#opnfv-sec: Security Group

Meeting started by LukeHinds at 13:59:10 UTC (full logs).

Meeting summary

  1. Agenda (nothing fixed for this month) (LukeHinds, 14:01:08)
    1. AGREED: agenda (LukeHinds, 14:03:39)
    2. AGREED: last minutes (LukeHinds, 14:03:58)

  2. work items (LukeHinds, 14:04:05)
    1. Not much of an update from me *. Aric has set up the sec group permissions and I need to get in contact with him. I have been a bit busy internally these past few days, but will get onto that tomorrow I hope. (LukeHinds, 14:05:10)
    2. any others want to update? (LukeHinds, 14:05:34)
    3. Worked on outline of int.security policy to integrate reporting of security issues and the SecurityImpact flagging in gerrit/Jira. Needs to be polished yet. (mwinandy_, 14:07:42)
    4. For those projects that use VM images I think this is useful to include/reference: Center for Internet Security (CIS) benchmarks http://benchmarks.cisecurity.org/downloads/benchmarks/ (mwinandy_, 14:08:22)
    5. http://benchmarks.cisecurity.org/downloads/benchmarks/ (mwinandy_, 14:08:33)
    6. CIS benchmarks gives advice how to configure, e.g., RedHat or Centos instances when using them as VM images (mwinandy_, 14:09:24)
    7. feel free to put these on the wiki (LukeHinds, 14:10:11)
    8. current draft structure is on etherpad. Please feel free to comment (mwinandy_, 14:10:58)
    9. https://etherpad.opnfv.org/p/int-sec-policies (mwinandy_, 14:11:18)
    10. looks good (etherpad), but be mindful you have overlap with the secure coding guidelines, better to put your links in there and reference the secure coding page from the int-sec-policies (LukeHinds, 14:13:22)
    11. General Policies for OPNFV Development Infrastructure -> https://wiki.opnfv.org/security/securecode (LukeHinds, 14:14:07)
    12. mwinandy_> yes, will do (still "legacy content" there :) -> understood (LukeHinds, 14:14:34)
    13. inspector: expecting to have a discussion tomorrow in the proposed projects agenda point (aripie, 14:16:54)
    14. any comments on the proposal - any further information you would want to get included? (aripie, 14:17:16)
    15. I can see the gap is there, and you have a good scope to start the project off (LukeHinds, 14:18:55)
    16. Is there any concern about protecting log/audit data integrity in the Inspector project? (mwinandy_, 14:19:21)
    17. https://wiki.opnfv.org/requirements_projects/inspector (jaosorior, 14:21:31)
    18. , do you have any initial plans on how the data / events will be rendered? (LukeHinds, 14:22:41)
    19. I will make sure I start to populate this #link https://wiki.opnfv.org/security/upstream/etsi as I already have a little insight into ETSI (LukeHinds, 14:24:38)
    20. I just found this that looks like worth a watch #link https://www.openstack.org/summit/openstack-summit-atlanta-2014/session-videos/presentation/an-overview-of-cloud-auditing-support-for-openstack (LukeHinds, 14:31:52)
    21. AGREED: pending approval on inspector, jaosorior will present an overview of auditing in openstack. we will push out an email encouraging other projects to attend, as they will be candidates for auditing events using the CADF framework. (LukeHinds, 14:48:04)
    22. AGREED: preliminary date of 6/5 (Wednesday) (LukeHinds, 14:48:48)
    23. https://wiki.opnfv.org/requirements_projects/inspector (LukeHinds, 14:51:50)
    24. ACTION: after inspector approval, a etherpad will be put up and emailed out (LukeHinds, 15:04:35)
    25. ACTION: ashutosh to review and suggest additions with the view from the etsi sec group (within etherpad( (LukeHinds, 15:05:01)
    26. - not sure if everyone has done it, but they have filters set up on the mailing list system, you might need to add security (LukeHinds, 15:09:58)


Meeting ended at 15:10:19 UTC (full logs).

Action items

  1. after inspector approval, a etherpad will be put up and emailed out
  2. ashutosh to review and suggest additions with the view from the etsi sec group (within etherpad(


Action items, by person

  1. AShutosh
    1. ashutosh to review and suggest additions with the view from the etsi sec group (within etherpad(


People present (lines said)

  1. LukeHinds (71)
  2. jaosorior (42)
  3. mwinandy_ (16)
  4. AShutosh (14)
  5. aripie (5)
  6. collabot (3)


Generated by MeetBot 0.1.4.