Re: Resurrecting the Securing Debian Manual

--MO6cNvbYASc1A1up
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi Noah,

On Mon, Jun 09, 2025 at 12:20:36PM -0400, Noah Meyerhans wrote:
> Most basically, I wonder if folks think this is a worthy idea.=20

I do think so! Thanks for your initiative, I do hope it will fly!

> My inclination is to primarily focus on general principles rather than
> try to document specific settings in specific packages, as in the
> current document's Chapter 5 ("Securing services running on your
> system").  It'll make sense to document some approaches to safe usage of
> the most common software (firefox, openssh, etc), but I don't believe
> that it's feasible to provide useful advice for a meaningful subset of
> Debian packages.

sounds sound! I also liked your mock/draft table of contents!

> Should we maybe consider maintaining this document on wiki.debian.org,
> rather than being a centrally maintained document? The wiki may scale
> better to multiple contributors, leading to better content and more
> active maintenance.

https://wiki.debian.org/DebianEdu/Documentation/Trixie (or Bookworm or many
earlier relases) is an example where this is being done, using translations=
 via
=2Epo files (nowadays mostly translated via weblate) and with a src:debian-=
edu-doc
package building several binary packages mostly for different translations,=
 shipping
txt, html, pdf and epub versions of that manual.


--=20
cheers,
	Holger

 =E2=A2=80=E2=A3=B4=E2=A0=BE=E2=A0=BB=E2=A2=B6=E2=A3=A6=E2=A0=80
 =E2=A3=BE=E2=A0=81=E2=A2=A0=E2=A0=92=E2=A0=80=E2=A3=BF=E2=A1=81  holger@(d=
ebian|reproducible-builds|layer-acht).org
 =E2=A2=BF=E2=A1=84=E2=A0=98=E2=A0=B7=E2=A0=9A=E2=A0=8B=E2=A0=80  OpenPGP: =
B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 =E2=A0=88=E2=A0=B3=E2=A3=84

"A developed country is not a place where the poor have cars. It's where the
rich use public transportation." (quote attributed to several people)

--MO6cNvbYASc1A1up
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmhHDz4ACgkQCRq4Vgaa
qhyEGxAAte/i4a9v32IYnFc9yDC+xq5W/91bVIh4wadn4Qg4eAp+Lvxg/IV03lLo
NGbF+PA1fwi1xF5dk3jxhJvwJRuRdjDZ8zrpm8HwntB4oeW2Pe9ofyXqyA9JrwWo
AAvL4V3f3VQg2JUao9qvEbI0tLSqabL/vWuf1zhm3gWCrLQRmM1E5UMPwXRsvbcO
DtrXvGQuFvF/R/AU/9RcskSuS9v/QgScbhrswRCeoHcXzU2VgjJs0rphSdsdeqJC
mBozovOX+/lI2tKTljgtIfKJVBbcbywPKSIhrQl0PluDxXzXJPEe0TV0qLip3jTf
ooaIeBrMyrfxhPOSz0nWRB8ZPy6ZOFQy99uDlHw4wpKDSMiOBcm+z1y9T32md9f8
KERf0VPWbhi3Oo19W56WT+eEy3fKfIdHtNeKCkZW3GIzgUwlk5aVau9URBureM6y
Ll/zGxPwznK6mrqKIAkVTSArl/eRIxXsVPMQq8yW4F26pnb2d6KaXj6GeMJvssua
ok5oFRg4olZJkCfx211EgWbOYEar0foKCgcoUu2z1jBf5VZRgZfWArB5eaV1sK66
CAAReUZKjVQ9oInutvUN1mqA9jrLDo95eQifn3ZIoLFo/K3NaH5P1ogSwIqwErwe
+cQhdbL8H59JFPYUYdDinGGER+p3xy6OXW+1ofPeU87+RF3pLTY=
=Kxm5
-----END PGP SIGNATURE-----

--MO6cNvbYASc1A1up--