RFC: -server packages universe demotions and main promotions

[Kees Cook]

On Mon, Dec 07, 2009 at 02:09:32PM -0800, Steve Langasek wrote:
> On Mon, Dec 07, 2009 at 01:38:12PM -0800, Kees Cook wrote:
> > >  # redhat-cluster-suite:
> > >     - not properly maintained
> 
> > +1 to drop from archive (rather than demote).
> 
> What is it about rhcs that makes it a candidate for dropping from the
> archive, given that the package is actively maintained in Debian?  I'll
> grant that the package doesn't appear to be well-maintained in Ubuntu (e.g.,
> bug #290399), but there is certainly user demand for it, which is how that
> bug wound up nominated for inclusion in a hardy point release.
> 
> Are there grave security considerations, that we would want to drop the
> package from the release instead of moving it to universe?

It has proven extremely difficult to test, and earlier versions were very
painful to get security updates applied (they were VCS snapshots, not
actual releases).  As for universe vs archive, I don't have an opinion,
I would just like to see it out of main.

-Kees

-- 
Kees Cook
Ubuntu Security Team