Mailinglist Archive: opensuse-contrib (79 mails)

[Marcus Meissner <meissner@xxxxxxx>]

> > saigkill is maintainer of the openSUSE:Factory:Contrib project and
> > respectively (as far as I know) all of his packages/submissions should
> > be reviewed. But as long as saigkill is added as maintainer for his
> > package, he can do everything with it directly in
> > openSUSE:Factory:Contrib once it is accepted.
> >
> > Is this really intended?
>
> Yes, this is current approach - changes of packages in Contrib are done by 
> maintainers of those packages without explicit review. It's the same behavior 
> as everyone project in openSUSE BuildService has.
>
> This was discussed several times (for example I prefer reviews for Contrib), 
> but this is a current consensus.

The problem is that a package maintainer can also add new binary packages
to his source files, like say "gcc" or whatever.

So any packager, even with just write permissions to 1 package, can subvert
the whole Contrib build.

Ciao, Marcus
-- 
To unsubscribe, e-mail: opensuse-contrib+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-contrib+help@xxxxxxxxxxxx