Re: Public image of LTS (was: squeeze-lts and the security tracker)
On Tue, Jun 10, 2014 at 09:34:34PM +0200, Moritz Mühlenhoff wrote:
> On Sat, Jun 07, 2014 at 05:02:43PM -0400, David Prévot wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA256
> > Hi,
> > Le 07/06/2014 16:47, Florian Weimer a écrit :
> > > First, I need a definite list of source.list entries, that is, a real
> > > answer to the "what to leave in sources.list?" thread. :-)
> > >
> > > Depending on that answer, there might be different ways for presenting
> > > squeeze-lts in the tracker.
> > FWIW, since nobody from www seems to be part of the people aware of the
> > LTS workflow, some guidance (or even better, drafts, wordings, or
> > patches) about the ongoing requests and bug reports against www.d.o
> > would be highly welcome.
> > David, on behalf on the people behind www, a bit lost in the LTS world
In the section "Keeping your Debian system secure", please add
"If you are using Squeeze LTS, you also need to subscribe to the debian-lts-announce mailing list."
"If you are using Squeeze LTS additional apt sources need to be added:
deb http://http.debian.net/debian/ squeeze-lts main contrib non-free
deb-src http://http.debian.net/debian/ squeeze-lts main contrib non-free
Additional information can be found at https://wiki.debian.org/LTS/Using"
And while we're at it, I recommend to drop the following sub-sentence, this team is non-existant for
years: "and we also have a Security Audit team that reviews the archive looking for new or unfixed security bugs."