[Qemu-devel] [PATCH v2] Add git-publish profile for security bugs

[Qemu-devel] [PATCH v2] Add git-publish profile for security bugs

[Gerd Hoffmann]

Simplifies sending security patches to all people listed in
https://wiki.qemu.org/SecurityProcess.  Should also make it
harder to send a copy to the mailing list by accident.

Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
---
 .gitpublish | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/.gitpublish b/.gitpublish
index a13f8c7c0ecd..01f8279fa840 100644
--- a/.gitpublish
+++ b/.gitpublish
@@ -49,3 +49,15 @@ base = master
 to = qemu-devel@nongnu.org
 cc = qemu-ppc@nongnu.org
 cccmd = scripts/get_maintainer.pl --noroles --norolestats --nogit --nogit-fallback 2>/dev/null
+
+# https://wiki.qemu.org/SecurityProcess
+[gitpublishprofile "security"]
+base = master
+to = mst@redhat.com
+to = pmatouse@redhat.com
+to = sstabellini@kernel.org
+to = secalert@redhat.com
+to = mdroth@linux.vnet.ibm.com
+to = pjp@redhat.com
+suppresscc = all
+inspect-emails = true
-- 
2.18.1

Re: [Qemu-devel] [PATCH v2] Add git-publish profile for security bugs

[John Snow]

On 8/13/19 5:07 AM, Gerd Hoffmann wrote:
> Simplifies sending security patches to all people listed in
> https://wiki.qemu.org/SecurityProcess.  Should also make it
> harder to send a copy to the mailing list by accident.
> 
> Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
> ---
>  .gitpublish | 12 ++++++++++++
>  1 file changed, 12 insertions(+)
> 
> diff --git a/.gitpublish b/.gitpublish
> index a13f8c7c0ecd..01f8279fa840 100644
> --- a/.gitpublish
> +++ b/.gitpublish
> @@ -49,3 +49,15 @@ base = master
>  to = qemu-devel@nongnu.org
>  cc = qemu-ppc@nongnu.org
>  cccmd = scripts/get_maintainer.pl --noroles --norolestats --nogit --nogit-fallback 2>/dev/null
> +
> +# https://wiki.qemu.org/SecurityProcess
> +[gitpublishprofile "security"]
> +base = master
> +to = mst@redhat.com
> +to = pmatouse@redhat.com
> +to = sstabellini@kernel.org
> +to = secalert@redhat.com
> +to = mdroth@linux.vnet.ibm.com
> +to = pjp@redhat.com
> +suppresscc = all
> +inspect-emails = true
> 

OK, but it still would be nice to have the MAINTAINERS file and this
config item cross-reference each other, especially because any changes
to our security policy should not leave hanging loose ends.

Re: [Qemu-devel] [PATCH v2] Add git-publish profile for security bugs

[Stefan Hajnoczi]

[-- Attachment #1: Type: text/plain, Size: 436 bytes --]

On Tue, Aug 13, 2019 at 11:07:27AM +0200, Gerd Hoffmann wrote:
> Simplifies sending security patches to all people listed in
> https://wiki.qemu.org/SecurityProcess.  Should also make it
> harder to send a copy to the mailing list by accident.
> 
> Signed-off-by: Gerd Hoffmann <kraxel@redhat.com>
> ---
>  .gitpublish | 12 ++++++++++++
>  1 file changed, 12 insertions(+)

Reviewed-by: Stefan Hajnoczi <stefanha@redhat.com>

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 488 bytes --]