Alan Coopersmith wrote:
> Of course, Sun employees have to go through a bunch of additional processes
> for Solaris integration that don't necessarily apply to OpenSolaris:
>
> - Legal review - though as long as Sun hosts OpenSolaris.org, it requires
> legal review for anything posted on the site it owns/operates. This
> only applies to sources brought in from outside projects under its own
> license, not those developed for an OpenSolaris community under that
> communities specified license(s) and contributed under a SCA or similar
> agreement.
>
> - Accessibility review - required to verify that Solaris can be sold to
> US government agencies under Sec. 508, or to other customers with
> similar requirements due to laws on general business like the Americans
> with Disabilities Act or to government regulations on government
> purchases in other countries.
>
> - Export control review - making sure that Sun complies with the various
> import & export regulations around the world, mostly around encryption,
> though again, Sun requires this for anything hosted on the site it runs
> as well.
I would expect these requirements to apply to everyone, not just Sun
employees. In each case, the review imposes constraints upon the code
that is integrated so that anyone (not just Sun) could use it to
construct a distro that meets requirements such as accessibility or
compliance with US export law. The same constraints need to be met
regardless of who integrates the code.
If only some code changes are reviewed at integration time, then the
review would need to be repeated when a distro is constructed. That
doesn't seem feasible to me.
Scott