diff options
| author | Sandrine Bailleux <sandrine.bailleux@arm.com> | 2020-08-12 10:52:32 +0200 |
|---|---|---|
| committer | Sandrine Bailleux <sandrine.bailleux@arm.com> | 2020-08-14 14:51:44 +0200 |
| commit | ecad5b8966dd098fdc37dc448d66841bc6148131 (patch) | |
| tree | f3112546d2ca279298341c0b2f867b13e4d0cc30 /docs/process | |
| parent | a88b3c296ab99fb7080de199a0b6291d2b44fceb (diff) | |
| download | platform_external_arm-trusted-firmware-ecad5b8966dd098fdc37dc448d66841bc6148131.tar.gz platform_external_arm-trusted-firmware-ecad5b8966dd098fdc37dc448d66841bc6148131.tar.bz2 platform_external_arm-trusted-firmware-ecad5b8966dd098fdc37dc448d66841bc6148131.zip | |
doc: Emphasize that security issues must not be reported as normal bugs
Change-Id: I43e452c9993a8608b20ec029562982f5dcf8e6b2
Signed-off-by: Sandrine Bailleux <sandrine.bailleux@arm.com>
Diffstat (limited to 'docs/process')
| -rw-r--r-- | docs/process/security.rst | 16 |
1 files changed, 9 insertions, 7 deletions
diff --git a/docs/process/security.rst b/docs/process/security.rst index 0d59e723c..a3b9971e4 100644 --- a/docs/process/security.rst +++ b/docs/process/security.rst @@ -20,13 +20,15 @@ Found a Security Issue? Although we try to keep TF-A secure, we can only do so with the help of the community of developers and security researchers. -If you think you have found a security vulnerability, please **do not** report -it in the `issue tracker`_ or on the `mailing list`_. Instead, please follow the -`TrustedFirmware.org security incident process`_. One of the goals of this -process is to ensure providers of products that use TF-A have a chance to -consider the implications of the vulnerability and its remedy before it is made -public. As such, please follow the disclosure plan outlined in the process. We -do our best to respond and fix any issues quickly. +.. warning:: + If you think you have found a security vulnerability, please **do not** + report it in the `issue tracker`_ or on the `mailing list`_. Instead, please + follow the `TrustedFirmware.org security incident process`_. + +One of the goals of this process is to ensure providers of products that use +TF-A have a chance to consider the implications of the vulnerability and its +remedy before it is made public. As such, please follow the disclosure plan +outlined in the process. We do our best to respond and fix any issues quickly. Afterwards, we encourage you to write-up your findings about the TF-A source code. |