Re: [Chicken-meisters] Security reports

[Felix]

From: Peter Bex <address@hidden>
Subject: [Chicken-meisters] Security reports
Date: Thu, 31 Mar 2011 13:06:17 +0200

> Hello all,
> 
> I was enjoying myself with making fun at Chamilo for having a shitty
> security process, but then I realised our situation isn't better; we
> have no documented way to report security issues (with eggs and/or
> chicken itself).
> 
> I propose setting up a address@hidden, which optionally
> just sends mail to the chicken-meisters.  This should then be clearly
> listed on the call-cc.org main page, and on the wiki.  We should then
> probably announce it on chicken-users, or chicken-hackers too.
> 
> If we get this set up we might also document a "security process"
> that describes how security issues are handled.
> 
> What do y'all think?

Sorry, but what is a "security process"?


cheers,
felix