github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-09-23 22:14:03 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

Documentation: minor updates to the security contacts

Browse Source 
This clarifies the fact that the bug reporters must use a valid
e-mail address to send their report, and that the security team
assists developers working on a fix but doesn't always produce
fixes on its own.

Cc: Eric Dumazet <edumazet@google.com>
Cc: Greg KH <greg@kroah.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
Link: https://patch.msgid.link/20260403062018.31080-2-w@1wt.eu
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
Willy Tarreau 2026-04-03 08:20:16 +02:00 committed by Greg Kroah-Hartman
parent d78ceee1e6
commit f2b1cbef15
1 changed files with 7 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Documentation/process/security-bugs.rst
View File

@ -8,6 +8,10 @@ like to know when a security bug is found so that it can be fixed and
disclosed as quickly as possible. Please report security bugs to the disclosed as quickly as possible. Please report security bugs to the
Linux kernel security team. Linux kernel security team.
Reports are to be sent over e-mail exclusively. Please use a working e-mail
address, preferably the same that you want to appear in ``Reported-by`` tags
if any. If unsure, send your report to yourself first.
The security team and maintainers almost always require additional The security team and maintainers almost always require additional
information beyond what was initially provided in a report and rely on information beyond what was initially provided in a report and rely on
active and efficient collaboration with the reporter to perform further active and efficient collaboration with the reporter to perform further
@ -27,11 +31,9 @@ made public.
The Linux kernel security team can be contacted by email at The Linux kernel security team can be contacted by email at
<security@kernel.org>. This is a private list of security officers <security@kernel.org>. This is a private list of security officers
who will help verify the bug report and develop and release a fix. who will help verify the bug report and assist developers working on a fix.
If you already have a fix, please include it with your report, as It is possible that the security team will bring in extra help from area
that can speed up the process considerably. It is possible that the maintainers to understand and fix the security vulnerability.
security team will bring in extra help from area maintainers to
understand and fix the security vulnerability.
Please send **plain text** emails without attachments where possible. Please send **plain text** emails without attachments where possible.
It is much harder to have a context-quoted discussion about a complex It is much harder to have a context-quoted discussion about a complex