Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

haveged is still installed on long-running systems #7326

Open
legoktm opened this issue Nov 5, 2024 · 0 comments · May be fixed by #7335
Open

haveged is still installed on long-running systems #7326

legoktm opened this issue Nov 5, 2024 · 0 comments · May be fixed by #7335
Milestone
SecureDrop 2.11.0

Comments

@legoktm
Copy link
Member

legoktm commented Nov 5, 2024

Description

Despite 04d6244, and a test verifying that the package is missing, it is still installed on long-running systems. We should do something similar to #7315 for haveged as well.
@legoktm legoktm added this to the SecureDrop 2.11.0 milestone Nov 5, 2024
@legoktm legoktm mentioned this issue Nov 5, 2024
Merged
4 tasks
legoktm added a commit that referenced this issue Nov 12, 2024
@legoktm
Remove haveged if installed
280fd2e 
Previously we only disabled/masked haveged instead of removing the
package. Now that we have the infrastructure to remove packages (created
for ufw), let's remove it properly.

Note that this will remove it from both app and mon, even though it was
only ever disabled on app. That should be fine since it's not expected
to be running on mon.

Fixes #7326.
@legoktm legoktm linked a pull request Nov 12, 2024 that will close this issue
Open
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
SecureDrop dev cycle
Status: No status
Milestone
SecureDrop 2.11.0
Development

Successfully merging a pull request may close this issue.

Remove haveged if installed freedomofpress/securedrop
1 participant
@legoktm