Subject: Re: Wondering about systrace
To: None <tech-security@netbsd.org>
From: Martin Weber <Ephaeton@gmx.net>
List: tech-security
Date: 05/12/2004 15:41:17
On Wed, May 12, 2004 at 09:15:57AM -0400, Thor Lancelot Simon wrote:
> I think there's some misunderstanding here.  We don't usually do security
> advisories for code that's not released; we fix the bug, and note the fix
> appropriately in the CVS revision log; if you're using -current, you're
> really supposed to keep an eye on source-changes, and so you'd see the
> message there.

Okay.

The miscommunication reflects badly on the NetBSD project though.
If e-matters was told that very paragraph above, I assume there
wouldn't be comments bugging netbsd users at the bottom of their
advisory (Disclosure Timeline).

> (...) Feel free to forward this message to Daemon-News if you like.

I suppose people from there are watching anyways :)

Regards,

-Martin