| openstackgerrit | Jamie Finnigan proposed openstack/bandit: Adding "hardcoded_tmp_directory" documentation https://review.openstack.org/208482 | 00:03 |
|---|---|---|
| openstackgerrit | Stanislaw Pitucha proposed openstack/anchor: Add fixups configuration / processing https://review.openstack.org/202134 | 00:04 |
| *** markvoelker has quit IRC | 00:06 | |
| openstackgerrit | Brant Knudson proposed openstack/bandit: Fix running when empty config file https://review.openstack.org/220355 | 00:06 |
| *** y_sawai has joined #openstack-security | 00:07 | |
| *** hyakuhei_ has joined #openstack-security | 00:08 | |
| *** y_sawai has quit IRC | 00:08 | |
| *** hyakuhei has quit IRC | 00:10 | |
| *** hyakuhei_ is now known as hyakuhei | 00:10 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 00:10 | |
| *** tmcpeak has quit IRC | 00:17 | |
| *** bknudson has quit IRC | 00:18 | |
| *** michaelxin has quit IRC | 00:20 | |
| *** browne has quit IRC | 00:21 | |
| *** tkelsey has quit IRC | 00:25 | |
| *** markvoelker has joined #openstack-security | 01:07 | |
| *** markvoelker_ has joined #openstack-security | 01:08 | |
| *** y_sawai has joined #openstack-security | 01:11 | |
| *** markvoelker has quit IRC | 01:12 | |
| *** y_sawai has quit IRC | 01:13 | |
| *** hyakuhei has quit IRC | 01:14 | |
| *** markvoelker_ has quit IRC | 01:16 | |
| *** y_sawai has joined #openstack-security | 01:32 | |
| *** sdake has joined #openstack-security | 01:33 | |
| *** y_sawai has quit IRC | 01:35 | |
| *** nkinder has quit IRC | 01:37 | |
| *** y_sawai has joined #openstack-security | 01:48 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 02:21 | |
| *** sdake_ has joined #openstack-security | 02:23 | |
| *** y_sawai has joined #openstack-security | 02:27 | |
| *** sdake has quit IRC | 02:27 | |
| *** sdake__ has joined #openstack-security | 02:27 | |
| *** y_sawai has quit IRC | 02:29 | |
| *** sdake_ has quit IRC | 02:30 | |
| *** sdake__ is now known as sdake | 02:33 | |
| *** markvoelker has joined #openstack-security | 02:35 | |
| *** markvoelker has quit IRC | 02:49 | |
| *** enot305 has joined #openstack-security | 02:50 | |
| *** enot305 has left #openstack-security | 02:50 | |
| *** markvoelker has joined #openstack-security | 02:50 | |
| *** Kimberly1 has joined #openstack-security | 02:55 | |
| *** Kimberly1 has quit IRC | 02:55 | |
| *** markvoelker has quit IRC | 03:06 | |
| *** openstackgerrit_ has joined #openstack-security | 03:11 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 03:15 | |
| *** browne has joined #openstack-security | 03:17 | |
| *** dave-mccowan has quit IRC | 03:20 | |
| *** sdake_ has joined #openstack-security | 03:20 | |
| *** tkelsey has joined #openstack-security | 03:22 | |
| *** sdake has quit IRC | 03:25 | |
| *** sigmavirus24_awa has quit IRC | 03:28 | |
| *** sigmavirus24_awa has joined #openstack-security | 03:35 | |
| *** sdake_ is now known as sdake | 03:40 | |
| *** sdake_ has joined #openstack-security | 03:44 | |
| *** sdake_ has quit IRC | 03:45 | |
| *** sdake_ has joined #openstack-security | 03:45 | |
| *** sdake has quit IRC | 03:48 | |
| *** markvoelker has joined #openstack-security | 03:53 | |
| *** markvoelker_ has joined #openstack-security | 03:57 | |
| *** markvoelker has quit IRC | 03:58 | |
| *** markvoelker_ has quit IRC | 03:58 | |
| *** openstackgerrit_ has quit IRC | 04:14 | |
| *** tkelsey has quit IRC | 04:51 | |
| openstackgerrit | Stanislaw Pitucha proposed openstack/anchor: Replace extension instead of adding duplicate https://review.openstack.org/220393 | 04:52 |
| openstackgerrit | Stanislaw Pitucha proposed openstack/anchor: Add fixup enforcing SAN extension https://review.openstack.org/220394 | 04:52 |
| openstackgerrit | Stanislaw Pitucha proposed openstack/anchor: Remove old validator https://review.openstack.org/220395 | 05:01 |
| *** sdake_ is now known as sdake | 05:09 | |
| *** jamielennox is now known as jamielennox|away | 05:35 | |
| *** sdake has quit IRC | 05:39 | |
| *** hyakuhei has joined #openstack-security | 05:42 | |
| *** y_sawai has joined #openstack-security | 05:46 | |
| *** jamielennox|away is now known as jamielennox | 05:58 | |
| *** sdake has joined #openstack-security | 06:10 | |
| *** tkelsey has joined #openstack-security | 06:19 | |
| *** tkelsey has quit IRC | 06:24 | |
| *** hyakuhei has quit IRC | 06:26 | |
| *** y_sawai has quit IRC | 06:26 | |
| *** tjt263 has quit IRC | 06:28 | |
| *** quie has joined #openstack-security | 06:48 | |
| *** quie2 has joined #openstack-security | 06:51 | |
| *** quie has quit IRC | 06:52 | |
| *** jamielennox is now known as jamielennox|away | 07:08 | |
| *** shohel has joined #openstack-security | 07:09 | |
| openstackgerrit | Stanislaw Pitucha proposed openstack/anchor: Add rfc based validators https://review.openstack.org/220416 | 07:09 |
| *** sdake_ has joined #openstack-security | 07:11 | |
| *** sdake has quit IRC | 07:13 | |
| *** sdake__ has joined #openstack-security | 07:14 | |
| *** sdake_ has quit IRC | 07:17 | |
| *** browne has quit IRC | 07:19 | |
| *** jamielennox|away is now known as jamielennox | 07:32 | |
| *** elo has joined #openstack-security | 07:34 | |
| *** sdake has joined #openstack-security | 08:11 | |
| *** sdake__ has quit IRC | 08:12 | |
| *** sdake_ has joined #openstack-security | 08:12 | |
| *** sdake has quit IRC | 08:16 | |
| *** tkelsey has joined #openstack-security | 08:20 | |
| *** tkelsey has quit IRC | 08:25 | |
| *** jbasalone has joined #openstack-security | 08:26 | |
| *** lexholden has joined #openstack-security | 08:27 | |
| *** alex_klimov has joined #openstack-security | 08:32 | |
| *** jbasalone has quit IRC | 08:34 | |
| *** quie has joined #openstack-security | 09:06 | |
| *** quie2 has quit IRC | 09:07 | |
| *** quie has quit IRC | 09:15 | |
| *** quie has joined #openstack-security | 09:15 | |
| *** dave-mccowan has joined #openstack-security | 10:06 | |
| *** quie2 has joined #openstack-security | 10:17 | |
| *** y_sawai has joined #openstack-security | 10:19 | |
| *** quie has quit IRC | 10:19 | |
| *** quie has joined #openstack-security | 10:22 | |
| *** quie2 has quit IRC | 10:22 | |
| *** quie has quit IRC | 10:26 | |
| *** y_sawai has quit IRC | 10:54 | |
| *** shohel has quit IRC | 11:05 | |
| *** shohel has joined #openstack-security | 11:29 | |
| *** tjt263 has joined #openstack-security | 11:38 | |
| *** y_sawai has joined #openstack-security | 11:53 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 12:32 | |
| *** edmondsw has joined #openstack-security | 12:33 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 12:39 | |
| *** tjt263 has quit IRC | 12:51 | |
| *** tjt263 has joined #openstack-security | 12:53 | |
| *** tjt263 has quit IRC | 12:55 | |
| *** VivCheri has joined #openstack-security | 13:24 | |
| VivCheri | Hi | 13:24 |
| VivCheri | Good Evening. | 13:24 |
| *** LelouchV has joined #openstack-security | 13:26 | |
| *** tkelsey has joined #openstack-security | 13:34 | |
| *** tkelsey has quit IRC | 13:39 | |
| *** edmondsw has quit IRC | 13:42 | |
| *** JAHoagie has joined #openstack-security | 13:45 | |
| *** sdake has joined #openstack-security | 13:49 | |
| *** sdake_ has quit IRC | 13:51 | |
| *** localloop127 has joined #openstack-security | 14:06 | |
| *** sdake_ has joined #openstack-security | 14:06 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:08 | |
| *** sdake has quit IRC | 14:10 | |
| *** JAHoagie has quit IRC | 14:11 | |
| *** edmondsw has joined #openstack-security | 14:13 | |
| *** browne has joined #openstack-security | 14:20 | |
| *** LelouchV has quit IRC | 14:30 | |
| *** y_sawai has quit IRC | 14:35 | |
| *** dave-mccowan has quit IRC | 14:43 | |
| *** y_sawai has joined #openstack-security | 14:45 | |
| openstackgerrit | Shellee Aragon proposed openstack/security-doc: OSSN - Cached Keystone Tokens https://review.openstack.org/219922 | 14:46 |
| *** dave-mccowan has joined #openstack-security | 15:00 | |
| *** shohel has quit IRC | 15:08 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 15:13 | |
| *** y_sawai has quit IRC | 15:15 | |
| *** y_sawai has joined #openstack-security | 15:15 | |
| *** y_sawai has quit IRC | 15:16 | |
| *** lexholden has quit IRC | 15:16 | |
| *** dwyde has joined #openstack-security | 15:18 | |
| *** sdake has joined #openstack-security | 15:21 | |
| *** tmcpeak has joined #openstack-security | 15:22 | |
| *** sdake_ has quit IRC | 15:24 | |
| *** sdake has quit IRC | 15:25 | |
| *** tkelsey has joined #openstack-security | 15:26 | |
| *** y_sawai has joined #openstack-security | 15:29 | |
| *** timkennedy has joined #openstack-security | 15:30 | |
| openstackgerrit | Jamie Finnigan proposed openstack/bandit: Adding "hardcoded_sql_expressions" documentation https://review.openstack.org/208480 | 15:34 |
| *** y_sawai has quit IRC | 15:34 | |
| *** JAHoagie has joined #openstack-security | 15:37 | |
| tkelsey | chair6: thanks for patching up the docs mate | 15:40 |
| *** browne has quit IRC | 15:48 | |
| openstackgerrit | Robert Clark proposed openstack/anchor: Changes to allow sphinx to build correctly https://review.openstack.org/220289 | 15:49 |
| openstackgerrit | Merged openstack/bandit: Adding "hardcoded_tmp_directory" documentation https://review.openstack.org/208482 | 15:52 |
| openstackgerrit | Merged openstack/bandit: Adding "hardcoded_password" documentation https://review.openstack.org/208479 | 15:52 |
| openstackgerrit | Merged openstack/bandit: Adding assert_used documentation https://review.openstack.org/207104 | 15:52 |
| *** jian5397 has joined #openstack-security | 15:55 | |
| *** dave-mccowan has quit IRC | 15:56 | |
| *** y_sawai has joined #openstack-security | 15:59 | |
| *** browne has joined #openstack-security | 16:00 | |
| chair6 | tkelsey: no worries .. thinking i might write a little script to check for docs coverage against the plugins we have defined :) | 16:05 |
| tkelsey | nice, though the placeholder files may mess with that | 16:05 |
| *** dave-mccowan has joined #openstack-security | 16:08 | |
| openstackgerrit | Merged openstack/bandit: Adding "hardcoded_sql_expressions" documentation https://review.openstack.org/208480 | 16:27 |
| openstackgerrit | Michael Xin proposed openstack/security-doc: Adding an OSSN for bug 1456228 - Trusted VM powered on untrusted host https://review.openstack.org/220263 | 16:31 |
| openstack | bug 1456228 in OpenStack Security Notes "Trusted vm can be powered on untrusted host" [Medium,Confirmed] https://launchpad.net/bugs/1456228 - Assigned to Michael Xin (michael-xin) | 16:31 |
| *** alex_klimov has quit IRC | 16:34 | |
| *** edmondsw has quit IRC | 16:38 | |
| *** bknudson has joined #openstack-security | 16:44 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 16:49 | |
| openstackgerrit | Michael Xin proposed openstack/security-doc: Adding an OSSN for bug 1456228 - Trusted VM powered on untrusted host https://review.openstack.org/220263 | 16:58 |
| openstack | bug 1456228 in OpenStack Security Notes "Trusted vm can be powered on untrusted host" [Medium,Confirmed] https://launchpad.net/bugs/1456228 - Assigned to Michael Xin (michael-xin) | 16:58 |
| *** dwyde has quit IRC | 17:01 | |
| *** openstackgerrit_ has joined #openstack-security | 17:02 | |
| *** edmondsw has joined #openstack-security | 17:03 | |
| *** sdake has joined #openstack-security | 17:19 | |
| openstackgerrit | Charles Neill proposed openstack/bandit: Adding HTML formatter https://review.openstack.org/220592 | 17:23 |
| ccneill_ | tmcpeak: just submitted a patch for HTML formatting - https://review.openstack.org/#/c/220592/ | 17:24 |
| tmcpeak | ccneill_: awesome, we'll check it out | 17:24 |
| ccneill_ | it doesn't let you customize it as much as bandit-buddy because I wasn't sure how much would be reasonable to add to bandit.yaml | 17:24 |
| ccneill_ | but if it's something people would like, I can have it link to Github like bandit-buddy, using a config option | 17:25 |
| openstackgerrit | Eric Brown proposed openstack/bandit: Merge the two weak_cryptographic_key checks https://review.openstack.org/220594 | 17:25 |
| ccneill_ | oops, silly me | 17:25 |
| ccneill_ | didn't run pep8 on it first | 17:25 |
| *** jian5397 is now known as michaelxin | 17:27 | |
| michaelxin | ccneill_: Good job | 17:27 |
| ccneill_ | thanks michaelxin | 17:27 |
| *** ccneill_ is now known as ccneill | 17:27 | |
| *** elo has quit IRC | 17:31 | |
| *** VivCheri has quit IRC | 17:34 | |
| *** tmcpeak has quit IRC | 17:36 | |
| *** LelouchV has joined #openstack-security | 17:37 | |
| openstackgerrit | Eric Brown proposed openstack/bandit: Merge the two weak_cryptographic_key checks https://review.openstack.org/220594 | 17:39 |
| *** hyakuhei has joined #openstack-security | 17:42 | |
| hyakuhei | elmiko: https://review.openstack.org/#/c/220289/ | 17:44 |
| hyakuhei | Installation seems broken - | 17:44 |
| hyakuhei | elmiko: Infra runs this to gen the docs: “tox -e venv python setup.py build_sphinx” | 17:49 |
| *** y_sawai has quit IRC | 17:53 | |
| openstackgerrit | Nathaniel Dillon proposed openstack/security-doc: Adding OSSN-0052 https://review.openstack.org/219903 | 18:01 |
| *** dwyde has joined #openstack-security | 18:04 | |
| *** b10n1k_ has quit IRC | 18:06 | |
| openstackgerrit | Tim Kelsey proposed openstack/bandit: Simplifying Result Store https://review.openstack.org/219955 | 18:17 |
| *** JAHoagie has quit IRC | 18:27 | |
| *** b10n1k_ has joined #openstack-security | 18:33 | |
| openstackgerrit | Merged openstack/anchor: Changes to allow sphinx to build correctly https://review.openstack.org/220289 | 18:45 |
| *** sdake has quit IRC | 18:45 | |
| *** JAHoagie has joined #openstack-security | 18:46 | |
| *** dave-mccowan has quit IRC | 18:51 | |
| openstackgerrit | Charles Neill proposed openstack/bandit: Adding HTML formatter https://review.openstack.org/220592 | 18:52 |
| ccneill | I believe my latest patch takes care of all the comments Eric Brown made on the first version if anyone has time to take a look | 18:54 |
| *** y_sawai has joined #openstack-security | 18:54 | |
| *** y_sawai_ has joined #openstack-security | 18:56 | |
| browne | ccneill: jenkins -1'd i believe due to you introducing Pygments (not found in g-r)_ | 18:57 |
| ccneill | hmm, just saw that | 18:58 |
| ccneill | pardon my ignorance, but what is g-r? | 18:58 |
| browne | you're gonna want to try to avoid any change to g-r nowadays. changes are pretty much closed | 18:58 |
| browne | sorry, g-r = global requirements | 18:58 |
| ccneill | ah gotcha | 18:58 |
| *** y_sawai has quit IRC | 18:58 | |
| ccneill | is there a where might I find the list of supported requirements? | 18:59 |
| ccneill | is there a place* | 19:00 |
| browne | https://github.com/openstack/requirements | 19:00 |
| *** y_sawai_ has quit IRC | 19:01 | |
| ccneill | so I see what you were saying about Pygments now.. it's in upper-constraints but not g-r | 19:02 |
| ccneill | weird | 19:02 |
| openstackgerrit | bruce-benjamin proposed openstack/security-doc: [security-guide] Ephemeral encryption setup https://review.openstack.org/218956 | 19:05 |
| *** sdake has joined #openstack-security | 19:07 | |
| openstackgerrit | Tim Kelsey proposed openstack/bandit: Simplifying Result Store https://review.openstack.org/219955 | 19:09 |
| openstackgerrit | Tim Kelsey proposed openstack/bandit: Dont create files if we did not ask for them https://review.openstack.org/220629 | 19:09 |
| openstackgerrit | Charles Neill proposed openstack/bandit: Adding HTML formatter https://review.openstack.org/220592 | 19:18 |
| ccneill | let's see if it'll take Pygments==2.0.2 | 19:18 |
| ccneill | replaced pyquery with beautifulsoup | 19:18 |
| *** dave-mccowan has joined #openstack-security | 19:19 | |
| ccneill | (╯°□°）╯︵ ┻━┻ | 19:21 |
| openstackgerrit | Tim Kelsey proposed openstack/bandit: Dont create files if we did not ask for them https://review.openstack.org/220629 | 19:25 |
| openstackgerrit | Eric Brown proposed openstack/bandit: Add known weak ciphers to blacklisted calls https://review.openstack.org/220632 | 19:27 |
| *** ccneill_ has joined #openstack-security | 19:32 | |
| *** ccneill has quit IRC | 19:35 | |
| *** ccneill_ has quit IRC | 19:39 | |
| *** localloop127 has quit IRC | 19:44 | |
| openstackgerrit | Tim Kelsey proposed openstack/bandit: Dont create files if we did not ask for them https://review.openstack.org/220629 | 19:49 |
| *** timkennedy has quit IRC | 19:55 | |
| openstackgerrit | bruce-benjamin proposed openstack/security-doc: [security-guide] Ephemeral encryption setup https://review.openstack.org/218956 | 19:56 |
| *** y_sawai has joined #openstack-security | 19:56 | |
| *** JAHoagie has quit IRC | 19:59 | |
| *** y_sawai has quit IRC | 20:03 | |
| *** openstackgerrit_ has quit IRC | 20:03 | |
| *** openstackgerrit_ has joined #openstack-security | 20:04 | |
| openstackgerrit | Eric Brown proposed openstack/bandit: Add known weak ciphers to blacklisted calls https://review.openstack.org/220632 | 20:10 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 20:11 | |
| *** chair6_ has joined #openstack-security | 20:12 | |
| *** chair6 has quit IRC | 20:16 | |
| openstackgerrit | bruce-benjamin proposed openstack/security-doc: [security-guide] Ephemeral encryption setup https://review.openstack.org/218956 | 20:19 |
| *** chair6_ is now known as chair6 | 20:22 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 20:25 | |
| hyakuhei | elmiko: https://review.openstack.org/#/c/216366/ | 20:42 |
| *** openstackgerrit_ has quit IRC | 20:47 | |
| *** openstackgerrit_ has joined #openstack-security | 20:47 | |
| *** openstackgerrit_ has quit IRC | 20:48 | |
| *** openstackgerrit_ has joined #openstack-security | 20:48 | |
| openstackgerrit | Eric Brown proposed openstack/bandit: Check for insecure cipher modes https://review.openstack.org/220659 | 20:51 |
| *** openstackgerrit_ has quit IRC | 20:53 | |
| *** y_sawai has joined #openstack-security | 20:59 | |
| openstackgerrit | Eric Brown proposed openstack/bandit: Skip '/tests/' by default https://review.openstack.org/220662 | 20:59 |
| *** y_sawai has quit IRC | 21:04 | |
| *** dwyde has quit IRC | 21:07 | |
| *** bknudson has quit IRC | 21:08 | |
| *** y_sawai has joined #openstack-security | 21:10 | |
| *** michaelxin has quit IRC | 21:10 | |
| *** whydidyoustealmy has quit IRC | 21:11 | |
| *** jian5397 has joined #openstack-security | 21:13 | |
| openstackgerrit | Merged openstack/bandit: Skip '/tests/' by default https://review.openstack.org/220662 | 21:14 |
| *** y_sawai has quit IRC | 21:15 | |
| *** whydidyoustealmy has joined #openstack-security | 21:18 | |
| *** tkelsey has quit IRC | 21:21 | |
| *** LelouchV has quit IRC | 21:32 | |
| *** tkelsey has joined #openstack-security | 21:37 | |
| openstackgerrit | Eric Brown proposed openstack/bandit: bad_file_permissions check: Use correct filename https://review.openstack.org/220684 | 21:47 |
| openstackgerrit | Eric Brown proposed openstack/bandit: bad_file_permissions check: Use correct filename https://review.openstack.org/220684 | 21:58 |
| *** y_sawai has joined #openstack-security | 22:11 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:12 | |
| *** sdake_ has joined #openstack-security | 22:15 | |
| *** y_sawai has quit IRC | 22:15 | |
| *** sdake has quit IRC | 22:18 | |
| *** y_sawai has joined #openstack-security | 22:22 | |
| *** y_sawai has quit IRC | 22:22 | |
| browne | tkelsey: https://review.openstack.org/#/c/220241/ | 22:25 |
| *** bpokorny has joined #openstack-security | 22:28 | |
| openstackgerrit | Merged openstack/bandit: Fix manager having no attribute '_init_logger' https://review.openstack.org/220241 | 22:33 |
| *** entertainment_ has joined #openstack-security | 22:44 | |
| entertainment_ | can anyone help me in understand how openvpn can be used | 22:47 |
| hyakuhei | In what context entertainment_ ? | 22:49 |
| entertainment_ | never mind got it | 22:50 |
| openstackgerrit | Robert Clark proposed openstack/anchor: Made some changes to the README.md to better install https://review.openstack.org/220695 | 22:52 |
| *** entertainment_ has quit IRC | 22:55 | |
| *** bpokorny_ has joined #openstack-security | 22:57 | |
| *** bpokorny has quit IRC | 22:59 | |
| *** jian5397 has quit IRC | 23:04 | |
| *** hyakuhei has quit IRC | 23:05 | |
| *** browne has quit IRC | 23:06 | |
| *** tkelsey has quit IRC | 23:08 | |
| openstackgerrit | Merged openstack/anchor: Made some changes to the README.md to better install https://review.openstack.org/220695 | 23:12 |
| *** jamielennox is now known as jamielennox|away | 23:13 | |
| *** edmondsw has quit IRC | 23:19 | |
| *** y_sawai has joined #openstack-security | 23:23 | |
| *** y_sawai has quit IRC | 23:28 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!