diff options
Diffstat (limited to 'zarb-ml/mageia-sysadm/2012-March/004307.html')
| -rw-r--r-- | zarb-ml/mageia-sysadm/2012-March/004307.html | 104 |
1 files changed, 104 insertions, 0 deletions
diff --git a/zarb-ml/mageia-sysadm/2012-March/004307.html b/zarb-ml/mageia-sysadm/2012-March/004307.html new file mode 100644 index 000000000..899606e47 --- /dev/null +++ b/zarb-ml/mageia-sysadm/2012-March/004307.html @@ -0,0 +1,104 @@ +<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> +<HTML> + <HEAD> + <TITLE> [Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config + </TITLE> + <LINK REL="Index" HREF="index.html" > + <LINK REL="made" HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20%5Bforums-discuss%5D%20Re%3A%20updating%20sysadmin%0A%20privileges%20in%20forum%20config&In-Reply-To=%3C1332585833.8434.109.camel%40liliana.cdg.redhat.com%3E"> + <META NAME="robots" CONTENT="index,nofollow"> + <META http-equiv="Content-Type" content="text/html; charset=us-ascii"> + <LINK REL="Previous" HREF="004300.html"> + <LINK REL="Next" HREF="004309.html"> + </HEAD> + <BODY BGCOLOR="#ffffff"> + <H1>[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config</H1> + <B>Michael Scherer</B> + <A HREF="mailto:mageia-sysadm%40mageia.org?Subject=Re%3A%20%5BMageia-sysadm%5D%20%5Bforums-discuss%5D%20Re%3A%20updating%20sysadmin%0A%20privileges%20in%20forum%20config&In-Reply-To=%3C1332585833.8434.109.camel%40liliana.cdg.redhat.com%3E" + TITLE="[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config">misc at zarb.org + </A><BR> + <I>Sat Mar 24 11:43:53 CET 2012</I> + <P><UL> + <LI>Previous message: <A HREF="004300.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI>Next message: <A HREF="004309.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4307">[ date ]</a> + <a href="thread.html#4307">[ thread ]</a> + <a href="subject.html#4307">[ subject ]</a> + <a href="author.html#4307">[ author ]</a> + </LI> + </UL> + <HR> +<!--beginarticle--> +<PRE>Le jeudi 22 mars 2012 à 08:18 +0100, Wolfgang Bornath a écrit : + +><i> He is talking about the update of the forum software phpBB3. The +</I>><i> version used at Mageia is outdated since summer 2011. New versions of +</I>><i> phpBB3 almost always are caused by security issues. This has been +</I>><i> mentioned several times in the forum threads. The point is that the +</I>><i> implementation of the forum software at Mageia (involving puppet, +</I>><i> etc.) was done this way to "ease forum software maintenance" (quoting +</I>><i> maât). :) +</I> +Strictly speaking, what would have really helped the maintenance would +have been to use : +- a forum properly packaged, not one requiring specific deployment +process like the current setup we have. Packages solved part of the +problem since 15 years, maybe it would be a good moment to start using +them. +- a forum that do not requires to patch it for adding features +- a forum that do not requires update on a regular basis. + +But since people could neither wait nor volunteered to do the work +properly ( ie, real packages, or selecting a cleaner forum ), the +current setup is the best we could have achieved in the given time frame +( and with the constraint of "we will need to open lots of new forums", +and now, there is ... 2 ). + +We are open to discuss patches or even constructive comments to the +puppet setup, but it seems that no one sent anything at all. I have +justified everything we did, and the reason for not having a free for +all system due to privacy and security requirements that I explained +enough to not repeat myself. + +I either didn't see any pull request of patch to upgrade the forum in +git, nor any request to have write access to the aforementioned git by +anyone. While I can imagine that puppet, despite being dead easy and +very well documented, is too complex for a hobbyist sysadmin, I do not +think that git is a so obscure and unknown technology that no one ever +tried to do anything with it. + +Also, it seemed obvious to me that security issues should be treated +like the rest of the issues, on bugzilla and not on forums. I still see +no bug opened for that on the bug tracker. + +-- +Michael Scherer + + +</PRE> + + + + +<!--endarticle--> + <HR> + <P><UL> + <!--threads--> + <LI>Previous message: <A HREF="004300.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI>Next message: <A HREF="004309.html">[Mageia-sysadm] [forums-discuss] Re: updating sysadmin privileges in forum config +</A></li> + <LI> <B>Messages sorted by:</B> + <a href="date.html#4307">[ date ]</a> + <a href="thread.html#4307">[ thread ]</a> + <a href="subject.html#4307">[ subject ]</a> + <a href="author.html#4307">[ author ]</a> + </LI> + </UL> + +<hr> +<a href="https://www.mageia.org/mailman/listinfo/mageia-sysadm">More information about the Mageia-sysadm +mailing list</a><br> +</body></html> |