summary] OpenStack dashboard extension for Octavia (Load balancer as a service).
MIR team approval for inclusion in Ubuntu main. Recommendations: Add autopkgtest for this package - ubuntu-openstack [Duplication] There is no other package in main providing the same functionality. [Dependencies] OK: - no other Dependencies to MIR due to this - no -dev/-debug/-doc packages that need exclusion [Embedded sources and static linking] OK: - no embedded source present - no static linking [Security] OK: - history of CVEs does not look concerning No history specific to the dashboard component of octavia https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=octavia - does not run a daemon as root - does not use webkit1,2 - does not use lib*v8 directly - does not parse data formats - does not open a port - does not process arbitrary web content - does not use centralized online accounts - does not integrate arbitrary javascript into the desktop - does not deal with system authentication (e.g. pam), etc) [Common blockers] OK: - does not FTBFS currently - does have a test suite that runs at build time - test suite fails will fail the build upon error. - does have a test suite that runs as autopkgtest No (recommendation to add) - The package has a team bug subscriber ubuntu-openstack - translations present from upstream and included in package - no new python2 dependency - Python package that is using dh_python [Packaging red flags] OK: - Ubuntu does carry a delta, but it is reasonable and maintenance under control Ubuntu OpenStack > Debian OpenStack but this is normal - symbols tracking not applicable for this kind of code. - d/watch is present and looks ok - Upstream update history is good - Debian/Ubuntu update history is good - the current release is packaged - promoting this does not seem to cause issues for MOTUs that so far maintained the package - no massive Lintian warnings - d/rules is rather clean - not using Built-Using [Upstream red flags] OK: - no Errors/warnings during the build - no incautious use of malloc/sprintf (as far as I can check it) - no use of sudo, gksu, pkexec, or LD_LIBRARY_PATH - no use of user nobody - no use of setuid - no important open bugs (crashers, etc) in Debian or Ubuntu - no dependency on webkit, qtwebkit, seed or libgoa-* - no embedded source copies - not part of the UI for extra checks ** Changed in: octavia-dashboard (Ubuntu) Status: In Progress => Confirmed ** Changed in: octavia-dashboard (Ubuntu) Assignee: James Page (james-page) => (unassigned) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1801094 Title: [MIR] octavia-dashboard To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/octavia-dashboard/+bug/1801094/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
