Main Inclusion Report for open-iscsi

Requirements

1. Availability: [http://archive.ubuntu.com/ubuntu/pool/universe/o/open-iscsi/]; available for all supported architectures

2. Rationale:

   • https://wiki.ubuntu.com/ServerPackageReview

3. Security:

   • No recent [http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=open-iscsi CVE] entries

   • No recent [http://secunia.com/search/?search=open-iscsi Secunia] history

   • No binaries running as sgid/suid. The daemon runs as root.
   • Opens up 3205. Listens for SCSI traffic.
   • No source code review.

4. Quality assurance:

   • Due to the nature of the package it does not work out of the box, it requires manual intervention. However an example configuration file is provided.
   • No debconf

   • [http://bugs.debian.org/src:open-iscsi Debian bugs]. Debian maintainer doesn't seem to respond to bugs.

   • [http://packages.qa.debian.org/o/open-iscsi.html Maintenance in Debian] is dead (no version update 2007-06-16)

   • [http://www.open-iscsi.org] is vigorous.

   • [http://groups.google.com/group/open-iscsi/topics Upstream bug tracker]

   • Package deals with hardware that supports the iscsi interface.

5. Standards compliance:

   • [http://www.pathname.com/fhs/ FHS] and [http://www.de.debian.org/doc/debian-policy/ Debian Policy] compliance

   • [http://www.netfort.gr.jp/~dancer/column/libpkg-guide/libpkg-guide.html Debian library packaging guide] standards compliance

   • Uses debhelper, no patching system

6. Dependencies:

   • debhelper, bzip2 which are all in main.

Reviewers

MIR bug: [https://bugs.edge.launchpad.net/ubuntu/+source/open-iscsi/+bug/187135]

ChuckShort