From owner-freebsd-security@FreeBSD.ORG Sat Feb 3 11:47:48 2007 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id EAEFA16A402 for ; Sat, 3 Feb 2007 11:47:48 +0000 (UTC) (envelope-from dan@obluda.cz) Received: from smtp1.kolej.mff.cuni.cz (smtp1.kolej.mff.cuni.cz [195.113.24.4]) by mx1.freebsd.org (Postfix) with ESMTP id 82E3713C48D for ; Sat, 3 Feb 2007 11:47:48 +0000 (UTC) (envelope-from dan@obluda.cz) X-Envelope-From: dan@obluda.cz Received: from [10.11.0.2] (kulesh.obluda.cz [213.29.48.25]) by smtp1.kolej.mff.cuni.cz (8.13.6/8.13.6) with ESMTP id l13BFroe045622 for ; Sat, 3 Feb 2007 12:15:54 +0100 (CET) (envelope-from dan@obluda.cz) Message-ID: <45C46EE5.4060404@obluda.cz> Date: Sat, 03 Feb 2007 12:15:49 +0100 From: Dan Lukes User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.8.0.9) Gecko/20070112 SeaMonkey/1.0.7 MIME-Version: 1.0 To: freebsd-security@freebsd.org References: <200702012319.l11NJJ7r065204@drugs.dv.isc.org> <45C2E612.5080002@FreeBSD.org> <45C3B56E.3060706@rxsec.com> <45C3DCA5.3070908@FreeBSD.org> In-Reply-To: <45C3DCA5.3070908@FreeBSD.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: Re: Support for 5.x (Was: Re: What about BIND 9.3.4 in FreeBSD in base system ?) X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 03 Feb 2007 11:47:49 -0000 Doug Barton napsal/wrote, On 02/03/07 01:51: > This is where that whole "volunteer project" thing comes in again. With > a finite set of resources, ^^^^^^^^^^^^^^^^^^^^^^^ True, but I'm not sure the resources needs to be limited as much as is. As a active member of national list of FreeBSD user I several times answered the question '{I founded an uncritical bug}|{I developped a improvement } should I send it ?'. The best answer I know is - "yes, you can send PR, but don't wait a response. Response for non-critical bugs often takes several years, improvements remains unanswered forever mostly. In the fact, the probability you will waste your time trying to help to project is high - it have no resource to process your help." Note, I'm not speaking about critical bugs (system doesn't boot on standard hardware or "I can login despite I forged password" or so) nor about ports. It seems to me, the one reason for limited resources is - project has no resources to accept resources. I can't tell why the project lack volunteers processing community inputs. May be, there are no such volunteers. May be, this type of work is not considered to be important, so volunteers of such type are not accept to be part of comitter's team - of course - processing PR is not 'true programming'. Yes, I understand we need to maintain stability, we don't need to allow any dirty hack to go to source base and so on. But tenths months required for processing help from someone (processing it's PR) claim there IS something wrong. In the fact, project miss the resource of large group of people trying to donate it's time and experience to project. At the same time - we are short on resources ... As I don't know what's wrong nor how to correct it, this message is not complaint in any way. It's just a note related to Doug's notice ... Dan -- Dan Lukes SISAL MFF UK AKA: dan@obluda.cz, dan@freebsd.cz,dan@kolej.mff.cuni.cz