Package: debian-policy Severity: wishlist In the bug report 27823, someone reports uploading a binary-only NMU and sends a corresponding source code change to the bug system.
This is NOT ON, and is NOT ALLOWED according to the GPL, and ought to be prohibited by our policy. I hereby propose an amendment to the Debian Developers' Reference, s5.5 `Interim Releases': Before the paragraph `When someone other than ... version number ...', add: A non-maintainer upload (`NMU') MUST include the source code if any source code changes were made. If the NMU is for a new upstream version, the full source including upstream source archive(s) MUST be uploaded. Recompilation uploads (for platforms other than those whose binaries are supplied by the maintainer) which do not require source code changes MUST NOT include the source code. See <reference to section added below>. Replace: Maintainers other than the usual package maintainer should make as few changes to the package as possible, and they should always send a unified context diff (diff -u) detailing their changes to the bug tracking system properly flagged with the correct package so that the usual maintainer is kept aware of the situation. with: Uploaders other than the usual package maintainer SHOULD make as few changes to the package as possible. Their changes MUST be intended to work on every architecture. They MUST always send a unified context diff (diff -u) detailing their changes to the bug tracking system properly flagged with the correct package so that the usual maintainer is kept aware of the situation. Section 4.3 `Architectures' needs a complete rewrite, including details of binary-only porter NMUs. That'll want some discussion. Ian.