Review of a secure software development process for glibc.

Siddhesh Poyarekar siddhesh@gotplt.org
Thu May 29 14:06:23 GMT 2025


On 2025-05-29 06:41, Sam James wrote:
> Have things changed since
> https://inbox.sourceware.org/libc-alpha/871q406uyw.fsf@gentoo.org/? I
> didn't receive satisfactory answers to those questions so far, and if
> the situation hasn't changed there, I don't think it really counts as
> acceptable funding, so not relevant here.

Having seen LF-like structures from the inside, I personally don't have 
a problem with the way the GB and TAC are structured but I can 
understand if you still have questions about it.  The main reason for 
governance seats for members in such structures is to ensure 
accountability for the money they're spending, which is reasonable 
because what they're giving is not a donation thrown across the wall. 
While concerns over them interfering in our functioning are valid, we 
always have the option of stepping away.

At this point however, I'm not sure that's going to be a viable route 
despite you receiving satisfactory answers to those questions because of 
the way the discussion has degraded over the years.  I do hope we can 
find a way to utilize that funding but I'm not really holding my breath.

Also FWIW, corporate sponsorships and donations are two different 
things; expecting corporations to ask for nothing amounts to asking for 
a donation.  A sponsorship almost always entails something in return.

Sid


More information about the Libc-alpha mailing list