On Tue, Jan 10, 2017 at 2:16 AM, Ingo Molnar <mi...@kernel.org> wrote: > > * Kees Cook <keesc...@chromium.org> wrote: > >> > [...] >> > Reported-by: Kees Cook <keesc...@chromium.org> >> >> I was just relaying a fix. I noted the original reporter in the first >> patch, how they asked to be credited: >> >> Reported-by: Di Shen (@returnsme) of KeenLab (@keen_lab), Tencent > > So while it's OK to not give an email address (unlike Signed-off-by the > Reported-by line is giving credit and has no code authorship legal effect), > I agree with Peter that this line is pretty weird, bordering on the ugly. > > If the reporter doesn't want the email address exposed we can just skip the > tag > and credit the reporter in the changelog: > > Di Shen reported that ...
Cleanest is probably just: Reported-by: Di Shen -Kees -- Kees Cook Nexus Security
