<div>2008/1/1, Luke Macken <<a href="mailto:lmacken@redhat.com">lmacken@redhat.com</a>>:<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> On Sat, Dec 29, 2007 at 06:43:54PM +0100, Christopher Aillon wrote: > On 12/29/2007 04:17 PM, Rahul Sundaram wrote: >> Christopher Aillon wrote: >>> On 12/29/2007 02:32 AM, Rahul Sundaram wrote: >>>> Christoph Wickert wrote: >>>>> I completely agree with you. Maybe we could say that updates are >>>>> allowed >>>>> to bypass testing if they fix >>>>> a) serious bugs >>>>> b) bugs marked as "urgent" >>>>> c) broken deps >>>> >>>> b) isn't a good criteria since anybody can mark any bug as urgent. If >>>> the priority field in bugzilla is restricted to package maintainers and >>>> triagers, I would agree with you. >>> >>> The same maintainer who marks "push right to stable" can tweak the field >>> before they submit the update and you won't have solved anything. >> >> Even if it had a strict set of rules and maintainers are going to abuse >> the system, > > Hey dude, I wasn't the one agreeing with a set of rules, that was you. I'm > just saying it's unwise to agree with a set of rules that can still be > worked around easily. > >> they can mark any update as a critical security update and push it through >> too but then it is much more easier to point out who is responsible >> compared to users just marking a random bug as a high priority one. > > I just noticed that nobody sent out a FESCo Meeting Summary for > 2007-09-27[1]. There, we approved > <a href="http://fedoraproject.org/wiki/LubomirKundrak/SecurityUpdateProcessDraft"> http://fedoraproject.org/wiki/LubomirKundrak/SecurityUpdateProcessDraft</a> so > the Fedora Security Response team would have to approve it before it gets > released as a security advisory. > > [1] At least there's a log at > <a href="http://bpepple.fedorapeople.org/fesco/FESCo-2007-09-27.html">http://bpepple.fedorapeople.org/fesco/FESCo-2007-09-27.html</a> > > Nobody's implemented that yet, though... Luke? This would be quite nice to > get done... :-) The code has been written and will make its way out with the next bodhi upgrade.</blockquote><div> !nice, Thx Luke </div> <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> luke -- fedora-devel-list mailing list <a href="mailto:fedora-devel-list@redhat.com">fedora-devel-list@redhat.com</a> <a href="https://www.redhat.com/mailman/listinfo/fedora-devel-list">https://www.redhat.com/mailman/listinfo/fedora-devel-list </a> </blockquote></div> -- Xavier.t Lamien -- French Fedora Ambassador Fedora/EPEL Contributor | <a href="http://fedoraproject.org/wiki/XavierLamien">http://fedoraproject.org/wiki/XavierLamien </a> GPG-Key ID: F3903DEB Fingerprint: 0F2A 7A17 0F1B 82EE FCBF 1F51 76B7 A28D F390 3DEB