linuxkit/reports/sig-security/2017-08-16.md
Riyaz Faizullabhoy a5e98db3da sig-security: add okernel video and forum post
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-08-22 14:09:03 -07:00

30 lines
1.2 KiB
Markdown

# 2017-08-16
Time: **9am PDT** (12pm EDT, 5pm BST) [see the time in your timezone](https://www.timeanddate.com/worldclock/fixedtime.html?msg=Linuxkit+Security+SIG&iso=20170802T09&p1=224)
Meeting location: https://docker.zoom.us/j/779801882
Announcement: [Moby project forum
post](https://forums.mobyproject.org/t/2017-08-16-linuxkit-security-sig-meeting/126/1)
Video Recording: https://youtu.be/5lzVdfuM4Eo
Previous meeting notes: [2017-08-02](2017-08-02.md)
## Agenda
- Introductions & Administrivia (5 min)
- Linux okernel project - deep dive - HPE (45 min)
- Project updates (10 min)
- Next meeting: 2017-08-30
- deep dive TBD
- please feel free to propose additional deep dives and discussion topics!
## Meeting Notes
- okernel intro by HPE [slides](https://files.tycho.ws/linux-okernel.pdf)
- Question: is it possible to do KVM and okernel stuff on the same machine
given that they both use EPT? Answer: theoretically yes, but untested.
- Question: what's the goal of this work? Answer: definitely upstreaming it
at some point, although some cleanup and such needs to happen.
- Question: what's the interest in XPFO? Answer: want to track when +x pages
come back from userspace, so that we can set them -x.