09:00:01 <masashi910> #startmeeting CIP IRC weekly meeting
09:00:01 <brlogger> Meeting started Thu Sep 24 09:00:01 2020 UTC and is due to finish in 60 minutes.  The chair is masashi910. Information about MeetBot at http://wiki.debian.org/MeetBot.
09:00:01 <brlogger> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
09:00:01 <brlogger> The meeting name has been set to 'cip_irc_weekly_meeting'
09:00:05 <masashi910> #topic rollcall
09:00:12 <masashi910> please say hi if you're around
09:00:32 <pavelm> hi
09:00:35 <yoshidak[m]> hi
09:00:50 <iwamatsu> hi
09:00:51 <wens> hi
09:00:57 <fujita> hi
09:01:01 <masashi910> #topic AI review
09:01:07 <masashi910> 1. Combine root filesystem with kselftest binary - iwamatsu
09:01:13 <iwamatsu> no update.
09:01:16 <masashi910> iwamatsu: Noted. Thanks.
09:01:26 <masashi910> 2. Check whether CVE-2020-25284 needs to be backported to 4.4-rt - masashi910
09:01:39 <masashi910> The response was that the backporting is not needed.
09:01:48 <wens> I marked CVE-2020-25284 as ignored for CIP.
09:01:49 <pavelm> Should we adjust defconfigs somehow?
09:02:10 <masashi910> wens: Thanks.
09:03:04 <masashi910> pavelm: That's a good idea. The response was that the current 4.4-rt config is mis-config. So, we want to avoid that.
09:03:42 <masashi910> pavelm: Do you have an idea?
09:04:13 <pavelm> masashi: I'd suggest deleting the offending driver from 4.4-rt config.
09:04:58 <wens> do we want them to submit the change for the sake of authenticity? otherwise we could just take care of it by removing BLK_DEV_RBD=m from their config
09:05:13 <pavelm> wens: I believe we can simply remove it.
09:05:47 <masashi910> pavelm: Should somebody from Siemens do that, or can you do that? How to proceed?
09:06:35 <pavelm> I believe iwamatsu is maintaining the config repository, but technically I can do it, too.
09:06:53 <iwamatsu> as defconfig repo maintainer, I can do it.
09:07:10 <masashi910> pavelm, iwamatsu: Thanks!
09:07:21 <masashi910> any other topics?
09:07:30 <iwamatsu> pevelm: OK, I will take over this work.
09:07:31 <masashi910> 3
09:07:34 <masashi910> 2
09:07:37 <masashi910> 1
09:07:39 <masashi910> #topic Kernel maintenance updates
09:07:49 <wens> Two CVEs this week:
09:07:49 <wens> CVE-2020-0427 [pinctrl DT mapping potential use-after-free] - Introduced in v3.5. Fixed for 4.14 and later stable branches.
09:07:52 <wens> CVE-2020-14390 [fbcon soft scroll] - fixed (read: removed) for all stable branches
09:08:21 <wens> I believe CVE-2020-0427 should be backported to v4.4 and v4.9
09:08:52 <iwamatsu> wens: I am just checking it.
09:08:55 <pavelm> wens: I looked into CVE-2020-14390. Proper fix is not easy to do, as the fbcon / vt code is not up to usual standards.
09:09:30 <iwamatsu> I see.
09:09:35 <pavelm> But if we wanted to, it would be easy to revert the removal and then disable tioclinux part of the interface.
09:09:54 <pavelm> (And eventually, I believe someone will want to fix it properly.)
09:10:11 <iwamatsu> agree.
09:10:36 <wens> I imagine there might be some interest in getting it fixed from enterprise distros.
09:11:22 <pavelm> wens: I hope so, but I have not heard from them so far.
09:11:30 <wens> I see.
09:12:36 <masashi910> wens, pavelm, iwamatsu: Thanks for the discussions.
09:12:54 <masashi910> pavelm, iwamatsu: do you have any other updates?
09:13:09 <pavelm> I have reviewed 4.19.147.
09:13:37 <iwamatsu> I reviewed  v4.4.237.
09:14:06 <masashi910> wens, pavelm, iwamatsu: Thanks all your updates.
09:14:23 <masashi910> any other topics?
09:14:40 <wens> btw
09:14:53 <masashi910> wens: please.
09:14:54 <wens> someone proposed adding aosp branches to cip-kernel-sec
09:15:26 <wens> bwh is discussing the merge request here: https://gitlab.com/cip-project/cip-kernel/cip-kernel-sec/-/merge_requests/70
09:15:45 <wens> that's all
09:16:16 <masashi910> wens: I see. Thanks for sharing this.
09:16:35 <masashi910> If no other topics, let's move on.
09:16:48 <masashi910> #topic Kernel testing
09:17:00 <masashi910> Chris-san, are you around?
09:17:32 <masashi910> If Chris-san joins later, let's come back here.
09:17:43 <masashi910> Let's move on.
09:17:46 <masashi910> #topic Software update
09:17:56 <masashi910> Suzuki-san is not here today.
09:18:03 <masashi910> Quote from Suzuki-san "SW Updates WG don't have any updates this week."
09:18:20 <masashi910> Let's move on.
09:18:27 <masashi910> #topic CIP Security
09:18:39 <masashi910> yoshidak[m]: the floor is yours.
09:19:23 <yoshidak[m]> There is no major update this week. JFYI, we'll hold a meeting w/ Exida and start to review IEC 62443-4-2 requirement supporting status tommorow.
09:19:42 <yoshidak[m]> That's all today, thanks
09:19:58 <masashi910> yoshidak[m]: Thanks for your updates.
09:20:05 <masashi910> any other topics?
09:20:12 <masashi910> 3
09:20:15 <masashi910> 2
09:20:18 <masashi910> 1
09:20:23 <masashi910> #topic AOB
09:20:31 <masashi910> Are there any business to discuss?
09:21:14 <masashi910> If no topics, let's close the meeting today.
09:21:26 <masashi910> #endmeeting