ACL removal day?!

David Woodhouse dwmw2 at infradead.org
Wed Jun 20 15:18:29 UTC 2007


On Wed, 2007-06-20 at 16:56 +0200, Ralf Corsepius wrote:
>  Without ACLs in effect he will be able to
> compromise other packages than yours. 

We don't need an ACL on _commits_. We can have one on _builds_. Or
preferably just on _pushes_ to the repository -- people other than the
maintainer can build an untagged package and the maintainer (or someone
in the ACL) would have to tag it for the intended collection.

-- 
dwmw2




More information about the Fedora-maintainers mailing list