On Tuesday, October 22, 2002, at 01:13 PM, Olivier Thauvin wrote:

No way. If we start doing it for this one just as a "why not" then
there is a future expectation to do it all the time. Policy is no
updates for contribs, and that means *nothing*.

Besides, how difficult is it to grab the mhonarc srpm and rebuild it on
whatever platform you want? Probably not too hard...

And if contributer maintain their update's tree for contrib (only for big fix
or security fix) ?
something like club... but only for contributor. Mandrake won't maintain
contrib, but a mandrake with security hole is not a good marketing things.
I don't understand what you're saying. If you want to build contrib packages and put them into Club, that's fine. Get someone to put it in unsupported... that's fine too. My point is, contribs is unsupported. Plain and simple. We have never claimed we are supporting contribs. Ever.

To expect us to put contribs into updates takes away the distinction between main and contribs. Only main is supported. Only main packages will ever be in updates. That's just the way it is.

The "Mandrake with security holes" statement is ridiculous. contribs is just as much a part of Mandrake as is downloading something from the net and building it yourself. Are we expected to provide updates for everything you might possibly download? Mandrake is *main*... Mandrake is not contribs. To say that Mandrake has security holes because contribs is unsupported is silly.

Remeber lot of security tools are in contrib (spamassassin, nessus, ettercap,
tripwire... ).
Sure. And if we wanted to support these, they would be in main. Just because there is a security tool in contribs doesn't mean anything. Just because it's a security tool, doesn't mean it needs to be supported. Sure, I'd like to support everything, but that doesn't mean it's possible. Clone me a few times and have me working day and night and you might get it. Or throw everything from contribs into main and get rid of contribs altogether. Then you'll have your supported apps.

Until then, contribs is made by contributors. If contributors want to make updated packages, that's fine. They can go into Club or somewhere else.

This is not something I am interested in doing, much less debating. It is not going to happen, so trying to convince me otherwise is merely wasting your time. I am far too busy maintaining main to start jumping through hoops to support something that is clearly *un*supported.

--
MandrakeSoft Security; http://www.mandrakesecure.net/
"lynx - source http://linsec.ca/vdanen.asc | gpg --import"
{FE6F2AFD: 88D8 0D23 8D4B 3407 5BD7 66F9 2043 D0E5 FE6F 2AFD}


Attachment: PGP.sig
Description: PGP signature

Reply via email to