From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ian Campbell Subject: [PATCH 2/6] Clarifications to predisclosure list subscription instructions Date: Thu, 23 Aug 2012 11:37:50 +0100 Message-ID: <1345718274-7900-2-git-send-email-ian.campbell@citrix.com> References: <1345718230.12501.79.camel@zakaz.uk.xensource.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1345718230.12501.79.camel@zakaz.uk.xensource.com> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-devel-bounces@lists.xen.org Errors-To: xen-devel-bounces@lists.xen.org To: xen-devel@lists.xen.org Cc: Ian Jackson , Ian Campbell List-Id: xen-devel@lists.xenproject.org Specially: * Mention that subscriptions via the webterface do not work / are not honoured. * Mention the preference for role addresses only. See <20448.49637.38489.246434@mariner.uk.xensource.com>, section "8. Predisclosure subscription process, and email address criteria" --- security_vulnerability_process.html | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/security_vulnerability_process.html b/security_vulnerability_process.html index eff108a..ee42402 100644 --- a/security_vulnerability_process.html +++ b/security_vulnerability_process.html @@ -206,7 +206,9 @@ if(ns4)_d.write("<\/scr
  • The planned disclosure date

    • -

    Organisations who meet the criteria should contact security@xen if they wish to receive pre-disclosure of advisories.

    +

    Organisations who meet the criteria should contact security@xen if they wish to receive pre-disclosure of advisories. Organisations should not request subscription via the mailing list web interface, any such subscription requests will be rejected and ignored.

    +

    Normally we would prefer that a role address be used for each organisation, rather than one or more individual's direct email address. This helps to ensure that changes of personel do not end up effectively dropping an organisation from the list

    +

    The pre-disclosure list will also receive copies of public advisories when they are first issued or updated.

    Organizations on the pre-disclosure list:

    -- 1.7.10.4