RE: [V5] [RFC] Adding a SECURITY policy for GDB

["Willgerodt, Felix" <felix.willgerodt@intel.com>]

> -----Original Message-----
> From: Andrew Burgess <aburgess@redhat.com>
> Sent: Montag, 8. April 2024 13:02
> To: gdb-patches@sourceware.org
> Cc: Siddhesh Poyarekar <siddhesh@redhat.com>; Kevin Buettner
> <kevinb@redhat.com>; Simon Marchi <simark@simark.ca>; Willgerodt, Felix
> <felix.willgerodt@intel.com>; Paul Koning <paulkoning@comcast.net>
> Subject: [V5] [RFC] Adding a SECURITY policy for GDB
> 
> 
> In V5:
> 
>   - Fixed a couple of minor typos that were pointed out by someone
>     off-list.
> 
> Any additional feedback would be great.
> 
> If there's no feedback, how would people feel about me merging this?  So
> long as the content is not objectionable then minor corrections or
> additions can be made via the normal patch process in the future.
> 
> I know I mentioned adding this text to the GDB manual previously, but I
> recall someone objected to that at the time.  Right now I'm thinking to
> add this as a standalone document, and possibly merge it into the manual
> later in the year.
> 
> Thoughts?
> 
> Thanks,
> Andrew

I find the text reasonable and am in favour of merging this and evolving it
from there if needed.

Having a SECURITY file in repos seems common practice nowadays.
Though having it in the manual also has its advantages, as there it is potentially
easier to find for users. Maybe we could reference the docs from the
SECURITY file? But I am ok with either places, having it at all is most
important.

Regards,
Felix


> Reporting Security Bugs
> -----------------------
> 
>   In order to report a private security bug that is not immediately
>   made public, please contact one of the downstream distributions with
>   security teams.  The following teams have volunteered to handle such
>   bugs:
> 
>      Red Hat: secalert@redhat.com
>      SUSE:    security@suse.de
> 

In case you wanted to align the two email addresses, they aren't quite
aligned.
Intel Deutschland GmbH
Registered Address: Am Campeon 10, 85579 Neubiberg, Germany
Tel: +49 89 99 8853-0, www.intel.de <http://www.intel.de>
Managing Directors: Christin Eisenschmid, Sharon Heck, Tiffany Doon Silva  
Chairperson of the Supervisory Board: Nicole Lau
Registered Office: Munich
Commercial Register: Amtsgericht Muenchen HRB 186928