[Bug 1746680] Re: [MIR] xe-guest-utilities

[Seth Arnold]

/usr/sbin/xe-linux-distribution is pretty gross code; shellcheck reports
two dozen issues, many of which might be reliability issues. The use of
'eval' on data returned from the various consulted files might be a
security issue. (While one might expect that the files used to identify
e.g. Ubuntu would be under strict control, I can't promise the same
about files used to identify Asianux, Turbo, Kylin, Yinhe, Linx, etc.)

Can we instead just write the expected values to /var/cache/xe-linux-
distribution ourselves in the /lib/systemd/system/xe-daemon.service
file?

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to xe-guest-utilities in Ubuntu.
https://bugs.launchpad.net/bugs/1746680

Title:
  [MIR] xe-guest-utilities

Status in xe-guest-utilities package in Ubuntu:
  Triaged

Bug description:
  [Availability]
  * Since pre-precise, available on all architectures
  * Previously it was an arch:all, since recently it is arc:any as it got rewritten in golang upstream.

  [Rationale]
  * Multiple clouds which use XEN like hypervisors, use xe-guest-utilities to communicate with the XEN host, to retrieve cloud-config drive.

  [Security]
  * Ships a daemon
  * Adds a mountpoint of /proc/xen
  * Uses /proc/xen
  * Adds udev rules for hotplug cpus
  * golang...

  [Quality assurance]
  * well maintained upstream
  * well maintain debian package
  * simply packaging

  [Dependencies]
  * init-system-helpers... the rest is statically linked golang

  [Standards compliance]
  * Complies with debian policy

  [Maintenance]
  * little, to none required.

  [Background information]
  * Used by some xen based Openstack public clouds.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/xe-guest-utilities/+bug/1746680/+subscriptions