Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 25 May 2001 19:06:09 -0700
From:      Kris Kennaway <kris@obsecurity.org>
To:        security-officer@FreeBSD.org, www@FreeBSD.org
Subject:   Changes to security WWW directory
Message-ID:  <20010525190609.A50526@xor.obsecurity.org>

next in thread | raw e-mail | index | archive | help

--tThc/1wpZn/ma/RB
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi all,

I'd like to bring the security advisories into the www/ CVS repository
for better accesibility and change management.  Future advisories will
go on WWW initially; we can either try and get ftp-master to also
check out the advisories from CVS, or we can replace the FTP
advisories directory with a set of symlinks to a file telling people
to look at the website (i.e. to take care of external links pointing
to the FTP advisories).

See http://www.freebsd.org/~kris/security-new.tgz for my proposed
redesign of the en/security directory (this also includes some other
markup/content changes to the security.sgml which should probably be
looked over by a WWWWeenie :-)

We have to leave the current patches/ and tools/ directories on the
FTP site because of all the existing links in advisories.  I'd like to
bring future patches and tools into CVS as well; but a problem is that
we'll probably need to distribute binary upgrade packages with future
advisories -- I'm not sure where they should go.  It would be nice if
they were mirrored to other WWW mirrors so they can be locally
obtained.

Something else we'll need is a way to rebuild the
www.freebsd.org/security directory on the website when we release an
advisory; if we're using WWW as the primary distribution mechanism
then the updated files need to be live at the time of release.  I'm
not sure how this can be most easily accomplished (I have root on the
freebsd.org machines, but some of the others who release advisories
don't).

Kris



--tThc/1wpZn/ma/RB
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.5 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE7Dw+QWry0BWjoQKURAot4AKClyKN15T64yMaGEFzTdN5S7glECACg5ZXu
vgIr8Nge9jW4zHBpHkTq+GE=
=hfnW
-----END PGP SIGNATURE-----

--tThc/1wpZn/ma/RB--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-www" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010525190609.A50526>