linux-kernel - Re: [PATCH v2] docs: provide more details about security bug reporting

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <9a9d9d12-983a-c795-e22b-e0478e9dc557@infradead.org>
Date:   Mon, 13 Aug 2018 08:09:14 -0700
From:   Randy Dunlap <rdunlap@...radead.org>
To:     Willy Tarreau <w@....eu>,
        Linus Torvalds <torvalds@...ux-foundation.org>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH v2] docs: provide more details about security bug
 reporting

On 08/13/2018 12:38 AM, Willy Tarreau wrote:
> Hi Randy,
> 
> On Sun, Aug 12, 2018 at 09:14:29AM -0700, Randy Dunlap wrote:
>> I have a few corrections/comments below.
> 
> Thanks a lot, I've addressed them in the attached version. Linus,
> please take this one instead.
> 
> (...)
>> +Analysing a report takes a lot of time, and while sometimes it's
>> +better to conclude to a wrong alert because there is nothing to fix,
>>
>>        "to conclude to a wrong alert" needs some fixing, but I don't know what...
> 
> I changed this one to :
> 
>      "to conclude the report was a false alarm"


LGTM.  Thanks.

Acked-by: Randy Dunlap <rdunlap@...radead.org>

-- 
~Randy