Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S261699AbVAMVjG (ORCPT ); Thu, 13 Jan 2005 16:39:06 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S261727AbVAMVeu (ORCPT ); Thu, 13 Jan 2005 16:34:50 -0500 Received: from fw.osdl.org ([65.172.181.6]:41110 "EHLO mail.osdl.org") by vger.kernel.org with ESMTP id S261715AbVAMVbv (ORCPT ); Thu, 13 Jan 2005 16:31:51 -0500 Date: Thu, 13 Jan 2005 13:31:19 -0800 (PST) From: Linus Torvalds To: Alan Cox cc: Chris Wright , akpm@osdl.org, marcelo.tosatti@cyclades.com, Linux Kernel Mailing List Subject: Re: security contact draft In-Reply-To: <1105647058.4624.134.camel@localhost.localdomain> Message-ID: References: <20050113125503.C469@build.pdx.osdl.net> <1105647058.4624.134.camel@localhost.localdomain> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1397 Lines: 33 On Thu, 13 Jan 2005, Alan Cox wrote: > > It's not documenting the stuff Linus seems to be talking about which is > a public list ? Or does Linus want both ? I see myself as pretty extreme when it comes to my approach to security. And I actually distrust extremes. I'm at one end of the spectrum, and vendor-sec is at the other (I'm not even counting the head-in-the-sand approach as part of the spectrum ;). Knowing that, I'd expect that most people are somewhere in between. Which to me implies that while what I personally _want_ is total openness, that's not necessarily what makes the most sense in real life. So I want to give people choice. I want to encourage openness. But hell, if we have a closed list with a declared short embargo that is known to not play games (ie clock starts ticking from original discovery, not from somebody elses embargo), that's good too. Let people vote with their feet. If vendor-sec ends up being where all the "important" things are discussed - so be it. We've not lost anything, and at worst a "kernel-security" list would be a way to discuss stuff that was already released by vendor-sec. Linus - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/