14:00:27 #startmeeting Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings 14:00:27 Meeting started Thu Oct 29 14:00:27 2015 UTC. The chair is Sparks. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:00:27 Useful Commands: #action #agreed #halp #info #idea #link #topic. 14:00:30 #meetingname Fedora Security Team 14:00:30 The meeting name has been set to 'fedora_security_team' 14:00:33 #topic Roll Call 14:00:35 * Sparks 14:01:46 d 14:01:50 .hello mhayden 14:01:50 mhayden: mhayden 'Major Hayden' 14:03:13 mhayden: Wow, and I actually had things to talk about today. 14:05:29 .hellomynameis smdeep 14:05:30 smdeep: smdeep 'Sudeep Mukherjee' 14:05:36 mhayden: Okay, I'll run down everything I had and then move the conversation to the list, I guess. 14:05:39 smdeep: Welcome 14:05:51 #info Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" 14:05:55 Sparks, :) 14:05:59 #topic Follow up on last week's tasks 14:06:12 #action Sparks to add "issues" to fedora-meeting-report on github 14:06:25 mhayden: Do you recall what I was supposed to be adding issues about? 14:06:47 i'm not sure :/ 14:06:52 Okay then 14:07:01 #action Sparks to talk with mattdm regarding private security tickets in BZ. 14:07:13 #info This discussion has begun on the list with a request for a full response team. 14:07:22 #action Sparks to start a discussion on the FST list regarding an online video GPG key signing event. 14:07:39 #action mhayden to kick off a ML thread about finding a foss A/V conferencing solution of some sort 14:08:03 mhayden: Oh good, it looks like we're both on the same action. Anything to report here? 14:08:34 nothing yet... still scratching our heads on this one 14:08:45 Astradeus and i tried out fedora's webrtc but it was really flaky 14:08:53 mhayden: We may just have to use Bluejeans and move on with life. 14:09:02 i'm fine with that 14:09:15 #undo 14:09:15 Removing item from minutes: ACTION by Sparks at 14:07:39 : mhayden to kick off a ML thread about finding a foss A/V conferencing solution of some sort 14:09:40 Okay, I'll just put that on the list and see if anyone has any problems with that. 14:10:09 #undo 14:10:09 Removing item from minutes: ACTION by Sparks at 14:07:22 : Sparks to start a discussion on the FST list regarding an online video GPG key signing event. 14:10:31 #action Sparks to discuss using Bluejeans for an online GPG key signing event 14:10:43 #action mhayden to get Astradeus' changes to the stats script into the fedora-security-team git repo 14:10:47 mhayden: Anything on this? 14:11:00 not yet :P we need someplace to host the file + sqlite 14:11:11 mhayden: fedorapeople? 14:11:18 ah, i didn't consider that 14:11:25 i wonder if we could get that to work there 14:11:30 mhayden: Or maybe we can get a virtual server from Infra 14:11:36 i could give fp a try 14:11:53 Or maybe openshift? 14:11:56 IDK 14:12:45 #action pjp to give a status update on security policy in the wiki (carried over) 14:13:01 And since pjp isn't here to defend himself we'll move on to the next topic 14:13:08 #topic Education and Training 14:13:15 #link https://fedoraproject.org/wiki/Information_Security_Training 14:14:00 I'm working, internally at RH, on education and training resources for InfoSec. I'm going to try to extend as many of these resources to the public via Fedora. 14:14:58 Thoughts? 14:15:56 #topic Outstanding BZ Tickets 14:16:04 #info Thursday's numbers: Critical 1 (+1), Important 40 (-3), Moderate 446 (+28), Low 162 (+12), Total 649 14:16:11 +Tickets by Priority--+-------+---------+ 14:16:11 | Priority | Count | Owned | Unowned | 14:16:11 +-------------+-------+-------+---------+ 14:16:11 | medium | 446 | 45 | 401 | 14:16:11 | low | 162 | 14 | 148 | 14:16:13 | high | 40 | 27 | 13 | 14:16:16 | unspecified | 4 | 0 | 4 | 14:16:18 | urgent | 1 | 0 | 1 | 14:16:21 +-------------+-------+-------+---------+ 14:16:24 Anyone have anything related to tickets? 14:16:33 * Sparks goes to query BZ for the new critical 14:16:36 not really -- i've not had the time to jump on them lately :| 14:19:04 Okay, I'm not sure the critical is a critical. 14:19:52 #link https://bugzilla.redhat.com/show_bug.cgi?id=1256790 14:22:21 #topic Open floor discussion/questions/comments 14:22:27 Okay, does anyone have anything? 14:22:36 not i 14:23:30 Okay, we'll close then. 14:23:49 Thanks, everyone, for coming! 14:23:52 #endmeeting