Meeting started at 2026-08-13 14:59:51 UTC

The Meeting name is 'Fedora Meeting 3'

The Meeting Name is now security-sig

!hi

Since the Agenda is open, this is an open floor.

!hi

Daniel Milnes: Daniel Milnes (thebeanogamer) - he / him / his

!hi

Chris (py0xc3): Christopher Klooz (py0xc3) - he / him / his

Though tbh I’ve got nothing for this week

me neither ;)

!hi

Jeffrey Wang: Jeffrey Wang (natsucamellia) - he / him / his

Hi Jeffrey 👋

So many thing popped up, don't know what's going on 😆

I dont either, but Im here in case someone wanders in with a question

typically, what do you discuss in a meeting?

Whatever is on the agenda :) You can review the earlier agendas https://forge.fedoraproject.org/security/tickets/commits/branch/main/agenda-next.md

The past few meeting agendas are here, https://discussion.fedoraproject.org/tag/security-sig/1053

Or on discourse, that might be easier -> https://discussion.fedoraproject.org/tag/security-sig/1053

Same thought :D

!hi

jforbes: Justin Forbes (jforbes) - he / him / his

Typical rules apply, ping me if you need me. I try to follow, but also in another meeting and can miss things

No worries, there is no agenda today :) So we all can relax.

The same for me, if anyone needs something from me, let me know. Otherwise, I cannot exclude I focus on something else and miss to follow ^^

What kind of contributions do you make to Fedora? Security patches or something else?

Who specifically are you asking?

everyone! I'm curious about this team

I am the kernel maintainer, though also packaging module jail, hope to push up for review next week.

!hi

Michel Lind ☘ UTC+1: Michel Lind (salimma) - he / him / his

sorry folks, finishing up some changes to my lag analysis tool and didn't notice the time

Also proven packager, so I can patch things that need it if the maintainer is unresponsive or away

wow

I'm a spin maintainer; Fedora Security Lab, Fedora Jam, Fedora Astonomy, Fedora Games Lab, and Fedora Scientific Lab

Do Fedora maintain its own kernel, or just use the mainline kernel?

We are currently carrying ~100 patches that are not in mainline, but by policy we try to keep as close to mainline as possible

I didn't know there are so many spins, interesting

So eventually the patches will be merged into mainline right? If the mainline accepts them.

There are some exceptions, like Linus has rejected the thing that turns on lockdown if Secure Boot is turned on in EFI. But yes, most things are headed upstream. Many currently are already upstream, but not in stable trees yet

I found it

It's so amazing that the maintainer is here

oh I see we're doing intros

I'm on the Engineering Steering Committee and its Packaging subcommittee, and on the KDE working group (and used to be on Workstation) as well as Rust, Python, and Golang SIGs (and Lua but that one is not fully up to speed yet)

and a provenpackager

I try to be pretty accessible. But also a lot of critical security ends up in kernel. So it makes sense

Of note to folks, I talked to the upstream maintainer of Module Jail ( https://modulejail.com/ ). I am going to maintain the Fedora package and get it into proper repos. I don't think we will ever turn it on by default, but it will be an option

oh that sounds interesting

really interesting project

It will mitigate a lot of the these security issues that we see for many users. It doesn't change the landscape for people running scanners for audits, because scanners see a "bad" module on the system and don't grok that it has been blacklisted. But compliance vs practical security are often 2 different things

I *think* I have someone willing to do the epel builds for it as well.

Well, I can do the builds, but wanted someone who actually has RHEL somewhere willing to take epel bugs.

Don't think that can be finalized within the meeting, but that is worth a ticket I think.

Oh, I have someone I think

Doesn't really need a ticket. I am kind of trying to get someone internal in hopes that it actually becomes a part of RHEL 11 when it branches... But no promises on that

If no one has points, we might end the meeting? ~50 minutes by now

I was just typing that out... haha

I read your mind :P

ive got to run for another meeting, so I'm going to go ahead and call the meeting here. Since its an open floor, it's not like im cutting off a topic.

Sure. See you in the channel everybdoy