[Proposal] Ring-based Packaging Policies

[Stephen John Smoogen]

On 13 February 2015 at 09:05, Ralf Corsepius <rc040203 at freenet.de> wrote:

> On 02/13/2015 04:51 PM, Matthew Miller wrote:
>
>> On Fri, Feb 13, 2015 at 04:43:53PM +0100, Ralf Corsepius wrote:
>>
>>> words, I think it might be reasonable to have bundling in the outer
>>>> rings be a blacklist rather than a whitelist, so long as we can always
>>>> find out with a simple repoquery what contains a package.
>>>>
>>> To me, this idea is not helpful.
>>> All it does is to send upstreams a message which encourages to
>>> disregard the issues of bundling, to work "dirty" and not to care
>>> about their coding quality.
>>>
>>
>> I think the stark reality is that few upstreams these days care about
>> any message we send, for or against coding quality. We're just not in a
>> strong position there, as much as I'd love it if we were.
>>
>
> I disagree - We need to send a message, to raise awareness about these
> issues ("Beware the beginnigs!") and to be explict againt people who bundle.
>
> Or differently: Not-bunlding is one of the key features, which fuels Linux
> befamed security. If you're dropping this, we worse than Windows.


How do we send this message? Because it is clear other people are out of
ideas on how to do this in a way that software that people want to use care
about.


-- 
Stephen J Smoogen.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20150213/1a3f6529/attachment.html>