linux-kernel - Re: [Ksummit-2013-discuss] KS Topic request: Handling the Stable kernel, let's dump the cc: stable tag

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130716095353.GC22506@sirena.org.uk>
Date:	Tue, 16 Jul 2013 10:53:53 +0100
From:	Mark Brown <broonie@...nel.org>
To:	Ben Hutchings <ben@...adent.org.uk>
Cc:	James Bottomley <James.Bottomley@...senPartnership.com>,
	ksummit-2013-discuss@...ts.linuxfoundation.org,
	linux-kernel@...r.kernel.org, stable@...r.kernel.org
Subject: Re: [Ksummit-2013-discuss] KS Topic request: Handling the Stable
 kernel, let's dump the cc: stable tag

On Tue, Jul 16, 2013 at 03:00:29AM +0100, Ben Hutchings wrote:
> On Mon, 2013-07-15 at 23:27 +0400, James Bottomley wrote:

> > The problem, as Jiří Kosina put is succinctly is that the distributions
> > are finding stable less useful because it contains to much stuff they'd
> > classify as not stable material.

> Well, some distributions may find that.  Some distribution maintainers
> have taken on stable branches, officially or otherwise - Steven Rostedt
> (MRG), several Ubuntu developers, and myself (Debian), and of course
> Greg was working for SUSE not so long ago.

There's going to be people using it via the stable kernels from Linaro
too soon (mostly underlying distros provided by silicon vendors for
embedded systems in the first instance).

> ...but this is important.  Also, I'm not convinced that the current
> standard review period (48 hours starting whenever) is really long
> enough.  Especially when there can be 4 large series at once (for 3.0,
> 3.4, 3.latest-1 and 3.latest) or even more if other stable maintainers
> start overlapping reviews.

I definitely agree with this, it can be a bit of a DoS when things are
busy.

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)