Le mercredi 08 juin 2011 à 10:40 +0200, Anne nicolas a écrit : > Hi there > > We have some stuff to complete here: > http://mageia.org/wiki/doku.php?id=security > > <http://mageia.org/wiki/doku.php?id=security>Can we spend the 2 or 3 coming > days to finalize it and start updates submits?
Pascal is working on this. So here is a proposal : - anybody can submit a package to updates_testing. - once submitted to testing, it should ask to QA to test, along with : - a reason for the update ( likely bug number ) - potentially a priority ( ie, if this is just a translation update or a urgent 0 day exploit ) - a way to test the bug and see it is fixed - text for the update - qa validate the update ( with process to define ) - someone move the package from updates_testing to testing - the bug is closed - a announce is sent ( on various medias to be defined ), with the text of update So the points are : - no update can be uploaded without QA validation - QA manage the checks, and so will requires help ( hence the security team or any packager can help, provided they know how to do QA ) -- Michael Scherer
