nmap: open points

Lukas Schwaighofer lukas at schwaighofer.name
Fri Sep 15 16:43:26 UTC 2017


Hi Hilko,

I'm pretty satisfied with nmap now.  Open points regarding the
packaging:

1. zenmap & root

I think we should drop the gksu Recommends from zenmap and otherwise
ignore the problem for now.  Since the desktop file uses
"TryExec=su-to-root" everyone who does not have the menu package
installed will not notice that it's missing…


2. repack

I wanted to start on collecting copyright entries for the libraries
removed by the repack.  I started with liblinear and looked at the
Debian package.  It turns out they had to repack the source package
because of the unknown license of the files included in the blas/
directory. The same files are also included in the nmap sources in the
libinear/blas/ directory…

Now I'm pretty sure that we'll have to keep the repack even if upstream
replaces their mswin32/IPExport.h with a free version… Under these
circumstances I think it's actually better to keep removing all unused
libraries in the repack, because:
* It will ensure we do not accidentally link against them when upstream
  updates their build system and makes a mistake.
* Even after writing the debian/copyright file for nmap, keeping it
  up-to-date with all these libraries included is a time consuming and
  error-prone task that doesn't really serve a purpose.

I'm stopping my effort to do that, unless someone else convinces me why
this is really useful :) .


If you're fine with ignoring the zenmap & root problem for now as
suggested, please let me know and I'll make the final changes, do a few
more checks and prepare the changelog for an upload.

Thanks & Regards
Lukas



More information about the Pkg-security-team mailing list