I must second your statement in regard to feel somewhere in between, for
being used and omnipresent yet at the same time feeling somewhat
neglected upstream.

But for a positive mood, looking back at the old blockers we have some
improvements since then.

- Server team added tests that were called out in the MIR review via 
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032321
- Upstream somewhat (not as much as you'd wish but hey) came to live as 
reported by Antoine in 
https://bugs.launchpad.net/ubuntu/+source/ipmitool/+bug/1978144/comments/7

The discussion about CVEs in
https://bugs.launchpad.net/ubuntu/+source/ipmitool/+bug/1978144/comments/7
and
https://bugs.launchpad.net/ubuntu/+source/ipmitool/+bug/1978144/comments/8
shows that this will be an interesting ride any way.

But due to its quite common use we already maintain, monitor and watch it as if 
it would be in main,
and maybe it is indeed time to step further as Seth said "if a team doesn't 
follow best practices, is that on us or on them?". For that all the 
improvements are already good, and the suggested addition of an apparmor 
profile might be enough to say "it isn't perfect, but since it is used much 
this should make it save enough". We have to acknowledge that this is 
responsible for interacting with a lot of odd hardware, expect a lot of /dev 
paths to be present and likely that execution on different machines will need 
different paths. So as Seth said it can't be hyper specific.

Overall, from MIR POV the missing tests are resolved, if from a security
POV we expect an ACK once an apparmor profile was added that might be
the way forward here.

** Bug watch added: Debian Bug tracker #1032321
   https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032321

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1978144

Title:
  [MIR] ipmitool

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ipmitool/+bug/1978144/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to