Re: [gentoo-dev] New copyright policy approved, please weigh your Signed-off-bys

["Michał Górny" <mgorny@gentoo.org>]

Dnia September 16, 2018 8:59:50 AM UTC, Ulrich Mueller <ulm@gentoo.org> napisał(a):
>>>>>> On Sun, 16 Sep 2018, Michał Górny wrote:
>
>> Just FYI: the Trustees have approved GLEP 76 aka our new copyright
>> policy [1].  While the exact implementation details are to be
>determined
>> yet, please note that *Signed-off-by* line will mean you are
>certifying
>> our GCO [2].
>
>> Since some developers were giving the sign-off 'in blanco' so far,
>> I would like to emphasize that now it will actually mean agreeing to
>> the document.  Unless you have read the new policy and agreed with
>it,
>> please don't do that.
>
>I wonder how we should treat those existing Signed-off-by lines in the
>tree.
>
>We could either say that we ignore any such lines on commits before
>2018-09-16 00:00:00 UTC, because there was no policy in place.
>
>Or we could say that they certify the commit under the Linux DCO 1.1
>(https://developercertificate.org/), because in absence of an explicit
>policy that's the only meaningful interpretation of a Signed-off-by
>line.
>
>Presumably, the first alternative is cleaner. Especially, since there
>are commits with a Signed-off-by line that don't comply with the
>conditions of the Linux DCO.

I don't think we really need to be concerned about them right now.

AFAIU the whole signoff business boils down to two things: verifying that contributors understand the terms of contributing, and protecting Gentoo from liability for commits violating those terms.

I think that in this context only the latter point really matters, and I don't think making statement either way right now would change anything if we ever had to exercise it.

>
>Ulrich
>
>> [1]:https://www.gentoo.org/glep/glep-0076.html
>> [2]:https://www.gentoo.org/glep/glep-0076.html#certificate-of-origin


--
Best regards, 
Michał Górny