Skip to content

Commit 97f9a3c

Browse files
committed
Merge tag 'char-misc-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc
Pull Documentation/process update from Greg KH: "Here are two small Documentation/process/embargoed-hardware-issues.rst file updates that missed my previous char/misc pull request. The first one adds an Intel representative for the process, and the second one cleans up the text a bit more when it comes to how the disclosure rules work, as it was a bit confusing to some companies" * tag 'char-misc-5.4-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc: Documentation/process: Clarify disclosure rules Documentation/process: Volunteer as the ambassador for Intel
2 parents 1eb80d6 + dc925a3 commit 97f9a3c

File tree

1 file changed

+34
-8
lines changed

1 file changed

+34
-8
lines changed

Documentation/process/embargoed-hardware-issues.rst

Lines changed: 34 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -143,6 +143,20 @@ via their employer, they cannot enter individual non-disclosure agreements
143143
in their role as Linux kernel developers. They will, however, agree to
144144
adhere to this documented process and the Memorandum of Understanding.
145145

146+
The disclosing party should provide a list of contacts for all other
147+
entities who have already been, or should be, informed about the issue.
148+
This serves several purposes:
149+
150+
- The list of disclosed entities allows communication accross the
151+
industry, e.g. other OS vendors, HW vendors, etc.
152+
153+
- The disclosed entities can be contacted to name experts who should
154+
participate in the mitigation development.
155+
156+
- If an expert which is required to handle an issue is employed by an
157+
listed entity or member of an listed entity, then the response teams can
158+
request the disclosure of that expert from that entity. This ensures
159+
that the expert is also part of the entity's response team.
146160

147161
Disclosure
148162
""""""""""
@@ -158,10 +172,7 @@ Mitigation development
158172
""""""""""""""""""""""
159173

160174
The initial response team sets up an encrypted mailing-list or repurposes
161-
an existing one if appropriate. The disclosing party should provide a list
162-
of contacts for all other parties who have already been, or should be,
163-
informed about the issue. The response team contacts these parties so they
164-
can name experts who should be subscribed to the mailing-list.
175+
an existing one if appropriate.
165176

166177
Using a mailing-list is close to the normal Linux development process and
167178
has been successfully used in developing mitigations for various hardware
@@ -175,9 +186,24 @@ development branch against the mainline kernel and backport branches for
175186
stable kernel versions as necessary.
176187

177188
The initial response team will identify further experts from the Linux
178-
kernel developer community as needed and inform the disclosing party about
179-
their participation. Bringing in experts can happen at any time of the
180-
development process and often needs to be handled in a timely manner.
189+
kernel developer community as needed. Bringing in experts can happen at any
190+
time of the development process and needs to be handled in a timely manner.
191+
192+
If an expert is employed by or member of an entity on the disclosure list
193+
provided by the disclosing party, then participation will be requested from
194+
the relevant entity.
195+
196+
If not, then the disclosing party will be informed about the experts
197+
participation. The experts are covered by the Memorandum of Understanding
198+
and the disclosing party is requested to acknowledge the participation. In
199+
case that the disclosing party has a compelling reason to object, then this
200+
objection has to be raised within five work days and resolved with the
201+
incident team immediately. If the disclosing party does not react within
202+
five work days this is taken as silent acknowledgement.
203+
204+
After acknowledgement or resolution of an objection the expert is disclosed
205+
by the incident team and brought into the development process.
206+
181207

182208
Coordinated release
183209
"""""""""""""""""""
@@ -216,7 +242,7 @@ an involved disclosed party. The current ambassadors list:
216242
ARM
217243
AMD
218244
IBM
219-
Intel
245+
Intel Tony Luck <[email protected]>
220246
Qualcomm Trilok Soni <[email protected]>
221247

222248
Microsoft Sasha Levin <[email protected]>

0 commit comments

Comments
 (0)