============================================ #openstack-meeting: OpenStack Security Group ============================================ Meeting started by bdpayne at 18:00:01 UTC. The full logs are available at http://eavesdrop.openstack.org/meetings/openstack_security_group/2013/openstack_security_group.2013-01-31-18.00.log.html . Meeting summary --------------- * Welcome security group! (bdpayne, 18:00:28) * LXC Security Note (bdpayne, 18:01:30) * LINK: https://bugs.launchpad.net/osn/+bug/1098582 (bdpayne, 18:01:48) * This security note is about ready to go, looking for final comments and then we'll release it. (bdpayne, 18:02:36) * If anyone has further feedback on the note, please get it in by the end of the day today (bdpayne, 18:06:07) * Storage Encryption (bdpayne, 18:07:01) * There are two open proposals for different kinds of storage encryption right now (bdpayne, 18:08:03) * object encryption (swift) by Intel (bdpayne, 18:08:23) * LINK: https://blueprints.launchpad.net/swift/+spec/encrypted-objects (bdpayne, 18:08:26) * volume encryption (cinder) by APL (bdpayne, 18:08:36) * LINK: https://blueprints.launchpad.net/nova/+spec/encrypt-cinder-volumes (bdpayne, 18:08:46) * ACTION: Let's all try to review these and think about how they will fit together over the next week (bdpayne, 18:11:48) * ACTION: Let's refine the security models for the storage encryption schemes (bdpayne, 18:15:45) * Open Discussion (bdpayne, 18:16:54) * so I wanted to open up the discussion a bit to see what other security related things are on people's minds and where the group can help (bdpayne, 18:17:27) * python code in rootwrap (bdpayne, 18:18:41) * LINK: https://blueprints.launchpad.net/oslo/+spec/nova-rootwrap-python-exec (bdpayne, 18:18:44) * Next Steps (bdpayne, 18:24:57) * So, I wanted to call out a few specific places where I think people can help today (bdpayne, 18:25:19) * LINK: https://github.com/hyakuhei/OSSG_Hardening_Guide (bdpayne, 18:25:55) * Final Words (bdpayne, 18:29:31) * LINK: www.nsa.gov/ia/_files/os/redhat/rhel5-guide-i731.pdf (RHEL) (noslzzp, 18:30:36) Meeting ended at 18:31:12 UTC. People present (lines said) --------------------------- * bdpayne (80) * Chris___ (14) * mtesauro (8) * rellerreller (6) * noslzzp (6) * openstack (3) * uvirtbot (2) * lauraglendenning (1) Generated by `MeetBot`_ 0.1.4