From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: Call for volunteer(s) for Guix "security" web page Date: Tue, 27 Sep 2016 14:04:29 -0400 Message-ID: <20160927180429.GI2569@jasmine> References: <20160916161458.GA17780@jasmine> <87lgykmeru.fsf@we.make.ritual.n0.is> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:51384) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bowkG-0000OO-3r for guix-devel@gnu.org; Tue, 27 Sep 2016 14:04:45 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bowkA-0000Da-Uq for guix-devel@gnu.org; Tue, 27 Sep 2016 14:04:42 -0400 Received: from out2-smtp.messagingengine.com ([66.111.4.26]:46456) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bowk9-0000B5-OX for guix-devel@gnu.org; Tue, 27 Sep 2016 14:04:38 -0400 Content-Disposition: inline In-Reply-To: <87lgykmeru.fsf@we.make.ritual.n0.is> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: ng0 Cc: guix-devel@gnu.org On Thu, Sep 22, 2016 at 10:04:37AM +0000, ng0 wrote: > In my opinion this could be extended later by something similar to > https://security.gentoo.org/ and its subpages. > As we don't have much on that topic currently, we can't write about > it. If this would be too much for the website, an inclusion in the > manual of which security measurements a vanilla Guix offers would be > good. > One example: I stumbled upon our /dev/mem configuration only when I > wanted to use flashrom for internal flashing. This is not documented > anywhere. It's a good idea, but of course somebody needs to actually do the work :) My primary goal for this page right now is to make it easy to for anyone to learn how to contact us about security issues. I'm hoping this page is the first result on DuckDuckGo and Google for "guix security".