Security Team

Release responsibilities

1. Review all previously reported issues on dev & sent to security list
2. Contact all people that have helped in the past.
3. Proceed to security audit as per our release procedures.
   • run doc/devtools/securitycheck.php and check each "potentially unsafe" file.
   • Check for presence of all .htaccess files
   • Security Check exceptions
   • Add files to robots.txt (printed pages, etc.)

Members

http://tiki.org/WhoWhat#Security_Team

Ongoing responsibilities

• Keep up to date http://dev.tiki.org/Security and Security.tiki.org
• Monitor what comes in on the security mailing list, and respond accordingly. Ex.: http://secunia.com/product/3356/?task=advisories
• Proactively finds ways to make Tiki more secure
• Release security patches
• Document SecDB (and maybe a cron job to make sure it's always up to date, when people update from cvs)
• Document current security-related things
• Filtering Best Practices

Alias

• SecuritySquad
• SecurityTeam
• Security Squad
• Security Group
• SecurityGroup