Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.project > #13001

Re: Evolving away from source package realms

Show all headers | View raw

On Sun, Oct 16, 2022 at 01:06:23PM +0900, Charles Plessy wrote:
> Le Wed, Oct 12, 2022 at 12:14:35AM +0000, Scott Kitterman a écrit :
> > 
> > What fraction of security issues we've had in Debian do you think
> > narrower upload permissions would have prevented?
> 
> Exactly zero.  But my comment is not about the past, it is about the
> future.
> 
> I think that a proper risk assessment would be worth doing, an I also
> think that this mailing list is not a proper place for doing it, not
> because of secrecy but because of noise and lack of focus.  Discussing
> the conclusions here would of course be important.
> 
> On my side, I would be fine if my upload key would be restricted to the
> packages that me and my packaging team maintain.  I am very unlikely to
> need archive-wide privileges in the near future.

Being a frequent participant of a Bug Squashing Party and also general active
on sponsoring, restriction to upload privilieges will likely impair my ability to
contribute to Debian in this areas.

-- 
tobi

Back to linux.debian.project | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Evolving away from source package realms Didier Raboud <odyx@debian.org> - 2022-10-07 15:40 +0200
  Re: Evolving away from source package realms Charles Plessy <plessy@debian.org> - 2022-10-12 02:00 +0200
    Re: Evolving away from source package realms Scott Kitterman <debian@kitterman.com> - 2022-10-12 02:40 +0200
      Re: Evolving away from source package realms Charles Plessy <plessy@debian.org> - 2022-10-16 06:40 +0200
        Re: Evolving away from source package realms Tobias Frost <tobi@debian.org> - 2022-10-16 11:30 +0200
        Re: Evolving away from source package realms Nilesh Patra <nilesh@debian.org> - 2022-10-16 11:50 +0200
          Re: Evolving away from source package realms Charles Plessy <plessy@debian.org> - 2022-10-18 00:20 +0200
            Re: Evolving away from source package realms Thomas Goirand <zigo@debian.org> - 2022-10-18 13:10 +0200
              Re: Evolving away from source package realms Russ Allbery <rra@debian.org> - 2022-10-18 16:30 +0200
                Re: Evolving away from source package realms Thomas Goirand <zigo@debian.org> - 2022-10-19 17:50 +0200
                Re: Evolving away from source package realms Bastian Blank <waldi@debian.org> - 2022-10-19 20:50 +0200
              Re: Evolving away from source package realms "M. Zhou" <lumin@debian.org> - 2022-10-18 17:30 +0200
  Re: Evolving away from source package realms Pierre-Elliott Bécue <peb@debian.org> - 2022-10-12 09:40 +0200
    Re: Evolving away from source package realms Russ Allbery <rra@debian.org> - 2022-10-13 01:30 +0200
      Re: Evolving away from source package realms Tobias Frost <tobi@debian.org> - 2022-10-13 07:20 +0200
        Re: Evolving away from source package realms Russ Allbery <rra@debian.org> - 2022-10-13 09:20 +0200
          Re: Evolving away from source package realms Tobias Frost <tobi@debian.org> - 2022-10-13 14:50 +0200
        Bug#1021714: lists.debian.org: Request for new mailing list: collab-maint (was: Evolving away from source package realms) Santiago Ruano Rincón <santiagorr@riseup.net> - 2022-10-13 14:30 +0200
          Bug#1021714: lists.debian.org: Request for new mailing list: collab-maint (was: Evolving away from source package realms) Andreas Metzler <ametzler@bebt.de> - 2022-10-16 18:40 +0200
      Re: Evolving away from source package realms "M. Zhou" <lumin@debian.org> - 2022-10-18 04:40 +0200
    Re: Evolving away from source package realms Thomas Goirand <zigo@debian.org> - 2022-10-13 09:20 +0200
  Re: Evolving away from source package realms Nilesh Patra <nilesh@debian.org> - 2022-10-12 10:20 +0200
  Re: Evolving away from source package realms Johannes Schauer Marin Rodrigues <josch@debian.org> - 2022-10-12 11:00 +0200
    Re: Evolving away from source package realms Timo Röhling <roehling@debian.org> - 2022-10-19 20:00 +0200
  Re: Evolving away from source package realms Didier Raboud <odyx@debian.org> - 2022-10-23 16:50 +0200
    Re: Evolving away from source package realms Raphael Hertzog <hertzog@debian.org> - 2023-01-19 10:40 +0100

csiph-web