19:05:28 <cyberpear> #startmeeting Ansible Lockdown Working Group
19:05:28 <zodbot> Meeting started Thu Jun 18 19:05:28 2020 UTC.
19:05:28 <zodbot> This meeting is logged and archived in a public location.
19:05:28 <zodbot> The chair is cyberpear. Information about MeetBot at http://wiki.debian.org/MeetBot.
19:05:28 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic.
19:05:28 <zodbot> The meeting name has been set to 'ansible_lockdown_working_group'
19:05:31 <cyberpear> #topic Roll Call
19:05:34 <cyberpear> .hello2
19:05:35 <zodbot> cyberpear: cyberpear 'James Cassell' <fedoraproject@cyberpear.com>
19:06:01 <cyberpear> who's here today?
19:06:09 <xgeorgex> I'm here
19:06:18 <cyberpear> hi xgeorgex!
19:06:29 <cyberpear> #topic agenda
19:06:38 <cyberpear> what's to talk about today?
19:07:06 <xgeorgex> I started work on the RHEL8 STIG yesterday
19:07:19 <xgeorgex> I have cat1 completed and almost done with cat3
19:07:26 <cyberpear> nice
19:07:28 <xgeorgex> The meat of it is cat2 though
19:07:31 <xgeorgex> Like 200+ controls there
19:07:52 <xgeorgex> I figured I would tackle the two small sections first
19:07:55 <cyberpear> per usual
19:08:02 <cyberpear> xgeorgex: how'd you handle the encryption one?
19:08:14 <xgeorgex> Which is the encryption one?
19:08:20 <xgeorgex> Fips?
19:09:24 <cyberpear> no, Disk Encryption
19:09:40 <xgeorgex> I didn't
19:09:48 <cyberpear> maybe that wasn't CAT 1
19:09:50 <xgeorgex> There are two in section 1 that I was going to circle back to and that was one
19:10:13 <xgeorgex> Actually that's the only one I skipped in cat 1 that I need to circle back through
19:10:22 <xgeorgex> Once I get cat3 done I'm going to go back to it
19:11:38 <xgeorgex> I only have a few controls left in cat3 so I will probably be back at that one either tonight or tomor
19:11:40 <xgeorgex> Tomorrow morning
19:11:41 <cyberpear> might be kind of like the "partitioning" ones where you can otly tell  the user to fix it themselves
19:12:13 <xgeorgex> Yeah, I poked around for a bit on it but before I gave up and just messaged out a warning I wanted to really look deep
19:12:31 <xgeorgex> Visually it's easier for me to see it's not done if I leave it as /bin/true
19:13:30 <cyberpear> #topic Open Floor
19:13:47 <cyberpear> I didn't have anything new for today.
19:13:55 <xgeorgex> Was dfed able to handle the pr stuff you added last week?
19:14:07 <xgeorgex> I sent it his way and it sounded like he was going to handle it then
19:14:25 <cyberpear> yeah, they got merged. thanks!
19:14:32 <xgeorgex> Sweet!
19:14:50 <xgeorgex> The only other thing on my side is I diverted from my apache cis stuff to work on rhel8 stig
19:14:59 <xgeorgex> So I'm not sure of an eta on that now
19:15:03 <cyberpear> the person who reported the issue followed up and said there's still a typo, and I said "PR's welcome", but it's just a cosmetic typo
19:15:08 <xgeorgex> I'm about 70% done with the apache stuff
19:16:24 <cyberpear> cool
19:16:47 <cyberpear> I guess I should follow up on my Red Hat case asking for python3-passlib in RHEL 8
19:16:50 <xgeorgex> I hate those cosmetic typos when they are mine. If it's mine and there it makes my eye twitch each time I see it
19:16:51 <cyberpear> do you have a similar case open?
19:17:17 <cyberpear> related to https://github.com/MindPointGroup/RHEL7-STIG/issues/286
19:17:18 <xgeorgex> I don't but David mght
19:17:58 <cyberpear> some companies seem to have much more pull to get RH to do stuff than others
19:18:29 <xgeorgex> Yeah and I don't know where we fall in that
19:18:46 <xgeorgex> I'm not sure if we have more pull or are just one of the little guys
19:19:00 <cyberpear> (I asked for SSSD certmap support in RHEL 7, and they said "get lost, use RHEL 8", but someone else asks, and it looks like it's going to actually happen)
19:19:18 <xgeorgex> hahaha
19:20:04 <cyberpear> anyway, I think that's all from me today... anything else to discuss?
19:20:42 <xgeorgex> Same here
19:21:08 <cyberpear> thanks. will end the meeting in a minute unless anything comes up
19:37:41 <cyberpear> #endmeeting