18 Feb, MEETING AGENDA

[Chris Murphy]

9:30 am ET
14:30 UTC

Location:
https://bluejeans.com/395383051/
https://www.bluejeans.com/numbers


Announcements:
* FESCo approved governance
* Draft letter to Council, "Ship fedora-workstation-repositories on
install media"
  https://pagure.io/fedora-workstation/issue/105#comment-626259


Issues:

** "Support for hibernation?" **
  https://pagure.io/fedora-workstation/issue/121

Starting point: everyone takes a turn to state their perspective
(facts, position, concern, questions), capping the time to 1 minute.
It's OK if you want to take a pass, or defer your time to another
person, or read from notes. I'm curious what 2 or 3 things each person
decides is most relevant.


** Reconsider updates policy **
  https://pagure.io/fedora-workstation/issue/107

Discussion to unstick this, and hopefully get to a proposal:

Does GNOME Software need a method to be told what is an urgent security fix?
Should there be a distro wide definition of urgent security fix? Who
should assess it?
Urgent: critical impact and it should be fixed with an update within
24-48 hours? Everything else, once per week?

Related, but still doesn't put the finger on this issue:

Red Hat security classifications list. Critical doesn't tell us when
to apply the update.
https://access.redhat.com/security/updates/classification

Final release criterion refers to the above, "important" or higher
security flaws need to be fixed for release, if they can't be fixed
with an update.
https://fedoraproject.org/wiki/Fedora_32_Final_Release_Criteria#Security_...

RFC: Security policy adjustments to make it easier to implement and
more friendly to maintainers (~31 email thread)
https://lists.fedoraproject.org/archives/list/[e-mail].o...


-- 
Chris Murphy