Re: Long term improvement to Debian's security and LTS

2015-10-31 Thread Moritz Muehlenhoff
On Sat, Oct 31, 2015 at 04:00:56PM +0100, Raphael Hertzog wrote: > On Fri, 30 Oct 2015, Moritz Muehlenhoff wrote: > > > > - improving the security infrastructure > > > > That has certainly the best net positive from my point of view. > > From my point of view too. But I'm not sure I would put the

Re: Long term improvement to Debian's security and LTS

2015-10-31 Thread Raphael Hertzog
On Fri, 30 Oct 2015, Moritz Muehlenhoff wrote: > > > - improving the security infrastructure > > That has certainly the best net positive from my point of view. >From my point of view too. But I'm not sure I would put the same emphasis as you on dak related work. I would possibly suggest to work

Re: Long term improvement to Debian's security and LTS

2015-10-31 Thread Raphael Hertzog
Hi, On Fri, 30 Oct 2015, Guido Günther wrote: > Should we apply the attached patch to templates/lts-update-planned.txt > then? Yes, we should. > Salvatore suggested to move to a newer version of nss in all suites (and > keeping it that way). This plus adding some autpkgtests would be > something

Re: Long term improvement to Debian's security and LTS

2015-10-30 Thread Moritz Muehlenhoff
Hi, > On Fri, Oct 30, 2015 at 03:01:47PM +0100, Raphael Hertzog wrote: > > Hello everybody, > > > > with the current LTS funding level and the somewhat limited scope of > > squeeze, > > and until the LTS team takes care of wheezy, we are likely to have some > > spare hours to invest into improvi

Re: Long term improvement to Debian's security and LTS

2015-10-30 Thread Guido Günther
Hi, On Fri, Oct 30, 2015 at 03:01:47PM +0100, Raphael Hertzog wrote: > Hello everybody, > > with the current LTS funding level and the somewhat limited scope of squeeze, > and until the LTS team takes care of wheezy, we are likely to have some > spare hours to invest into improving the long-term s

Long term improvement to Debian's security and LTS

2015-10-30 Thread Raphael Hertzog
Hello everybody, with the current LTS funding level and the somewhat limited scope of squeeze, and until the LTS team takes care of wheezy, we are likely to have some spare hours to invest into improving the long-term state of Debian LTS. That is instead of only taking care of providing security