[gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Michael Cummings]

Gee, wouldn't it be nice for us lazy folks if the word [Security] (in
some common fashion) were included in the summary line of security
related bugs? i should seriously hope this doesn't warrant a glep, more
of a "anyone else think it'd be worth asking the security folks about"
question. (reason being, if you aren't onto this "i'm a lazy sod"
bandwagon, is that searching through a large volume of bug mail,
especially when your getting bugs for a few archs and a herd or two,
would be quicker if you could easily filter on the subject tag of
security).

Just a thought as i try to recall where i left that can of coffee,
~mcummings

-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Mike Frysinger]

On Wed, Dec 14, 2005 at 06:00:21AM -0500, Michael Cummings wrote:
> Gee, wouldn't it be nice for us lazy folks if the word [Security] (in
> some common fashion) were included in the summary line of security
> related bugs?

this really should have been sent to the security mailing list and
cc-ed the security team

this has come up before on those lists, i just dont remember the
outcome :P
-mike
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Lance Albertson]

[-- Attachment #1: Type: text/plain, Size: 702 bytes --]

Mike Frysinger wrote:
> On Wed, Dec 14, 2005 at 06:00:21AM -0500, Michael Cummings wrote:
> 
>>Gee, wouldn't it be nice for us lazy folks if the word [Security] (in
>>some common fashion) were included in the summary line of security
>>related bugs?
> 
> 
> this really should have been sent to the security mailing list and
> cc-ed the security team
> 
> this has come up before on those lists, i just dont remember the
> outcome :P

Don't forget about jforman!

-- 
Lance Albertson <ramereth@gentoo.org>
Gentoo Infrastructure | Operations Manager

---
GPG Public Key:  <http://www.ramereth.net/lance.asc>
Key fingerprint: 0423 92F3 544A 1282 5AB1  4D07 416F A15D 27F4 B742

ramereth/irc.freenode.net

[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 186 bytes --]

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Michael Cummings]

On Wed, 2005-12-14 at 13:55 +0000, Mike Frysinger wrote:
> this really should have been sent to the security mailing list and
> cc-ed the security team
> 
> this has come up before on those lists, i just dont remember the
> outcome :P

See, this is my (*cough*lazy*cough*) ignorance shining bright again -
didn't even think of there being an open security list to send this to.
Of course, we have a list for everything, and that makes legitimate
sense :) 

Further...makes perfect sense that someone else thought of suggesting it
before...i can't be the only lazy person in the world, otherwise we
wouldn't have tv shows to tell us what's on tv shows that we aren't
watching anyway...how's that for a non sequitur??

~mcummings

-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Thierry Carrez]

Lance Albertson wrote:
> Mike Frysinger wrote:
> 
>>this has come up before on those lists, i just dont remember the
>>outcome :P
> 
> Don't forget about jforman!

The outcome was that Bugzilla Product (here, "Gentoo Security")
could/should/would be added as a Bugzilla mail header so that proper
filtering can be set up for those who care, without adding redundancy in
the bug summary and losing room in that important field.

Another option would be to hack up the bugzilla mail sender so that it
adds the prefix on mail subjects for all "Gentoo Security" bugs without
anyone having to change the bug summary.

All those options are afaict in jforman's hands but pushed back pending
Bugzilla upgrade.

-- 
Koon
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Chris White]

[-- Attachment #1: Type: text/plain, Size: 308 bytes --]

On Wednesday 14 December 2005 20:00, Michael Cummings wrote:

er.. why not just do an advanced query for all bugs assigned / cc'ed to 
security@gentoo.org.  How that doesn't accomplish the same thing...

> Just a thought as i try to recall where i left that can of coffee,
> ~mcummings

Chris White

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Mike Frysinger]

On Thu, Dec 15, 2005 at 02:37:54AM +0900, Chris White wrote:
> er.. why not just do an advanced query for all bugs assigned / cc'ed to 
> security@gentoo.org.  How that doesn't accomplish the same thing...

didnt know e-mail clients were integrated with bugzilla

oh, they're not, so it's still hard to pick out e-mails from your
inbox which are security related when you're simply cc-ed
-mike
-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Chris Gianelloni]

[-- Attachment #1: Type: text/plain, Size: 489 bytes --]

On Thu, 2005-12-15 at 02:37 +0900, Chris White wrote:
> On Wednesday 14 December 2005 20:00, Michael Cummings wrote:
> 
> er.. why not just do an advanced query for all bugs assigned / cc'ed to 
> security@gentoo.org.  How that doesn't accomplish the same thing...

Because that does nothing for filtering via his email client, which was
what he was requesting.

-- 
Chris Gianelloni
Release Engineering - Strategic Lead
x86 Architecture Team
Games - Developer
Gentoo Linux

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Mark Loeser]

[-- Attachment #1: Type: text/plain, Size: 1047 bytes --]

Mike Frysinger <vapier@gentoo.org> said:
> On Thu, Dec 15, 2005 at 02:37:54AM +0900, Chris White wrote:
> > er.. why not just do an advanced query for all bugs assigned / cc'ed to 
> > security@gentoo.org.  How that doesn't accomplish the same thing...
> 
> didnt know e-mail clients were integrated with bugzilla
> 
> oh, they're not, so it's still hard to pick out e-mails from your
> inbox which are security related when you're simply cc-ed

The next version of bugzilla has X-Bugzilla-Product and a few other nice
email headers you can sort based off of.  So, assuming all security bugs have
the Product or such set correctly, you will be able to easily sort.  Adding
additional headers to the emails is really trivial if we need something else
to make our lives easier.

-- 
Mark Loeser   -   Gentoo Developer (cpp gcc-porting toolchain x86)
email         -   halcy0n AT gentoo DOT org
                  mark AT halcy0n DOT com
web           -   http://dev.gentoo.org/~halcy0n/
                  http://www.halcy0n.com

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Michael Cummings]

On Thu, 2005-12-15 at 02:37 +0900, Chris White wrote:
> On Wednesday 14 December 2005 20:00, Michael Cummings wrote:
> 
> er.. why not just do an advanced query for all bugs assigned / cc'ed to 
> security@gentoo.org.  How that doesn't accomplish the same thing...
> 

Because i'm talking about filtering in a mail client, not a bugzilla
window ;)

-- 
gentoo-dev@gentoo.org mailing list

Re: [gentoo-dev] Gee, wouldn't it be nice (security bugs)...

[Michael Cummings]

Following the bugzilla upgrade, looks like email is now setting a field
procmail can filter on. so, ah, thanks! 'cause i know this bugzilla
upgrade was all secretly to satisfy me ;)

~mcummings, advocate of saving jforman from further torment without a
good cause, like sheer fun or something

-- 
gentoo-dev@gentoo.org mailing list