Groups > linux.debian.bugs.dist > #914337

Bug#907051: Say much more about vendoring of libraries

From	Sean Whitton <spwhitton@spwhitton.name>
Newsgroups	linux.debian.bugs.dist, linux.debian.devel, linux.debian.policy
Subject	Bug#907051: Say much more about vendoring of libraries
Date	2018-08-23 15:20 +0200
Message-ID	<wpXGN-4xI-5@gated-at.bofh.it> (permalink)
References	<wpV2h-2VP-7@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 3 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Package: debian-policy
Version: 4.2.0.1

Hello,

On Thu 23 Aug 2018 at 12:27PM +0200, Alec Leamas wrote:

> https://fedoraproject.org/wiki/Packaging:Guidelines#Bundling_and_Duplication_of_system_libraries

Thank you for sharing this link -- it seems like Fedora have thought
harder about this than we have, at least at the level of the whole
project.

We can't jump straight to something as involved in that, but threads
like this on -devel suggest to me that Policy's discussing of vendoring
needs to be expanded.

In particular, Policy should explain /why/ bundling is best avoided, and
the consensus that it sometimes has to happen should be noted, along
with mention of registering bundled copies with the security team where
appropriate.

-- 
Sean Whitton

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#907051: Say much more about vendoring of libraries Sean Whitton <spwhitton@spwhitton.name> - 2018-08-23 15:20 +0200
  Bug#907051: Say much more about vendoring of libraries Arnaud Rebillout <arnaud.rebillout@collabora.com> - 2018-08-24 04:20 +0200
    Bug#907051: Say much more about vendoring of libraries Jonathan Nieder <jrnieder@gmail.com> - 2018-08-24 04:30 +0200
  Bug#907051: Say much more about vendoring of libraries Jonathan Nieder <jrnieder@gmail.com> - 2018-08-24 04:30 +0200

csiph-web