[Bug 1746680] Re: [MIR] xe-guest-utilities

[Mathieu Trudel-Lapierre]

Let's get this reviewed by Security.

I have not looked at it at all yet, but it is a daemon dealing with Xen
domains, etc.

** Changed in: xe-guest-utilities (Ubuntu)
     Assignee: (unassigned) => Ubuntu Security Team (ubuntu-security)

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to xe-guest-utilities in Ubuntu.
https://bugs.launchpad.net/bugs/1746680

Title:
  [MIR] xe-guest-utilities

Status in xe-guest-utilities package in Ubuntu:
  Triaged

Bug description:
  [Availability]
  * Since pre-precise, available on all architectures
  * Previously it was an arch:all, since recently it is arc:any as it got rewritten in golang upstream.

  [Rationale]
  * Multiple clouds which use XEN like hypervisors, use xe-guest-utilities to communicate with the XEN host, to retrieve cloud-config drive.

  [Security]
  * Ships a daemon
  * Adds a mountpoint of /proc/xen
  * Uses /proc/xen
  * Adds udev rules for hotplug cpus
  * golang...

  [Quality assurance]
  * well maintained upstream
  * well maintain debian package
  * simply packaging

  [Dependencies]
  * init-system-helpers... the rest is statically linked golang

  [Standards compliance]
  * Complies with debian policy

  [Maintenance]
  * little, to none required.

  [Background information]
  * Used by some xen based Openstack public clouds.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xe-guest-utilities/+bug/1746680/+subscriptions