[arch-general] Important notice on the Arch Security Team to the whole Arch Linux community.

[Andres P]

On Tue, Jun 22, 2010 at 4:26 AM, Philipp Überbacher
<hollunder at lavabit.com> wrote:
> Sure, like any dev will be going through every possible bug tracker,
> repo or ask any possible user to find patches for his app.
> Don't be ridiculous. If you write a patch that's not distro specific,
> then it's your job to get it to upstream,

So it's not just take the time to write the fix, you also have to make sure
you rebase it every time theres a white space patch.

Let upstream know about your repo and then both can work comfortably...

You're implying that upstream is too important or what have you. What about the
inverse?

> it's the only way it could possibly work. The beauty of arch
> is that the patch you just wrote is most likely against the latest
> release, and upstream will likely be happy to get it.

Ok, the beauty of openbsd is that they're running a BIND version that's been
patched to the point of no recognition. They have confidence in their
skills instead of quitting before giving it a shot.

This arch security news group sounds great. Specially if they intend to sit
down and code.

Andres P