Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-18 Thread Andres P
On Fri, Jun 18, 2010 at 1:18 AM, Jeffrey 'jf' Lim jfs.wo...@gmail.com wrote: ah yes, SSL! sorry :) On 2006-05-01 22:34:12, Ulf Möller, openssl developer [1], responded [2] to openssl packager Kurt Roeckx [3] saying that he was for applying the patch just to keep valgrind quiet. But openssl

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-18 Thread Jeffrey 'jf' Lim
On Fri, Jun 18, 2010 at 2:33 PM, Andres P aep...@gmail.com wrote: On Fri, Jun 18, 2010 at 1:18 AM, Jeffrey 'jf' Lim jfs.wo...@gmail.com wrote: ah yes, SSL! sorry :) On 2006-05-01 22:34:12, Ulf Möller, openssl developer [1], responded [2] to openssl packager Kurt Roeckx [3] saying that he

[arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Ananda Samaddar
I've created a Google Group here for discussion around creating an Arch Security Team: http://groups.google.com/group/arch-security Please join it if you're interested. The reason for this group is in response to my rejected suggestion for an arch-security mailing list. I'll CC any policy or

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Dan McGee
On Thu, Jun 17, 2010 at 1:32 PM, Ananda Samaddar ana...@samaddar.co.uk wrote: I've created a Google Group here for discussion around creating an Arch Security Team: http://groups.google.com/group/arch-security Please join it if you're interested.  The reason for this group is in response to

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Miah Johnson
Cool. I just joined. -Miah On Thu, Jun 17, 2010 at 11:45 AM, Dan McGee dpmc...@gmail.com wrote: On Thu, Jun 17, 2010 at 1:32 PM, Ananda Samaddar ana...@samaddar.co.uk wrote: I've created a Google Group here for discussion around creating an Arch Security Team:

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Ananda Samaddar
On Thu, 17 Jun 2010 13:45:17 -0500 Dan McGee dpmc...@gmail.com wrote: Sounds like a blast from the past: http://wiki.archlinux.org/index.php/Security_Task_Force http://code.google.com/p/arch-sheriff/ Best of luck this time around. -Dan As I've mentioned before, I don't think getting

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Jeroen Op 't Eynde
On Thu, 17 Jun 2010 20:57:56 +0200, Ananda Samaddar ana...@samaddar.co.uk wrote: 1. Check for vulnerabilities 2. Know how to use PKGBUILDS and abs 3. Can spare some time to send announcements, create interim PKGBUILDs and file security issues on the bug tracker. 1. [testing] users do that

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Miah Johnson
I think there is much more that can be done besides the short list from Ananda. The thing you have to remember is that security does not mean I'm running the newest code.. Things to remember: 1. There is no such thing as secure. 2. Proper security consists of multiple layers of defense.

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Jeroen Op 't Eynde
On Fri, 18 Jun 2010 00:35:19 +0200, Miah Johnson m...@chia-pet.org wrote: Things to remember: 1. There is no such thing as secure. 2. Proper security consists of multiple layers of defense. Additional examples of things the AST could do: 1. Propose changes to default configuration files to be

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Ng Oon-Ee
Comments interspersed on a few points. On Thu, 2010-06-17 at 15:35 -0700, Miah Johnson wrote: I think there is much more that can be done besides the short list from Ananda. The thing you have to remember is that security does not mean I'm running the newest code.. Things to remember: 1.

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Jeroen Op 't Eynde
On Fri, 18 Jun 2010 01:00:57 +0200, Ng Oon-Ee ngoo...@gmail.com wrote: My OPINION is that Arch is not a distro for those who do not want to do regular total updates. Of course, some have individual packages in NoUpgrade, but the number of problems which crop up which come down to you didn't run

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Marek Otahal
On Friday 18 of June 2010 00:35:19 Miah Johnson wrote: I think there is much more that can be done besides the short list from Ananda. The thing you have to remember is that security does not mean I'm running the newest code.. Things to remember: 1. There is no such thing as secure. 2.

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Burlynn Corlew Jr
On Thu, Jun 17, 2010 at 1:32 PM, Ananda Samaddar ana...@samaddar.co.ukwrote: I've created a Google Group here for discussion around creating an Arch Security Team: http://groups.google.com/group/arch-security Please join it if you're interested. The reason for this group is in response to

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Jeffrey 'jf' Lim
On Fri, Jun 18, 2010 at 8:33 AM, C Anthony Risinger anth...@extof.me wrote: security is the responsibility of those deploying, not those packaging.  it requires end-to-end oversight and complete configuration toward a specific and particular purpose; something that is not possible for those

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Andres P
On Thu, Jun 17, 2010 at 10:18 PM, Jeffrey 'jf' Lim jfs.wo...@gmail.com wrote: On Fri, Jun 18, 2010 at 8:33 AM, C Anthony Risinger anth...@extof.me wrote: security is the responsibility of those deploying, not those packaging.  it requires end-to-end oversight and complete configuration toward

Re: [arch-general] New Google Group for discussion and notices on Arch security.

2010-06-17 Thread Jeffrey 'jf' Lim
On Fri, Jun 18, 2010 at 1:25 PM, Andres P aep...@gmail.com wrote: On Thu, Jun 17, 2010 at 10:18 PM, Jeffrey 'jf' Lim jfs.wo...@gmail.com wrote: On Fri, Jun 18, 2010 at 8:33 AM, C Anthony Risinger anth...@extof.me wrote: security is the responsibility of those deploying, not those packaging.