From owner-freebsd-hackers@FreeBSD.ORG  Thu Mar 24 21:53:42 2005
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2619816A4CE
	for <freebsd-hackers@freebsd.org>;
	Thu, 24 Mar 2005 21:53:42 +0000 (GMT)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.200])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 8D4D243D5D
	for <freebsd-hackers@freebsd.org>;
	Thu, 24 Mar 2005 21:53:41 +0000 (GMT)
	(envelope-from christopher.hodgins@gmail.com)
Received: by wproxy.gmail.com with SMTP id 70so626925wra
	for <freebsd-hackers@freebsd.org>;
	Thu, 24 Mar 2005 13:53:41 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
	b=MXxHhn3HzIj84QKbTaRWD1qAi1PP34UPvcYIzOAwoGzpK2sZxs0du/f0DcVT2pSONBGBmloB5iBw3OjbDLiSFwqFtvI69gVJY6+WYrSsEJJFmGR36edvnojeKVhvPA874+F6eiKG9tOE6u5JqJOlLfdAFc8Bu3Y0dAH0VJUUSUo=
Received: by 10.54.99.6 with SMTP id w6mr551701wrb;
        Thu, 24 Mar 2005 13:53:41 -0800 (PST)
Received: by 10.54.82.13 with HTTP; Thu, 24 Mar 2005 13:53:41 -0800 (PST)
Message-ID: <63c3899e05032413533e1918a0@mail.gmail.com>
Date: Thu, 24 Mar 2005 21:53:41 +0000
From: Chris Hodgins <christopher.hodgins@gmail.com>
To: "M. Warner Losh" <imp@bsdimp.com>
In-Reply-To: <20050324.124848.99878199.imp@bsdimp.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
References: <200503230304.j2N34R97020359@vtn1.victoria.tc.ca>
	 <20050324.124848.99878199.imp@bsdimp.com>
cc: jnemeth@victoria.tc.ca
cc: freebsd-hackers@freebsd.org
Subject: Re: security or lack thereof
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: Chris Hodgins <christopher.hodgins@gmail.com>
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Mar 2005 21:53:42 -0000

On Thu, 24 Mar 2005 12:48:48 -0700 (MST), M. Warner Losh <imp@bsdimp.com> wrote:
> In message: <200503230304.j2N34R97020359@vtn1.victoria.tc.ca>
>             jnemeth@victoria.tc.ca (John Nemeth) writes:
> :      So, is it FreeBSD policy to ignore security bug reports?  I sent
> : the following bug report to security@freebsd.org on Feb. 19th, 2005 and
> : it still hasn't been acted on.  This total lack of action on an
> : extremely simple (and silly) three year old bug doesn't give one the
> : warm fuzzies.  Heck, it took 48 hours to get a response from a security
> : officer, and another 24 hours to get something from the guilty
> : developer.
> 
> You should learn to send it to the right place:
> security-officer@freebsd.org.
> 
> Warner

He did send it to the correct place.  Otherwise the documentation is wrong:

-------from http://www.freebsd.org/security/index.html-----------
All FreeBSD Security issues should be reported directly to the
Security Officer Team (security@FreeBSD.org) personally or otherwise
to the Security Officer (security-officer@FreeBSD.org).
-----------------------------------------------------------------------

Chris