[Bug 922438] Review Request: libreswan - IPsec implementation with IKEv1 and IKEv2 keying protocols

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Product: Fedora
https://bugzilla.redhat.com/show_bug.cgi?id=922438

--- Comment #3 from Paul Wouters <pwouters@xxxxxxxxxx> ---
1) will fix

2) Indeed. although there are quite some changes, the pacakge can be seen as a
version upgrade. The configuration file and the files in /etc/ipsec.d/ are
fully backwards compatible and used (only when NSS was compiled in openswan,
but all fedora/rhel versions have that enabled). That was also the reasoning
behind the Obsolete. Note that the name change was required due to a lawsuit
between Xelerance Corporation and The Openswan Project regarding the
name/ownership, which forced the community to start a fork under a name name.
The fork is based of openswan 2.6.38 from March 2012. Openswan upstream has not
released a single version since the libreswan fork, which is another motivation
for Obsoleting openswan.

3) permissions are closed more then perhaps most software does. The only one
that might have a reason to open up a little bit is /var/run/pluto, as it now
prevents non-root processes from reading pluto.pid and determining if pluto is
still running.....

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=81DqTOHpLP&a=cc_unsubscribe
_______________________________________________
package-review mailing list
package-review@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/package-review





[Index of Archives]     [Fedora Legacy]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]     [Fedora Tools]