Difference between revisions of "Design Sessions"
From Xen
Lars.kurth (talk | contribs) (→2017: Developer and Design Summit) |
Lars.kurth (talk | contribs) |
||
Line 58: | Line 58: | ||
SCHEDULE: http://sched.co/AjGk |
SCHEDULE: http://sched.co/AjGk |
||
+ | |Review= |
||
+ | {{comment| Feel free to make suggestions here}}<br> |
||
+ | {{vote|And whether you intend to attend}} |
||
+ | }} |
||
+ | |||
+ | {{DesignSession |
||
+ | |Project=Design Session: Loose ends for becoming a CNA (CVE Numbering Authorities) and other Security Team Operational Questions - |
||
+ | |Date=July 13 2017 |
||
+ | Contact=Lars Kurth, Ian Jackson |
||
+ | |Desc=The Xen Project has in-principle agreement to become a CVE Numbering Authority. However to do this, we need to define the scope of the CNA. A number of have worked on this, but we need some community inout. |
||
+ | |||
+ | '''Consolidate Security Coverage Documents''' |
||
+ | Consolidate security coverage documents where possible (we have a proposal). Specifically |
||
+ | * Review the proposal (currently in a [https://docs.google.com/document/d/17LiK-C3oBFZNpxeihXxkM2Bagn7A2L3Dv1u1ZGZe_TQ/edit google doc]) |
||
+ | * Review the scope (currently in a [https://docs.google.com/spreadsheets/d/1wLb37mbxN715rlYD8eKV8htgatDI41noOmQ1H428QX4/edit#gid=0 google doc]) - this may involve clarifying the supported status of some components |
||
+ | * Once we have agreement, we basically just need to document the outcome, publish it and get the process started. |
||
+ | |||
+ | '''Other Operational Issues''' |
||
+ | * Automated checking of XSAs against releases (see https://xenbits.xenproject.org/gitweb/?p=people/larsk/xen-release-scripts.git;a=summary) |
||
+ | * Usage of RT and issues that has caused => does it work, what to change? |
||
+ | |||
+ | '''Possible/Proposed Process Changes?''' |
||
+ | * Bundling of issues / once every other week or monthly XSA publication? |
||
+ | * Include maintainers on pre-disclosure when affected and not on security team |
||
+ | <br> |
||
+ | SCHEDULE: http://sched.co/AjHl |
||
|Review= |
|Review= |
||
{{comment| Feel free to make suggestions here}}<br> |
{{comment| Feel free to make suggestions here}}<br> |
Revision as of 08:49, 18 July 2017
Contents
2017: Developer and Design Summit
Add links to notes or xen-devel@ discussions here
Graphics Virtualization
Peer Review Comments![]()
|
Xen Toolstacks for Server and Edge Use Cases
Peer Review Comments![]()
|
Testing Server and Edge Hypervisors
Peer Review Comments![]()
|
Design Session: Loose ends for becoming a CNA (CVE Numbering Authorities) and other Security Team Operational Questions -
Peer Review Comments![]()
|