-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Stuart Herbert wrote:
> Hi,
> 
<snip>
> 
> 1. The Gentoo package's maintainer will identify one *named* contact
>    UPSTREAM for security-related matters, and one named general contact
>    UPSTREAM (as a fallback for when the security contact is
>    unreachable).
> 2. This information will be held on the Dev Wiki.
> 3. This information will be checked every three months to ensure it
>    remains valid.

Are you volunteering to do 3?  If not, who will?

> 4. In situations where the UPSTREAM contacts are unreachable, and no
>    new contact can be identified, the package will be masked and
>    marked for removal from the Portage tree (ie it fails this policy)
> <snip...>
> Thoughts, comments, other (constructive) feedback?
> 
> Best regards,
> Stu
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
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=6nmQ
-----END PGP SIGNATURE-----
-- 
gentoo-dev@gentoo.org mailing list

Reply via email to