Re: GNU C Library as its own CNA?

[Siddhesh Poyarekar <siddhesh@gotplt.org>]

Hello,

Trying to revive this conversation since there haven't been any 
objections to this.

On 2023-07-28 11:56, Siddhesh Poyarekar wrote:
> 2. Identify a group of people who ought to be on that list.  A starting 
> group could be a cross section of named maintainers from various 
> distributions and FSF stewards but we probably need a way to make sure 
> that the group is inclusive without being too broad.
> 
> 3. A formal representation to the root CNA, i.e. Red Hat.  We would need 
> a group of volunteers that would be willing to step in as signees for 
> this.  I'm in, but I can't do it alone and would need more volunteers; 
> it could perhaps be the same set of people who would be part of the 
> initial security team in (2).

Who ought to qualify as volunteers?  I reckon at least one distro 
maintainer per distro who also already has write access to the repo and 
maybe some others.

Thanks,
Sid