Security Working Group - Wednesday April 28 - results

[Joseph Reynolds]

On 4/27/21 4:48 PM, Joseph Reynolds wrote:
> This is a reminder of the OpenBMC Security Working Group meeting 
> scheduled for this Wednesday April 28 at 10:00am PDT.
>
> We'll discuss the following items on the agenda 
> <https://docs.google.com/document/d/1b7x9BaxsfcukQDqbvZsU2ehMq4xoJRQvLxxsDUWmAOI/edit>, 
> and anything else that comes up:
>
> 1. passwordless sudo access to members of the wheel group
This customization does not match the common OpenBMC use cases. 
Abandoning this commit.

Bonus topics:

2. Intel Hack-a-Thon 2021 results are coming soon.

3. As a step toward threat modeling, we discussed how to model external 
devices the BMC interfaces with.  The next step is to extend the 
existing "BMC interfaces" doc to model the a simple host processor 
module as part of the BMC's host interface.

Joseph

>
> Access, agenda and notes are in the wiki:
> https://github.com/openbmc/openbmc/wiki/Security-working-group 
> <https://github.com/openbmc/openbmc/wiki/Security-working-group>
>
> - Joseph