15:00:28 #startmeeting security 15:00:32 Meeting started Thu Mar 29 15:00:28 2018 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:33 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:36 The meeting name has been set to 'security' 15:01:06 #link https://etherpad.openstack.org/p/security-agenda 15:01:26 ping eeiden fungi gagehugo lhinds nickthetait 15:01:31 hi 15:01:38 nickthetait o/ 15:02:02 will likely be a light meeting today 15:02:12 lhinds is out today 15:02:15 onc again, around but also in tc office hour. ping me if you need my input 15:02:47 fungi will do! 15:03:09 #topic Documentation 15:03:20 I have no updates here 15:03:53 #topic Keystone Threat Analysis 15:04:11 proposed a change to governance https://review.openstack.org/#/c/555934/ 15:04:22 to add vulnerability:managed tag to keystonemiddleware 15:04:34 so that is moving along it ok looks like 15:05:24 there's other reviews for the other libraries up as well 15:05:37 #topic Spectre/Meltdown mitigation 15:05:48 ttx any updates? 15:07:41 if so feel free to interrupt me :) 15:07:59 I don't think there are any updates for policy roadmap 15:08:04 nor lcoo atm 15:08:14 eeiden 15:08:42 #topic Bandit 15:08:56 don't think browne is around 15:09:00 no updates here 15:09:10 #topic tatu 15:09:30 any updates for the Tatu project? 15:10:46 #topic OSSN 15:11:09 don't think theres any updates here 15:11:13 #topic VMT 15:11:44 nor here 15:11:58 #topic General Discussion 15:12:10 nickthetait do you have anything? 15:12:16 yeah, quick question 15:12:25 sure 15:12:55 Would like to draft an OSSN, but not sure if everything here is https://bugs.launchpad.net/ossn in a "ready to go" state 15:13:06 particularly https://bugs.launchpad.net/ossn 15:13:08 err 15:13:20 https://bugs.launchpad.net/ossn/+bug/1703369 15:13:21 Launchpad bug 1703369 in OpenStack Security Notes "get_identity_providers policy should be singular" [Undecided,Confirmed] - Assigned to Luke Hinds (lhinds) 15:13:40 could I just start writing something for this one? 15:14:21 nickthetait lhinds knows more about ossn currently than I do, we can reach out to him about that but I don't see why not 15:14:33 I can shoot him an email if you want 15:15:21 that would be awesome. can reply to me (my current nickname)@gmail.com 15:15:31 sure thing 15:15:39 does anyone have anything else? 15:15:57 will give a couple minutes and then end early if nothing else is needed 15:16:43 people must be away on vacation? 15:16:58 maybe spring break :) 15:17:10 actually when is openstack conference must be coming up soon 15:17:20 May something 15:17:29 https://www.openstack.org/summit/vancouver-2018/ 15:17:37 May 21-24, 2018 15:17:46 aha 15:18:41 alright 15:18:45 thanks for coming everyone 15:18:50 o/ 15:18:55 #endmeeting