Skip to content

Commit 3a68841

Browse files
wtarreaugregkh
authored andcommitted
Documentation: smooth the text flow in the security bug reporting process
The text was presenting the team, the the e-mail address, then some of the expectations, then what form of e-mail is expected. By switching the e-mail paragraph two paragraphs later and dropping the "Contact" sub-section, we can have a more natural flow that presents the team, then its expectation, then how to best contribute, then where to send. And more importantly, it increases the chances that reporters have read the prerequisites before finding the e-mail address. Signed-off-by: Willy Tarreau <[email protected]> Reviewed-by: Kees Cook <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Greg Kroah-Hartman <[email protected]>
1 parent d49172b commit 3a68841

File tree

1 file changed

+8
-11
lines changed

1 file changed

+8
-11
lines changed

Documentation/process/security-bugs.rst

Lines changed: 8 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -8,17 +8,6 @@ like to know when a security bug is found so that it can be fixed and
88
disclosed as quickly as possible. Please report security bugs to the
99
Linux kernel security team.
1010

11-
Contact
12-
-------
13-
14-
The Linux kernel security team can be contacted by email at
15-
<[email protected]>. This is a private list of security officers
16-
who will help verify the bug report and develop and release a fix.
17-
If you already have a fix, please include it with your report, as
18-
that can speed up the process considerably. It is possible that the
19-
security team will bring in extra help from area maintainers to
20-
understand and fix the security vulnerability.
21-
2211
The security team and maintainers almost always require additional
2312
information beyond what was initially provided in a report and rely on
2413
active and efficient collaboration with the reporter to perform further
@@ -36,6 +25,14 @@ information is helpful. Any exploit code is very helpful and will not
3625
be released without consent from the reporter unless it has already been
3726
made public.
3827

28+
The Linux kernel security team can be contacted by email at
29+
<[email protected]>. This is a private list of security officers
30+
who will help verify the bug report and develop and release a fix.
31+
If you already have a fix, please include it with your report, as
32+
that can speed up the process considerably. It is possible that the
33+
security team will bring in extra help from area maintainers to
34+
understand and fix the security vulnerability.
35+
3936
Please send plain text emails without attachments where possible.
4037
It is much harder to have a context-quoted discussion about a complex
4138
issue if all the details are hidden away in attachments. Think of it like a

0 commit comments

Comments
 (0)