From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 21177 invoked by uid 1002); 23 Aug 2003 03:59:35 -0000 Mailing-List: contact gentoo-dev-help@gentoo.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Received: (qmail 10609 invoked from network); 23 Aug 2003 03:59:35 -0000 From: Ned Ludd Reply-To: solar@gentoo.org To: gentoo-dev@gentoo.org In-Reply-To: <20030822191939.36400b90.genone@genone.de> References: <20030822191939.36400b90.genone@genone.de> Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="=-aOKaS+wJ1YlfPsi4pCHP" Organization: Gentoo Linux Developer (Hardened) Message-Id: <1061611147.90.6006.camel@simple> Mime-Version: 1.0 X-Mailer: Ximian Evolution 1.4.3 Date: 22 Aug 2003 23:59:07 -0400 Subject: Re: [gentoo-dev] GLEP #14: security updates based on GLSA X-Archives-Salt: de50f5cf-363c-4530-a064-37857f251bb3 X-Archives-Hash: c2f9331a9759bff829e37cb8d45a9c44 --=-aOKaS+wJ1YlfPsi4pCHP Content-Type: text/plain Content-Transfer-Encoding: quoted-printable Hands down I fully support this and your efforts so far in gentoo. Also to go along with this GLEP I think we need to start talking about the need for a herd solely devoted to security related issues in gentoo linux. Not just a herd to be announced to -dev that does not have much use like say "mysql" or "net-irc" but something subnational with a set of predefined goals,guidelines,policies and procedures for achieving those goals. The GLEP is/was the right way to go/start with this. For the last week I've been trying to take a much more active interest in bugs that have been assigned to security@gentoo.org in the bugzilla system but have felt a little misguided on who to talk to for a final resolution for a said bug. What I would like to help do is form a security herd for the sole purpose of closing/opening/researching security bugs for gentoo linux.=20 Thus far it seems we have a security team of 1. I think/know aliz could use some help in this area. I think it would be ideal if we could back him up and elect/vote aliz to the the project manager for said herd. On Fri, 2003-08-22 at 13:19, Marius Mauch wrote: > Hi all, >=20 > As already discussed here serveral days ago I've written up a GLEP for > this often requested feature: >=20 > http://www.gentoo.org/proj/en/glep/glep-0014.html >=20 > Everything in the GLEP is open for discussion, please share your > questions/comments/concerns with the other people on this list, so that > they can be incorporated. I'll update the GLEP if necessary, so make > sure you read the latest version before posting. >=20 > (for those reading this on the -security or -server mailinglist, please > reply only on -dev) >=20 > Marius >=20 > -- > gentoo-dev@gentoo.org mailing list --=20 Ned Ludd Gentoo Linux Developer (Hardened) --=-aOKaS+wJ1YlfPsi4pCHP Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iQCVAwUAP0bmi54WFLgrx1GWAQIj5gP+OUgQDEx8FYafbBc4WFegreFmlqw+fOMu FQRX2fbNN5RtGXDG6cP9WF6x9InHAmIKvaeLhwgqUl67JE+L+pVJgCcUeVJQfn8z 1ezGA5HPfW1Mjk/GdQaPsTKazYZEzbNA/nE7seaof3n3s7qSfU9oOrInWkZ0fvSk 5zO9cF9X4bQ= =ZFM2 -----END PGP SIGNATURE----- --=-aOKaS+wJ1YlfPsi4pCHP--