[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#783232: release-notes: two comments about the security section



On Fri, Apr 24, 2015 at 04:58:18PM +0200, Niels Thykier wrote:
> Control: tags -1 moreinfo
> 
> On 2015-04-24 11:57, Romain Francoise wrote:
> > Package: release-notes
> > Severity: normal
> > 
> > As mentioned on IRC, I reviewed the security section of the "What's new
> > in Debian 8" chapter and:
> > - it mentions the protected_symlinks feature of the kernel as new, but
> >   afaik it was already enabled in wheezy
> > - it advertises hardening-wrapper, but it's planned for deprecation or
> >   removal in stretch
> > 
> > (X-Debbugs-CC: team@security.debian.org)
> > 
> > Thanks,
> > 
> 
> Hi,
> 
> Thanks for the review.
> 
> The kernel change is to #774117.  For the hardening-wrapper, I have
> traced the latest change to #772694.  However, it seems to just be
> changes to an existing section that might (or might not) have carried
> over from Wheezy.
> 
>  * I will await the security team before doing any changes.

These were in fact carried over from wheezy and Romain's comments
are confirmed to be correct.

Cheers,
        Moritz


Reply to: