- Tc - mailweb.openeuler.org

openEuler安全委员会例会
by openEuler conference 24 Mar '21

24 Mar '21

3 2

2021-03-24 技术委员会请假
by Quanyi Ma 23 Mar '21

23 Mar '21

Hi 各位委员，明天上午出差在途，本次会议请假。 Best regards， -- Quanyi Ma <eli(a)patch.sh>

1 0

[TC] openEuler TC双周例会议题申报
by 270162781 23 Mar '21

23 Mar '21

1) DB SIG运作新策略讨论     概述：以新的方式运作DB SIG并拓展新成员，如何将上游能力引入openEuler社区及如何提供解决方案级别的能力建设讨论。     申报人：郑振宇/赵波

3 2

sig-ai-bigdata regular meeting
by openEuler conference 23 Mar '21

23 Mar '21

1 0

openEuler社区双周例会议题征集
by 侯健 22 Mar '21

22 Mar '21

议题征集： 1. openEuler是否引入spacewalk、foreman等运维管理软件？在 2021-03-22 20:17:27，"openEuler conference" <public(a)openeuler.io> 写道：您好！ openEuler TC SIG 邀请您参加 2021-03-24 10:00 召开的ZOOM会议(自动录制) 会议主题：openEuler社区双周例会会议内容：openEuler社区两周例会会议链接：https://zoom.us/j/96288794370?pwd=YWczUjNwRXNiL1pyL0hVWW9EQVhFUT09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler TC SIG invites you to attend the ZOOM conference(auto recording) will be held at 2021-03-24 10:00, The subject of the conference is openEuler社区双周例会, Summary: openEuler社区两周例会 You can join the meeting at https://zoom.us/j/96288794370?pwd=YWczUjNwRXNiL1pyL0hVWW9EQVhFUT09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information

1 0

安全技术sig组例会
by openEuler conference 22 Mar '21

22 Mar '21

2 1

openEuler 21.03创新版本 RC4转测试通知
by Xuxiaosong 21 Mar '21

21 Mar '21

转测试计划比原计划有1天延期。请相关责任人最晚于2021-3-22前完成特性进展更新为正常状态。 RC4版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-21.03/openeuler-2021-03-21-06-55-… 欢迎感兴趣的开发者提前获取验证，对于发现的问题请及时以issue的方式反馈给openEuler社区（里程碑选择openEuler 21.03-RC4）。由本次为发布前测试环节，软件版本可能存在重大问题，不建议大规模使用。 Release计划路径 https://gitee.com/openeuler/release-management/blob/master/openEuler-21.03/… RC4已解决问题单70个，有4 issue待办，详见： https://gitee.com/open_euler/dashboard/issues?sort=created_at%20desc&milest… https://gitee.com/open_euler/dashboard/issues?sort=created_at%20desc&issue_… https://gitee.com/open_euler/dashboard/issues?issue_type_id=118738&sort=cre… Release plan Stange name Begin time End time Kernel update 5.10 2020-10-20 2020-10-30 Key feature collect 2020-10-10 2020-12-15 Kernel freezing 2020-12-21 2020-12-30 Key feature freezing 2021-1-22 2021-1-22 Build beta branch 2021-2-1 2022-2-22 Beta test round 1 2021-2-24 2021-3-2 Beta test round 2 2021-3-5 2021-3-11 Beta test round 3 2021-3-15 2021-3-19 Beta test round 4（we are here） 2021-3-20 2021-3-20 release 2021-3-25 2021-3-26 Feture list 状态说明：discussion(方案讨论，需求未接受)，developing(开发中)，Testing(测试中)，Reject(未纳入版本) no fetur status sig owner 1 openEuler 21.03 support openStack<https://gitee.com/openeuler/release-management/issues/I25Y6B?from=project-i…> Testing sig-openstack @joec88<https://gitee.com/joec88> @liksh<https://gitee.com/liksh> 2 openEuler 21.03 support virtualization live migration pro<https://gitee.com/openeuler/release-management/issues/I25ZB1?from=project-i…> Testing sig-virt @alexchen<https://gitee.com/zhendongchen> 3 openEuler 21.03 support StratoVirt function enhancement<https://gitee.com/openeuler/release-management/issues/I25ZH0?from=project-i…> Testing sig-virt @alexchen<https://gitee.com/zhendongchen> 4 openEuler 21.03 support Risc-v virt live migration<https://gitee.com/openeuler/release-management/issues/I25ZF1?from=project-i…> Testing sig-virt @alexchen<https://gitee.com/zhendongchen> 5 openEuler 21.03 support DDE<https://gitee.com/openeuler/release-management/issues/I27TT4?from=project-i…> Testing sig-DDE @panchenbo<https://gitee.com/panchenbo> 6 openEuler 21.03 kernel update to version 5.10<https://gitee.com/openeuler/release-management/issues/I27YGU?from=project-i…> Testing sig-kernel @XieXiuQi<https://gitee.com/xiexiuqi> 7 openEuler 21.03 remove python 2 from release<https://gitee.com/openeuler/release-management/issues/I29EV9?from=project-i…> Testing sig-python-modules @yaqiangchen<https://gitee.com/yaqiangchen> 8 openEuler 21.03 support xfce 4.14<https://gitee.com/openeuler/release-management/issues/I29LTB?from=project-i…> Testing xfce @dillon_chen<https://gitee.com/dillon_chen> 9 openEuler 21.03 support GNOME 3.38.1<https://gitee.com/openeuler/release-management/issues/I29LTT?from=project-i…> Reject GNOME @dillon_chen<https://gitee.com/dillon_chen> 10 openEuler 21.03 Increase the dependency library of ROS-base<https://gitee.com/openeuler/release-management/issues/I2D19V?from=project-i…> Reject sig-ROS @anchuanxu<https://gitee.com/anchuanxu> 11 openEuler 21.03 support memig<https://gitee.com/openeuler/release-management/issues/I2C2NY?from=project-i…> Testing memig @liuzhiqiang26<https://gitee.com/liuzhiqiang26> 12 openEuler 21.03 support replace vender info<https://gitee.com/openeuler/release-management/issues/I2C2JJ?from=project-i…> Testing Builder @t.feng<https://gitee.com/t.feng> 13 openEuler 21.03 support nvwa<https://gitee.com/openeuler/release-management/issues/I2B057?from=project-i…> Testing sig-ops @EulerOSWander<https://gitee.com/EulerOSWander> 14 openEuler 21.03 support secGear<https://gitee.com/openeuler/release-management/issues/I2B0KY?from=project-i…> Testing sig-confidential-computing @chenmaodong<https://gitee.com/chenmaodong> 15 openEuler 21.03 support RaspberryPi<https://gitee.com/openeuler/release-management/issues/I2CVE3> Testing sig-RaspberryPi @woqidaideshi<https://gitee.com/woqidaideshi> 16 openEuler 21.03 support UKUI<https://gitee.com/openeuler/release-management/issues/I2E61C> Testing sig-UKUI @dou33<https://gitee.com/dou33> 17 openEuler 21.03 support HA<https://gitee.com/openeuler/release-management/issues/I2E5R3?from=project-i…> Testing sig-HA @yangzhao_kl<https://gitee.com/yangzhao_kl> 18 openEuler 21.03 support StratoVirt microvm image<https://gitee.com/openeuler/release-management/issues/I2P83D?from=project-i…> Testing sig-virt @alexchen<https://gitee.com/zhendongchen> 19 openEuler 21.03 support Kubernetes<https://gitee.com/openeuler/release-management/issues/I2CMA0?from=project-i…> Testing sig-cloudnative @jingxiaolu<https://gitee.com/jingxiaolu> 20 openEuler 21.03 support KubeSphere<https://gitee.com/openeuler/release-management/issues/I34L4L> Reject sig-kubesphere @feynmanzhou<https://gitee.com/feynmanzhou> 21 openEuler 21.03 update SPDK<https://gitee.com/openeuler/release-management/issues/I35A62> Testing Storage @liuzhiqiang<https://gitee.com/liuzhiqiang26> 22 openEuler 21.03 update some software<https://gitee.com/openeuler/release-management/issues/I35BTA> Testing release-management @chenyaqiang<https://gitee.com/yaqiangchen> 23 openEuler 21.03 slim container base image<https://gitee.com/openeuler/release-management/issues/I35D25> Testing sig-cloudnative @jingxiaolu<https://gitee.com/jingxiaolu> 历史转测试版本取用链接 RC3版本取用路径如下： http://121.36.84.172/dailybuild/openEuler-21.03/openeuler-2021-03-14-07-55-…

1 0

openEuler安全委员会会议纪要（2021-3-17）\\ RE: [openeuler-security] openeuler安全委员会例会
by Liujingang (Bob) 17 Mar '21

17 Mar '21

安全委员会例会纪要会议时间：2021-3-17 与会人：中邮信科-马德斌、北明-卢宇威、统信-张少宁、中科微澜-张晨波、麒麟-崔雷、杨丽锦、郭晓琪、朱建伟、魏刚、刘金刚纪要人：刘金刚遗留问题： - 存在漏洞在LTS版本中已修复，但漏发SA的情况，这种情况应补发SA，同时需要分析问题引入的原因并细化解决方案，并刷新到漏洞处理FAQ中。- yanglijin, liujinggang 进展：本周无进展，3月24日前给出解决方案并完成FAQ的刷新。 - 当前9分以上漏洞走单包发布流程主要是人为驱动的，应建立自动触发单包发布的流程（release-sig）。建议在release-sig报个议题，讨论CVE修复完成后自动触发单包发布流程。- weigang 进展：与基础架构进行交流，基础设施团队给出单包发布流程的方案，在release sig例会进行讨论会议议题：一、社区漏洞感知工具进展主讲人：张晨波 1.漏洞感知工具进展：目前正在进行系统稳定性工作，进度在70%-90%，预计这周完成。后续主要工作：优化时效性、日报周报功能、补充数据来源字段、定时过滤全量数据、补充startversion字段，提高过滤器准确性、针对漏洞基数大的软件包单独处理漏报误报统计、记录漏洞history、处理高热度漏洞。遗留任务： 1 系统要实现24小时正常运行，系统异常不要超过12小时，以确保24小时漏洞感知能力。 2）当前与24小时感知能力还有较大差距，需要系统梳理Vtopia各个模块间数据流的时延，去掉不必要的定时任务，优化或自动化人工审核方案，在3月底达成24小时漏洞感知能力。 3）持续的分析漏洞报的情况，降低漏报率，漏报率第一目标值小于85%。二、社区漏洞处理进展主讲人：刘金刚 1. 漏洞感知：本双周新增漏洞96个（严重5个，主要的47个），其中72个源自感知工具，占比75%，贡献者提交的24个漏洞，其中有效漏洞19个，感知工具漏报率：20.9%。 2. 漏洞修复： 1）已修复：本月修复了33个漏洞，涉及25个软件包，本周应发布版本修复7分以上漏洞。 2）待修复：当前社区还有90个漏洞未修复（严重0个、主要48个，次要39个，不重要3个），其中7个grub2漏洞风险较高，建议本周发布修复版本。遗留任务：openEuler漏洞处理质量看板预计在3月底上线，下次例会介绍一下看板的度量指标和功能展示 --汪奕如三、 openwall安全工具分析主讲人：郭晓琪 1、passwdqc功能：（1）判断密码是否符合复杂度要求，密码要求可配置；（2）生成符合要求的随机密码，密码要求可配置；（3）提供pam模块用以验证密码复杂度，密码要求可配置结论：不需要引入到openEuler社区。 2、phpass功能：可移植的PHP密码哈希框架/usr/share/php/phpass/PasswordHash.php 结论：不需要引入到openEuler社区。 3、tcb功能：（1）备用密码屏蔽方案，作为/etc/shadow的替代；（2）pam_tcb作为pam_unix的替代，密码认证模块遗留任务：调查与pam_unix的区别及业界发展趋势，再分析是否需要引入 —— 郭晓琪下次安全委员会会议时间：3月24日，主持人：颜小兵 From: openEuler conference [mailto:public@openeuler.io] Sent: Tuesday, March 16, 2021 11:32 AM To: dev(a)openeuler.org; openeuler-security(a)openeuler.org; tc(a)openeuler.org Subject: [openeuler-security] openeuler安全委员会例会您好！ openEuler security-committee SIG 邀请您参加 2021-03-17 16:00 召开的ZOOM会议(自动录制) 会议主题：openeuler安全委员会例会会议内容： 1. 漏洞感知工具进展介绍 2. 社区漏洞处理进展介绍会议链接：https://zoom.us/j/93616254724?pwd=cGZwU3VPT1plVG5OT0ZnY3ZUWGpjQT09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler security-committee SIG invites you to attend the ZOOM conference(auto recording) will be held at 2021-03-17 16:00, The subject of the conference is openeuler安全委员会例会, Summary: 1. 漏洞感知工具进展介绍 2. 社区漏洞处理进展介绍 You can join the meeting at https://zoom.us/j/93616254724?pwd=cGZwU3VPT1plVG5OT0ZnY3ZUWGpjQT09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information<https://openeuler.org/zh/>

1 0

openEuler kernel sig meeting
by openEuler conference 17 Mar '21

17 Mar '21

1 0

回复：[Dev] openEuler release conference
by Jason.chen 17 Mar '21

17 Mar '21

晨博，收到议题议题持续收集中：     1、讨论关于osv厂商如何快速跟进openEuler社区版本更新迭代。议题说明：最近在主动回合社区代码时候发现在SP1主线上的代码出现了一些编译问题，且至今还未解决； openEuler sig-release-management SIG 邀请您参加 2021-03-18 14:15 召开的ZOOM会议(自动录制) 会议主题：openEuler release conference 会议链接：https://zoom.us/j/91337175265?pwd=REkwYTZsamJkSXNrK0RCdXhVQUJ4Zz09 Best Regards --------------- Jason chen   ------------------ 原始邮件 ------------------ 发件人: "openEuler conference" <public(a)openeuler.io>; 发送时间: 2021年3月17日(星期三) 上午9:52 收件人: "solar.hu"<solar.hu(a)foxmail.com>; 主题: [Dev] openEuler release conference 您好！ openEuler sig-release-management SIG 邀请您参加 2021-03-18 14:15 召开的ZOOM会议(自动录制) 会议主题：openEuler release conference 会议链接：https://zoom.us/j/91337175265?pwd=REkwYTZsamJkSXNrK0RCdXhVQUJ4Zz09 温馨提醒：建议接入会议后修改参会人的姓名，也可以使用您在gitee.com的ID 更多资讯尽在：https://openeuler.org/zh/ Hello! openEuler sig-release-management SIG invites you to attend the ZOOM conference(auto recording) will be held at 2021-03-18 14:15, The subject of the conference is openEuler release conference, You can join the meeting at https://zoom.us/j/91337175265?pwd=REkwYTZsamJkSXNrK0RCdXhVQUJ4Zz09. Note: You are advised to change the participant name after joining the conference or use your ID at gitee.com. More information

1 0