[Board] incubation: security policy

[Jeff McKenna]

Even that list of officers is out of date (many projects and committees
not listed).  When you guys mentioned a security policy, my first
thoughts were how to force a security policy on new projects when
existing projects do not have one.  I don't have the answer, but I agree
this needs lots of communication between the projects and the Board.

-jeff



On 2014-05-13, 8:59 AM, Jody Garnett wrote:
> I expect that project officers would be a good point of contact for any
> OSGeo project. They are a contact point and have a relationship with the
> appropriate project steering committee.
> 
> I am finding that we do not make use of our project officers, I found a
> thread on discuss at osgeo.org <mailto:discuss at osgeo.org> a couple weeks
> ago asking for input from projects. If you need to talk to projects the
> information is
> here: http://www.osgeo.org/content/foundation/board_and_officers.html :)
> 
> Does anyone have a good example of a security policy they care to share?
> 
> Jody Garnett
> 
> 
> On Tue, May 13, 2014 at 3:54 AM, Bart van den Eijnden <bartvde at osgis.nl
> <mailto:bartvde at osgis.nl>> wrote:
> 
>     Hello board,
> 
>     Jody pointed me at this thread:
>     http://sourceforge.net/p/geoserver/mailman/message/32319902/
> 
>     and we both wondered if it would make sense to have this be part of
>     the incubation checklist, i.e. what policy do you have in place for
>     treating security issues?
> 
>     Best regards,
>     Bart