Re: It's all about trust
On Mon, 27 Oct 2008, Lucas Nussbaum wrote:
> > - this process might be too heavy with fine-grained privileges as it would
> > require the intervention of many DD each time we have to grant a right
> > (when trusting the decision of 2 members with special rights would be enough).
>
> That's why I don't think that it's a good idea to play with a lot of
> different privileges. Privileges should be granted when they are
> necessary to do something, and if you are a DD, you should be able to
> easily get any privilege you need to do your work. You are already
> trustworthy, so there's no need to double-check everything you do.
If I advocate someone based on some perl modules, I trust him to handle
any perl modules reasonnably well but I certainly don't trust him to
package a new library. I do trust some people to refrain from doing stupid
things with their DD powers but that kind of trust comes with much more
time and interaction. It's not the kind of trust that I would give to
anyone that has only proven that he's able to package perl modules. And
yet we want to give that contributor some immediate reward for his work.
Am I missing something here ?
Cheers,
--
Raphaël Hertzog
Le best-seller français mis à jour pour Debian Etch :
http://www.ouaza.com/livre/admin-debian/
Reply to: