For the next FESCo meeting to review:
TCP wrappers is a simple tool to block incoming connection on application level. This was very useful 20 years ago, when there were no firewalls in Linux. This is not the case for today and connection filtering should be done in network level or completely in application scope if it makes sense. After recent discussions I believe it is time to go for this package, if not completely, than at least as a dependency of modern daemons in system by default.
Metadata Update from @kevin: - Issue tagged with: meeting
AGREED: approve change for f28, ask that they file a tracking bug with packages using tcp_wrappers and progress dropping that dependency (+7,-1,0) (nirik, 18:02:30)
Metadata Update from @kevin: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
I think we need to activate the contingency mechanism on this, because not all dependencies have been dropped: $ dnf repoquery --whatrequires tcp_wrappers-libs --alldeps apcupsd-0:3.14.14-8.fc28.x86_64 apcupsd-cgi-0:3.14.14-8.fc28.x86_64 apcupsd-gui-0:3.14.14-8.fc28.x86_64 libyaz-0:5.14.11-9.fc28.i686 libyaz-0:5.14.11-9.fc28.x86_64 nrpe-0:3.2.1-1.fc28.x86_64 nut-0:2.7.4-13.fc28.i686 nut-0:2.7.4-13.fc28.x86_64 openhpi-subagent-0:2.3.4-33.fc27.x86_64 redir-0:2.2.1-18.fc27.x86_64 slapi-nis-0:0.56.2-1.fc28.x86_64 tcp_wrappers-0:7.6-89.fc28.x86_64 tcp_wrappers-0:7.6-90.fc28.x86_64 uwsgi-router-access-0:2.0.15-7.fc28.x86_64
Those packages are now FTBFS in F28, and that's not a good state. IMHO the best solution is to restore the -devel subpackage in F28.
Metadata Update from @zbyszek: - Issue status updated to: Open (was: Closed)
I posted to the QA list to ask what they thought about the ppp FTBFS.
I think we need to activate the contingency mechanism on this, because not all dependencies have been dropped: $ dnf repoquery --whatrequires tcp_wrappers-libs --alldeps
The problem with this query is that it will also show packages from stable that require tcp_wrappers-libs but have a newer version in updates-testing.
This was discussed in the last meeting (2018-03-23): AGREED: FESCo authorizes use of pp privileges to apply patches and do rebuils for those packages where the change is stalled (+7, 0, -0) (tyll, 16:56:06) ACTION: till write use his PP powers to merge tcp wrapper patches (tyll, 16:56:48)
There are now updates for all remaining packages in updates testing For reference, the tracking bug is: https://bugzilla.redhat.com/show_bug.cgi?id=1495181
Metadata Update from @till: - Issue assigned to till
Metadata Update from @till: - Issue close_status updated to: Fixed
Log in to comment on this ticket.