From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leo Famulari Subject: Re: FW: [oss-security] accepting new members to (linux-)distros lists Date: Fri, 7 Jul 2017 15:38:10 -0400 Message-ID: <20170707193810.GB26371@jasmine.lan> References: <20170628213609.GA14802@jasmine.lan> <87a84offur.fsf@gnu.org> <87van6g566.fsf@netris.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="mxv5cy4qt+RJ9ypb" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55471) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1dTZ4z-0004qw-Lv for guix-devel@gnu.org; Fri, 07 Jul 2017 15:38:18 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1dTZ4v-00012P-Ni for guix-devel@gnu.org; Fri, 07 Jul 2017 15:38:17 -0400 Content-Disposition: inline In-Reply-To: <87van6g566.fsf@netris.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Mark H Weaver Cc: guix-devel@gnu.org --mxv5cy4qt+RJ9ypb Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Wed, Jul 05, 2017 at 01:33:05PM -0400, Mark H Weaver wrote: > ludo@gnu.org (Ludovic Court=E8s) writes: > > The real question is about our commitment to contribute back. > > Presumably only one or two of us would be on that list, so they would > > largely have that responsibility individually, even if the rest of us > > could of course help out as far as the embargo etc. permits. > > > > Long story short, I would be super happy if you or Mark were on that > > list. > > > > How do you feel about it? >=20 > It might be that joining linux-distros is the right thing to do, but I > don't have the spare capacity to contribute back at this time. Also, I > have mixed feelings about promising to keep security flaws a secret for > however long I'm asked to do so (which apparently exceeded the time > specified in the mailing list rules for Stack Clash). I'm not yet > prepared to make such a promise. I also don't have the time to contribute back to the linux-distros list at the level required in the list membership criteria. The work I do for Guix is my best effort and I think it's understood that, as a volunteer, there will be times when I am unavailable. My job's schedule is irregular and has to take precedence. On the other hand, it seems like the linux-distros mailing list community is trying to formally assign tasks for members to fulfill for the benefit of their community. Currently, I can't commit to doing any task by myself for the entire Linux distro community. Also, I don't think there is anybody on the list who knows me and could vouch for me alone. If there were another Guix member who could split the task, and had someone to vouch for them, that could make it possible. But based on the replies in the last 10 days, it doesn't seem to be the case. --mxv5cy4qt+RJ9ypb Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEsFFZSPHn08G5gDigJkb6MLrKfwgFAllf4yIACgkQJkb6MLrK fwgH3Q/9F3q0BqfYzm1at4u2i6zCfPKux4zl8GLKUTbfAQjPO5NyDZ0CkIwHEP+F 3PBfUsxBPAfYzWz2ev0/XCREMxz08Gri5Ki0QnX9R2lnwUznFbzNDLRpF9gQl2h+ W1AIyj2i71aN9nDmzC+5Y27QCyZKWvRoaF5m5j7QXn7DCB/+7OEDmh8z/IQfdaMH K/a44LfiYk4ZSOAUyobBkTcRFE3hLRhVWC3NHIrQrUj4jM0bDMweWYfaPCjsBTC5 mHgdeh5lUrddd9oUjt2hQtv1WcDDPNPyByZ/wdmFwt4rDKNVURjThw8oIw7iNW+Q thdhOrpajjAxET0IxemxjnaABQXdnRAmHtwTVMfauBvBM0PJsM9D0DHQdu//1Kak g9Ck2+VI01rFXUxFDCGg/toX3Efm5pAknn8iF0dT2v15XfCYkmqxhxltLpSx58TY 2wRz6VU96wubsSwDRwygpXEGJhy96V4haFa/FcFjRPfX1Ugr7N8DJaivGgJuLYvn 1oGxx+/Cj4KdFatCsNhPF++TF0wB6AnwgtcLoeCXM1Sw/VgSkn3LO/AScH+Zx5/v soibYiy7XgU6Lh0ZZX2pbaeee1m3kzedGRpMJKWkLnzUg42WE6EMlyRCr+lfdGcc /VaXLVGTH4CYFu8mCNwWR1Us7i9ht8tdq/D4CrSI8CvXt/erYoM= =vtJu -----END PGP SIGNATURE----- --mxv5cy4qt+RJ9ypb--