From owner-freebsd-security  Wed Jul 22 13:34:02 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA19157
          for freebsd-security-outgoing; Wed, 22 Jul 1998 13:34:02 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from rover.village.org (rover.village.org [204.144.255.49])
          by hub.freebsd.org (8.8.8/8.8.8) with SMTP id NAA19093
          for <security@freebsd.org>; Wed, 22 Jul 1998 13:33:59 -0700 (PDT)
          (envelope-from imp@village.org)
Received: from harmony [10.0.0.6] 
	by rover.village.org with esmtp (Exim 1.71 #1)
	id 0yz5Zz-0005hu-00; Wed, 22 Jul 1998 14:33:39 -0600
Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.8.8/8.8.3) with ESMTP id OAA05154; Wed, 22 Jul 1998 14:36:15 -0600 (MDT)
Message-Id: <199807222036.OAA05154@harmony.village.org>
To: andrewr <andrewr@slack.net>
Subject: Re: Projects to improve security (related to C) 
Cc: Pat Lynch <lynch@rush.net>, "Jordan K. Hubbard" <jkh@time.cdrom.com>,
        Eivind Eklund <eivind@yes.no>, Alexandre Snarskii <snar@paranoia.ru>,
        Garance A Drosihn <drosih@rpi.edu>, security@FreeBSD.ORG
In-reply-to: Your message of "Wed, 22 Jul 1998 16:29:10 EDT."
		<Pine.NEB.3.96.980722162742.24981A-100000@brooklyn.slack.net> 
References: <Pine.NEB.3.96.980722162742.24981A-100000@brooklyn.slack.net>  
Date: Wed, 22 Jul 1998 14:36:15 -0600
From: Warner Losh <imp@village.org>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

In message <Pine.NEB.3.96.980722162742.24981A-100000@brooklyn.slack.net> andrewr writes:
: Which is why I am going to ask people who I know for sure know what to
: look for. 

Asking and getting are two different things :-).  However, most
anybody can do find /usr/src/blah | xargs egrep sprintf.

: > Also, it is a huge effort to coordinate.  The effort also suffered
: > from lack of time of some of the participants.
: 
: Another thing I am going to ask from the participants is that they really
: DO have time.  It's up to them to make the correct choice.. The choice to
: help out and make their OS better, or to slack and hurt the project.

I think that this is a dangerous attitude.  People want to do these
things, but often times other things come up to prevent them from
putting the time into the project.  You'll likely need, to run a
successful project, some flexibility in this, plus assigning the tree
to multiple people.  It is far easier to give the tree out in small
chunks than in large chunks.  At least it is easier for people to
finish them.

Warner

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message