logoalt Hacker News

ghthoryesterday at 11:50 PM1 replyview on HN

Not sure the docker license supports calling distribution patches “unauthorized”


Replies

shykestoday at 12:08 AM

The trademark policy does.

In any case I meant it in an informal software engineering sense: it's bad form for a packager to distribute upstream software under its original name, with substantial modifications beyond what users would expect distro packagers to make - backporting, build rules, etc.

For such a downstream change to introduce security vulnerabilities is a major fuckup. To actively blame upstream for said vulnerability, while competing with them in the market, is unethical.