=== jussio1 is now known as jussi === doko__ is now known as doko [13:56] !dmb-ping [13:56] bdrung, cody-somerville, Laney, micahg, barry, tumbleweed, stgraber: DMB ping [13:56] meeting in four minutes [14:01] ok [14:01] cody-somerville: here? [14:01] #startmeeting [14:01] Meeting started Mon Aug 27 14:01:21 2012 UTC. The chair is Laney. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [14:01] Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired [14:01] who's here? [14:01] o/ [14:01] o/ [14:01] * bdrung is here, but ill. [14:01] o/ [14:02] is the agenda current? [14:02] * Laney is looking at http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-08-13-19.09.html and seeing things not on there [14:03] Laney: it is now :) [14:03] heh [14:03] #topic Review of action items === meetingology changed the topic of #ubuntu-meeting to: Review of action items [14:03] #subtopic micahg to document the zentyal packageset [14:03] pending? [14:03] yeah [14:03] #subtopic micahg to ping beuno regarding CC discussion on whether upload rights should confer membership [14:03] done - yokozar started it [14:04] we got some +1s - should be able to finish with this before the next meeting? [14:04] sounds likely [14:04] ok [14:04] yeah, if everyone could please respond (DMB members, myself included) [14:04] will someone get the CC to decide? [14:04] I'll +1 [14:05] well, the idea was we (DMB) decide and the CC only acts if we're deadlocked [14:05] oh, so we can just go ahead [14:05] AIUI at least :) [14:05] doesn't sound like we're deadlocked [14:05] sounds good [14:05] #subtopic stgraber to clean up coredev/motu duplicate package set rights [14:06] I think this was done as well [14:06] I also believe that to be the case [14:06] #subtopic stgraber to clean up coredev/motu duplicate package set rights [14:06] that's scott remnant fyi [14:06] oops [14:06] #subtopic remove scott from ubuntu-core-dev until he signs the CoC [14:06] & also done [14:07] #subtopic Laney (tumbleweed) to contact the uploaders of unused packagesets [14:07] I just pinged Luke about sugar [14:07] http://people.canonical.com/~stgraber/package_sets/quantal/ which other ones are a concern? [14:07] is unr used? [14:07] Which Scott? [14:07] I propose to contact the TB as owners to get rid of unr/netbook(/mobile?) [14:08] ScottK: not you :) [14:08] 27/08 15:06:34 that's scott remnant fyi [14:08] OK. [14:08] ScottK: keybuk [14:08] tumbleweed provided the critical part of the answer to my question. [14:08] cyphermox just said in #-desktop that networkmanager is unused [14:09] Laney: schooltool and mobile [14:09] #action laney to delete network-manager packageset [14:09] ACTION: laney to delete network-manager packageset [14:09] #action laney to contact menesis about schooltool packageset [14:09] ACTION: laney to contact menesis about schooltool packageset [14:09] #action laney to contact TB to see if netbook/unr/mobile packagesets are still needed [14:09] ACTION: laney to contact TB to see if netbook/unr/mobile packagesets are still needed [14:09] ok? [14:09] sounds good [14:10] #topic Per-Package Uploader application: Keng-Yu Lin === meetingology changed the topic of #ubuntu-meeting to: Per-Package Uploader application: Keng-Yu Lin [14:10] #link https://wiki.ubuntu.com/Keng-YuLin/PPU [14:10] kengyu: Hey, that's you ;-) [14:11] hello all. /wave [14:11] kengyu: Can you introduce yourself and your application please? [14:11] I am a Canonical employee; I work in the Hardware Enablement team, we are responsible for the Ubuntu preloads for OEMs. [14:12] I am from Taipei, Taiwan, and am also a Ubuntu user for long time. :-) [14:12] I am applying the PPU for fwts... [14:13] Can you quickly explain for the laymen here what fwts is about? [14:13] because it is part of HWE team's project, and we offer the software for a various uses (certification, OEM, UEFI plugfest, etc). [14:14] it's suite of tests focusing on BIOS (or firmware in others words) and UEFI hardware (we are still working on this). [14:15] kengyu: what does fwts stand for? [14:15] "FirmWare Test Suite" [14:16] the current tests fwts has in documented in https://wiki.ubuntu.com/Kernel/Reference/fwts [14:18] kengyu: I noticed in https://launchpad.net/ubuntu/+source/fwts/0.24.21 you switched from dh-autoreconf to autoreconf, could you please explain why that was done? [14:19] it's just because that Lucid does not have dh-autoreconf and Lucid was the LTS at that time, so I decided to keep the latest code working on Lucid. [14:22] kengyu: were you aware that dh-autoreconf did more than just the configure step? [14:24] kengyu: also, since I assume you weren't uploading to the archive, dh-autoreconf was available in lucid-backports [14:27] micahg, I think dh-autoreconf does not cleaning work. But my original intention was not to "revert" the use of dh-autoreconf and use hand-made 'autoreconf' commands in debian/rules... [14:29] I added the dh-autoreconf support in a previous patch. But had another one to use autoreconf because of Lucid support. [14:29] kengyu: right, which would be fine, but there are two parts and I only saw the configure part in that changelog [14:29] s/changelog/diff/ [14:30] micahg, it's good to know that it is in Lucid-backports. at the time I just noticed the build failure in the PPA. [14:31] kengyu: right, the more important part though is only implementing a partial manual rule in its place [14:33] micahg, Yes, thanks for this. This will be something I will work on. :-) [14:33] thanks [14:33] does anybody have any other questions? [14:33] sure [14:33] kengyu: http://kernel.ubuntu.com/git?p=hwe/fwts.git;a=commitdiff;h=ca9a4ac791265e0e4e945c2472aee6650b078d7d [14:34] does that mean it's ging to get upstream releases soon? [14:34] *going [14:36] tumbleweed, it's the plan. at least releasing as a tarball eases the pain for packaging for other distros (we've seen bug reported from gentoo too). [14:36] yeah [14:36] can we expect to see it in Debian, too, then? [14:37] I have that as my plan. But it takes some more time before issuing the ITP. the ACPICA code (is in fwts) from Intel has some legal/copyright issue. [14:37] there will be some more discussion I expect. [14:38] * tumbleweed looks forward to that at some point [14:39] kengyu: Quick question about the Ubuntu release cycle [14:39] kengyu: Do you know what Feature Freeze is and how it would impact any uploads of fwts you might perform? [14:40] Laney, yes, after that freeze any upload will require the FFE. [14:41] kengyu: Where can you find out whethere we are in feature (or any other) freeze? [14:41] also, it's not quite 'any' upload — only ones which contain new features (i.e. aren't purely bug fix) [14:42] from wiki.ubuntu.com there is a schedule table. [14:42] https://wiki.ubuntu.com/QuantalQuetzal/ReleaseSchedule [14:43] kengyu: thanks, that's it from me [14:43] bdrung: go [14:44] kengyu: fwts will fail to build twice in the row once you switch to the "3.0 (quilt)" source format [14:45] bdrung, really! I did not notice that. [14:46] kengyu: the source package content changes after one build: http://paste.debian.net/185847/ [14:46] that's what micahg was getting at with the autoreconf questions [14:46] kengyu: there might be no difference if you use the same autotools version [14:47] brendand, ok, I will look at this. there should be more cleaning. [14:47] it's what dh_autoreconf_clean would do for you if you used that [14:48] kengyu: do you check the lintian report including experimental before the upload? lintian found some typos in the source. [14:50] bdrung, no, I did check the lintian error/warning. But I just check the ones from pbuilder-dist... [14:50] kengyu: lintian has experimental and pedentic tags that are useful to check, too [14:51] running out of time, let's move on [14:51] barry: got anything to ask? [14:51] bdrung, this is nice to know. I will check it next time. :-) [14:51] Laney: no, my questions have already been asked by others [14:51] thanks [14:51] anyone else? [14:52] nothing important [14:52] education can continue elsewhere afterwards [14:52] #vote Grant Keng-Yu Lin PPU to fwts [14:52] Please vote on: Grant Keng-Yu Lin PPU to fwts [14:52] Public votes can be registered by saying +1, +0 or -1 in channel, (private votes don't work yet, but when they do it will be by messaging the channel followed by +1/-1/+0 to me) [14:53] #voters bdrung Laney barry micahg tumbleweed stgraber cody-somerville [14:53] Current voters: Laney barry bdrung cody-somerville micahg stgraber tumbleweed [14:53] +1 [14:53] +1 received from tumbleweed [14:53] +1 [14:53] +1 received from barry [14:53] +1 [14:53] +1 received from bdrung [14:53] +1 good endorsements, good review process upstream [14:53] +1 good endorsements, good review process upstream received from Laney [14:54] * Laney peers at micahg [14:54] +1, would love to see this in Debian soon [14:54] +1, would love to see this in Debian soon received from micahg [14:55] #endvote [14:55] Voting ended on: Grant Keng-Yu Lin PPU to fwts [14:55] Votes for:5 Votes against:0 Abstentions:0 [14:55] Motion carried [14:55] congratulations! [14:55] thanks. :-) [14:55] #action stgraber to add ppu for lexical to fwts [14:55] ACTION: stgraber to add ppu for lexical to fwts [14:55] #topic AOB === meetingology changed the topic of #ubuntu-meeting to: AOB [14:56] silence is good [14:56] #topic next chair === meetingology changed the topic of #ubuntu-meeting to: next chair [14:57] who is it? [14:57] I lost track [14:57] cody-somerville :) [14:57] or? [14:57] probably me, in practice [14:57] ok [14:57] i think so [14:58] #action next chair cody-somerville (tumbleweed) [14:58] ACTION: next chair cody-somerville (tumbleweed) [14:58] cheers [14:58] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendar | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [14:58] Meeting ended Mon Aug 27 14:58:03 2012 UTC. [14:58] Minutes (wiki): http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-08-27-14.01.moin.txt [14:58] Minutes (html): http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-08-27-14.01.html [14:58] thanks Laney ! [14:58] * Laney urghs about the post-meeting tasks [14:58] * micahg urghs with Laney [14:58] hm [14:58] stgraber@castiana:~/data/code/ubuntu-archive-tools$ ./edit-acl add -s fwts -p lexical [14:59] Added: [14:59] AlanBell: http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-08-27-14.01.html is the bot case sensitive wrt nicknames? [14:59] Archive Upload Rights for lexical: archive 'primary', source package 'fwts' [14:59] Laney: ^ [14:59] stgraber: ta! [14:59] he magically appears after the meeting is done :P [15:00] :) [15:01] * micahg goes poof again [15:01] oops...E_TOOMANYCHANNELS [16:27] Laney: erm, possibly, did someone change case during a meeting or something? [16:27] no [16:27] I did my own actions with #action laney ... [16:27] not #action Laney [16:27] and they got grouped as unassigned items [16:27] ah, that probably is case sensitive [18:02] hi! [18:02] hello === tyhicks` is now known as tyhicks [18:03] #startmeeting [18:03] Meeting started Mon Aug 27 18:03:36 2012 UTC. The chair is jdstrand. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [18:03] Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired [18:03] The meeting agenda can be found at: [18:03] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [18:03] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [18:03] I'll go first [18:04] I'm in the happy place this week [18:04] I've got more MIR auditing and pending updates [18:05] I should also be finished with the second iteration of aa-sandbox and send that to the list [18:05] mdeslaur is not here today [18:05] sbeattie: you're up [18:05] I'm on community this week. [18:05] I also have a couple of updates to finish testing and push out. [18:06] I also need to get the apparmor-dbus ppa going and review aa-sandbox. [18:06] that's it for me. [18:06] did micahg make it back in time? [18:06] sbeattie: I recommend holding off on that review til I submit again [18:06] yeah [18:08] I think he is not. he can jump in later if he comes back [18:08] I'll go [18:08] I'm handling triage this week [18:08] I just returned from a long vacation and I'm still catching up [18:08] Another couple hours and I should be back on top of everything [18:09] While I was out, I finished xmlrpc-c patches for CVE-2012-0876 and CVE-2012-1148 [18:09] The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0876) [18:09] Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large number of crafted XML files that cause improperly-handled reallocation failures when expanding entities. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1148) [18:09] I'll need to test those patches and try to get the updates out [18:10] I say 'try' because I'll be at the Linux Security Summit Thursday and Friday of this week [18:10] before I leave, i'm going to help jdstrand with a security audit [18:10] I think that's it for me [18:11] I guess I am up [18:11] jjohansen: yep, you're up [18:12] I need to finish up this the 2.8 port of the aa-dbus patches, and finish debugging the current set of kernel patches (rcu, fs update, ..), then I will be heading to Linux Security Summit for Thursday and Friday this week [18:13] that is it for me jdstrand back to you [18:13] thanks [18:14] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [18:14] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [18:14] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [18:14] http://people.canonical.com/~ubuntu-security/cve/pkg/smokeping.html [18:14] http://people.canonical.com/~ubuntu-security/cve/pkg/chasen.html [18:14] http://people.canonical.com/~ubuntu-security/cve/pkg/msmtp.html [18:14] http://people.canonical.com/~ubuntu-security/cve/pkg/mhonarc.html [18:14] http://people.canonical.com/~ubuntu-security/cve/pkg/ruby-actionpack-2.3.html [18:14] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [18:14] There are a lot of merge opportunities for packages listed in http://people.canonical.com/~ubuntu-security/d2u/. Performing these updates is a great way to help Ubuntu and bolster your developer application. [18:14] Does anyone have any other questions or items to discuss? [18:20] sbeattie, jjohansen, tyhicks: thanks! [18:20] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendar | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [18:20] Meeting ended Mon Aug 27 18:20:03 2012 UTC. [18:20] Minutes (wiki): http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-08-27-18.03.moin.txt [18:20] Minutes (html): http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-08-27-18.03.html [18:20] jdstrand: thanks! [18:20] Thanks jdstrand [18:20] thanks! === billy_idle is now known as march === lifeless_ is now known as lifeless === dgjones is now known as DJones === Ursinha` is now known as Ursinha