> > Yes, but I do not think we are in good faith satisfying the requirement > > to distribute the source for those binaries by pointing back to koji > > pages and possibly forcing the user to dig into the lookaside cache. The requirement is to provide a written offer to give someone the source when they ask. > Isn't it more that we know how to do it? If someone came to the mailing > list and said "I formally demand, as per GPLvX, that you give me the > source for $Foo" we can quickly comply. We don't want to handle a large > number of requests in that way, but we can do it for the auditors. Right. We could possibly attempt to automate something to generate an easy-to-download list of "possibly-related sources". That could even be self-service with a web thingy you can just hand a Fedora rpm N-V-R. But at any rate, we can automate it enough to make sure that we are not put out by manual work involved in complying with legitimate requests to produce the sources. Thanks, Roland -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
