Re: Resurrecting the Securing Debian Manual

Holger Levsen <[email protected]> Mon, 9 Jun 2025 16:43:47 +0000

Newsgroups	gmane.linux.debian.devel.documentation,gmane.linux.debian.devel.security
Message-ID	<[email protected]>

Hi Noah,

On Mon, Jun 09, 2025 at 12:20:36PM -0400, Noah Meyerhans wrote:
> Most basically, I wonder if folks think this is a worthy idea. 

I do think so! Thanks for your initiative, I do hope it will fly!

> My inclination is to primarily focus on general principles rather than
> try to document specific settings in specific packages, as in the
> current document's Chapter 5 ("Securing services running on your
> system").  It'll make sense to document some approaches to safe usage of
> the most common software (firefox, openssh, etc), but I don't believe
> that it's feasible to provide useful advice for a meaningful subset of
> Debian packages.

sounds sound! I also liked your mock/draft table of contents!

> Should we maybe consider maintaining this document on wiki.debian.org,
> rather than being a centrally maintained document? The wiki may scale
> better to multiple contributors, leading to better content and more
> active maintenance.

https://wiki.debian.org/DebianEdu/Documentation/Trixie (or Bookworm or many
earlier relases) is an example where this is being done, using translations via
.po files (nowadays mostly translated via weblate) and with a src:debian-edu-doc
package building several binary packages mostly for different translations, shipping
txt, html, pdf and epub versions of that manual.

-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

"A developed country is not a place where the poor have cars. It's where the
rich use public transportation." (quote attributed to several people)

signature.asc (application/pgp-signature, 833 B)