Re: "Changelog-2.6.15": missing signoffs, descriptions

[Linda Walsh <lkml@tlinx.org>]

Luck, Tony wrote:
> On Tue, Feb 07, 2006 at 05:06:05PM -0800, Linda Walsh wrote:
>   
> > Actually, ("talking" to myself?), parsing this file a bit more,
> > I find many (~134) that are missing "Sign-offs".
> >
> > I take it that "Sign-off"s are also "optional" on commits
> > and represent that the author specified under the "commit"
> > tag did not need a "Sign-off"?
> >     
> Most of them do
> appear to be an author not signing off on his own work when working in
> their own git tree.  Jeff Garzik seems to be an expert at this with 70
> commits where he is listed as Author, but there is no signed-off-by line.
> Linus is in second place with 8, but most of those were simply changing
> the release in the Makefile for each "-rcN".  The 2 that weren't were
> Linus fixing a silly typo and reverting a previous commit, perhaps these
> were deliberately not signed?  Then there is a long tail...
I suppose I'm unclear as to why sign-offs were added to the GIT
change-log entries in the first place.

I thought Sign-offs were added to provide an "accountability" trail for
*ALL* new lines of code going into the kernel.  I though it was desired
to know "Who" made or added "What" changes into the kernel to ensure
that added code could be traced to its source to protect against
infringement claims that might arise as well as verifying that changes
had been reviewed for sanity and someone wasn't unintentionally or
deliberately adding "suspect" or "insecure" code.

Given human nature, I'm guessing there isn't sufficient concern about
this issue until we've been bitten several times: hard. 

Sigh.

Linda





-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/