Review of a secure software development process for glibc.
Siddhesh Poyarekar
siddhesh@gotplt.org
Thu May 29 14:06:23 GMT 2025
On 2025-05-29 06:41, Sam James wrote:
> Have things changed since
> https://inbox.sourceware.org/libc-alpha/871q406uyw.fsf@gentoo.org/? I
> didn't receive satisfactory answers to those questions so far, and if
> the situation hasn't changed there, I don't think it really counts as
> acceptable funding, so not relevant here.
Having seen LF-like structures from the inside, I personally don't have
a problem with the way the GB and TAC are structured but I can
understand if you still have questions about it. The main reason for
governance seats for members in such structures is to ensure
accountability for the money they're spending, which is reasonable
because what they're giving is not a donation thrown across the wall.
While concerns over them interfering in our functioning are valid, we
always have the option of stepping away.
At this point however, I'm not sure that's going to be a viable route
despite you receiving satisfactory answers to those questions because of
the way the discussion has degraded over the years. I do hope we can
find a way to utilize that funding but I'm not really holding my breath.
Also FWIW, corporate sponsorships and donations are two different
things; expecting corporations to ask for nothing amounts to asking for
a donation. A sponsorship almost always entails something in return.
Sid
More information about the Libc-alpha
mailing list