Re:Making Debian Responsible For Its Actions
by JoachimSchipper on Tuesday September 28, 2010 @04:04PM
(#1737048)
No, it's not hard at all - I don't think it took me more than one minute to figure out. It is, however, an example of a gratuitous change.
With respect to the OpenSSL stuff, I'm not talking about the GPL license - I'm talking about http://www.debian.org/security/2008/dsa-1571, one of the most painful security issues in recent memory and caused by a meddling maintainer. (Certainly, the upstream team could have more clearly warned him, but without the maintainers changes everything would have worked just fine.)
I understand you spend a lot of your free time working for free, and I appreciate your good intentions and the good that Debian and Debian's developers have done (e.g. writing lots of man pages for programs that have none) - but I do think Debian has some really questionable sides as well.
If you need plain old Postfix, you just aptitude install postfix.
If you need LDAP support in your Postfix instance, you just aptitude install postfix-ldap.
Is it really that hard?
And regarding OpenSSL, the problem is not in Debian. Just check http://people.gnome.org/~markmc/openssl-and-the-gpl.html
OpenSSL always had a problematic license.