Security Team Apprenticeship

This page is a draft only
It is still under construction and content may change. Do not rely on the information on this page.

Mission

To create a training program that creates competent, trusted members of the Security Team that can handle most every situation that could come their way.

Background

When the Security Team was created we were forced to guess at what skills were needed and who would be right to work on potentially sensitive cases. That was a bad way to start but I believe we're now beyond guessing.

Requirements to be met

Skills

• Using security tracking features in Bugzilla and Security Bugs
• Understand CVEs
• Understanding Packaging Process and Packaging Policies
• Basic Understanding of Software and System Security Principles

Resources

Security Training

• Information Security Training

Packaging Policies and Procedures

• Becoming a Packager
• Non-Responsive Maintainer Policy

CVE Description and Use

• CVE Central