This is an automatic generated email to let you know that the following patch were queued at the http://git.linuxtv.org/cgit.cgi/v4l-utils.git tree:
Subject: Update README.md and add a SECURITY.md file Author: Mauro Carvalho Chehab <[email protected]> Date: Sat Mar 14 23:53:29 2026 +0100 As there are some recent changes at legislation on several Coutries with regards to usage and ID checks on software, add some notes about the intended audience and security issues report. Signed-off-by: Mauro Carvalho Chehab <[email protected]> README.md | 9 ++++++++ SECURITY.md | 70 +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 79 insertions(+) --- http://git.linuxtv.org/cgit.cgi/v4l-utils.git/commit/?id=1334451959beabc14eb4197b643a4c1711f5fa58 diff --git a/README.md b/README.md index fe893b166eaf..7cdf6399e8bb 100644 --- a/README.md +++ b/README.md @@ -16,6 +16,15 @@ information about the mailing list. There is also a wiki page for the v4l-utils: [https://linuxtv.org/wiki/index.php/V4l-utils](https://linuxtv.org/wiki/index.php/V4l-utils). +# Intended Audence + +This project provides general-purpose software components intended primarily +for integration, development, research, and infrastructure use by technical +users. + +The project is not offered as a consumer-facing online service or +managed platform. + ## Building v4l-utils uses the meson build system. diff --git a/SECURITY.md b/SECURITY.md new file mode 100644 index 000000000000..7d3ae40481f1 --- /dev/null +++ b/SECURITY.md @@ -0,0 +1,70 @@ +Security and Responsible Disclosure +=================================== + +Reporting Security Issues +------------------------- + +Security issues may be reported to this software maintainers. + +Reports should include sufficient technical detail to allow reproduction +and assessment of the issue. + +Please avoid public disclosure of suspected vulnerabilities until the +issue has been reviewed where possible. + +Project Role and Scope +---------------------- + +This project provides upstream source code and software artifacts for +general-purpose use. + +The maintainers distribute the software as development artifacts and +documentation only. The maintainers do not operate production +deployments, hosted services, or downstream distributions of this +software. + +Security Maintenance Model +-------------------------- + +Security review, patch development, and vulnerability remediation are +performed on a best-effort basis and may depend on community +contributions. + +The maintainers do not guarantee response times, security updates, or +continued maintenance of any particular version. + +Responsibilities of Distributors and Operators +---------------------------------------------- + +Entities that package, distribute, integrate, or deploy this software +are responsible for ensuring the security and compliance of their +deployments. + +This includes, but is not limited to: + +- monitoring for security advisories +- applying or backporting security patches +- validating fixes in their environments +- distributing updates to their users +- complying with applicable regulatory or operational requirements + +Distributors and operators should maintain their own security response +processes appropriate to their deployment environments. + +Supported Versions +------------------ + +Security fixes may be applied to actively maintained versions of the +project at the discretion of the maintainers. + +Versions outside active development may not receive updates. + +No Operational Control +---------------------- + +Because this project is distributed as standalone software and source +code, the maintainers do not control how the software is compiled, +packaged, deployed, or operated by third parties. + +Responsibility for the security and maintenance of deployed systems +remains with the parties operating or distributing the software. _______________________________________________ linuxtv-commits mailing list -- [email protected] To unsubscribe send an email to [email protected]
