oss-sec mailing list archives

Re: Closed list


From: Michael Gilbert <michael.s.gilbert () gmail com>
Date: Tue, 12 Apr 2011 19:43:23 -0400

akuster wrote:
So publicly available advisories are a requirement.  What about access
to the patches?

Is there somewhere I can point my management to that defines these new
requirements or is this too soon?

I think it may be more productive for you to propose your method of
participation, and let the community decide.  You can use
redhat/debian/ubuntu as (mostly ideal) models of participation.

Best wishes,
Mike


Current thread: