Re: Next steps from GTI TAC meeting on 2023-03-08 - Evaluate cost of glibc migration.

Siddhesh Poyarekar <[email protected]> Wed, 24 May 2023 17:12:30 -0400
Newsgroups org.linuxfoundation.lists.cti-tac
Message-ID <[email protected]>
On 2023-05-24 15:06, Konstantin Ryabitsev wrote:
> On Wed, May 24, 2023 at 02:13:53PM -0400, Siddhesh Poyarekar wrote:
>> It looks like the question of who to ultimately trust, either the gatekeeper
>> committer (or two) who is the only person to have write access to the
>> repository, or the admin who manages the box.
> 
> The maintainer's action are in the public, while the admin's actions are
> hidden.
> 
>> The gatekeeper committer could also fabricate commits and push to the
>> central repository in the same way.
> 
> 1. Not with nearly as much impunity, especially if non-fast-forward pushes are
>     disallowed.

If an admin makes a change that needs a fast-forward, anybody trying to 
sync their repos would see the forced update.  I'll admit though that 
it's arguable how many would actually notice the message.

Thanks,
Sid