Re: Security project meeting summary

Aleksey V Lazar <[email protected]> Thu, 24 Jul 2008 12:20:49 -0500
Newsgroups gmane.linux.gentoo.security
Organization Minnesota State University, Mankato
Message-ID <[email protected]>
Pierre-Yves Rofes wrote:
> On Mon, July 21, 2008 9:04 pm, Aleksey V Lazar wrote:
>   
>> Hello.  Would it be reasonable to suggest adding a ~security (or
>> something like it) flag to denote packages masked for security reasons?
>>
>> Thanks.
>> Aleksey
>>
>>     
>
> Hello,
>
>  by "~security" you mean a keyword like ~x86 ? It's not a hardware
> architecture, so it wouldn't make much sense. But having a way to list
> masked packages for security reasons is indeed a good idea. The problem
> is finding how to do it "the right way".
>
>
> --
> Pierre-Yves Rofes
> Gentoo Linux Security Team
>
>   
I was thinking more along the lines of adding a special mark to the list 
that currently includes "~", "+" and "M".  Let's say it would be "!".  
This mark could then be used for package versions with security 
problems.  I don't know if this is technically possible, but I could see 
"!" used in conjunction with the "~", "+" or "M" to alert/indicate a 
security issue, like "~!", or "+!" or "M!".  I think this is what I meant. 

Thanks.
Aleksey

-- 
Aleksey V. Lazar
Website Development
Memorial Library 3010
Minnesota State University
Mankato, MN 56001
http://www.mnsu.edu/
Tel.: 1-507-389-2480