From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTPS id 1310A3858D37 for ; Mon, 11 Sep 2023 07:46:13 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 1310A3858D37 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1694418372; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=lid9ErZzMdHUW+Fm7BZjfh69AZ2ROoEFURavxkUW/KU=; b=E3/KzLMJBpdBHKeWl3QoFx3g2t/Fxv9JgcwkrAYUrXx92D5vq/rW2EVedh7atA8oqyt9PX 41EmjpQqhivr0BCVKlarkrLCLeo6FtsLmhr3ygRjZSXfeURHGCD7+oM/1siG2Og/bmbUyv WErFM9c2wriPsiPVYuMAk9PIVGgaXqA= Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id us-mta-199-gf3fe_XLMnOgFkd0GOM-Sw-1; Mon, 11 Sep 2023 03:46:09 -0400 X-MC-Unique: gf3fe_XLMnOgFkd0GOM-Sw-1 Received: from smtp.corp.redhat.com (int-mx06.intmail.prod.int.rdu2.redhat.com [10.11.54.6]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id 973E38F40C2; Mon, 11 Sep 2023 07:46:08 +0000 (UTC) Received: from oldenburg.str.redhat.com (unknown [10.2.16.20]) by smtp.corp.redhat.com (Postfix) with ESMTPS id F3E932156701; Mon, 11 Sep 2023 07:46:07 +0000 (UTC) From: Florian Weimer To: Alexandre Oliva Cc: Siddhesh Poyarekar , GNU C Library Subject: Re: GNU C Library as its own CNA? References: <1f5a1295-36d1-ab5e-86ec-1e91acefc63f@gotplt.org> <8f303953-3e5e-582f-ab4b-d3d0911f3be2@gotplt.org> <8222787b-f534-a827-ebf5-d9100844228d@gotplt.org> <1fd12501-cc77-1943-9fe0-611376c77e09@gotplt.org> <16843bf8-f621-30fb-fbbf-d6b8ce633486@gotplt.org> Date: Mon, 11 Sep 2023 09:46:06 +0200 In-Reply-To: (Alexandre Oliva's message of "Sun, 10 Sep 2023 13:57:18 -0300") Message-ID: <87jzsx2lvl.fsf@oldenburg.str.redhat.com> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.1 on 10.11.54.6 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain X-Spam-Status: No, score=-4.6 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: * Alexandre Oliva: > On Sep 8, 2023, Siddhesh Poyarekar wrote: > >> A single non-root CNA for all of the GNU project doesn't make sense to >> me, given that packages have very distinct communities and needs. > > It seem like you're saying that GNU, as a CNA, would be unable to offer > to individual packages whatever it is that Red Hat, as root CNA, would. > Could you please elaborate on that distinction you're making? I think we'd still want per-component CNAs, whether the GNU project is a (root) CNA or not. I suggest we start with Red Hat as the root CNA, get the glibc CNA set up. Once you have figured out the details with MITRE and the FSF and the GNU root is established, we can move over. Thanks, Florian