Security Working Group - Wednesday April 28 - results

[Bruce Mitchell]

On 4/28/2021 15:28, Andrew Jeffery wrote:
> 
> 
> On Thu, 29 Apr 2021, at 07:55, Bruce Mitchell wrote:
>> On 4/28/2021 15:20, Andrew Jeffery wrote:
>>>
>>>
>>> On Thu, 29 Apr 2021, at 07:01, Joseph Reynolds wrote:
>>>> On 4/27/21 4:48 PM, Joseph Reynolds wrote:
>>>>> This is a reminder of the OpenBMC Security Working Group meeting
>>>>> scheduled for this Wednesday April 28 at 10:00am PDT.
>>>>>
>>>>> We'll discuss the following items on the agenda
>>>>> <https://docs.google.com/document/d/1b7x9BaxsfcukQDqbvZsU2ehMq4xoJRQvLxxsDUWmAOI/edit>,
>>>>> and anything else that comes up:
>>>>>
>>>>> 1. passwordless sudo access to members of the wheel group
>>>> This customization does not match the common OpenBMC use cases.
>>>> Abandoning this commit.
>>>>
>>>> Bonus topics:
>>>>
>>>> 2. Intel Hack-a-Thon 2021 results are coming soon.
>>>
>>> What does this mean?
>>>
>>
>> I believe Intel is trying publishing the results of
>> their "Intel (security) Hack-a-Thon 2021" by the end
>> of next week.
>>
> 
> Okay, but what does that mean? Are they pushing patches? Announcing CVEs? Opening bugs?
> 
> What can we expect?
> 

OpenBMC Security Working Group Meeting Notes and Agenda are here:
https://docs.google.com/document/d/1b7x9BaxsfcukQDqbvZsU2ehMq4xoJRQvLxxsDUWmAOI/edit#heading=h.8bihrhc0925u

Anything beyond that Intel would have to state what they are doing;
James?