Re: [PATCH] docs: clarify security-bugs disclosure policy

Linus Torvalds writes: (Summary) We also don't explicitly disclose the discussion of the patches or the report, although part of it mayt obviously become more or less public for other reasons.
or less public for other reasons.
So we should probably avoid using a term that means something else to a lot of people.
a lot of people.
And for similar reasons, I don't think the fixed verbiage should use "coordinated disclosure" either, like in your patch. So I think it merits clarification, but maybe just specify the two things relevant to our disclosure: the fact that the patch and explanation for the patch gets made public (but not necessarily other effects), and that the timeframe is very limited.
effects), and that the timeframe is very limited.
It's not full disclosure, it's not coordinated disclosure, and it's not "no disclosure".
not "no disclosure".
It's more like just "timely open fixes".
It's more like just "timely open fixes".
Linus
Linus