09:00:00 <masashi910> #startmeeting CIP IRC weekly meeting 09:00:00 <brlogger> Meeting started Thu Jun 4 09:00:00 2020 UTC and is due to finish in 60 minutes. The chair is masashi910. Information about MeetBot at http://wiki.debian.org/MeetBot. 09:00:00 <brlogger> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 09:00:00 <brlogger> The meeting name has been set to 'cip_irc_weekly_meeting' 09:00:05 <masashi910> #topic rollcall 09:00:11 <masashi910> please say hi if you're around 09:00:15 <pavel1> hi 09:00:24 <patersonc> hi 09:00:27 <fujita3> hi 09:00:36 <iwamatsu> hi 09:01:00 <masashi910> #topic AI review 09:01:06 <masashi910> 1. Combine root filesystem with kselftest binary - Iwamatsu-san 09:01:08 <szlin> hi 09:01:31 <iwamatsu> no update 09:01:40 <masashi910> iwamatsu: Noted. Thanks. 09:01:44 <masashi910> 2. Strengthen sustainable process to backport patches from Mainline/LTS - Kernel Team 09:01:52 <masashi910> No update this week. 09:02:00 <masashi910> 3. Upload a guideline for reference hardware platform addition - masashi910 09:02:07 <masashi910> No updates this week. 09:02:14 <masashi910> 4. Post LTP results to KernelCI - patersonc 09:03:05 <masashi910> patersonc: do you have update? 09:03:22 <patersonc> nope 09:03:26 <wens> hi 09:03:38 <masashi910> patersonc: Noted. Thanks. 09:03:41 <masashi910> 5. Ask board owners to review reference platform configs to optimize backporting - masashi910 09:03:47 <masashi910> Regarding "CVE related to KVM SVM on x86" and "XDP sockets enabled for Hitachi cyclonev", 09:03:56 <masashi910> I got a response only from Jan-san so far. I will follow up at the next TSC meeting. 09:04:05 <masashi910> Regarding a request to board owners to review configs overall, I thought that tips for the review might be helpful. 09:04:13 <masashi910> If somebody think of any tips, please let me know by the end of this week. 09:04:20 <masashi910> I will compile them and send out the review request with those tips. 09:04:33 <masashi910> 6. Check CVE and Patch: NFS client (CVE-2020-10742) - Pavel-san 09:04:40 <masashi910> I saw an email from Pavel-san: 09:04:47 <masashi910> https://lore.kernel.org/cip-dev/20200603152825.GA26103@amd/ 09:05:05 <masashi910> pavel1: Do you have any comment on this? 09:05:37 <pavel1> Well.. I don't believe bug is too serious, and it may not be present in 4.19. 09:05:48 <pavel1> Investigating it is not easy, due to RedHat :-(. 09:05:57 <pavel1> I believe we can ignore it for now. 09:06:06 <masashi910> pavel: Thanks. I will close this AI. 09:06:18 <masashi910> 7. Check CVE and Patch, Bluetooth BAIS attack (CVE-2020-10135) - Iwamatsu-san 09:06:39 <masashi910> iwamatsu: do you have update? 09:08:09 <iwamatsu> I reviewed 4.4.226. 09:08:24 <iwamatsu> oh sorry. 09:08:41 <masashi910> iwamatsu: if you have any update on AI#7, please let us know. 09:08:45 <iwamatsu> I dont have update abotu it. 09:08:56 <masashi910> iwamatsu: Noted. Thanks. 09:08:59 <wens> regarding CVE-2020-10742, SUSE says it was introduced in 3.5 and fixed in 3.16 :| 09:09:31 <masashi910> wens: Thanks for this info! 09:09:42 <masashi910> any other topics? 09:09:45 <patersonc> o/ 09:09:58 <masashi910> patersonc: please. 09:10:17 <patersonc> Just so you know, Marian has left Renesas now. I'll try and reply to the queries on his recent patches soon 09:11:02 <masashi910> patersonc: oh, I see. Thanks for following up. 09:11:21 <masashi910> any other topics? 09:11:32 <masashi910> 3 09:11:35 <masashi910> 2 09:11:38 <masashi910> 1 09:11:40 <masashi910> #topic Kernel maintenance updates 09:11:50 <masashi910> Thanks to Iwamatsu-san and Pavel-san, three kernels were released in these two weeks. 09:11:51 <masashi910> v4.19.124-cip27 on 24 May by Iwamatsu-san 09:11:51 <masashi910> v4.19.124-cip27-rt11 on 28 May by Pavel-san 09:11:51 <masashi910> v4.4.225-cip45-rt29 on 2 Jun by Pavel-san 09:11:51 <masashi910> That's all from me. 09:12:26 <pavel1> I have reviewed 4.19.126, and am now reviewing Moxa 4.4 patches on the mailing list. 09:12:47 <wens> one new CVE this week, fixed in all relevant stable branches. 09:13:17 <iwamatsu> I reviewed 4.4.226 and moxa's patch on ML 09:13:37 <wens> additionally, two old CVEs marked as fixed, the NFS client one mentioned earlier, and CVE-2020-10732, though I fail to understand the fix here 09:14:36 <pavel1> 10732: I believe I seen the patch somewhere. It was one character fix (:-) ) 09:14:45 <pavel1> 10732: kmalloc -> kzalloc. 09:14:53 <wens> actually what I fail to understand was the introduced-by commit 09:14:58 <wens> sorry 09:15:33 <wens> that's it from me 09:15:54 <masashi910> pavel1, iwamatsu, wens: Thanks for your works. 09:16:01 <masashi910> any other topics? 09:16:09 <masashi910> 3 09:16:12 <masashi910> 2 09:16:15 <masashi910> 1 09:16:16 <masashi910> #topic Kernel testing 09:16:22 <masashi910> patersonc: the floor is yours. 09:16:32 <patersonc> Hello 09:16:59 <patersonc> I've started working on adding a way to verify that "-rebase" branches are the same as their non-rebase counterparts 09:17:07 <patersonc> When do the maintainers actually want to run this check? 09:17:32 <patersonc> On all pushes to the -rebase branches? On rebase tags? On -rebase-rc branches? 09:17:45 <pavel1> Maintainers want to check that themselves when rebasing the branch :-). 09:17:56 <pavel1> On all pushes would be fine. 09:18:41 <patersonc> So a push to linux-4.4.y-cip-rt-rebase should compare against the latest linux-4.4.y-cip-rt branch? 09:18:48 <patersonc> (for example) 09:19:25 <pavel1> patersonc: Yes, that would be a way to do it. 09:19:32 <patersonc> Okay. Thanks 09:19:57 <patersonc> I think that's it from me today 09:20:18 <masashi910> patersonc: Thanks for your works. 09:20:30 <masashi910> any other topics or queries? 09:20:41 <masashi910> 3 09:20:43 <masashi910> 2 09:20:46 <masashi910> 1 09:20:49 <masashi910> #topic Software update 09:20:57 <masashi910> Quote from Suzuki-san "SW Updates WG doesn't have any updates since last week." 09:21:06 <masashi910> any other topics? 09:21:12 <masashi910> 3 09:21:15 <masashi910> 2 09:21:18 <masashi910> 1 09:21:20 <masashi910> #topic CIP Security 09:21:32 <masashi910> Yoshida-san, are you around? 09:21:34 <yoshidak[m]> hi 09:21:52 <masashi910> yoshidak[m]: the floor is yours. 09:22:58 <yoshidak[m]> As I mentioned last week, we've run the test cases with security/iec-evaluation branches of cip-isar-core. 09:24:38 <yoshidak[m]> In the result, we need to change the kernel configuration to pass the testing, and now I'm preparing the changing order, will be posted in cip-dev ml soon. 09:25:09 <yoshidak[m]> That's it from me this week. 09:25:21 <masashi910> yoshidak[m]: Thanks for your works. 09:25:32 <masashi910> any other topics or queries? 09:25:42 <masashi910> 3 09:25:45 <masashi910> 2 09:25:49 <masashi910> 1 09:25:52 <masashi910> #topic AOB 09:25:58 <masashi910> Are there any business matters to discuss? 09:26:10 <masashi910> 3 09:26:11 <wens> I sent out part 1 of MOXA's kernel backports. 09:26:33 <wens> I will likely send out the second part, which is backported from v4.6, next week 09:26:46 <patersonc> One more thing from me. Sorry for the recent LAVA failures, it looks like the master has died due to the server running out of storage. I'm just restarting it now... 09:27:18 <pavel1> wens: Thank you; you should get some comments, soon. 09:27:39 <masashi910> wens, patersonc: Thanks for your inputs. 09:27:44 <wens> already see them :) 09:28:41 <masashi910> any other ropics? 09:28:49 <masashi910> 3 09:28:54 <masashi910> 2 09:28:59 <masashi910> 1 09:29:02 <masashi910> #endmeeting