Re: [gentoo-project] Small change to Social Contract - feedback needed

[Ulrich Mueller]

>>>>> On Sun, 22 Mar 2015, Sven Vermeulen wrote:

> During the trustee meeting, it was recommended to first get a
> community-supported suggestion before making the change, and to discuss it
> on gentoo-project@g.o. Hence this e-mail.

> The paragraph currently reads:

> """
>  Exceptions are made when we receive security-related or developer relations
>  information with the request not to publicize before a certain deadline.
> """

> In light of the suggestions already made on the bug, my suggestion would be
> to go with the following:

> """
>  Exceptions are made for
>  - security-related information, when there are valid reasons (such as a
>    responsible disclosure process) not to publicize the content of the bug
>    before a certain deadline
>  - community relations related information, for instance where content disclosure
>    could be harmful to a person or project, such as bugs containing
>    offensive content, or personally identifiable / private information

>  Other exceptions can be made on a case-by-case basis after approval by the
>  Board of Trustees of the Gentoo Foundation.
> """

> Please shed your light on this. All feedback is greatly welcomed.

This would increase the length of the paragraph by almost a factor of
four, without saying anything that is significantly different from
what it says now.

The section about bugzilla is already rather specific for a social
contract, so IMHO we shouldn't increase its size even further.
Basically, what you want to say that the preceding paragraph about
bugzilla being open for public view isn't a 100 % rule but has
exceptions. So, how about this:

  "Exceptions are made when we receive sensitive information related
  to security or community relations."

Also note that the Debian Social Contract [1] from which ours is
derived from doesn't have such an exception.

Ulrich


[1] https://www.debian.org/social_contract