Re: RPM security (a newbie question)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Stanisław T. Findeisen wrote:
> Rahul Sundaram wrote:
>>> Probably there are lots of packages reviewed by their authors only?
>>
>> Review and signing are two different processes. Every single new package
>> has to go through a review process as outlined in
>>
>> http://fedoraproject.org/wiki/Packaging/ReviewGuidelines
>>
>> Signing a package is done by a small number of people in the release
>> engineering team and they do that manually before pushing it into the
>> repositories.
> 
> Well, it looks that those "review guidelines" cover mostly
> administrative/legal issues. It looks that no one cares about the source
> code.

You missed that the review guidelines has a source check as well. Read
it in detail.

Rahul

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines

[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux