Pierre Chifflier a écrit : > Package: wnpp > Severity: wishlist > Owner: Pierre Chifflier <[EMAIL PROTECTED]> > > * Package name : ocsinventory-agent > Version : 1.0~rc3 > Upstream Author : Pascal DANEK 2005 > * URL : http://ocsinventory.sourceforge.net/index.php > * License : GPL > Programming Lang: Perl > Description : Hardware and software inventory tool (client) > > Open Computer and Software Inventory Next Generation is an application > designed to help a network or system administrator keep track of the > computers > configuration and software that are installed on the network. It also > allows deploying softwares, commands or files on client computers.
Last time I looked at this software, I was very disappointed by the security on the last part : the agent was downloading and installing new software without any verification (signature, ...). As my lab would like to try this tool, I made a debian package. I try to disable this remote deployment facility (as we did not want to use it) and let only the configuration and software report part. Even that was not secured at all ! So, we use it for non laptop computer inside our lab (behind a firewall), but not on our laptops that can be connected in hostile environments. As I did not look at this software for several months, it is possible that some of my criticisms are wrong (and I would be very happy in this case). So, I hope you will address these issues if you create a official debian package. If you want, you are free to use the packaging I did for the 1.0-RC2-FINAL release : http://people.debian.org/~vdanjean/debian/pool/main/o/ocsinventory-client/ Best regards, Vincent > . > This package contains the client part. > . > Homepage: http://ocsinventory.sourceforge.net
