Control: retitle 910298 RFP: tmate-ssh-server -- server side part of tmate On 2018-10-04 17:10:07, Varac wrote: > * Package name : tmate-slave > Version : 1.8 > Upstream Author : ? > * URL : https://github.com/tmate-io/tmate-slave
Project was renamed to: https://github.com/tmate-io/tmate-ssh-server/ > * License : OpenBSD ? I took a look and the COPYRIGHT file declares the package as "ISC": https://opensource.org/licenses/ISC ... but then explicitely states the obvious: "THIS IS FOR INFORMATION ONLY, CODE IS UNDER THE LICENCE AT THE TOP OF ITS FILE." ... which brings us to a nice decopy run: Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/ Files: * Copyright: <author> 2010-2013, Dagobert Michelsen 2011-2012, George Nachman <t...@georgester.com> 2003-2004, Henning Brauer <henn...@openbsd.org> 1995, International Business Machines, Inc 1996-1998, Internet Software Consortium 2015, Joerg Jung <j...@openbsd.org> 2009, Jonathan Alvarado <radob...@users.sourceforge.net> 2009, Joshua Elsasser <j...@elsasser.org> 2011, Marcel P. Partap <mpar...@gmx.net> 2006-2015, Nicholas Marriott <nicholas.marri...@gmail.com> 2009, Nicholas Marriott <n...@openbsd.org> 2008, Otto Moerbeek <o...@drijf.net> 2003, Peter Stuge <stuge-mdoc2...@cdy.org> 2006-2007, Pierre-Yves Ritschard <p...@openbsd.org> 2006-2008, Reyk Floeter <r...@openbsd.org> 2010, Romain Francoise <rfranco...@debian.org> 2004, Ted Unangst and Todd Miller 2013, Thiago de Arruda <tpadilh...@gmail.com> 2012, Thomas Adam <tho...@xteddy.org> 2008-2009, Tiago Cunha <m...@tiagocunha.org> 2014, Tiago Cunha <tcu...@users.sourceforge.net> 1998-2005, Todd C. Miller <todd.mil...@courtesan.com> 2009, Todd Carson <t...@daybefore.net> their authors unless otherwise License: ISC Files: .mailmap .travis.yml CHANGES Dockerfile FAQ Makefile.am README README.md SYNCING TODO autogen.sh configure.ac create_keys.sh example_tmux.conf install_libssh_travis.sh install_msgpack_travis.sh monitor/* presentations/* tmate-daemon-decoder.c tmate-daemon-encoder.c tmate-daemon-legacy.c tmate-debug.c tmate-main.c tmate-msgpack.c tmate-protocol.h tmate-proxy.c tmate-ssh-client-pty.c tmate-ssh-daemon.c tmate-ssh-exec.c tmate-ssh-latency.c tmate-ssh-server.c tmate.h tools/* window-copy.h xmalloc.c xmalloc.h Copyright: 1995, Espoo, Finland 1995, Tatu Ylonen <y...@cs.hut.fi> License: ISC Comment: No explicit license found, using license(s) from: COPYING Files: logo/* Copyright: 2000-2004, Apple Computer Incorporated License: ISC Comment: No explicit license found, using license(s) from: logo/LICENSE Files: compat/bitstring.h compat/daemon.c compat/getopt.c compat/queue.h compat/strcasestr.c compat/strsep.c compat/unvis.c compat/vis.c compat/vis.h Copyright: 1987-1994, The Regents of the University of California License: BSD-3-clause Files: compat/fparseln.c Copyright: 1997, Christos Zoulas License: BSD-4-clause Files: compat/tree.h Copyright: 2002, Niels Provos <pro...@citi.umich.edu> License: BSD-2-clause Files: logo/LICENSE Copyright: 2015, Jason Long <ja...@jasonlong.me> License: ISC License: BSD-2-clause Comment: Add the corresponding license text here License: BSD-3-clause Comment: Add the corresponding license text here License: BSD-4-clause Comment: Add the corresponding license text here License: ISC Comment: Add the corresponding license text here ... which confirms it's mostly ISC with some bits of BSD in there. It otherwise seems like a fairly standard autotools kind of thing. Did anyone audit that code in any shape? At first glance it looks a little worrisome: it sure seems to me like it copies the entire tmux source code inside of there. For example, here's cmd.c in tmate-server: https://github.com/tmate-io/tmate-ssh-server/blob/master/cmd.c and tmux: https://github.com/tmux/tmux/blob/master/cmd.c I filed this as a bug in: https://github.com/tmate-io/tmate-ssh-server/issues/59 They also do not seem to be issuing new releases anymore: https://github.com/tmate-io/tmate-ssh-server/issues/33 It also looks like tmate-server needs to be running as root, even if running on a non-privileged port: https://github.com/tmate-io/tmate-ssh-server/issues/40 So, long story short, a bit of a mess? :) A. -- What this country needs is more unemployed politicians. - Angela Davis
