[opensuse-project] RFC: Linking oBS home directories on the wiki
There was recent discussion on forums ( http://tinyurl.com/yfg5zxw ) about one particular case of user broumbroum23 (oBS home http://tinyurl.com/yb3ty37 ) and complain that wifi drivers listed on http://en.opensuse.org/HCL/Network_Adapters_(Wireless) don't work. I semi protected http://en.opensuse.org/HCL/Network_Adapters_(Wireless) to prevent further escalation of edit war, until we can discuss the case and find solution. Links that are disputed are in section ===Getting the latest Linux wireless subsystem=== that is now commented out to prevent random visitors to use them, so you can see them in a source text. Problem is that we need policy on public linking of files in user homes. Now there is only recommendation, not much advertised, not to follow links to oBS home directories, but there is nothing about publishing such files on openSUSE wiki servers. As mentioned in a forum thread, I will vote to explicitly ban links to oBS home. The only exception are files used to test bug fixes and even then only on pages that are used by people that are actually testing solutions, not on random wiki pages, where from page title is clear that is not meant for everyone. The main reason for ban is to prevent users that are not aware of nature of oBS home to damage their systems by installing files that didn't pass any quality control. -- Regards Rajko, -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
Rajko M. wrote:
The main reason for ban is to prevent users that are not aware of nature of oBS home to damage their systems by installing files that didn't pass any quality control.
There's no control in other projects either. A home project with a dedicated purpose for a few packages is likely less dangerous for system integrity than a devel project with hundreds of unrelated packages and dozens of "maintainers" that don't care. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
On Thursday 08 April 2010 01:12:37 Ludwig Nussel wrote:
Rajko M. wrote:
The main reason for ban is to prevent users that are not aware of nature of oBS home to damage their systems by installing files that didn't pass any quality control.
There's no control in other projects either. A home project with a dedicated purpose for a few packages is likely less dangerous for system integrity than a devel project with hundreds of unrelated packages and dozens of "maintainers" that don't care.
It is when packager and/or maintainer is good, but there is a lot that no one knows how good they are. There is no rating system, even the most primitive that will assign 1 to 5 stars to repo, or package.
cu Ludwig
-- Regards Rajko, -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
On Wed, 7 Apr 2010 19:23:03 -0500 "Rajko M." <rmatov101@charter.net> wrote:
There was recent discussion on forums ( http://tinyurl.com/yfg5zxw ) about one particular case of user broumbroum23 (oBS home http://tinyurl.com/yb3ty37 ) and complain that wifi drivers listed on http://en.opensuse.org/HCL/Network_Adapters_(Wireless) don't work.
I semi protected http://en.opensuse.org/HCL/Network_Adapters_(Wireless) to prevent further escalation of edit war, until we can discuss the case and find solution. Links that are disputed are in section ===Getting the latest Linux wireless subsystem=== that is now commented out to prevent random visitors to use them, so you can see them in a source text.
Problem is that we need policy on public linking of files in user homes. Now there is only recommendation, not much advertised, not to follow links to oBS home directories, but there is nothing about publishing such files on openSUSE wiki servers.
As mentioned in a forum thread, I will vote to explicitly ban links to oBS home. The only exception are files used to test bug fixes and even then only on pages that are used by people that are actually testing solutions, not on random wiki pages, where from page title is clear that is not meant for everyone.
The main reason for ban is to prevent users that are not aware of nature of oBS home to damage their systems by installing files that didn't pass any quality control.
Hi I have an entry in the TV HCL (Sabrent USB device) linking to the OBS search feature rather than the kernel module I patched/built in my home repository(s). So I need to remove this under your proposal? -- Cheers Malcolm °¿° (Linux Counter #276890) SUSE Linux Enterprise Desktop 11 (x86_64) Kernel 2.6.27.45-0.1-default up 10 days 20:35, 3 users, load average: 0.04, 0.09, 0.04 GPU GeForce 8600 GTS Silent - CUDA Driver Version: 190.53 -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
On Thursday 08 April 2010 14:10:38 Malcolm wrote:
Hi I have an entry in the TV HCL (Sabrent USB device) linking to the OBS search feature rather than the kernel module I patched/built in my home repository(s). So I need to remove this under your proposal?
Not sure that something linked via search is the same case as fixed link to certain package. Probably better option will be to judge on case by case basis except those packages that are published for test purposes. I'm not using build service to create packages, so there is many details that I don't know, but I know that in his home user can change package to test something, delete it, repackage software in any possible way under the same name, so there is no guarantee that it will work, or it will install just what the name on the package tells. For good maintained packages it can make no difference where they are, but in general homes are playground and in general we should not link to them without very clear explicit warning. When package goes to some of repos outside the home directory then at least what is published will not be broken without that repo maintainer knowledge, and most likely will be updated when dependencies change. It can become obsolete, and one day stop compiling, but repo maintainer can see that and take action. -- Regards Rajko, -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
Rajko M. wrote:
I'm not using build service to create packages, so there is many details that I don't know, but I know that in his home user can change package to test something, delete it, repackage software in any possible way under the same name, so there is no guarantee that it will work, or it will install just what the name on the package tells. For good maintained packages it can make no difference where they are, but in general homes are playground and in general we should not link to them without very clear explicit warning.
In general the same applies to any other project really. You can't tell how well a project is maintained by looking at the project name. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg) -- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
Am Montag 12 April 2010 09:07:08 schrieb Ludwig Nussel:
Rajko M. wrote:
I'm not using build service to create packages, so there is many details that I don't know, but I know that in his home user can change package to test something, delete it, repackage software in any possible way under the same name, so there is no guarantee that it will work, or it will install just what the name on the package tells. For good maintained packages it can make no difference where they are, but in general homes are playground and in general we should not link to them without very clear explicit warning.
In general the same applies to any other project really. You can't tell how well a project is maintained by looking at the project name. I agree. And I also agree that this is a problem. Currently one can only judge on a repo if she knows the people working on it, maybe check when the last changes happened and try it in an uncritical environment. All that is not reliable is and good for a general recommendation of how to link or not link. We would need other criteria which aren't easy to define.
I guess finally every user (unfortunately) is with himself. He can follow a recommonendation on a website (nothing else is a link) or don't do it, depending on how much the website is trusted. And at this point we are not longer guilty, because we cant control all websites which could potentially link. A rating (in which way ever it might be done) would only be another hint. regards, Klaas
-- To unsubscribe, e-mail: opensuse-project+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-project+help@opensuse.org
participants (4)
-
Klaas Freitag -
Ludwig Nussel -
Malcolm -
Rajko M.