On 1/24/07, Raphael Hertzog <[EMAIL PROTECTED]> wrote:
Hello,
On Wed, 24 Jan 2007, Philip Hands wrote:
> I think this, or at least a dedicated request tracker for debian-admin, is
> an eminently sensible idea.
>
> Perhaps rt would be better, since the problem with the bug tracking system
> being open to all is that we're going to have to split the security
> sensitive stuff out so that it's only sent to the mailing-list, and then
> finding all the information for an issue later is going to be a bit of a
> pain when some of it is missing from the bug report.
The thing is that we're speaking of this request-tracker for years
already. It takes time to setup it properly and nobody has done that yet.
I think Branden Robinson came with a RT installation ages ago, do you
know what happened with that?
On the other hand it takes 5 minutes to create the entry in the BTS.
I would suggest to start with that and see if it really helps. Later, we
can still switch to r-t if needed.
/me, as someone who'd like to help out with DSA tasks, is also in favor of
this.
Sounds good.
And for Alioth administration, we also have a public tracker and it's
really useful even if not really convenient to use (sucky web interface).
Of course, security issues are always handled by direct mail to
[EMAIL PROTECTED]
I see no reason why it wouldn't be useful for DSA.
That's what i wrote above, people are still free to mail the mailing
list directly if needed. You know, anyone can jump the gun today and
start discussing security issues opening bugs against project
pseudo-package. It usually doesn't happen, so i don't think it will be
common in a debian-admin pseudo-package too.
Am i wrong or the security subjects aren't (almost) aways started by
DDs on the DSA list ? You know, if a DD send a mail to the BTS under
debian-admin pseudo-package he is the one to blame, not the system.
There are many different ways to do the wrong thing already.
regards,
-- stratus
http://stratusandtheswirl.blogspot.com
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
