A big question that comes up then is where is the line draw? How big must one be to qualify for this?
There are tons of smaller-than-AWS/Azure/GCP/OCP but still huge hosting providers out there. On Sun, Oct 4, 2026 at 6:29 PM Jan Schaumann <[email protected]> wrote: > Hello, > > I was wondering whether it might make sense to > establish a disclosure list for cloud computing / > virtual private server hosting providers. > > The reason that I think this might make sense is that > not every cloud computing provider necessarily offers > their own OS / Linux distribution, and thus may not be > qualified for membership on distros@. > > At the same time there are vulnerabilities that > directly and significantly impact cloud computing > providers such that the internet would benefit from > them being able to mitigate prior to disclosure on > e.g., oss-security@. > > An obvious example might be disclosure of VM escapes, > which disproportionally impacts such service > providers. > > Another option might be to grant cloud computing > providers membership on distros@ even if they do not > offer their own custom Linux distribution. > > What do people think? > > -Jan > -- Jonathan Wright AlmaLinux OS Foundation Mattermost: chat <https://chat.almalinux.org/almalinux/messages/@jonathan>
