From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id BC0C5138334 for ; Tue, 6 Nov 2018 09:16:35 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id B7BDFE0BA1; Tue, 6 Nov 2018 09:16:34 +0000 (UTC) Received: from smtp.gentoo.org (dev.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 6B292E0B4C for ; Tue, 6 Nov 2018 09:16:34 +0000 (UTC) Received: from nemesis.wraeth.lan (unknown [103.6.190.143]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: wraeth) by smtp.gentoo.org (Postfix) with ESMTPSA id 2EAC6335C03 for ; Tue, 6 Nov 2018 09:16:31 +0000 (UTC) From: "Sam Jorna (wraeth)" Subject: [gentoo-project] How do you feel about non-contributing developers with commit access? To: gentoo-project@lists.gentoo.org References: <1541171135.899.23.camel@gentoo.org> <5eb0ec2e-0a19-c7e5-83c6-b630e5116a0b@gentoo.org> Openpgp: preference=signencrypt Autocrypt: addr=wraeth@gentoo.org; keydata= xsFNBFaxV2cBEACy/orl/u/Kcr0eWqED1pe1hDIhGRKeW6COVDdZH2DUyTqUC1tpSMU5gSmE 182kXo8cfCQtvkga4zMho8oO49C673WibSelr4gz/dFlJ3GdshqKpfbeeIVBPFSLnR78MckG oYtathjBVWE9svtMbenI/ofsZ3zdx2OluFG4ZvrTwMQ2lxBWzwJTSrC4AHu6+kJYg5NO55jN hU3/Pr15MMNfw8LmsZZ/owrdFlj+VUivB89sPssh6yyXp9N958w38aV0dsVIVE5EaqIe2EKy 7TViDFYolIHIDQAABh3DurYuK1bDKYEDC9DBjmGnZ57HixZpHORSXrNqz+80LnKPRaektjh+ +q3X1GjVS9mBvAgR2OP/DiNUpSz7phW1Hoq3xyHOwrsXx2xH+ulKDjs1fYmgYc9PRMK0sT5H uXex8dQobmMVidzPf0oHG+qMU/qhByI7vR8fS06QpiUJDwcif6SGq54y0j9S8vV99lSFqSwB L/t7Bkb1cjguXy77oFnklvt7Gc5jjNgmDp9oIG7fvpyebo+oEt5FZ3pW8A/c+2K8lB4Lnkd8 +NAul2qPY/uF9Q0Q69531xPGuK1/QONDGI7q82fvMjm9SPLELRdFQnv0q9ggWlHXBdFkkePK kiBkSYUlSWE/TQX815ofgXGQwv5NnK8MU/S6uMNAsKhVbZcTUQARAQABzR9TYW0gSm9ybmEg PHdyYWV0aEB3cmFldGguaWQuYXU+wsGABBMBCAAqAhsBBQkFj9QABQsJCAcDBRUKCQgLBRYD AgEAAh4BAheABQJWuRVRAhkBAAoJEMB9mO7WGAwmPJIQAJaesb+tzaRNWQrGKBdQyFhe/cS1 6d8eXTEo4Wc9FFQxFQVDXVWMG7AT6Tc0MUL/j3PML2LCuPSfehLCbY9hFZkEMUX4V4HT8USY dqzrhKjxmyjui8FVpl6ouunXTU9U7wVFSJd/OBmm1L/ioggUhiqHyUnNAeuyU0horXi4hmgs CU+nCXLKROa8cb7rPasvBfUfdJEnG6EJt3NGftEkovZvm6epOp5ud41sIqHUPH5e9UetkFwo DjLe4nxait4+8Qc67pa0c0EjsCgzE4ZbtylMMaphMjn1OnYF9lmo6s/tpxGXFtkdv3jPEdKS He7QS7KuJ6zzGTh0dhZZsrvjfTPtmagOhAhqTptAnSLNJ41ozWLC/fzVDuIdAjSS/KRm+/bU ArkhtqkEAd+6PDwnS733lW0W6noD+qWu5pHrRbc9bYiYzNWwv424JY3d8U+knT20AzVY3SjK 7duIq9/zmS59Ll6w4vQMe644qDMAP28CI67bL4YH2pQrgKBnKDLfGctmoHZI0fv1bTwCxJmj N/FbnsB63bRdjQgo8CCND7tn2VVYJTdVBH1tGYUW4cXB7sFlzIbvzzhyV0OFNqyXneOGFV7p 0lzesT2CcFK+A68jhQjqSP2/CDXkFDhnNtpoB6EDmZCEbqK1ExwvYU3vYx85N02s/mJMvpUK zMCHEh16zsFNBFaxWqIBEADBYi7ESo219zjsZEcLbGCtBuNClk9RuDsN0gXAayRCVLNTJ28v Thb1Bqf3YkEynxXSSfpu29brSSo5lj8kjR0KQh+5B4jZEQk2Jp9ra75edtzPl9bquZ5c0DUM V3M5SROgwOw57mzm9vhbIJnFFH2keFzyHuX2gzUZwKfa2uuHhuNxeOJM7ftlDQtXORhrA0FQ S+PBRdVg5WC0/FOD/S9yxHTE60qFSg/O15OKvjNkWbrs80OTsgNs3m5mnBq4T8FXOIIlyNo7 WJ9NUNWuCBcQjG6NRcN0/K+v2r/jFKwXp02D4K7s5YKRh5jraaWXwKq9XXdS90QABD37PWOl FxbFhEUDhCdO5bWy0r8GG6Hdvo71tHB9XdEfprKyB7IJYdSPIQBy0qv+3aB0YPQHG8qS0kH3 FDRUfe/d03oP1DX+JORp/2EfrW+e+4voE0Q7Nkmn7rplFeYM5EFRWJJlgj+QsPPG4/ERuO5e fsuaga6cIMLk1UUdNaFPF2RYPffBCY2ZbDZ+giarJaFC9jrWIlwRhB6zBLYirbgEkZfFaa8T TJiFZds0igW5ohjAs9mM6c0lzaphUMgtvd9XPi5Ev09AS8NlLuXHO4tm/9A/bqF7PuWlG3xv YPNmlCA9v1gouLSyHc3rlL4F1MaSuT6U0Pbfv1IMRW64Oei2bM3RKknMCwARAQABwsFlBBgB CAAPBQJWsVqiAhsMBQkFo5qAAAoJEMB9mO7WGAwmGJkP/jGUsXLC3Gkz3aqw5Qy8ut8g2msH 8hxAV7OriYsh//0iuVpWwLfSj2RANLrv0Jd7ZZGouXve5ro3rlzCjmmAY+kwmtAtnmd3bwsl cCn06FZ+dTNzxj40MJI/bJuFqrS7/oBGeUXBTC/u/jnBXy7W6QaaccV9fcJ2Ozi6EI7QFwSG 4i+SPaKjjs9cBaupkWanyPA9x0cZkqoNZxXNqzVKe9KsVa4pRBrn9d7RvajE3QGxeOIU4ShL 9Xt/AFAIP3OviAT21TWuks0Ez9GnFCrvDjwCCCGiPbsjwdMsHL+E0FWRUR/H7nTGxCxH6Pxi wyEvTIWNvcdSeEZBFwb6r/l8Mz3T6uhGuNoJMQFjv3kiBWYfhj4e94bLo6GjDn7v/pWVRqdG P+3pdzve4NKPwlihI7zzTb9fipDYrGB7RiubgrBE9PxY1gcqqMwYtCeXEpDSJujriE4cfUQD HvfhUcQto58WQl+M3CvC6BOvwcSM7HDohSPFwLLAHlp0tBG4jT6P/9l2u6+0oJwEiGzBespk zXzt+ZLCVxXGDYI0KdlvGH0dQkvddyEzPCq1xKSqszp4UJcQ70/Pu9TMb7VqFZ4DjWQzqPzg g5jb0lN3ZN3QMqmWvjthm+S2VKRlhPwpK6EtGYdJDVBCvhfsG1sI4ciN6/nltFwB7MDOSRZy IvfQ2aid Message-ID: Date: Tue, 6 Nov 2018 20:15:40 +1100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.2.1 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="VByU88KSdZFwWZs6w2QSzbwKXGbSvejEm" X-Archives-Salt: bbdb9d48-5e6f-409b-8f4d-9a2d808992f3 X-Archives-Hash: 389e9f01c09a14a9803a3fe14efa884e This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --VByU88KSdZFwWZs6w2QSzbwKXGbSvejEm Content-Type: multipart/mixed; boundary="Ui5RJLVt0FjYKcWa847CunGGggk5BmrjJ"; protected-headers="v1" From: "Sam Jorna (wraeth)" To: gentoo-project@lists.gentoo.org Message-ID: Subject: [gentoo-project] How do you feel about non-contributing developers with commit access? References: <1541171135.899.23.camel@gentoo.org> <5eb0ec2e-0a19-c7e5-83c6-b630e5116a0b@gentoo.org> In-Reply-To: --Ui5RJLVt0FjYKcWa847CunGGggk5BmrjJ Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable On 6/11/18 4:12 pm, Raymond Jennings wrote: > From what I know, the undertakers project already has procedures in > place for determining if a developer is inactive before they are > retired, and I think the same procedures would apply just as easily I'm not quite sure what you mean here, and it's kind of the crux of the question as I understand it - should $developer who appears inactive based on $policy be forcibly retired. I'm suggesting $policy cater for low commit frequency with no outstanding issues so long as they're available (or reasonably devaway) and not detrimental to the distro. > At the very least, once someone has passed muster with recruiters and > whatnot they shouldn't have to do a heap of paperwork just to get back > in. Maybe email once every few months to see if they're still > responsive, and a quick check to make sure their SSH/GPG keys are > still > valid and that there are no technical issues, but I oppose any changes > in one's status as a developer just on inactivity alone. I think this is also touching on another issue - re-recruitment of previous developers. I agree with making sure things like keys are up-to-date and there aren't any outstanding technical, maintenance, or security issues, though. > If someone has proven they can contribute and be trusted they > shouldn't be removed in my opinion. As long as they aren't slacking > off or sabotaging the distro. Going AWOL /with/ outstanding work on > your desk, such as open bugs against packages you maintain? That is > more serious and should probably warrant attention from the > undertakers. But just going quiet period? Not so much since their > absence isn't hurting Gentoo. The question is: is their retention of > access causing harm to gentoo or obstructing development? I don't think it's a question of obstructing development but of ensuring there aren't any holes in security, such as retaining access for someone that no-one's heard from and, as such, could have had anything happen, including having passwords or keys stolen. I do think that gauging the difference between inactive and infrequent is difficult, and don't really have any constructive suggestions on that point as yet. --=20 Sam Jorna (wraeth) GPG ID: 0xD6180C26 --Ui5RJLVt0FjYKcWa847CunGGggk5BmrjJ-- --VByU88KSdZFwWZs6w2QSzbwKXGbSvejEm Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkOOCivPPbnU/QAv/9azmicmnVzwFAlvhW9oACgkQ9azmicmn VzxcjxAAqwRpouwpcyMjUHHmyx/jxWK2303EKHVMxiRUUaJD3TyKXynCtDadTMqY jvaHqfKo1w2vLkbgxh5/Xn7pOxuQCOVTGySSmtcuP4SAS6cVxLvH+/SHmnPwyoFa WdqGCJW++UWKfolgokvPOZiAkOhyEuPt62De0o8fiYRDJW0CBMdxIr6pCbHaS/ak WGpoNqHv15ASMkNTVnByeuGC6zQBoh3RxHh4sEaCk2sf4omYfCmPMgWB3vLUnf31 zMye07ZmSpX1btxbfDLVpGrIUeccHMtBLHzaa5P4XWOGnemQ7S6WTGnJmt5Ov+Co QXrIH2ntRAWIcBXTwDXoQbQHVUrVmDGscPbC8QJGwiJGP/0YPrBPxrU1Nw8T46kP VcAXIFIKl3bZv6nDx3JbnpQ2ciy86qKW7UgFveaecid8GqGOjpBZgLbzSg+lVf6a X0QikfVcFhZduMDtjDoDTslYaK/h9NN86iJwLvLueJvTfa/m1gimL1HlxzMx9vHs 0P8Om4ni0H9KFu2XP49zC1QcSCru8AqNz0fmlxGltHLT9XcI2R2zJm6qKvLu0IZp zR3qx+YydCPs+Dj7OcaUKxssTUuo2ljhBkgiWnmDUKqH6GGdByCNSXJaObl0z6mU cb62UL8evPWJL+YYvp61slqdsnlrl99WYBrf13jm6EF2gD/tqEo= =ZIpn -----END PGP SIGNATURE----- --VByU88KSdZFwWZs6w2QSzbwKXGbSvejEm--