Re: Maintainer notification of package-related activity

2016-08-09 Thread Kevin Fenzi
On Tue, 9 Aug 2016 14:50:29 +0200 Florian Weimer wrote: > On 08/09/2016 01:11 PM, Daniel P. Berrange wrote: > > On Tue, Aug 09, 2016 at 12:27:33PM +0200, Florian Weimer wrote: > >> On 08/08/2016 09:23 PM, Paul W. Frields wrote: > >>> For example, activities related > >>>

Re: Maintainer notification of package-related activity

2016-08-09 Thread Florian Weimer
On 08/09/2016 01:11 PM, Daniel P. Berrange wrote: On Tue, Aug 09, 2016 at 12:27:33PM +0200, Florian Weimer wrote: On 08/08/2016 09:23 PM, Paul W. Frields wrote: For example, activities related to package content in dist-git generate notices to maintainers, and the discovered flaw would not

Re: Maintainer notification of package-related activity (was: Re: Fedora Account System (FAS) security issue)

2016-08-09 Thread Daniel P. Berrange
On Tue, Aug 09, 2016 at 12:27:33PM +0200, Florian Weimer wrote: > On 08/08/2016 09:23 PM, Paul W. Frields wrote: > > For example, activities related > > to package content in dist-git generate notices to maintainers, and > > the discovered flaw would not allow an attacker to circumvent these or >

Maintainer notification of package-related activity (was: Re: Fedora Account System (FAS) security issue)

2016-08-09 Thread Florian Weimer
On 08/08/2016 09:23 PM, Paul W. Frields wrote: For example, activities related to package content in dist-git generate notices to maintainers, and the discovered flaw would not allow an attacker to circumvent these or other safeguards. I don't see this for glibc. How do I turn this on?