[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Content Rating System in Debian



Hello Debian Developers,

Debian provides more than 51000 packages. From those packages, some are appropriate for every ages, and some others are
only for specific age groups for some reasons.

In order to inform to users, especially parents, about potentially objectionable content in Debian packages, Content
Rating System (CRS) can be deployed to Debian. With CRS, users can choose to install packages that is rated for their
age. In some cases, CRS also filter or block certain contents in certain jurisdictions when legally required.

As in Google Play, Debian CRS is based on official ratings from International Age Rating Coalition (IARC).

Pros:
- Users, especially parents, can install packages suitable for their age. In case of parents, this apply to their
sons/daughters.
- For users in some jurisdiction, they can only install packages that is legal in their jurisdiction. For example, Debian
users in USA can only install US version of GnuPG, but in outside USA, users can install international version of GnuPG
instead.

Cons:
- Since there are more than 51000 packages currently in Debian, rating review for those existing packages and new
packages can take long time, depending on complexity of packages that are reviewed.
- Current Debian system need to be overhauled (for example, when creating users with adduser, sysadmins need to input
date of birth of their users) in order to make CRS work in Debian.
- Not all programs/packages is suitable for rating review, especially command-line programs.

If CRS will be implemented in Debian, I proposed following packaging workflow, based on Google Play:
- Maintainers that is about to package a program, will notify to the upstream whether he/she would take a rating
questionnaire or not. If he/she didn't take the questionnaire, the resulting package will be categorized as Unrated.
- The upstream fill rating questionnaire and send it to IARC.
- IARC calculates rating for upstream's program and send rating certificate back to upstream. If upstream don't agree
with rating assigned to the program, he/she can file appeal using link in the certificate email.
- Upstream contact maintainer about rating of the program that he/she get.
- Maintainer then do packaging as usual and add rating for the package, possibly to control file.

Based on above, what are your opinions/thoughts/positions about Content Rating System in Debian?

Regards, Bagas

Reply to: