From owner-freebsd-security Wed Dec 4 18:57:18 1996 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.8.3/8.7.3) id SAA03430 for security-outgoing; Wed, 4 Dec 1996 18:57:18 -0800 (PST) Received: from eel.dataplex.net (eel.dataplex.net [208.2.87.2]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id SAA03425 for ; Wed, 4 Dec 1996 18:57:13 -0800 (PST) Received: from [208.2.87.4] (cod [208.2.87.4]) by eel.dataplex.net (8.7.5/8.7.3) with ESMTP id UAA19886; Wed, 4 Dec 1996 20:56:57 -0600 (CST) X-Sender: rkw@mail.dataplex.net Message-Id: In-Reply-To: <199612050221.TAA13306@rocky.mt.sri.com> References: <199612050117.RAA02670@salsa.gv.ssi1.com> <199612050121.SAA12964@rocky.mt.sri.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Date: Wed, 4 Dec 1996 20:56:40 -0600 To: Nate Williams From: Richard Wackerbarth Subject: Re: Sendmail 8.8.4 questions... Cc: jkh@time.cdrom.com, freebsd-security@freebsd.org Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk Nate Williams replies: >> >I'd rather the 'users' find a new way (that doesn't involved the >> >developers) of distributing patches. You don't need us to do it since >> >you are capable of supporting yourselves. >> >> Well, that implies that "we" take over the commit tree for the 2.1 system. >> Do you really want changes that are not committed into the official CVS >>tree? > >I don't care what "WE-you" do with the tree since "WE-us" aren't going >to be providing any 'offical' patches AFAIK. > >> Do "we" have permission to use the "FreeBSD 2.1" name? > >You aren't providing a release, you are providing patches to a FreeBSD >release. *Anyone* is allowed to do that, you don't need any blessing or >permission to do that. And that defeats the whole purpose of the effort. Only the "FreeBSD organization" can OFFICIALLY address solutions to security problems. If someone else distributes patches, then, rather than increasing the opinion of users, it will actually reflect negatively on the organization because it shows that the organization "doesn't care". It really is too bad that "you" developers have such a limited viewpoint. All you want to your plaything. It doesn't matter to you whether or not it is useful in the "real world". That attitude is definitely a limiting factor.