Security Working Group meeting - Wednesday December 7 - results

[Joseph Reynolds]

On 12/6/22 8:28 PM, Joseph Reynolds wrote:
> This is a reminder of the OpenBMC Security Working Group meeting 
> scheduled for this Wednesday October 12 at 10:00am PDT.
>
> The meeting is on Discord voice.
>
> === MEETING ACCESS ON DISCORD VOICE  ===
> First, join Discord via https://discord.gg/69Km47zH98 
> <https://discord.gg/69Km47zH98> and confirm via email.
> Then, to join: navigate Discord > OpenBMC > Voice channels >  Security 
> ~ https://discord.com/channels/775381525260664832/1002376534377635860 
> <https://discord.com/channels/775381525260664832/1002376534377635860>
>
>
> We'll discuss items on the agenda 
> <https://docs.google.com/document/d/1b7x9BaxsfcukQDqbvZsU2ehMq4xoJRQvLxxsDUWmAOI>, 
> items proposed on the Discord OpenBMC #security channel, and anything 
> else that comes up:

We has one topic, the security aspects of a BMC access vector which is 
often overlooked

1.The BMC physical UART serial port provides access to uboot and then to 
a Linux login process.


- Joseph

>
>
> Access, agenda and notes are in the OpenBMC Security wiki:
> https://github.com/openbmc/openbmc/wiki/Security-working-group 
> <https://github.com/openbmc/openbmc/wiki/Security-working-group>
>
> - Joseph