Quoting Petr Gajdůšek (2013-06-25 15:23:51) > actually, I have talked about backports.d.o.
Ok. Thanks for clarifying that. > My concerns are: > > 0) I still think the fix should go to proposed-updates, rather than > backporting whole stuff, at least for support from security team and > then packages on wheezy built without relro seem weird to me, even > only locally built ones, as it is (was) release goal for wheezy. Changes to compiler flags is something that may cause surprises. That's the reason each and every package need to deal with that, instead of enforcing flags centrally. I therefore find it a too risky change for a stable update. I find a backporting repository a perfect way to isolate such more risky changes. But (as I understand it) the rules of backports.d.o repository in specific makes it more difficult to handle backporting pakcages which affect the build environment itself. Essentially this is about how packages rely on sane defaults for its build environment, and the definition of "sane defaults" changing from release to release. > Ad backports.d.o: > 1) You are the maintainer and maybe you want make the backport > yourself? No thank you. I do a bunch of backporting, but am not yet convinced that the governing rules of backports.d.o are good, so I do not participate in that particular set of repositories. > 2) I am not regular CDBS user and I do not know nothing about its > internals. Though the backporting is really straightforward. > 3) I see my life as rather unstable and not sure if I will be able to > backport new versions with important (e.g. security) fixes for the > whole life of wheezy (as stable and oldstable). > > Therefore I think the unintrusive fix would be better in p-u to avoid > the burden of a backport. What fix do you consider unintrusive? > Regardless, I have uploaded a backport to > https://mentors.debian.net/package/cdbs, if you still think the > backport would be better then p-u and don't have objections, I can > post it to debian-backpo...@lists.debian.org. Good luck with that. And thanks for raising this issue - even if I (so far) am not convinced about it, - Jonas -- * Jonas Smedegaard - idealist & Internet-arkitekt * Tlf.: +45 40843136 Website: http://dr.jones.dk/ [x] quote me freely [ ] ask before reusing [ ] keep private
signature.asc
Description: signature
