Subject: [alpine-devel] Alpine Linux project management

From: Ilya Strelkin <[email-masked]>
Date: Mon, 9 Mar 2009 15:51:10 +0300

Dear Natanael!

I am interested to volunteer in that area.
Perhaps, we may have
   - security alert mailing list
   - wiki-like system for security alert log and related recommendations,
tasks and code/packages updates references

Iljya

> Security manager
> ================
> This role means following security lists and figure out what things
> affects us. then take the neccessary steps to make sure those bugs are
> fixed and make annoucements etc. I think we would need a security
> mailing list and some kind of bug database. This roel does not really
> require any coding skills either, but it requires interest for security
> issues, bugs etc.
>
>

---

From: Natanael Copa <[email-masked]>
Date: Tue, 10 Mar 2009 14:27:11 +0100

> I am interested to volunteer in that area.

ok. nice!

>    - security alert mailing list

Any sugguestion to the name of such mailing list? we currently only have
alpine-devel.

>    - wiki-like system for security alert log and related
> recommendations, tasks and code/packages updates references

Do you have any suggestions what wiki (or other system) we can use for
this?

To me it sounds more like a news site or similar. The wiki idea is that
anybody can modify contents and i doubt we want security alerts be
modified by anonymous.

This should probably be integrated with the bugtracker (whatever we end
up with).

>         Security manager

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---

---

From: Ilya Strelkin <[email-masked]>
Date: Wed, 11 Mar 2009 13:35:42 +0300

> Any sugguestion to the name of such mailing list? we currently only have

alpine-security[-alert]@lists.alpinelinux.org

or since "alpine" word is already in then just

[email-masked]
[email-masked]
[email-masked]

> Do you have any suggestions what wiki (or other system) we can use for

1. Sputnik  - LUA based - simple but yet powerful, inlcudes bugtracker (
http://spu.tnik.org)
2. TikiWiki - includes Forums, Blogs, Image Gallery, Bug tracker
3. MediaWiki - it is well known and feature rich system

Also there are several good CMS, but they ussually require heavy web
technologies..

> anybody can modify contents and i doubt we want security alerts be

You are right, although wiki systems have "open" nature but proper ACL
solves problem. The idea is the ability to modify content easy but securely!

> This should probably be integrated with the bugtracker (whatever we end

yes. Sputnik or TikiWiki have intergated BugTracker.

Iljya

---

From: Natanael Copa <[email-masked]>
Date: Wed, 11 Mar 2009 20:15:34 +0100

> [email-masked]

I'm ok with any of those names. security-alerts is shortest so i'd go
for that.

> 1. Sputnik  - LUA based - simple but yet powerful, inlcudes bugtracker
> (http://spu.tnik.org)

we use mediawiki today.

> solves problem. The idea is the ability to modify content easy but

The goal with those things are to make it clear that we take security
seriously. It should give users, decision makers trust.

What I am sceptic about with the concept wiki is that people think of it
as something you can not trust 100% since anyone can change it (even if
that is not the case ofcourse). So I think that if we say "for security
information see wiki" will give a non-trust impression, if you
understand.

I 100% agree with it must be easy to maintain and update, and it might
be a wiki. I just think we cannot make it very visible that it is a
wiki. 

> yes. Sputnik or TikiWiki have intergated BugTracker.

I think we will end up with redmine for bugtracking, which have an
integrated wiki.

We have a test here:
http://redmine.nethq.net

If you really want a wiki, do you think that wiki could work? I doubt
that we can hide that it is a wiki, but...

we could have a look at what other projects do too, i.e ubuntu, debian,
openbsd, ipcop etc.

> Iljya

thanks!

---

---

From: Nathan Angelacos <[email-masked]>
Date: Wed, 11 Mar 2009 23:02:27 -0400

> I'm ok with any of those names. security-alerts is shortest so i'd go

I'm happy to set up any mailing list with any name.  But if we are going 
for short, then:

[email-masked]

Or, what if we went with the CERT theme?

[email-masked]
[email-masked]

I kinda like alpine-cert - could have its own web-page and RSS feed...

But again, no strong feelings - just a couple of thoughts

---