RE: [V5] [RFC] Adding a SECURITY policy for GDB

[Andrew Burgess <aburgess@redhat.com>]

"Willgerodt, Felix" <felix.willgerodt@intel.com> writes:

>> -----Original Message-----
>> From: Andrew Burgess <aburgess@redhat.com>
>> Sent: Montag, 8. April 2024 13:02
>> To: gdb-patches@sourceware.org
>> Cc: Siddhesh Poyarekar <siddhesh@redhat.com>; Kevin Buettner
>> <kevinb@redhat.com>; Simon Marchi <simark@simark.ca>; Willgerodt, Felix
>> <felix.willgerodt@intel.com>; Paul Koning <paulkoning@comcast.net>
>> Subject: [V5] [RFC] Adding a SECURITY policy for GDB
>> 
>> 
>> In V5:
>> 
>>   - Fixed a couple of minor typos that were pointed out by someone
>>     off-list.
>> 
>> Any additional feedback would be great.
>> 
>> If there's no feedback, how would people feel about me merging this?  So
>> long as the content is not objectionable then minor corrections or
>> additions can be made via the normal patch process in the future.
>> 
>> I know I mentioned adding this text to the GDB manual previously, but I
>> recall someone objected to that at the time.  Right now I'm thinking to
>> add this as a standalone document, and possibly merge it into the manual
>> later in the year.
>> 
>> Thoughts?
>> 
>> Thanks,
>> Andrew
>
> I find the text reasonable and am in favour of merging this and evolving it
> from there if needed.
>
> Having a SECURITY file in repos seems common practice nowadays.
> Though having it in the manual also has its advantages, as there it is potentially
> easier to find for users. Maybe we could reference the docs from the
> SECURITY file? But I am ok with either places, having it at all is most
> important.

Hi Felix,

I'm also think having this text in the manual might be a good thing.

When I mentioned this idea earlier in the thread there was some
disagreement though, so for now I've merged this as a text file; I'm
keen to get something in to the tree, then I can potentially move it
later on.

I'll work up a patch to move this into the manual and post it probably
after 15.1 branches.

Thanks,
Andrew