=== jamespag` is now known as jamespage === Rinchen is now known as joey === yofel_ is now known as yofel === dames is now known as thedac === egon_ is now known as egon [15:02] o/ [15:02] Who's here? [15:03] \o [15:03] o/ sort of, otp [15:03] o/ [15:06] Agenda looks a little light this meeting [15:06] I'm there too [15:07] my action item would be a carry-over; it's not done but given the reminder I'll sort it out today [15:07] bdmurray: what about yours? [15:07] rbasak: same question? [15:07] o/ [15:08] Apologies, I'm in the middle of migrating all my files from my downed laptop to a reserve one [15:08] I'd like some feedback on my question to devel-permissions please. My action is blocked on that. [15:08] #startmeeting DMB meeting 2016-06-06 [15:08] Meeting started Mon Jun 6 15:08:17 2016 UTC. The chair is cyphermox. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [15:08] Available commands: action commands idea info link nick === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting 2016-06-06 | Current topic: [15:08] mine is done [15:08] #topic Review of previous action items === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting 2016-06-06 | Current topic: Review of previous action items [15:08] alright, so my action item is a carry-over; I'll sort it today [15:09] I'd like some feedback on my question to devel-permissions please. My action is blocked on that. [15:09] bdmurray's is done (check other PPU devs) [15:09] rbasak: ack [15:09] sil2100: what about your action item (check state of utouch uploaders and other teams that might be non-existant) ? [15:10] [ACTION] everyone to give feedback on devel-permissions to rbasak's question [15:10] ACTION: everyone to give feedback on devel-permissions to rbasak's question [15:11] Or alternatively, if nobody provides feedback, I will JFDI. [15:11] (though that means asking infinity since it needs a TB member) [15:11] Any objections? [15:12] well, I'll answer right after the meeting :) [15:12] * bdmurray is reading [15:12] cyphermox: oh, yeah, not done yet, will do it ASAP today once I have a working system again or tomorrow at latest [15:12] Sorry... [15:12] ok, not a problem [15:13] that's it for the action items review I guess? [15:13] #topic Selection of next meeting chair === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting 2016-06-06 | Current topic: Selection of next meeting chair [15:14] we usually just go through the alphabetical list, but considering this very short meeting, I can do it again [15:14] +1 [15:14] I was wondering if we can do a poll for meeting times [15:14] alrighty then ;) [15:14] micahg: in aob? [15:14] ah [15:14] #topic AOB? === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology | DMB meeting 2016-06-06 | Current topic: AOB? [15:14] iok [15:14] I was wondering if we can do a poll for meeting times [15:15] how do you want to proceed for that, do you have meeting times suggested? [15:15] doodle poll I think [15:15] are you unhappy with both times or just one of them? [15:15] well, I have meetings during both at the moment [15:16] but if these are the best times, that's fine [15:16] I don't think we've done a time poll in about 3 years though [15:16] I have no objection to doing a poll. Presumably we need to also consider potential availability of applicants though? [15:17] yeah, so one earlier in the UTC day and one later [15:17] wfm [15:17] I’m good with the current times, but if they change, it’s better for me if they were 6 hours later (anything between now and 6 hours from now is booked up for me) [15:17] micahg: want to setup a doodle or framadate poll? [15:17] Any earleir, and it conflicts with my sleep :) [15:17] But I realize later may not work for everyone. [15:18] BenC: 6 hours from now is like almost-midnight here ;) [15:18] micahg: Are you looking for a different day, same times, or a different times same day? [15:18] yeah, I can set up a doodle poll [15:18] any of the above [15:18] well, we'll definitely need to do polling, everyone will have different preferences [15:18] well [15:18] Applicants individually shouldn't need to conflict with their sleep too often, but the DMB would have to do it all the time. So I think it's OK to aim to not interfere with DMB members' sleep :) [15:18] same time doesn't work most days (15:00 UTC during DST in America) [15:18] These times work for me on Thursday, if that’s an option for anyone [15:19] rbasak: I agree with that logic [15:19] micahg: if you do a poll, I suggest using a FOSS tool for the polling ;) [15:20] wasn't aware we had one [15:20] https://framadate.org/ [15:20] sure, that works [15:21] alright, so let's make this an action? [15:21] sure [15:21] [ACTION] micahg to set up a poll to get better meeting times for everyone [15:21] ACTION: micahg to set up a poll to get better meeting times for everyone [15:21] anything else? [15:23] nope [15:24] I"m good [15:25] that's all folks! [15:25] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [15:25] Meeting ended Mon Jun 6 15:25:33 2016 UTC. [15:25] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2016/ubuntu-meeting.2016-06-06-15.08.moin.txt [15:26] thanks everyone [15:26] thanks cyphermox [16:31] \o [16:31] hi! [16:31] o/ [16:31] #startmeeting [16:31] Meeting started Mon Jun 6 16:31:44 2016 UTC. The chair is jdstrand. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [16:31] Available commands: action commands idea info link nick [16:31] The meeting agenda can be found at: [16:31] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:32] I've got an announcement but will wait til the end [16:33] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [16:33] I'll go first [16:33] I've got a number of snappy PRs to followup on (gsettings, input methods, etc) [16:34] I also have a couple snapd interface reviews (modem-manager and ppp, but expect more) [16:34] I have some more to look at with seccomp arg filtering [16:34] I also have various snapd interface policy updates and investigations [16:34] I also have some review tools updates for snap.yaml changes and a few small bug fixes [16:35] if I have time, I'll get started on the docker snappy interface [16:35] I think that's it from me [16:35] mdeslaur: you're up [16:35] I'm on triage and community duties this week [16:35] I'm about to publish a libxml2 update in a few minutes [16:35] and I'm off wednesday afternoon [16:35] I'll be going down the cve list, as usual after that [16:36] that's it for me, sbeattie? [16:36] I've got a short week this week, will be off starting wednesday. [16:36] I'm on bug triage while I'm here. [16:36] I'm also prepping for the sprint next week [16:37] I need to spend some time poking at the kernel cve->lp bugs sync script [16:38] I'm continuing to look for build failures in yakkety due to gcc pie [16:38] and I'll take a peek at the cve list to see if there's something I can pick up there. [16:38] that's probably it for me. [16:38] oh right, tyhicks is not here... is jjohansen back yet? [16:39] Or maybe we should jump to sarnold. [16:39] I think I'm in the happy place this week [16:39] it's a very short week for me, monday and tuesday only [16:40] I'll be working on some sprint prep and backporting imagemagick patches [16:40] that's it for me, chrisccoulson? [16:41] I've got Firefox updates this week, and I'm hoping Chromium will be ready to sponsor. I've just finished Oxide [16:42] Other than that, I'll be working through oxide bugs as usual [16:42] I think that's me done [16:44] chrisccoulson: 'just finished oxide'-- you mean for USN? [16:44] jdstrand, yeah [16:44] thanks [16:44] [TOPIC] Announcements === meetingology changed the topic of #ubuntu-meeting to: Announcements [16:45] I'd like to announce a couple of changes to the structure of the security team. [16:45] After almost 5.5 years as the manager of the security team, I decided it was time for a change. The security team is too awesome to leave so I'm not going far: I will stay on the security team as a generalist focusing on snappy initially and getting back to generalist duties in due course. :) [16:45] The other change is that I'd like to extend a warm welcome to Emily Ratliff (ratliff) for joining the Ubuntu Security team as manager and I'll be working with her to ensure a smooth transition. If you don't know Emily already, google her ;) She is very talented and accomplished and we are super-excited to have her join Canonical and the Ubuntu Security team. :) [16:46] ratliff: hi! not sure if you have anything to report for this week, but welcome! :) [16:46] woot! welcome ratliff! [16:46] Thank you, jdstrand! I am very excited to be here and looking forward to the sprint next week. [16:46] welcome aboard ratliff :) [16:47] ratliff: welcome! [16:47] As my first accomplishment, I have broken SSO. Once IS and I work things out, I will be easier to find, meanwhile I'm here on freenode [16:47] hehe [16:47] excellent :) [16:47] :-) [16:47] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [16:47] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:47] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:47] http://people.canonical.com/~ubuntu-security/cve/pkg/batmand.html [16:48] http://people.canonical.com/~ubuntu-security/cve/pkg/node-semver.html [16:48] http://people.canonical.com/~ubuntu-security/cve/pkg/pinpoint.html [16:48] http://people.canonical.com/~ubuntu-security/cve/pkg/mod-gnutls.html [16:48] http://people.canonical.com/~ubuntu-security/cve/pkg/gnugk.html [16:48] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [16:48] Does anyone have any other questions or items to discuss? [16:49] Just want to thank mdeslaur for ACKing the nginx debdiffs, helping get the nginx vulnerability patched rapidly :) [16:49] oh [16:50] :) [16:50] teward: I forgot to put that in the announcement [16:50] and to thank the Security Team for a continued job well done :) [16:50] Thomas Ward (teward) provided debdiffs for trusty-xenial for nginx (LP: #1587577) [16:50] Launchpad bug 1587577 in nginx (Ubuntu Yakkety) "[CVE-2016-4450] NULL pointer dereference while writing client request body" [Undecided,Fix released] https://launchpad.net/bugs/1587577 [16:50] jdstrand: not a problem :) [16:50] :) [16:50] teward: thanks for the debdiffs! [16:51] teward: thank you for the debdiffs and continuing to care for nginx :) [16:51] my pleasure :) [16:53] mdeslaur, sbeattie, sarnold, chrisccoulson, ratliff, teward: thanks! [16:53] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:53] Meeting ended Mon Jun 6 16:53:36 2016 UTC. [16:53] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2016/ubuntu-meeting.2016-06-06-16.31.moin.txt [16:53] thanks jdstrand! [16:53] jdstrand: thanks! [16:54] jdstrand: just keep the constant supply of coffee coming, it's what helped me churn out the debdiffs and the Yakkety upload to fix in a single day :) [16:54] oh, hi ratliff :) [16:54] also, greetings to the new security team member/manager :) [16:54] teward: hehe :) [16:55] teward: wait, who told you about my secret to productivity? :) [16:55] heheh [16:55] mdeslaur: self-discovered, 2009, Carnegie Mellon University [16:55] you'd be amazed how helpful a constant supply of coffee is :D [16:56] mdeslaur: not uncommon though for coffee to be the secret to productivity... I just consume ungodly amounts :) [16:56] thanks again to all [16:57] and welcome, ratliff, to the Canonical and Ubuntu Security Teams. [16:59] * genii makes another pot [16:59] heh [17:03] thank you, teward!