Who gets on the linux-distros mailing list?

@corbet writes:

linux-distros is where vulnerabilities and fixes are discussed prior to public disclosure. Given the nature of the material discussed, it is unsurprising that membership is limited. I seriously doubt they would let me on it…

CIQ (Rocky Linux) would like to join. However, there has been some opposition to this membership, seemingly based on the ideas that (1) Rocky Linux isn’t doing much of the way of original distribution work, and (2) as a (relatively) community-oriented project, it lacks a way to keep secrets. This view is not universally held, though.

Meanwhile, openEuler also wants in. The concern here is potential legal issues related to openEuler’s Chinese origins.