From: Andrew Bartlett <abartlet@samba.org>
Date: Thu, 5 Sep 2019 03:48:53 +0000 (+1200)
Subject: Create SECURITY.md
X-Git-Tag: talloc-2.3.1~943
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f5a51061470dda55de04555f7e4dbd1058a1f3c4;p=thirdparty%2Fsamba.git

Create SECURITY.md

This file location is shown under "Security -> Policy" on GitHub
and helps ensure people with a need to report a security issue
find us the right way.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Uri Simchoni <uri@samba.org>
Reviewed-by: David Disseldorp <ddiss@samba.org>

Autobuild-User(master): Andrew Bartlett <abartlet@samba.org>
Autobuild-Date(master): Mon Sep  9 21:13:35 UTC 2019 on sn-devel-184
---

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000000..5d3c88c722b
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,15 @@
+# Security Policy
+
+## Supported Versions
+
+See https://wiki.samba.org/index.php/Samba_Release_Planning for a
+matrix showing the currently supported versions of Samba.
+
+## Reporting a Vulnerability
+
+Please report all security issues or defects to security@samba.org and **never** on IRC, public mailing lists or in Bugzilla!
+
+Once reported and if warrented by the specific issue, the Samba Team
+will follow the process outlined in
+https://wiki.samba.org/index.php/Samba_Security_Process to produce a
+security release.