Re: Long term improvement to Debian's security and LTS

2015-10-31 Thread Moritz Muehlenhoff
On Sat, Oct 31, 2015 at 04:00:56PM +0100, Raphael Hertzog wrote: > On Fri, 30 Oct 2015, Moritz Muehlenhoff wrote: > > > > - improving the security infrastructure > > > > That has certainly the best net positive from my point of view. > > From my point of view too. But I'm not sure I would put the

Re: Long term improvement to Debian's security and LTS

2015-10-31 Thread Raphael Hertzog
On Fri, 30 Oct 2015, Moritz Muehlenhoff wrote: > > > - improving the security infrastructure > > That has certainly the best net positive from my point of view. >From my point of view too. But I'm not sure I would put the same emphasis as you on dak related work. I would possibly suggest to work

Re: Long term improvement to Debian's security and LTS

2015-10-31 Thread Raphael Hertzog
Hi, On Fri, 30 Oct 2015, Guido Günther wrote: > Should we apply the attached patch to templates/lts-update-planned.txt > then? Yes, we should. > Salvatore suggested to move to a newer version of nss in all suites (and > keeping it that way). This plus adding some autpkgtests would be > something

Re: Long term improvement to Debian's security and LTS

2015-10-30 Thread Moritz Muehlenhoff
Hi, > On Fri, Oct 30, 2015 at 03:01:47PM +0100, Raphael Hertzog wrote: > > Hello everybody, > > > > with the current LTS funding level and the somewhat limited scope of > > squeeze, > > and until the LTS team takes care of wheezy, we are likely to have some > > spare hours to invest into improvi

Re: Long term improvement to Debian's security and LTS

2015-10-30 Thread Guido Günther
Hi, On Fri, Oct 30, 2015 at 03:01:47PM +0100, Raphael Hertzog wrote: > Hello everybody, > > with the current LTS funding level and the somewhat limited scope of squeeze, > and until the LTS team takes care of wheezy, we are likely to have some > spare hours to invest into improving the long-term s