Re: [gentoo-dev] About changing security policy to unCC maintainers when their are not needed

[Pacho Ramos]

El mié, 12-09-2012 a las 14:42 -0400, Rich Freeman escribió:
> On Wed, Sep 12, 2012 at 2:29 PM, Jeroen Roovers <jer@g.o> wrote:
> >
> > So you would want to be re-CC'd when it is time to remove the vulnerable
> > versions, I guess.
>
> Isn't this done shortly after keywording is complete?  I think the
> concern is more about issuing GLSAs/etc, which apparently can happen
> months or years after the vulnerable versions were removed judging by
> recent chromium@ mail.
>

Yes, I am referring to that GLSA messages that are received months later
and are useless to maintainers

> > You can un-CC yourself. I don't see why security@ should be doing the
> > legwork.
>
> I see no issue with that.
>
> Rich
>
>