On Fri, 26 Feb 2010, Adam Williamson wrote: > On Sat, 2010-02-27 at 06:03 +0100, Ralf Corsepius wrote: > >> 2) Recent dnssec-conf updates all did receive several -1, nevertheless >> these updates were pushed. > > This is indeed a problem. Obviously, relying on the judgment of > maintainers isn't working. The karma arrived before it as pushed? I don't think it did. The 1.21-8 release fixed the 1.21-7 release of also checking the "very old" config file location. There were some bug reports for dnssec-conf that dated back to earlier versions and are still present, but this emergency update was not to fix those and -1 on those features would not cause it to remain blocked or unpushed, especially in the light of older versions DOS'ing a bunch of name servers due to a bad trust anchor in combination with a bind bug. In fact, dnssec-conf is now being phased out, but this is pending one more dependancy fix for unbound, which is caught in the new DSO linking behaviour and needs fixing. Paul -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel