15:00:30 <gagehugo> #startmeeting security
15:00:30 <openstack> Meeting started Thu Feb 21 15:00:30 2019 UTC and is due to finish in 60 minutes.  The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:31 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:33 <openstack> The meeting name has been set to 'security'
15:00:46 <gagehugo> #link https://etherpad.openstack.org/p/security-agenda agenda
15:01:02 <gagehugo> ping fungi gagehugo lhinds nickthetait browne redrobot
15:02:04 <gagehugo> o/
15:02:59 <redrobot> o/
15:03:05 * redrobot is just lurking
15:04:12 <fungi> here-ish
15:04:58 <gagehugo> anyone have anything new this week?
15:17:51 <fungi> thinking
15:18:14 <fungi> there was one i should have made a note of
15:18:44 <fungi> i think there was movement on one of the stale nova ossn bugs
15:20:48 <fungi> #link https://launchpad.net/bugs/1739646 Instance type with disk set to 0 can cause DoS Edit
15:20:49 <openstack> Launchpad bug 1739646 in OpenStack Security Notes "Instance type with disk set to 0 can cause DoS" [Undecided,New]
15:21:21 <fungi> yeah, the change finally landed to update the default in stein
15:22:01 <fungi> "The policy to allow booting instances without a volume when root_gb is set to 0 was to be set to default to admin-only in Stein."
15:22:44 <fungi> other than that, i don't have anything exciting which is public yet
15:24:45 <gagehugo> ah ok
15:25:23 <fungi> oh, last week i was going to mention the pop-up teams thread on the openstack-discuss ml
15:25:43 <fungi> mainly because i thought it might be relevant to the folks working on the image encryption implementation
15:25:55 <fungi> in case they hadn't been following that discussion
15:28:56 * gagehugo will put a note on the agenda about the pop up teams thread
15:28:59 <fungi> #link http://lists.openstack.org/pipermail/openstack-discuss/2019-February/002703.html was mostly the conclusion
15:29:38 <fungi> it might provide them with a slightly easier way to categorize and socialize the cross-project effort they're working on
15:33:36 * gagehugo has to run
15:33:40 <gagehugo> thanks for coming everyone
15:33:42 <gagehugo> #endmeeting