=== maclin1 is now known as maclin [15:00] o/ [15:00] o/ [15:01] *randomly drops in* [15:02] o/ [15:02] o/ [15:02] Do we have two more? [15:02] bdmurray is here too [15:02] I'd expect cyphermox [15:02] Yeah, all hope in cyphermox now [15:02] ;) [15:03] o/ [15:03] long time no talk, micahg :P [15:03] *returns to silent mode* [15:04] Who's chairing? [15:04] micahg: o/ [15:04] I think I chaired the last one, so I'd prefer someone else just for variation [15:05] #startmeeting DMB [15:05] rbasak: thanks! [15:05] No bot? [15:05] Oh, hm, no meetingology? [15:05] i think the bot died o.O [15:05] if need be I can take logs for you guys, I log everything anyways :p [15:05] Who runs the bot? [15:06] No idea, never though about it as it was always here [15:07] Let's begin anyway. I'll just pretend the bot is here I guess. [15:07] #topic Review of previous action items [15:07] *starts logging to file* [15:07] rbasak to reping Aron regarding his request (DONE) [15:07] bdmurray, sil2100, rbasak to contact absentee DMB members (bdmurray: DONE, sil2100: DONE) [15:07] cyphermox to send his self nomination again (DONE) [15:07] rbasak to draft an argument for reducing quorum not head count (DONE) [15:07] rbasak to handle flexiondotorg's request for adding mate-hud to the MATE package set [15:07] I think cyphermox took this one in the end? [15:08] Yes, I believe he had a follow up question which has been unanswereed. [15:09] From my logs I found: [15:09] 20:32 rbasak: I'll do it [15:09] 20:33 (done) [15:09] in #ubuntu-release [15:09] Ah, and I see the ML reply. [15:09] Yeah, through e-mail he mentioned that this is an auto-generated packageset so yeah [15:09] So I think we can treat the action done for now at least? [15:09] +1 [15:09] flexiondotorg: please reply on the ML if you need a further action [15:09] Agreed [15:10] #topic Package Set/Per Package Uploader Applications [15:10] #subtopic teward - PPU for znc package - (Application) [15:10] teward: o/ [15:10] rbasak: Did you follow up with the absentee member you were going to? [15:10] hiya! [15:10] bdmurray: oh yes, I did, sorry. [15:11] rbasak: Lets do this application and then talk about the DMB itself. [15:11] ack [15:11] I must say that I did not have time to look at teward's application as it was submitted a few days before the meeting [15:11] we can postpone it to next if you wish [15:11] I had a look at it earlier. [15:11] i realized after the fact i should've specified next meeting. [15:11] So if we are to review the candidate I'd need some time to look into it [15:11] While we're here, I did have some questions for teward about his application though. [15:11] Clearing that up might help others consider the application perhaps? [15:11] rbasak: feel free to ask, or send them my way via email :) [15:11] teward: also, I generally see no endorsements for your application - who was the main sponsor of your uploads? [15:12] We like endorsments [15:12] A lot ;) [15:12] teward: I looked and didn't see any recent upload sponsorships. Usually we expect those in any application. [15:13] teward: and since usually we expect to grant upload access in order to unblock someone by no longer having to go by a sponsor, I wasn't really able to follow why you were applying. [15:13] teward: so perhaps you could give us some more background on that please? [15:14] FWIW I don't see any SRUs of znc either. [15:14] bdmurray: we'd be looking far back into history, to find those - the package has been stbale for the longest time, but is *old* in Ubuntu for the most part (devel is usually a bit behind on bugfixes) [15:14] actually, can we move those questions to ML or next meeting? [15:14] something just exploded at work and I have to go do emergency maintenance [15:14] OK [15:14] Let's postpone for now then. [15:15] sorry to say "move to next meeting or ML" [15:15] #agreed Applicaton postponed [15:15] teward: sure, I guess it's even better since I'd like you to add a few missing bits to your application [15:15] teward: let me get back to you on that later [15:15] ack [15:16] bdmurray: i'll dig for the 'latest' upload and SRU, there's been not many releases between history and now, though you'll find one in 2016-03-17 sponsored by rbasak for 1.6.3-1 to xenial-proposed. [15:16] *disappears to do critical systems maintenance* [15:16] No more applications, so we have ML requests and the more general DMB itself topic remaining [15:16] I will have a copy of the IRC logs though if you need them. [15:16] #topic Outstanding mailing list requests to assign [15:18] I don't see any. Am I missing something? [15:18] "packageset refresh for kubuntu" [15:18] Did that happen? [15:18] hm, can't remember anymore [15:18] Are we still getting the diffs of those per cyphermox scripts? [15:19] I'm not sure. It'd be nice if cyphermox were here to discuss it. [15:19] Shall we postpone that one for now? [15:19] So that's everything I think. [15:20] #topic DMB itself [15:20] moo? [15:20] rbasak: update: I'll retract my PPU request - the package is mostly stable and doesn't need much maintenance except syncs and occasional patching. [15:20] most of which is security. [15:20] sorry. [15:20] oh, the packageset diff [15:20] so strike that from the agenda for future. [15:20] cc: sil2100 ^ [15:20] (disappears) [15:20] teward: OK, thanks. Note that if you keep having to do syncs, I think it's reasonable to ask for upload access so you can stop using a sponsor. [15:21] rbasak: i'll discuss later at next PPU application when I have more endorsements and stuff - that's gonna be next quarter at this rate. [15:21] *disappears again* [15:21] So where are we with the DMB's status? [15:22] I was just looking at your last email rbasak [15:22] We have 2 expiring nominations [15:22] Both are covered by new candidates [15:22] Do the inactive members still want to be active? [15:23] Or rather I guess there are 3 topics re dmb status. [15:23] inactive members [15:23] dmb size [15:23] expiriing members [15:23] yep [15:23] I'm expiring again :0 [15:23] I talked with infinity and he's not interested in being active [15:23] But he's expiring anyway [15:23] cyphermox: but you nominated yourself right? [15:23] micahg is intrested in being active (and he's here) [15:24] sil2100: I did [15:24] So currently, cyphermox and infinity are expiring, but we have 2 candidates: cyphermox and jbicha [15:24] So I guess both seats can be occupied ;) [15:24] bdmurray: did you talk with BenC ? [15:25] yes and he wants to stay on [15:25] rbasak: as for the packageset update script, looks like I had forgotten to put the address back to t [15:25] bdmurray: is there any chance he will be able to participate? [15:25] to the dmb, it was sent only to me this sunday [15:25] (one such report should be coming now) [15:25] cyphermox: thanks! [15:26] sil2100: I thought he showed up at the last meeting but we didn't discuss anything [15:26] Ok [15:26] Maybe only the later time works for him [15:26] Maybe we should start taking attendence per your suggestion sil2100? [15:26] yeah, timing is an issue [15:27] I recall we tried to talk about that before but I felt like there were too many choices. [15:27] yeah [15:27] micahg: Maybe you can suggest what works for you with out timezones in consideration? [15:28] That'll reduce the number of choices we have to vote on. [15:28] Yeah, I'm open to propositions for the timing but the current one works for me [15:28] well, right now I'm good with times, let's check with BenC maybe [15:29] Okay, since I talked to him before I'll do that. [15:29] btw. question from DMB formalities as I don't want to look for it in wiki pages: if we have 2 DMB vacancies and 2 candidates, no voting is required, right? [15:30] in the past that's what we've done, but usually only when it's a reapply or they've already come close to winning an election from what I can remember [15:30] I don't know off the top of my head. [15:31] Is it up to us to decide the method of picking members for expired seats? Or the TB's? [15:32] Since cyphermox is re-applying, but jbicha is applying for the first time - but since there's no other candidates, voting doesn't seem to make sense? [15:32] Ubuntu developers may wish to decide "none of the above". But I'm not aware that's ever been an option in the past. [15:33] I'm also not aware of any mechanism to qualify nominations, unlike TB nominations. [15:33] I think sending a notification reminding people what will happen would be good as it may draw out another candidate/ [15:33] +1 [15:33] * bdmurray went out in the woods and forgot how to type [15:34] +1 [15:34] sil2100: Do you mind doing that? [15:34] bdmurray: the reminder about expirations? Sure [15:35] You can assign me an action item [15:35] One the bot will record? ;-) [15:35] ;) [15:35] One that the person updating the agenda will record I guess ;p [15:36] #action sil2100 to send out a DMB nomination reminder, including information about what happens if there are few nominations. [15:39] bdmurray: as for attendence, I guess we might have overall attendence listed as per meeting logs, right? [15:40] sil2100: I'm not certain looking at historic information is necessary. [15:40] Not sure if it makes sense to formalize the number of how many missed meetings in a row is required to start getting warned about possible 'expiration through inactivity' [15:40] #action bdmurray follow up with BenC regarding meeting times [15:40] Anyway, hopefully it seems all better now with the attendence rate [15:41] maybe cyphermox can email us all the friday before? or is the calendar enough? [15:43] maybe we should also monitor meeting lack of attention [15:44] cyphermox: ? [15:44] err, sure? [15:45] I'm not sure how I can email the friday before expiring, there might not be time ;) [15:45] I don't know if its a great idea but I don't look at my Monday schedule on Friday normally so might forget. [15:45] it works for some expiry deadlines, but not all I think [15:45] or I mean, not meaningfully [15:45] cyphermox: I mean about the meeting time. [15:46] the calendar should be sending us reminders [15:46] okay [15:46] i would be crazy for me to create a calendar reminder for me to send a reminder [15:47] I really think that things to help people attend need to be driven by, or at least decided in association with, people who have the attendance issues. And they're not here. [15:48] heh [15:48] I think we're trying to fix a problem that we won't have provided the people in the board care. [15:48] ie. we can ping each other on IRC and that typically works for most things, does it not? [15:49] if you don't heed a calendar reminder and then a ping, you're either busy with something else or otherwise unable to attend [15:50] (or don't care, and then the CoC says you should be stepping down considerately) [15:50] Okay, so lets work on sorting out the expiring members and query Ben about a different meeting time. [15:50] I think we should still talk about what to do if quorum reaching is hard, but not necessarily act on it. [15:50] bdmurray: presumably people are still reachable, we can ask them if they still care, and do elections earlier [15:52] I mean, I agree that we need to have a plan or an idea what to do, but not sure there is any recurring action to do or process to install to enforce attendance. If we need to force attendance it means we're not staffed correctly in the first place [15:54] I didn't mean enforcing attendance rather being more proactive when members don't show up. "Hey, we missed you at the meeting is the time still okay? ..." [15:54] I think we let this lack of attendance issue go on for too long. [15:54] yes ok [15:55] I've got another meeting soon, anything else? [15:55] my point is, isn't that something we can sort at a meeting when it happens? let's say someone misses two meetings in a row without sending apology prior; we can hand an action to someone then [15:56] That's pretty difficult when we don't have meetings because we haven't made quorum. [15:56] Anyway, I think we've reached the useful end of this discussion. [15:56] Is there a rule that we can't have meeting if we don't have quorum? I think we can't just vote on stuff. [15:57] I'm not sure we're going to reach consensus on this, so if there's any action that needs taking, perhaps we need to continue discussion the ML. [15:57] Any objections to finishing the meeting now? [15:57] no [15:57] No [15:57] #endmeeting [15:57] indeed, we can still have meeting, just can't vote [15:57] I'll sort out the minutes. [15:57] o/ [15:57] o/ [15:58] thanks rbasak! [16:32] hello [16:32] hi! [16:32] #startmeeting [16:33] \o [16:33] no bot today [16:34] The meeting agenda can be found at: [16:34] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:34] [TOPIC] Weekly stand-up report [16:34] jdstrand: you're up [16:34] last week I was most busy getting through sprint outcomes and being responsive to snapd PRs. I also ended up being quite busy with several forum topics related to policy denials [16:34] this week I plan to: [16:34] - be responsive to snapd PRs [16:34] - review the big udev tagging PR [16:34] - pick up the wayland interface [16:34] - start working through a new (desktop?) interface for gnome-shell, plasma, sway [16:34] that's it from me. mdeslaur, you're up [16:35] I'm in the happy place this week again [16:35] I'm about to publish an imagemagick regression fix [16:35] and I have rabbitmq-server updates to push out [16:35] after that, I'll be going down the list, as usual [16:35] that's about it [16:35] sbeattie: tag, you're it [16:36] I'm in the happy place this week [16:36] I have an openjdk-8 regression update to publish [16:36] and presumably will have an openjdk-7 coming shortly [16:37] I have an embargoed issue [16:37] I'll go through the list looking for other issues. [16:37] I have a minor backlog of qrt issues to go through. [16:37] that's it for me. [16:37] tyhicks: over to you [16:38] I'm on community this week [16:38] I'll likely be responding to feedback from the seccomp logging kernel patches that I sent out last friday [16:39] I am going to look at the fscrypt tests that run as part of `make check` to determine which ones are appropriate to run as part of the package build [16:39] that'll hopefully allow me to upload the fscrypt package to artful [16:39] then I'll start looking at the PR for pam_fscrypt [16:40] I still need to familiarize myself with the LSM stacking patch set [16:40] that's it for me [16:40] jjohansen: you're up [16:40] I still working on revising the networking/unix socket patches for upstreaming [16:40] I need to spend some time looking at the 4.13 LSM stacking patches [16:40] and I also need to spend some time looking at the IMA namespacing thread [16:41] that is it for me sarnold you're up [16:41] I'm on bug triage this week; I also hope to review an apparmor patch or two, and run down the MIRs as I can [16:42] that's it for me, I didn't see chris coulson, nor ratliff, so I'm guessing leosilva? [16:42] I worked in some updates last week, found/fixed a davfs2 issue with apache2 update [16:42] today I want to publish them and during the week search for new updates to do [16:42] that is for me. [16:42] tyhicks: it's back toyou [16:43] thanks [16:43] [TOPIC] Highlighted packages [16:43] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:43] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:43] http://people.canonical.com/~ubuntu-security/cve/pkg/atril.html [16:43] http://people.canonical.com/~ubuntu-security/cve/pkg/libdigidoc.html [16:43] http://people.canonical.com/~ubuntu-security/cve/pkg/libjgroups-java.html [16:43] http://people.canonical.com/~ubuntu-security/cve/pkg/ldns.html [16:43] http://people.canonical.com/~ubuntu-security/cve/pkg/minizip.html [16:43] [TOPIC] Miscellaneous and Questions [16:43] Does anyone have any other questions or items to discuss? [16:46] jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, leosilva: Thanks! [16:46] #endmeeting [16:46] thanks tyhicks [16:46] thanks tyhicks [16:46] thanks tyhicks! [16:46] tyhicks: thanks! [16:48] thanks tyhicks :) [16:48] thanks tyhicks! === ogra_ is now known as ogra === JanC is now known as Guest68181 === JanC_ is now known as JanC