Tuesday, 2015-10-13

*** tjt263 has joined #openstack-security00:00
*** tjt263 has quit IRC00:06
*** salv-orl_ has quit IRC00:11
*** tjt263 has joined #openstack-security00:11
*** browne has quit IRC01:10
*** tkelsey has joined #openstack-security01:16
*** tkelsey has quit IRC01:21
*** mdong has quit IRC01:36
*** browne has joined #openstack-security02:26
*** salv-orlando has joined #openstack-security02:39
*** salv-orlando has quit IRC02:47
*** yaya_ has joined #openstack-security02:49
*** salv-orlando has joined #openstack-security03:08
*** dave-mccowan has quit IRC03:10
*** salv-orlando has quit IRC03:17
*** yaya__ has joined #openstack-security03:24
*** yaya_ has quit IRC03:26
*** salv-orlando has joined #openstack-security04:15
*** yaya__ has quit IRC04:16
*** salv-orlando has quit IRC04:19
*** salv-orlando has joined #openstack-security04:36
*** salv-orlando has quit IRC04:40
*** tkelsey has joined #openstack-security05:17
*** tkelsey has quit IRC05:22
*** tjt263 has quit IRC05:41
*** tmcpeak has joined #openstack-security05:45
*** openstack has joined #openstack-security06:29
*** shohel has joined #openstack-security06:41
*** usr__ has joined #openstack-security06:44
usr__hey06:44
*** usr__ has left #openstack-security06:45
*** alex_klimov has joined #openstack-security06:48
*** tkelsey has joined #openstack-security06:59
openstackgerritMerged openstack/bandit: Include context in debug output  https://review.openstack.org/23367707:16
openstackgerritOpenStack Proposal Bot proposed openstack/security-doc: Updated from openstack-manuals  https://review.openstack.org/23400907:29
*** browne has quit IRC07:50
*** asusk7m550 has joined #openstack-security07:51
*** subscope has joined #openstack-security07:52
*** salv-orlando has joined #openstack-security07:59
*** salv-orlando has quit IRC08:03
*** alex_klimov has quit IRC08:16
*** Travis__ has joined #openstack-security08:18
*** subscope has quit IRC08:23
*** subscope has joined #openstack-security08:24
*** salv-orlando has joined #openstack-security08:26
*** Travis__ has left #openstack-security08:30
*** openstack has joined #openstack-security08:48
*** subscope has quit IRC09:03
*** subscope has joined #openstack-security09:16
*** lexholden has joined #openstack-security09:16
*** lexholde_ has joined #openstack-security09:18
*** lexholden has quit IRC09:21
*** tmcpeak has quit IRC09:30
*** tmcpeak has joined #openstack-security09:37
*** lexholde_ has quit IRC09:38
openstackgerritIevgeniia Zadorozhna proposed openstack/security-doc: WIP: Added Security Guide for the Shared File Systems service  https://review.openstack.org/23154609:59
*** openstackgerrit has quit IRC10:01
*** openstackgerrit has joined #openstack-security10:01
*** lexholden has joined #openstack-security10:03
*** lexholden has quit IRC10:18
*** alex_klimov has joined #openstack-security10:37
*** edmondsw has joined #openstack-security10:52
*** edmondsw has quit IRC10:52
*** subscope has quit IRC10:56
*** asusk7m550 has quit IRC11:20
*** subscope has joined #openstack-security11:38
*** dave-mccowan has joined #openstack-security12:01
*** salv-orlando has quit IRC12:14
*** edmondsw has joined #openstack-security12:31
*** alejandrito has joined #openstack-security13:09
*** salv-orlando has joined #openstack-security13:10
*** lexholden has joined #openstack-security13:16
*** dave-mccowan has quit IRC13:32
*** sigmavirus24_awa is now known as sigmavirus2414:01
openstackgerritJamie Finnigan proposed openstack/bandit: Tweaks to #nosec (+ ignore flag, - dead constant)  https://review.openstack.org/23380414:04
*** tkelsey has quit IRC14:04
*** lexholden has quit IRC14:05
*** lexholden has joined #openstack-security14:05
*** jhfeng has joined #openstack-security14:06
openstackgerritJamie Finnigan proposed openstack/bandit: Add basic metric generation and associated tests  https://review.openstack.org/21688514:12
*** yaya has joined #openstack-security14:14
*** dave-mccowan has joined #openstack-security14:15
*** yaya has quit IRC14:16
*** salv-orlando has quit IRC14:17
openstackgerritTim Kelsey proposed openstack/bandit: Add metrics to text and JSON output formatters  https://review.openstack.org/23375414:17
*** jmckind has joined #openstack-security14:21
*** mdong has joined #openstack-security14:23
*** hyakuhei_ has joined #openstack-security14:25
*** salv-orlando has joined #openstack-security14:34
openstackgerritJamie Finnigan proposed openstack/bandit: Add check for Flask app debug=True usage  https://review.openstack.org/23371314:39
openstackgerritTravis McPeak proposed openstack/bandit: Adding command line option to exclude paths  https://review.openstack.org/23425814:39
*** yaya has joined #openstack-security14:41
*** browne has joined #openstack-security14:41
openstackgerritTravis McPeak proposed openstack/bandit: Adding command line option to exclude paths  https://review.openstack.org/23425814:41
*** hyakuhei_ has quit IRC14:48
*** hyakuhei has joined #openstack-security14:55
*** dwyde has joined #openstack-security15:01
*** salv-orl_ has joined #openstack-security15:05
*** austin987 has quit IRC15:06
*** hyakuhei has quit IRC15:06
*** salv-orlando has quit IRC15:07
*** tecn1z has joined #openstack-security15:07
*** hyakuhei has joined #openstack-security15:07
*** alex_klimov has quit IRC15:08
*** alex_klimov has joined #openstack-security15:09
*** austin987 has joined #openstack-security15:10
openstackgerritJamie Finnigan proposed openstack/bandit: Tweaks to #nosec (+ ignore flag, - dead constant)  https://review.openstack.org/23380415:13
browneoh nice15:13
*** ccneill has joined #openstack-security15:14
openstackgerritTravis McPeak proposed openstack/bandit: Adding command line option to exclude paths  https://review.openstack.org/23425815:14
*** hyakuhei has quit IRC15:14
openstackgerritTravis McPeak proposed openstack/bandit: Adding command line option to exclude paths  https://review.openstack.org/23425815:16
tmcpeakbrowne: I've done my change like chair6 too, I think we're running out of single char flags15:17
tmcpeakfor less used options I think it's ok to leave without them15:17
tmcpeakthey're getting arbitrary anyway15:17
tmcpeakagree?15:17
brownesure, but for yours you could use -x15:18
tmcpeakhmmm, this is true15:18
*** jmckind has quit IRC15:18
tmcpeakbrowne: done15:20
elmikonew bandit goal, 26 single char options =)15:21
openstackgerritTravis McPeak proposed openstack/bandit: Adding command line option to exclude paths  https://review.openstack.org/23425815:21
tmcpeaklol15:22
*** dwyde_ has joined #openstack-security15:23
*** dwyde has quit IRC15:23
*** dwyde_ is now known as dwyde15:23
*** salv-orl_ has quit IRC15:23
*** hyakuhei_ has joined #openstack-security15:27
*** salv-orlando has joined #openstack-security15:28
*** hyakuhei_ has quit IRC15:33
*** hyakuhei_ has joined #openstack-security15:34
*** salv-orl_ has joined #openstack-security15:36
*** pdesai has joined #openstack-security15:37
*** shohel has quit IRC15:37
chair6browne .. do we really need single-char options for every arg?  -g doesn't seem intuitive to me.. i'd rather keep them intuitive, than shoehorn them in15:37
*** salv-orlando has quit IRC15:38
tmcpeakI agree, -g doesn't make much sense for that15:38
tmcpeak-i could work but sadly we've used that already for confidence, which also doesn't make a heap of sense :D15:38
brownethe single char is only for convenience, so we don't need them for all15:38
browneonly the ones used frequently15:38
tmcpeakarguably we don't want people to ignore no sec, so maybe that one could be a start of the list of ones we don't have shortcuts for15:39
brownetmcpeak: yeah, i wish we could remap the options15:39
chair6i've been thinking that too, maybe next version can be a breaking-change to clean-up the cmdline arg options15:39
tmcpeakwhen I started working on Bandit coming up with the name of the option flags was my least favorite part15:39
tmcpeakwe should get rid of -a15:40
tmcpeaknobody uses it15:40
*** yaya has quit IRC15:43
openstackgerritJamie Finnigan proposed openstack/bandit: Tweaks to #nosec (+ ignore flag, - dead constant)  https://review.openstack.org/23380415:47
*** austin987 has quit IRC15:51
*** mdong has quit IRC15:52
chair6yeah, -a could be turned into just a longer-form arg .. i disagree with removing it entirely, i still think it's useful to get results aggregated by vulnerability rather than by file15:55
openstackgerritTravis McPeak proposed openstack/bandit: Adding command line option to exclude paths  https://review.openstack.org/23425815:56
tmcpeakbrowne, chair6: https://review.openstack.org/#/c/234258/15:56
tmcpeakelmiko: I thought Sahara already wasn't passing?15:58
tmcpeaknew Bandit profile shouldn't change that15:58
elmikoyea15:59
elmikoi'm asking sdague now15:59
tmcpeakcool16:01
elmikosounds like everything on sahara is failing, precautionary hold on that one16:02
tmcpeakok, seems reasonable16:02
*** hyakuhei_ has quit IRC16:03
*** alex_klimov has quit IRC16:12
*** tecn1z has quit IRC16:14
*** tecn1z has joined #openstack-security16:15
*** lexholden has quit IRC16:17
*** lexholden has joined #openstack-security16:17
*** ccneill_ has joined #openstack-security16:27
*** ccneill has quit IRC16:29
*** subscope has quit IRC16:34
*** tmcpeak has quit IRC16:42
*** lexholden has quit IRC16:42
*** tmcpeak has joined #openstack-security16:46
*** tmcpeak has quit IRC16:47
*** lexholden has joined #openstack-security16:54
*** ccneill has joined #openstack-security17:05
*** ccneill_ has quit IRC17:08
*** hyakuhei_ has joined #openstack-security17:08
*** browne has quit IRC17:11
*** hyakuhei_ has quit IRC17:14
*** tmcpeak has joined #openstack-security17:21
*** tmcpeak has quit IRC17:22
*** salv-orl_ has quit IRC17:24
*** salv-orlando has joined #openstack-security17:25
*** lexholden has quit IRC17:31
openstackgerritMerged openstack/bandit: Add basic metric generation and associated tests  https://review.openstack.org/21688517:35
openstackgerritMerged openstack/bandit: Add metrics to text and JSON output formatters  https://review.openstack.org/23375417:35
*** tmcpeak has joined #openstack-security17:42
*** tmcpeak has quit IRC17:45
*** jian5397 has joined #openstack-security17:53
*** browne has joined #openstack-security17:54
openstackgerritJamie Finnigan proposed openstack/bandit: Add check for Flask app debug=True usage  https://review.openstack.org/23371317:56
*** lexholden has joined #openstack-security18:12
*** subscope has joined #openstack-security18:26
*** lexholden has quit IRC18:27
openstackgerritJamie Finnigan proposed openstack/bandit: Tweaks to #nosec (+ ignore flag, - dead constant)  https://review.openstack.org/23380418:29
*** ccneill has quit IRC18:33
*** salv-orlando has quit IRC18:35
*** ccneill has joined #openstack-security18:38
*** pdesai has quit IRC18:42
*** lexholden has joined #openstack-security18:57
*** rosibel has joined #openstack-security18:58
*** pdesai has joined #openstack-security19:04
*** jhfeng has quit IRC19:07
*** jhfeng has joined #openstack-security19:08
*** jhfeng has quit IRC19:10
*** dave-mccowan has quit IRC19:15
*** rosibel has quit IRC19:15
*** alejandrito has quit IRC19:20
*** jhfeng has joined #openstack-security19:21
*** alejandrito has joined #openstack-security19:22
*** pdesai has quit IRC19:26
*** alejandrito has quit IRC19:32
*** tmcpeak has joined #openstack-security19:52
*** tmcpeak has quit IRC19:53
*** pdesai has joined #openstack-security19:55
*** dave-mccowan has joined #openstack-security19:57
*** alex_klimov has joined #openstack-security20:04
*** jian5397 has quit IRC20:05
*** hyakuhei has joined #openstack-security20:29
*** hyakuhei has quit IRC20:37
*** hyakuhei_ has joined #openstack-security20:41
*** hyakuhei_ has quit IRC20:51
*** subscope has quit IRC21:02
*** salv-orlando has joined #openstack-security21:02
*** student321 has joined #openstack-security21:12
*** student321 has left #openstack-security21:12
*** dave-mccowan has quit IRC21:56
*** jhfeng has quit IRC22:05
*** sigmavirus24 is now known as sigmavirus24_awa22:08
*** tecn1z has quit IRC22:10
*** lexholden has quit IRC22:17
openstackgerritEric Brown proposed openstack/bandit: Remove the try_except_pass plugin  https://review.openstack.org/23292822:18
*** pdesai has quit IRC22:26
*** edmondsw has quit IRC22:33
*** dwyde has left #openstack-security22:51
*** pdesai has joined #openstack-security23:11
*** salv-orlando has quit IRC23:19
*** salv-orlando has joined #openstack-security23:20
*** salv-orlando has quit IRC23:27
*** salv-orlando has joined #openstack-security23:28
*** salv-orlando has quit IRC23:31
*** pdesai has quit IRC23:32
*** salv-orlando has joined #openstack-security23:32
*** salv-orlando has quit IRC23:34
*** ccneill has quit IRC23:39

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!