On 04/27/2018 02:56 PM, David Benoit wrote:
Hi all,
Regarding the inclusion of the fedora-workstation-repositories package in
F28, is there currently a policy in place against including it as a
dependency? From what I understand from the recent fedora magazine article
<
https://fedoramagazine.org/third-party-repositories-fedora/> and the policy
wiki page
<
https://fedoraproject.org/wiki/Workstation/Third_party_software_policies?...;,
the purpose of distributing the third-party repositories an rpm is to
ensure that a user must enable them explicitly.
Is there some some preventative measure in place to protect users from the
package being pulled in silently as a dependency?
I don't understand why someone would add such a dep... but even if they
did, the repos would not be enabled when installed. They are disabled in
the rpm. The user must explicitly enable them.
If repository-enabling
rpms are to become acceptable cases for package submissions, what
considerations are being taken to ensure such submissions are tracked and
handled similarly?
Well, depending on what they are they would need to pass Legal and FESCo
approval which would be via ticketing, etc.
Open to better ways to word that policy page for them...
kevin