Re: [gentoo-dev] creating ebuilds

[Paul de Vrieze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 06 January 2004 09:39, Robert Cole wrote:
>
> Those systems aren't yours or any other gentoo devs responsibility. I
> think if most gentoo users/admins would really really think about it
> they know the risks they took when they started using gentoo. It's
> bleeding edge using ACCEPT_KEYWORDS or not. I understand, and if every
> gentoo user would really be honest with themselves, that my system
> could go POOF on the next world update. I know mine has a few times in
> the earlier days of gentoo. That's life on the bleeding edge.

I would need to disagree with this. The gentoo project is responsible for 
doing everything reasonable to maintain the integrity of the tree. Say 
in a case where everyone would just be able to add an ebuild to the tree 
given that it compiled, and the tree would get say a trojaned glibc 
turning all gentoo system into spam zombies. Then imagine I was the 
manager of a company that as a result had extra costs of say $100000. In 
that case I would certainly try to sue gentoo technologies inc. I feel 
that I actually should be awarded damages.

While the GPL does have a waranty disclaim, there is no way that this can 
actually be enforced in the case of gross negligence (with most laws, at 
least the European ones). Allowing the gentoo tree to be a free-for-all 
would equal gross negligence for me.

This is certainly not a matter of broken ebuilds or instability it is 
against protection of malice (i.e. criminal behaviour). Besides that 
there must be quality mechanisms in place, but we must protect agains 
criminal behaviour first.

Paul

- -- 
Paul de Vrieze
Gentoo Developer
Mail: pauldv@g.o
Homepage: http://www.devrieze.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQE/+q2wbKx5DBjWFdsRAhOjAKDlYVE2qrHSyTrhZ0KNPkOZlD9XfgCg4gCA
A3UYhU4RfyLy+CjVmHINhyE=
=yQlP
-----END PGP SIGNATURE-----


--
gentoo-dev@g.o mailing list