diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2012-March/004309.html')
| -rw-r--r-- | zarb-ml/mageia-sysadm/2012-March/004309.html | 143 |
1 files changed, 143 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2012-March/004309.html b/zarb-ml/mageia-sysadm/2012-March/004309.html new file mode 100644 index 000000000..8c33df5ea --- /dev/null +++ b/zarb-ml/mageia-sysadm/2012-March/004309.html @@ -0,0 +1,143 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20%5Bforums-discuss%5D%20Re%3A%20updating%20sysadmin%0A%20privileges%20in%20forum%20config&In-Reply-To=%3CCA%2Bh4nj5LS_AkTYP%3D4HP0OQgkZLo-VYU_Ypvk6D8fg%3DOdjwvm-A%40mail.gmail.com%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="004307.html"> + <LINK REL="Next" HREF="004312.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config</H1> + <B>Wolfgang Bornath</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20%5Bforums-discuss%5D%20Re%3A%20updating%20sysadmin%0A%20privileges%20in%20forum%20config&In-Reply-To=%3CCA%2Bh4nj5LS_AkTYP%3D4HP0OQgkZLo-VYU_Ypvk6D8fg%3DOdjwvm-A%40mail.gmail.com%3E" + TITLE="[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config">molch.b at googlemail.com + </A><BR> + <I>Sat Mar 24 12:48:26 CET 2012</I> + <P><UL> + <LI>Previous message: <A HREF="004307.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI>Next message: <A HREF="004312.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4309">[ date ]</a> + <a href="thread.html#4309">[ thread ]</a> + <a href="subject.html#4309">[ subject ]</a> + <a href="author.html#4309">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>2012/3/24 Michael Scherer <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-sysadm">misc at zarb.org</A>>: +><i> Le jeudi 22 mars 2012 à 08:18 +0100, Wolfgang Bornath a écrit : +</I>><i> +</I>>><i> He is talking about the update of the forum software phpBB3. The +</I>>><i> version used at Mageia is outdated since summer 2011. New versions of +</I>>><i> phpBB3 almost always are caused by security issues. This has been +</I>>><i> mentioned several times in the forum threads. The point is that the +</I>>><i> implementation of the forum software at Mageia (involving puppet, +</I>>><i> etc.) was done this way to "ease forum software maintenance" (quoting +</I>>><i> maât). :) +</I>><i> +</I>><i> Strictly speaking, what would have really helped the maintenance would +</I>><i> have been to use : +</I>><i> - a forum properly packaged, not one requiring specific deployment +</I>><i> process like the current setup we have. Packages solved part of the +</I>><i> problem since 15 years, maybe it would be a good moment to start using +</I>><i> them. +</I>><i> - a forum that do not requires to patch it for adding features +</I>><i> - a forum that do not requires update on a regular basis. +</I> + - I know not much about packaging (just the essentials). But I doubt +there would be benefits by having a package for the forum software. +Quite to the contrary, a simple change of a character in one of the +php files would cause the need of an update of the whole package, +while as is you just need to exchange this one php file. If there +would be a benefit I guess there would have been phpBB packages for +years, phpBB being the most popular forum software, not only in the +Linux world. Ok, a weak point, I admit. + + - How would you implement requested features which are not available +in the forum software other than by "MODs" (which is the same as a +patch? + + - every php based forum software I know (I think I know almost all of +them at least from testing) gets regular updates from upstream. Most +of the changes between versions are not added functionalities or nicer +looks (where implementing an update could be a matter of discussions) +but needed bug fixes and even more needed security fixes. That's why +updates are unavoidable and should be done in due time. If you know a +forum software with equal functionality and which does not require +such updates, great, let's have it! + +><i> We are open to discuss patches or even constructive comments to the +</I>><i> puppet setup, but it seems that no one sent anything at all. I have +</I>><i> justified everything we did, and the reason for not having a free for +</I>><i> all system due to privacy and security requirements that I explained +</I>><i> enough to not repeat myself. +</I> +Exactly these (privacy & security) are the reasons for forum software +updates. To me the current implementation was explained as a way to +ease maintenance. That's why I (and others) asked in the forum why +needed updates were not installed. I asked this in the forum because +for a forum user the forum admin is the right person to contact, not +any other group or person, not any other platform. + +><i> I either didn't see any pull request of patch to upgrade the forum in +</I>><i> git, nor any request to have write access to the aforementioned git by +</I>><i> anyone. While I can imagine that puppet, despite being dead easy and +</I>><i> very well documented, is too complex for a hobbyist sysadmin, I do not +</I>><i> think that git is a so obscure and unknown technology that no one ever +</I>><i> tried to do anything with it. +</I> +Maintaining the forum (implementing modifications, updates or starting +these by creating a bug report or whatever needed) is the most +prominent task of the forum admin, there's not much else for him to +do. It is not the user's job to care for such things. Maât himself +even explained the workflow once in the forum, so he knew exactly what +to do. So, if you blame somebody about missing requests or whatever, +pls knock on the right door. + +><i> Also, it seemed obvious to me that security issues should be treated +</I>><i> like the rest of the issues, on bugzilla and not on forums. I still see +</I>><i> no bug opened for that on the bug tracker. +</I> +You're right, it's no topic for forum discussions. If updates are +available upstream, the admin should open a bugreport, adding an +"important" tag to ensure that it is done in due time. This was never +done. + +Summary: this discussion only started because somebody did not do his +job (whatever reason). Hopefully exchanging people on the relevant +position will improve the situation. + +-- +wobo +</PRE> + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="004307.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI>Next message: <A HREF="004312.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4309">[ date ]</a> + <a href="thread.html#4309">[ thread ]</a> + <a href="subject.html#4309">[ subject ]</a> + <a href="author.html#4309">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |