From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LHKEb-00044p-Ow for garchives@archives.gentoo.org; Mon, 29 Dec 2008 15:40:50 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B400FE05A9; Mon, 29 Dec 2008 15:39:58 +0000 (UTC) Received: from mu-out-0910.google.com (mu-out-0910.google.com [209.85.134.187]) by pigeon.gentoo.org (Postfix) with ESMTP id 53F21E05A5 for ; Mon, 29 Dec 2008 15:39:58 +0000 (UTC) Received: by mu-out-0910.google.com with SMTP id i2so2240976mue.6 for ; Mon, 29 Dec 2008 07:39:57 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=P+GJWR8QcpilTkUePlDYIynchg6+Y8gVXSysmflptG8=; b=ZKT7RvpMr6Gz+mzvWs7OEgBWhXCK8730KossHan/D1Qi8ZIOZ/y0qbwGU4KUbEm6U2 hY2n/fALWdGzgmJK2Cc7KdhVoaQaEK+/0jBsEEf6l//OoWJJHYT4Xx605WyebwdduyQO PSv3Zu8FGSbbs8eDQJNAbmuO1fbQhBN20ZHks= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=JDMPtbfv3V9Pls358JJ/k9TjDhBTMxai3iyWoc1GS1jZNGnn6w6NFQOY/eX0OgMxD+ 2Ny8ABCxKcZ7KKraonv45GR8T4EbIqXlhOMj4VG9xLxMisjmKQeZtF40sw0RTabqkM+Z 4rp7mcqLODUETF112clXX8md7dH9u9dNB3gm8= Received: by 10.103.178.17 with SMTP id f17mr4894922mup.45.1230565197470; Mon, 29 Dec 2008 07:39:57 -0800 (PST) Received: by 10.103.93.19 with HTTP; Mon, 29 Dec 2008 07:39:57 -0800 (PST) Message-ID: <897813410812290739w47685568w25272c964724df5a@mail.gmail.com> Date: Mon, 29 Dec 2008 16:39:57 +0100 From: "=?ISO-8859-1?Q?Javier_J._Mart=EDnez_Cabez=F3n?=" To: gentoo-hardened@lists.gentoo.org Subject: Re: [gentoo-hardened] Subject: Hardened Gentoo RSBAC deprecation and removal notice In-Reply-To: <200812290028.17147.gengor@gentoo.org> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-hardened@lists.gentoo.org Reply-to: gentoo-hardened@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline References: <200812281825.55730.gengor@gentoo.org> <897813410812282142p763fb224r7002ec6c919c1f20@mail.gmail.com> <200812290028.17147.gengor@gentoo.org> X-Archives-Salt: e09a9c72-308d-42d5-bc16-cdf2fc6e512a X-Archives-Hash: 0dee1825e5ff3a95efea452042d8e69f 2008/12/29 Gordon Malm : > 1. Leaving existing documentation in place would mislead viewers into > believing some level of official support is available. > You can put an addon indicating it, something like this: Please take note that gentoo hardened finished the support of rsbac since (put the year do you want here), the information you will find here could be: a) wrong b) obsoleted and c)incomplete. It is here for historical reasons or if someone could find useful. > 2. There's no one on the team who uses RSBAC and can verify the documenta= tion > is current, correct (and keep it that way) and won't do harm. The same as before, and I add one more thing, documentation should be orientative not taken as one absolute truth. So reader "should" investigate more later. > > 3. Why would we continue to host documentation for a technology that is = not > supported or available in Hardened Gentoo proper? Are you propsing we al= so > host documentation for other technologies we don't utilize - AppArmor for > instance? > Let's make a comparison: you go to a library near your home, you see that all the workstations there works with windows vista. You ask for one book related with gnu/linux and they say to you: well since we finished working with this systems we decide to remove all books related with GNU/Linux. I don't want mean that you write documentation about projects not supported directly, if not removing information that already exists and that some people could find useful (sometimes I consult it for example). Information is information wherever it was, lose information is one thing that I find non-sense. > 4. There are plenty of good places to put non-official documentation, su= ch as > gentoo-wiki.com. > > 5. The documentation is forever available @ > http://sources.gentoo.org/viewcvs.py/gentoo/xml/htdocs/proj/en/hardened/r= sbac/ > > I am truly sorry it has come to this, but "it is what it is". Did you link this in the main (or nearly principal) page?, so would be this information easy to reach by one person looking for something related with rsbac? > > Sincerely, > Gordon Malm (gengor) With all thanks for all your work. > > On Sunday, December 28, 2008 21:42:05 Javier J. Mart=EDnez Cabez=F3n wrot= e: >> Why do you want to remove all rsbac related documentation?, I think is >> a non-sense to do this. Documentation does not harm anybody and in >> case of rsbac is almost nonexistent . >> >> I'm an rsbac user (maybe one of the last) and a gentoo hardened one, I >> have never used gentoo rsbac ebuilds, so for me is not any kind of >> change. >> Maybe you could put your opinion in the main page of the mandatory >> access controls related (something like rsbac is not longer maintained >> in gentoo so we suggest you to change to by this reason and this one >> and this one.... blahblahblah). >> >> 2008/12/29 Gordon Malm : >> > Hi all, >> > >> > Hardened Gentoo has been without an RSBAC maintainer for quite a long >> > time now. >> > >> > Support for RSBAC in Hardened Gentoo is discontinued effective >> > immediately. RSBAC-related ebuilds, bugs and documents will begin bein= g >> > purged starting January 31st, 2009. >> > >> > All users of RSBAC in Hardened Gentoo who require mandatory or role ba= sed >> > access control are strongly encouraged to migrate to Grsecurity's RBAC= or >> > SELinux at this time. Anyone wishing to continue using RSBAC will be >> > without support from the Hardened Gentoo project. >> > >> > The RSBAC project itself continues as normal @ http://www.rsbac.org. >> > >> > Sincerely, >> > Gordon Malm (gengor) > > > >