From mboxrd@z Thu Jan 1 00:00:00 1970 From: ludo@gnu.org (Ludovic =?utf-8?Q?Court=C3=A8s?=) Subject: Re: FW: [oss-security] accepting new members to (linux-)distros lists Date: Mon, 10 Jul 2017 17:53:24 +0200 Message-ID: <87tw2k1e6j.fsf@gnu.org> References: <20170628213609.GA14802@jasmine.lan> <87a84offur.fsf@gnu.org> <87van6g566.fsf@netris.org> <20170707193810.GB26371@jasmine.lan> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:34484) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dUb07-0002ir-IK for guix-devel@gnu.org; Mon, 10 Jul 2017 11:53:32 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dUb04-0006h6-GM for guix-devel@gnu.org; Mon, 10 Jul 2017 11:53:31 -0400 In-Reply-To: <20170707193810.GB26371@jasmine.lan> (Leo Famulari's message of "Fri, 7 Jul 2017 15:38:10 -0400") List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Leo Famulari Cc: guix-devel@gnu.org Leo Famulari skribis: > On Wed, Jul 05, 2017 at 01:33:05PM -0400, Mark H Weaver wrote: >> ludo@gnu.org (Ludovic Court=C3=A8s) writes: >> > The real question is about our commitment to contribute back. >> > Presumably only one or two of us would be on that list, so they would >> > largely have that responsibility individually, even if the rest of us >> > could of course help out as far as the embargo etc. permits. >> > >> > Long story short, I would be super happy if you or Mark were on that >> > list. >> > >> > How do you feel about it? >>=20 >> It might be that joining linux-distros is the right thing to do, but I >> don't have the spare capacity to contribute back at this time. Also, I >> have mixed feelings about promising to keep security flaws a secret for >> however long I'm asked to do so (which apparently exceeded the time >> specified in the mailing list rules for Stack Clash). I'm not yet >> prepared to make such a promise. > > I also don't have the time to contribute back to the linux-distros list > at the level required in the list membership criteria. > > The work I do for Guix is my best effort and I think it's understood > that, as a volunteer, there will be times when I am unavailable. My > job's schedule is irregular and has to take precedence. > > On the other hand, it seems like the linux-distros mailing list > community is trying to formally assign tasks for members to fulfill for > the benefit of their community. > > Currently, I can't commit to doing any task by myself for the entire > Linux distro community. Also, I don't think there is anybody on the list > who knows me and could vouch for me alone. > > If there were another Guix member who could split the task, and had > someone to vouch for them, that could make it possible. But based on the > replies in the last 10 days, it doesn't seem to be the case. There=E2=80=99s a handful of Guix contributors who=E2=80=99ve been active o= n security fixes, so it would be great if one of them could team up with you! Ludo=E2=80=99.