From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Michael S. Tsirkin" <mst@redhat.com>
Subject: Re: [Qemu-devel] KVM call agenda for 2014-04-28
Date: Tue, 29 Apr 2014 14:45:59 +0300
Message-ID: <20140429114559.GA17220@redhat.com>
References: <8738gxgary.fsf@elfo.mitica>
 <8761ltwjqt.fsf@blackfin.pond.sub.org>
 <20140429055124.GA12031@redhat.com>
 <CAFEAcA9jv5JxhGa+0pDhYC6JO9dACXGpWNNYm=-NMPtoxO7aVw@mail.gmail.com>
 <20140429100948.GB15521@redhat.com>
 <CAFEAcA-=f=3+Cbur2mxrh42-E8j_pexj3XacpGh-NmLbei-7jg@mail.gmail.com>
 <87oazktivd.fsf@blackfin.pond.sub.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: Peter Maydell <peter.maydell@linaro.org>,
	Juan Quintela <quintela@redhat.com>,
	KVM devel mailing list <kvm@vger.kernel.org>,
	qemu list <qemu-devel@nongnu.org>
To: Markus Armbruster <armbru@redhat.com>
Return-path: <kvm-owner@vger.kernel.org>
Received: from mx1.redhat.com ([209.132.183.28]:10893 "EHLO mx1.redhat.com"
	rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
	id S1750756AbaD2MpA (ORCPT <rfc822;kvm@vger.kernel.org>);
	Tue, 29 Apr 2014 08:45:00 -0400
Content-Disposition: inline
In-Reply-To: <87oazktivd.fsf@blackfin.pond.sub.org>
Sender: kvm-owner@vger.kernel.org
List-ID: <kvm.vger.kernel.org>

On Tue, Apr 29, 2014 at 02:33:58PM +0200, Markus Armbruster wrote:
> Peter Maydell <peter.maydell@linaro.org> writes:
> 
> > On 29 April 2014 11:09, Michael S. Tsirkin <mst@redhat.com> wrote:
> >> Let's just make clear how to contact us securely, when to contact that
> >> list, and what we'll do with the info.  I cobbled together the
> >> following:
> >> http://wiki.qemu.org/SecurityProcess
> >
> > Looks generally OK I guess. I'd drop the 'how to use pgp' section --
> > anybody who cares will already know how to send us PGP email.
> 
> The first paragraph under "How to Contact Us Securely" is fine, the rest
> seems redundant for readers familiar with PGP, yet hardly sufficient for
> the rest.
> 
> One thing I like about Libvirt's Security Process page[*] is they give
> an idea on embargo duration.
> 
> 
> [*] http://libvirt.org/securityprocess.html

I don't have an idea though. Do you?
Let's try the process for a while, see how well we manage
in practice.