[Pkg-awstats-devel] Fwd: Bug#572353

[Jonas Smedegaard]

Hi,

On Thu, Apr 01, 2010 at 10:39:15AM +0200, Andreas Henriksson wrote:
>On Thu, Apr 01, 2010 at 12:15:30PM +0400, Sergey B Kirpichev wrote:
>> Can we make a point release?  Do you think one isn't ready?
>>
>> There is a few easy-to-handle bugs (e.g., #572353, #415334), but the 
>> freeze is coming...

>My personal opinion is that aiming for perfection is wrong,
>we should only consider if the current state is an improvement or not.
>I think it is, but it would be very nice if Jonas with his
>historic knowledge about the awstats challanges could find
>time to review the package and maybe iron out any critical issues
>before we go ahead.

Improved *functionality* might be weakened *security*.

I might be worng (and apologize if so - Sergey have put tremendous work 
into improvements here, I just fear that extending to support multiple 
config files have stolen focus from the IMO bigger issue of keeping data 
secure by default.

Please read my other email posted a moment ago and respond to the points 
there (from a year ago...), rather than summarizing here.


>If you need any assistance in getting the package uploaded,
>feel free to poke me and I'll help out. I guess you might
>need sponsorship?

I am Debian Developer.  "Sponsoring" is for packages created without 
connections to Debian getting injected into Debian, not for teams which 
has Debian Developers involved.


Kind regards, and thanks for all your work on this, (especially Sergey!)


  - Jonas

-- 
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136  Website: http://dr.jones.dk/

   [x] quote me freely  [ ] ask before reusing  [ ] keep private
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-awstats-devel/attachments/20100401/46186469/attachment-0001.pgp>