Re: the Gentoo Audit project and dev-util/splint

On Thursday 04 June 2009, Mansour Moufid wrote:
> Hello list,
>
> I was wondering if I could get peoples' opinions of dev-util/splint
> (the Secure Programming Lint) [1], and specifically in the context of
> development on Gentoo -- if you've used this tool before and if you
> did or didn't find it useful?
>
> I noticed it wasn't listed as a source code audit aid on the Gentoo
> Audit project page [2]. Is there a specific reason for this or was
> simply an oversight? I wouldn't mind contributing a brief paragraph
> or so on the subject.

Hi Mansour,

I will add the item to the list -- the other tools do not have any 
description either.
However note that the Auditing project is currently in a sleeping state. 
No one is auditing code in the tree for new vulnerabilities (at least 
not as part of the project). If you have an interest in this subject 
and would like to participate in reviving the project, that would be 
great. It can be a way to become a Gentoo developer and participate in 
a great community, and to cooperate with others in the Security project 
and other vendors. But keep in mind there is a certain amount of work 
that comes with this.


Robert

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.11 (GNU/Linux)
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=Lj9D
-----END PGP SIGNATURE-----