Looking for a sponsor for Security Team

[Patrick Vavrina]

Hello David,

How are you?

I contacted Sparks but he didn’t answer me yet. Do you know if he is still in charge of
Security Team and Sponsor?

What are conditions and procedures for being “Approved” member  in this group?

Have a nice time and keep safe!

Kind regards,
Patrick
patux(a)fedoraproject.org

[Matthew Miller]

On Thu, Feb 11, 2021 at 09:24:39PM +0100, Patrick Vavrina wrote:
>  Hello David,
>  
>  How are you?
>  
>  I contacted Sparks but he didn’t answer me yet. Do you know if he is still in charge of
> Security Team and Sponsor?
>  
>  What are conditions and procedures for being “Approved” member  in this group?
>  
>  Have a nice time and keep safe! 
This might be something else we need to re-kickstart if there is enough
interest. I know Eric is still around, but he hasn't been very active in
Fedora for a while.

-- 
Matthew Miller
<mattdm(a)fedoraproject.org&gt;
Fedora Project Leader

[Fabian Affolter]

On 2/11/21 10:18 PM, Matthew Miller wrote:
>  On Thu, Feb 11, 2021 at 09:24:39PM +0100, Patrick Vavrina wrote:
> > I contacted Sparks but he didn’t answer me yet. Do you know if he is still in charge
> of Security Team and Sponsor?
> >
> > What are conditions and procedures for being “Approved” member  in this group?
>  
>  This might be something else we need to re-kickstart if there is enough
>  interest. I know Eric is still around, but he hasn't been very active in
>  Fedora for a while. 
We tried to get all the active members a while back and list them in the 
roster [1]. Looks like that this is out-dated in the meantime.

As far as I remember was the FAS group created to have some sort of 
"proven packagers" for security related packaging work and a way to deal 
with Bugzilla tickets. The packaging part has pretty much been 
superseded by the transition to src.fpo as pagure provides a merge/pull 
request feature.

The FAS group mainly serves to grant people editbugs privileges on 
Bugzilla nowadays if I'm not wrong. Thus, if one is already a member of 
the packager group as example or want to do Bug triage, the membership 
in security-team is not really needed.


Kind regards,

Fabian

[1] https://fedoraproject.org/wiki/Security_Team_Roster

[David Kaufmann]

On Thu, Feb 11, 2021 at 09:24:39PM +0100, Patrick Vavrina wrote:
>  I contacted Sparks but he didn’t answer me yet. Do you know if he is
>  still in charge of Security Team and Sponsor? 
Yes, Sparks was also my sponsor at the time, but haven't heard of him in
quite some time.
At the time he was the person being most active, but "nb" should also be
able to approve.

>  What are conditions and procedures for being “Approved” member  in
>  this group? 
In the past it was "being active and attending meetings", but at that
time trying to help packagers with long-open bugzillas was more of a
priority.
Nowadays I'd say we should discuss it again, but I think something about
those lines should be good.

All the best,
David