Skip to contentSkip to conversation

git manpage: note [email protected]

PATCH In review Ævar Arnfjörð Bjarmason 2 participants 2 messages Mar 8, 2018 Documentation

lore
Share & tools
lore
#0 lore raw

PATCH 1/1 git manpage: note [email protected]

Add a mention of the security mailing list to the "Reporting Bugs" section. There's a mention of this list at
https://git-scm.com/community but none in git.git itself.

The copy is pasted from the git-scm.com website. Let's use the same wording in both places.

---
Someone at Git Merge mentioned that our own docs have no mention of how to report security issues. Perhaps this should be in SubmittingPatches too, but I couldn't figure out how that magical footnote format works.

 Documentation/git.txt | 3 +++
 1 file changed, 3 insertions(+)
Documentation/git.txt +3 -0
index 8163b5796b..4767860e72 100644
@@ -849,6 +849,9 @@ Report bugs to the Git mailing list <[email protected]> where the
 development and maintenance is primarily done.  You do not have to be
 subscribed to the list to send a message there.
 
+Issues which are security relevant should be disclosed privately to
+the Git Security mailing list <[email protected]>.
+
 SEE ALSO
 --------
 linkgit:gittutorial[7], linkgit:gittutorial-2[7],
Signature · 1 line
2.15.1.424.g9478a66081
#1 lore raw
Quoted 3 lines · Ævar Arnfjörð Bjarmason

Add a mention of the security mailing list to the "Reporting Bugs" section. There's a mention of this list at
https://git-scm.com/community but none in git.git itself.

This is quite a sensible thing to do.

Quoted 10 lines

The copy is pasted from the git-scm.com website. Let's use the same wording in both places.

---
Someone at Git Merge mentioned that our own docs have no mention of how to report security issues. Perhaps this should be in SubmittingPatches too, but I couldn't figure out how that magical footnote format works.

The "Notes from the maintainer" posted periodically here for developers does mention it, and I do agree with you that SubmittingPatches is a good place to add it, as it is a document that is targetted more towards developers. But this is a good first step.

Will queue.

Quoted 18 lines
 Documentation/git.txt | 3 +++
 1 file changed, 3 insertions(+)
Documentation/git.txt +3 -0
index 8163b5796b..4767860e72 100644
@@ -849,6 +849,9 @@ Report bugs to the Git mailing list <[email protected]> where the
 development and maintenance is primarily done.  You do not have to be
 subscribed to the list to send a message there.
 
+Issues which are security relevant should be disclosed privately to
+the Git Security mailing list <[email protected]>.
+
 SEE ALSO
 --------
 linkgit:gittutorial[7], linkgit:gittutorial-2[7],