-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stuart Herbert wrote: > Hi, > <snip> > > 1. The Gentoo package's maintainer will identify one *named* contact > UPSTREAM for security-related matters, and one named general contact > UPSTREAM (as a fallback for when the security contact is > unreachable). > 2. This information will be held on the Dev Wiki. > 3. This information will be checked every three months to ensure it > remains valid.
Are you volunteering to do 3? If not, who will? > 4. In situations where the UPSTREAM contacts are unreachable, and no > new contact can be identified, the package will be masked and > marked for removal from the Portage tree (ie it fails this policy) > <snip...> > Thoughts, comments, other (constructive) feedback? > > Best regards, > Stu -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iQIVAwUBQssBL2zglR5RwbyYAQKf8Q//QqbVG+xReAF5WyZMHOfOS0zoM0UJZRFJ M7WM28JVR6aNAD4hVcv8EKVMLvt6nPiIu2REsO9ZrZwzIdBm8uLxqdnX76ZysW/6 h10igkCBa78RfuNHbul4muPk1SyAWg3ZextltaMXPrO8bDfoTENcLzp8+NqDyqel 6Ncr/pEcZnEJABKmDfuT/ehtI89+wps51Fkdq7wa8z+EXGCDd1HGNTA3x1OImgDM VaHlLjGVS1lLcXGmZYKCZGvfKzbF/d9xJZ/LwdG+CpJD02avJ4iVv/51y/eGiVzm CwB9d+5wCq5YZFBLOXr8HXFJhYkzSXuGZfbKXisdhzui5MqpErpMQw1TNATY//ha HfFlYjnftS2vjzO/M9aiQqdqXF4HiejKRJGWVwxcqenFjj566t+uTvomwgI/2YLi /yimNyoyG3/ueLLSEMtyo6MURrjT9bbohUVH7pMr3RHNbNjtn3K9omEB4Ngh8L2q kA3hjoQRy1a6gNhG6eHg0j9sBmGb2TEBK/nMKCdyqONH+X/cdGCMIreMxcZ5pqu7 hBD/azcZI8jJr+tb0y3NHcfaT653HDAyeyOCD1OiDDlZeqzi1IGGW1p0ZHqg5J/+ NiGXnbCBT6NKzjvYfQ4nMYJaHGoZQDj8wHyFSUGKUFLjQ+L9X1ros8a1URhfinRf 0pDyFPfTmAI= =6nmQ -----END PGP SIGNATURE----- -- gentoo-dev@gentoo.org mailing list