Security reports in bugzilla?

[Franck Martin <franck sopac org>]

I have noticed that in bugzilla, you can't flag a problem as a security problem. I think it would be important for gnome to report bugs which may be security hazards. It becomes more and more important that systems shows a high level of security, and that developers are conscious of security implications in their development. As gnome brings more and more features, it may evolve as a security nighmare like windows products if we are not careful.

I think with the possibility to flag a problem as a security threat, will bring the attention of the developers on limiting the security problems of their applications.

What do you think?

Also, there should be a task force, in charge to monitor any security announcement related to gnome and report it back to developers. Maybe it should be added in the weekly gnome summaries.

Just my 0.02 Euros

Cheers
franck sopac org