Bug 3332

Summary: Remove mountloop from iso and obsolete the package in cauldron
Product: Mageia Reporter: Manuel Hiebel <manuel.mageia>
Component: Release (media or process)Assignee: Anne Nicolas <ennael1>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Normal CC: davidwhodgins, eeeemail, ennael1, marja11, steletch, sysadmin-bugs, thierry.vignaud
Version: Cauldron   
Target Milestone: Mageia 3   
Hardware: All   
OS: Linux   
Whiteboard: 3alpha2
Source RPM: meta-task CVE:
Status comment:

Description Manuel Hiebel 2011-11-13 13:41:41 CET 
+++ This bug was initially created as a clone of Bug #999 +++

Description of problem:

A couple of years ago it was already determined at Mandriva that mountloop was considered unsafe. Now I find them still on the Mageia isos. This appears to be a security issue. Please reconsider if Mageia wants to provide them as such.

grep mountl *idx
mageia-dvd-1-Beta2-i586.idx:mountloop-0.15.4-5.mga1.i586.rpm
mageia-dvd-1-Beta2-x86_64.idx:mountloop-0.15.4-5.mga1.x86_64.rpm
Comment 1 Marja Van Waes 2012-01-07 14:05:21 CET 
cc'ing steletch and Thierry (steletch imported the package, tv committed it often between 2004 and 2009)

CC: (none) => marja11, steletch, thierry.vignaud

Comment 2 Marja Van Waes 2012-03-10 15:01:09 CET 
When installing or updating mountloop, you now get the following warning
(mountloop-0.15.4-8.mga2)

**********

Using this package for encrypted loopback is deprecated and regarded as
unsafe. However, it's still provided for who need to access their data to
migrate their setup. Likely this package will be removed for Mageia 3.

We strongly advise you to switch to Luks

As an example, one can look at this link:
http://www.ody.ca/~dwhodgins/Luks-Howto.html .

***************

Target Milestone: --- => Mageia 3

Comment 3 Marja Van Waes 2012-05-26 13:09:55 CEST 
Hi,

This bug was filed against cauldron, but we do not have cauldron at the moment.

Please report whether this bug is still valid for Mageia 2.

Thanks :)

Cheers,
marja

Keywords: (none) => NEEDINFO

Manuel Hiebel 2012-05-26 17:29:24 CEST

Keywords: NEEDINFO => (none)

Comment 4 Dave Hodgins 2012-05-27 03:34:53 CEST 
This bug should be kept against cauldron.  The Mageia 2 README.urpmi
states "Likely this package will be removed for Mageia 3.", so
it should be kept for cauldron, where mountloop should be added
to task-obsoletes.

CC: (none) => davidwhodgins

claire robinson 2012-10-09 15:26:00 CEST

Whiteboard: (none) => 3alpha2

claire robinson 2012-10-09 15:28:52 CEST

CC: (none) => eeeemail

Comment 5 Marja Van Waes 2012-10-09 15:30:59 CEST 
(In reply to comment #4)
> This bug should be kept against cauldron.  The Mageia 2 README.urpmi
> states "Likely this package will be removed for Mageia 3.", so
> it should be kept for cauldron, where mountloop should be added
> to task-obsoletes.

assiging to ennael, for her to decide to remove from the DVD and maybe
obsolete, too, before Mga 3 or not

Assignee: bugsquad => ennael1
Summary: Remove mountloop from iso => Remove mountloop from iso and obsolete the package in cauldron

Comment 6 Anne Nicolas 2013-04-06 22:42:58 CEST 
mountloop has been obsoleted. It will not be included in isos anymore

Status: NEW => RESOLVED
Resolution: (none) => FIXED

Comment 7 Manuel Hiebel 2013-04-06 22:44:51 CEST 
well 

grep mountloop /media/data/iso/test/*/*.idx
/media/data/iso/test/Mageia-3-beta4-i586-DVD/Mageia-3-beta4-i586-DVD.idx:Mageia-3 beta4-i586 mountloop-0.15.4 (i586)
/media/data/iso/test/Mageia-3-beta4-x86_64-DVD/Mageia-3-beta4-x86_64-DVD.idx:Mageia-3 beta4-x86_64 mountloop-0.15.4 (x86_64)
Comment 8 Anne Nicolas 2013-04-06 22:46:34 CEST 
I should have said "in *coming* isos" :)
Comment 9 Manuel Hiebel 2013-04-06 22:48:19 CEST 
okok no problem