doc: add security advisory section in ACRN introduction website

Add survivability plan for ACRN Open source project.

Tracked-On: #2945
Signed-off-by: Yonghua Huang <yonghua.huang@intel.com>
This commit is contained in:
Yonghua Huang 2019-04-10 00:59:13 +08:00 committed by David Kinder
parent 3e19d62b9c
commit f1aa35a27c

View File

@ -64,6 +64,23 @@ ACRN support systems:
the Github issues system: https://github.com/projectacrn/acrn-hypervisor/issues. the Github issues system: https://github.com/projectacrn/acrn-hypervisor/issues.
You can browse through the reported issues and submit issues of your own. You can browse through the reported issues and submit issues of your own.
* **Reporting a Potential Security Vulnerability**: If you have discovered potential
security vulnerability in ACRN, please send an e-mail to secure@intel.com. For issues
related to Intel Products, please visit https://security-center.intel.com.
It is important to include the following details:
- The projects and versions affected
- Detailed description of the vulnerability
- Information on known exploits
Vulnerability information is extremely sensitive. Please encrypt all security vulnerability
reports using our `PGP key`_.
A member of the Intel Product Security Team will review your e-mail and contact you to
to collaborate on resolving the issue. For more information on how Intel works to resolve
security issues, see: `vulnerability handling guidelines`_.
* **Mailing List**: The `Project ACRN Development mailing list`_ is perhaps the most convenient * **Mailing List**: The `Project ACRN Development mailing list`_ is perhaps the most convenient
way to track developer discussions and to ask your own support questions to way to track developer discussions and to ask your own support questions to
the project ACRN community. There are also specific `ACRN mailing list the project ACRN community. There are also specific `ACRN mailing list
@ -78,5 +95,8 @@ ACRN support systems:
.. _Getting Started Guide: https://projectacrn.github.io/latest/getting_started/ .. _Getting Started Guide: https://projectacrn.github.io/latest/getting_started/
.. _Contribution Guide: https://projectacrn.github.io/latest/contribute.html .. _Contribution Guide: https://projectacrn.github.io/latest/contribute.html
.. _Project ACRN GitHub wiki: https://github.com/projectacrn/acrn-hypervisor/wiki .. _Project ACRN GitHub wiki: https://github.com/projectacrn/acrn-hypervisor/wiki
.. _PGP Key: https://www.intel.com/content/www/us/en/security-center/pgp-public-key.html
.. _vulnerability handling guidelines:
https://www.intel.com/content/www/us/en/security-center/vulnerability-handling-guidelines.html
.. _Project ACRN Development mailing list: https://lists.projectacrn.org/g/acrn-dev .. _Project ACRN Development mailing list: https://lists.projectacrn.org/g/acrn-dev
.. _ACRN mailing list subgroups: https://lists.projectacrn.org/g/main/subgroups .. _ACRN mailing list subgroups: https://lists.projectacrn.org/g/main/subgroups