| *** liverpooler has quit IRC | 00:49 | |
| *** salv-orlando has joined #openstack-security | 01:26 | |
| *** salv-orl_ has quit IRC | 01:29 | |
| *** chyka has joined #openstack-security | 01:53 | |
| *** chyka has quit IRC | 01:58 | |
| *** jamespage_ has joined #openstack-security | 02:08 | |
| *** jamespage has quit IRC | 02:12 | |
| *** d0ugal has quit IRC | 02:12 | |
| *** jamespage_ is now known as jamespage | 02:13 | |
| *** d0ugal has joined #openstack-security | 02:13 | |
| *** Unterd0g has quit IRC | 02:15 | |
| *** Unterd0g has joined #openstack-security | 02:17 | |
| *** edmondsw has joined #openstack-security | 02:20 | |
| *** daidv has joined #openstack-security | 02:46 | |
| *** daidv has quit IRC | 02:49 | |
| *** nicolasbock has quit IRC | 03:33 | |
| *** chyka has joined #openstack-security | 03:44 | |
| *** chyka has quit IRC | 03:49 | |
| *** edmondsw has quit IRC | 03:50 | |
| *** chyka has joined #openstack-security | 03:56 | |
| *** chyka has quit IRC | 03:57 | |
| *** chyka has joined #openstack-security | 03:58 | |
| *** edmondsw has joined #openstack-security | 04:18 | |
| *** edmondsw has quit IRC | 04:21 | |
| *** edmondsw has joined #openstack-security | 04:21 | |
| *** edmondsw has quit IRC | 04:21 | |
| *** edmondsw has joined #openstack-security | 04:22 | |
| *** edmondsw has quit IRC | 04:26 | |
| *** chyka has quit IRC | 05:09 | |
| *** d0ugal has quit IRC | 05:46 | |
| *** vds has joined #openstack-security | 05:58 | |
| *** macermak has joined #openstack-security | 06:04 | |
| *** d0ugal has joined #openstack-security | 06:13 | |
| *** browne has quit IRC | 06:31 | |
| *** murphy_zhao has quit IRC | 06:47 | |
| *** tesseract has joined #openstack-security | 06:58 | |
| *** tesseract has quit IRC | 07:00 | |
| *** murphy_zhao has joined #openstack-security | 07:01 | |
| *** tesseract has joined #openstack-security | 07:02 | |
| *** vds has quit IRC | 07:07 | |
| *** sxc731 has joined #openstack-security | 07:16 | |
| *** pcaruana has joined #openstack-security | 07:31 | |
| *** rcernin has quit IRC | 07:32 | |
| *** AlexeyAbashkin has joined #openstack-security | 07:45 | |
| *** sxc731 has quit IRC | 07:45 | |
| *** austin987 has quit IRC | 07:47 | |
| *** threestrands_ has quit IRC | 07:52 | |
| *** austin987 has joined #openstack-security | 07:57 | |
| *** murphy_zhao has quit IRC | 08:12 | |
| *** sxc731 has joined #openstack-security | 08:16 | |
| *** jaosorior has joined #openstack-security | 08:24 | |
| *** murphy_zhao has joined #openstack-security | 08:24 | |
| *** sxc731 has quit IRC | 08:42 | |
| *** sxc731 has joined #openstack-security | 08:47 | |
| *** sxc731 has quit IRC | 08:53 | |
| *** Alexey_Abashkin has joined #openstack-security | 08:57 | |
| *** AlexeyAbashkin has quit IRC | 09:01 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 09:01 | |
| *** jaosorior has quit IRC | 09:49 | |
| *** murphy_zhao has quit IRC | 10:04 | |
| *** macermak has quit IRC | 10:06 | |
| *** openstackgerrit has joined #openstack-security | 10:29 | |
| openstackgerrit | Luke Hinds proposed openstack/bandit master: Project Migration to PyCQA https://review.openstack.org/564453 | 10:29 |
|---|---|---|
| *** nicolasbock has joined #openstack-security | 10:33 | |
| *** Unterd0g has quit IRC | 10:50 | |
| *** Unterd0g has joined #openstack-security | 10:53 | |
| *** threestrands_ has joined #openstack-security | 11:01 | |
| *** chyka has joined #openstack-security | 11:42 | |
| *** chyka has quit IRC | 11:47 | |
| *** edmondsw has joined #openstack-security | 11:57 | |
| *** edmondsw_ has joined #openstack-security | 11:58 | |
| *** edmondsw has quit IRC | 12:02 | |
| *** atoth has joined #openstack-security | 12:06 | |
| *** edmondsw_ is now known as edmondsw | 12:08 | |
| *** liverpooler has joined #openstack-security | 12:15 | |
| *** dave-mccowan has joined #openstack-security | 12:31 | |
| *** dave-mcc_ has joined #openstack-security | 12:41 | |
| *** dave-mccowan has quit IRC | 12:43 | |
| *** threestrands_ has quit IRC | 12:58 | |
| *** edmondsw has quit IRC | 13:12 | |
| *** edmondsw has joined #openstack-security | 13:12 | |
| *** edmondsw has quit IRC | 13:16 | |
| *** jaosorior has joined #openstack-security | 13:35 | |
| *** ediardo has quit IRC | 13:44 | |
| *** chyka has joined #openstack-security | 14:09 | |
| *** jaosorior has quit IRC | 14:12 | |
| *** jaosorior has joined #openstack-security | 14:13 | |
| *** chyka has quit IRC | 14:14 | |
| *** edmondsw has joined #openstack-security | 14:19 | |
| *** browne has joined #openstack-security | 14:24 | |
| *** pcaruana has quit IRC | 14:42 | |
| *** edmondsw has quit IRC | 14:54 | |
| *** edmondsw has joined #openstack-security | 14:54 | |
| *** jaosorior has quit IRC | 14:55 | |
| *** nickthetait has joined #openstack-security | 15:33 | |
| gagehugo | browne fungi we want to keep projects using bandit though right for their checks? | 15:33 |
| fungi | yes, that shouldn't pose any problems | 15:34 |
| fungi | removing bandit from job configuration in project-config doesn't remove use of bandit from individual projects (which is generally implemented through their requirements.txt and tox.ini files) | 15:35 |
| fungi | it just stops running jobs on new changes proposed to the bandit repo, which is a prerequisite for removing its content before we switch it to read-only in gerrit | 15:36 |
| gagehugo | ok | 15:36 |
| fungi | step #2 in https://docs.openstack.org/infra/manual/drivers.html#retiring-a-project | 15:36 |
| browne | yeah, we have to turn off or make non-voting the zull checks that are failing for patch https://review.openstack.org/#/c/564453/ | 15:36 |
| fungi | and step 4 | 15:36 |
| browne | ha, did anyone do step 1> | 15:37 |
| gagehugo | we might have update projects's gates too if they are pulling from the old repo | 15:37 |
| fungi | they wouldn't install bandit from git | 15:37 |
| fungi | they install it from pypi | 15:37 |
| gagehugo | I mean do we need to change anything there? | 15:38 |
| gagehugo | I want to avoid breaking everyone's pep8 gate heh | 15:38 |
| fungi | i.e., they test using released versions of bandit | 15:38 |
| gagehugo | ah ok | 15:38 |
| fungi | so nothing needs to change there | 15:38 |
| gagehugo | cool | 15:38 |
| nickthetait | brb | 15:39 |
| fungi | as long as bandit continues to publish new releases to pypi (which it does) then this is business as usual for projects relying on it | 15:39 |
| browne | ok, i'll do a patch to remove bandit from openstack/requirements projects.txt | 15:39 |
| *** gyee has joined #openstack-security | 15:40 | |
| browne | https://review.openstack.org/#/c/564532/ | 15:42 |
| nickthetait | Heres a link for browne about moving issues from launchpad to github http://lp2gh.readthedocs.io/en/latest/moving_issues.html | 15:48 |
| browne | nickthetait: thanks! | 15:50 |
| nickthetait | yep | 15:51 |
| browne | https://review.openstack.org/#/c/564539/ | 15:54 |
| *** AlexeyAbashkin has quit IRC | 15:56 | |
| fungi | since we ran a bit over and i didn't get to highlight these, here are a couple new potential ossns which became public over the past week: https://launchpad.net/bugs/1739646 https://launchpad.net/bugs/1765734 | 16:03 |
| openstack | Launchpad bug 1739646 in OpenStack Compute (nova) queens "Instance type with disk set to 0 can cause DoS" [High,In progress] - Assigned to Matt Riedemann (mriedem) | 16:03 |
| openstack | Launchpad bug 1765734 in oslo.rootwrap "one can bypass filters and execute arbitrary commands on namespaces" [Undecided,New] - Assigned to Daniel Alvarez (dalvarezs) | 16:03 |
| *** d0ugal has quit IRC | 16:03 | |
| *** d0ugal has joined #openstack-security | 16:04 | |
| gagehugo | fungi idk if you're the correct person to ask, but do we only have the channel for 30 mins? I thought that was the issue before we moved times, not sure if that's still the case | 16:24 |
| gagehugo | for the weekly meeting* | 16:24 |
| fungi | gagehugo: i expect hyakuhei determined we regularly lacked sufficient content to go longer than that | 16:27 |
| fungi | but i'll check the git history for the schedule to find out | 16:27 |
| gagehugo | fungi thank you! | 16:27 |
| gagehugo | yeah typically we don't run over | 16:27 |
| gagehugo | but sometimes we do, and I felt bad cutting it off if it was not necessary | 16:27 |
| fungi | might have even been a convention bdpayne started when he was chairing | 16:29 |
| fungi | gagehugo: i don't see anything at http://eavesdrop.openstack.org/#Security_SIG_meeting or in https://git.openstack.org/cgit/openstack-infra/irc-meetings/tree/meetings/openstack-security-sig-meeting.yaml explicitly limiting it to half an hour | 16:31 |
| fungi | and in fact http://eavesdrop.openstack.org/calendars/openstack-security-sig-meeting.ics says "DURATION:PT1H" | 16:31 |
| *** edmondsw has quit IRC | 16:31 | |
| fungi | so i thnik it's at least scheduled just like any of our standard weekly irc meetings which are an hour in length | 16:32 |
| fungi | in the past, some participants may have had a hard conflict starting at 15:30 utc or something | 16:32 |
| fungi | or rather, at half-past whatever time the meeting was previously scheduled to start before we moved it to thursdays | 16:33 |
| *** ediardo has joined #openstack-security | 16:55 | |
| *** lbragstad has quit IRC | 17:07 | |
| gagehugo | fungi ok, thanks for looking | 18:14 |
| *** lbragstad has joined #openstack-security | 18:22 | |
| *** tesseract has quit IRC | 18:24 | |
| fungi | so, yeah, i expect you could just say it's an hour-long meeting that you reserve the option to end early if there's insufficient agenda to last that long | 19:01 |
| fungi | and if people have a hard stop at 30 minutes for something else they can just let the meeting chair know to cover their topics in the first part of the meeting | 19:02 |
| gagehugo | yeah, I don't see any cons to having the room for an hour | 19:03 |
| *** nickthetait has quit IRC | 19:06 | |
| *** browne has quit IRC | 19:08 | |
| *** browne has joined #openstack-security | 19:12 | |
| *** browne has quit IRC | 19:17 | |
| *** browne has joined #openstack-security | 19:19 | |
| *** browne has quit IRC | 19:21 | |
| *** ediardo has quit IRC | 19:23 | |
| *** browne has joined #openstack-security | 19:30 | |
| *** browne has quit IRC | 19:31 | |
| *** browne has joined #openstack-security | 20:09 | |
| *** salv-orl_ has joined #openstack-security | 20:11 | |
| *** salv-orlando has quit IRC | 20:11 | |
| *** browne has quit IRC | 20:11 | |
| *** browne has joined #openstack-security | 20:24 | |
| *** atoth has quit IRC | 20:29 | |
| *** atoth has joined #openstack-security | 20:29 | |
| *** liverpooler has quit IRC | 21:58 | |
| *** browne has quit IRC | 22:00 | |
| *** browne has joined #openstack-security | 22:00 | |
| *** dave-mcc_ has quit IRC | 22:02 | |
| *** alex8653 has joined #openstack-security | 22:07 | |
| *** rcernin has joined #openstack-security | 22:23 | |
| *** salv-orl_ has quit IRC | 22:45 | |
| *** salv-orlando has joined #openstack-security | 22:45 | |
| *** salv-orlando has quit IRC | 22:50 | |
| *** browne has quit IRC | 23:07 | |
| *** browne has joined #openstack-security | 23:41 | |
| *** salv-orlando has joined #openstack-security | 23:46 | |
| *** salv-orlando has quit IRC | 23:51 | |
| *** gyee has quit IRC | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!