Public bug reported:

[Availability]
The package iwd is already in Ubuntu universe.
The package iwd build for the architectures it is designed to work on.
It currently builds and works for architetcures: amd64 arm64 armhf ppc64el 
riscv64 s390x 
Link to package https://launchpad.net/ubuntu/+source/iwd

[Rationale]
- The package iwd is required in Ubuntu main to replace wpa as our default 
wireless service

- The package iwd is required in Ubuntu main no later than aug 25 due to
feature freeze

[Security]
- Had 5 security issues in the past
  - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40861
  - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-40860
  - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-17497
   - https://ubuntu.com/security/CVE-2020-8689
   - https://ubuntu.com/security/CVE-2020-17497

- no `suid` or `sgid` binaries
- no executables in `/sbin` and `/usr/sbin`
- Package does install a service as /lib/systemd/system/iwd.service
  Which has the following security features: PrivateTmp=true, 
NoNewPrivileges=true, DevicePolicy=closed, ProtectSystem=strict, 
ProtectHome=yes, ProtectControlGroups=yes, ProtectKernelModules=yes, 
- Packages does not open privileged ports (ports < 1024)
- Packages does not contain extensions to security-sensitive software

[Quality assurance - function/usage]
- The package works well right after install

[Quality assurance - maintenance]
- The package is maintained well in Debian/Ubuntu and has a few bugs reported 
but nothing critical
  - Ubuntu https://bugs.launchpad.net/ubuntu/+source/iwd/+bug
  - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=iwd
- The package does not deal with exotic hardware we cannot support

[Quality assurance - testing]
- The package runs a test suite on build time, if it fails
  it makes the build fail, link to build log 
https://launchpadlibrarian.net/599165412/buildlog_ubuntu-kinetic-amd64.iwd_1.27-1_BUILDING.txt.gz

- The package runs an autopkgtest, and is currently passing on
  amd64 arm64 armhf s390x ppc64el, https://autopkgtest.ubuntu.com/packages/i/iwd
- The package does have not failing autopkgtests right now

[Quality assurance - packaging]
- debian/watch is present and works

- The package has no important lintian warnings

iwd-1.27# lintian --pedantic
W: iwd source: mismatched-override missing-license-paragraph-in-dep5-copyright 
gpl-2\+ *
W: iwd source: mismatched-override missing-license-paragraph-in-dep5-copyright 
gpl-3\+ *
W: iwd source: mismatched-override missing-license-paragraph-in-dep5-copyright 
lgpl-2\.1\+ *
W: iwd source: mismatched-override ... use --no-tag-display-limit to see all 
(or pipe to a file/program)
W: iwd source: missing-license-paragraph-in-dep5-copyright debian/copyright 
gpl-2+ (line 57)
W: iwd source: missing-license-paragraph-in-dep5-copyright debian/copyright 
gpl-3+ (line 153)
W: iwd source: missing-license-paragraph-in-dep5-copyright debian/copyright 
lgpl-2.1+ (line 33)
W: iwd source: missing-license-text-in-dep5-copyright debian/copyright GPL-2+ 
(line 236)
W: iwd source: missing-license-text-in-dep5-copyright debian/copyright GPL-3+ 
(line 239)
W: iwd source: missing-license-text-in-dep5-copyright debian/copyright 
LGPL-2.1+ (line 262)
W: iwd source: orig-tarball-missing-upstream-signature iwd_1.27.orig.tar.xz
W: iwd source: superfluous-file-pattern debian/copyright */Makefile.in (Files, 
line 59)
W: iwd source: superfluous-file-pattern debian/copyright */configure (Files, 
line 35)
W: iwd source: superfluous-file-pattern debian/copyright */ylwrap (Files, line 
65)
P: iwd source: very-long-line-length-in-source-file build-aux/libtool.m4 line 
6627 is 738 characters long (>512)
P: iwd source: very-long-line-length-in-source-file configure line 10178 is 704 
characters long (>512)

- Lintian overrides are not present

- This package does not rely on obsolete or about to be demoted packages.
- This package has no python2 or GTK2 dependencies

- The package will be installed by default, but does not ask debconf
questions

- Packaging and build is easy,
https://salsa.debian.org/debian/iwd/-/blob/debian/latest/debian/rules

[UI standards]
- Application is not end-user facing (does not need translation)

[Dependencies]
- There are further dependencies that are not yet in main, MIR for them
  is at https://bugs.launchpad.net/ubuntu/+source/ell/+bug/1971738

[Standards compliance]
- This package correctly follows FHS and Debian Policy

[Maintenance/Owner]
- desktop-packages is not yet, but will subscribe to the package before 
promotion

- This does not use static builds
- The package has been built in the archive more recently than the last
  test rebuild

[Background information]
The Package description explains the package well
Upstream Name is iwd
Link to upstream project https://iwd.wiki.kernel.org/

** Affects: iwd (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1971739

Title:
  [MIR] iwd

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/iwd/+bug/1971739/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to