!NBBFPbiuttRgTqbrcY:nixos.org

NixOS Security Discussions

365 Members
Discussions around Security | Triaging happens in #security:nixos.org123 Servers

Load older messages


SenderMessageTime
9 Dec 2024
@uep:matrix.orguepwhat i will guess, since the author has apparently been waiting on feedback for a long while, is that everyone has just glazed over and not given definitive feedback that it's a bad idea01:47:59
@uep:matrix.orguepunexpected and unusual, but i guess it could happen01:48:46
@hexa:lossy.networkhexanobody bothered to the first time either01:50:52
@hexa:lossy.networkhexait was only reverted because it broke eval01:51:12
@elvishjerricco:matrix.orgElvishJerriccoit only reached my radar because I'm not a codeowner of the installer files01:51:57
@elvishjerricco:matrix.orgElvishJerriccobut I would have objected the last time too01:52:04
@elvishjerricco:matrix.orgElvishJerricco I think they did something so that the PAM module only accepts keys as listed in the system config, but I didn't look to closely 01:52:49
@elvishjerricco:matrix.orgElvishJerricco * I think they did something so that the PAM module only accepts keys as listed in the system config, but I didn't look too closely 01:53:04
@elvishjerricco:matrix.orgElvishJerricco * it only reached my radar because I'm now a codeowner of the installer files01:53:11
@hexa:lossy.networkhexaso apparently we now have a github team that is authoritative for meta.categories changes01:53:23
@hexa:lossy.networkhexabut none that is authoritative for nixos design decisions01:53:46
@uep:matrix.orguepyeah, it seems to have a list of directories, so the keys must be there as well as accepted by the agent01:53:50
@hexa:lossy.networkhexa * but none that is authoritative for nixos "the distro" design decisions01:54:56
@hexa:lossy.networkhexait is hard to imagine how such a change can fall through the cracks and land in a release, because nobody with an opinion was requested for review01:55:36
@hexa:lossy.networkhexa * it is not hard to imagine how such a change can fall through the cracks and land in a release, because nobody with an opinion was requested for review01:55:40
@tomodachi94:matrix.orgTomodachi94 (they/them)
In reply to@hexa:lossy.network
so apparently we now have a github team that is authoritative for meta.categories changes
(I'm not even sure if there's some process we should have followed when making that team? But that's probably a discussion for another channel)
02:09:49
@tomodachi94:matrix.orgTomodachi94 (they/them)* (I'm not even sure if there's some process we should have followed when making that team? The RFC only mentioned that one should exist, not how it should be created. But that's probably a discussion for another channel)02:10:46
@tomodachi94:matrix.orgTomodachi94 (they/them)* (I'm not even sure if there's some process we should have followed when making that team? The RFC only mentioned that one should exist, not how it should be created, so we just added everyone who expressed interest. But that's probably a discussion for another channel)02:11:12
@hexa:lossy.networkhexait is no specifically about that team02:11:40
@tomodachi94:matrix.orgTomodachi94 (they/them)Yep, that's why I put it in parentheses and added "But that's probably a discussion for another channel" at the end02:12:14
@tomodachi94:matrix.orgTomodachi94 (they/them)* Yep, that's why I put my message in parentheses and added "But that's probably a discussion for another channel" at the end02:12:28
@tomodachi94:matrix.orgTomodachi94 (they/them)
In reply to@hexa:lossy.network
but none that is authoritative for nixos "the distro" design decisions
A UX team or similar could be interesting. At the least ensuring those core modules have maintainers/Codeowners could prevent something like that from happening again
02:26:19
@tomodachi94:matrix.orgTomodachi94 (they/them)* A UX team or similar could be interesting. At the least ensuring those "core" modules have maintainers/Codeowners could prevent something like that from happening again02:26:31
@tomodachi94:matrix.orgTomodachi94 (they/them)* A UX team or similar could be interesting. At the least, ensuring those "core" modules have maintainers/Codeowners could prevent something like that from happening again02:26:43
@hexa:lossy.networkhexait is not really about having maintainers for these modules02:26:44
@hexa:lossy.networkhexa * it is not really about having a team stand in as maintainers for these modules02:26:51
@hexa:lossy.networkhexait is about guiding the coarse design choices of the user experience02:27:05
@karlericsson:matrix.orgkarlericsson joined the room.08:00:39
@teutat3s:pub.solarteutat3s Done, I hope I pinged the right emily https://github.com/NixOS/nixpkgs/pull/363541 11:39:49
10 Dec 2024
@shadowrz:nixos.dev@shadowrz:nixos.dev changed their display name from Yorusaka Miyabi | Emotional Bugged | No DM to Yorusaka Miyabi.06:21:46

Show newer messages


Back to Room ListRoom Version: 9