From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <linux-kernel-owner+willy=40w.ods.org-S261376AbVARBDM@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id S261376AbVARBDM (ORCPT <rfc822;willy@w.ods.org>);
	Mon, 17 Jan 2005 20:03:12 -0500
Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261379AbVARBDM
	(ORCPT <rfc822;linux-kernel-outgoing>);
	Mon, 17 Jan 2005 20:03:12 -0500
Received: from [81.2.110.250] ([81.2.110.250]:37002 "EHLO lxorguk.ukuu.org.uk")
	by vger.kernel.org with ESMTP id S261376AbVARBDH (ORCPT
	<rfc822;linux-kernel@vger.kernel.org>);
	Mon, 17 Jan 2005 20:03:07 -0500
Subject: Re: Proper procedure for reporting possible security
	vulnerabilities?
From: Alan Cox <alan@lxorguk.ukuu.org.uk>
To: Chris Wright <chrisw@osdl.org>
Cc: Christoph Hellwig <hch@infradead.org>,
       Werner Almesberger <wa@almesberger.net>, Jesper Juhl <juhl-lkml@dif.dk>,
       Steve Bergman <steve@rueb.com>,
       Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
In-Reply-To: <20050117152607.K24171@build.pdx.osdl.net>
References: <41E2F6B3.9060008@rueb.com>
	 <Pine.LNX.4.61.0501102309270.2987@dragon.hygekrogen.localhost>
	 <20050110164001.Q469@build.pdx.osdl.net>
	 <Pine.LNX.4.61.0501111758290.3368@dragon.hygekrogen.localhost>
	 <1105461562.16168.46.camel@localhost.localdomain>
	 <Pine.LNX.4.61.0501111854120.3368@dragon.hygekrogen.localhost>
	 <20050111132905.N10567@build.pdx.osdl.net>
	 <20050117194919.A14107@almesberger.net>
	 <20050117145216.J24171@build.pdx.osdl.net>
	 <20050117232314.GB17616@infradead.org>
	 <20050117152607.K24171@build.pdx.osdl.net>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Message-Id: <1106006274.16119.123.camel@localhost.localdomain>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.4.6 (1.4.6-2) 
Date: Mon, 17 Jan 2005 23:57:58 +0000
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org

On Llu, 2005-01-17 at 23:26, Chris Wright wrote:
> * Christoph Hellwig (hch@infradead.org) wrote:
> > On Mon, Jan 17, 2005 at 02:52:16PM -0800, Chris Wright wrote:
> > > Yeah, "choose one, then put it here."  I've set up
> > > security@kernel.osdl.org.
> > 
> > Any chance we could have that @kernel.org or @vger.kernel.org?

@kernel.org would make a lot of sense given most other products/projects
are security@[projectsite] - security@mozilla.org etc