Security Working Group - Wednesday April 1 - highlights

[Patrick Williams]

On Thu, Apr 02, 2020 at 01:44:45PM -0500, Joseph Reynolds wrote:
> On 3/31/20 11:21 AM, Joseph Reynolds wrote:
> > This is a reminder of the OpenBMC Security Working Group meeting 
> > scheduled for this Wednesday April 1 at 10:00am PDT.
> >
> > We'll discuss current development items, and anything else that comes up.
> >
> > The current topics:
> >
> > 1. SELinux or AppArmor plans
> 
> Topic 1 has three points:
> 1a. We would also want to move away from all processes running as root. 
> https://github.com/openbmc/openbmc/issues/3383  Next step is create 
> issue for each repo.

Have the technical issues all been worked out on that issue?  Is there a
design documented of what "each repo" is suppose to do?  It seems like
kind of a leap to ask each repo to just not run as root at this point.

-- 
Patrick Williams
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.ozlabs.org/pipermail/openbmc/attachments/20200402/729ddfe9/attachment.sig>