Meeting

• Who: SecurityTeam

• When: Mon Mar 18th 2013 18:00 UTC

• End: 18:30 UTC

• Where: #ubuntu-meeting on irc.freenode.net

• Chaired By: JamieStrandboge (jdstrand)

Attendance

• jdstrand
• mdeslaur
• sbeattie
• jjohansen
• sarnold
• chrisccoulson

Not present

• tyhicks

Agenda

• Announcements

  • chrisccoulson moved over to the security team as our browser security engineer. Chris has been a long-time friend to the security team as the Mozilla maintainer on the desktop team. Welcome Chris!

  • Thanks to Christian Kuersteiner (ckuerste) who provided a debdiff for precise for tinyproxy (LP: #1154502) and a debdiff for oneiric for tomcat7 (LP: #1115053). Your work is very much appreciated and will keep Ubuntu users secure. Great job!
  • Weekly stand-up report (each member discusses any pending and planned future
• work for the week)
  • jdstrand
    • weekly role: triage
      • nova
      • embargoed issues
      • audits
      • pending
  • mdeslaur
    • weekly role: community
    • pending
  • sbeattie
    • weekly role: happy place

      • AppArmor display manager work items

  • tyhicks
    • weekly role: happy place

    • AppArmor work items

  • jjohansen
    • weekly role: happy place

    • AppArmor

      • fix bug #1145234 (ptrace regression on lucid-security kernel)
      • cache loading issue
      • apparmor work items
  • sarnold
    • weekly role: happy place
    • systemd audit
    • lxc audit
  • chrisccoulson
    • weekly role: happy place
    • improve automated tests for chromium (like we've done with firefox)
• Highlighted packages

  The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:

  The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

• Miscellaneous and Questions
  • [ACTION] jdstrand to follow-up on potentially changing time of team meeting

Log

Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2013/ubuntu-meeting.2013-03-18-18.03.html