Jim Walker wrote:
> John Sonnenschein wrote:
>> It's one thing if someone makes a mistake and accidentally breaks things,
>> even security things, it's another thing if we institutionalize and automate
>> the ability to upload malware. Even debian/unstable hasn't done that. Do we
>> /really/ want to be the first to have viruses in our blessed repos?
> 
> We can update the language relative to source code, but it's a big jump to
> imply we are opening the doors to malware.
> 
> All the packages going into /contrib and /pending go through review by
> the community, which on it's own, provides a big filter.

I tend to agree, especially since the Website Terms of Use specifically 
forbid anything.  Anytime you provide a place to submit materials, 
whether it's an ftp directory, an attachment to a bugzilla entry, or 
yes, even a package repository -- you could potentially be distributing 
bad material.

I really wouldn't worry about this too much as the review process should 
weed this out.

-- 
Shawn Walker
_______________________________________________
indiana-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/indiana-discuss

Reply via email to