Re: [PATCH] Documentation/security-bugs: provide more information about linux-distros

2019-07-14 Thread Solar Designer
On Thu, Jul 11, 2019 at 04:35:00PM -0400, Sasha Levin wrote: > On Thu, Jul 11, 2019 at 06:09:21PM +0100, Will Deacon wrote: > >On Thu, Jul 11, 2019 at 07:07:32PM +0200, Greg KH wrote: > >>On Thu, Jul 11, 2019 at 12:36:37PM -0400, Sasha Levin wrote: > >>> Provide more information about how to intera

Re: [PATCH] Documentation/security-bugs: provide more information about linux-distros

2019-07-11 Thread Sasha Levin
On Thu, Jul 11, 2019 at 06:09:21PM +0100, Will Deacon wrote: On Thu, Jul 11, 2019 at 07:07:32PM +0200, Greg KH wrote: On Thu, Jul 11, 2019 at 12:36:37PM -0400, Sasha Levin wrote: > Provide more information about how to interact with the linux-distros > mailing list for disclosing security bugs.

Re: [PATCH] Documentation/security-bugs: provide more information about linux-distros

2019-07-11 Thread Will Deacon
On Thu, Jul 11, 2019 at 07:07:32PM +0200, Greg KH wrote: > On Thu, Jul 11, 2019 at 12:36:37PM -0400, Sasha Levin wrote: > > Provide more information about how to interact with the linux-distros > > mailing list for disclosing security bugs. > > > > First, clarify that the reporter must read and ac

Re: [PATCH] Documentation/security-bugs: provide more information about linux-distros

2019-07-11 Thread Greg KH
On Thu, Jul 11, 2019 at 12:36:37PM -0400, Sasha Levin wrote: > Provide more information about how to interact with the linux-distros > mailing list for disclosing security bugs. > > First, clarify that the reporter must read and accept the linux-distros > policies prior to sending a report. > > S

[PATCH] Documentation/security-bugs: provide more information about linux-distros

2019-07-11 Thread Sasha Levin
Provide more information about how to interact with the linux-distros mailing list for disclosing security bugs. First, clarify that the reporter must read and accept the linux-distros policies prior to sending a report. Second, clarify that the reported must provide a tentative public disclosure