15:01:21 <gagehugo> #startmeeting security
15:01:22 <openstack> Meeting started Thu Jun 21 15:01:21 2018 UTC and is due to finish in 60 minutes.  The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:01:23 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:01:25 <openstack> The meeting name has been set to 'security'
15:01:30 <gagehugo> #chair lhinds
15:01:31 <openstack> Current chairs: gagehugo lhinds
15:02:08 <gagehugo> ping eeiden fungi gagehugo lhinds nickthetait browne
15:02:16 * fungi is in tc office hour, as usual
15:02:21 <gagehugo> #link https://etherpad.openstack.org/p/security-agenda
15:02:26 <gagehugo> agenda ^
15:02:39 <redrobot> o/
15:02:48 <gagehugo> o/
15:03:25 <redrobot> assuming that should be s/May/June/ in the agenda?
15:03:42 <lhinds_webfc> hi all, connection problems
15:04:00 <lhinds_webfc> ping eeiden fungi gagehugo lhinds nickthetait browne redrobot
15:04:01 <gagehugo> lhinds_webfc o/
15:04:11 <redrobot> \o
15:04:12 <gagehugo> #chair lhinds_webfc
15:04:13 <openstack> Current chairs: gagehugo lhinds lhinds_webfc
15:04:27 <lhinds_webfc> thanks gagehugo
15:04:39 <lhinds_webfc> did you # start the meeting already?
15:04:42 <gagehugo> yeah
15:04:52 <lhinds_webfc> cool, I am using the web ui on freenode.net
15:05:00 <gagehugo> ew
15:05:18 <fungi> that sounds... painful
15:05:34 <lhinds_webfc> any topics you particularly want to cover ?
15:05:42 <lhinds_webfc> hey fungi
15:06:16 <lhinds_webfc> my main one is PTG
15:06:23 <gagehugo> I saw that we are sharing the room with Barbican for the PTG
15:06:32 <lhinds_webfc> gagehugo: I spotted that too.
15:06:42 <lhinds_webfc> I am still not sure if I am going to make it or not
15:06:45 <lhinds_webfc> do you know yet>
15:06:56 <gagehugo> I will most likely be there
15:07:04 <fungi> the number of conference rooms in the hotel is somewhat limited, so some groups are getting doubled up where it makes sense
15:07:18 <lhinds_webfc> fungi: that makes a lot of sense for us
15:07:26 <lhinds_webfc> we won't be there in big numbers
15:07:35 <lhinds_webfc> so we should room share like in Dublin
15:07:50 <gagehugo> less snow though :)
15:07:58 <lhinds_webfc> yes, very much!
15:08:00 <gagehugo> but more choochoo
15:08:13 <fungi> there are also plenty of common areas if groups need to find somewhere isolated for periods of time, and there are a few rooms that can be booked for ad hoc discussions for limited blocks of time like in past ptgs
15:08:16 <lhinds_webfc> ugh, is it the same pyramid building?
15:08:31 <gagehugo> yeah, I think they fixed the train issue though
15:08:37 <fungi> gagehugo: i'm told the train is supposed to finally be silenced by the time the ptg is held
15:08:37 <lhinds_webfc> :)
15:08:57 <lhinds_webfc> maybe they can do my land rover next
15:09:02 <gagehugo> fungi we will need train whistles to fill in
15:09:28 <lhinds_webfc> #whistle
15:09:52 <gagehugo> the hotel is pretty good though, the rooms were pretty spacious iirc
15:10:38 <lhinds_webfc> yep, I liked it last time.
15:11:14 <lhinds_webfc> so I don't have any other topics to go over, so rather then go down the whole list, is there anything you wanted to chew over gagehugo / fungi ?
15:11:51 <gagehugo> the other keystone libraries are still on my to-do list for reviewing for vmt coverage
15:11:57 <fungi> nothing new on my end. just watching the intel processor security flaws unfold piece at a time
15:12:17 <lhinds_webfc> threat analysis?
15:12:19 <gagehugo> that hyperthreading disable thing was interesting
15:12:40 <fungi> i think kashyap has a new nova bug opened to add some more processor flags to the passthrough whitelist, in preparation for new processors starting to provide those features
15:13:10 <fungi> #link https://launchpad.net/bugs/1777460
15:13:11 <openstack> Launchpad bug 1777460 in OpenStack Compute (nova) queens "Whitelist two more SSBD-related CPU flags for AMD ('amd-ssbd', 'amd-no-ssb')" [High,In progress] - Assigned to Dan Smith (danms)
15:14:23 <gagehugo> hmm
15:14:27 <fungi> while not openstack per se, the kata project is working on building its vulnerability management process if anyone is interested in following along or offering suggestions
15:14:33 <fungi> #link https://github.com/kata-containers/community/issues/34
15:15:30 <lhinds_webfc> interesting, thanks fungi
15:15:33 <fungi> (another project under the osf, sort of a sibling to openstack, for those who hadn't heard of it)
15:16:27 <gagehugo> will kata have their own VMT pages or will they be filed along with the other openstack projects?
15:17:25 <gagehugo> looks like they are hosting their own in-repo
15:19:44 <lhinds_webfc> I am not to sure gagehugo
15:20:03 <lhinds_webfc> I think it will be seperate, its just under the foundation
15:20:15 <lhinds_webfc> ok, I guess we can call it a day for now
15:20:20 <lhinds_webfc> one thing that comes to mind
15:20:29 <lhinds_webfc> do you have any PTO coming up gagehugo ?
15:20:41 <lhinds_webfc> I am off for two weeks in august
15:20:49 <lhinds_webfc> just thinking if we need to cover each other
15:21:01 <gagehugo> nothing currently planned
15:21:19 <gagehugo> I should be around excluding any surprises
15:21:44 <lhinds_webfc> k, well I can always make up for the two I am away by covering you whenever needed
15:22:14 <gagehugo> lhinds_webfc can you send me an email with the dates you will be out
15:22:21 <lhinds_webfc> gagehugo: sure!
15:22:25 <gagehugo> cool
15:22:30 <lhinds_webfc> ok, so let's meet next week
15:22:34 <lhinds_webfc> #endmeeting