Thursday, 2015-04-09

*** sdake_ has quit IRC00:00
*** gabriela has left #openstack-security00:08
*** v4s has quit IRC00:12
*** v4s has joined #openstack-security00:15
*** JAHoagie has quit IRC00:19
tmcpeakdave-mccowan: how was the Wiki section? everything clear?00:34
*** bknudson has joined #openstack-security00:48
dave-mccowantmcpeak, can you help me out with the code review comment?  John has asked about the test-requirements-bandit.txt file.01:33
dave-mccowantmcpeak, so far i've just done steps 1-3, so folks can get a chance to play with it before moving it to the gate.  those steps were easy to follow, and the pointers to the keystone example were helpful.  the links to the example files could be improved by pointing directly to the 'raw' format in github to make cut and paste or download easier.01:39
*** bpokorny has quit IRC01:47
*** browne has quit IRC02:07
*** browne has joined #openstack-security02:38
*** bpokorny has joined #openstack-security02:54
*** tmcpeak has quit IRC03:09
*** bpokorny has quit IRC03:17
*** bpokorny has joined #openstack-security03:17
*** bpokorny_ has joined #openstack-security03:18
*** bpokorny has quit IRC03:22
*** dave-mccowan has quit IRC03:40
*** browne has quit IRC04:10
*** bpokorny_ has quit IRC04:14
*** raginbajin has quit IRC04:32
*** raginbajin has joined #openstack-security04:35
*** browne has joined #openstack-security04:46
openstackgerritChris Marino proposed openstack/security-doc: Security Guide links invalid  https://review.openstack.org/17192204:57
*** browne has quit IRC06:00
*** teh_slack has quit IRC06:29
*** teh_slack has joined #openstack-security06:31
*** sdake_ has joined #openstack-security06:32
openstackgerritOpenStack Proposal Bot proposed openstack/security-doc: Imported Translations from Transifex  https://review.openstack.org/17147206:59
*** sdake_ has quit IRC07:05
*** salv-orlando has joined #openstack-security07:17
*** sdake has joined #openstack-security07:18
*** sdake_ has joined #openstack-security07:25
*** sdake has quit IRC07:26
*** salv-orlando has quit IRC07:27
*** salv-orlando has joined #openstack-security07:28
*** sdake_ has quit IRC07:30
*** salv-orl_ has joined #openstack-security07:30
*** salv-orlando has quit IRC07:31
*** salv-orl_ has quit IRC07:50
*** sdake has joined #openstack-security07:52
*** jamielennox is now known as jamielennox|away08:01
*** Kennan has joined #openstack-security08:14
*** Kennan has left #openstack-security08:15
*** pcaruana has joined #openstack-security09:17
*** sdake_ has joined #openstack-security09:46
*** sdake_ has quit IRC09:49
*** sdake has quit IRC09:50
*** tmcpeak has joined #openstack-security10:04
*** jamielennox|away is now known as jamielennox10:42
tmcpeakbknudson: don't assume you're around yet, are you?11:46
*** jamielennox is now known as jamielennox|away11:53
*** aswadr has joined #openstack-security12:20
*** bknudson has quit IRC12:20
*** asrangne has joined #openstack-security12:27
*** aswadr has quit IRC12:30
*** asrangne has quit IRC12:31
*** aswadr has joined #openstack-security12:33
*** browne has joined #openstack-security12:40
*** bknudson has joined #openstack-security12:42
*** aswadr has quit IRC12:54
*** aswadr has joined #openstack-security12:55
*** dave-mccowan has joined #openstack-security12:56
*** JAHoagie has joined #openstack-security13:21
*** singlethink has joined #openstack-security13:26
*** dave-mccowan has quit IRC13:33
*** dave-mccowan has joined #openstack-security13:34
*** edmondsw has joined #openstack-security13:50
*** openstackgerrit has quit IRC13:53
*** openstackgerrit has joined #openstack-security13:53
*** markvoelker has quit IRC13:58
*** markvoelker has joined #openstack-security13:59
*** vozcelik has joined #openstack-security14:05
*** browne has quit IRC14:05
*** sdake has joined #openstack-security14:10
*** pcaruana has quit IRC14:17
*** JAHoagie has quit IRC14:17
*** sicarie has joined #openstack-security14:31
*** browne has joined #openstack-security14:36
*** voodookid has joined #openstack-security14:41
*** salv-orlando has joined #openstack-security14:41
*** salv-orlando has quit IRC14:54
*** bpokorny has joined #openstack-security15:16
*** bpokorny_ has joined #openstack-security15:20
*** bpokorny has quit IRC15:23
dave-mccowantmcpeak ping15:31
openstackgerritShellee Arnold proposed openstack/security-doc: Fix for sentence fragments  https://review.openstack.org/17211915:31
openstackgerritShellee Arnold proposed openstack/security-doc: Fix for sentence fragments  https://review.openstack.org/17211915:35
*** salv-orlando has joined #openstack-security15:36
*** dave-mccowan has quit IRC15:38
tmcpeakdave-mccowan: what's up15:39
*** singlethink has quit IRC15:39
*** tkelsey has joined #openstack-security15:54
*** dave-mccowan has joined #openstack-security15:56
tmcpeakdave-mccowan: yo15:56
dave-mccowantmcpeak, for bandit related commits, shall I use the SecurityImpact tag in the commit message?15:57
tmcpeakI wouldn't, my understanding of that tag if a branch is missing a commit it might have a vulnerability15:57
tmcpeak"•security: Fix for the bug would make OpenStack more resilient to future security issues."15:58
tmcpeakI don't know, could go either way15:58
tmcpeakgmurphy: what do you think?15:58
gmurphythe security impact is generally used if you want to draw the attention of the security team to review a commit. i think that it would be better to reserve this for changes that actually impact security of an openstack project.16:03
tmcpeakdave-mccowan: ^16:03
tmcpeakcool, thanks gmurphy16:03
gmurphyhave we got gerrit setup to post changes here?16:03
gmurphysimilar to how security-doc works?16:03
tmcpeakgmurphy: post changes to which project?16:03
gmurphyso you make a change to bandit16:04
tmcpeakbandit and anchor changes post here16:04
gmurphyah cool16:04
tmcpeakthis is a change for Barbican to use Bandit though16:04
gmurphyah i see.16:04
*** singlethink has joined #openstack-security16:06
*** singlethink has quit IRC16:13
*** singlethink has joined #openstack-security16:37
*** bpokorny has joined #openstack-security16:48
*** bpokorny_ has quit IRC16:50
*** aswadr has quit IRC16:57
*** openstack has quit IRC17:13
*** openstack has joined #openstack-security17:13
*** salv-orlando has quit IRC17:24
openstackgerritNathan Kinder proposed openstack/security-doc: Add OSSN-0047  https://review.openstack.org/17215717:49
*** bpokorny has quit IRC17:49
*** salv-orlando has joined #openstack-security17:51
nkinderhmmm, no hyakuhei over here17:59
tmcpeakhe's too cool now17:59
nkindercan't be seen slumming it with the likes of us ;)18:00
tmcpeakexactly18:00
nkinderhe owes us an update on his pecan OSSN18:00
tmcpeakoh yeah18:00
tmcpeakI'll throw him a msg18:00
tmcpeaknkinder: taking a look now on OSSN-4718:02
nkindertmcpeak: thanks18:03
dave-mccowangmurphy, re: earlier discussion... for the CR to add a Bandit tox env to Barbican, should that be tagged as SecurityImpact or not?18:05
*** sdake_ has joined #openstack-security18:05
*** bpokorny has joined #openstack-security18:07
*** sdake has quit IRC18:09
tmcpeakdave-mccowan: his take was no, that tag is if you want the security team to come and look at your change for some reason18:14
*** sdake has joined #openstack-security18:25
*** tkelsey has quit IRC18:26
*** sdake_ has quit IRC18:29
*** vozcelik has quit IRC18:35
openstackgerritMerged openstack/security-doc: Fix for restatement of duplicated work  https://review.openstack.org/16394618:59
openstackgerritShellee Arnold proposed openstack/security-doc: Fix for sentence fragments  https://review.openstack.org/17211919:04
openstackgerritNathan Kinder proposed openstack/security-doc: Add OSSN-0047  https://review.openstack.org/17215719:33
openstackgerritMerged openstack/security-doc: Fix for sentence fragments  https://review.openstack.org/17211919:40
*** gabriela has joined #openstack-security20:49
*** sdake has quit IRC20:53
*** edmondsw has quit IRC21:17
*** gabriela has left #openstack-security21:27
*** singleth1nk has joined #openstack-security22:03
*** singlethink has quit IRC22:04
*** sdake has joined #openstack-security22:07
*** singlethink has joined #openstack-security22:08
*** sdake_ has joined #openstack-security22:10
*** singleth1nk has quit IRC22:11
*** sdake has quit IRC22:14
*** bknudson has quit IRC22:20
*** dave-mccowan has quit IRC22:22
*** singlethink has quit IRC22:40
*** dave-mccowan has joined #openstack-security22:41
*** bpokorny has quit IRC22:42
*** sdake_ has quit IRC22:47
*** voodookid has quit IRC23:14
*** sicarie has left #openstack-security23:42
*** bpokorny has joined #openstack-security23:45
*** bknudson has joined #openstack-security23:45
*** edmondsw has joined #openstack-security23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!