14:09:23 #startmeeting Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings 14:09:23 Meeting started Thu Feb 18 14:09:23 2021 UTC. 14:09:23 This meeting is logged and archived in a public location. 14:09:23 The chair is Astranox. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:09:23 Useful Commands: #action #agreed #halp #info #idea #link #topic. 14:09:23 The meeting name has been set to 'security_team_meeting_-_agenda:_https://fedoraproject.org/wiki/security_team_meetings' 14:09:38 #topic Roll Call 14:09:45 .hello2 14:09:46 copperi: copperi 'Jan Kuparinen' 14:09:48 yes, just have to look it up everytime 14:09:51 .hello2 14:09:52 Astranox: Sorry, but you don't exist 14:09:57 .fas astra 14:09:58 Astranox: astral '' - xubuntenor 'john lastra' - paulrm280 'Paul Mastrantonio' - sabroso 'Luis Alberto Pelaez' - ghostflower 'eric anthony sharrar' - thomastran 'Thomas Tran' - oliviastrandberg 'Olivia Strandberg' <1156654@g.chelanschools.org> - katjastrauss72 'Katja Strauss' (4 more messages) 14:10:04 .hello2 astra 14:10:05 Astranox: Sorry, but you don't exist 14:10:21 .hello astra 14:10:22 try 14:10:22 Astranox: astra 'David Kaufmann' 14:10:39 as you did 14:11:45 is this meeting bot using your fedora-meeting-report ? 14:12:17 no, that I usually do manually 14:12:34 but in the last meeting we discussed if the numbers are even relevant 14:12:38 (or correct) 14:14:20 these are the numbers, but I didn't calculate the differences yet: https://ionic.at/share/fst.txt 14:15:30 do we have any open topics? (I'm so not prepared for this meeting -.-) 14:17:13 There were lots of interest and requests for sponsorship 14:18:09 #topic requests for sponsorship 14:18:15 I probably did not even write a letter, waited for this meeting 14:19:19 currently we can't add people, as the two people able to do that are not currently active, but I think I'll request permissions for that this week 14:19:27 Does the group have any sponsors ? 14:19:43 you answered my question 14:20:10 yes, sparks and nb, but haven't heard of them in a long time (nb should definitely be active elsewhere though) 14:20:29 nb is around 14:20:47 as we're in some kind of a rebuilding process - what would you like to do as FST? 14:20:48 did answer to some of my request a while back 14:21:16 * nb sees his name and looks 14:21:33 uh, nice, summoned nb :) 14:21:48 nick highligting does that 14:22:00 thats not a guarantee :) 14:22:02 Oh nice, people are trying to reactivate security team 14:22:14 yes, and you are admin, together with sparks 14:23:03 Yeah, I think he made me an admin a while back. I am glad to add some more admins 14:23:11 well thats a nick from the past 14:23:52 i think that would be great, we've got a few membership requests in the past weeks 14:23:59 there is also security-team@lists.fedoraproject.org 14:24:06 and I can add some more people as owners of it 14:24:13 nb: we have been using it 14:24:25 oh ok 14:24:27 nb: that would be good 14:24:32 looks like huzaifas@redhat.com is the owner of the list 14:24:33 yes, I don't know why we have two lists, but occasionally both get used 14:24:52 ah, he's definitely active, he was at the last meeting 14:24:57 sparks is owner of security@lists.fedoraproject.org 14:24:58 should maybe consolidate 14:25:53 * nb is interested in becoming involved again - I wasn't aware that this was being restarted 14:26:03 Who should be admins of the FAS group and list? 14:26:06 nb: great 14:26:50 astranox and me ? 14:26:54 that would be great too! 14:27:03 are your FAS usernames the same as IRC? 14:27:08 maybe huzaifas too, he wants to do a lot 14:27:12 nb you can add me as well 14:27:21 no, mine is "astra" 14:27:21 mine is 14:27:38 .fas astra 14:27:39 copperi: astral '' - xubuntenor 'john lastra' - paulrm280 'Paul Mastrantonio' - sabroso 'Luis Alberto Pelaez' - ghostflower 'eric anthony sharrar' - thomastran 'Thomas Tran' - oliviastrandberg 'Olivia Strandberg' <1156654@g.chelanschools.org> - katjastrauss72 'Katja Strauss' (4 more messages) 14:27:44 * kk4ewt nb definitely knows mine 14:28:42 .hello jbwillia 14:28:43 kk4ewt: jbwillia 'Ben Williams' 14:29:26 .members security-team 14:29:27 nb: Members of security-team: anemec @astra bojov +bressers bvincent @copperi dcafaro fab @huzaifas isnuryusuf @jbwillia jrusnack +jsmith jtaylor lmacken mrniranjan @nb pjp r3pek revskills scorneli siddharths @sparks tsantore ulissescastro zoglesby 14:29:31 for the people whom doesnt reconize this nick i am also Southern_Gentleman 14:30:05 so now astra, copperi, huzaifas, jbwillia, nb, sparks are admins 14:30:16 and looks like bressers and jsmith are sponsors from before 14:30:19 ah, I didn't, but that nick I do know 14:30:22 thanks! 14:30:46 Oh, I guess I need to update the mailing lists 14:30:53 .fasinfo jbwillia 14:30:54 kk4ewt: User: jbwillia, Name: Ben Williams, email: vaioof@gmail.com, Creation: 2006-04-17, IRC Nick: Southern_Gentlem, Timezone: US/Eastern, Locale: en, GPG key ID: 93576FA4, Status: active 14:30:58 kk4ewt: Approved Groups: @security-team cla_fedora cla_done hosted-content gitcourses irc-support-operators freemedia proventesters cla_fpca +ambassadors +campusambassadors @fedora-hams @respins-sig fedorabugs qa 14:33:10 is anyone here hcampbell ? (wanted to join too, wrote an email recently) 14:33:13 Should we add those who requested sponsorship to the group as requlars (meeting topic) ? 14:33:56 first off check those people and see if they have their cla+1 14:34:32 patux does not 14:35:07 We also have a security-private mailing list which sparks was the owner of 14:35:17 so lets invite them to a meeting to see how really interested they are (if they have their cla+1 i see no issue adding) 14:35:41 oh, so we have three mailing-lists xD 14:35:54 kk4ewt: yes 14:36:17 yes, security, security-private, security-team 14:36:30 My thought would be keep security, security-private, and delete security-team 14:37:12 fasinfo lacesz 14:37:22 .fasinfo lacesz 14:37:25 kk4ewt: User: lacesz, Name: None, email: lkardos@web.de, Creation: 2018-05-02, IRC Nick: None, Timezone: None, Locale: None, GPG key ID: None, Status: active 14:37:27 kk4ewt: Unapproved Groups: security-team 14:37:29 nb: agree 14:37:30 kk4ewt: Approved Groups: cla_fpca cla_done cvsl10n l10n 14:37:51 i am approving lacesz 14:38:26 do you know why I am hesitate in approval of cla+1? 14:39:15 a lot of bot make accounts and then try to join lower # groups so they get wiki access 14:39:34 maybe make approval dependent on joining the meeting? 14:39:58 i would say maybe at least a couple of meetings 14:40:29 but is someone is already a contributor in other groups that should be waved 14:40:51 I think people should at least send an intro or something, or join a meeting 14:41:00 I would also recommend setting the FAS group to invite-only 14:41:05 most other FAS groups are 14:41:05 a couple of meeting if it their cla+1 14:41:14 otherwise you get a ton of random membership requests 14:41:30 yes, but still at least one meeting, even for established people 14:42:06 couple would be good 14:42:06 but no we have 3 topics: mailing lists, approving open requests and setting it to invite only 14:42:11 *now 14:42:56 invite only seems the easiest now - is there anything why we shouldn't do that? 14:43:37 Don't see any reason not to 14:44:10 .fasinfo gratuxri 14:44:11 kk4ewt: User: gratuxri, Name: None, email: fedora@jugra.de, Creation: 2017-06-15, IRC Nick: None, Timezone: None, Locale: None, GPG key ID: None, Status: active 14:44:14 kk4ewt: Unapproved Groups: gitfogmachine cvslibvirt cvsredhat-config-cluster distribution fedmsg-announce fedorainfracloudusers gitabout-fedora gitappstack gitauthhub gitbash-completion gitboard gitbtparser gitcanal gitcertmaster gitcobbler gitcura gitdockerfiles gitfedora-build-service git-fedora-electronic-lab gitfmci gitformulas gitgopher gitinstall-guide gitkernel gitkerneloops gitldaphelper gitliveusb-creator gitqemu-kvm- (1 more message) 14:44:16 kk4ewt: Approved Groups: gitcommunitywebcrawler cla_fpca cla_done 14:44:40 okay, I think that is agreed upon 14:44:45 someone will probably also have to go through and remove all of the pending requests 14:44:50 s/have to/want to/ 14:45:19 lets send email to them and see whom shows up to a meeting or give an intro 14:45:26 kk4ewt good idea 14:45:33 +1 14:45:37 I've set it to invite only 14:45:39 +1 14:45:46 Astranox you might put that as #agreed 14:45:53 like #agreed to make FAS group invite only 14:45:58 that way it shows up in minutes 14:46:03 they can stay open we just dont have to admit 14:46:04 #agreed to make FAS group invite only 14:46:18 #info nb made astra, copperi, jbwillia admins of FAS group and security, security-team mailing lists 14:46:45 #info we also have a security-private mailing list 14:47:08 is the "invite to the next meeting and see if they come" also agreed? (I can do the invitation, if noone else wants to) 14:47:27 Astranox, #info it 14:47:49 also make #task 14:48:20 Astranox, yes it is agreed 14:48:20 #task Astra will invite the people with pending requests to the next meeting 14:48:49 #topic mailing lists 14:49:15 nb proposed to remove security-team and keep security and security-private 14:49:27 +1 14:49:57 I also do prefer those two names, but currently security-team is more active than security 14:50:24 I think this will fix itself when we update all references to it in the wiki 14:50:59 so, +1 from me too 14:51:10 Is the wiki only place we currently have documentation ? 14:51:40 no, but I think this is the place people get the list address from 14:53:06 Ok, it should be updated. 14:53:36 so I think this is agreed too. 14:54:10 ah, maybe we should send an announce mail first 14:56:01 #agreed to remove the security-team@ mailing list, and keep security@ and security-private@ 14:56:06 +1 14:56:48 do we have any other open issues? 14:57:22 Should we remove #fedora-security-team irc channel as well from wiki ? 14:57:47 and leave #fedora-security 14:58:20 might be good, #fedora-security-team has 13 people in there and #fedora-security has 30 14:58:21 lets keep #fedora-security in my opinion and drop the other one 14:58:40 ok, I can edit the wiki 14:59:01 copperi: thanks! 14:59:35 #agreed to removing the references to the #fedora-security-team irc channel from the wiki too 14:59:47 #action copperi to update the wiki info 15:01:03 I'm not sure if we have any additional topics, and I think there is another meeting here right now, so can we end the meeting? 15:02:34 yes 15:02:51 I need to add people to the #fedora-security ops too 15:02:52 thanks all for attending the meeting, we've got a lot done today! 15:03:05 I'll add the same people as I did to the FAS and mailing lists 15:03:26 dgilmore and Bress are the only current ops 15:03:46 #action nb to update all the things! (thanks!) 15:03:57 #endmeeting