HardenedBSD/LOCKS

$FreeBSD$

This file documents formal review/approval requirements that have been
approved by core.

subsystem       login   expires  notes
--------------------------------------

Special cases:
releng/4.*	Requires Security Officer approval.
releng/5.*	Requires Security Officer approval.
releng/6.*	Requires Security Officer approval.
releng/7.*	Requires Security Officer approval.
releng/8.*	Requires Security Officer approval.
head/sys/dev/random			Requires Security Officer approval.
head/sys/libkern/arc4random.c		Requires Security Officer approval.
stable/*/sys/dev/random			Requires Security Officer approval.
stable/*/sys/libkern/arc4random.c	Requires Security Officer approval.
Add a 'statement of intent' blurb to the top of MAINTAINERS. Split the role of MAINTAINERS into advisory and strict parts. Introduce a new LOCKS file to document enforced locked parts of the tree. Strict locks are only added with core approval and will generally have a renewal timeout. Clarify that the source tree is a community effort, not a place to stake out 'turf'. This will be refined as needed. With-core-hat-on: Yes 2005-06-02 23:28:33 +02:00			$FreeBSD$

			`This file documents formal review/approval requirements that have been`
			`approved by core.`

			`subsystem login expires notes`
			`--------------------------------------`

Document the previously existing RELENG_[45]_* security branch locks. Approved by: core (quite a while ago) 2005-06-03 00:57:30 +02:00			`Special cases:`
Update LOCKS syntax. Approved by: core (implicit) 2008-06-05 21:47:58 +02:00			`releng/4.* Requires Security Officer approval.`
			`releng/5.* Requires Security Officer approval.`
			`releng/6.* Requires Security Officer approval.`
			`releng/7.* Requires Security Officer approval.`
Test commit to make sure commit mail works after moving the server. Approved by: core (implicit) 2012-12-29 17:03:23 +01:00			`releng/8.* Requires Security Officer approval.`
Explicitly require Security Officer's approval for kernel PRNG bits. Note that there is ongoing discussion about approval requirement for userland PRNG bits. Reviewed by: so (des) Approved by: core (jhb) Approved by: re (gjb) 2013-09-17 16:19:05 +02:00			`head/sys/dev/random Requires Security Officer approval.`
			`head/sys/libkern/arc4random.c Requires Security Officer approval.`
			`stable/*/sys/dev/random Requires Security Officer approval.`
			`stable/*/sys/libkern/arc4random.c Requires Security Officer approval.`