On Wed, Mar 23, 2022 at 10:34:00PM +0000, Dave Howorth wrote: > FWIW, I think Greg was a bit too outspoken calling long maintenance > attempts 'crazy'; that may have intimidated some. I'm thinking of > moving distro to one that provides longer term maintenance than my > present one. Although CIP is a completely different ball game; I hope > they succeed. It is not "crazy" it is "well documented". As someone who has been doing this work for 20+ years now and sees all of the stable kernel patches flow by, it's obvious that a distro that does not keep up with them is insecure by design. To not think otherwise is crazy and negligent. I'm serious, and have the numbers and research to back it up. I would love for someone to be able to prove me wrong as I wish this wasn't the case. So please push back on any distro that goes outside of the kernel.org support window with requests and contract assurances on how they can ensure that they keep up with all of the needed security fixes over time. If you are paying for this, you deserve that information. If you are not paying for it, you get what you pay for :( Sorry this is getting off-topic here for systemd-devel, but it's something that I have been trying to get across to the Linux community for a very long time now. thanks, greg k-h