Re: [Qemu-devel] [PATCH] Add git-publish profile for security bugs

[Gerd Hoffmann]

> > +# https://wiki.qemu.org/SecurityProcess
> > +[gitpublishprofile "security"]
> > +base = master
> > +to = address@hidden
> > +to = address@hidden
> > +to = address@hidden
> > +to = address@hidden
> > +to = address@hidden
> > +to = address@hidden
> > +suppresscc = all
> > 
> 
> Should we force inspect-emails = true here due to the nature of the
> security list? That way if we accidentally add extra CCs/etc there's a
> chance to review 'em.

That makes sense indeed.

> Also, should we update MAINTAINERS to match this script?
> 
> Responsible Disclosure, Reporting Security Issues
> -------------------------------------------------
> W: https://wiki.qemu.org/SecurityProcess
> M: Michael S. Tsirkin <address@hidden>
> L: address@hidden

Hmm, good question.  I took the list of addresses from the
SecurityProcess page.  Not sure why MAINTAINERS is not in sync even
though it links the page.  Is that intentional or just an oversight?

[ Cc'ing mst ]

cheers,
  Gerd