Re: [edk2-devel] Soft Feature Freeze start date delays to 2020-08-24 for edk2-stable202008

["Laszlo Ersek" <lersek@redhat.com>]

Hi Jiewen,

On 08/26/20 03:19, Yao, Jiewen wrote:
> To clarify below:
> I just notice this one week delay. It impacts us.
>
>> https://edk2.groups.io/g/devel/message/64354
>> [PATCH v4 0/8] Need add a FSP binary measurement
>
> The SecurityPkg patches have not been approved yet, and Bret and
> Jiewen are still testing / discussing (as far as I understand):
> <https://edk2.groups.io/g/devel/message/64526>. Material for the next
> tag.
>
> [Jiewen] I think the security pkg is already approved by me and Jian
> (SecurityPkg maintainer) Bret also provides feedback that it looks
> good.

The series in question has three SecurityPkg patches:

  [PATCH v4 1/8] SecurityPkg/TcgEventLogRecordLib: add new lib for firmware measurement
  [PATCH v4 5/8] SecurityPkg/dsc: add FvEventLogRecordLib
  [PATCH v4 7/8] SecurityPkg/Tcg2: handle PRE HASH and LOG ONLY

As I'm writing this, *none* of the listed patches have any kind of
Reviewed-by or Acked-by, either included in the patches themselves, or
posted in response to them.

> I request to check in to stable202008, if possible.

We can do that only if (a) we extend the SFF deadline again, and (b)
each of the SecurityPkg patches receives at least an Acked-by from one
of the SecurityPkg maintainers, until the new deadline.

I'm certainly not against the idea. I don't mind if the release slips
some more; it's OK to say that we're not ready to release yet. The point
is, as long as we're doing more work for completing the release, we
should prolong the stabilization period as well (opportunity for people
to test).

Thanks,
Laszlo