[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bits from the ftpmasters



Joel Aelwyn <fenton@debian.org> writes:

> On Sun, Feb 20, 2005 at 09:06:36PM +0100, Goswin von Brederlow wrote:
>> - uploads to NEW need an advocate in addition to the normal signature
>>...
> Hmmm. Seems like it could work, but might still have the issue that finding
> two maintainers who think something is good is not vastly more difficult
> than finding one; also, many packages are already co-maintained, would you
> allow co-maints to both sign it? I believe it *is* possible to get multiple
> signatures with GnuPG (the same way you can encrypt something to multiple
> keys), but I'd have to go dig through the docs to figure out how to do it.

When talking about a more automated NEW queue people said that
ftp-master checks package names and splits for sensibility and rejects
quite a few of those because they are silly. Having 2 people think
about it should reduce that somewhat (not as much as a NEW team though).

It's a simple 4 eyes see more than 2 solution. So co-maintained both
signig should be ok, it's still 4 eyes, 2 brains, half an IQ :)

>> - a NEW team
>>... 
>...
> 3) Doesn't (as far as I can see offhand) require access to sensitive
> accounts, key signatures, or software. Thus, someone who processes NEW as
> a "generate recommendations for ftpmaster" can do the job without needing
> much, if any, in the way of privileged access (possibly some issues with
> crypto, but those should be easily resolveable).

You need access to the NEW queue. But if I'm not misinformed any DD
can get to the mirror on merkel?

If not, an inofficial NEW queue could be setup by someone, uploads to
there could be judged and then put into the real queue with a
recommendation mail. Whether or not ftp-master would find that usefull
or not is another question (and they have to answere that).

>...
>
> Not that I expect, given how this and past conversations have gone, that
> they'd particularly want to deal with me, but if a NEW processing group is
> considered worthwhile, consider me volunteered to put in the time. Maybe
> the work is suitable revenge for having to read or delete so many of my
> emails.

Maybe you could make contact with ftp-master and ask their opinion. I
doubt they would want a non DD running the show.

MfG
        Goswin



Reply to: