sts-sponsors team mailing list archive

[Mauricio Oliveira <mauricio.oliveira@xxxxxxxxxxxxx>]

Hi Dan, Eric,

Matthew got an ack from the security team in email and the LP bug
(thanks, Matthew!)

Could you please review LP#1912122 to sponsor for Hirsute?
I know Eric is on a 'sprint' this week, so I guess this is more on you
Dan, sorry x) but the LP bug is not a high priority -- the case has
been closed already.

I can take care of Groovy when I get back next week, or maybe Dariusz,
or you if you wanna tackle both at once :) Just let me know.

cheers,

On Mon, Jan 18, 2021 at 11:36 PM Matthew Ruffell
<matthew.ruffell@xxxxxxxxxxxxx> wrote:
>
> Hi Mauricio,
>
> The security team have acked the bug, see the email, and the comment in the bug.
>
> I uploaded new debdiffs with the extra step Steve suggested, I built
> it and tested it,
> and it works great.
>
> Please sponsor.
>
> Thanks,
> Matthew
>
> On Tue, Jan 19, 2021 at 2:54 AM Mauricio Oliveira
> <mauricio.oliveira@xxxxxxxxxxxxx> wrote:
> >
> > Hey Matthew,
> >
> > This seems straightforward and the 'right thing to do', and maybe even
> > Groovy isn't an issue since the kernel config option is already there.
> >
> > However, we probably need a review/ack from the security team on it,
> > since it's more on their court than ours.
> >
> > Could you please subscribe the security team to the bug, and ask for
> > their review/ack in a new comment?
> > I've seen good responsiveness from them in a case like this in the
> > past; but if they don't you may also ping them in their channel.
> >
> > Thanks,
> > Mauricio
> >
> > On Mon, Jan 18, 2021 at 12:32 AM Matthew Ruffell
> > <matthew.ruffell@xxxxxxxxxxxxx> wrote:
> > >
> > > Hi Eric, Mauricio,
> > >
> > > Could you please review and consider sponsoring the rsyslog debdiffs on LP
> > > 1912122?
> > >
> > > https://bugs.launchpad.net/ubuntu/+source/rsyslog/+bug/1912122
> > >
> > > VISA opened a case and mentioned that /var/log/dmesg is 0644, and I should have
> > > really caught this and changed it to 0640 during my campaign to get
> > > DMESG_RESTRICT enabled.
> > >
> > > So, fixing it up here.
> > >
> > > I am aware that this might not be possible to SRU to Groovy, or would get
> > > stuck in block-proposed, but its the upload to hirsute that really matters.
> > >
> > > Please review and sponsor. You can put timecards under:
> > > SF301554 - VISA - /var/log/dmesg file pemission
> > >
> > > Thanks,
> > > Matthew
> > >
> > > --
> > > Mailing list: https://launchpad.net/~sts-sponsors
> > > Post to     : sts-sponsors@xxxxxxxxxxxxxxxxxxx
> > > Unsubscribe : https://launchpad.net/~sts-sponsors
> > > More help   : https://help.launchpad.net/ListHelp
> >
> >
> >
> > --
> > Mauricio Faria de Oliveira



-- 
Mauricio Faria de Oliveira