Re: [PATCH] MAINTAINERS: Add security docs to SECURITY CONTACT

From: Krzysztof Kozlowski
Date: Thu Aug 27 2020 - 09:30:41 EST


On Thu, Aug 27, 2020 at 03:18:27PM +0200, Greg Kroah-Hartman wrote:
> On Thu, Aug 27, 2020 at 03:13:30PM +0200, Krzysztof Kozlowski wrote:
> > When changing the documents related to kernel security workflow, notify
> > the security mailing list as its concerned by this.
> >
> > Cc: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
> > Signed-off-by: Krzysztof Kozlowski <krzk@xxxxxxxxxx>
> > ---
> > MAINTAINERS | 2 ++
> > 1 file changed, 2 insertions(+)
> >
> > diff --git a/MAINTAINERS b/MAINTAINERS
> > index 8107b3d5d6df..a1e07d0f3205 100644
> > --- a/MAINTAINERS
> > +++ b/MAINTAINERS
> > @@ -15620,6 +15620,8 @@ F: include/uapi/linux/sed*
> >
> > SECURITY CONTACT
> > M: Security Officers <security@xxxxxxxxxx>
> > +F: Documentation/admin-guide/security-bugs.rst
> > +F: Documentation/process/embargoed-hardware-issues.rst
>
> The hardware-issues document is "owned" by a different group of
> suckers^Wdevelopers, that is independant of security@k.o, so that file
> shouldn't be added to them here.

True, but isn't this broader security group involved in designing and
discussing the HW security process?

Best regards,
Krzysztof