Bug#337086: [BPP] Best practices for security design and review

2008-06-02 Thread Javier Fernández-Sanguino Peña
On Thu, May 29, 2008 at 12:56:19PM +0200, Lucas Nussbaum wrote: What's the status of this patch? Are you still interested in getting this into developers-reference? I haven't worked in this patch since I last sent it. I included it in the Debian Security Manual, since there was no response

Bug#337086: [BPP] Best practices for security design and review

2008-06-02 Thread Lucas Nussbaum
retitle 337086 provide a link to the Debian Security Manual thanks On 03/06/08 at 02:06 +0200, Javier Fernández-Sanguino Peña wrote: On Thu, May 29, 2008 at 12:56:19PM +0200, Lucas Nussbaum wrote: What's the status of this patch? Are you still interested in getting this into

Bug#337086: [BPP] Best practices for security design and review

2008-05-29 Thread Lucas Nussbaum
tags 337086 + moreinfo thanks On 02/11/05 at 16:59 +0100, Javier Fernández-Sanguino Peña wrote: Package: developers-reference Version: 3.3.6 Tags: patch Attached is a patch that provides a list of best practices for security review and designed. If there is no intention to add this to the

Bug#337086: [BPP] Best practices for security design and review

2006-04-12 Thread Javier Fernández-Sanguino Peña
On Tue, Apr 11, 2006 at 10:28:56AM -0400, Justin Pryzby wrote: On Tue, Apr 11, 2006 at 01:30:23PM +0200, Javier wrote: On Wed, Apr 05, 2006 at 09:58:56PM -0400, Justin Pryzby wrote: +Does not run if either the user or the group do not exist: +example + if getent passwd | grep -q

Bug#337086: [BPP] Best practices for security design and review

2006-04-11 Thread Javier Fernández-Sanguino Peña
On Wed, Apr 05, 2006 at 09:58:56PM -0400, Justin Pryzby wrote: For the record, I like the intent of this patch, but I think it is a little too long for inclusion in the Developers reference. Perhaps a reference to the Securing Debian section where it will be included will be sufficient? It's

Bug#337086: [BPP] Best practices for security design and review

2006-04-11 Thread Justin Pryzby
On Tue, Apr 11, 2006 at 01:30:23PM +0200, Javier wrote: On Wed, Apr 05, 2006 at 09:58:56PM -0400, Justin Pryzby wrote: +Does not run if either the user or the group do not exist: +example + if getent passwd | grep -q ^varserver_user/var:; then + echo Server user does not exist.

Bug#337086: [BPP] Best practices for security design and review

2006-04-05 Thread Javier Fernández-Sanguino Peña
On Wed, Nov 02, 2005 at 05:07:34PM +0100, Andreas Barth wrote: Hi, * Javier Fernández-Sanguino Peña ([EMAIL PROTECTED]) [051102 17:04]: Attached is a patch that provides a list of best practices for security review and designed. If there is no intention to add this to the Developer (...)

Bug#337086: [BPP] Best practices for security design and review

2006-04-05 Thread Justin Pryzby
On Thu, Apr 06, 2006 at 02:25:44AM +0200, Javier wrote: On Wed, Nov 02, 2005 at 05:07:34PM +0100, Andreas Barth wrote: Hi, * Javier Fern?ndez-Sanguino Pe?a ([EMAIL PROTECTED]) [051102 17:04]: Attached is a patch that provides a list of best practices for security review and designed.

Bug#337086: [BPP] Best practices for security design and review

2005-11-02 Thread Javier Fernández-Sanguino Peña
Package: developers-reference Version: 3.3.6 Tags: patch Attached is a patch that provides a list of best practices for security review and designed. If there is no intention to add this to the Developer Reference please say so, if that is the case, I will simply create a new section in the

Bug#337086: [BPP] Best practices for security design and review

2005-11-02 Thread Andreas Barth
Hi, * Javier Fernández-Sanguino Peña ([EMAIL PROTECTED]) [051102 17:04]: Attached is a patch that provides a list of best practices for security review and designed. If there is no intention to add this to the Developer Reference please say so, if that is the case, I will simply create a new