Bug#337086: [BPP] Best practices for security design and review

[Andreas Barth <aba@not.so.argh.org>]

Hi,

* Javier Fernández-Sanguino Peña (jfs@computer.org) [051102 17:04]:
> Attached is a patch that provides a list of best practices for security
> review and designed. If there is no intention to add this to the Developer
> Reference please say so, if that is the case, I will simply create a new
> section in the "Securing Debian Manual" oriented towards package developers.

thank you for the patch. Basically, the goal is to add it if it reflects
the best practices. In the other case, it should not be added at all.


I'll add some more in-depth remarks later on.



Cheers,
Andi