Meeting

• Who: SecurityTeam

• When: Mon Apr 15th 2013 16:30 UTC

• End: 17:00 UTC

• Where: #ubuntu-meeting on irc.freenode.net

• Chaired By: JamieStrandboge (jdstrand)

Attendance

• jdstrand
• mdeslaur
• sbeattie
• tyhicks
• jjohansen
• sarnold
• chrisccoulson

Not present

• None

Agenda

• Announcements
• Actions
• Weekly stand-up report (each member discusses any pending and planned future work for the week)
  • jdstrand
    • weekly role: community
    • requirements planning
    • performance reviews
    • audits (2 to finish)
    • embargoed updates
    • install audits
  • mdeslaur
    • weekly role: happy place
    • short week
    • pending updates
  • sbeattie
    • weekly role: happy place

    • AppArmor

      • demos - https://code.launchpad.net/~sbeattie/+junk/apparmor-examples

        • wrote some QML demos
        • writing more demos
        • mentioned putting automation around them. When is TBD
  • tyhicks
    • weekly role: happy place

    • AppArmor

      • wrapping up the DBus parser tests item
      • found some parser bugs and fixed those
      • make apparmor source package patches more easily digestible for sending to the list
  • jjohansen
    • weekly role: happy place

    • AppArmor

      • working on security-1304-appisolation-signals-ipc-ptrace on socket labelling
      • preparing for upstream kernel merge window (~20 patches that have been reviewed on the list (base code cleanups and bug fixes))
  • sarnold
    • weekly role: happy place
    • pending updates
    • possibly help jdstrand with audits
  • chrisccoulson
    • weekly role: happy place
    • fixed various firefox (global menu) and chromium-browser crashes (ARM)
    • continued with chromium-browser automated testing
• Highlighted packages

  The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:

  The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

• Miscellaneous and Questions

  12:01 < jdstrand> based on what was said in this meeting, I have a good feeling 
                    about progress for the month
  12:01 < jdstrand> however, if I look at 
  http://status.ubuntu.com/ubuntu-raring/canonical-security-ubuntu-13.04-month-6.html I have a less good feeling
  12:02 < jdstrand> so, I guess, now that we are 2 weeks in to this month, how 
                    are the work items going? Are we 50% done? are there problems

  • jjohansen - slightly behind, no cause for concern
  • sbeattie - on track
  • tyhicks - slightly behind, no cause for concern

Log

Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2013/ubuntu-meeting.2013-04-15-16.31.html