2 IRC_meeting_2010

John Johansen edited this page 2021-07-13 18:41:21 +00:00

Table of Contents

• Navigation
• IRC Meeting, 1700 UTC, Nov 17, 2010
• IRC Meeting, 1700 UTC, Wed 20 Oct, 2010
• IRC Meeting, 1700 UTC, Wed 06 Oct, 2010
• IRC Meeting, 1700 UTC, Wed 22 Sep, 2010
• IRC Meeting, 1700 UTC, Wed 8 Sep, 2010
• IRC Meeting, 1700 UTC, Wed 25 Aug, 2010
• IRC Meeting, 1700 UTC, Wed 16 Aug, 2010
• IRC Meeting, 1700 UTC, Wed 04 Aug, 2010
• IRC Meeting, 1700 UTC, Wed 28 Jul, 2010
• IRC Meeting, 1700 UTC, Wed 7 Jul, 2010
• IRC Meeting, 1700 UTC, Wed 23 Jun, 2010

Navigation

• Main Index of IRC Meetings
• Archive 2020 Meetings
• Archive 2019 Meetings
• Archive 2018 Meetings
• Archive 2017 Meetings
• Archive 2016 Meetings
• Archive 2015 Meetings
• Archive 2014 Meetings
• Archive 2013 Meetings
• Archive 2012 Meetings
• Archive 2011 Meetings
• Archive 2010 Meetings

---

IRC Meeting, 1700 UTC, Nov 17, 2010

• 2.5.1 kernel status update
  • jjohansen - nominate patches for 2.5.1 kernel
  • jjohansen - patches to work with upstream kernels

• Action item status
  • jjohansen - hybrid policy white paper
    • progress
    • check into vcs
  • jjohansen - basic profile, load/remove/replace validation tests
  • jjohansen - improve wiki work item list for test suites
  • sbeattie|/jjohansen - examine and reenable networking tests.
  • sbeattie/jjohansen - 2.5 release notes
  • sbeattie, jdstrand, jjohansen - brainstorm on the list about improving the regression testsuite
  • sbeattie - log parsing regression tests suite
  • sbeattie - find out about Nox's legal status DONE
  • sbeattie - cleanup grammatical nitpicks in release notes
  • sbeattie - investigate adding language binding regression tests to libapparmor
  • sbeattie - find biggest version of Nox in archive
  • mdeslaur - modify user-space tools to use new profile project
  • mdeslaur - mod_apparmor testcase in the apparmor test script in qart
  • mdeslaur - take a look at FBAC lsm policy creation tool
  • jdstrand - write pam-apparmor documentation: DONE

• Logo

 - place holder currently angling for Nox (sbeattie - inquiring), if not then will reopen the item

• UDS - update on what was decided there
• proposal - reversion 2.6 to AppArmor 3.0, as we are break language compatibility
  • are there any other language changes we want to make at this time beyond the semantic incompatibilities we are going to introduce
    • require permissions at the front of the rules?
    • rule blocks
    • removal of profile state flags (complain, enforce)
    • is the version tag required as part of every include file

IRC Meeting, 1700 UTC, Wed 20 Oct, 2010

• 2.5.1 kernel status update
  • jjohansen - nominate patches for 2.5.1 kernel
  • jjohansen - patches to work with upstream kernels

• Action item status
  • jjohansen - hybrid policy white paper
    • progress
    • check into vcs
  • jjohansen - basic profile, load/remove/replace validation tests
  • jjohansen - improve wiki work item list for test suites
  • sbeattie|/jjohansen - examine and reenable networking tests.
  • sbeattie/jjohansen - 2.5 release notes
  • sbeattie - log parsing regression tests suite
  • sbeattie - find out about Nox's legal status DONE
  • sbeattie - cleanup grammatical nitpicks in release notes
  • sbeattie - investigate adding language binding regression tests to libapparmor
  • sbeattie - update wiki/lp with end-of-year target for 2.5.2 release DONE
  • sbeattie, jdstrand, jjohansen - brainstorm on the list about improving the regression testsuite
  • mdeslaur - setup new project DONE (https://launchpad.net/apparmor-profiles)
  • mdeslaur - modify user-space tools to use new profile project
  • mdeslaur - mod_apparmor testcase in the apparmor test script in qart
  • mdeslaur - take a look at FBAC lsm policy creation tool
  • mdeslaur - cookies DONE

• Logo

 - place holder currently angling for Nox (sbeattie - inquiring), if not then will reopen the item

• UDS planning
• 2.6 planning
  • Anything new?

IRC Meeting, 1700 UTC, Wed 06 Oct, 2010

• bumped to Oct 20

IRC Meeting, 1700 UTC, Wed 22 Sep, 2010

• 2.5.1 status update
  • jjohansen - nominate patches for 2.5.1 kernel
  • jjohansen - patches to work with upstream kernels
  • jjohansen - caching patch?
  • sbeattie - check that all 2.5.1 nominations are in
  • sbeattie - roll test tarballs
  • sbeattie - 2.5.1 release notes

• Action item status
  • jjohansen - hybrid policy white paper
    • progress
    • check into vcs
  • jjohansen - basic profile, load/remove/replace validation tests
  • jjohansen - get the regression tests working with current upstream kernel
  • jjohansen - improve wiki workitem list for test suites
  • sbeattie/jjohansen - 2.5 release notes
  • sbeattie - move crowd sourcing notes from gobby into wiki
  • sbeattie - log parsing regression tests suite
  • sbeattie - find out about Nox's legal status
  • sbeattie - cleanup grammatical nitpicks in release notes
  • mdeslaur - setup new project, and modify user-space tools
  • mdeslaur - mod_apparmor testcase in the apparmor test script in qart
  • medslaur - take a look at FBAC lsm policy creation tool

• Logo

 - Nox?  - Laser sharks?  - another candidate?

• Regression Test suite, and testing documentation
  • We were bit by the regression test suite deficiencies again.
  • Proposals
    • Add new stub tests noting that a test is missing or disabled. This will remind us of things that are missing
    • Update to get listing of skipped and failed tests at the end of a run
    • Set up testing documentation on how to test
      • parser tests
      • libapparmor tests
      • stress tests
      • regression tests
      • tests that aren't integrated yet

• 2.5.2 planning
  • Time line
  • Any outstanding items that are already known and should be included?

• 2.6 planning
  • Time Line
  • Target Features
• Tools
  • common back end
  • update wiki with work items

IRC Meeting, 1700 UTC, Wed 8 Sep, 2010

• postponed

IRC Meeting, 1700 UTC, Wed 25 Aug, 2010

• upstreaming status update
• 2.5.1 status update
• Action item status
  • jjohansen - nominate patches for 2.5.1 kernel
  • jjohansen - hybrid policy email - not done yet, taking a while to write
  • kees - bug keybuck for ideas about how to handle policy state
    • symlinks (jjohansen doesn't like current scheme)
    • mixed into policy (nobody seems to like)
    • alternate scheme
  • kees - to write email/kick off discussion of dynamic profiles
  • sbeattie - roll test tarballs for 2.5.1
  • sbeattie/jjohansen - 2.5 release notes
  • sbeattie - 2.5.1 release notes
• Test suites
  • Many action items, in place, are in desperate need of improvements
• Tools - userspace tools are becoming useless, in desperate need of updates. We need to plan what we want to do with the going forward.
• 2.6 planning
  • Time Line
  • Target Features
• Logo

 - Nox?  - Laser sharks?  - another candidate?

IRC Meeting, 1700 UTC, Wed 16 Aug, 2010

• upstreaming status update
• 2.5.1 status update
• Action item status
  • jjohansen - nominate patches for 2.5.1 kernel
  • jjohansen - hybrid policy email - not done yet, taking a while to write
  • kees - to write email/kick off discussion of dynamic profiles
  • jdstrand - site specific customization of profiles
    • 1. create /etc/apparmor/local dir
    • 2. modify profile to make use of it
  • sbeattie - roll test tarballs for 2.5.1
  • sbeattie/jjohansen - 2.5 release notes
  • sbeattie - 2.5.1 release notes
• crowd souring of policy - where are we?
• /etc/apparmor.d/libvirt should this be moved into /etc/apparmor.d/local/
• Test suites
  • Many action items, in place, are in desperate need of improvements
• Tools - userspace tools are becoming useless, in desperate need of updates. We need to plan what we want to do with the going forward.
• 2.6 planning
  • Time Line
  • Target Features
• Logo

 - Nox?  - Laser sharks?

IRC Meeting, 1700 UTC, Wed 04 Aug, 2010

• upstreaming status
• kernels for 2.6 - http://kernel.org/pub/linux/security/apparmor/AppArmor-2.6/
• site-specific customization of profiles
• Action item status
  • jjohansen - semantic change - dir read implies file meta read - email sent
  • jjohansen - nominate patches for 2.5.1 kernel - still a todo
  • kees - to write email/kick off discussion of dynamic profiles
  • jjohansen - hybrid policy email - not done yet, taking a while to write
  • jjohansen - raise using equivalence class, do performance testing. Deferred until can test from user space.
• crowd sourcing of policy - where are we?

IRC Meeting, 1700 UTC, Wed 28 Jul, 2010

• postponed until Wed 04 Aug, 2010

IRC Meeting, 1700 UTC, Wed 7 Jul, 2010

• 2.5.1 status
• Upstreaming status
• Bugs/Issues
  • LP Bug #599450
  • LP Bug #602261
  • LP Bug #581525
• AA Development
  • Default to using equivalence classes?
  • dynamic profiles - how they interact with policy reloads
  • hybrid policy
  • parser memory usage
  • semantic change - dir read implies file meta read
  • crowd sourcing policy
• Next meeting Wed 21 Jul or Wed 4 Aug ?
• Open Discussion

IRC Meeting, 1700 UTC, Wed 23 Jun, 2010

• review of https://blueprints.launchpad.net/ubuntu/+spec/security-m-apparmor
• 2.5.1 release planning
• Longer term roadmap item priority review