Saturday, March 17, 2018

[Test-Announce] [Test Day] Deprecate TCP wrappers on 2018-03-22

Hey All,

On 2018-03-22 we will be doing Deprecate TCP wrappers[1] Test Day!

As part of this planned Change[2]for Fedora 28, this is an important Test Day!

TCP wrappers is a simple tool to block incoming connection on the application level.
This was very useful 20 years ago when there were no firewalls in Linux. This is not the case for today and
connection filtering should be done at the network level or completely in application scope if it makes sense
Removing this package from Fedora will remove a package from default and minimal installations
(removing the dependency of daemons such as SSHD).
It also makes the configuration straight-forward for new users (no shared files defining access rules, poorly reporting any errors to users.
Removing the dependency from all packages and retiring the package in the single release will minimize users confusion and avoids opening sensitive services after the update.
Since many crucial functionalities (OpenSSH and others) depend on this, We hope to test and see, whether it's working well enough and catch any remaining issues.


As always, the event will be in #fedora-test-day on Freenode IRC.



[1] https://fedoraproject.org/wiki/Test_Day:2018-03-22_Deprecate_TCP_wrappers
[2] https://fedoraproject.org/wiki/Changes/Deprecate_TCP_wrappers



Thanks
//sumantrom
_______________________________________________
test-announce mailing list -- test-announce@lists.fedoraproject.org
To unsubscribe send an email to test-announce-leave@lists.fedoraproject.org

No comments:

Post a Comment