MainInclusionReportUFW

Differences between revisions 3 and 4
⇤ ← Revision 3 as of 2008-02-06 22:09:06 →
Size: 1726
Editor: mail
Comment:
← Revision 4 as of 2008-08-06 16:15:17 → ⇥
Size: 1746
Editor: localhost
Comment: converted to 1.6 markup
Deletions are marked like this. Additions are marked like this.
Line 3: Line 3:
 0. ''Availability:'' [http://archive.ubuntu.com/ubuntu/pool/universe/u/ufw]; available for all supported architectures  0. ''Availability:'' [[http://archive.ubuntu.com/ubuntu/pool/universe/u/ufw]]; available for all supported architectures
Line 7: Line 7:
  * No [http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ufw CVE entries]
  * No [http://secunia.com/search/?search=ufw Secunia history]		   * No [[http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=ufw|CVE entries]]
  * No [[http://secunia.com/search/?search=ufw|Secunia history]]
Line 17: Line 17:
  * [https://launchpad.net/ufw/ Upstream] is vigorous
  * [https://bugs.launchpad.net/ufw/ Upstream bug tracker]: no relevant bugs		   * [[https://launchpad.net/ufw/|Upstream]] is vigorous
  * [[https://bugs.launchpad.net/ufw/|Upstream bug tracker]]: no relevant bugs
Line 20: Line 20:
  * [http://www.pathname.com/fhs/ FHS], [http://www.de.debian.org/doc/debian-policy/ Debian Policy] compliant
  * [http://www.python.org/dev/peps/pep-0008/ PEP-8] compliant
  * Uses debhelper, pycentral and ucf. Follows [http://wiki.debian.org/DebianPython/NewPolicy Debian Python New Policy]. Does not include a patch system (native package).		   * [[http://www.pathname.com/fhs/|FHS]], [[http://www.de.debian.org/doc/debian-policy/|Debian Policy]] compliant
  * [[http://www.python.org/dev/peps/pep-0008/|PEP-8]] compliant
  * Uses debhelper, pycentral and ucf. Follows [[http://wiki.debian.org/DebianPython/NewPolicy|Debian Python New Policy]]. Does not include a patch system (native package).
Line 28: Line 28:
MIR bug: [https://bugs.launchpad.net/ubuntu/+source/ufw/+bug/189744] MIR bug: [[https://bugs.launchpad.net/ubuntu/+source/ufw/+bug/189744]]

Requirements

  1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/u/ufw; available for all supported architectures

  2. Rationale:

  3. Security:

    • No CVE entries

    • No Secunia history

    • No suid/sgid root binaries
    • No daemons
    • Does not open a port or process network data
    • Single monolithic python script (/usr/sbin/ufw). No source code review.

  4. Quality assurance:

    • On installation, the user must explicitly enable the firewall with 'ufw enable', otherwise no firewalling is performed.
    • The package has one note, which notifies the user of having to manually migrate ufw.rules if it exists. This file was included in 0.7, but version 0.9 (which doesn't include the file) is the one that was announced to the Ubuntu community.
    • This is a native Ubuntu package and not included in Debian

    • Upstream is vigorous

    • Upstream bug tracker: no relevant bugs

  5. Standards compliance:

  6. Dependencies:

    • Depends on debconf, iptables, python, and ucf, all of which are in main.

Reviewers

MIR bug: https://bugs.launchpad.net/ubuntu/+source/ufw/+bug/189744

JamieStrandboge

MainInclusionReportUFW (last edited 2008-08-06 16:15:17 by localhost)