[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#910298: RFP: tmate-slave -- tmate-slave is the server side part of tmate.



Control: retitle 910298 RFP: tmate-ssh-server -- server side part of tmate

On 2018-10-04 17:10:07, Varac wrote:
> * Package name    : tmate-slave
>   Version         : 1.8
>   Upstream Author : ?
> * URL             : https://github.com/tmate-io/tmate-slave

Project was renamed to: https://github.com/tmate-io/tmate-ssh-server/

> * License         : OpenBSD ?

I took a look and the COPYRIGHT file declares the package as "ISC":

https://opensource.org/licenses/ISC

... but then explicitely states the obvious:

"THIS IS FOR INFORMATION ONLY, CODE IS UNDER THE LICENCE AT THE TOP OF
ITS FILE."

... which brings us to a nice decopy run:

Format: https://www.debian.org/doc/packaging-manuals/copyright-format/1.0/

Files: *
Copyright: <author>
           2010-2013, Dagobert Michelsen
           2011-2012, George Nachman <tmux@georgester.com>
           2003-2004, Henning Brauer <henning@openbsd.org>
           1995, International Business Machines, Inc
           1996-1998, Internet Software Consortium
           2015, Joerg Jung <jung@openbsd.org>
           2009, Jonathan Alvarado <radobobo@users.sourceforge.net>
           2009, Joshua Elsasser <josh@elsasser.org>
           2011, Marcel P. Partap <mpartap@gmx.net>
           2006-2015, Nicholas Marriott <nicholas.marriott@gmail.com>
           2009, Nicholas Marriott <nicm@openbsd.org>
           2008, Otto Moerbeek <otto@drijf.net>
           2003, Peter Stuge <stuge-mdoc2man@cdy.org>
           2006-2007, Pierre-Yves Ritschard <pyr@openbsd.org>
           2006-2008, Reyk Floeter <reyk@openbsd.org>
           2010, Romain Francoise <rfrancoise@debian.org>
           2004, Ted Unangst and Todd Miller
           2013, Thiago de Arruda <tpadilha84@gmail.com>
           2012, Thomas Adam <thomas@xteddy.org>
           2008-2009, Tiago Cunha <me@tiagocunha.org>
           2014, Tiago Cunha <tcunha@users.sourceforge.net>
           1998-2005, Todd C. Miller <Todd.Miller@courtesan.com>
           2009, Todd Carson <toc@daybefore.net>
           their authors unless otherwise
License: ISC

Files: .mailmap
       .travis.yml
       CHANGES
       Dockerfile
       FAQ
       Makefile.am
       README
       README.md
       SYNCING
       TODO
       autogen.sh
       configure.ac
       create_keys.sh
       example_tmux.conf
       install_libssh_travis.sh
       install_msgpack_travis.sh
       monitor/*
       presentations/*
       tmate-daemon-decoder.c
       tmate-daemon-encoder.c
       tmate-daemon-legacy.c
       tmate-debug.c
       tmate-main.c
       tmate-msgpack.c
       tmate-protocol.h
       tmate-proxy.c
       tmate-ssh-client-pty.c
       tmate-ssh-daemon.c
       tmate-ssh-exec.c
       tmate-ssh-latency.c
       tmate-ssh-server.c
       tmate.h
       tools/*
       window-copy.h
       xmalloc.c
       xmalloc.h
Copyright: 1995, Espoo, Finland
           1995, Tatu Ylonen <ylo@cs.hut.fi>
License: ISC
Comment: No explicit license found, using license(s) from:
 COPYING

Files: logo/*
Copyright: 2000-2004, Apple Computer Incorporated
License: ISC
Comment: No explicit license found, using license(s) from:
 logo/LICENSE

Files: compat/bitstring.h
       compat/daemon.c
       compat/getopt.c
       compat/queue.h
       compat/strcasestr.c
       compat/strsep.c
       compat/unvis.c
       compat/vis.c
       compat/vis.h
Copyright: 1987-1994, The Regents of the University of California
License: BSD-3-clause

Files: compat/fparseln.c
Copyright: 1997, Christos Zoulas
License: BSD-4-clause

Files: compat/tree.h
Copyright: 2002, Niels Provos <provos@citi.umich.edu>
License: BSD-2-clause

Files: logo/LICENSE
Copyright: 2015, Jason Long <jason@jasonlong.me>
License: ISC

License: BSD-2-clause
Comment: Add the corresponding license text here

License: BSD-3-clause
Comment: Add the corresponding license text here

License: BSD-4-clause
Comment: Add the corresponding license text here

License: ISC
Comment: Add the corresponding license text here

... which confirms it's mostly ISC with some bits of BSD in there.

It otherwise seems like a fairly standard autotools kind of thing. Did
anyone audit that code in any shape? At first glance it looks a little
worrisome: it sure seems to me like it copies the entire tmux source
code inside of there. For example, here's cmd.c in tmate-server:

https://github.com/tmate-io/tmate-ssh-server/blob/master/cmd.c

and tmux:

https://github.com/tmux/tmux/blob/master/cmd.c

I filed this as a bug in:

https://github.com/tmate-io/tmate-ssh-server/issues/59

They also do not seem to be issuing new releases anymore:

https://github.com/tmate-io/tmate-ssh-server/issues/33

It also looks like tmate-server needs to be running as root, even if
running on a non-privileged port:

https://github.com/tmate-io/tmate-ssh-server/issues/40

So, long story short, a bit of a mess? :)

A.
-- 
What this country needs is more unemployed politicians.
                        - Angela Davis


Reply to: