Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-15 Thread Mark Hatle
On 9/15/23 2:59 AM, Marta Rybczynska wrote: On Wed, Sep 13, 2023 at 6:28 PM Mark Hatle wrote: * Visibility of the security work of the YP There is much work on security in the YP, but it lacks visibility. Is there a common nexus for this work? eg. do most of the folks who are doing

Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-15 Thread Marta Rybczynska
On Wed, Sep 13, 2023 at 6:28 PM Mark Hatle wrote: > >> * Visibility of the security work of the YP > >> > >> There is much work on security in the YP, but it lacks visibility. > > > > Is there a common nexus for this work? eg. do most of the folks who are > > doing security work tend to

Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-15 Thread Marta Rybczynska
On Wed, Sep 13, 2023 at 6:00 PM Alex Stewart wrote: > > Thanks for driving this Marta. Internally and externally, it feels like > we're just on the cusp of everyone *suddenly caring* about our security > response strategy. So it's good to see that we're making moves in that > direction. > Thank

Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-15 Thread Marta Rybczynska
On Wed, Sep 13, 2023 at 2:33 PM Mikko Rapeli wrote: > > Hi, > > On Wed, Sep 13, 2023 at 01:52:19PM +0200, Marta Rybczynska wrote: > > Hello, > > I've been working recently on collecting what works and what doesn't > > in YP security processes. The goal is to go forward and define an > >

Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-13 Thread Mark Hatle
On 9/13/23 11:00 AM, Alex Stewart wrote: Thanks for driving this Marta. Internally and externally, it feels like we're just on the cusp of everyone *suddenly caring* about our security response strategy. So it's good to see that we're making moves in that direction. In general, this list

Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-13 Thread Alex Stewart
Thanks for driving this Marta. Internally and externally, it feels like we're just on the cusp of everyone *suddenly caring* about our security response strategy. So it's good to see that we're making moves in that direction. In general, this list looks complete to me. I'm primarily

Re: [OE-core] [Openembedded-architecture] Security processes: YP needs

2023-09-13 Thread Mikko Rapeli
Hi, On Wed, Sep 13, 2023 at 01:52:19PM +0200, Marta Rybczynska wrote: > Hello, > I've been working recently on collecting what works and what doesn't > in YP security processes. The goal is to go forward and define an > actionable strategy! > > Today, I'd like to share with you the summary of