[Pkg-samba-maint] Bug#571635: Fragile API

[Steve Langasek]

On Sat, Feb 27, 2010 at 10:53:36PM +0300, Al Nikolov wrote:
> Also, i don't see how it could be resolved if i just import the headers set 
> into my module as you've suggested. I'd still be able to freeze any Samba 
> security upgrade or tumble user's server even without samba-headers in 
> Debian, right?

Er, this bug report only mentioned that you wanted the headers to be
available in a binary package in the archive, not that you intended to get
separate Samba VFS module packages included in Debian.  I don't think the
latter is supportable, for all the stated reasons, and would work with the
ftp team to keep such packages out of testing/stable.

> If you consider the vulnerability window between publishing a Samba security 
> upgrade and following (uncontrolled by you) module upgrade, then merging the 
> module in the Samba tree probably would be the only way to develop such 
> module package.

Development doesn't need to happen inside the Samba tree, but for
distribution as part of Debian, yes.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 828 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20100227/4f26f5f5/attachment.pgp>