On 22 Jul 2008 at 21:27, Greg KH wrote:

quoted text
> >  2) Disclosure
> >  
> >  The goal of the Linux kernel security team is to work with the
> >  bug submitter to bug resolution as well as disclosure.  We prefer
> > -to fully disclose the bug as soon as possible.  It is reasonable to
> > +to not disclose the bug, since we believe any kind of bug deserves the
> > +same attention and will be quickly patched.  It is reasonable to
> 
> No, again, you are using the word "disclose" in an odd way here.
> 
> Of course the bug is "disclosed" in that it is made public, "here's a
> fix for foo breaking".

it's apparently not true when foo = "kernel's security model", hence the
suggested change to reflect reality.

--
unsubscribe notice
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/