1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-webteam] Request on behalf of secteam for a website for security update
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-webteam%40mageia.org?Subject=Re%3A%20%5BMageia-webteam%5D%20Request%20on%20behalf%20of%20secteam%20for%20a%20website%20for%0A%09security%20update&In-Reply-To=%3C1303336807.10561.272.camel%40akroma.ephaone.org%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="000761.html">
<LINK REL="Next" HREF="000766.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-webteam] Request on behalf of secteam for a website for security update</H1>
<B>Michael Scherer</B>
<A HREF="mailto:mageia-webteam%40mageia.org?Subject=Re%3A%20%5BMageia-webteam%5D%20Request%20on%20behalf%20of%20secteam%20for%20a%20website%20for%0A%09security%20update&In-Reply-To=%3C1303336807.10561.272.camel%40akroma.ephaone.org%3E"
TITLE="[Mageia-webteam] Request on behalf of secteam for a website for security update">misc at zarb.org
</A><BR>
<I>Thu Apr 21 00:00:07 CEST 2011</I>
<P><UL>
<LI>Previous message: <A HREF="000761.html">[Mageia-webteam] Your Bugzilla bug list needs attention.
</A></li>
<LI>Next message: <A HREF="000766.html">[Mageia-webteam] [Bug 166] add a option in bugzilla profile to show the bugs which a person is CC'ed to
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#762">[ date ]</a>
<a href="thread.html#762">[ thread ]</a>
<a href="subject.html#762">[ subject ]</a>
<a href="author.html#762">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>Hi,
as said on -dev, in order to manage security update, the (future)
security team would like to have a website ( or part of the website ) to
present security advisories
( <A HREF="http://meetbot.mageia.org/mageia-dev/2011/mageia-dev.2011-04-19-19.10.html">http://meetbot.mageia.org/mageia-dev/2011/mageia-dev.2011-04-19-19.10.html</A> ).
To give 2 examples, something like :
<A HREF="http://www.mandriva.com/fr/support/security/advisories/?dis=2010.1">http://www.mandriva.com/fr/support/security/advisories/?dis=2010.1</A>
or :
<A HREF="http://www.debian.org/security/2011/">http://www.debian.org/security/2011/</A>
Nothing fancy is required, a simple CRUD application should do the trick
( I will be of course partial but I think a simple django application +
theming would be enough ) . The various usability requirements are to be
discussed and proposed here, as well as the data model but nothing
complex is needed.
Now, if I could add some requirements, we ( sysadmins ) would prefer to
have it based on postgresql rather than mysql ( if choosing the sql
way ). If using a specific stack ( which again would be recommended ),
please try to stick to one of those that we already support ( django
1.1, catalyst, or rails 2.3, with update to newer version in less than 1
year but not now ), using fastcgi ( but we will take care of
deployment ).
The exact workflow is not decided yet, so I would suggest to keep it
simple for now ( like simply someone using xmlrpc to publish and to push
on a ml ). If someone has a application already written for that, this
could be considered as well I guess.
The data should be ideally managed remotely ( xml-rpc, whatever ), and
should ( if possible ) have some backend to modify it that can be used
connected to ldap ( and so we could say that people must be in some
group to connect ).
The goal is not to replicate mageia-app-db or do something like that :
<A HREF="https://admin.fedoraproject.org/updates/">https://admin.fedoraproject.org/updates/</A> , just to provide a simple
frontend for security announce. ( kinda like a blog, without comments,
and with a different presentation, and without all the various
features ).
--
Michael Scherer
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="000761.html">[Mageia-webteam] Your Bugzilla bug list needs attention.
</A></li>
<LI>Next message: <A HREF="000766.html">[Mageia-webteam] [Bug 166] add a option in bugzilla profile to show the bugs which a person is CC'ed to
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#762">[ date ]</a>
<a href="thread.html#762">[ thread ]</a>
<a href="subject.html#762">[ subject ]</a>
<a href="author.html#762">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-webteam">More information about the Mageia-webteam
mailing list</a><br>
</body></html>
|
