====================================================================================================== #fedora-meeting: Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings ====================================================================================================== Meeting started by Sparks at 14:00:27 UTC. The full logs are available at https://meetbot.fedoraproject.org/fedora-meeting/2016-05-05/fedora_security_team.2016-05-05-14.00.log.html . Meeting summary --------------- * Roll Call (Sparks, 14:00:41) * Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" (Sparks, 14:06:02) * Follow up on last week's tasks (Sparks, 14:07:51) * ACTION: pjp to give a status update on security policy in the wiki (carried over) (Sparks, 14:08:18) * ACTION: Sparks to figure out how FST members can get access to Fedora security bugs (carried over) (Sparks, 14:08:29) * ACTION: zoglesby to update the reading list for the Apprenticeship (Sparks, 14:10:03) * Private builds in infrastructure for embargoed bits (Sparks, 14:10:23) * LINK: https://fedoraproject.org/wiki/Koji/Policies (d-caf, 14:15:22) * LINK: https://fedoraproject.org/wiki/Koji/Policies (Sparks, 14:16:14) * ACTION: Sparks to garden the Koji wiki pages to standardize the pages and add a category or two. (Sparks, 14:21:08) * LINK: https://fedoraproject.org/wiki/Koji#Tags_and_Targets (d-caf, 14:21:30) * ACTION: d-caf to continue working on private builds in koji, bodhi, and distgit. (Sparks, 14:24:29) * Windows/OS X Tools in F25 (Sparks, 14:27:27) * LINK: https://lists.fedoraproject.org/archives/list/security-team@lists.fedoraproject.org/thread/I7JESRGWRWDXFDGODBUPTUL3KWTXAGVP/ (Sparks, 14:28:05) * ACTION: Sparks to follow up on the shipping of non-Linux binaries of the USB ISO tool. (Sparks, 14:38:01) * ACTION: Sparks to create a ticket for the request (Sparks, 14:38:11) * LINK: https://fedoraproject.org/wiki/Changes/LUCasPrimaryDownloadable (dgilmore, 14:38:55) * LINK: https://fedoraproject.org/wiki/Changes/LUCasPrimaryDownloadable (Sparks, 14:39:19) * Outstanding BZ Tickets (Sparks, 14:39:39) * Thursday's numbers: Critical 0 (0), Important 88 (+8), Moderate 531 (+11), Low 182 (+2), Total 801 (+21) (Sparks, 14:39:54) * Private builds in infrastructure for embargoed bits (Sparks, 14:42:54) * ACTION: Sparks to get stats on the number of vulns that were embargoed that affected Fedora/EPEL. (Sparks, 14:55:17) Meeting ended at 15:01:56 UTC. Action Items ------------ * pjp to give a status update on security policy in the wiki (carried over) * Sparks to figure out how FST members can get access to Fedora security bugs (carried over) * zoglesby to update the reading list for the Apprenticeship * Sparks to garden the Koji wiki pages to standardize the pages and add a category or two. * d-caf to continue working on private builds in koji, bodhi, and distgit. * Sparks to follow up on the shipping of non-Linux binaries of the USB ISO tool. * Sparks to create a ticket for the request * Sparks to get stats on the number of vulns that were embargoed that affected Fedora/EPEL. Action Items, by person ----------------------- * d-caf * d-caf to continue working on private builds in koji, bodhi, and distgit. * Sparks * Sparks to figure out how FST members can get access to Fedora security bugs (carried over) * Sparks to garden the Koji wiki pages to standardize the pages and add a category or two. * Sparks to follow up on the shipping of non-Linux binaries of the USB ISO tool. * Sparks to create a ticket for the request * Sparks to get stats on the number of vulns that were embargoed that affected Fedora/EPEL. * **UNASSIGNED** * pjp to give a status update on security policy in the wiki (carried over) * zoglesby to update the reading list for the Apprenticeship People Present (lines said) --------------------------- * Sparks (91) * dgilmore (77) * d-caf (34) * linuxmodder (21) * zodbot (11) * mhayden (3) * sct (2) * Astradeus (1) * skamath (1) Generated by `MeetBot`_ 0.1.4 .. _`MeetBot`: http://wiki.debian.org/MeetBot