gian/incus-mirror
1
0
Fork 0
mirror of https://github.com/lxc/incus synced 2026-08-02 05:26:46 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

SECURITY: Update policy

Browse Source 
Signed-off-by: Stéphane Graber <stgraber@stgraber.org>
This commit is contained in:
Stéphane Graber 2023-08-29 23:35:59 -04:00
parent 8b704f2355
commit b44987598c
No known key found for this signature in database
GPG Key ID: C638974D64792D67
1 changed files with 7 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
SECURITY.md
View File

@ -3,14 +3,14 @@
## Supported versions ## Supported versions
<!-- Include start supported versions --> <!-- Include start supported versions -->
LXD has two types of releases: Incus has two types of releases:
- Monthly feature releases - Feature releases
- LTS releases - LTS releases
For feature releases, only the latest one is supported, and we usually For feature releases, only the latest one is supported, and we usually
don't do point releases. Instead, users are expected to wait until the don't do point releases. Instead, users are expected to wait until the
next monthly release. next release.
For LTS releases, we do periodic bugfix releases that include an For LTS releases, we do periodic bugfix releases that include an
accumulation of bugfixes from the feature releases. Such bugfix releases accumulation of bugfixes from the feature releases. Such bugfix releases
@ -26,11 +26,9 @@ This doesn't mean that we're not interested in preventing such escapes,
but we simply do not consider such containers to be root safe. but we simply do not consider such containers to be root safe.
Unprivileged container escapes are certainly something we'd consider a Unprivileged container escapes are certainly something we'd consider a
security issue, especially if somehow facilitated by LXD. security issue, especially if somehow facilitated by Incus.
## Ubuntu Security disclosure and embargo policy ## Reporting security issues
See the [Ubuntu Security disclosure and embargo Security issues can be reported by e-mail to security@linuxcontainers.org.
policy](https://ubuntu.com/security/disclosure-policy) for information Alternatively security issues can also be reported through Github at: https://github.com/lxc/incus/security/advisories/new
about how to contact the Ubuntu Security Team, what you can expect when
you contact us, and what we expect from you.