doc: lei-security: add a note about core dumps

[public-inbox.git] / Documentation / lei-security.pod

diff --git a/Documentation/lei-security.pod b/Documentation/lei-security.pod
index 8cbd8993456893b776087c7f68087f38c4243961..104bfb48a26cd4ffb5493ae02d8638a3f99f675c 100644 (file)
--- a/Documentation/lei-security.pod
+++ b/Documentation/lei-security.pod
@@ -64,6 +64,12 @@ public-facing L<public-inbox-daemon(8)> processes.  They may
 reside on shared storage and may be made world-readable to
 other users on the local system.
 
+=head1 CORE DUMPS
+
+In case any process crashes, a core dumps may contain passwords or
+contents of sensitive messages.  Please report these so they can be
+fixed (see L</CONTACT>).
+
 =head1 NETWORK ACCESS
 
 lei currently uses the L<curl(1)> and L<git(1)> executables in