ubuntu-server depends on open-iscsi and runs iscsid

Bug #1630946 reported by Brian Candler on 2016-10-06
44
This bug affects 8 people
Affects Status Importance Assigned to Milestone
ubuntu-meta (Ubuntu)
Medium
Unassigned

Bug Description

ubuntu-server has a hard dependency on open-iscsi, which means there is a daemon running (iscsid), and the package cannot be removed. All unnecessary daemons are a cause of concern when auditing a system.

Propose moving this to "Recommends" instead, which currently has:

Recommends: lxd, snapd

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: ubuntu-server 1.361
ProcVersionSignature: Ubuntu 4.4.0-38.57-generic 4.4.19
Uname: Linux 4.4.0-38-generic x86_64
NonfreeKernelModules: zfs zunicode zcommon znvpair zavl
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: amd64
Date: Thu Oct 6 10:43:04 2016
Ec2AMI: ami-c06b1eb3
Ec2AMIManifest: (unknown)
Ec2AvailabilityZone: eu-west-1a
Ec2InstanceType: t2.medium
Ec2Kernel: unavailable
Ec2Ramdisk: unavailable
ProcEnviron:
 TERM=xterm-256color
 SHELL=/bin/bash
 PATH=(custom, user)
 LANG=en_US.UTF-8
 XDG_RUNTIME_DIR=<set>
SourcePackage: ubuntu-meta
UpgradeStatus: No upgrade log present (probably fresh install)

CVE References

Brian Candler (b-candler) wrote :
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in ubuntu-meta (Ubuntu):
status: New → Confirmed
Changed in ubuntu-meta (Ubuntu):
importance: Undecided → Medium
Wido den Hollander (wido) wrote :

Noticed this as well. I saw the iscsid daemon running on my systems, but found out that these were installed by default.

root@sat01:~# apt remove open-iscsi
Reading package lists... Done
Building dependency tree
Reading state information... Done
The following packages were automatically installed and are no longer required:
  linux-headers-4.4.0-62 linux-headers-4.4.0-62-generic linux-headers-4.4.0-63 linux-headers-4.4.0-63-generic linux-headers-4.4.0-64
  linux-headers-4.4.0-64-generic linux-headers-4.4.0-66 linux-headers-4.4.0-66-generic linux-headers-4.4.0-70 linux-headers-4.4.0-70-generic
Use 'apt autoremove' to remove them.
The following packages will be REMOVED:
  open-iscsi ubuntu-server

This should be modified that open-iscsi is not installed by default

clickwir (clickwir) wrote :

Would like to have the ability to cleanly remove iscsi related processes from systems that don't need it.

Sitting there, it's not hard on resources, but I'm trying to shave off anything I can.

Brian Candler (b-candler) wrote :

Workaround:

systemctl stop iscsid
systemctl disable iscsid

... but I still object to not being able to remove it without also removing ubuntu-server.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers