Messages in this thread | | | Date | Mon, 4 May 2009 07:38:01 -0700 | From | Greg KH <> | Subject | Re: [PATCH] proc: avoid leaking eip, esp, or wchan to non-privileged processes (fwd) |
| |
On Sun, May 03, 2009 at 07:11:24PM -0600, Jake Edge wrote: > On Mon, 4 May 2009 09:27:29 +1000 (EST) James Morris wrote: > > This patch needs some review. > > Indeed. > > > Note that stable@kernel.org typically backport already-reviewed and > > applied patches. I think security@kernel.org is for reporting > > problems in a non-public way (whereas, this is already public > > knowledge). > > I realize (now :) that I didn't get this out to all of the right folks, > thanks for doing that. I didn't realize security@kernel.org was only > for non-public security problems, though. Maybe there needs to be a > 'security maintainer' separate from that list? Or maybe there is one > and I just didn't find that person in MAINTAINERS?
No, you did it correctly, as per Documentation/SecurityBugs.
And, from the MAINTAINERS file: SECURITY CONTACT P: Security Officers M: security@kernel.org S: Supported
thanks,
greg k-h
| |