ping

gkamathe: pong

Hello cyberpear how are you today ?

i'm fine. is there something I can help you with?

i had a word with sdoran yesterday, i was curious about any Security related work happening within Ansible

that is how i landed here, however looking at the past mail threads, commits, i am not sure if any activity is happening here

we meet every other week

we maintain security compliance roles

(and build)

I guess I've been bad about posting the minutes, but all meetings take place in this channel

Fedora meetbot has the record of every meeting

no one works on it as a full-time part of their job, so progress is slow sometimes.

there are several folks who are occasionally able to do paid work on the project as part of their jobs

cool

what is the meeting day/time ? i would like to attend the next one

Thursday noon EDT, next week

umm what time

sorry :P

will join

1600 UTC

first link in topic

ok thanks cyberpear

can anybody in here assign me a simple task etc to get me started ?

gkamathe: there are several trivial issues in this ticket MindPointGroup/RHEL7-STIG #239

this one has a prioritized list of outstanding items MindPointGroup/RHEL7-STIG #44

( didn't mean to post the same link twice)

here's another easy fix MindPointGroup/RHEL7-STIG #203

aha

i will go through them, thanks cyberpear

so cyberpear MindPoint group is the one working on the policy/compliance things right ? like STIG/FIPS etc

they are the ones who did the original dev work on the roles. I think their main business is security Consulting. the ansible lockdown rolls are generally implementations of security standards defined by Third parties such as the Department of Defense or Center for Internet Security

there's an ongoing effort to integrate the work done by the openstack ansible hardening project into ansible lockdown.

( no one works on it full time so it's slow)

hmm i see

the RHEL7-CIS role could also likely use some love, but I'm not as familiar with that one.

ok cyberpear anything specific you work on ?

just curious

sdoran, good morning

I sometimes work on the STIG roles as part of my job and sometimes during free time, though I have less and less free time these days

part of job is cool !

i've done some STIG work in the past

DISA STIG

not related to ansible, just general

excellent!

we use ansible to automate STIG among others

ok, about to go offline now, talk to you later cyberpear