On the radar: who gets on the linux-distros mailing list?
linux-distros is where vulnerabilities and fixes are discussed prior to public disclosure. Given the nature of the material discussed, it is unsurprising that membership is limited. I seriously doubt they would let me on it...
CIQ (Rocky Linux) would like to join:
https://lwn.net/ml/oss-security/20231001130223.GA6586@openwall.com/
There has been some opposition to this membership, seemingly based on the ideas that (1) Rocky Linux isn't doing much of the way of original distribution work, and (2) as a (relatively) community-oriented project, it lacks a way to keep secrets. This view is not universally held, though.
Meanwhile, openEuler also wants in:
https://lwn.net/ml/oss-security/ZSyUUSF_-3YbT14k@workstation/
The concern here is potential legal issues related to openEuler's Chinese origins.
Jonathan Corbet /
npub1kn…9zhq5
2023-10-16 19:28:07
Author Public Key
npub1kn9ws0ksmsr86w9fxe542lcr3c6ex44r4f8vq477z2a3ugl74clqm9zhq5Published at
2023-10-16 19:28:07Event JSON
{
"id": "4dd47d97c9a964adb17e1a690bdf61eb4ec4363342029c02c8671cd2ac53b7ba",
"pubkey": "b4cae83ed0dc067d38a93669557f038e359356a3aa4ec057de12bb1e23feae3e",
"created_at": 1697484487,
"kind": 1,
"tags": [
[
"proxy",
"https://social.kernel.org/objects/ead148d6-9662-42af-bf9e-ecc960ff2718",
"activitypub"
]
],
"content": "On the radar: who gets on the linux-distros mailing list?\n\nlinux-distros is where vulnerabilities and fixes are discussed prior to public disclosure. Given the nature of the material discussed, it is unsurprising that membership is limited. I seriously doubt they would let me on it...\n\nCIQ (Rocky Linux) would like to join:\n\nhttps://lwn.net/ml/oss-security/20231001130223.GA6586@openwall.com/\n\nThere has been some opposition to this membership, seemingly based on the ideas that (1) Rocky Linux isn't doing much of the way of original distribution work, and (2) as a (relatively) community-oriented project, it lacks a way to keep secrets. This view is not universally held, though.\n\nMeanwhile, openEuler also wants in:\n\nhttps://lwn.net/ml/oss-security/ZSyUUSF_-3YbT14k@workstation/\n\nThe concern here is potential legal issues related to openEuler's Chinese origins.",
"sig": "ca6331dfe6cde62f4dbdd06dfe22e761256beb6946d0f2163cf7aa4d13744a7e4d6439b2ff8eb69d67d8f795ec5aa5b00c28c6570085c98abb770c869a8bb2c5"
}