Server security updates plan

[luisca]

- Automatically install security updates for rpm-installed software packages.

- Sign up on appropriate mailing lists to get security alerts on software installed via source packages.

- Maybe run some monitoring/analysis tool.

[javier]

First step is to replace all the source packages with rpm's. Namely:

trac
gitweb

[luisca]

For upgrading trac:

http://trac.edgewall.org/wiki/TracUpgrade

[luisca]

For upgrading trac:

http://trac.edgewall.org/wiki/TracUpgrade

[andrey]

Our version of trac, 0.11, is not a stable release yet. trac publishes changelogs with security update info for stable versions but not for releases that are upcoming milestones.

We're using the following trac modules:

acct_mgr
navadd
navhider
webadmin
authz_policy

Once release 0.11 is considered stable along with those components (and they are packaged as RPMs), we should switch to using the RPMs. We'll then monitor the changelog:
http://trac.edgewall.org/wiki/ChangeLog
for security updates.