[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Good communication with upstream is good idea

On Sun, 27 Jul 2008 15:01:46 -0700 Steve Langasek <vorlon@debian.org> wrote:
>On Sun, Jul 27, 2008 at 05:53:28PM -0400, Scott Kitterman wrote:
>> >That requires LP to know who is or isn't a DD.  Currently it has no such
>> >knowledge, and I think it would require a fair amount of discussion to
>> >decide how best to get such information, with a none-too-elegant outcome
>> >(special-casing Debian out of all the projects in the world that 
>> >seeks to interface with), which is why I didn't suggest this.
>> Since Debian is (mostly) upstream for Ubuntu and we already implicitly 
trust code uploaded by 
>> DDs and DMs, Debian is a special case.
>Practically speaking, though, this doesn't require LP to know *who* has
>upload rights in Debian; it only requires trusting the Debian archive key
>used to sign the repo that's being pulled from.

Yes, but that's an implementation detail.  Debian is a special case, so 
special casing is reasonable.  How to accomplsh that special casing is up 
to them.

Scott K

Reply to: