Re: [Predisclosure-applications] Addition to Canonical list

[Marc Deslauriers <marc.deslauriers@xxxxxxxxxxxxx>]

Hi Ian,

On 2015-11-03 07:46 AM, Ian Campbell wrote:
> On Mon, 2015-11-02 at 16:44 -0600, Marc Deslauriers wrote:
>> Hello,
> 
> Hi Marc,
> 
>> Could you please add Stefan Bader <stefan.bader@xxxxxxxxxxxxx> to the list of
>> Canonical employees subscribed to the predisclosure list?
> 
> Our policy[0] requires that only role addresses (e.g. security@) and not
> individuals be subscribed to the predisclosure, so I'm afraid this will not
> be directly possible.

Ah, yes, that makes sense. Apologies for not reading that more carefully before
making this request.

> 
> You could of course add Stefan to your existing security@ alias (which is
> currently subscribed). You could also ask for your existing security@
> subscription to be switched to a more specific alias (e.g. security-xen@)
> which can be delivered on your end to security@ + Stefan etc as you wish.

We have now created "security-xen@xxxxxxxxxx". Could you please replace our
existing "security@xxxxxxxxxx" subscription with the new one?

> 
>> He takes care of the Xen security updates in Ubuntu, and is aware of 
>> responsible
>> disclosure policies.
> 
> Thanks, this is of course something we would expect of anyone you added to
> any
> subscribed alias.
> 
> Ian.

Thanks!

Marc.



-- 
Marc Deslauriers
Ubuntu Security Engineer     | http://www.ubuntu.com/
Canonical Ltd.               | http://www.canonical.com/

_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications