> > +# https://wiki.qemu.org/SecurityProcess
> > +[gitpublishprofile "security"]
> > +base = master
> > +to = m...@redhat.com
> > +to = pmato...@redhat.com
> > +to = sstabell...@kernel.org
> > +to = secal...@redhat.com
> > +to = mdr...@linux.vnet.ibm.com
> > +to = p...@redhat.com
> > +suppresscc = all
> > 
> 
> Should we force inspect-emails = true here due to the nature of the
> security list? That way if we accidentally add extra CCs/etc there's a
> chance to review 'em.

That makes sense indeed.

> Also, should we update MAINTAINERS to match this script?
> 
> Responsible Disclosure, Reporting Security Issues
> -------------------------------------------------
> W: https://wiki.qemu.org/SecurityProcess
> M: Michael S. Tsirkin <m...@redhat.com>
> L: secal...@redhat.com

Hmm, good question.  I took the list of addresses from the
SecurityProcess page.  Not sure why MAINTAINERS is not in sync even
though it links the page.  Is that intentional or just an oversight?

[ Cc'ing mst ]

cheers,
  Gerd


Reply via email to