Re: [gentoo-security] Gentoo security policy

[Koon]

Koon wrote:

> OK, so the process (and groups in charge) is :
>
> - Vulnerability is found, posted on specific software announce lists
> and/or general purpose security-lists)
> - User A that reads these groups posts a bugzilla entry
> - Developer/User B submits corrective ebuild on bugzilla
> - Developer C tests/inserts ebuild in official ~tree(s)
> - Developer D pushes ebuild in official stable tree(s)
> - SecurityGuy E writes a GLSA
> - SecurityChief F approves GLSA for posting

Ops, too late, read latest Kurt post instead, it's way better than my 
alphabet.

-K

--
gentoo-security@g.o mailing list