Ah, I did not realize the repositories were disabled in the rpm.  Would it be appropriate for me to update this page to mention that under the command line installation section?   

Additionally, might it be worth adding a provision to the policy that new repositories must be disabled?  Perhaps it is redundant since the request goes through Legal and FESCo anyway, but it could be helpful to users and packagers reading the policy.

Anyway, thanks very much!  I appreciate the clarification.  My initial concern is completely put to rest.
DB


On Fri, Apr 27, 2018 at 7:38 PM, Kevin Fenzi <kevin@scrye.com> wrote:
On 04/27/2018 02:56 PM, David Benoit wrote:
> Hi all,
>
> Regarding the inclusion of the fedora-workstation-repositories package in
> F28, is there currently a policy in place against including it as a
> dependency? From what I understand from the recent fedora magazine article
> <https://fedoramagazine.org/third-party-repositories-fedora/> and the policy
> wiki page
> <https://fedoraproject.org/wiki/Workstation/Third_party_software_policies?rd=Workstation/Third_party_software_proposal>,
> the purpose of distributing the third-party repositories an rpm is to
> ensure that a user must enable them explicitly.
>
>
> Is there some some preventative measure in place to protect users from the
> package being pulled in silently as a dependency?

I don't understand why someone would add such a dep... but even if they
did, the repos would not be enabled when installed. They are disabled in
the rpm. The user must explicitly enable them.

> If repository-enabling
> rpms are to become acceptable cases for package submissions, what
> considerations are being taken to ensure such submissions are tracked and
> handled similarly?

Well, depending on what they are they would need to pass Legal and FESCo
approval which would be via ticketing, etc.

Open to better ways to word that policy page for them...

kevin



_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-leave@lists.fedoraproject.org




--

DAVID BENOIT

INTERN, multi-arch qe

Red Hat