linux-kernel - Re: [PATCH] docs: embargoed-hardware-issues: add embargoed HW contact for Samsung

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Mon, 23 Jan 2023 13:48:03 -0800
From:   Luis Chamberlain <mcgrof@...nel.org>
To:     Greg KH <gregkh@...uxfoundation.org>,
        Konstantin Ryabitsev <mricon@...nel.org>,
        Tom Lendacky <thomas.lendacky@....com>,
        Catalin Marinas <catalin.marinas@....com>,
        Anton Blanchard <anton@...ux.ibm.com>,
        Trilok Soni <tsoni@...eaurora.org>,
        James Morris <jamorris@...ux.microsoft.com>
Cc:     corbet@....net, javier.gonz@...sung.com, linux-doc@...r.kernel.org,
        a.manzanares@...sung.com, dave@...olabs.net,
        darren@...amperecomputing.com, catalin.marinas@....com,
        ndesaulniers@...gle.com, gost.dev@...sung.com,
        linux-kernel@...r.kernel.org,
        Luis Chamberlain <mcgrof.c@...sung.com>
Subject: Re: [PATCH] docs: embargoed-hardware-issues: add embargoed HW
 contact for Samsung

On Mon, Jan 23, 2023 at 07:54:34PM +0100, Greg KH wrote:
> On Mon, Jan 23, 2023 at 10:39:26AM -0800, Luis Chamberlain wrote:
> > After discussions internally at the company, Javier has been volunteered
> > and is willing to be the embargoed hardware contact for Samsung.
> > 
> > Cc: Javier González <javier.gonz@...sung.com>
> > Signed-off-by: Luis Chamberlain <mcgrof.c@...sung.com>
> > ---
> >  Documentation/process/embargoed-hardware-issues.rst | 1 +
> >  1 file changed, 1 insertion(+)
> > 
> > diff --git a/Documentation/process/embargoed-hardware-issues.rst b/Documentation/process/embargoed-hardware-issues.rst
> > index b6b4481e2474..fbb754253cf7 100644
> > --- a/Documentation/process/embargoed-hardware-issues.rst
> > +++ b/Documentation/process/embargoed-hardware-issues.rst
> > @@ -251,6 +251,7 @@ an involved disclosed party. The current ambassadors list:
> >    IBM Z		Christian Borntraeger <borntraeger@...ibm.com>
> >    Intel		Tony Luck <tony.luck@...el.com>
> >    Qualcomm	Trilok Soni <tsoni@...eaurora.org>
> > +  Samsung       Javier González <javier.gonz@...sung.com>
> 
> No tab?  :(

I'll send a fix on v2.

BTW while at it, it got me wondering, since most of the emails on
this hw embargo page are not required to have kernel.org accounts
not all of the folks on that page have a PGP key on the pgpkeys git
tree [0]. Today we constrain kernel.org accounts to folks that send
pull requests to Linus. Not all folks on the embargo list need to also
be active kernel developers. Given the issues reported before by Konstantin
on PGP keyservers we rely on our own git tree for keys we wish to get access
to in our community. The below email addresses do not have any PGP
key associated on the pgpkeys tree as of this day.

  * Tom Lendacky <thomas.lendacky@....com>
  * Catalin Marinas <catalin.marinas@....com>
  * Anton Blanchard <anton@...ux.ibm.com>
  * Trilok Soni <tsoni@...eaurora.org>
  * James Morris <jamorris@...ux.microsoft.com

So it occurs to me to perhaps modify pgpg keys documentation to welcome
community related keys to at least include folks like the above for the
hw embargo emails should communication via PGP be required. Thoughts?

[0] https://git.kernel.org/pub/scm/docs/kernel/pgpkeys.git

  Luis