Re: [PATCH v3 2/3] Documentation: security-bugs: explain what is and is not a security bug

Willy Tarreau <[email protected]> writes:

>> (While I was there, I noticed that threat-model.rst has no SPDX line;
>> what's your preference there?)
>
> I didn't notice any was needed, I tried to get inspiration from other
> files for the format (I'm still not familiar with the rst format
> though this time I could successfully install the tools).

In theory every file in the kernel tree is supposed to have one; many
documentation files lag a bit behind on that front, but we try...

> Same for
> the label at the top BTW, I just did what I found somewhere else,
> probably security-bugs.rst which is similar (no SPDX line and has a
> label). So regarding SPDX, I do not have any preference. If one is
> needed, let's pick what's used by default, I do not care, as long
> as it allows the doc to be published.

The top-of-file label got started somewhere and has been cargo-culted
extensively since then; it has proved hard to eradicate.

As for SPDX, the most common is the basic:

.. SPDX-License-Identifier: GPL-2.0

Thanks,

jon