[PATCH] MAINTAINERS: Add security docs to SECURITY CONTACT

[PATCH] MAINTAINERS: Add security docs to SECURITY CONTACT

[Krzysztof Kozlowski]

When changing the documents related to kernel security workflow, notify
the security mailing list as its concerned by this.

Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
---
 MAINTAINERS | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/MAINTAINERS b/MAINTAINERS
index 8107b3d5d6df..a1e07d0f3205 100644
--- a/MAINTAINERS
+++ b/MAINTAINERS
@@ -15620,6 +15620,8 @@ F:	include/uapi/linux/sed*
 
 SECURITY CONTACT
 M:	Security Officers <security@kernel.org>
+F:	Documentation/admin-guide/security-bugs.rst
+F:	Documentation/process/embargoed-hardware-issues.rst
 S:	Supported
 
 SECURITY SUBSYSTEM
-- 
2.17.1

Re: [PATCH] MAINTAINERS: Add security docs to SECURITY CONTACT

[Greg Kroah-Hartman]

On Thu, Aug 27, 2020 at 03:13:30PM +0200, Krzysztof Kozlowski wrote:
> When changing the documents related to kernel security workflow, notify
> the security mailing list as its concerned by this.
> 
> Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
> Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
> ---
>  MAINTAINERS | 2 ++
>  1 file changed, 2 insertions(+)
> 
> diff --git a/MAINTAINERS b/MAINTAINERS
> index 8107b3d5d6df..a1e07d0f3205 100644
> --- a/MAINTAINERS
> +++ b/MAINTAINERS
> @@ -15620,6 +15620,8 @@ F:	include/uapi/linux/sed*
>  
>  SECURITY CONTACT
>  M:	Security Officers <security@kernel.org>
> +F:	Documentation/admin-guide/security-bugs.rst
> +F:	Documentation/process/embargoed-hardware-issues.rst

The hardware-issues document is "owned" by a different group of
suckers^Wdevelopers, that is independant of security@k.o, so that file
shouldn't be added to them here.

thanks,

greg k-h

Re: [PATCH] MAINTAINERS: Add security docs to SECURITY CONTACT

[Krzysztof Kozlowski]

On Thu, Aug 27, 2020 at 03:18:27PM +0200, Greg Kroah-Hartman wrote:
> On Thu, Aug 27, 2020 at 03:13:30PM +0200, Krzysztof Kozlowski wrote:
> > When changing the documents related to kernel security workflow, notify
> > the security mailing list as its concerned by this.
> > 
> > Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
> > Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
> > ---
> >  MAINTAINERS | 2 ++
> >  1 file changed, 2 insertions(+)
> > 
> > diff --git a/MAINTAINERS b/MAINTAINERS
> > index 8107b3d5d6df..a1e07d0f3205 100644
> > --- a/MAINTAINERS
> > +++ b/MAINTAINERS
> > @@ -15620,6 +15620,8 @@ F:	include/uapi/linux/sed*
> >  
> >  SECURITY CONTACT
> >  M:	Security Officers <security@kernel.org>
> > +F:	Documentation/admin-guide/security-bugs.rst
> > +F:	Documentation/process/embargoed-hardware-issues.rst
> 
> The hardware-issues document is "owned" by a different group of
> suckers^Wdevelopers, that is independant of security@k.o, so that file
> shouldn't be added to them here.

True, but isn't this broader security group involved in designing and
discussing the HW security process?

Best regards,
Krzysztof

Re: [PATCH] MAINTAINERS: Add security docs to SECURITY CONTACT

[Greg Kroah-Hartman]

On Thu, Aug 27, 2020 at 03:20:16PM +0200, Krzysztof Kozlowski wrote:
> On Thu, Aug 27, 2020 at 03:18:27PM +0200, Greg Kroah-Hartman wrote:
> > On Thu, Aug 27, 2020 at 03:13:30PM +0200, Krzysztof Kozlowski wrote:
> > > When changing the documents related to kernel security workflow, notify
> > > the security mailing list as its concerned by this.
> > > 
> > > Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
> > > Signed-off-by: Krzysztof Kozlowski <krzk@kernel.org>
> > > ---
> > >  MAINTAINERS | 2 ++
> > >  1 file changed, 2 insertions(+)
> > > 
> > > diff --git a/MAINTAINERS b/MAINTAINERS
> > > index 8107b3d5d6df..a1e07d0f3205 100644
> > > --- a/MAINTAINERS
> > > +++ b/MAINTAINERS
> > > @@ -15620,6 +15620,8 @@ F:	include/uapi/linux/sed*
> > >  
> > >  SECURITY CONTACT
> > >  M:	Security Officers <security@kernel.org>
> > > +F:	Documentation/admin-guide/security-bugs.rst
> > > +F:	Documentation/process/embargoed-hardware-issues.rst
> > 
> > The hardware-issues document is "owned" by a different group of
> > suckers^Wdevelopers, that is independant of security@k.o, so that file
> > shouldn't be added to them here.
> 
> True, but isn't this broader security group involved in designing and
> discussing the HW security process?

While I think a number of the people did overlap, it was not everyone as
the processes are _VERY_ different for obvious reasons.

So please keep it separate for now.  There is a list of people who care
about this document, in the document itself, if anyone ever wants to
send changes to it.  No need to enumerate them all in the MAINTAINERS
file.

thanks,

greg k-h