Ping: Regressed XSA-286, was [xen-unstable test] 161917: regressions - FAIL

[Jan Beulich <jbeulich@suse.com>]

On 17.06.2021 15:05, Ian Jackson wrote:
> On to process:
> 
> Jan Beulich writes ("Re: Regressed XSA-286, was [xen-unstable test] 161917: regressions - FAIL"):
>> On 16.06.2021 17:43, Andrew Cooper wrote:
>>> I am very irritated that you have *twice* recently introduced security
>>> vulnerabilities by bypassing my reviews/objections on patches.
>>
>> I'm sorry, Andrew, but already in my original reply a month ago I did
>> express that I couldn't find any record of you having objected to the
>> changes. It doesn't help that you claim you've objected when you
>> really didn't (which is the impression I get from not finding anything,
>> and which also matches my recollection of what was discussed).
> 
> Andrew, can you provide references to your objections ?
> 
>> I don't think I know which 2nd instance you're referring to, and hence
>> I can't respond to that aspect.
> 
> And, likewise, references for this.
> 
>>> In the case of this revert specifically, I did get agreement on IRC
>>> before reverting.
>>
>> How can I know you did? You didn't even care to reply to my mail from
>> a month ago. And there was no reason to make an emergency out of this
>> and ask on irc. You could have sent mail just like is done for all
>> other normal bug fixes etc. Iirc I was on PTO at that time; it would
>> hence only have been fair to wait until my return.
> 
> I think it would be good practice to copy and paste relevant IRC
> discussions into email in this kind of situation.  That email also
> makes space to properly write down what you are doing, that you
> realise it is controversial, who you have consulted, and why you are
> going ahead.
> 
> I looked at one of the two disputed reverts in Xen,
> cb199cc7de987cfda4659fccf51059f210f6ad34, and it does not have any
> tags indicating approval by anyone else.
> 
> Andy, if you got agreement on IRC, who from ? [1]
> 
> Ian.
> 
> [1] This may well have included me.  I do not reliably record this
> kind of information in my wetware.  That is what we have computers
> for.

Another 11 days have passed without a reply to any of the questions
above. I find it generally inappropriate to try to have controversies
die out by simply not replying, but in a case like this one it is imo
extra bad to do so. In case it hasn't come through clearly before: My
primary goal is not to revert your revert. Instead I'd like want to be
given proper reasons, so I can fully understand parts I may have been
missing so far. But of course I also expect you to correct your views
in case the technical details speak against your original reasoning
(at which point undoing your change may indeed be the necessary
consequence).

And of course all technical aspects aside there remains the process
aspect of this whole situation.

Jan