potential security issue

potential security issue

[Ryan_Permeh]

I need a security maintainer contact to discuss a potential security
issue.  Due to the sensitive nature of the issue, I'd prefer to not
discuss this in an open list.  Please provide me with a PGP key.  I've
attached mine to ensure secure communications.  I am not a member of the
list, so please respond to me directly.

Ryan

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Desktop 9.7.0 (Build 1012)
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=Zpas
-----END PGP PUBLIC KEY BLOCK-----

Re: potential security issue

[Arjan van de Ven]

On Sun, 20 Apr 2008 22:12:01 -0700
<Ryan_Permeh@McAfee.com> wrote:

> I need a security maintainer contact to discuss a potential security
> issue.  Due to the sensitive nature of the issue, I'd prefer to not
> discuss this in an open list.  Please provide me with a PGP key.  I've
> attached mine to ensure secure communications.  I am not a member of
> the list, so please respond to me directly.


security@kernel.org works.
However, you should be aware that this is an open source project, so in general
people frown on the idea of keeping security issues secret for long periods of time.



> --
> To unsubscribe from this list: send the line "unsubscribe
> linux-kernel" in the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
> Please read the FAQ at  http://www.tux.org/lkml/


-- 
If you want to reach me at my work email, use arjan@linux.intel.com
For development, discussion and tips for power savings, 
visit http://www.lesswatts.org

Re: potential security issue

[Greg KH]

On Sun, Apr 20, 2008 at 10:12:01PM -0700, Ryan_Permeh@McAfee.com wrote:
> I need a security maintainer contact to discuss a potential security
> issue.  Due to the sensitive nature of the issue, I'd prefer to not
> discuss this in an open list.  Please provide me with a PGP key.  I've
> attached mine to ensure secure communications.  I am not a member of the
> list, so please respond to me directly.

See the file in the kernel tree, Documentation/SecurityBugs for
information on how to submit security related things, and who to send it
to (hint, security@kernel.org is the address).  That file also details
the conditions that the developers at that address follow (no long
disclosures, etc.)

thanks,

greg k-h