| 1 |
On Sun, 9 Sep 2018 15:03:11 +0200 Thomas Deutschmann wrote: |
| 2 |
> Hi, |
| 3 |
> |
| 4 |
> I disagree. Either discuss to drop the entire policy about "-Werror" or |
| 5 |
> don't but please do _not_ enter the game of differentiating between |
| 6 |
> "normal" and something you call "security-orientated" packages. |
| 7 |
|
| 8 |
You got me wrong. I'm not trying to build special rules for |
| 9 |
security packages (since there is no margin between them and other |
| 10 |
packages and you rightfully pointed out that any vulnerability may |
| 11 |
play a role in a chained attack); they were just an example. |
| 12 |
|
| 13 |
What I'm trying to do is to allow maintainers to keep -Werror if |
| 14 |
they really want to do this, understand what they are doing and |
| 15 |
have enough manpower to support this. |
| 16 |
|
| 17 |
As can be seen from aforementioned bugs right now developer and |
| 18 |
upstream support this to their best and yet QA team tries to |
| 19 |
enforce -Werror drop using the brute force and ignoring active best |
| 20 |
effort support. This should not happen. |
| 21 |
|
| 22 |
Best regards, |
| 23 |
Andrew Savchenko |
Archives