Re: thoughts on kernel security issues

From: Chris Wright
Date: Wed Jan 12 2005 - 13:50:56 EST


* Linus Torvalds (torvalds@xxxxxxxx) wrote:
> On Wed, 12 Jan 2005, Chris Wright wrote:
> > This same discussion is taking place in a few forums. Are you opposed to
> > creating a security contact point for the kernel for people to contact
> > with potential security issues? This is standard operating procedure
> > for many projects and complies with RFPolicy.
>
> I wouldn't mind, and it sounds like a good thing to have. The _only_
> requirement that I have is that there be no stupid embargo on the list.
> Any list with a time limit (vendor-sec) I will not have anything to do
> with.

Right, I know you don't like the embargo stuff.

> If that means that you can get only the list by invitation-only, that's
> fine.

Opinions on where to set it up? vger, osdl, ...?

thanks,
-chris
--
Linux Security Modules http://lsm.immunix.org http://lsm.bkbits.net
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/