[PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[Stephen Smalley]

This key can be downloaded from https://github.com/stephensmalley.gpg
or
https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x578c4211832f0a7ea2c5a7c221a46e603f744ecf

Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
---
 SECURITY.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/SECURITY.md b/SECURITY.md
index 4f624f5d..2a7ce5b3 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -33,6 +33,8 @@ the issue as quickly as possible and shorten the disclosure window.
   *  (GPG fingerprint) 4568 1128 449B 65F8 80C6  1797 3A84 A946 B4BA 62AE
 * Paul Moore, paul@paul-moore.com
   *  (GPG fingerprint) 7100 AADF AE6E 6E94 0D2E  0AD6 55E4 5A5A E8CA 7C8A
+* Stephen Smalley, stephen.smalley.work@gmail.com
+  *  (GPG fingerprint) 578C 4211 832F 0A7E A2C5  A7C2 21A4 6E60 3F74 4ECF
 * Jason Zaman, perfinion@gentoo.org
   *  (GPG fingerprint) 6319 1CE9 4183 0986 89CA  B8DB 7EF1 37EC 935B 0EAF
 * Steve Lawrence, slawrence@tresys.com
-- 
2.50.1

Re: [PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[Paul Moore]

On Wed, Jul 23, 2025 at 2:27 PM Stephen Smalley
<stephen.smalley.work@gmail.com> wrote:
>
> This key can be downloaded from https://github.com/stephensmalley.gpg
> or
> https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x578c4211832f0a7ea2c5a7c221a46e603f744ecf
>
> Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
> ---
>  SECURITY.md | 2 ++
>  1 file changed, 2 insertions(+)

I have verified that the GPG key identified by the fingerprint in the
patch belongs to Stephen.

Acked-by: Paul Moore <paul@paul-moore.com>

-- 
paul-moore.com

Re: [PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[Stephen Smalley]

On Wed, Jul 23, 2025 at 10:14 PM Paul Moore <paul@paul-moore.com> wrote:
>
> On Wed, Jul 23, 2025 at 2:27 PM Stephen Smalley
> <stephen.smalley.work@gmail.com> wrote:
> >
> > This key can be downloaded from https://github.com/stephensmalley.gpg
> > or
> > https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x578c4211832f0a7ea2c5a7c221a46e603f744ecf
> >
> > Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
> > ---
> >  SECURITY.md | 2 ++
> >  1 file changed, 2 insertions(+)
>
> I have verified that the GPG key identified by the fingerprint in the
> patch belongs to Stephen.
>
> Acked-by: Paul Moore <paul@paul-moore.com>

Gentle nudge on this patch, since several others have verified and
signed my key, and I have uploaded the updated signed key to the
public key servers and to github.com/stephensmalley.gpg.

Re: [PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[Paul Moore]

On Mon, Aug 4, 2025 at 8:48 AM Stephen Smalley
<stephen.smalley.work@gmail.com> wrote:
> On Wed, Jul 23, 2025 at 10:14 PM Paul Moore <paul@paul-moore.com> wrote:
> > On Wed, Jul 23, 2025 at 2:27 PM Stephen Smalley
> > <stephen.smalley.work@gmail.com> wrote:
> > >
> > > This key can be downloaded from https://github.com/stephensmalley.gpg
> > > or
> > > https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x578c4211832f0a7ea2c5a7c221a46e603f744ecf
> > >
> > > Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
> > > ---
> > >  SECURITY.md | 2 ++
> > >  1 file changed, 2 insertions(+)
> >
> > I have verified that the GPG key identified by the fingerprint in the
> > patch belongs to Stephen.
> >
> > Acked-by: Paul Moore <paul@paul-moore.com>
>
> Gentle nudge on this patch, since several others have verified and
> signed my key, and I have uploaded the updated signed key to the
> public key servers and to github.com/stephensmalley.gpg.

Considering the nature of this patch, and the fact that there are
others who can verify Stephen's GPG fingerprint, I think it would be a
very good thing if a few more people who can verify the fingerprint
can ACK this patch.

-- 
paul-moore.com

Re: [PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[Petr Lautrbach]

Paul Moore <paul@paul-moore.com> writes:

> On Wed, Jul 23, 2025 at 2:27 PM Stephen Smalley
> <stephen.smalley.work@gmail.com> wrote:
>>
>> This key can be downloaded from https://github.com/stephensmalley.gpg
>> or
>> https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x578c4211832f0a7ea2c5a7c221a46e603f744ecf
>>
>> Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
>> ---
>>  SECURITY.md | 2 ++
>>  1 file changed, 2 insertions(+)
>
> I have verified that the GPG key identified by the fingerprint in the
> patch belongs to Stephen.
>
> Acked-by: Paul Moore <paul@paul-moore.com>
>

Acked-by: Petr Lautrbach <lautrbach@redhat.com>

Re: [PATCH userspace] SECURITY.md: add my email address and GPG key fingerprint

[Petr Lautrbach]

Petr Lautrbach <lautrbach@redhat.com> writes:

> Paul Moore <paul@paul-moore.com> writes:
>
>> On Wed, Jul 23, 2025 at 2:27 PM Stephen Smalley
>> <stephen.smalley.work@gmail.com> wrote:
>>>
>>> This key can be downloaded from https://github.com/stephensmalley.gpg
>>> or
>>> https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x578c4211832f0a7ea2c5a7c221a46e603f744ecf
>>>
>>> Signed-off-by: Stephen Smalley <stephen.smalley.work@gmail.com>
>>> ---
>>>  SECURITY.md | 2 ++
>>>  1 file changed, 2 insertions(+)
>>
>> I have verified that the GPG key identified by the fingerprint in the
>> patch belongs to Stephen.
>>
>> Acked-by: Paul Moore <paul@paul-moore.com>
>>
>
> Acked-by: Petr Lautrbach <lautrbach@redhat.com>

This is merged now.