X-Loop: help-debbugs@HIDDEN Subject: bug#68619: dhcp-client-service-type uses end-of-life dhclient Resent-From: =?UTF-8?Q?S=C3=B6ren?= Tempel <soeren@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: bug-guix@HIDDEN Resent-Date: Sat, 20 Jan 2024 18:46:02 +0000 Resent-Message-ID: <handler.68619.B.17057763075013 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: report 68619 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 68619 <at> debbugs.gnu.org X-Debbugs-Original-To: bug-guix@HIDDEN Received: via spool by submit <at> debbugs.gnu.org id=B.17057763075013 (code B ref -1); Sat, 20 Jan 2024 18:46:02 +0000 Received: (at submit) by debbugs.gnu.org; 20 Jan 2024 18:45:07 +0000 Received: from localhost ([127.0.0.1]:35775 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rRGL4-0001HW-Io for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 13:45:06 -0500 Received: from lists.gnu.org ([2001:470:142::17]:49384) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <soeren@HIDDEN>) id 1rRGL0-00012C-Ht for submit <at> debbugs.gnu.org; Sat, 20 Jan 2024 13:45:04 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <soeren@HIDDEN>) id 1rRGKr-0006u7-LQ for bug-guix@HIDDEN; Sat, 20 Jan 2024 13:44:53 -0500 Received: from magnesium.8pit.net ([45.76.88.171]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from <soeren@HIDDEN>) id 1rRGKp-0005io-Am for bug-guix@HIDDEN; Sat, 20 Jan 2024 13:44:53 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=opensmtpd; bh=9yuN+8h/i7 R6UrlJDUzUerCejJiYKpFPA5p4dWeTYVA=; h=from:subject:to:date; d=soeren-tempel.net; b=vJlMyAUKsnFWKohBC2Wxfl5UIMXXTG6NqjRqrQZqfs3HXgi gngBfpEB/uWRl8kO61qOX3W1grgMSTV6qTA4iYQO2qb72+OlTcACuga4LbGbStVS/6+9Si 2AmVBrehvSQRTAkLy23pwAnIBSNFsU312hQUVtzpdr5JVXyayodeeg= Received: from localhost (dynamic-2a02-3102-49da-001b-dbf5-bf3a-503d-c4fc.310.pool.telefonica.de [2a02:3102:49da:1b:dbf5:bf3a:503d:c4fc]) by magnesium.8pit.net (OpenSMTPD) with ESMTPSA id c504c472 (TLSv1.3:TLS_AES_256_GCM_SHA384:256:YES) for <bug-guix@HIDDEN>; Sat, 20 Jan 2024 19:44:48 +0100 (CET) Date: Sat, 20 Jan 2024 19:44:44 +0100 From: =?UTF-8?Q?S=C3=B6ren?= Tempel <soeren@HIDDEN> Message-Id: <3IU8CAI5QIGEI.2W06JXCLXMAYZ@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Received-SPF: pass client-ip=45.76.88.171; envelope-from=soeren@HIDDEN; helo=magnesium.8pit.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -0.1 (/) Hello, I recently installed the Guix operating system and selected DHCP-based network configuration in the installer. Today I noticed that the DHCP client installed by default seems to be dhclient from ISC-DHCP. This is problematic as this DHCP implementation has reached its end-of-life in 2022 [1]. This is also mentioned in the Guix package description. The dhcp-client-service-type has a package configuration option, in theory, allowing usage with other DHCP clients. Unfortunately, it seems to require that the package provides /sbin/dhclient and I am not aware of any package that has this executable. In general, it seems there is no other DHCP client package available in Guix. Therefore, I believe the course of action here would be to: (a) package a different DHCP client (dhcpcd [2] may be a good candidate) and (b) make sure that dhcp-client-service-type is compatible with this client and uses it by default. I would argue that this is an important issue, as a DHCP client processes untrusted input from the local network and is thus subject to potential security vulnerabilities. Greetings, S=C3=B6ren [1]: https://www.isc.org/blogs/isc-dhcp-eol/ [2]: https://roy.marples.name/projects/dhcpcd
Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) Content-Type: text/plain; charset=utf-8 X-Loop: help-debbugs@HIDDEN From: help-debbugs@HIDDEN (GNU bug Tracking System) To: =?UTF-8?Q?S=C3=B6ren?= Tempel <soeren@HIDDEN> Subject: bug#68619: Acknowledgement (dhcp-client-service-type uses end-of-life dhclient) Message-ID: <handler.68619.B.17057763075013.ack <at> debbugs.gnu.org> References: <3IU8CAI5QIGEI.2W06JXCLXMAYZ@HIDDEN> X-Gnu-PR-Message: ack 68619 X-Gnu-PR-Package: guix Reply-To: 68619 <at> debbugs.gnu.org Date: Sat, 20 Jan 2024 18:46:02 +0000 Thank you for filing a new bug report with debbugs.gnu.org. This is an automatically generated reply to let you know your message has been received. Your message is being forwarded to the package maintainers and other interested parties for their attention; they will reply in due course. Your message has been sent to the package maintainer(s): bug-guix@HIDDEN If you wish to submit further information on this problem, please send it to 68619 <at> debbugs.gnu.org. Please do not send mail to help-debbugs@HIDDEN unless you wish to report a problem with the Bug-tracking system. --=20 68619: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D68619 GNU Bug Tracking System Contact help-debbugs@HIDDEN with problems
X-Loop: help-debbugs@HIDDEN Subject: bug#68619: dhcp-client-service-type uses end-of-life dhclient References: <3IU8CAI5QIGEI.2W06JXCLXMAYZ@HIDDEN> In-Reply-To: <3IU8CAI5QIGEI.2W06JXCLXMAYZ@HIDDEN> Resent-From: =?UTF-8?Q?S=C3=B6ren?= Tempel <soeren@HIDDEN> Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> Resent-CC: bug-guix@HIDDEN Resent-Date: Sat, 27 Jan 2024 12:21:01 +0000 Resent-Message-ID: <handler.68619.B68619.170635801612039 <at> debbugs.gnu.org> Resent-Sender: help-debbugs@HIDDEN X-GNU-PR-Message: followup 68619 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 68619 <at> debbugs.gnu.org Received: via spool by 68619-submit <at> debbugs.gnu.org id=B68619.170635801612039 (code B ref 68619); Sat, 27 Jan 2024 12:21:01 +0000 Received: (at 68619) by debbugs.gnu.org; 27 Jan 2024 12:20:16 +0000 Received: from localhost ([127.0.0.1]:53597 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>) id 1rThfU-000386-3K for submit <at> debbugs.gnu.org; Sat, 27 Jan 2024 07:20:16 -0500 Received: from magnesium.8pit.net ([45.76.88.171]:26522) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from <soeren@HIDDEN>) id 1rThfQ-00037t-PA for 68619 <at> debbugs.gnu.org; Sat, 27 Jan 2024 07:20:14 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; s=opensmtpd; bh=t/irsiRfhD RlXozA4RNzn4uW93IN74tlstFZrScw1kM=; h=from:subject:to:date; d=soeren-tempel.net; b=L579+xY1QCOJ6MKHiWdF/Pdw1j5QGPKrScwTsVis1sdi61y Jc12Ncx40HZmL7Uf5SIT/SPgAbHMA4Xw+AzGqxw2yy2Du92O98vRTgLX6cySdPhYv0hCvE jCdLW+0mKHCFvf68YMYfNp7FJqyGzehvdezzILl/cl4ygv09z+xkoE= Received: from localhost (dynamic-2a02-3102-49da-001b-ba57-b46b-a3ed-689f.310.pool.telefonica.de [2a02:3102:49da:1b:ba57:b46b:a3ed:689f]) by magnesium.8pit.net (OpenSMTPD) with ESMTPSA id 5c62cd8f (TLSv1.3:TLS_AES_256_GCM_SHA384:256:YES) for <68619 <at> debbugs.gnu.org>; Sat, 27 Jan 2024 13:20:03 +0100 (CET) Date: Sat, 27 Jan 2024 13:20:00 +0100 From: =?UTF-8?Q?S=C3=B6ren?= Tempel <soeren@HIDDEN> Message-Id: <3LUKRN8R16NG9.2HYTH3MP63RCA@HIDDEN> MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -0.0 (/) X-BeenThere: debbugs-submit <at> debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <debbugs-submit.debbugs.gnu.org> List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe> List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/> List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org> List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help> List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe> Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org> X-Spam-Score: -1.0 (-) > I believe the course of action here would be to: (a) package a > different DHCP client (dhcpcd [2] may be a good candidate) and (b) > make sure that dhcp-client-service-type is compatible with this client > and uses it by default. I started working on this, see <https://issues.guix.gnu.org/68675>. Greetings S=C3=B6ren
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997 nCipher Corporation Ltd,
1994-97 Ian Jackson.