Tags from the security team now acquired

Moritz Muehlenhoff jmm at inutil.org
Sat Jul 19 22:16:34 UTC 2008


Hi Enrico,

Enrico Zini wrote:
> Hello,

First of all, thanks a lot for implementing this! I hadn't had much
time lately, so this reply comes a bit belated.
 
> I've implemented the acquisition of the security team tags from
> svn://svn.debian.org/svn/secure-testing/data/package-tags
> 
> The script that generates the tag database is this one:
> http://svn.debian.org/wsvn/debtags/tagdb/get-secteam-tags?op=file
> 
> The vocabulary with the tag descriptions is here:
> http://svn.debian.org/wsvn/debtags/vocabulary/trunk/security-team?op=file
> I am happy to give you commit access to it, just give me a list of
> alioth user names.

I'm only missing a tag like the ones below. The specific use case is
sql-ledger, which should only be run behind an authenticated HTTP
zone. 

   Tag: security::etch-limited-support
   Description: Limited scope of security support, see README.Debian
    Security support for this package is limited in covered functionality
    or to specific use cases. Please see README.Debian for details.

   Tag: security::lenny-limited-support
   Description: Limited scope of security support, see README.Debian
    Security support for this package is limited in covered functionality
    or to specific use cases. Please see README.Debian for details.

(Could you commit if it you're fine with it? That's likely less overhead
for all of us)
 
> This is done so that they cannot be seen in the web tag editor, which is
> a bug as well as a feature: a bug because it would be nice to see them
> anywhere, but a feature because the web editor has currently no concept
> of read-only tags, so whatever is seen can also be edited, and we don't
> want these tags to be editable by anyone except the security team.

Sounds good.

Cheers,
        Moritz










More information about the Debtags-devel mailing list