Bug#337086: [BPP] Best practices for security design and review

2008-06-02 Thread Lucas Nussbaum
retitle 337086 provide a link to the Debian Security Manual thanks On 03/06/08 at 02:06 +0200, Javier Fernández-Sanguino Peña wrote: > On Thu, May 29, 2008 at 12:56:19PM +0200, Lucas Nussbaum wrote: > > What's the status of this patch? Are you still interested in getting > > this into developers-r

Bug#337086: [BPP] Best practices for security design and review

2008-06-02 Thread Javier Fernández-Sanguino Peña
On Thu, May 29, 2008 at 12:56:19PM +0200, Lucas Nussbaum wrote: > What's the status of this patch? Are you still interested in getting > this into developers-reference? I haven't worked in this patch since I last sent it. I included it in the Debian Security Manual, since there was no response her

Bug#337086: [BPP] Best practices for security design and review

2008-05-29 Thread Lucas Nussbaum
tags 337086 + moreinfo thanks On 02/11/05 at 16:59 +0100, Javier Fernández-Sanguino Peña wrote: > Package: developers-reference > Version: 3.3.6 > Tags: patch > > Attached is a patch that provides a list of best practices for security > review and designed. If there is no intention to add this to

Bug#337086: [BPP] Best practices for security design and review

2006-04-12 Thread Javier Fernández-Sanguino Peña
On Tue, Apr 11, 2006 at 10:28:56AM -0400, Justin Pryzby wrote: > On Tue, Apr 11, 2006 at 01:30:23PM +0200, Javier wrote: > > On Wed, Apr 05, 2006 at 09:58:56PM -0400, Justin Pryzby wrote: > > > > +Does not run if either the user or the group do not exist: > > > + > > > + if getent passwd | grep -

Bug#337086: [BPP] Best practices for security design and review

2006-04-11 Thread Justin Pryzby
On Tue, Apr 11, 2006 at 01:30:23PM +0200, Javier wrote: > On Wed, Apr 05, 2006 at 09:58:56PM -0400, Justin Pryzby wrote: > > +Does not run if either the user or the group do not exist: > > + > > + if getent passwd | grep -q "^server_user:"; then > > + echo "Server user does not exist. Abortin

Bug#337086: [BPP] Best practices for security design and review

2006-04-11 Thread Javier Fernández-Sanguino Peña
On Wed, Apr 05, 2006 at 09:58:56PM -0400, Justin Pryzby wrote: > For the record, I like the intent of this patch, but I think it is a > little too long for inclusion in the Developers reference. Perhaps a > reference to the "Securing Debian" section where it will be included > will be sufficient?

Bug#337086: [BPP] Best practices for security design and review

2006-04-05 Thread Justin Pryzby
On Thu, Apr 06, 2006 at 02:25:44AM +0200, Javier wrote: > On Wed, Nov 02, 2005 at 05:07:34PM +0100, Andreas Barth wrote: > > Hi, > > > > * Javier Fern?ndez-Sanguino Pe?a ([EMAIL PROTECTED]) [051102 17:04]: > > > Attached is a patch that provides a list of best practices for security > > > review a

Bug#337086: [BPP] Best practices for security design and review

2006-04-05 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 02, 2005 at 05:07:34PM +0100, Andreas Barth wrote: > Hi, > > * Javier Fernández-Sanguino Peña ([EMAIL PROTECTED]) [051102 17:04]: > > Attached is a patch that provides a list of best practices for security > > review and designed. If there is no intention to add this to the Developer (

Bug#337086: [BPP] Best practices for security design and review

2005-11-02 Thread Andreas Barth
Hi, * Javier Fernández-Sanguino Peña ([EMAIL PROTECTED]) [051102 17:04]: > Attached is a patch that provides a list of best practices for security > review and designed. If there is no intention to add this to the Developer > Reference please say so, if that is the case, I will simply create a new

Bug#337086: [BPP] Best practices for security design and review

2005-11-02 Thread Javier Fernández-Sanguino Peña
Package: developers-reference Version: 3.3.6 Tags: patch Attached is a patch that provides a list of best practices for security review and designed. If there is no intention to add this to the Developer Reference please say so, if that is the case, I will simply create a new section in the "Secur