From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from sa-prd-fep-046.btinternet.com (mailomta11-sa.btinternet.com [213.120.69.17]) by sourceware.org (Postfix) with ESMTPS id 7014D3858C33 for ; Tue, 9 May 2023 20:16:33 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 7014D3858C33 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=dronecode.org.uk Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=dronecode.org.uk Received: from sa-prd-rgout-004.btmx-prd.synchronoss.net ([10.2.38.7]) by sa-prd-fep-046.btinternet.com with ESMTP id <20230509201632.UHCZ31347.sa-prd-fep-046.btinternet.com@sa-prd-rgout-004.btmx-prd.synchronoss.net> for ; Tue, 9 May 2023 21:16:32 +0100 Authentication-Results: btinternet.com; auth=pass (PLAIN) smtp.auth=jonturney@btinternet.com; bimi=skipped X-SNCR-Rigid: 6406812D07944992 X-Originating-IP: [86.140.69.123] X-OWM-Source-IP: 86.140.69.123 (GB) X-OWM-Env-Sender: jonturney@btinternet.com X-VadeSecure-score: verdict=clean score=0/300, class=clean X-RazorGate-Vade: gggruggvucftvghtrhhoucdtuddrgedvhedrfeeguddgjeefucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecuueftkffvkffujffvgffngfevqffopdfqfgfvnecuuegrihhlohhuthemuceftddunecunecujfgurhepkfffgggfhffuvfhfjggtgfesthejredttdefjeenucfhrhhomheplfhonhcuvfhurhhnvgihuceojhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukheqnecuggftrfgrthhtvghrnhepgeetjeeuveegheffudekgeffudfhhfetffehheejvdeffefgkefflefgtdetleegnecukfhppeekiedrudegtddrieelrdduvdefnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehhvghloheplgduledvrdduieekrddurddutdeingdpihhnvghtpeekiedrudegtddrieelrdduvdefpdhmrghilhhfrhhomhepjhhonhdrthhurhhnvgihsegurhhonhgvtghouggvrdhorhhgrdhukhdpnhgspghrtghpthhtohepuddprhgtphhtthhopegthihgfihinhdqrghpphhssegthihgfihinhdrtghomhdprhgvvhfkrfephhhoshhtkeeiqddugedtqdeiledquddvfedrrhgrnhhgvgekiedqudegtddrsghttggvnhhtrhgrlhhplhhushdrtghomhdprghuthhhpghushgvrhepjhhonhhtuhhrnhgvhiessghtihhnthgvrhhnvghtrdgtohhmpdhgvghokffrpefiuedpoffvtefjohhsthepshgrqdhprhguqdhrghhouhhtqddttdeg X-RazorGate-Vade-Verdict: clean 0 X-RazorGate-Vade-Classification: clean Received: from [192.168.1.106] (86.140.69.123) by sa-prd-rgout-004.btmx-prd.synchronoss.net (5.8.814) (authenticated as jonturney@btinternet.com) id 6406812D07944992 for cygwin-apps@cygwin.com; Tue, 9 May 2023 21:16:32 +0100 Message-ID: <971ab69b-1c88-b29a-d98c-55ccd4ab3b80@dronecode.org.uk> Date: Tue, 9 May 2023 21:16:31 +0100 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:102.0) Gecko/20100101 Thunderbird/102.10.1 From: Jon Turney Subject: Trusted maintainers (was: Re: How does a package become orphaned? (was Re: Attn maintainer: python-paramiko)) To: "cygwin-apps@cygwin.com" References: <3fdca14d-95fa-0398-46a9-6d5291ceae96@gmail.com> <0282d084-b2b2-132f-1e82-4159a4d1de05@gmail.com> <36a5d2b5-41f7-52a4-c95f-d9f2e4f12e96@dronecode.org.uk> <355f05b2-991c-fff6-fa5e-7d3eba7b16d9@dronecode.org.uk> Content-Language: en-GB In-Reply-To: <355f05b2-991c-fff6-fa5e-7d3eba7b16d9@dronecode.org.uk> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-2.3 required=5.0 tests=BAYES_00,JMQ_SPF_NEUTRAL,KAM_DMARC_STATUS,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SPF_PASS,TXREP,T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 01/12/2022 19:41, Jon Turney wrote: > On 04/11/2022 13:05, Chad Dougherty wrote: >> On 2022-11-04 08:34, Jon Turney wrote: [...] > > Well, maybe. > > I think a common way for distros to handle this is to have some subset > of maintainers who are allowed to make NMUs for these "important" updates. > > The problem is we don't really have the concept of an NMU currently, > although this is (again) due to accidents of history, rather than by > design. > > The current upload policy is: > - Only the maintainer for a package maintainer is allowed to upload that > package. > - If a package is orphaned (has no maintainer), there are some "trusted" > maintainers who are allowed to upload it. > > I'm kind of inclined to relax that a bit, although I'm not sure what to. I've cleaned-up a lot of the inconsistencies around the abilities of "trusted" maintainers. They can already modify the package maintainer database to handle ITPs, package orphaning, adoption and removal. They should now be permitted to upload, git push, deploy, vault, etc. all packages (orphaned or not), as if they were the package maintainer. Entrusted with these strange superpowers, the following god-like beings walk unknown amongst us: Achim Gratz Corinna Vinschen Ken Brown Marco Atzeri (as a note, they can already do all the above, and more, by virtue of having cygwin group shell access on sourceware, but I don't consider that a pre-requisite for the future)