[16:53] <jdstrand> hi!
[16:53] <chrisccoulson> hi
[16:53] <mdeslaur> hello!
[16:53] <jjohansen> \o
[16:53] <tyhicks> hello
[16:54] <jdstrand> #startmeeting
[16:54] <meetingology> Meeting started Mon Sep  8 16:54:46 2014 UTC.  The chair is jdstrand. Information about MeetBot at http://wiki.ubuntu.com/meetingology.
[16:54] <meetingology> Available commands: action commands idea info link nick
[16:54] <jdstrand> The meeting agenda can be found at:
[16:54] <jdstrand> [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting
[16:54] <jdstrand> [TOPIC] Weekly stand-up report
[16:54] <jdstrand> I'll go first
[16:55] <jdstrand> I'm on triage this week
[16:55] <jdstrand> I'm working on landing apparmor in silo 014 today in utopic, then moving on to landing it in the rtm branch
[16:56] <jdstrand> after that I will work to do whatever is needed to get the kernel tested and up
[16:56] <jdstrand> I will be patch piloting this week too
[16:56] <jdstrand> mdeslaur: you're up
[16:56] <mdeslaur> I'm on community this week
[16:56] <mdeslaur> I just published a couple of USNs
[16:56] <mdeslaur> and am finishing some extra testing of the qemu and qemu-kvm packages that have been in -proposed for the past few weeks
[16:57] <mdeslaur> I'll be publishing them this afternoon
[16:57] <mdeslaur> Then I'm going to work on a long lost nss CVE
[16:57] <mdeslaur> and have an embargoed issue to look at
[16:57] <mdeslaur> and will go down the list after that
[16:57] <mdeslaur> that's it from me, sbeattie, you're up
[16:57] <sbeattie> I'm focusing on apparmor again this week.
[16:58] <sbeattie> I'll be doing whatever's needed to land the current bits that jamie has siloed for utopic and RTM, then moving on to fix whatever bugs we still need to address beyond that.
[16:58] <sbeattie> that's pretty much it for me.
[16:59] <sbeattie> tyhicks: ?
[16:59] <tyhicks> I'm helping with the apparmor landings
[16:59] <tyhicks> I'm going through the remaining socketpair.sh and unix_socket.sh regression test failures and triaging them all
[17:00] <tyhicks> I need to finish testing a parser fix (that also affects the man page and unix_socket.sh regression tests) and send that out
[17:01] <tyhicks> I'm also addressing the feedback from sarnold (thanks!) on my unix_socket.sh changes so that I can get them committed to trunk
[17:01] <tyhicks> then I'll be fixing bugs, as needed
[17:01] <tyhicks> if I can break away for a bit, I need to respond to the upstream feedback that I received from the v3 dbus-daemon patches
[17:01] <tyhicks> and there's pending ecryptfs maint work for me
[17:02] <tyhicks> (not likely to get to that)
[17:02] <tyhicks> that's it for me
[17:02] <tyhicks> jjohansen: you're up
[17:02] <jjohansen> I'm focusing on apparmor this week as well, specifically I have some kernel refcount/locking bugs to fix
[17:03] <jjohansen> once those are done, what ever misc bugs pop up during testing/verification
[17:04] <jjohansen> thats it for me sarnold you are up
[17:05] <sarnold> I'm in the happy place this week
[17:06] <sarnold> but I've got a package to release from a user carried-over to this week (mariadb-5.5) and two supported packages to release this week (file, php5)
[17:07] <sarnold> due to kvm hilarity I'm using canonistack for testing, hopefully al three will be out the door today
[17:08] <mdeslaur> sarnold: what the status of django?
[17:08] <sarnold> I intend to do some more apparmor patch reviews, I believe there are several left over from last week unreviewed still
[17:08] <sarnold> mdeslaur: not yet started
[17:09] <sarnold> mdeslaur: I had intended to prioritize apparmor patch reviews; would you rather I work on django update instead?
[17:09] <mdeslaur> sarnold: no, please do the apparmor first
[17:09] <mdeslaur> I'll try and do django this week
[17:09] <mdeslaur> so don't start it
[17:10] <sarnold> mdeslaur: okay, thanks
[17:10] <sarnold> if there's time left over, I'll return to an old, complicated, MIR request
[17:10] <sarnold> I think that's me covered, chrisccoulson?
[17:11] <chrisccoulson> I've got a couple of updates to do this week - one of those is Thunderbird from last week, but I'm waiting for the 31.1.1 build because it fixes an autocomplete regression
[17:11] <chrisccoulson> I shall also be looking at bug 1260016
[17:11] <chrisccoulson> in addition to the usual stuff
[17:11] <chrisccoulson> that's me done :)
[17:15] <jdstrand> chrisccoulson: can I mark that bug in progress? (so people know)
[17:15] <chrisccoulson> jdstrand, sure
[17:16] <jdstrand> [TOPIC] Highlighted packages
[17:16] <jdstrand> The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so.
[17:16] <jdstrand> See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.
[17:16] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/gromacs.html
[17:16] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/djbdns.html
[17:16] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/a2ps.html
[17:16] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/isync.html
[17:16] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/xnbd.html
[17:17] <jdstrand> [TOPIC] Miscellaneous and Questions
[17:17] <jdstrand> Does anyone have any other questions or items to discuss?
[19:01]  * xnox o/
[19:02] <dannf> o/
[19:03]  * bdmurray is here
[19:04] <caribou> o/
[19:07] <xnox> !dmb-ping
[19:08]  * stgraber waves
[19:09] <stgraber> so I believe Laney is on vacation this week.
[19:10] <xnox> stgraber: yeap, I've just texted him and he is flying in two hours.
[19:10] <stgraber> we need a 4th member to have quorum, let's hope ScottK or Micah will show up then...
[19:10] <stgraber> otherwise I'd recommend we just bring both applicants to e-mail application, it's been what 2-3 meetings where we fail to get quorum now?
[19:11] <xnox> or we could start the meeting and/or collect votes when they show/email.
[19:11] <stgraber> sure, that works for me
[19:11] <stgraber> should make the e-mail application process much quicker
[19:11] <xnox> bdmurray: stgraber: xnox - who wants to chair?
[19:11] <xnox> =)
[19:12] <bdmurray> xnox: you seem to have the plan ;-)
[19:12] <xnox> hehe.
[19:12] <xnox> #startmeeting DMB Meeting
[19:12] <meetingology> xnox: Error: Can't start another meeting, one is in progress.
[19:12] <xnox> #endmeeting
[19:12] <stgraber> #endmeeting
[19:12] <meetingology> Meeting ended Mon Sep  8 19:12:37 2014 UTC.
[19:12] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2014/ubuntu-meeting.2014-09-08-16.54.moin.txt
[19:12] <stgraber> xnox: try now
[19:12] <xnox> \o/
[19:12] <xnox> I guess jdstrand forgot to finish theirs.
[19:12] <xnox> #startmeeting DMB Meeting
[19:12] <meetingology> Meeting started Mon Sep  8 19:13:01 2014 UTC.  The chair is xnox. Information about MeetBot at http://wiki.ubuntu.com/meetingology.
[19:12] <meetingology> Available commands: action commands idea info link nick
[19:13] <jdstrand> oh I did
[19:13] <jdstrand> sorry!
[19:13] <xnox> jdstrand: welcome to DMB meeting =) wanna chair?! =)
[19:13] <jdstrand> heh
[19:13] <xnox> i'm not sure if we have any actions from past meetings.
[19:13] <xnox> So i think we can just continue through to applications
[19:14] <stgraber> those usually end up with me and I'm not aware of anything I forgot to do :)
[19:14] <xnox> #topic - PPU application Louis Bouchard
[19:14] <caribou> Hello everyone
[19:14] <xnox> caribou: hola! Welcome to DMB meeting. Could you please say hi and a few words about yourself and your application today?
[19:15] <caribou> Sure, my name is Louis Bouchard,
[19:15] <caribou> I have been involved with the ubuntu project directly for a bit more than 3 years
[19:16] <caribou> I have been a contributing developer for over a year now. I am was doing sponsored maintenance of makedumpfile on Debian for over 2 years
[19:16] <caribou> and I am now the official Debian Maintainer. I'm doing my best to keep the delta b/w Debian & Ubuntu to Null
[19:17] <caribou> I've also been involved on sosreport for more than a year and am part of the upstream development team
[19:17] <caribou> I am applying today for upload rights on those two packages : sosreport & makedumpfile
[19:18] <caribou> the intent being to be involved on both Debian & Ubuntu activities and to keep the gap as small as possible between both
[19:19] <stgraber> caribou: are you a DM for both package or just makedumpfile?
[19:19] <xnox> and as per https://ftp-master.debian.org/dm.txt you do have DM rights to upload those two packages in Debian already. (
[19:19] <stgraber> that answers my question :)
[19:19] <xnox> i granted sosreport DM rights to caribou in Debian.
[19:19] <xnox> )
[19:19] <stgraber> caribou: are you subscribed to ubuntu-devel-announce?
[19:19] <caribou> Currently just for makedumpfile as sosreport has no official DM. I'm working with Adam Stokes to fix that up
[19:20] <caribou> stgraber: I thought I was, then recently discovered that I was no longer; just ubuntu-devel.
[19:20] <xnox> caribou: .... there are no email notifications, but you have been granted upload rights for sosreport.
[19:20] <stgraber> ok, please make sure you subscribe to ubuntu-devel-announce
[19:21] <stgraber> caribou: are any of those packages seeded?
[19:21] <caribou> stgraber: sosreport is seeded on the ubuntu-server image
[19:22] <caribou> stgraber: done
[19:22] <stgraber> good :)
[19:22] <stgraber> caribou: why do we carry a delta on sosreport?
[19:23] <caribou> stgraber: right now, upstream is at 3.2-alpha and Utopic is at 3.1.1 plus a few patches which are backport of 3.2-alpha
[19:24] <caribou> stgraber: the delta is mainly to make some of the data collection submitted upstream available to Ubuntu faster, especially for the technical support people using sosreport
[19:24] <caribou> stgraber: which rely on this tool daily
[19:24] <caribou> stgraber: many of those upstream fixes are coming from them
[19:25] <stgraber> cool
[19:25] <stgraber> xnox: no further question, ready to vote
[19:25] <caribou> stgraber: FYI, turns out that I *am* subscribed to ubuntu-devel-announce :-)
[19:25] <xnox> bdmurray: any more questions from you?
[19:26] <xnox> caribou: yeah, please stop sorting that to /dev/null then ;-) *giggle*
[19:26] <caribou> xnox: will do :)
[19:27] <stgraber> did we losoe Brian? :)
[19:27] <bdmurray> caribou: are you subscribed to bugs about sosreport and makedumpfile?
[19:28] <caribou> bdmurray: I'm affraid not, as I realized this morning after asking for a new makedumpfile bug to be created & didn't get any notice
[19:29] <xnox> caribou: please subscribe to those two packages - both on launchpad (for ubuntu) and BTS (for debian)
[19:29] <bdmurray> caribou: it sounds like you plan on fixing this though, rigth?
[19:29] <caribou> bdmurray: indeed (for Ubuntu as it seems to be already the case for BTS)
[19:30] <caribou> bdmurray: again, this might be a case where I am but forgot : I'm just checking my mail for today & see that the new makedumpfile email is in
[19:31] <bdmurray> caribou: you aren't currently - https://launchpad.net/ubuntu/+source/sosreport
[19:31] <bdmurray> see the "Subscribers" portlet
[19:32] <bdmurray> that's it from me
[19:32] <caribou> bdmurray: indeed, but a team I belong to is, which is why I get them. I will make sure to subscribe as an individual as well
[19:33] <xnox> ok. no questions from me.
[19:33] <stgraber> let's vote then (partial vote though as we said earlier)
[19:34] <xnox> #vote Please vote whether you are in favor to grant caribou PPU rights for sosreport & makedumpfile
[19:34] <meetingology> Please vote on: Please vote whether you are in favor to grant caribou PPU rights for sosreport & makedumpfile
[19:34] <meetingology> Public votes can be registered by saying +1, +0 or -1 in channel, (for private voting, private message me with 'vote +1/-1/+0 #channelname)
[19:34] <stgraber> +1
[19:34] <meetingology> +1 received from stgraber
[19:34] <bdmurray> +1
[19:34] <meetingology> +1 received from bdmurray
[19:36] <xnox> +1
[19:36] <meetingology> +1 received from xnox
[19:36] <xnox> #endvote
[19:36] <meetingology> Voting ended on: Please vote whether you are in favor to grant caribou PPU rights for sosreport & makedumpfile
[19:36] <meetingology> Votes for:3 Votes against:0 Abstentions:0
[19:36] <meetingology> Motion carried
[19:36] <xnox> please note that Motion is not carried yet, as we do not have quorum. Remaining dmb members will ask further questions via email
[19:37] <xnox> and/or vote via email.
[19:37] <caribou> Thank you all, I'll be waiting for emails later on
[19:37] <xnox> caribou: thanks a lot for your time today, and stay tuned on the emails =)
[19:37] <caribou> xnox: sure
[19:37] <xnox> #topic Core Dev application Dann Frazier
[19:38] <xnox> dannf: Hello! Thanks for waiting. Please introduce yourself and your application =)
[19:38] <dannf> hey, I'm dann frazier - 14 year DD where I've served on the kernel, stable release and security teams. I've been a contributor to Ubuntu for about 4 years. These days I'm mostly working on arm64/server stuff - hardware enablement/porting, and random bug fixing.
[19:38] <dannf> My contributions are generally random bug fixing/enablement patches (vs. introducing new packages, etc), and tend to be a bit all over the place (though normally in main).
[19:38] <dannf> I'm not an existing Ubuntu member - which I presume suspect makes going straight for CoreDev a bit optimistic, but it does seem to be the level of permission I'd need to do the type of work I do. I'm open to other starting point recommendations if I'm overshooting.
[19:38] <dannf> https://wiki.ubuntu.com/DannFrazier/CoreDeveloperApplication
[19:39] <dannf> And yes, I'm subscribed to u-d-a :)

[19:41]  * stgraber checks the package list to see if coredev is actually required
[19:42] <xnox> stgraber: i've sponsored d-i components from dannf before, and all of them are in main.
[19:42] <xnox> and i don't think just server seed would be enough to upload d-i, let me check.
[19:42] <dannf> flash-kernel tends to be a heavy contribution point for me, but i do think that'll slow down as we see more uefi based systems
[19:42] <stgraber> coredev makes sense, there are a couple that are in virt/server but most of the packages listed are in core and should stay there
[19:43] <stgraber> dannf: I'm assuming that as a DD you'll keep trying to get as much of that work done in Debian and prefer syncs into Ubuntu over adding extra delta?
[19:43] <dannf> stgraber: yes, always have, and always plan to :)
[19:43] <stgraber> good :)
[19:43] <stgraber> dannf: same question as caribou, are you subscribed to ubuntu-devel-announce?
[19:44] <dannf> stgraber: yep, for at least year
[19:44] <stgraber> dannf: do you know how to check whether uploading a package will affect a media which may be in the middle of a milestone release?
[19:46] <dannf> stgraber: good question. i don't know of an *easy* way. most everything i do is netboot oriented, and i know how to check that - but not sure how to check for ISO impact w/o inspecting an ISO
[19:47] <stgraber> dannf: seeded-in-ubuntu <source name>
[19:47] <xnox> dannf: can you describe SRU process briefly in your own words - what stages/steps does it go through and what needs to happen at each stage/step?
[19:47] <dannf> xnox: sure.
[19:48] <dannf> 1) bug gets filed 2) bug gets nominated for the impacted stable releases (i e-mail the ubuntu-bugcontrol LP list to request this)
[19:48] <dannf> (my numbers aren't necessarily in order, since somethings can happen in parallel)
[19:49] <dannf> 3) fix gets applied to the current devel release (if applicable)
[19:49] <dannf> 4) patch/MP added to bug for SRU, description altered to match the SRU template
[19:49] <dannf> [Impact], [Test Case], [Regression Potential]
[19:49] <dannf> upload gets sponsored, uploaded to proposed
[19:49] <dannf> 5^
[19:50] <dannf> 6) verification in proposed occurs, tag switches from verification-needed to verification-done after testing
[19:50] <dannf> 7) if everything test ok/risk of regression deemed reasonable, propagation occurs to updates
[19:51] <xnox> dannf: does package get published in -proposed straight away after an upload?
[19:51] <dannf> xnox: right, no - they sit in a queue awiting review from the SRU team
[19:53] <xnox> ok.
[19:55] <xnox> dannf: how are you planning to minimize existing divergence from upstreams? What if ubuntu is diverged from both upstream and debian - which divergence would you try to minimise?
[19:55] <xnox> (me asking RE: application form "What I like least in Ubuntu")
[19:56] <dannf> well, i guess it depends on the divergence need - but i would probably try to minimize the debian divergence vs. the upstream divergence as a normal practice (if the debian divergence itself couldn't be minimized)
[19:56] <xnox> ok.
[19:56] <xnox> bdmurray: stgraber: any more questions?
[19:57] <bdmurray> not from me
[19:58] <stgraber> nope
[19:59] <xnox> #vote granting dannf Core Developer status
[19:59] <meetingology> Please vote on: granting dannf Core Developer status
[19:59] <meetingology> Public votes can be registered by saying +1, +0 or -1 in channel, (for private voting, private message me with 'vote +1/-1/+0 #channelname)
[20:02] <stgraber> +1 [While I usually prefer people to get Ubuntu Membership and some kind of PPU before coredev, I also trust Steve and Serge's judgment. That combined with the package list being requested, coredev doesn't seem unreasonable.]
[20:02] <meetingology> +1 [While I usually prefer people to get Ubuntu Membership and some kind of PPU before coredev, I also trust Steve and Serge's judgment. That combined with the package list being requested, coredev doesn't seem unreasonable.] received from stgraber
[20:04] <xnox> +1 [please do more partman/d-i development =)]
[20:04] <meetingology> +1 [please do more partman/d-i development =)] received from xnox
[20:04] <bdmurray> +1 from me too
[20:04] <meetingology> +1 from me too received from bdmurray
[20:06] <xnox> #endvote
[20:06] <meetingology> Voting ended on: granting dannf Core Developer status
[20:06] <meetingology> Votes for:3 Votes against:0 Abstentions:0
[20:06] <meetingology> Motion carried
[20:06] <xnox> dannf: please note that Motion is not carried yet, as we do not have quorum. Remaining dmb members will ask further questions via email and/or vote.
[20:06] <dannf> cool, thanks for your consideration :)
[20:06] <xnox> dannf: thanks for you time, and keep an eye on your inbox in the coming days. =)
[20:06] <xnox> thank you everyone, we are just past the hour already.
[20:07] <xnox> #endmeeting
[20:07] <meetingology> Meeting ended Mon Sep  8 20:07:10 2014 UTC.
[20:07] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2014/ubuntu-meeting.2014-09-08-19.13.moin.txt
[20:07]  * dannf notes i'll be on vacation for about a week starting wednesday (getting married!) so unfortunately responses maybe delayed
[20:07] <caribou> congratulations dannf
[20:07] <dannf> thx caribou ! you too!
[20:07] <dannf> (preliminarily of course)
[20:07] <caribou> I'm honoured to have shared that session with you :)
[20:08] <caribou> thanks everyone
[20:08] <xnox> dannf: congratulations! =)
[20:09] <dannf> caribou: you as well, *love* seeing what you've been doing with crashdump support
[20:09] <dannf> boo
[20:09] <dannf> typed too slow