-
Bug
-
Resolution: Done-Errata
-
Minor
-
rhel-10.0.beta
-
None
-
tang-14-10.el10
-
No
-
Low
-
1
-
rhel-security-special-projects
-
ssg_security
-
10
-
None
-
Dev ack
-
False
-
False
-
-
No
-
Red Hat Enterprise Linux
-
SECENGSP Cycle 9
-
Pass
-
Automated
-
Unspecified Release Note Type - Unknown
-
None
tang does not necessarily require systemd, as it can run standalone. systemd, however, is almost always available, unless in some specific situations, like containers.
Let's weaken the systemd dependency in tang, so that it will not pull systemd in scenarios like containers, reducing its footprint (and attack surface).
The change is to use %{?systemd_ordering} instead of %{?systemd_requires} in tang spec file, which means that we want to use systemd tools if they are available,
but do not want to declare a dependency [1].
AC: Make sure tang spec file has %{?systemd_ordering} instead of %{?systemd_requires}
- links to
-
RHBA-2024:140077 tang update