MIR for slugimage, uboot-mkimage and apex

[Steve Kowalik]

Binary package hint: slugimage

Both slugimage and uboot-mkimage are completly trivial, as discussed with Martin Pitt, I won't file a report for either. A report for apex will be attached.

[Steve Kowalik (stevenk)]

MIR for apex:

 * Availability: http://archive.ubuntu.com/ubuntu/pool/universe/a/apex; available for all architectures
 * Rationale: Build dependency of apex
 * Security:
   - http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=apex ; None related to the package in request
   - http://secunia.com/search/?search=apex ; None
   - It's a boot loader, so a binary or two running as root. Also deals with firmware, which is binary data.
   - No network, etc, hand-wave.
   - No source code review
 * Quality Assurance:
    - Package works out of the box
    - No debconf
    - http://bugs.debian.org/src:apex ; No real showstopper bugs
    - Maintenance in Debian is dead
    - Upstream is http://wiki.buici.com/wiki/Apex_Bootloader ; looks calm
    - Deals with NSLU2, a fairly cheap and common ARM machine
    - No test suite
 * UI standards:
    - It uses gettext.
 * Standards compliance
    - Complies to Debian Policy
    - No libraries.
    - Packaging system is bog-standard debhelper, no oddities.
  * Dependencies:
     - Requires devio
  * Maintenance
     - Should take care of itself
     - Upstream maintains package in Debian.

[Steve Kowalik (stevenk)]

Add devio, also no report, it's trivial.

[Steve Kowalik (stevenk)]

Sorry, the rationale for apex should be: Build dependency of debian-installer

[Steve Kowalik (stevenk)]

devio is already in main, sorry.

And the rationale for *all* of them, not just apex is that they are build dependancies of debian-installer on armel. Filing MIRs while jetlagged == badness.

[Loïc Minier (lool)]

apex looks good.

[Loïc Minier (lool)]

slugimage looks good; it does manipulate files which could be specially crafted, but these need to be verified separately anyway, and is not a real use case; there's a small test suite.

[Loïc Minier (lool)]

uboot-mkimage is trivial (and adopted by apex' upstream!).

[Martin Pitt (pitti)]

sugimage and uboot-mkimage promoted.

[Martin Pitt (pitti)]

Thanks, Loic for the reviews!

apex is FTBFS. Please fix this first, and then set back to in progress.

[Colin Watson (cjwatson)]

I've uploaded a putative fix for the apex build failure; I'll update this bug if it builds successfully.

[Steve Kowalik (stevenk)]

apex built and published fine, slammed back to In Progress.

[Martin Pitt (pitti)]

Promoted.