== Meeting == * '''Who''': SecurityTeam * '''When''': [[http://www.timeanddate.com/worldclock/fixedtime.html?month=03&day=24&year=2014&hour=&min=30&sec=0&p1=0|Mon Mar 24th 2014 16:30 UTC]] * '''End''': 17:00 UTC * '''Where''': #ubuntu-meeting on irc.freenode.net * '''Chaired By''': JamieStrandboge (jdstrand) == Attendance == * jdstrand * mdeslaur * sbeattie * tyhicks * jjohansen * sarnold * chrisccoulson == Not present == * None == Agenda == * Announcements * [ACTION] chrisccoulson send oxide and qtwebkit benchmark results to mailing list: DONE (https://lists.launchpad.net/oxide/msg00003.html) * Weekly stand-up report (each member discusses any pending and planned future work for the week) * jdstrand * weekly role: triage * run/comment on !AppArmor ipc kernel, etc * golang MIR * help with oxide to Ubuntu * embargoed issues * [[https://wiki.ubuntu.com/SecurityTeam/Specifications/ScopesConfinement|ScopesConfinement]] discussions * updates * mdeslaur * weekly role: community * pending updates * ca-certificates updates for stable releases * initramfs-tools update to fix /run being mounted without noexec * apache2 update * sbeattie * !AppArmor * ipc test cases * monitoring 2.8.95 bugs * tyhicks * LXC regressions in !AppArmor (Bug:1296459, Bug:1295774) * !AppArmor work items * jjohansen * !AppArmor * ipc revisions * coordinate with sbeattie and tyhicks * bug fixing * sarnold * weekly role: happy place * MIRs: juju, schroot, strongswan, and glusterfs to start and finish * help with !AppArmor as needed * chrisccoulson * Oxide * land Oxide in the archive * code reviews * blog posts: * http://www.chriscoulson.me.uk/blog/?p=242 * http://www.chriscoulson.me.uk/blog/?p=251 * Highlighted packages The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are: <> * Miscellaneous and Questions * `< ScottK> You might want to consider promoting clamav 0.98.1 from backports to updates or security/updates. 0.97.8 is not able to use all the current virus definitions and so there's a capability/security gap there if people aren't using backports.` * mdeslaur will followup on this == Log == Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2014/ubuntu-meeting.2014-03-24-16.35.html