On Thu, Jun 9, 2022 at 3:09 PM Miro Hrončok <mhroncok(a)redhat.com> wrote:
Hello,
I've recently seen a package that was imported into Fedora without a package
review. I've noticed this because the packages doesn't even install and I
wanted to check if this could have been caught in the package review but I
couldn't find it, so I've checked the fedora-scm-requests ticket.
The ticket at fedora-scm-requests was created with exception=true. I am not
going to link to it, because I am not here to point fingers. I am just
genuinely curious.
According to
https://docs.fedoraproject.org/en-US/packaging-guidelines/ReviewGuideline...
we have 3 kinds of exceptions:
- FPC grants an explicit exemption from the process...
- The package is being created so that multiple versions of the same package
can coexist in the distribution...
- The package exists in both Fedora and RHEL, but the packager wants to ship it
in EPEL under an alternative name...
In those cases, the packager requests the repo with --exception, makes sense.
However, who checks if the flag was used according to the rules? Because
apparently, is seems that nobody does. Is it expected that we are all
responsible people who would not abuse this simply to avoid package reviews?
On a basic level, I'm kind of surprised we don't have an exception
reason flag to ensure that the choice is being validated by someone. I
don't know how you'd validate it right now.
--
真実はいつも一つ!/ Always, there's only one truth!