Main Inclusion Report for open-iscsi

Requirements

1. Availability: http://archive.ubuntu.com/ubuntu/pool/universe/o/open-iscsi/; available for all supported architectures

2. Rationale:

   • https://wiki.ubuntu.com/ServerPackageReview

3. Security:

   • No recent CVE entries

   • No recent Secunia history

   • No binaries running as sgid/suid. The daemon runs as root.
   • Opens up 3205. Listens for SCSI traffic.
   • No source code review.

4. Quality assurance:

   • Due to the nature of the package it does not work out of the box, it requires manual intervention. However an example configuration file is provided.
   • No debconf

   • Debian bugs. Debian maintainer doesn't seem to respond to bugs.

   • Maintenance in Debian is dead (no version update 2007-06-16)

   • http://www.open-iscsi.org is vigorous.

   • Upstream bug tracker

   • Package deals with hardware that supports the iscsi interface.

5. Standards compliance:

   • FHS and Debian Policy compliance

   • Debian library packaging guide standards compliance

   • Uses debhelper, no patching system

6. Dependencies:

   • debhelper, bzip2 which are all in main.

Reviewers

MIR bug: https://bugs.edge.launchpad.net/ubuntu/+source/open-iscsi/+bug/187135

ChuckShort