Please remove secvpn source and binary

[Scott Kitterman]

Binary package hint: secvpn

secvpn | 2.21 | hardy/universe | source, all

This package appears to be broken, obsolete, and have a very poor security design. While looking into fixing Bug #152968, I noticed that in addition to still needing the long gone /etc/inittab, it also does interesting things like add its user to the sudoers group.

It looks to me like the init process, including setuid will have to be completely redone. Please have a look at this package and unless you think it can reasonably be made safe and funcitonal, remove it. There are plenty of other options in the repostories.

[Sebastien Bacher (seb128)]

could you try to talk to the debian maintainer if it's broken if would makes sense to get it removed there as well and would simply the work for Ubuntu

[wolfger (wolfger)]

6 months with no response. We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!

[Scott Kitterman (kitterman)]

Dear bugsquad people: Please don't mess with archive management bugs. Ask bdmurray about it if you have questions. Talk to the Debian Maintainer is still on my TODO list and the package is still broken, obsolete, and has a poor security design.

[Scott Kitterman (kitterman)]

In Progress has a specific meaning for some workflow bugs. This isn't ready for the archive to look at again.

[Colin Watson (cjwatson)]

In which case the archive team probably shouldn't be subscribed. Please re-subscribe ubuntu-archive when this is ready.

[Dimitrios Symeonidis (azimout)]

Scott, any news on removing this?

[Adi Prizandi (anaqimuddin4213)]

Error my ubuntu 9.10

[Michael Vogt (mvo)]

Can we please get rid of this package for maverick? Because of bug #327482 it will not install on most systems because it relies on /etc/inittab and causes problems for our users.

[Scott Kitterman (kitterman)]

Yes. Please. It's even more clearly time now than it was two years ago.