Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 14 Jul 2000 14:01:41 -0400
From:      Garance A Drosihn <drosih@rpi.edu>
To:        David Pick <D.M.Pick@qmw.ac.uk>, Warner Losh <imp@village.org>
Cc:        security@FreeBSD.ORG
Subject:   Re: Displacement of Blame[tm]
Message-ID:  <v0421010ab59502eb7f19@[128.113.24.47]>
In-Reply-To: <E13D29h-0006WZ-00@xi.css.qmw.ac.uk>
References:  <E13D29h-0006WZ-00@xi.css.qmw.ac.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
At 10:53 AM +0100 7/14/00, David Pick wrote:
>
>A little shorter:
>	<port> FreeBSD Port Security Advisory <advisory number>
>
>1) puts the package name first indicating it's *probably* a problem
>   with the package itself, and in any case only matters if you are
>   running that package
>
>2) says it contains *specific* advice for people running the FreeBSD
>   port (as I hope the content would)!
>
>3) contains the advisory number at the end, when this is the least
>   significant data in the header, but useful for indexing archives

For what it is worth, I think I like this suggestion the most.  My
opinion is probably influenced by the fact that I sort my mailboxes
by subject name.  My hope is that some other OS's might pick up on
this subject-format strategy, and thus all the security advisories
for a given <port> would sort together (for those of us who sort by
subject... :-).

If that did happen, then it would become much more obvious to the
casual onlooker that <port> was something that was not unique and
specific to a single operating system, while at the same time helping
freebsd users see which issues MAY be effecting them.

I also like having the <port> name at the start of the subject,
instead of at the end where it is more likely to be trimmed off.
I also want the words 'FreeBSD' and 'Port' to show up early in
the subject line.

>Alternatively:
>	FreeBSD Port of <port>: Security Advisory <advisory number>

This would be fine with me too.

And in case I haven't explicitly mentioned it before, I do think
all these security advisories are a very excellent service to
FreeBSD users, and help to show freebsd is serious about security
issues.  All I have been wondering about is if we could come up
with a slightly better format for the subject lines.


---
Garance Alistair Drosehn           =   gad@eclipse.acs.rpi.edu
Senior Systems Programmer          or  drosih@rpi.edu
Rensselaer Polytechnic Institute


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v0421010ab59502eb7f19>