From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1Pg1FB-0003hq-Ky for garchives@archives.gentoo.org; Thu, 20 Jan 2011 20:36:33 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 50406E0B23; Thu, 20 Jan 2011 20:36:15 +0000 (UTC) Received: from whirlpool.farbfinsternis.net (static.88-198-16-106.clients.your-server.de [88.198.16.106]) by pigeon.gentoo.org (Postfix) with ESMTP id BC884E0B0C for ; Thu, 20 Jan 2011 20:35:30 +0000 (UTC) Received: from [192.168.178.25] (cable-95-168-144-40.cust.telecolumbus.net [95.168.144.40]) (using TLSv1 with cipher DHE-RSA-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by whirlpool.farbfinsternis.net (Postfix) with ESMTPSA id 773D62E00A for ; Thu, 20 Jan 2011 21:35:29 +0100 (CET) Message-ID: <4D389C90.40400@gentoo.org> Date: Thu, 20 Jan 2011 21:35:28 +0100 From: Matti Bickel User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.13) Gecko/20101208 Lightning/1.0b2 Thunderbird/3.1.7 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@lists.gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 To: gentoo-dev@lists.gentoo.org Subject: Re: [gentoo-dev] Re: Re: On hosting self-produced distfiles References: <1295484635.2390.75.camel@raven.home.flameeyes.eu> <4D3881CD.8000403@gentoo.org> <1295549483.2648.13.camel@raven.home.flameeyes.eu> <4D388CB9.30607@gentoo.org> <1295552523.2648.18.camel@raven.home.flameeyes.eu> In-Reply-To: <1295552523.2648.18.camel@raven.home.flameeyes.eu> X-Enigmail-Version: 1.1.2 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="------------enig9614854A3ADA742EDA574020" X-Archives-Salt: X-Archives-Hash: 13c260e47ccf553ced1dd614efddd055 This is an OpenPGP/MIME signed message (RFC 2440 and 3156) --------------enig9614854A3ADA742EDA574020 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 01/20/2011 08:42 PM, Diego Elio Petten=C3=B2 wrote: > We do distribute part of our packages as binaries already so we have to= > be compliant with their licenses to begin with. Better doing it with a > single sweep than trying to come up with abstruse case-by-case points, > no? No. Licenses are not a valid argument to me. I'd accept that if we're Debian and pushing 100% of *our* stuff as binary. What we do 90% of the time is distributing text - ebuilds. > Arguing against this is just getting to the point of arguing because > somebody is doing what nobody did for a long time: taking decisions. Yes, and I'm not going to stop you. Frankly, I don't care enough where my tarballs end up. I just was curious about the reasons, as I see no compelling point in *forcing* this. >> If you're reporting a security issue in a ebuild that's no longer in >> tree (in php's case, chances are it got removed b/c of security :p), t= he >> bug wouldn't be investigated, right? >=20 > There are cases and cases there; in the case of _custom_ tarballs, I'd > expect us to investigate if the security issues was found on our versio= n > and not in the upstream-provided one for instance. Take php-5.3.2: I don't care if you found a security issue in my tarball or in php's tarball. I'll have a look to determine if the bug's still in the newest version. If it is, I'll rename the bug. If it is not, it doesn't matter to me. > Once again, please tell me: what does it change to you? If anybody > should complain about this request is Infra. What it changes for me? The target argument of my scp command. Which is so small that I don't care (see above for why I still replied). --------------enig9614854A3ADA742EDA574020 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk04nJAACgkQfNMcoUhJ7GzacQCaA5X53yqa2toKm6AAz2ovXJEb Wi0An3t1AK/pLegysOPapCtjw7zT9XyM =J8ZV -----END PGP SIGNATURE----- --------------enig9614854A3ADA742EDA574020--