16:32 <tyhicks> #startmeeting 16:32 <meetingology> Meeting started Mon Mar 16 16:32:09 2015 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:32 <meetingology> 16:32 <meetingology> Available commands: action commands idea info link nick 16:32 <tyhicks> The meeting agenda can be found at: 16:32 <tyhicks> [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:32 <tyhicks> [TOPIC] Announcements 16:32 <tyhicks> Stefan Bader (smb) provided debdiffs for xen for precise to utopic 16:32 <tyhicks> Christian Hertel provided a debdiff for tntnet for precise (LP: #1430750) 16:32 <ubottu> Launchpad bug 1430750 in tntnet (Ubuntu) "Insecure Default Config leads to security issue" [Undecided,Fix released] https://launchpad.net/bugs/1430750 16:32 <tyhicks> Your contributions are very much appreciated and will keep Ubuntu users secure. Great job! :) 16:32 <tyhicks> [TOPIC] Weekly stand-up report 16:32 <tyhicks> jdstrand: you're up 16:35 <tyhicks> lets come back to him 16:35 <tyhicks> mdeslaur: go ahead 16:36 <jdstrand> oh sorry 16:36 <jdstrand> I can go now or after mdeslaur 16:37 <tyhicks> jdstrand: go ahead :) 16:37 <jdstrand> ok 16:37 <jdstrand> so, the performance reviews are all done 16:38 <jdstrand> I've been discussing snappy signatures and hashes with mvo, tyhicks and mdeslaur. we are getting real close to agreement. after which, I'll write it up 16:38 <jdstrand> I will be working on snappy hw access this week, and snappy frameworks 16:39 <jdstrand> all this snappy work will lead into more review tools work as well as click-apparmor 16:39 <jdstrand> I'm also working on an embargoed issue 16:39 <jdstrand> that's it from me 16:39 <mdeslaur> I'm on triage this week 16:40 <mdeslaur> I just published some USNs 16:40 <mdeslaur> I plan on working on php5, libav, and an embargoed issue this week 16:40 <mdeslaur> that's about it for me, sbeattie? 16:40 <sbeattie> I'm in the happy place this week. 16:41 <sbeattie> I'm currently refreshing my gcc-5 pie package against newer versions in the toolchain-r ppa 16:41 <sbeattie> after that, will continue testing there. 16:41 <sbeattie> I need to do some apparmor patch review 16:42 <sbeattie> oh I didn't get to the dhclient not getting its profile applied under snappy, will poke more at that this week 16:42 <sbeattie> that's it for me, tyhicks? 16:43 <tyhicks> I'm on the community role this week 16:44 <tyhicks> today, I'll be working on testing and fixing any bugs found in the libapparmor aa_features string parsing routines 16:44 <tyhicks> jjohansen thinks he spotted a bug (he's probably right) and that patch really needs tests 16:45 <tyhicks> after that, I think we're really close to landing the libapparmor parser cache API in upstream AppArmor 16:45 <tyhicks> I'll also be working on AppArmor kernel keyring mediation for user data encryption 16:46 <tyhicks> and, if I have time, I'll finish up the patches to fix bug #1430532 and send them out for review 16:46 <ubottu> bug 1430532 in AppArmor "libapparmor needs a public function to break a context into a label and mode" [Medium,In progress] https://launchpad.net/bugs/1430532 16:46 <tyhicks> that's it for me 16:46 <tyhicks> jjohansen: you're up 16:47 <jjohansen> I am on apparmor again this week. I need to finish up with my patches for Bug 1431717, Bug 1430546. I need to follow up with the latest Bug fixes pushed to the kernel team and make sure all patches are on all the kernels they should be. 16:47 <jjohansen> I'm sure there will be some more to do around the libapparmor cache API, and once that lands I can push my series around dfa testing. 16:47 <jjohansen> And then its back to the upstreaming work. 16:47 <ubottu> bug 1431717 in AppArmor "audit qualifier does not become effective" [Undecided,Confirmed] https://launchpad.net/bugs/1431717 16:47 <ubottu> bug 1430546 in linux (Ubuntu) "apparmor kernel BUG kills firefox" [Medium,Triaged] https://launchpad.net/bugs/1430546 16:48 <tyhicks> jjohansen: there's an email to the lsm list that you should probably have a look at 16:48 <tyhicks> jjohansen: it is in the stacked lsm patch set thread 16:48 <jjohansen> tyhicks: yeah there are several emails to the list I need to reply too 16:49 <tyhicks> jjohansen: stephen smalley points out a potential layering issue in apparmor 16:49 <jjohansen> yep 16:50 <jjohansen> that is it for /me sarnold you're up 16:50 <sarnold> I'm on bug triage this week, and it's another short week for me 16:51 <sarnold> there are outstanding MIR requests and outstanding openstack testing and updates to work on, not sure which ones I'm going to work on this week, but both are large enough that it's unliekly either one will be completed 16:52 <sarnold> I'll talk with tyhicks afterwards to figure out the priorities 16:52 <sarnold> chrisccoulson? 16:52 <chrisccoulson> Hi :) 16:53 <chrisccoulson> This week, I'm still trying to remove Oxide's dependency on GL share groups. I have a prototype, but it doesn't work yet 16:53 <chrisccoulson> I've also got an embargoed issue to fix 16:53 <chrisccoulson> other than that, I'm hoping for no surprises this week :) 16:53 <chrisccoulson> that's me done 16:54 <tyhicks> chrisccoulson: were you able to get to all the pending merge request reviews last week? 16:55 <mdeslaur> chrisccoulson: it's been at least 24 hours without a flash update, so perhaps you'll get one of those :) 16:55 <tyhicks> heh 16:55 <chrisccoulson> tyhicks, not all. But the most important ones are done 16:55 <tyhicks> chrisccoulson: good! :) 16:56 <tyhicks> [TOPIC] Highlighted packages 16:56 <tyhicks> The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:56 <tyhicks> See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:56 <tyhicks> http://people.canonical.com/~ubuntu-security/cve/pkg/oftc-hybrid.html 16:56 <tyhicks> http://people.canonical.com/~ubuntu-security/cve/pkg/xlhtml.html 16:56 <tyhicks> http://people.canonical.com/~ubuntu-security/cve/pkg/gcc-4.9-powerpc-cross.html 16:56 <tyhicks> http://people.canonical.com/~ubuntu-security/cve/pkg/feh.html 16:56 <tyhicks> http://people.canonical.com/~ubuntu-security/cve/pkg/python-rply.html 16:56 <tyhicks> [TOPIC] Miscellaneous and Questions 16:56 <tyhicks> Does anyone have any other questions or items to discuss? 16:58 <tyhicks> jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, chriscoulson: thanks! 16:58 <tyhicks> #endmeeting