From ac422aa54537a10ed4757c7f16634e2d537f7ca5 Mon Sep 17 00:00:00 2001 From: Aleksa Sarai Date: Sat, 3 Dec 2016 18:54:53 +1100 Subject: [PATCH] *: add information about security mailing list Signed-off-by: Aleksa Sarai --- CONTRIBUTING.md | 7 +++++++ README.md | 7 ++++++- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 6f341f60..3b674cfc 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -1,5 +1,12 @@ ## Contribution Guidelines +### Security issues + +If you are reporting a security issue, do not create an issue or file a pull +request on GitHub. Instead, disclose the issue responsibly by sending an email +to security@opencontainers.org (which is inhabited only by the maintainers of +the various OCI projects). + ### Pull requests are always welcome We are always thrilled to receive pull requests, and do our best to diff --git a/README.md b/README.md index 6c6d1d45..37745ee6 100644 --- a/README.md +++ b/README.md @@ -12,9 +12,14 @@ This means that `runc` 1.0.0 should implement the 1.0 version of the specificati You can find official releases of `runc` on the [release](https://github.com/opencontainers/runc/releases) page. +### Security + +If you wish to report a security issue, please disclose the issue responsibly +to security@opencontainers.org. + ## Building -`runc` currently supports the Linux platform with various architecture support. +`runc` currently supports the Linux platform with various architecture support. It must be built with Go version 1.6 or higher in order for some features to function properly. In order to enable seccomp support you will need to install `libseccomp` on your platform.