On 04/27/2018 02:56 PM, David Benoit wrote: > Hi all, > > Regarding the inclusion of the fedora-workstation-repositories package in > F28, is there currently a policy in place against including it as a > dependency? From what I understand from the recent fedora magazine article > <https://fedoramagazine.org/third-party-repositories-fedora/> and the policy > wiki page > <https://fedoraproject.org/wiki/Workstation/Third_party_software_policies?rd=Workstation/Third_party_software_proposal>, > the purpose of distributing the third-party repositories an rpm is to > ensure that a user must enable them explicitly. > > > Is there some some preventative measure in place to protect users from the > package being pulled in silently as a dependency? I don't understand why someone would add such a dep... but even if they did, the repos would not be enabled when installed. They are disabled in the rpm. The user must explicitly enable them. > If repository-enabling > rpms are to become acceptable cases for package submissions, what > considerations are being taken to ensure such submissions are tracked and > handled similarly? Well, depending on what they are they would need to pass Legal and FESCo approval which would be via ticketing, etc. Open to better ways to word that policy page for them... kevin
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
