The real issue is not orphaning itself but the possibility to take the package right away and get full access access for any package in the distribution. On Thu, Mar 18, 2021 at 2:46 PM Kalev Lember <kalevlember@xxxxxxxxx> wrote: > > On 3/18/21 11:29, Pavel Zhukov wrote: > > Even worse. Every packager (not a member of package) is able to orphan > > *any* package and drop the main admin there. Just verified it. > > I went ahead and filed this as > https://pagure.io/fedora-infrastructure/issue/9745 > > -- > Kalev > _______________________________________________ > devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure -- Pavel Zhukov Software Engineer IRC: landgraf _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure