From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=96.73.9.1; helo=muon.bluestop.org; envelope-from=rebecca@bluestop.org; receiver=edk2-devel@lists.01.org Received: from muon.bluestop.org (muon.bluestop.org [96.73.9.1]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ml01.01.org (Postfix) with ESMTPS id DDF3221A02937 for ; Wed, 28 Nov 2018 11:21:36 -0800 (PST) Received: from muon.bluestop.org (localhost [127.0.0.1]) by muon.bluestop.org (Postfix) with ESMTP id 66C8A3164F; Wed, 28 Nov 2018 12:22:23 -0700 (MST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=bluestop.org; s=mail; t=1543432943; bh=JHdLrk0Pv59YOm36YLX3LyS4VazwS9Ko6cVd4JgsFVQ=; h=From:To:Cc:Subject:Date:In-Reply-To:References:From; b=ryLm0+3pO8F9CMEQ1tOSbOr0529tMvaFG97eaUVKxzL5uaF740CBbi8kuC18qVqVy boZOflp+PxyJ/P1D4n6XaW3kRgnynfwQs297lXOJZe/KwNlwrJtZ7o/fnmd3ABWR4o tf4fGGbnhUyFAZWJqx5silzesZWgeqZnxRJ+JG2M= Received: from muon.bluestop.org ([127.0.0.1]) by muon.bluestop.org (muon.bluestop.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5bmFnAZqDvcl; Wed, 28 Nov 2018 12:22:23 -0700 (MST) Received: from photon.int.bluestop.org (gw.bluestop.org [96.73.9.3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by muon.bluestop.org (Postfix) with ESMTPSA; Wed, 28 Nov 2018 12:22:23 -0700 (MST) From: Rebecca Cran To: Jeremiah Cox Cc: "edk2-devel@lists.01.org" , "Knop, Ryszard" , stephano Date: Wed, 28 Nov 2018 12:21:35 -0700 Message-ID: <2979467.bT80LyP3VS@photon.int.bluestop.org> In-Reply-To: References: <4330857f-4e27-632f-6f82-6fc6ec636b2e@linux.intel.com> <5160554.8gLySxXtyI@photon.int.bluestop.org> MIME-Version: 1.0 Subject: Re: [edk2-announce] Research Request X-BeenThere: edk2-devel@lists.01.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: EDK II Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 28 Nov 2018 19:21:37 -0000 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="us-ascii" On Wednesday, 28 November 2018 11:19:33 MST Jeremiah Cox wrote: > There is a question of how the below is automated such that when there is a > security advisory, a Phabricator instance is patched in a timely fashion. > Perhaps there is a mailing list that would announce these and that could > trigger an auto-update script. I'm not sure most people would like installations to be automatically updated without at least reviewing what such a script was going to do. I agree someone would need to monitor for security advisories though, and schedule maintenance windows to update it. -- Rebecca