Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Marc 'HE' Brockschmidt
Steffen Joeris steffen.joe...@skolelinux.de writes:
 On Wed, 26 Aug 2009 06:51:48 am Marc 'HE' Brockschmidt wrote:
 Release Goals
 =
[...]
  - kFreeBSD:
 Debian 6.0 Squeeze should be the first Debian release shipping with
 a non-Linux kernel.
 Out of curiosity, how is security support working for this and who is 
 providing it?

We [1] were hoping that kfreebsd-{i386,amd64} would be handled like i386
and amd64 and be supported by the security team.

As we know that the security team's manpower is limited, we acknowledge
this by asking you for any concers in supporting a architecture. For the
Squeeze cycle, this hasn't been done yet [2], as we haven't decided yet
which of the old architectures can't be supported from a release team
point of view.

Including kFreeBSD architectures in the release has been in discussion
for some time now, and we didn't see any official security team position
on this yet, thus assumed there were no (big) concers. Should you have
see some, please inform us soon.

Thanks,
Marc

Footnotes: 
[1]  Release Team
[2]  see http://release.debian.org/squeeze/arch_qualify.html
-- 
BOFH #86:
Runt packets


pgpXKx89c9TRi.pgp
Description: PGP signature


Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Steffen Joeris
Hi Marc

On Wed, 26 Aug 2009 04:23:09 pm Marc 'HE' Brockschmidt wrote:
 Steffen Joeris steffen.joe...@skolelinux.de writes:
  On Wed, 26 Aug 2009 06:51:48 am Marc 'HE' Brockschmidt wrote:
  Release Goals
  =

 [...]

   - kFreeBSD:
  Debian 6.0 Squeeze should be the first Debian release shipping with
  a non-Linux kernel.
 
  Out of curiosity, how is security support working for this and who is
  providing it?

 We [1] were hoping that kfreebsd-{i386,amd64} would be handled like i386
 and amd64 and be supported by the security team.

 As we know that the security team's manpower is limited, we acknowledge
 this by asking you for any concers in supporting a architecture. For the
 Squeeze cycle, this hasn't been done yet [2], as we haven't decided yet
 which of the old architectures can't be supported from a release team
 point of view.

 Including kFreeBSD architectures in the release has been in discussion
 for some time now, and we didn't see any official security team position
 on this yet, thus assumed there were no (big) concers. Should you have
 see some, please inform us soon.
For kernel-security support, we have Dann Frazier in the security team, who is 
also working in the kernel team (and of course other kernel team members might 
help on security behind the curtain).
Now I am not sure how to do it for another kernel, because the rest of the 
team is usually busy with the rest of the archive. Maybe it would be a good 
idea to see, if someone from the kfreeBSD kernel team would be willing to 
help? Also, I guess Dann or someone else from the sec team should probably 
comment on this as well.

Cheers
Steffen


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Andreas Barth
* Steffen Joeris (steffen.joe...@skolelinux.de) [090826 08:53]:
 For kernel-security support, we have Dann Frazier in the security team, who 
 is 
 also working in the kernel team (and of course other kernel team members 
 might 
 help on security behind the curtain).

So your basic concern is: Who will support the kbsd-specific packages
(kernel plus kernel-near userland)? (The other packages shouldn't be
an issue, or?)


Cheers,
Andi


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Steffen Joeris
On Wed, 26 Aug 2009 04:58:24 pm Andreas Barth wrote:
 * Steffen Joeris (steffen.joe...@skolelinux.de) [090826 08:53]:
  For kernel-security support, we have Dann Frazier in the security team,
  who is also working in the kernel team (and of course other kernel team
  members might help on security behind the curtain).

 So your basic concern is: Who will support the kbsd-specific packages
 (kernel plus kernel-near userland)? (The other packages shouldn't be
 an issue, or?)
Yeah basically, I mean they should be supported from within the security team, 
but I was wondering, whether we have a particular individual appointed for it 
(like for the linux kernel) or how the details should look like.

I just reread my first response to Marc and saw that it could have been read as 
very sarcastic and rude, my apologies that wasn't the intention I wrote that 
sentence in a hurry.

Cheers
Steffen

P.S. The comments/ideas/questions in this thread are my own, not the view of 
the security team.

P.P.S. We could probably drop -devel from this thread.


signature.asc
Description: This is a digitally signed message part.


Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Hector Oron
Hello,

2009/8/25 Marc 'HE' Brockschmidt h...@debian.org:
 Release Goals
 =
 We have now reviewed the list of release goals [RT-Goals] and have
 ACKed most of the proposed things. A short overview:

  - multiarch
    We hope to allow our users to install binaries for several
    architectures on a single machine in Squeeze.

Just as a minor correction, the goal is to install shared libraries
and include files for several architectures, instead binaries, that
might be done at squeeze+1, but the picture has not been drawn yet.

Have a nice day !

-- 
 Héctor Orón


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Petr Salinger

 - kFreeBSD:
Debian 6.0 Squeeze should be the first Debian release shipping with
a non-Linux kernel.

Out of curiosity, how is security support working for this and who is
providing it?


The upstream provides their own security advisories, see

http://security.freebsd.org/
http://security.freebsd.org/advisories.html

They could be reused.

Petr


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Goswin von Brederlow
Hector Oron hector.o...@gmail.com writes:

 Hello,

 2009/8/25 Marc 'HE' Brockschmidt h...@debian.org:
 Release Goals
 =
 We have now reviewed the list of release goals [RT-Goals] and have
 ACKed most of the proposed things. A short overview:

  - multiarch
    We hope to allow our users to install binaries for several
    architectures on a single machine in Squeeze.

 Just as a minor correction, the goal is to install shared libraries
 and include files for several architectures, instead binaries, that
 might be done at squeeze+1, but the picture has not been drawn yet.

 Have a nice day !

Both statements are ambigious.

Correct me if I'm wrong but the plan is to allow installing of
multiple architectures of the same shared library in parallel and
installing binaries from different architectures but never the same
binary from multiple architectures in parallel.

So far there is no plan at all at allowing multiple architectures for
the same binary to be installed in parallel other than individual
packages using alternatives or a common wrapper script where it is
really needed.


At least that is my understanding of the proposaland surrounding
discussions.

MfG
Goswin


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-26 Thread Hector Oron
Hello,

2009/8/26 Goswin von Brederlow goswin-...@web.de:
 Hector Oron hector.o...@gmail.com writes:
 Just as a minor correction, the goal is to install shared libraries
 and include files for several architectures, instead binaries, that
 might be done at squeeze+1, but the picture has not been drawn yet.

 Both statements are ambigious.

 Correct me if I'm wrong but the plan is to allow installing of
 multiple architectures of the same shared library in parallel and
 installing binaries from different architectures but never the same
 binary from multiple architectures in parallel.

ATM, that's the plan.

 So far there is no plan at all at allowing multiple architectures for
 the same binary to be installed in parallel other than individual
 packages using alternatives or a common wrapper script where it is
 really needed.

Right, this plan needs to be written (as an extension to current spec)
and it needs to be taken under consideration but not for squeeze
release, but for squeeze+X release.

Kind regards,
--  Héctor Orón


--
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Re: Bits from the release team: Release goals, schedule, state of the union

2009-08-25 Thread Steffen Joeris
On Wed, 26 Aug 2009 06:51:48 am Marc 'HE' Brockschmidt wrote:
 Heya,

 This mail should be the first in a row of roughly monthly mails
 informing the project about the state of the release. Please don't
 hesitate to contact us on debian-rele...@lists.debian.org whenever
 you have questions.

 Release Goals
 =
 We have now reviewed the list of release goals [RT-Goals] and have
 ACKed most of the proposed things. A short overview:

  - multiarch
 We hope to allow our users to install binaries for several
 architectures on a single machine in Squeeze.
  - kFreeBSD:
 Debian 6.0 Squeeze should be the first Debian release shipping with
 a non-Linux kernel.
Out of curiosity, how is security support working for this and who is 
providing it?

Cheers
Steffen


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org