Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 24 Mar 2005 21:53:41 +0000
From:      Chris Hodgins <christopher.hodgins@gmail.com>
To:        "M. Warner Losh" <imp@bsdimp.com>
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: security or lack thereof
Message-ID:  <63c3899e05032413533e1918a0@mail.gmail.com>
In-Reply-To: <20050324.124848.99878199.imp@bsdimp.com>
References:  <200503230304.j2N34R97020359@vtn1.victoria.tc.ca> <20050324.124848.99878199.imp@bsdimp.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 24 Mar 2005 12:48:48 -0700 (MST), M. Warner Losh <imp@bsdimp.com> wrote:
> In message: <200503230304.j2N34R97020359@vtn1.victoria.tc.ca>
>             jnemeth@victoria.tc.ca (John Nemeth) writes:
> :      So, is it FreeBSD policy to ignore security bug reports?  I sent
> : the following bug report to security@freebsd.org on Feb. 19th, 2005 and
> : it still hasn't been acted on.  This total lack of action on an
> : extremely simple (and silly) three year old bug doesn't give one the
> : warm fuzzies.  Heck, it took 48 hours to get a response from a security
> : officer, and another 24 hours to get something from the guilty
> : developer.
> 
> You should learn to send it to the right place:
> security-officer@freebsd.org.
> 
> Warner

He did send it to the correct place.  Otherwise the documentation is wrong:

-------from http://www.freebsd.org/security/index.html-----------
All FreeBSD Security issues should be reported directly to the
Security Officer Team (security@FreeBSD.org) personally or otherwise
to the Security Officer (security-officer@FreeBSD.org).
-----------------------------------------------------------------------

Chris



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?63c3899e05032413533e1918a0>