Re: Debian should not link to n*zis nor ship their software (Re: Debian Certified Laptops -- Possibility of collaborating with Framework?

Simon Josefsson <[email protected]> Thu, 14 May 2026 12:13:27 +0200
Newsgroups gmane.linux.debian.devel.project
Message-ID <[email protected]>
--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Dominik George <[email protected]> writes:

> Hi,
>
>>tech-ctte rules on *technical* issues, so this doesn't really seem
>>within their  mandate. And the community team has no powers on the
>>contents of packages.
>
> It occurred to me, on several occasions, that noone in Debian (short
> of its members via a GR) is responsible for overseeing the Social
> Contract. Maybe with all the topics of these days (AI and its
> consequences, facsism,=E2=80=A6), it's time for some sort of ethical coun=
cil,
> and for updating the Social Contract?

I think this issue is somewhat similar to the advertisement concern with
gnome-control-center:

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1136336

In both packages, there is no real clear guidance from Debian Policies
what is deemed to be acceptable contents within a package.

It seems both these issues could be helped by better guidance on matters
of acceptable package content.

Personally, I would find it really problematic if we would have a hard
policy to filter packages depending on political, religious,
philosophical etc views of the upstream author.

That's a slippery slope to motivate excluding just about anything,
depending on your own political/religious/philosophical/etc preferences.

That said, I also have sympathy with the goal to shepherd an inclusive
and friendly atmosphere and Operating System that promotes the spirit of
the DSC/DFSG.

Having a package that display a really provocative message to the user
inside Debian seems problematic and warrant discussion and possibly some
action.

Maybe we don't need to bike-shed the engineering approach to social
concerns by defining a rigid policy document.  Social issues cannot
always be resolved by technical procedures.

Thus, I propose to write down some guiding principle on this, with
examples of clearly offensive content that maintainers should be
patching out.  It doesn't have to be a hard policy, but a guiding
principle around a complex social topic.

Such a document would encourage good social behaviour, and maybe we
could have a committe that guide maintainers on these matters is useful
as a escalation point different to the tech-ctte.

FWIW, Petter did patch out the offensive messages here, which seems
somewhat reasonable.  Dropping the Homepage URL may be warranted in this
situation too, but it could also be an over-reaction that is
counter-productive for end-users.  Repacking the upstream source code
without the offensive message could be done, but also has negative
consequences for auditing costs and maintainance.

/Simon

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=whny
-----END PGP SIGNATURE-----
--=-=-=--