Bug 14509 - Add security configuration documentation
Summary: Add security configuration documentation
Status: IN PROGRESS DOCUMENTATION
Alias: None
Product: Development Manual
Classification: Documentation
Component: development (show other bugs)
Version: 3.3
Hardware: x86 Multiple
: Medium+ normal
Target Milestone: 6.2 M4
Assignee: Antonin Godard
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2021-08-13 10:27 UTC by Michael Opdenacker
Modified: 2026-10-23 08:13 UTC (History)
6 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: Yes (doc changes required)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michael Opdenacker 2021-08-13 10:27:28 UTC
This follows a contribution proposal from Joseph Reynolds:
https://lists.yoctoproject.org/g/yocto-security/message/385
Comment 1 Randy MacLeod 2024-10-24 15:03:58 UTC
Bulk move of 5.1 M4 to 5.2 M2 as approved by AlexB.
Comment 2 Antonin Godard 2025-06-06 07:42:31 UTC
Bulk move of bugs I am assigned to from Milestone 5.2M4 to 5.3M1.
Comment 3 Antonin Godard 2026-01-06 15:35:58 UTC
I sent a patch to create "security manual" (the name was chosen this way to resemble other sections of the docs, such the reference manual, development task manual, etc.).

https://lore.kernel.org/r/20260106-security-manual-v1-0-500fe611a4d0@bootlin.com
Comment 4 Antonin Godard 2026-03-26 09:44:49 UTC
To give an update, the above patch was merged, and we now have a dedicated section in the documentation for this:
https://docs.yoctoproject.org/security-manual/index.html

The intent is to document security practices here, beginning with what we already had in the documentation, gathered here.

Now, creating a "security configuration" document is a good idea, but the scope of it is large, so I'd say we limit this section to what is actively maintained in OE-Core. Is there anything else we can document in this section that is supported by OE-Core?