From owner-freebsd-security  Tue Oct  3 12: 0:28 2000
Delivered-To: freebsd-security@freebsd.org
Received: from lariat.org (lariat.org [12.23.109.2])
	by hub.freebsd.org (Postfix) with ESMTP
	id E956037B503; Tue,  3 Oct 2000 12:00:22 -0700 (PDT)
Received: from mustang.lariat.org (IDENT:ppp0.lariat.org@lariat.org [12.23.109.2])
	by lariat.org (8.9.3/8.9.3) with ESMTP id NAA20714;
	Tue, 3 Oct 2000 13:00:01 -0600 (MDT)
Message-Id: <4.3.2.7.2.20001003125150.04c7f3f0@localhost>
X-Sender: brett@localhost
X-Mailer: QUALCOMM Windows Eudora Version 4.3.2
Date: Tue, 03 Oct 2000 12:59:54 -0600
To: Warner Losh <imp@village.org>,
	Paul Richards <paul@originative.co.uk>
From: Brett Glass <brett@lariat.org>
Subject: STABLE support team [Was: cvs commit: src/usr.bin/finger
  finger.c]
Cc: cvs-committers@FreeBSD.ORG, freebsd-security@FreeBSD.ORG
In-Reply-To: <200010031800.MAA27859@harmony.village.org>
References: <Your message of "Tue, 03 Oct 2000 18:32:28 BST." <39DA182C.C70ED553@originative.co.uk>
 <39DA182C.C70ED553@originative.co.uk>
 <39D98B55.126DAFC4@originative.co.uk>
 <200010022227.PAA62603@freefall.freebsd.org>
 <39D92E08.E00CF2E4@owp.csus.edu>
 <20001002180303.A40584@freefall.freebsd.org>
 <39D98B55.126DAFC4@originative.co.uk>
 <200010031530.JAA26493@harmony.village.org>
 <20001003124008.A4892@netmonger.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 12:00 PM 10/3/2000, Warner Losh wrote:

>I'd support this strongly, both as Warner Losh, Committer and as
>Warner Losh, Security Officer.  My current job uses -stable and needs
>to have it be sane at "all"[*] times, or we waste a lot of effort
>bringing in and backing out unstable versions (we do some sanity
>testing before bringing a version in, but there's only so much you can
>do).
>
>I'd be able to work on this on an irregular basis depending on how
>saturated I am at work.

I'd be glad to help. As someone in a similar position (I *cannot* adopt
a branch for use on production servers before the .2 release), I've always
been a strong advocate of keeping -STABLE patched against newly discovered
problems.

When you think about it, it should not be surprising that a growing number of
users want this. If folks are running -STABLE on production servers because
they want rock-solid performance, they certainly will also care about having
security holes patched in a timely way. After all, they don't want those
mission-critical machines to be cracked.

--Brett Glass



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message