github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-09-23 13:14:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

docs: security-bugs: add a link to the threat-model documentation

Browse Source 
Rather than make readers search for this document, just a link to it where
it is referenced.

(While I was at it, I removed the unused and unneeded _threatmodel label
from the top of threat-model.rst).

Acked-by: Willy Tarreau <w@1wt.eu>
Reviewed-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Jonathan Corbet <corbet@lwn.net>
This commit is contained in:
Jonathan Corbet 2026-05-13 14:51:29 -06:00
parent 4bf85afb9f
commit 561458db0d
2 changed files with 7 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
Documentation/process/security-bugs.rst
View File

@ -191,12 +191,13 @@ handle:
Please **always convert your report to plain text** without any formatting Please **always convert your report to plain text** without any formatting
decorations before sending it. decorations before sending it.
* **Impact Evaluation**: Many AI-generated reports lack an understanding of * **Impact Evaluation**: Many AI-generated reports lack an understanding
the kernel's threat model and go to great lengths inventing theoretical of the kernel's threat model (see Documentation/process/threat-model.rst)
consequences. This adds noise and complicates triage. Please stick to and go to great lengths inventing theoretical consequences. This adds
verifiable facts (e.g., "this bug permits any user to gain CAP_NET_ADMIN") noise and complicates triage. Please stick to verifiable facts (e.g.,
without enumerating speculative implications. Have your tool read this "this bug permits any user to gain CAP_NET_ADMIN") without enumerating
documentation as part of the evaluation process. speculative implications. Have your tool read this documentation as
part of the evaluation process.
* **Reproducer**: AI-based tools are often capable of generating reproducers. * **Reproducer**: AI-based tools are often capable of generating reproducers.
Please always ensure your tool provides one and **test it thoroughly**. If Please always ensure your tool provides one and **test it thoroughly**. If

2
Documentation/process/threat-model.rst
View File

@ -1,5 +1,3 @@
.. _threatmodel:
The Linux Kernel threat model The Linux Kernel threat model
============================= =============================