mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/xiang/erofs.git
synced 2026-10-30 22:03:17 +01:00
Willy Tarreau
a03ef333fb
The use of automated tools to find bugs in random locations of the kernel induces a raise of security reports even if most of them should just be reported as regular bugs. This patch is an attempt at drawing a line between what qualifies as a security bug and what does not, hoping to improve the situation and ease decision on the reporter's side. It defers the enumeration to a new file, threat-model.rst, that tries to enumerate various classes of issues that are and are not security bugs. This should permit to more easily update this file for various subsystem-specific rules without having to revisit the security bug reporting guide. Cc: Greg KH <[email protected]> Cc: Leon Romanovsky <[email protected]> Suggested-by: Leon Romanovsky <[email protected]> Suggested-by: Greg KH <[email protected]> Reviewed-by: Leon Romanovsky <[email protected]> Reviewed-by: Shuah Khan <[email protected]> Signed-off-by: Willy Tarreau <[email protected]> Reviewed-by: Greg Kroah-Hartman <[email protected]> Signed-off-by: Jonathan Corbet <[email protected]> Message-ID: <[email protected]>