A two-line comment about “various compliance requirements” spurred questions about sanctions policy and procedure on the Linux kernel mailing list.