Return-Path: <linux-kernel-owner+willy=40w.ods.org@vger.kernel.org>
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
	id <S263930AbTCWVmy>; Sun, 23 Mar 2003 16:42:54 -0500
Received: (majordomo@vger.kernel.org) by vger.kernel.org
	id <S263934AbTCWVmP>; Sun, 23 Mar 2003 16:42:15 -0500
Received: from pc2-cwma1-4-cust86.swan.cable.ntl.com ([213.105.254.86]:43686
	"EHLO irongate.swansea.linux.org.uk") by vger.kernel.org with ESMTP
	id <S263930AbTCWVlq>; Sun, 23 Mar 2003 16:41:46 -0500
Subject: Re: Ptrace hole / Linux 2.2.25
From: Alan Cox <alan@lxorguk.ukuu.org.uk>
To: Florian Weimer <fw@deneb.enyo.de>
Cc: Linux Kernel Mailing List <linux-kernel@vger.kernel.org>
In-Reply-To: <87of41ah7y.fsf@deneb.enyo.de>
References: <20030323194012$6886@gated-at.bofh.it>
	 <20030323194014$66c3@gated-at.bofh.it>
	 <20030323195010$5026@gated-at.bofh.it>
	 <20030323195012$6f30@gated-at.bofh.it>
	 <20030323200029$737b@gated-at.bofh.it>
	 <20030323202005$2a74@gated-at.bofh.it> <87znnlakmc.fsf@deneb.enyo.de>
	 <1048458288.10712.78.camel@irongate.swansea.linux.org.uk>
	 <87of41ah7y.fsf@deneb.enyo.de>
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Organization: 
Message-Id: <1048460728.10712.85.camel@irongate.swansea.linux.org.uk>
Mime-Version: 1.0
X-Mailer: Ximian Evolution 1.2.2 (1.2.2-5) 
Date: 23 Mar 2003 23:05:29 +0000
Sender: linux-kernel-owner@vger.kernel.org
X-Mailing-List: linux-kernel@vger.kernel.org
Content-Length: 932
Lines: 20

On Sun, 2003-03-23 at 21:46, Florian Weimer wrote:
> Anyway, the current way security issues are handled will last a year,
> maybe two.  I'm not sure in which direction it will evolve, either far
> more anarchistic (unlikely), or completely regulated (very likely, I
> smell a lot of money down that road).

Some people would certainly like it that way, and there is certainly 
pressure from some governments to try and hide and censor security
information. 

The slight problem (in fact nonproblem is that most security hole
finders will simply not deal with such people). Vendor-sec gets a
measurable number of reports that specifically forbid their
redistribution to cert for example

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/