Fedora Defensive Coding Book

[Patrick Vavrina]

Hello,

I corrected the wiki link for the Defensive Coding Book:

https://fedoraproject.org/wiki/Security_Team_Work_Flow#Defensive_Coding_book

Change:

https://docs.fedoraproject.org/en-US/Fedora_Security_Team//html/Defensive_Co...

to

https://docs.fedoraproject.org/en-US/Fedora_Security_Team/1/html/Defensive_C...

This document is outdated. Could we write a new version?

Is still the author Florian Weimer employee at Red Hat?

Enjoy your time and stay safe!

Kind regards,
Patux

[Florian Weimer]

* Patrick Vavrina:
> Is still the author Florian Weimer employee at Red Hat?

Yes, I'm still at Red Hat, but I work more directly on programming tools
these days.

There have always been problems with updating the published manual,
right from the start.  Over the years, several of us have tried
different ways of hosting it, but I think that never really worked out.

I personally like Docbook more than the newer markup languages, but I
think there is an Ascidoc conversion somewhere.  If that's the future,
that's fine with me.

I don't know if Fedora has an automated publication workflow for manuals
that provides a bit more review than the wiki.  It would make sense to
use it if it's available.

Thanks,
Florian

[Matthew Miller]

On Mon, Feb 01, 2021 at 08:05:53PM +0100, Florian Weimer wrote:
> I don't know if Fedora has an automated publication workflow for manuals
> that provides a bit more review than the wiki.  It would make sense to
> use it if it's available.

Yeah, the workflow for docs.fedoraproject.org uses a PR based review system.

[Florian Weimer]

* Matthew Miller:
> On Mon, Feb 01, 2021 at 08:05:53PM +0100, Florian Weimer wrote:
> > I don't know if Fedora has an automated publication workflow for manuals
> > that provides a bit more review than the wiki.  It would make sense to
> > use it if it's available.
>
> Yeah, the workflow for docs.fedoraproject.org uses a PR based review
> system.

Do you have to build RPMs before you can publish something, or is it all
automated once the PR is approved and merged?

Thanks,
Florian

[Matthew Miller]

On Tue, Feb 02, 2021 at 07:16:24PM +0100, Florian Weimer wrote:
> Do you have to build RPMs before you can publish something, or is it all
> automated once the PR is approved and merged?

No RPMs. (We stopped trying to do that several years ago.)

[Florian Weimer]

* Matthew Miller:
> On Tue, Feb 02, 2021 at 07:16:24PM +0100, Florian Weimer wrote:
> > Do you have to build RPMs before you can publish something, or is it all
> > automated once the PR is approved and merged?
>
> No RPMs. (We stopped trying to do that several years ago.)

Great, then I suggest to move to this infrastructure if possible. 8-)

Thanks,
Florian

[Huzaifa Sidhpurwala]

On 2/2/21 12:02 AM, Patrick Vavrina wrote:
> Hello,
>
> I corrected the wiki link for the Defensive Coding Book:
>
> https://fedoraproject.org/wiki/Security_Team_Work_Flow#Defensive_Coding_book
>
> Change:
>
> https://docs.fedoraproject.org/en-US/Fedora_Security_Team//html/Defensive_Co...
>
> to
>
> https://docs.fedoraproject.org/en-US/Fedora_Security_Team/1/html/Defensive_C...

Hello,

I am currently (attempting) to maintain the defensive coding guide at:
https://pagure.io/defensive-coding-guide

Feel free to send over any PR.

Also since there are issues in publishing at docs.fedoraproject.org, The
published guide is available at:
https://huzaifas.fedorapeople.org/public/defensive-coding/
> security-team mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/[e-mail]...