DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=subject:from:to:cc:in-reply-to:references:content-type:date
         :message-id:mime-version:x-mailer:content-transfer-encoding;
        b=er4i2TpUXZUlBRd92NB7yyHyOjcV3xI2J49w4odJdMVvXJXHJ14UyGaL9ICaEBQOFM
         sTh1ASKD+WBLQNQFoySm3L7uWMBAwrTsb9JU+2/Uq7z5eUjrrtQTLvv3hIQ8O/RI+1rx
         jvbFJEShLjzSZxQeOhk6kWcfH8yJJhR4Sl9wQ=
Subject: Re: [alpine-devel] Alpine Linux project management
From: Natanael Copa <natanael.copa@gmail.com>
To: Ilya Strelkin <iilluzion@gmail.com>
Cc: alpine-devel@lists.alpinelinux.org
In-Reply-To: <be249ad40903110335k7a8776a6y73e1ddb3e65324de@mail.gmail.com>
References: <1236333892.1916.95.camel@nc>
	 <be249ad40903090410m3f96004btb28cc082de470b73@mail.gmail.com>
	 <be249ad40903090551p564a9fb0h77333d68db0cc72a@mail.gmail.com>
	 <1236691631.28727.24.camel@nc>
	 <be249ad40903110335k7a8776a6y73e1ddb3e65324de@mail.gmail.com>
Content-Type: text/plain
Date: Wed, 11 Mar 2009 20:15:34 +0100
Message-Id: <1236798934.7611.21.camel@ncopa-laptop>
Precedence: list
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit

On Wed, 2009-03-11 at 13:35 +0300, Ilya Strelkin wrote:
> 
>         Any sugguestion to the name of such mailing list? we currently
>         only have
>         alpine-devel.
> 
> alpine-security[-alert]@lists.alpinelinux.org
> 
> or since "alpine" word is already in then just
> 
> security-alerts@lists.alpinelinux.org
> security-advisory@lists.alpinelinux.org
> security-notifications@lists.alpinelinux.org

I'm ok with any of those names. security-alerts is shortest so i'd go
for that.

 
>         >    - wiki-like system for security alert log and related
>         > recommendations, tasks and code/packages updates references
>         
>         
>         Do you have any suggestions what wiki (or other system) we can
>         use for
>         this?
> 
> 1. Sputnik  - LUA based - simple but yet powerful, inlcudes bugtracker
> (http://spu.tnik.org)
> 2. TikiWiki - includes Forums, Blogs, Image Gallery, Bug tracker
> 3. MediaWiki - it is well known and feature rich system 

we use mediawiki today.

> Also there are several good CMS, but they ussually require heavy web
> technologies..
>  
>         To me it sounds more like a news site or similar. The wiki
>         idea is that
>         anybody can modify contents and i doubt we want security
>         alerts be
>         modified by anonymous.
> 
> You are right, although wiki systems have "open" nature but proper ACL
> solves problem. The idea is the ability to modify content easy but
> securely!

The goal with those things are to make it clear that we take security
seriously. It should give users, decision makers trust.

What I am sceptic about with the concept wiki is that people think of it
as something you can not trust 100% since anyone can change it (even if
that is not the case ofcourse). So I think that if we say "for security
information see wiki" will give a non-trust impression, if you
understand.

I 100% agree with it must be easy to maintain and update, and it might
be a wiki. I just think we cannot make it very visible that it is a
wiki. 

> 
> 
>         
>         
>         This should probably be integrated with the bugtracker
>         (whatever we end
>         up with).
> 
> yes. Sputnik or TikiWiki have intergated BugTracker.

I think we will end up with redmine for bugtracking, which have an
integrated wiki.

We have a test here:
http://redmine.nethq.net

If you really want a wiki, do you think that wiki could work? I doubt
that we can hide that it is a wiki, but...

we could have a look at what other projects do too, i.e ubuntu, debian,
openbsd, ipcop etc.

>  
> Iljya


thanks!



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---