Design Sessions: Difference between revisions
From Xen
Jump to navigationJump to search
Lars.kurth (talk | contribs) |
Lars.kurth (talk | contribs) No edit summary |
||
Line 58: | Line 58: | ||
SCHEDULE: http://sched.co/AjGk |
SCHEDULE: http://sched.co/AjGk |
||
|Review= |
|||
{{comment| Feel free to make suggestions here}}<br> |
|||
{{vote|And whether you intend to attend}} |
|||
}} |
|||
{{DesignSession |
|||
|Project=Design Session: Loose ends for becoming a CNA (CVE Numbering Authorities) and other Security Team Operational Questions - |
|||
|Date=July 13 2017 |
|||
Contact=Lars Kurth, Ian Jackson |
|||
|Desc=The Xen Project has in-principle agreement to become a CVE Numbering Authority. However to do this, we need to define the scope of the CNA. A number of have worked on this, but we need some community inout. |
|||
'''Consolidate Security Coverage Documents''' |
|||
Consolidate security coverage documents where possible (we have a proposal). Specifically |
|||
* Review the proposal (currently in a [https://docs.google.com/document/d/17LiK-C3oBFZNpxeihXxkM2Bagn7A2L3Dv1u1ZGZe_TQ/edit google doc]) |
|||
* Review the scope (currently in a [https://docs.google.com/spreadsheets/d/1wLb37mbxN715rlYD8eKV8htgatDI41noOmQ1H428QX4/edit#gid=0 google doc]) - this may involve clarifying the supported status of some components |
|||
* Once we have agreement, we basically just need to document the outcome, publish it and get the process started. |
|||
'''Other Operational Issues''' |
|||
* Automated checking of XSAs against releases (see https://xenbits.xenproject.org/gitweb/?p=people/larsk/xen-release-scripts.git;a=summary) |
|||
* Usage of RT and issues that has caused => does it work, what to change? |
|||
'''Possible/Proposed Process Changes?''' |
|||
* Bundling of issues / once every other week or monthly XSA publication? |
|||
* Include maintainers on pre-disclosure when affected and not on security team |
|||
<br> |
|||
SCHEDULE: http://sched.co/AjHl |
|||
|Review= |
|Review= |
||
{{comment| Feel free to make suggestions here}}<br> |
{{comment| Feel free to make suggestions here}}<br> |
Revision as of 08:49, 18 July 2017
2017: Developer and Design Summit
Add links to notes or xen-devel@ discussions here
Graphics Virtualization
Peer Review CommentsFeel free to make suggestions hereAnd whether you intend to attend: |
Xen Toolstacks for Server and Edge Use Cases
Peer Review CommentsFeel free to make suggestions hereAnd whether you intend to attend: |
Testing Server and Edge Hypervisors
Peer Review CommentsFeel free to make suggestions hereAnd whether you intend to attend: |
Design Session: Loose ends for becoming a CNA (CVE Numbering Authorities) and other Security Team Operational Questions -
Peer Review CommentsFeel free to make suggestions hereAnd whether you intend to attend: |