In the original post, I took private to mean its own dedicated list... not that it'd be hidden from view from everyone. IMHO everything with Fedora should be in the open. Bugs should be reported upstream, so I dont see why there would need to be any confidential information dealt with by the SIG.
Security exploits for upstream applications shouldnt be dealt with upstream and not here with a Fedora SIG. There's no reason for exploit discussion of that nature unless its something Fedora has introduced, at which point it's relevant and should be public so users can be aware and address/mitigate any potential threat.
JT
Security exploits for upstream applications shouldnt be dealt with upstream and not here with a Fedora SIG. There's no reason for exploit discussion of that nature unless its something Fedora has introduced, at which point it's relevant and should be public so users can be aware and address/mitigate any potential threat.
JT
On Mon, Jun 19, 2023 at 5:49 PM Philip Wyett <philip.wyett@xxxxxxxxxxxx> wrote:
On Mon, 2023-06-19 at 23:39 +0200, Emmanuel Seyman wrote:
> * Philip Wyett [19/06/2023 22:20] :
> > Private mailing list? No part of this project should have private anything IMHO.
>
> Bug reports can explain security flaws and lead to exploits. They can
> also contain confidentiel information.
>
> I would suggest a private ml dedicated to bugs and a public one for
> everything else, IMHO.
>
> Emmanuel
>
Hi,
Any bug report that contains sensitive data (exploitable or not) and is deemed private, the
discussion should be done in that bug report.
Private ML is always a bad idea as much discussion tends to end up on it and the wider community is
excluded and I do not believe we are here to exclude.
Regards
Phil
--
*** Playing the game for the games own sake. ***
Associations:
* Debian Maintainer (DM)
* Fedora/EPEL Maintainer.
* Contributor member of the AlmaLinux foundation.
WWW: https://kathenas.org
Buy Me a Coffee: https://www.buymeacoffee.com/kathenasorg
Twitter: @kathenasorg
Instagram: @kathenasorg
IRC: kathenas
GPG: 724AA9B52F024C8B
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
_______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
