lshell component is not maintained

Bug #1795451 reported by Bruce Jones
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Medium
Lin Shuicheng

Bug Description

This is a clone/fork of bug https://bugs.launchpad.net/starlingx/+bug/1794868, which is private to the security team.

The lshell component in StarlingX is a package that no longer seems to be maintained. We should replace that functionality with a package / design that does not depend on un-maintained packages.

This bug is not for discussing any security related issues with lshell. Those should be worked in 1794868.

If this bug is resolved by replacing or removing lshell, then bug 1794868 can also be closed. That will have to be done by someone on the StarlingX security team.

Bruce Jones (brucej)
tags: added: stx.distro.other
Changed in starlingx:
importance: Undecided → Medium
assignee: nobody → Cindy Xie (xxie1)
Ghada Khalil (gkhalil)
tags: added: stx.2019.03
Cindy Xie (xxie1)
Changed in starlingx:
assignee: Cindy Xie (xxie1) → Lin Shuicheng (shuicheng)
Ghada Khalil (gkhalil)
Changed in starlingx:
status: New → Triaged
summary: - lshell comppnent is not maintained
+ lshell component is not maintained
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to stx-integ (master)

Fix proposed to branch: master
Review: https://review.openstack.org/610761

Changed in starlingx:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to stx-config (master)

Fix proposed to branch: master
Review: https://review.openstack.org/610767

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to stx-tools (master)

Fix proposed to branch: master
Review: https://review.openstack.org/610791

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to stx-integ (master)

Reviewed: https://review.openstack.org/610761
Committed: https://git.openstack.org/cgit/openstack/stx-integ/commit/?id=6a6ea416e1c70d11f8a5c6c69b226e9a68ee0bdd
Submitter: Zuul
Branch: master

commit 6a6ea416e1c70d11f8a5c6c69b226e9a68ee0bdd
Author: slin14 <email address hidden>
Date: Tue Oct 16 19:43:58 2018 +0800

    remove lshell

    There is security related issue with lshell, and it is not
    maintained now. So remove it from our system to avoid
    security issue.

    To remove lshell:
    1. Package sudo-config is created for wrs.sudo configure file
    following the refactor process.
    2. ldapusersetup in ldapscripts is modified to use bash only.
    lshell support is removed.

    ldapusersetup related patches are merged into 1 for easy
    maintenance.

    Test has been done:
    Build and deploy test is done, also unit tests for ldap are
    executed with pass, except lshell related test.

    Closes-Bug: 1795451

    Change-Id: Ia5de1bc94d22eb6c9bea6d9a96e92564ad848b19
    Signed-off-by: slin14 <email address hidden>

Changed in starlingx:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to stx-config (master)

Reviewed: https://review.openstack.org/610767
Committed: https://git.openstack.org/cgit/openstack/stx-config/commit/?id=af2f75a17c1fd6bf9ab782a19cefb8acb8c1f0d6
Submitter: Zuul
Branch: master

commit af2f75a17c1fd6bf9ab782a19cefb8acb8c1f0d6
Author: slin14 <email address hidden>
Date: Tue Oct 16 19:57:12 2018 +0800

    remove lshell dependency

    lshell is removed from system for security reason. So delete the
    lshell requirement.

    Partial-Bug: 1795451
    Depends-On: https://review.openstack.org/610761

    Change-Id: I0b279cc0bb7d3de5dc853a202f04bf71fdb8b2f3
    Signed-off-by: slin14 <email address hidden>

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to stx-tools (master)

Reviewed: https://review.openstack.org/610791
Committed: https://git.openstack.org/cgit/openstack/stx-tools/commit/?id=d80c2f8e9d6d8b6e36cef8290c1102544964fb65
Submitter: Zuul
Branch: master

commit d80c2f8e9d6d8b6e36cef8290c1102544964fb65
Author: slin14 <email address hidden>
Date: Tue Oct 16 20:31:51 2018 +0800

    remove lshell from mirror list

    lshell is removed from system for security reason.
    And lshell dependency has been removed with below patch:
    https://review.openstack.org/610761
    https://review.openstack.org/610767
    So we could remove lshell srpm from list here safely.

    Partial-Bug: 1795451
    Depends-On: https://review.openstack.org/610767

    Change-Id: Iba78c7c015b0f1d3db50016d8e21eea53109f0db
    Signed-off-by: slin14 <email address hidden>

Ken Young (kenyis)
tags: added: stx.2019.05
removed: stx.2019.03
Ken Young (kenyis)
tags: added: stx.2.0
removed: stx.2019.05
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.