Il giorno gio, 20/01/2011 alle 21.35 +0100, Matti Bickel ha scritto:
> On 01/20/2011 08:42 PM, Diego Elio Pettenò wrote:
> No. Licenses are not a valid argument to me. I'd accept that if we're
> Debian and pushing 100% of *our* stuff as binary. What we do 90% of the
> time is distributing text - ebuilds.

So I'm not asking _you_ to waste 90% of your time discussing and
auditing licenses. We have a team for that.

At the same time I'm not going to ask the developers to all evaluate
case by case whether they should or shouldn't keep their stuff
available. I'm telling them to put it there rather than in another
place; what that will change shouldn't really be a problem.

> I just was curious about the reasons, as I see no
> compelling point in *forcing* this.

The reason to *force* this is two fold: we need a policy so that we stop
the fact that everybody does as he pleases and this is replacing a
_different_ forcing that we _used_ to have, and which I'm not surprised
you didn't hear about, that told developers to use mirror://gentoo/.

Which is unfortunately troublesome *as Ulrich and Christian already
shown*.

And since in Gentoo we cannot simply scratch rules, as otherwise people
will keep referencing them forever and ever, a new rule replaces the old
rule: you use dev.gentoo.org rather than mirror://gentoo/.

> Take php-5.3.2: I don't care if you found a security issue in my tarball
> or in php's tarball. I'll have a look to determine if the bug's still in
> the newest version. If it is, I'll rename the bug. If it is not, it
> doesn't matter to me.

You might not care. I would, and it's not just a matter of being the
current QA lead in charge, but rather a question of professionalism. If
I would find you or another developer to have introduced a backdoor in a
custom tarball, I'm going to have said developer booted, quickly.

Again, you might not care, we have other teams that do care. Since I'm
not asking you to do a 180° jump changing your habits, can we please
just agree that you don't see the point but you'll follow the request
anyway?

-- 
Diego Elio Pettenò — Flameeyes
http://blog.flameeyes.eu/


Reply via email to