Security Working Group meeting - Wednesday September 18

[Joseph Reynolds]

This is a reminder of the OpenBMC Security Working Group meeting 
scheduled for this Wednesday September 18 at 10:00am PDT.

We'll discuss the following items on the agenda 
<https://docs.google.com/document/d/1b7x9BaxsfcukQDqbvZsU2ehMq4xoJRQvLxxsDUWmAOI/edit>, 
and anything else that comes up:

1. Wholesale changes to bitbake recipes were made.  See 
https://lore.kernel.org/openbmc/YQ1FD5q8KbhbXVBK@heinlein/T/#u 
<https://lore.kernel.org/openbmc/YQ1FD5q8KbhbXVBK@heinlein/T/#u>  My 
non-specific security concern (Joseph) is accidentally mis-configuring 
something with these changes.
2. Gerrit review - The BMCWeb session idle timeout changed to 30 minutes 
(was 60): https://gerrit.openbmc-project.xyz/c/openbmc/bmcweb/+/45658 
<https://gerrit.openbmc-project.xyz/c/openbmc/bmcweb/+/45658>
3. Yocto is planning a security configuration guide.  See 
https://bugzilla.yoctoproject.org/show_bug.cgi?id=14509 
<https://bugzilla.yoctoproject.org/show_bug.cgi?id=14509>

Access, agenda and notes are in the wiki:
https://github.com/openbmc/openbmc/wiki/Security-working-group 
<https://github.com/openbmc/openbmc/wiki/Security-working-group>

- Joseph