[OpenIndiana-discuss] Proposal: OpenIndiana Stable Branch

[Deano]

I think Alasdair has been clear, Stable will be 148 with security patches
only. No matter what, how or even good reasons matter at this stage,
Stable-148 is effectively locked down bar security and critical fixes.

Best course of action is to get security helpers in, which will get Stable
out the door ASAP and then open up these discussion for the longer Stable
release schedules and choices, next one will be a biggy as we move to an
illumos core.

Doing this is a lot of work for the OI team, and (wo)manpower is short. If
anyone has a bit of spare time, volunteering for the security team would be
greatly appreciated (they will mentor if you've never done it before) or
filling wiki pages or even just filling in the HCL with any data on machines
you are running OI would help.

We are approaching the first major milestone of the OpenIndiana and illumos
projects, hopefully the second will follow fairly quickly and then we can
push forward with new and exciting developments :)

Just my 2p,
Deano

-----Original Message-----
From: Jesus Cea [mailto:jcea at jcea.es] 
Sent: 26 January 2011 11:48
To: Discussion list for OpenIndiana
Subject: Re: [OpenIndiana-discuss] Proposal: OpenIndiana Stable Branch

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 26/01/11 04:22, Ken Gunderson wrote:
> Sure, the *BSD ship with Sendmail, but that is mostly for historical
> reasons and that nobody wants to get into a holy war as to what a more
> modern default should be.  At the time Debian opted for Exim, Sendmail
> was one security exploit after another waiting to happen, Postfix was
> not yet in existence and Qmail, the other potential contender, had an
> unacceptable license.  Several Linux distributions ship with Postfix.
> Just because Oracle makes a poor decision and ships Sendmail doesn't
> mean OI necessarily has to follow, no?

Well, it has been ages since the last sendmail remote exploit, but I
personally know quite a few guys rebuilding servers after being
exploited thru Exim (just days -a week?- ago).

OI 148 uses sendmail. The stable release should be minimal change,
security fixes only. Any extra developer will be used to integrate Illumos.

If a 3th party provides a postfix replacement for sendmail, perfect. But
do not delay 148+support for the sake of it.

PS: I personally use postfix too.

- -- 
Jesus Cea Avion                         _/_/      _/_/_/        _/_/_/
jcea at jcea.es - http://www.jcea.es/     _/_/    _/_/  _/_/    _/_/  _/_/
jabber / xmpp:jcea at jabber.org         _/_/    _/_/          _/_/_/_/_/
.                              _/_/  _/_/    _/_/          _/_/  _/_/
"Things are not so easy"      _/_/  _/_/    _/_/  _/_/    _/_/  _/_/
"My name is Dump, Core Dump"   _/_/_/        _/_/_/      _/_/  _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQCVAwUBTUAKBJlgi5GaxT1NAQK0FAP/YqG7N+vxmWfHP70c023VuHmk28WtNeVO
a9RR94z1lAZyJpu03rURazjsPw/Av8XNSCSqBcBE4G2HEubTsSbBg7phoQ27b9KZ
UWeEGt+WZlgy3A2GreESSjSWEchalezFKLFxNWYKdDBEd96oLVxbJPr24JiP5QB9
o5JYLeAVPh4=
=RNIN
-----END PGP SIGNATURE-----

_______________________________________________
OpenIndiana-discuss mailing list
OpenIndiana-discuss at openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss