Re: [openstack-dev] [security] Consensus on security guidance license
Works for me. -Paul On May 15, 2015 10:03 AM, "Murphy, Grant" wrote: > At the last OSSG mid-cycle a number of us put together some security > guidelines and best practices aimed at developers. We are now attempting to > migrate this content to the https://security.openstack.org page. However > we need to come to agreement on how to license this content. I’m proposing > that we move from an Apache license to CC-BY as per Jeremy’s comments in > this review https://review.openstack.org/#/c/181123/. Do any of the > original authors (listed below) have an objection to this? > > Authors: > Dave Belcher (HP) > Doug Chivers (HP) > Lucas Fisher (Was Nebula) > Grant Murphy (HP) > Rob Clarke (HP) > Travis McPeak (HP) > Tim Kelsey (HP) > Eric Brown (VMWare) > Brant Knudson (IBM) > Paul McMillan (Was Nebula) > Rob Fletcher (Uber) > Nathaniel Dillon (HP) > Jamie Finnigan (HP) > > - Grant > __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [stable] Icehouse 2014.1.4 freeze exceptions
> Can Paul (in CC) please have a look at the last patch set, as you are the one > who found the main drawback in the firsts iterations... The latest patchset (as currently merged) looks good to me. -Paul __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Horizon] Nominations to Horizon Core
> From: Russell Bryant > We can involve people in security reviews without having them on the > core review team. They are separate concerns. As I noted in my original mail, this was my primary concern. I just didn't want "not core" to stand in the way of "is appropriate to provide security review for private patches on Launchpad". If that is the case, I want to be sure that there is someone on core who has the appropriate domain-specific knowledge to make sure the patch is thorough and correct. I'll leave the rest of the argument about why this is important for after I finish filing the tickets and fixes are released so we can publicly talk about it. -Paul ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [Horizon] Nominations to Horizon Core
+1 on Tatiana Mazur, she's been doing a bunch of good work lately. I'm fine with me being removed from core provided you have someone else qualified to address security issues as they come up. My contributions have lately been reviewing and responding to security issues, vetting fixes for those, and making sure they happen in a timely fashion. Fortunately, we haven't had too many of those lately. Other than that, I've been lurking and reviewing to make sure nothing egregious gets committed. If you don't have anyone else who is a web security specialist on the core team, I'd like to stay. Since I'm also a member of the Django security team, I offer a significant chunk of knowledge about how the underlying security protections are intended work. -Paul From: Gabriel Hurley Sent: Tuesday, December 10, 2013 1:08 PM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [Horizon] Nominations to Horizon Core +1 on Tatiana Mazur being added to Core. I'm also okay with cleaning out the Core list. I considered doing it myself last cycle since none of those folks are involved anymore, but figured I'd leave them as a posthumous honor. ;-) I think now's a good time to trim it down. Glad I didn't make the axe list, - Gabriel > -Original Message- > From: Lyle, David [mailto:david.l...@hp.com] > Sent: Tuesday, December 10, 2013 12:24 PM > To: OpenStack Development Mailing List (not for usage questions) > Subject: [openstack-dev] [Horizon] Nominations to Horizon Core > > I would like to nominate Tatiana Mazur to Horizon Core. Tatiana has been a > significant code contributor in the last two releases, understands the code > base well and has been doing a significant number of reviews for the last to > milestones. > > > Additionally, I'd like to remove some inactive members of Horizon-core who > have been inactive since the early Grizzly release at the latest. > Devin Carlen > Jake Dahn > Jesse Andrews > Joe Heck > John Postlethwait > Paul McMillan > Todd Willey > Tres Henry > paul-tashima > sleepsonthefloor > > > Please respond with a +1/-1 by this Friday. > > -David Lyle > > > > > ___ > OpenStack-dev mailing list > OpenStack-dev@lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev ___ OpenStack-dev mailing list OpenStack-dev@lists.openstack.org http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
