<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>

<channel>
	<title>Open Source Security &#187; community</title>
	<atom:link href="http://www.ratliff.net/blog/index.php/category/community/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.ratliff.net/blog</link>
	<description>A blog about open source and security and open source security</description>
	<pubDate>Wed, 28 May 2008 15:18:59 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5.1</generator>
	<language>en</language>
			<item>
		<title>So, would you call it SESolaris? SEOpenSolaris?</title>
		<link>http://www.ratliff.net/blog/index.php/2008/03/05/so-would-you-call-it-sesolaris-seopensolaris/</link>
		<comments>http://www.ratliff.net/blog/index.php/2008/03/05/so-would-you-call-it-sesolaris-seopensolaris/#comments</comments>
		<pubDate>Wed, 05 Mar 2008 22:46:20 +0000</pubDate>
		<dc:creator>Emily Ratliff</dc:creator>
		
		<category><![CDATA[Planet LTC]]></category>

		<category><![CDATA[community]]></category>

		<category><![CDATA[open source]]></category>

		<category><![CDATA[security]]></category>

		<category><![CDATA[selinux]]></category>

		<guid isPermaLink="false">http://www.ratliff.net/blog/index.php/2008/03/05/so-would-you-call-it-sesolaris-seopensolaris/</guid>
		<description><![CDATA[In a major validation of the FLASK architecture, the OpenSolaris community has created a new project called Flexible Mandatory Access Control (fmac) to adapt the FLASK architecture to OpenSolaris. (The FLASK architecture that is the basis for SELinux.) Stephen Smalley will be one of the community leads. OSNews picked up the email thread today with [...]]]></description>
			<content:encoded><![CDATA[<p>In a major validation of the FLASK architecture, the OpenSolaris community has created a <a href="http://www.opensolaris.org/os/project/fmac/">new project</a> called <a href=" http://www.opensolaris.org/jive/thread.jspa?messageID=204568&#204568">Flexible Mandatory Access Control (fmac)</a> to adapt the FLASK architecture to OpenSolaris. (The FLASK architecture that is the basis for SELinux.) Stephen Smalley will be one of the community leads. <a href="http://www.osnews.com/thread?303491 ">OSNews</a> picked up the email thread today with some interesting comments. </p>
<p>James Morris notes related work in his <a href="http://james-morris.livejournal.com/2008/03/05/">blog posting from this morning</a> and offers to help the community preserve interoperability with SELinux. </p>
<p>Personally, I would be delighted to see widespread adoption of the FLASK architecture lead to usability improvements and complexity reduction across the board. </p>
<p>[1] <a href="http://www.opensolaris.org/os/project/fmac/">http://www.opensolaris.org/os/project/fmac/</a><br />
[2] <a href=" http://www.opensolaris.org/jive/thread.jspa?messageID=204568&#204568"> http://www.opensolaris.org/jive/thread.jspa?messageID=204568&#204568</a><br />
[3] <a href="http://www.osnews.com/thread?303491 ">http://www.osnews.com/thread?303491 </a><br />
[4] <a href="http://james-morris.livejournal.com/2008/03/05/">http://james-morris.livejournal.com/2008/03/05/</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.ratliff.net/blog/index.php/2008/03/05/so-would-you-call-it-sesolaris-seopensolaris/feed/</wfw:commentRss>
		</item>
		<item>
		<title>Not with a bang, but a whimper</title>
		<link>http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/</link>
		<comments>http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/#comments</comments>
		<pubDate>Fri, 15 Feb 2008 04:04:38 +0000</pubDate>
		<dc:creator>Emily Ratliff</dc:creator>
		
		<category><![CDATA[Planet LTC]]></category>

		<category><![CDATA[Products]]></category>

		<category><![CDATA[community]]></category>

		<category><![CDATA[open source]]></category>

		<guid isPermaLink="false">http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/</guid>
		<description><![CDATA[Roy Fielding[1] finally quit the OpenSolaris community today, see his resignation letter[2]. The kettle finally boiled over and the realization come to many (but not all) that Sun is publishing their Solaris code for marketing purposes, rather than creating an independent, community-led, open source project with the ability to make real decisions. 
It seemed so [...]]]></description>
			<content:encoded><![CDATA[<p><a href="http://en.wikipedia.org/wiki/Roy_Fielding">Roy Fielding</a>[1] finally quit the OpenSolaris community today, see <a href="http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004488.html">his resignation letter</a>[2]. The kettle finally boiled over and the realization come to many (but not all) that Sun is publishing their Solaris code for marketing purposes, rather than creating an independent, community-led, open source project with the ability to make real decisions. </p>
<p>It seemed so promising at first: &#8220;[T]hey made promises about it being an open development project. &#8230; Sun gave up its right to make arbitrary decisions regarding the phrase &#8216;OpenSolaris&#8217; as part of its public agreement with the community in the form of the Charter.  That was a self-imposed restriction in exchange for the benefits of community-driven development, freely made, and cannot be changed except in accordance with the charter itself (for example, by amending or dissolving the charter).&#8221; (excerpt from Roy Fielding&#8217;s resignation letter) But it was a sham: &#8220;The charter has therefore been violated. &#8230; Sun agreed that &#8216;OpenSolaris&#8217; would be governed by the community and yet has refused, in every step along the way, to cede any real control over the software produced or the way it is produced, and continues to make private decisions every day that are later promoted as decisions for this thing we call OpenSolaris.&#8221; (excerpt from Roy Fielding&#8217;s resignation letter)</p>
<p>To be fair, most developers recognized the community as a sham right away merely based on the copyright and patent assignments required by the contributors agreement[3]. To date, Sun has received 578 patches[4], which represents a rate of 0.6 patches a day (first patch dated 6/17/05, there were some earlier undated contributions). Linus gets more patches while he is brushing his teeth than OpenSolaris gets in a week. Despite Roy&#8217;s efforts to build a real community, contributing to OpenSolaris always has been and seemingly always will be, corporate welfare.</p>
<p>For me, the realization that Sun just doesn&#8217;t get it, and never will, was crystallized the day I was turned away from an OpenSolaris Users&#8217; Group meeting for refusing to sign an NDA. </p>
<p>It is a credit to the Solaris engineers that a few hearty souls want to soldier on amidst the wreckage: &#8220;Nonetheless I believe the time has come for a reboot and I am looking for other like-minded people to stand and form a full Board for positive change.&#8221;[5] And others who are even contemplating forking: &#8220;We will need to build out our infrastructure so that we can host development, mailing-lists and etc.. Once that is done, we will need to make the case to start moving development to the new organization/infrstructure. This will mean that even Sun employees will have to chose to move their development work to a community &#8216;controlled&#8217; development infrastructure.&#8221;[6] It is to them, that I dedicate the title.</p>
<p>[1] <a href="http://en.wikipedia.org/wiki/Roy_Fielding">http://en.wikipedia.org/wiki/Roy_Fielding</a><br />
[2] <a href="http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004488.html">http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004488.html</a><br />
[3] <a href="http://www.opensolaris.org/os/about/sun_contributor_agreement/">http://www.opensolaris.org/os/about/sun_contributor_agreement/</a><br />
[4]<a href="http://www.opensolaris.org/os/bug_reports/request_sponsor/">http://www.opensolaris.org/os/bug_reports/request_sponsor/</a><br />
[5] <a href="http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004487.html">http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004487.html</a> (Yes, the author of this email is a Sun employee.)<br />
[6] <a href="http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004477.html">http://mail.opensolaris.org/pipermail/ogb-discuss/2008-February/004477.html</a></p>
]]></content:encoded>
			<wfw:commentRss>http://www.ratliff.net/blog/index.php/2008/02/14/not-with-a-bang-but-a-whimper/feed/</wfw:commentRss>
		</item>
	</channel>
</rss>
