27 ms·
The notion of a post RHEL sources world is rather silly. This just makes things harder. As long as the source is out there, and the licenses of the code itsel
by ilc 3y ago
The notion of a post RHEL sources world is rather silly.
This just makes things harder. As long as the source is out there, and the licenses of the code itself it permissive: Rebuilds will happen.
How will the code get to the people doing the rebuild? Good question. And even if I knew the answer... I probably wouldn't say :).
- teruakohatu 3y agoWould you build a business around unofficially obtained source? It would make supply chain attacks possible if only a couple of people are downloading the source and sharing it, only a couple of people need to be compromised and users would not be able to verify it. RH could also make it hard to get the source in an automated manner.
- ilc 3y agoYou imply there's only a few. There's always a way. If they make it hard to get the source code in an automated manner, they'll violate some of their licenses. We'll see.. This is going to be a game of cat and mouse. It'll be fun.
- op00to 3y ago> If they make it hard to get the source code in an automated manner, they'll violate some of their licenses. There’s no legal requirement to provide source in any specific way. They can provide it on antiquated magnetic tape.