20170327
|
Size: 3651
Comment:
|
Size: 3322
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 2: | Line 2: |
| == Meeting (DRAFT) == | == Meeting == |
| Line 4: | Line 4: |
| * '''When''': Mon Feb 13th 2017 16:30 UTC * '''End''': 16:44 UTC |
* '''When''': Mon Feb 13th 2017 16:31 UTC * '''End''': 16:49 UTC |
| Line 12: | Line 12: |
| * sbeattie | |
| Line 20: | Line 19: |
| * None | * sbeattie |
| Line 29: | Line 28: |
| * store reviews * email/irc catchup from being off * gsetting mediation patch review |
|
| Line 31: | Line 33: |
| * console access * 'notion of trust' |
|
| Line 34: | Line 38: |
| * some misc review tools changes | |
| Line 37: | Line 40: |
| * close to publishing a webkit2gtk update but a regression was discovered * php5 updates |
|
| Line 38: | Line 43: |
| {{{#!wiki comment | |
| Line 41: | Line 47: |
| }}} | |
| Line 43: | Line 50: |
| * prepare !AppArmor SRU for bug 1661406 * upload !AppArmor 2.11.0 to zesty * must workaround an !AppArmor utils bug (LP: #Bug:1628286) first * followup on seccomp kernel patches * possibly finish off the work for libseccomp support * libvirt !AppArmor research around what it would take to dynamically update policy as disk image path changes |
* finish testing and submit seccomp logging kernel patchset v3 * check on !AppArmor Zesty upload (blocked by a perl update) * assist in landing the dconf/gsettings mediation * tcpdump updates (LP: #Bug:1662177) |
| Line 50: | Line 55: |
| * !AppArmor bugs * flock not mediated with 'k' (LP: #Bug:1658219) * disconnected path when using filesystem namespaces (LP: #Bug:1656121) * clean up and send xenial/yakkety !AppArmor patches to the kernel team * revise dconf/gsettings mediation patches after sync with desktop team * reply to tetsuo and finish kernel patch around !AppArmor data for a task |
* dconf/gsettings mediation * developing the !AppArmor policy notifaction interface * revising userspace patches as reviews come in |
| Line 57: | Line 59: |
| * maybe the changes to securityfs | |
| Line 63: | Line 64: |
| * oxide updates * firefox update * includes regression fix (LP: #Bug:1659922) * sponsor chromium-browser updates * firefox crashing on arm is causing FTBFS * firefox/gcc-4.9 on trusty isn't working |
* getting rustc working everywhere to be able to provide firefox updates * Mozilla is requiring a very new rustc version (1.15.1) to build firefox |
| Line 70: | Line 67: |
| * Add JS dialogs to !UbuntuWebView (LP: #Bug:1637195) | |
| Line 82: | Line 78: |
| Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-02-06-16.30.moin.txt | Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-02-13-16.31.moin.txt |
Meeting
Who: SecurityTeam
When: Mon Feb 13th 2017 16:31 UTC
End: 16:49 UTC
Where: #ubuntu-meeting on irc.freenode.net
Chaired By: Tyler Hicks (tyhicks)
Attendance
- jdstrand
- mdeslaur
- tyhicks
- jjohansen
- sarnold
- chrisccoulson
- ratliff
Not present
- sbeattie
Agenda
- Announcements
- Weekly stand-up report (each member discusses any pending and planned future work for the week)
- jdstrand
- store reviews
- email/irc catchup from being off
- gsetting mediation patch review
- snappy PR reviews
- many for Personal
- console access
- 'notion of trust'
- better leverage seccomp arg filtering in snappy confinement policy
- 6 PRs already submitted but more coming
- various other Snappy policy updates
- mdeslaur
- weekly role: CVE triage
- close to publishing a webkit2gtk update but a regression was discovered
- php5 updates
- security updates
- tyhicks
- weekly role: community
- finish testing and submit seccomp logging kernel patchset v3
check on AppArmor Zesty upload (blocked by a perl update)
- assist in landing the dconf/gsettings mediation
tcpdump updates (LP: #1662177)
- jjohansen
- dconf/gsettings mediation
developing the AppArmor policy notifaction interface
- revising userspace patches as reviews come in
preparing next batch of AppArmor kernel patches to upstream
- dconf/gsettings mediation
- sarnold
- weekly role: community
- finish up libapache2-mod-auth-mellon MIR
- pick up another MIR
ChrisCoulson
- getting rustc working everywhere to be able to provide firefox updates
- Mozilla is requiring a very new rustc version (1.15.1) to build firefox
https://blueprints.launchpad.net/oxide/+spec/ubuntu-webview-implementation
Add touch selection handles and quick menu to UbuntuWebView (LP: #1638852)
- getting rustc working everywhere to be able to provide firefox updates
- ratliff
- weekly role: bug triage
- security updates for ubuntu-core 15.04 and Touch
- jdstrand
- Highlighted packages
The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:
The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.
- Miscellaneous and Questions
- none
Log
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-02-13-16.31.moin.txt
MeetingLogs/Security/20170327 (last edited 2017-03-27 16:43:53 by tyhicks)