Skip to contentSkip to conversation

CVE tracker: questions

cip-dev Agustin Benito Bethencourt 2 participants 2 messages Mar 20, 2019 – Mar 21, 2019

lore
Share & tools
lore
#0 lore raw

Hi Ben,

during the past face to face TSC meeting that took place in N?rnberg, there were two questions about the CVE tracker you have done that would need some more details from you that what I provided back then.

Is the CVE tracker in a state that can be used by CIP Members?

If it is, under which conditions? Does it work for any kernel or needs to be tuned?

Can we advertise the CVE tracker in the coming events in Japan in July?

I would like to add the following questions

Is this a work you plan to maintain in the coming future?

Would it be valuable to somehow keep the outcome of the tracker in Gitlab so we can keep track of the patches that require attention, so the Kernel Maintenance team can also get involved?

Would it work for -rt ?

Best Regards

Signature · 4 lines
Agust?n Benito Bethencourt
Principal Consultant
Codethink Ltd
We respect your privacy.   See https://www.codethink.co.uk/privacy.html
#1 lore raw
Quoted 7 lines · Agustin Benito Bethencourt

Hi Ben,

during the past face to face TSC meeting that took place in N?rnberg, there? were two questions about the CVE tracker you have done that would need some? more details from you that what I provided back then.

Is the CVE tracker in a state that can be used by CIP Members?

I think so, yes.

Quoted 2 lines

If it is, under which conditions? Does it work for any kernel or needs to be? tuned?

It currently only works for mainline and stable branches. I have an open issue to add support for CIP branches.

Quoted 1 line

Can we advertise the CVE tracker in the coming events in Japan in July?

That would be fine with me.

Quoted 3 lines

I would like to add the following questions

Is this a work you plan to maintain in the coming future?

So long as I'm working for CIP, yes.

Quoted 5 lines

Would it be valuable to somehow keep the outcome of the tracker in Gitlab so? we can keep track of the patches that require attention, so the Kernel? Maintenance team can also get involved?

Would it work for -rt ?

Not currently, no. If and when I add support for CIP branches, I expect -rt branches to be supportable in the same way.

Ben.

Signature · 3 lines
Ben Hutchings, Software Developer                ?        Codethink Ltd
https://www.codethink.co.uk/                 Dale House, 35 Dale Street
                                     Manchester, M1 2HF, United Kingdom