HardenedBSD/LOCKS

$FreeBSD$

This file documents formal review/approval requirements that have been
approved by core.

subsystem       login   expires  notes
--------------------------------------

Special cases:
releng/*				Requires Security Officer approval.
head/sys/dev/random			Requires Security Officer approval.
head/sys/libkern/arc4random.c		Requires Security Officer approval.
stable/*/sys/dev/random			Requires Security Officer approval.
stable/*/sys/libkern/arc4random.c	Requires Security Officer approval.
Add a 'statement of intent' blurb to the top of MAINTAINERS. Split the role of MAINTAINERS into advisory and strict parts. Introduce a new LOCKS file to document enforced locked parts of the tree. Strict locks are only added with core approval and will generally have a renewal timeout. Clarify that the source tree is a community effort, not a place to stake out 'turf'. This will be refined as needed. With-core-hat-on: Yes 2005-06-02 23:28:33 +02:00			$FreeBSD$

			`This file documents formal review/approval requirements that have been`
			`approved by core.`

			`subsystem login expires notes`
			`--------------------------------------`

Document the previously existing RELENG_[45]_* security branch locks. Approved by: core (quite a while ago) 2005-06-03 00:57:30 +02:00			`Special cases:`
LOCKS: update current locks - use a wild card for releng instead of listing them out. This ignores a technicality that re@ owns the branches during release cycles, but this has not been document in this file in a long time (if ever). Approved by: core 2018-06-09 05:08:04 +02:00			`releng/* Requires Security Officer approval.`
Explicitly require Security Officer's approval for kernel PRNG bits. Note that there is ongoing discussion about approval requirement for userland PRNG bits. Reviewed by: so (des) Approved by: core (jhb) Approved by: re (gjb) 2013-09-17 16:19:05 +02:00			`head/sys/dev/random Requires Security Officer approval.`
			`head/sys/libkern/arc4random.c Requires Security Officer approval.`
			`stable/*/sys/dev/random Requires Security Officer approval.`
			`stable/*/sys/libkern/arc4random.c Requires Security Officer approval.`