20150504
|
Size: 2922
Comment:
|
← Revision 53 as of 2015-05-04 17:08:53 ⇥
Size: 2832
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| ## page was copied from MeetingLogs/Security/20150223 | ## page was copied from MeetingLogs/Security/20150427 ## page was copied from MeetingLogs/Security/20150420 |
| Line 4: | Line 6: |
| * '''When''': Mon Mar 2nd 2015 16:37 UTC * '''End''': 17:01 UTC |
* '''When''': Mon May 4th 2015 16:33 UTC * '''End''': 16:58 UTC |
| Line 7: | Line 9: |
| * '''Chaired By''': Tyler Hicks (tyhicks) | * '''Chaired By''': Jamie Strandboge (jdstrand) |
| Line 13: | Line 15: |
| * tyhicks | |
| Line 19: | Line 20: |
| * tyhicks | |
| Line 22: | Line 24: |
| * Andreas Cadhalpun (andreas-cadhalpun) provided a debdiff for vivid for ffmpeg (LP: #1436296) * Unit 193 (unit193) provided a debdiff for trusty and utopic for icecast2 (LP: #1449771) * Felix Geyer (debfx) provided debdiffs for trusty-vivid for pdns (LP: #1450037) |
|
| Line 24: | Line 29: |
| * updating the store review tools for snappy * helping with the oxide FFe and to coordinate some oxide work * team performance reviews * longer term design of snappy hardware access * discuss overlayfs and AppArmor in regards to snappy |
* attend UOS * seccomp SRU * seccomp policy regeneration on policy updates * ubuntu-core-security SRU * review tools updates for snaps |
| Line 30: | Line 35: |
| * short week * weekly role: happy place * pending updates * sbeattie |
|
| Line 31: | Line 40: |
| * patch piloting * ice updates * more security updates * sbeattie * weekly role: bug triage * fix the fix for bug 1422521 * testing gcc-5 packages that have pie by default set * AppArmor patch review * possible AppArmor 2.9.2 release * do a more investigation into how the apparmor init script is working with systemd |
* attend UOS * apparmor and rsyslog SRU * apparmor upload for wiley (will look at the recent Debian upload for that) * gcc pie testing (few more test rebuilds, then can proceed with benchnmarking) {{{#!wiki comment |
| Line 43: | Line 47: |
| * land fixes upstream, retest and publish ecryptfs-utils security updates * add the ability to check subfeatures and then send out v2 of the libapparmor API changes * restart work on AppArmor kernel keyring mediation for user data encryption |
* circle back to a number of things that were ignored during the ramp up to the Vivid release * finish kernel patches for AppArmor kernel keyring mediation }}} |
| Line 47: | Line 51: |
| * finish testing the fix for the failing fd inheritance tests on krillin (LP: #1423810) * triage bug 1425398 * push the current stack of bug fixes up to the kernel team * finish reviewing of the latest revision of the LSM stacking patches * review/discuss the libapparmor policy load api * sync up with jdstrand on overlayfs * AppArmor kernel cleanups and upstreaming |
* cleaning up the domain transition bits and hunting bugs, improving, extending or writing new regression tests around that |
| Line 55: | Line 53: |
| * weekly role: happy place * several MIRs at the server team's request |
* weekly role: triage * OpenStack security updates: still having issues with charms in testing lab, but working through them * attend UOS |
| Line 58: | Line 57: |
| * Thunderbird updates * possible Chromium and oxide updates * oxide bugs |
* short week * branch reviews (eg, camera) * media-permissions branch |
| Line 67: | Line 66: |
| Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-03-02-16.37.moin.txt | Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-05-04-16.38.moin.txt |
Meeting
Who: SecurityTeam
When: Mon May 4th 2015 16:33 UTC
End: 16:58 UTC
Where: #ubuntu-meeting on irc.freenode.net
Chaired By: Jamie Strandboge (jdstrand)
Attendance
- jdstrand
- mdeslaur
- sbeattie
- jjohansen
- sarnold
- chrisccoulson
Not present
- tyhicks
Agenda
- Announcements
- Andreas Cadhalpun (andreas-cadhalpun) provided a debdiff for vivid for ffmpeg (LP: #1436296)
- Unit 193 (unit193) provided a debdiff for trusty and utopic for icecast2 (LP: #1449771)
- Felix Geyer (debfx) provided debdiffs for trusty-vivid for pdns (LP: #1450037)
- Weekly stand-up report (each member discusses any pending and planned future work for the week)
- jdstrand
- attend UOS
- seccomp SRU
- seccomp policy regeneration on policy updates
- ubuntu-core-security SRU
- review tools updates for snaps
- mdeslaur
- short week
- weekly role: happy place
- pending updates
- sbeattie
- weekly role: community
- attend UOS
- apparmor and rsyslog SRU
- apparmor upload for wiley (will look at the recent Debian upload for that)
- gcc pie testing (few more test rebuilds, then can proceed with benchnmarking)
- jjohansen
- cleaning up the domain transition bits and hunting bugs, improving, extending or writing new regression tests around that
- sarnold
- weekly role: triage
OpenStack security updates: still having issues with charms in testing lab, but working through them
- attend UOS
- chriscoulson
- short week
- branch reviews (eg, camera)
- media-permissions branch
- jdstrand
- Highlighted packages
The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:
The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.
- Miscellaneous and Questions
Log
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-05-04-16.38.moin.txt
MeetingLogs/Security/20150504 (last edited 2015-05-04 17:08:53 by jdstrand)