=== kickinz1|afk is now known as kickinz1 === kickinz1 is now known as kickinz1|afk === hyperair is now known as m4 === m4 is now known as hyperair === aaron is now known as ahoneybun === pgraner-afk is now known as pgraner === wickedpuppy2 is now known as wickedpuppy [16:32] \o [16:32] hello [16:33] o/ [16:33] #startmeeting [16:33] Meeting started Mon Apr 20 16:33:15 2015 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [16:33] Available commands: action commands idea info link nick [16:33] hi [16:33] The meeting agenda can be found at: [16:33] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:33] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [16:33] jdstrand: you're up [16:38] ]sorry [16:38] this week is again, snappy focused [16:39] I plan on working on finalizing the seccomp glue layer today and test the applied policies, updating ubuntu-core-security as necessary [16:40] I also need a piece for updating the already generated policies when ubuntu-core-security-seccomp is updated (like we do with apparmor-easyprof-ubuntu) [16:41] I made a change to snappy for updating dbus bus policy last week and need to make a change to snappy build to make it fail if the package.yaml is malformed when bus-name is specified [16:41] (not apparmor related) [16:41] then review tools [16:41] whew [16:41] lots of stuff :) [16:42] yeah [16:42] that's it from me [16:42] mdeslaur: you're up [16:42] I just published some php5 updates [16:42] and am currently working on new mysql versions [16:42] after that, I'll be going down the list, there's stuff piling up [16:43] that's pretty much it...oh, I am on bug triage this week [16:43] that's it for me, sbeattie, tag, you're it. [16:43] I'm on cve triage this week [16:44] I'm finishing up openjdk testing, though I've hit a small snag where the icedtea plugin isn't working in my test environment on trusty/i386 (but other i386 and trusty/amd64 worked fine), so I need to dig in a bit to what's going on there [16:45] I also need to finish releasing apaprmor 2.9.2 and merge the python bits into my in progress trusty sru. [16:45] and also continue the gcc-pie work [16:45] that's my week. tyhicks? [16:46] I'm in the happy place this week [16:46] I'm going to review the snappy launcher code [16:46] I'll also review some snippets at the request of IS [16:46] still need to revisit the Vivid systemd/sbuild/schroot bugs (LP: #1427264) (LP: #1438942) [16:46] Launchpad bug 1427264 in click (Ubuntu) "using ecryptfs, creating frameworks fail to bind mount issues" [High,Triaged] https://launchpad.net/bugs/1427264 [16:46] Launchpad bug 1438942 in schroot (Ubuntu) "Host's /dev/shm is mounted over when entering 14.10 and older sbuild schroots" [High,Confirmed] https://launchpad.net/bugs/1438942 [16:46] and still need to restart work on AppArmor kernel keyring mediation for user data encryption [16:47] that's it for me [16:47] jjohansen: you're up [16:48] I'm working on the apparmor upstream cleanup again this week. I'll kick in any help on 2.9.2 and 2.10 that sbeattie needs [16:48] and I have some kernel sru prep for the current release cycle [16:49] nice [16:49] sounds like you'll get some time to focus on the upstreaming effort this week [16:50] yes [16:50] I think that is it for me sarnold you are up [16:51] I'm on community this week [16:52] I'm going to be continuing my travels through openstack country, my travelogues will be for sale in the gift shop.. [16:52] I'll also try to do some minor apparmor patch reviews as interest allows [16:52] that's it for me, chrisccoulson? [16:53] sarnold: last week you mentioned the conntrack mir [16:53] * tyhicks checks on the status [16:53] This week, I've probably got a firefox update. I also need to get oxide 1.6 out [16:53] (LP: #1381450) [16:54] Launchpad bug 1381450 in conntrack (Ubuntu) "[MIR] conntrack, libnetfilter-queue, libnetfilter-cttimeout, libnetfilter-cthelper" [Medium,Confirmed] https://launchpad.net/bugs/1381450 [16:54] I'll be spending some time to work through code reviews [16:54] tyhicks: yeah, I didn't get to it, and I suspect it's too late for this cycle at this point; if you think it isn't, I'd be happy to pick it up asap.. [16:54] other than that, I'm working through the list of bugs as usual [16:54] That's me done [16:54] sarnold: ok, we'll discuss it a little more afterwards [16:56] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [16:57] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:57] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:57] http://people.canonical.com/~ubuntu-security/cve/pkg/libxml-security-java.html [16:57] http://people.canonical.com/~ubuntu-security/cve/pkg/mediawiki-extensions.html [16:57] http://people.canonical.com/~ubuntu-security/cve/pkg/maven-indexer.html [16:57] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [16:57] http://people.canonical.com/~ubuntu-security/cve/pkg/unace.html [16:57] http://people.canonical.com/~ubuntu-security/cve/pkg/not-yet-commons-ssl.html [16:57] Does anyone have any other questions or items to discuss? [16:58] jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, ChrisCoulson: Thanks! [16:58] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendar | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:58] Meeting ended Mon Apr 20 16:58:50 2015 UTC. [16:58] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-04-20-16.33.moin.txt [16:58] thanks tyhicks! [16:59] thanks tyhicks ! [16:59] thanks tyhicks [17:01] tyhicks: thanks! === doko_ is now known as doko