On this page
- Using Slack - the primary location for discussions
- Using irc - a backup alternative if necessary
- Joining the channel yourself
- Auto-joining the channel every time you log on to IRC
- Inviting a reporter/maintainer temporarily
- Granting access to a new security team member
- Listing irc users with access to #drupal-security
- SSL
- enable SSL on Colloguy (osx)
- enable SSL for freenode on irssi
Security Team Chat channels (IRC and Slack)
Historically the security team used the IRC channel #drupal-security on freenode. With the general, broader move of the Drupal community to slack, the security team has also moved to slack. The irc channel is still maintained as a backup and general alternative in case there are issues with slack.
Using Slack - the primary location for discussions
First, get yourself connected to the general Drupal community Slack. You must set up two-factor-authentication to Slack to help ensure your account is not compromised. After that is done, contact @mlhess in Slack and he can add you to the channel.
Slack maintains history, so anyone invited to the channel can see that history. In the past people would periodically be invited to the channel to discuss issues and then removed from the channel. If it's necessary to collaborate with people in a private room in slack, you should create a new private room for those people.
Using irc - a backup alternative if necessary
Everyone on the security team has been granted access to join the restricted #drupal-security channel on freenode IRC.
You must be registered before you can be given access to the channel. If you login with a password, you are registered. If not, do a “/msg nickserv help” to find how to register yourself.
Joining the channel yourself
/msg chanserv invite #drupal-security
Auto-joining the channel every time you log on to IRC
The procedure is different for different IRC clients:
- Pidgin: Use the instructions here as a guide (in particular, add the "chanserv" bot as a buddy, and then set up a buddy pounce to message it with "invite #drupal-security" every time it logs in).
Inviting a reporter/maintainer temporarily
If someone wants to join the channel to discuss an issue they are about to report or to discuss a proposed fix or details of their release they can be invited to join the #drupal-security room temporarily. This lets them talk with multiple team members at the same time.
Become op:
/msg ChanServ OP #drupal-security
Then, while in the channel:
/invite username #drupal-security
You can then ask them to leave or kick them:
/kick username Thanks for your help
(If you don't include the thanks the default is sent: Your behavior is not conducive to the desired environment.)
Granting access to a new security team member
To grant:
/msg chanserv flags #drupal-security [nick] +iA
To revoke:
/msg chanserv flags #drupal-security [nick] -iA
Listing irc users with access to #drupal-security
/msg chanserv flags #drupal-security
SSL
#drupal-security channel requires SSL to connect.
enable SSL on Colloguy (osx)
- Open connections window
- Right click and click "Get Info"
- Check SSL
- Set port to 6697
- Restart client to get new settings.
enable SSL for freenode on irssi
- disconnect
- /server add -ssl -network freenode chat.freenode.net 6697
- reconnect
Help improve this page
You can:
- Log in, click Edit, and edit this page
- Log in, click Discuss, update the Page status value, and suggest an improvement
- Log in and create a Documentation issue with your suggestion