From mboxrd@z Thu Jan 1 00:00:00 1970
From: Ian Campbell
Subject: [PATCH 4/6] Discuss post-embargo disclosure of
potentially controversial private decisions
Date: Thu, 23 Aug 2012 11:37:52 +0100
Message-ID: <1345718274-7900-4-git-send-email-ian.campbell@citrix.com>
References: <1345718230.12501.79.camel@zakaz.uk.xensource.com>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Return-path:
In-Reply-To: <1345718230.12501.79.camel@zakaz.uk.xensource.com>
List-Unsubscribe: ,
List-Post:
List-Help:
List-Subscribe: ,
Sender: xen-devel-bounces@lists.xen.org
Errors-To: xen-devel-bounces@lists.xen.org
To: xen-devel@lists.xen.org
Cc: Ian Jackson , Ian Campbell
List-Id: xen-devel@lists.xenproject.org
See <20448.49637.38489.246434@mariner.uk.xensource.com>, section
"11. Transparency"
---
security_vulnerability_process.html | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/security_vulnerability_process.html b/security_vulnerability_process.html
index ddd88a1..687e452 100644
--- a/security_vulnerability_process.html
+++ b/security_vulnerability_process.html
@@ -147,6 +147,18 @@ if(ns4)_d.write("<\/scr
public advisory. This will also be sent to the pre-disclosure
list.
+
+ Post embargo transparency:
+ During an embargo period the Xen.org security response team may
+ be required to make potentially controverial decisions in private,
+ since they cannot confer with the community without breaking the
+ embargo. The security team will attempt to make such decisions
+ following the guidance of this document and where necessary their
+ own best judgement. Following the embargo period any such
+ decisions will be disclosed to the community in the interests of
+ transperency and to help provide guidance should a similar
+ decision be required in the future.
+
Embargo and disclosure schedule
--
1.7.10.4