Jesse Keating wrote:
On Fri, 2008-12-12 at 08:54 -0900, Jeff Spaleta wrote:
I'm also concerned that the conversation is wandering too far away
into the weeds from the problem at hand. A security tagged update was
pushed directly to stable in error. Very little of the discussion I'm
seeing here would have prevented the scenario that happened with dbus
this week.
It's nice to discuss the larger issues, but if the ideas being put
forward consistently have an escape hatch which lets security tagged
packages directly into stable.... we haven't reduced the risk of what
has happened this week from happening again.
It falls down to maintainer education.
No way to enforce a '4-eyes' rule for expedited pushes?
--
Les Mikesell
lesmikesell@xxxxxxxxx
--
fedora-devel-list mailing list
fedora-devel-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-devel-list
