Roland Mainz wrote:
> Erm..."devils advocate" question: If Unison is no longer maintained...
> why should it be integrated into (Open)Solaris ? And how do other OSes
> (like Linux) handle the support issue (e.g. no upstream where they can
> send the bug reports to) ?
>
I see that there has been significant discussion spawned from Roland's
"devil's
advocate" question. I think its a very important question (thanks Ronald!).
However, the resulting thread seems to be a little amorphous. I'd like
to see
concrete answers to...
1) For some reason we need to rebuild Unison. How do we (or other
distros based on OpenSolaris) do that? (ie: occum)
1a) Is there any precedent for a binary delivery of an executable?
1b) What are the guarantees that this isn't some kind of "trojan horse"?
(Yea, I know its unlikely, but....)
2) A reason might need to rebuild Unison, would be the discovery of
a security hole. What do we do? Who fixes it? Would the response
from Sun to be simply remove it (because its not worth the
resources)?
(Other distros can make their own choice.)
3) Its unlikely, but what if the fix to this mythical security hole
requires an
API/CLI modification. Do we just fork from the accepted interface?
#2 and #3 seems to make it a requirement that this be Volatile (or
Obsolete Volatile).
I can't assert that I know an obvious answer for the other questions above.
Is this appropriate for a fast-track? (Because the support issues are
new ground?)
- jek3
