Bug 57752 - Create a mesa-security mailing list, make it the default assignee for mesa security bugs
Summary: Create a mesa-security mailing list, make it the default assignee for mesa se...
Status: RESOLVED INVALID
Alias: None
Product: freedesktop.org
Classification: Unclassified
Component: Mailing lists (show other bugs)
Version: unspecified
Hardware: Other All
: highest blocker
Assignee: fd.o Admin Massive
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-12-01 00:48 UTC by Benoit Jacob
Modified: 2019-02-16 14:18 UTC (History)
4 users (show)

See Also:
i915 platform:
i915 features:


Attachments

Description Benoit Jacob 2012-12-01 00:48:42 UTC
Please create a mesa-security mailing list. It should be private, and should only be read by core Mesa developers (not me!).

Ideally it should be the default assignee for Mesa security bugs. At least, the default assignee for Mesa security bugs should not be a public mailing list like it currently is.
Comment 1 Ian Romanick 2013-04-15 20:23:38 UTC
Sending information about security bugs to a PUBLIC MAILING LIST by default completely defeats the purpose of the "security bugs" feature.
Comment 2 Daniel Stone 2013-07-16 12:30:17 UTC
idr: X.Org has this with xorg-security, which is a private (invite-only) list with private archives.  Seems to have worked pretty well for us.
Comment 3 Daniel Stone 2015-09-18 10:35:01 UTC
idr: Think you could do something more helpful and provide, say, a list of people who should be on the list?
Comment 4 Daniel Stone 2016-03-29 11:11:18 UTC
Ping, anyone?
Comment 5 Brian Paul 2016-03-29 18:03:15 UTC
A private security list sounds OK to me but let's see if anyone else is still interested.  I'd like to be on list.
Comment 6 Daniel Stone 2018-03-09 16:26:19 UTC
Any luck getting a list of names? I guess at the moment it'd be at least Emil and jasuarez?
Comment 7 Daniel Stone 2019-02-16 14:18:35 UTC
Closing as incomplete. If someone ever actually wants this in future, they can reopen it.


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.