Re: Next steps from GTI TAC meeting on 2023-03-08 - Evaluate cost of glibc migration.
Siddhesh Poyarekar <[email protected]> Wed, 24 May 2023 17:12:30 -0400
| Newsgroups | org.linuxfoundation.lists.cti-tac |
|---|---|
| Message-ID | <[email protected]> |
On 2023-05-24 15:06, Konstantin Ryabitsev wrote: > On Wed, May 24, 2023 at 02:13:53PM -0400, Siddhesh Poyarekar wrote: >> It looks like the question of who to ultimately trust, either the gatekeeper >> committer (or two) who is the only person to have write access to the >> repository, or the admin who manages the box. > > The maintainer's action are in the public, while the admin's actions are > hidden. > >> The gatekeeper committer could also fabricate commits and push to the >> central repository in the same way. > > 1. Not with nearly as much impunity, especially if non-fast-forward pushes are > disallowed. If an admin makes a change that needs a fast-forward, anybody trying to sync their repos would see the forced update. I'll admit though that it's arguable how many would actually notice the message. Thanks, Sid