[Bug 523540] Review Request: opentracker - BitTorrent Tracker

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=523540

--- Comment #52 from Romain Wartel <romain.wartel@xxxxxxx> 2010-04-09 04:02:53 EDT ---
Simon,

I think it is essential that the service provider have control over the service
they provide, and can decide to control access to it, should it be opentracker,
sshd, imap, etc.

The whitelist feature is useful for us to ensure the performance and integrity
of the service we provide to our users. In our environment, our users have no
need or will to add themselves new torrents.
Access control mechanisms in general are not aimed at diminishing the freedom
of users, but to ensure confidentiality, integrity and availability, etc.

Both the backlist and whitelist options are fully implemented, and even if they
are compiled in the package, they remain anyway _disabled by default_. 

I have made small modifications to the patches you have made, to chroot
opentracker in /var/opentracker, directory in which the whitelist can now be
successfully accessed.

The problem was caused by the default chroot (in ".") applied by opentracker
when "-d" or "tracker.rootdir" is not called or instanciated, and which caused
problem when the process was daemonised.

Although the issue is fully resolved by new spec+config files, I have reported
it upstream.

I have also suggested the author to push as much options as possible from the
source code or compile time to the configuration file, like the user used when
privileges are dropped (hardcoded to "nobody", changed to "opentracker" in the
current package).

I have attached the SRPM we use here, in case anyone finds it useful.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review

[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]