Re: [gentoo-project] Re: [gentoo-dev-announce] Call For Agenda Items - 10 Jun 2014

[Rich Freeman]

On Sat, Jun 7, 2014 at 1:35 PM, Roy Bamford <neddyseagoon@g.o> wrote:
> The foundation do not need to be involved any more that they are now.
> Anyone can apply for foundation funding for a project.
> As an individual trustee, I don't see this project as any different to
> any other project that way apply for funding.

I think the idea is that the policy would be that the Foundation would
agree to not fund services that didn't follow the guidelines.

The rationale would be that if somebody hosts a service funded by the
Foundation and it gets used to serve malware then the Foundation might
be legally responsible.  That is why most organizations don't let
random people run its webservers/etc without any kind of adherence to
central administration/security/etc.  Or perhaps Foundation funds get
used to build some service, but because there is no coordination with
infra there is no way to ever move it into production and it just
fizzles out.

This wouldn't be about keeping people from running services, but
rather encouraging it in a way that makes it safer for the community,
gives recognition to those who built it, and gives it some kind of
roadmap to being a full-fleged Gentoo service.  Maybe it creates a way
to on-board new devs into Infra as well.

I'm talking about services - if somebody wants a sparc under their
desk not generally exposed to the world advertising its services under
the Gentoo name then there really isn't any need for this.

I imagine most organizations do it this way.  If some Google employee
wants to build a development tool or a 10% project hosted on a PC in
their cube most likely the policy requirements are minimal, but on the
other hand if somebody is touching some server that actually generates
content that goes out under the google.com domain then I'm sure the
red tape gets fairly thick.

If we're not going to give any kind of Foundation preference to
following the new guidelines, then I don't really see the point in
going forward with it.

Rich