Comment 7 for bug 523093

Revision history for this message
Tormod Volden (tormodvolden) wrote :

>The reporter of a sync request has gone through the process of building and testing the package and then requested the sync after he was sure that the package works (https://wiki.ubuntu.com/SyncRequestProcess).

Oh yes, I did all that :) Well, OK I can take the credit. But the changes file should have my launchpad ID then, and not any e-mail address, since I did not use any e-mail address to sign my work, but used the launchpad web interface.

Since I have one address registered in Launchpad which I also use publicly for signing source packages, I would not be worried if that one was picked, but what about those who file sync requests and do not have a public e-mail address?

If I understand it right, the sync process injects an e-mail address so that the result looks like a signed upload and hence can be attributed to a launchpad user using the same algorithm a signed upload would be. This is kind of a hack and IMO broken. Debian is e-mail address based and Ubuntu is launchpad ID based (except for archive uploads) but this sync process takes a bit from both and gets it wrong.

One solution is maybe to hide or throw away the changes files/information used for credit collection and then only publish ones where the e-mail address has been removed.

> This makes more sense than keeping the Debian uploader as they didn't change anything on Ubuntu.

OK, but then it is also a bit strange that I am not mentioned at all at the Ubuntu package page if I am the Debian uploader but not the maintainer, see for instance https://launchpad.net/ubuntu/+source/intel-gpu-tools/1.0.2-1 where I actually made the package. It looks like someone else made it, which borders to falsified attribution. Never mind that it is my work that made it possible to sync the package in the first place...