Status for canonical-security

This page shows the progress for a team or person towards a particular target. The burndown gives you a sense of whether they are on track to complete all of their tasks at the current rate, and the information below shows their progress against individual Topics , blueprints and workitems.

Workitem burndown

(enlarge)

"foreign" counts refer to workitems that are assigned to someone not in the team

Burndown chart
Overall completion
86% of 156

Status of Topics

Topic Completion Priority Status/Description
topic-raring-servercloud-overview
100% of 1
Low This is an overview topic blueprint to which other server team blueprints can be linked to for easier tracking.

Status by blueprint

(Click header to sort)

Blueprint Todo Blocked In Progress Postponed Done Completion Priority Status/Description
security-r-apparmor-lxc 0 0 0 35 2 100%
Implemented		 Essential
appdev-1303-appisolation-base-labelling 0 0 0 2 11 100%
Implemented		 High
security-r-app-display-manager 0 0 0 0 9 100%
Implemented		 High
foundations-r-secure-boot 0 0 0 1 2 100%
Started		 High
appdev-1303-appisolation-dbus 0 0 0 0 7 100%
Implemented		 High
appdev-r-app-upload-process-feedback 0 0 0 1 0 100%
Unknown		 High
security-r-app-dbus 0 0 0 13 7 100%
Implemented		 High
appdev-1303-appisolation-display-manager 0 0 0 3 3 100%
Implemented		 High
foundations-r-dh-apparmortemplate 0 0 0 2 0 100%
Unknown		 Medium
security-r-app-keyring 0 0 0 3 0 100%
Deferred		 Medium
servercloud-r-libvirt 0 0 0 1 0 100%
Unknown		 Medium
desktop-p-thunderbird-enhancements 0 0 0 10 4 100%
Not started		 Medium
desktop-r-reduce-patch-burden 0 0 0 1 0 100%
Started		 Low
security-r-juju-charms 2 0 0 7 1 80%
Unknown		 Essential
security-1304-appisolation-dbus 0 0 2 1 2 60%
Good progress		 Undefined
security-1304-appisolation-example 0 0 4 1 3 50%
Good progress		 High
security-r-app-gsettings 0 6 0 2 0 25%
Deferred		 High
security-1304-appisolation-signals-ipc-ptrace 0 6 2 0 0 0%
Good progress		 Undefined

Status by assignee

(Click header to sort)

Assignee Todo Blocked In Progress Postponed Done Completion
Chris Coulson 0 0 0 11 4 100%
Ryan Lortie 0 0 0 2 0 100%
Jamie Strandboge 0 0 0 9 5 100%
John Johansen 0 8 2 32 19 84%
Jorge O. Castro 1 0 0 0 0 0%
Marc Deslauriers 0 0 0 1 0 100%
Michael Terry 0 0 0 1 0 100%
Steve Beattie 0 0 4 6 12 82%
Seth Arnold 1 0 0 2 1 75%
Tyler Hicks 0 4 2 19 10 83%

Work item details

Assignee Status Blueprint Priority Work item
Chris Coulson Done desktop-p-thunderbird-enhancements Medium Implement autopkgtests for Firefox and Thunderbird
desktop-p-thunderbird-enhancements Medium Make it possible for our addons to use the Mozilla test harness
desktop-p-thunderbird-enhancements Medium LP: #850229: Unread email count in thunderbird shown wrongly in messaging menu and launcher icon (thunderbird)
desktop-p-thunderbird-enhancements Medium LP: #871568: Removing spam does not clear flag (thunderbird)
Postponed desktop-p-thunderbird-enhancements Medium Add overlay scrollbar support for Firefox and Thunderbird
desktop-p-thunderbird-enhancements Medium Add GMenuModel support for Firefox and Thunderbird
desktop-p-thunderbird-enhancements Medium Implement experimental Ubuntu-branded offline startpage for Firefox
desktop-p-thunderbird-enhancements Medium Add UOA suppport for Thunderbird
desktop-p-thunderbird-enhancements Medium Add functionality for creating and deleting address books via EDS in Thunderbird
desktop-p-thunderbird-enhancements Medium Implement Evolution importer for Thunderbird
desktop-p-thunderbird-enhancements Medium Make it possible to store collected addresses in EDS from Thunderbird
desktop-p-thunderbird-enhancements Medium Include a single option for checking all folders for new mail in Thunderbird
desktop-p-thunderbird-enhancements Medium Figure out what to do with notifications for the new chat feature in Thunderbird
desktop-p-thunderbird-enhancements Medium Investigate telepathy integration for the chat feature in Thunderbird
desktop-r-reduce-patch-burden Low check g-s-d patches 47 and 48
Ryan Lortie Postponed security-r-app-gsettings High write new dconf agent
security-r-app-gsettings High write a separate gsettings backend
Jamie Strandboge Done security-r-app-display-manager High define display manager security requirements (high) (1)
appdev-1303-appisolation-dbus High dbus - define some preliminary dbus abstractions (high) (2)
appdev-1303-appisolation-dbus High dbus - documentation/man pages (medium) (0.5)
foundations-r-secure-boot High packaging for db/dbx updates (LP: #1081700) (essential) (1)
foundations-r-secure-boot High document testing procedures for db/dbx updates (essential) (4)
Postponed security-r-apparmor-lxc Essential stacking - update man pages where necessary for stacking (essential) (1)
foundations-r-secure-boot High more auditing of signed GRUB
foundations-r-dh-apparmortemplate Medium Get aa-easyprof to read pipe with easyprof syntax as an alternative to command line parameters
foundations-r-dh-apparmortemplate Medium discuss with stakeholders all possible confinement keywords
appdev-r-app-upload-process-feedback High (re)review language surrounding 'PACKAGE RESTRICTIONS' in the new app developer upload process spec
security-r-juju-charms Essential review process and review the security notices page (essential) (1)
security-r-juju-charms Essential discuss charm proof additions (essential) (3)
security-r-juju-charms Essential get information to the juju team on how to use AppArmor (essential) (2)
security-r-juju-charms Essential charm for moin (essential) (3)
John Johansen Blocked security-1304-appisolation-signals-ipc-ptrace Undefined stacking, extend exec to have stacking transition - kernel (essential)
security-1304-appisolation-signals-ipc-ptrace Undefined ext. mediation, signal, extend checks to kill hook - kernel
security-1304-appisolation-signals-ipc-ptrace Undefined ext. mediation, signal, extend policy language - parser
security-1304-appisolation-signals-ipc-ptrace Undefined ext. mediation, signal - parser tests
security-1304-appisolation-signals-ipc-ptrace Undefined ext. mediation, signal - regression tests
security-1304-appisolation-signals-ipc-ptrace Undefined ext. mediation, alt ns unix domain socket, labeling - kernel - deps labeling
security-r-app-gsettings High extend parser/language for dconf rules (high) (3)
security-r-app-gsettings High parser regression tests for language extension (high) (1)
In Progress security-1304-appisolation-signals-ipc-ptrace Undefined fd passing - revalidate files at ipc (essential)
security-1304-appisolation-signals-ipc-ptrace Undefined fd passing - regression tests (essential)
Done security-r-apparmor-lxc Essential labeling, implicit label sets - kernel (essential) (5)
security-r-app-display-manager High review/approve display manager security requirements from jdstrand and sbeattie (high) (1)
security-r-app-display-manager High prototype display manager policy language (high) (2)
security-r-app-display-manager High handover test display server implementation to sbeattie (high) (3)
appdev-1303-appisolation-dbus High dbus - iterate policy language changes - parser (medium) (4)
appdev-1303-appisolation-base-labelling High aa-namespaces, interface - libapparmor (essential) (1)
appdev-1303-appisolation-base-labelling High aa-namespaces, interface - util aa-namespace (essential) (1)
appdev-1303-appisolation-base-labelling High aa-namespaces, interface - documentation/man pages for util (essential) (0.5)
appdev-1303-appisolation-base-labelling High stacking, update kernel interface to report compound profile name - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High stacking, handle rlimit composition - kernel (essential) (1)
appdev-1303-appisolation-base-labelling High stacking, api to stacking - libapparmor (1)
appdev-1303-appisolation-base-labelling High labeling, attach implicit sets to objects - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High labeling, subset test task to object label set - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High labeling, fallback for hooks where labels can't be used - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High labeling, revalidation fallback when label doesn't match - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High labeling, interface to introspect labels - kernel (essential) (3)
security-r-app-dbus High dbus - get apparmor kernel into a ppa for quantal (high) (1)
security-r-app-dbus High dbus - get apparmor kernel into a ppa for raring (high) (1)
security-r-app-dbus High dbus - RFC/discussion (high) (2)
Postponed security-r-apparmor-lxc Essential aa-namespaces, controls limiting policy - kernel (essential) (3)
security-r-apparmor-lxc Essential aa-namespaces, controls limiting policy - regression tests (essential) (2)
security-r-apparmor-lxc Essential stacking - parser tests (essential) (1)
security-r-apparmor-lxc Essential labeling - RFC/discussion (essential) (2)
security-r-apparmor-lxc Essential labeling - regression tests (4)
security-r-apparmor-lxc Essential fd passing - revalidate files at exec (essential) (3)
security-r-apparmor-lxc Essential fd passing - revalidate files at ipc (essential) (1)
security-r-apparmor-lxc Essential fd passing - regression tests (essential) (2)
security-r-apparmor-lxc Essential labeling, interface to introspect fd label (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - upstream (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - kernel (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - parser (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - parser tests (essential) (0.5)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - regression tests (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - aa-logparse, including tests (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - userspace tools (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - userspace tool unit tests (essential) (1)
security-r-apparmor-lxc Essential ext. mediation, clone newns.., controls - documentation/man pages (essential) (0.5)
security-r-apparmor-lxc Essential stacking, RFC/discussion - (essential) (2)
security-r-apparmor-lxc Essential stacking - upstream (medium) (5)
security-r-apparmor-lxc Essential stacking, investigate cgroup composition - kernel (essential) (2)
security-r-apparmor-lxc Essential stacking - update genprof/logprof to handle compound profile names (low) (3)
security-r-apparmor-lxc Essential aa-namespaces, controls limiting policy - upstream (essential) (0.5)
security-r-apparmor-lxc Essential aa-namespaces, controls limiting policy - documentation (essential) (1)
security-r-apparmor-lxc Essential stacking, initial white paper doc - (essential) (4)
security-r-apparmor-lxc Essential labeling - initial white paper (essential) (4)
appdev-1303-appisolation-base-labelling High stacking, extend exec to have stacking transition - kernel (essential) (5)
appdev-1303-appisolation-base-labelling High stacking, extend policy language - parser (essential) (4)
security-r-app-dbus High userspace policy matching, userspace matching - libapparmor - deps (high) (4)
security-r-app-dbus High userspace policy matching, unpack exported dfas - libapparmor - deps (high) (4)
security-r-app-dbus High userspace policy matching, - libapparmor unit tests - deps (high) (2)
security-r-app-dbus High dbus daemon - message data matching - dbus (medium) (4)
Jorge O. Castro Todo security-r-juju-charms Essential formally document juju/charms security process
Marc Deslauriers Postponed servercloud-r-libvirt Medium make sure OVMF support in virt-manager is sufficient to easily test secureboot and non-secureboot UEFI boots
Michael Terry Postponed security-r-app-keyring Medium Reenable gnome-keyring ACL code (medium) (2)
Steve Beattie In Progress security-1304-appisolation-example High create initial aa-easyprof template and policy groups for SDK native app
security-1304-appisolation-example High create initial aa-easyprof template and policy groups for SDK HTML5 app
security-1304-appisolation-example High create initial aa-easyprof template and policy groups for PhoneGap app
security-1304-appisolation-example High prototype (with TODOs) initial app launcher (see ApplicationConfinement spec)
Done security-r-apparmor-lxc Essential stacking - create ppa for testing (essential) (0.5)
security-r-app-display-manager High review design and implementation problems with X (high) (5)
security-r-app-display-manager High review alternative display manager designs (eg wayland, etc) (high) (5)
security-r-app-display-manager High review prior art/other OS' implementations for confining client applications (high) (5)
security-r-app-display-manager High based on the above, identify ideal security design and augment display manager security requirements if needed (high) (2)
security-r-app-display-manager High get test display server implementation building (high) (15)
security-1304-appisolation-example High locate/write a representative HelloNativeConfinment application
security-1304-appisolation-example High locate/write a representative HelloHTML5Confinement application
security-1304-appisolation-example High locate/write a representative HelloPhoneGapConfinement application
appdev-1303-appisolation-display-manager High review/audit current Mir running in a VM and/or device
appdev-1303-appisolation-display-manager High review/audit current Mir code
appdev-1303-appisolation-display-manager High review/audit existing specifications for Mir
Postponed security-r-apparmor-lxc Essential update Ubuntu packages (essential) (1)
security-1304-appisolation-example High send app launcher prototype to Unity team to discuss next steps
appdev-1303-appisolation-display-manager High finish audit (ie logging) portion of test prototype
appdev-1303-appisolation-display-manager High submit initial libapparmor API for screenshot access
appdev-1303-appisolation-display-manager High submit initial libapparmor API for clipboard access
security-r-juju-charms Essential look at apache non-prefork (essential) (1)
Seth Arnold Todo security-r-juju-charms Essential review juju.ubuntu.com/apparmor (essential) (0.5)
Done security-r-juju-charms Essential unattended upgrades charm (essential) (2)
Postponed security-r-juju-charms Essential charm for samba (essential) (5)
security-r-juju-charms Essential charm for backend/infrastructure one (essential) (5)
Tyler Hicks Blocked security-r-app-gsettings High write apparmor bits for dconf agent (high) (3)
security-r-app-gsettings High regression tests for dconf agent plugin (high) (2)
security-r-app-gsettings High create Ubuntu packaging for new dconf agent (high) (1)
security-r-app-gsettings High add new gsettings backend patch to Ubuntu package (high) (0.5)
In Progress security-1304-appisolation-dbus Undefined dbus daemon, pass labeling info on messages so security context can be queried by recipient
security-1304-appisolation-dbus Undefined initial work to query confinement labeling of sender
Done appdev-1303-appisolation-dbus High dbus daemon, logging update - dbus (medium) (4)
appdev-1303-appisolation-dbus High library label permission query api (high) (2)
appdev-1303-appisolation-dbus High dbus daemon, use library label permission query api (high) (1)
appdev-1303-appisolation-dbus High dbus daemon, use aa_getpeercon - initial (high) (1)
security-1304-appisolation-dbus Undefined dbus - parser tests
security-1304-appisolation-dbus Undefined dbus daemon - regression tests
security-r-app-dbus High dbus - get apparmor parser, library, dbus into a ppa for quantal (high) (1)
security-r-app-dbus High dbus - get apparmor parser, library, dbus into a ppa for raring (high) (1)
security-r-app-dbus High dbus - make dbus enforcement configurable via dbus configuration (high) (1)
security-r-app-dbus High kernel policy query interface (high) (5)
Postponed security-r-apparmor-lxc Essential stacking - regression tests for capabilities (essential) (2)
security-r-apparmor-lxc Essential stacking - regression tests for rlimits (essential) (2)
security-r-apparmor-lxc Essential stacking - regression tests for files (essential) (2)
security-r-apparmor-lxc Essential stacking - regression tests for network (essential) (2)
security-r-apparmor-lxc Essential stacking - regression tests for ipc (essential) (2)
security-r-apparmor-lxc Essential stacking - regression tests for mount (essential) (2)
security-r-apparmor-lxc Essential stacking - update aa-status to work with compound profile names (essential) (1)
security-1304-appisolation-dbus Undefined dbus - update aa-logparser, including test
security-r-app-keyring Medium Add apparmor integration to gnome-keyring ACL code (medium) (4)
security-r-app-keyring Medium Add patch to Ubuntu package (medium) (0.5)
security-r-app-dbus High dbus daemon, use userspace match - dbus - deps libaparmor userspace match (high) (2)
security-r-app-dbus High userspace policy caching, use policy change notifications - libapparmor (medium) (2)
security-r-app-dbus High userspace policy caching, caching of previous queries - libapparmor (medium) (3)
security-r-app-dbus High userspace policy caching - libapparmor unit tests - deps (medium) (2)
security-r-app-dbus High kernel policy change monitoring interface (high) (5)
security-r-app-dbus High dbus daemon, read from new kernel interface - dbus - deps kernel policy change interface (high) (4)
security-r-app-dbus High dbus daemon, policy updates based on signal - dbus - deps kernel policy change interface (medium) (2)
security-r-app-dbus High upstream - dbus daemon, update dbus hooks - dbus (medium) (2)
security-r-app-dbus High dbus - upstream (medium) (15)

Work items as Cards

Todo Blocked In Progress Done Postponed
Chris Coulson
Implement autopkgtests for Firefox and Thunderbird
desktop-p-thunderbird-enhancements Medium
Make it possible for our addons to use the Mozilla test harness
desktop-p-thunderbird-enhancements Medium
LP: #850229: Unread email count in thunderbird shown wrongly in messaging menu and launcher icon (thunderbird)
desktop-p-thunderbird-enhancements Medium
LP: #871568: Removing spam does not clear flag (thunderbird)
desktop-p-thunderbird-enhancements Medium
Add overlay scrollbar support for Firefox and Thunderbird
desktop-p-thunderbird-enhancements Medium
Add GMenuModel support for Firefox and Thunderbird
desktop-p-thunderbird-enhancements Medium
Implement experimental Ubuntu-branded offline startpage for Firefox
desktop-p-thunderbird-enhancements Medium
Add UOA suppport for Thunderbird
desktop-p-thunderbird-enhancements Medium
Add functionality for creating and deleting address books via EDS in Thunderbird
desktop-p-thunderbird-enhancements Medium
Implement Evolution importer for Thunderbird
desktop-p-thunderbird-enhancements Medium
Make it possible to store collected addresses in EDS from Thunderbird
desktop-p-thunderbird-enhancements Medium
Include a single option for checking all folders for new mail in Thunderbird
desktop-p-thunderbird-enhancements Medium
Figure out what to do with notifications for the new chat feature in Thunderbird
desktop-p-thunderbird-enhancements Medium
Investigate telepathy integration for the chat feature in Thunderbird
desktop-p-thunderbird-enhancements Medium
check g-s-d patches 47 and 48
desktop-r-reduce-patch-burden Low
Ryan Lortie
write new dconf agent
security-r-app-gsettings High
write a separate gsettings backend
security-r-app-gsettings High
Jamie Strandboge
define display manager security requirements (high) (1)
security-r-app-display-manager High
dbus - define some preliminary dbus abstractions (high) (2)
appdev-1303-appisolation-dbus High
dbus - documentation/man pages (medium) (0.5)
appdev-1303-appisolation-dbus High
packaging for db/dbx updates (LP: #1081700) (essential) (1)
foundations-r-secure-boot High
document testing procedures for db/dbx updates (essential) (4)
foundations-r-secure-boot High
stacking - update man pages where necessary for stacking (essential) (1)
security-r-apparmor-lxc Essential
more auditing of signed GRUB
foundations-r-secure-boot High
Get aa-easyprof to read pipe with easyprof syntax as an alternative to command line parameters
foundations-r-dh-apparmortemplate Medium
discuss with stakeholders all possible confinement keywords
foundations-r-dh-apparmortemplate Medium
(re)review language surrounding 'PACKAGE RESTRICTIONS' in the new app developer upload process spec
appdev-r-app-upload-process-feedback High
review process and review the security notices page (essential) (1)
security-r-juju-charms Essential
discuss charm proof additions (essential) (3)
security-r-juju-charms Essential
get information to the juju team on how to use AppArmor (essential) (2)
security-r-juju-charms Essential
charm for moin (essential) (3)
security-r-juju-charms Essential
John Johansen
stacking, extend exec to have stacking transition - kernel (essential)
security-1304-appisolation-signals-ipc-ptrace Undefined
ext. mediation, signal, extend checks to kill hook - kernel
security-1304-appisolation-signals-ipc-ptrace Undefined
ext. mediation, signal, extend policy language - parser
security-1304-appisolation-signals-ipc-ptrace Undefined
ext. mediation, signal - parser tests
security-1304-appisolation-signals-ipc-ptrace Undefined
ext. mediation, signal - regression tests
security-1304-appisolation-signals-ipc-ptrace Undefined
ext. mediation, alt ns unix domain socket, labeling - kernel - deps labeling
security-1304-appisolation-signals-ipc-ptrace Undefined
extend parser/language for dconf rules (high) (3)
security-r-app-gsettings High
parser regression tests for language extension (high) (1)
security-r-app-gsettings High
fd passing - revalidate files at ipc (essential)
security-1304-appisolation-signals-ipc-ptrace Undefined
fd passing - regression tests (essential)
security-1304-appisolation-signals-ipc-ptrace Undefined
labeling, implicit label sets - kernel (essential) (5)
security-r-apparmor-lxc Essential
review/approve display manager security requirements from jdstrand and sbeattie (high) (1)
security-r-app-display-manager High
prototype display manager policy language (high) (2)
security-r-app-display-manager High
handover test display server implementation to sbeattie (high) (3)
security-r-app-display-manager High
dbus - iterate policy language changes - parser (medium) (4)
appdev-1303-appisolation-dbus High
aa-namespaces, interface - libapparmor (essential) (1)
appdev-1303-appisolation-base-labelling High
aa-namespaces, interface - util aa-namespace (essential) (1)
appdev-1303-appisolation-base-labelling High
aa-namespaces, interface - documentation/man pages for util (essential) (0.5)
appdev-1303-appisolation-base-labelling High
stacking, update kernel interface to report compound profile name - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High
stacking, handle rlimit composition - kernel (essential) (1)
appdev-1303-appisolation-base-labelling High
stacking, api to stacking - libapparmor (1)
appdev-1303-appisolation-base-labelling High
labeling, attach implicit sets to objects - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High
labeling, subset test task to object label set - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High
labeling, fallback for hooks where labels can't be used - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High
labeling, revalidation fallback when label doesn't match - kernel (essential) (2)
appdev-1303-appisolation-base-labelling High
labeling, interface to introspect labels - kernel (essential) (3)
appdev-1303-appisolation-base-labelling High
dbus - get apparmor kernel into a ppa for quantal (high) (1)
security-r-app-dbus High
dbus - get apparmor kernel into a ppa for raring (high) (1)
security-r-app-dbus High
dbus - RFC/discussion (high) (2)
security-r-app-dbus High
aa-namespaces, controls limiting policy - kernel (essential) (3)
security-r-apparmor-lxc Essential
aa-namespaces, controls limiting policy - regression tests (essential) (2)
security-r-apparmor-lxc Essential
stacking - parser tests (essential) (1)
security-r-apparmor-lxc Essential
labeling - RFC/discussion (essential) (2)
security-r-apparmor-lxc Essential
labeling - regression tests (4)
security-r-apparmor-lxc Essential
fd passing - revalidate files at exec (essential) (3)
security-r-apparmor-lxc Essential
fd passing - revalidate files at ipc (essential) (1)
security-r-apparmor-lxc Essential
fd passing - regression tests (essential) (2)
security-r-apparmor-lxc Essential
labeling, interface to introspect fd label (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - upstream (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - kernel (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - parser (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - parser tests (essential) (0.5)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - regression tests (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - aa-logparse, including tests (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - userspace tools (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - userspace tool unit tests (essential) (1)
security-r-apparmor-lxc Essential
ext. mediation, clone newns.., controls - documentation/man pages (essential) (0.5)
security-r-apparmor-lxc Essential
stacking, RFC/discussion - (essential) (2)
security-r-apparmor-lxc Essential
stacking - upstream (medium) (5)
security-r-apparmor-lxc Essential
stacking, investigate cgroup composition - kernel (essential) (2)
security-r-apparmor-lxc Essential
stacking - update genprof/logprof to handle compound profile names (low) (3)
security-r-apparmor-lxc Essential
aa-namespaces, controls limiting policy - upstream (essential) (0.5)
security-r-apparmor-lxc Essential
aa-namespaces, controls limiting policy - documentation (essential) (1)
security-r-apparmor-lxc Essential
stacking, initial white paper doc - (essential) (4)
security-r-apparmor-lxc Essential
labeling - initial white paper (essential) (4)
security-r-apparmor-lxc Essential
stacking, extend exec to have stacking transition - kernel (essential) (5)
appdev-1303-appisolation-base-labelling High
stacking, extend policy language - parser (essential) (4)
appdev-1303-appisolation-base-labelling High
userspace policy matching, userspace matching - libapparmor - deps (high) (4)
security-r-app-dbus High
userspace policy matching, unpack exported dfas - libapparmor - deps (high) (4)
security-r-app-dbus High
userspace policy matching, - libapparmor unit tests - deps (high) (2)
security-r-app-dbus High
dbus daemon - message data matching - dbus (medium) (4)
security-r-app-dbus High
Jorge O. Castro
formally document juju/charms security process
security-r-juju-charms Essential
Marc Deslauriers
make sure OVMF support in virt-manager is sufficient to easily test secureboot and non-secureboot UEFI boots
servercloud-r-libvirt Medium
Michael Terry
Reenable gnome-keyring ACL code (medium) (2)
security-r-app-keyring Medium
Steve Beattie
create initial aa-easyprof template and policy groups for SDK native app
security-1304-appisolation-example High
create initial aa-easyprof template and policy groups for SDK HTML5 app
security-1304-appisolation-example High
create initial aa-easyprof template and policy groups for PhoneGap app
security-1304-appisolation-example High
prototype (with TODOs) initial app launcher (see ApplicationConfinement spec)
security-1304-appisolation-example High
stacking - create ppa for testing (essential) (0.5)
security-r-apparmor-lxc Essential
review design and implementation problems with X (high) (5)
security-r-app-display-manager High
review alternative display manager designs (eg wayland, etc) (high) (5)
security-r-app-display-manager High
review prior art/other OS' implementations for confining client applications (high) (5)
security-r-app-display-manager High
based on the above, identify ideal security design and augment display manager security requirements if needed (high) (2)
security-r-app-display-manager High
get test display server implementation building (high) (15)
security-r-app-display-manager High
locate/write a representative HelloNativeConfinment application
security-1304-appisolation-example High
locate/write a representative HelloHTML5Confinement application
security-1304-appisolation-example High
locate/write a representative HelloPhoneGapConfinement application
security-1304-appisolation-example High
review/audit current Mir running in a VM and/or device
appdev-1303-appisolation-display-manager High
review/audit current Mir code
appdev-1303-appisolation-display-manager High
review/audit existing specifications for Mir
appdev-1303-appisolation-display-manager High
update Ubuntu packages (essential) (1)
security-r-apparmor-lxc Essential
send app launcher prototype to Unity team to discuss next steps
security-1304-appisolation-example High
finish audit (ie logging) portion of test prototype
appdev-1303-appisolation-display-manager High
submit initial libapparmor API for screenshot access
appdev-1303-appisolation-display-manager High
submit initial libapparmor API for clipboard access
appdev-1303-appisolation-display-manager High
look at apache non-prefork (essential) (1)
security-r-juju-charms Essential
Seth Arnold
review juju.ubuntu.com/apparmor (essential) (0.5)
security-r-juju-charms Essential
unattended upgrades charm (essential) (2)
security-r-juju-charms Essential
charm for samba (essential) (5)
security-r-juju-charms Essential
charm for backend/infrastructure one (essential) (5)
security-r-juju-charms Essential
Tyler Hicks
write apparmor bits for dconf agent (high) (3)
security-r-app-gsettings High
regression tests for dconf agent plugin (high) (2)
security-r-app-gsettings High
create Ubuntu packaging for new dconf agent (high) (1)
security-r-app-gsettings High
add new gsettings backend patch to Ubuntu package (high) (0.5)
security-r-app-gsettings High
dbus daemon, pass labeling info on messages so security context can be queried by recipient
security-1304-appisolation-dbus Undefined
initial work to query confinement labeling of sender
security-1304-appisolation-dbus Undefined
dbus daemon, logging update - dbus (medium) (4)
appdev-1303-appisolation-dbus High
library label permission query api (high) (2)
appdev-1303-appisolation-dbus High
dbus daemon, use library label permission query api (high) (1)
appdev-1303-appisolation-dbus High
dbus daemon, use aa_getpeercon - initial (high) (1)
appdev-1303-appisolation-dbus High
dbus - parser tests
security-1304-appisolation-dbus Undefined
dbus daemon - regression tests
security-1304-appisolation-dbus Undefined
dbus - get apparmor parser, library, dbus into a ppa for quantal (high) (1)
security-r-app-dbus High
dbus - get apparmor parser, library, dbus into a ppa for raring (high) (1)
security-r-app-dbus High
dbus - make dbus enforcement configurable via dbus configuration (high) (1)
security-r-app-dbus High
kernel policy query interface (high) (5)
security-r-app-dbus High
stacking - regression tests for capabilities (essential) (2)
security-r-apparmor-lxc Essential
stacking - regression tests for rlimits (essential) (2)
security-r-apparmor-lxc Essential
stacking - regression tests for files (essential) (2)
security-r-apparmor-lxc Essential
stacking - regression tests for network (essential) (2)
security-r-apparmor-lxc Essential
stacking - regression tests for ipc (essential) (2)
security-r-apparmor-lxc Essential
stacking - regression tests for mount (essential) (2)
security-r-apparmor-lxc Essential
stacking - update aa-status to work with compound profile names (essential) (1)
security-r-apparmor-lxc Essential
dbus - update aa-logparser, including test
security-1304-appisolation-dbus Undefined
Add apparmor integration to gnome-keyring ACL code (medium) (4)
security-r-app-keyring Medium
Add patch to Ubuntu package (medium) (0.5)
security-r-app-keyring Medium
dbus daemon, use userspace match - dbus - deps libaparmor userspace match (high) (2)
security-r-app-dbus High
userspace policy caching, use policy change notifications - libapparmor (medium) (2)
security-r-app-dbus High
userspace policy caching, caching of previous queries - libapparmor (medium) (3)
security-r-app-dbus High
userspace policy caching - libapparmor unit tests - deps (medium) (2)
security-r-app-dbus High
kernel policy change monitoring interface (high) (5)
security-r-app-dbus High
dbus daemon, read from new kernel interface - dbus - deps kernel policy change interface (high) (4)
security-r-app-dbus High
dbus daemon, policy updates based on signal - dbus - deps kernel policy change interface (medium) (2)
security-r-app-dbus High
upstream - dbus daemon, update dbus hooks - dbus (medium) (2)
security-r-app-dbus High
dbus - upstream (medium) (15)
security-r-app-dbus High

Development over time

Date Done Todo
2012-11-23 12 123
2012-11-24 12 (+0) 123 (+0)
2012-11-25 12 (+0) 123 (+0)
2012-11-26 12 (+0) 123 (+0)
2012-11-27 12 (+0) 123 (+0)
2012-11-28 12 (+0) 123 (+0)
2012-11-29 14 (+2) 121 (-2)
2012-11-30 14 (+0) 121 (+0)
2012-12-01 14 (+0) 121 (+0)
2012-12-02 14 (+0) 121 (+0)
2012-12-03 14 (+0) 121 (+0)
2012-12-04 15 (+1) 120 (-1)
2012-12-05 15 (+0) 120 (+0)
2012-12-06 17 (+2) 119 (-1)
2012-12-07 17 (+0) 119 (+0)
2012-12-08 17 (+0) 119 (+0)
2012-12-09 17 (+0) 119 (+0)
2012-12-10 17 (+0) 119 (+0)
2012-12-11 17 (+0) 119 (+0)
2012-12-12 17 (+0) 119 (+0)
2012-12-13 17 (+0) 119 (+0)
2012-12-14 17 (+0) 119 (+0)
2012-12-15 17 (+0) 119 (+0)
2012-12-16 17 (+0) 119 (+0)
2012-12-17 17 (+0) 119 (+0)
2012-12-18 17 (+0) 119 (+0)
2012-12-19 17 (+0) 119 (+0)
2012-12-20 17 (+0) 119 (+0)
2012-12-21 17 (+0) 119 (+0)
2012-12-22 17 (+0) 119 (+0)
2012-12-23 17 (+0) 119 (+0)
2012-12-24 17 (+0) 119 (+0)
2012-12-25 17 (+0) 119 (+0)
2012-12-26 17 (+0) 119 (+0)
2012-12-27 17 (+0) 119 (+0)
2012-12-28 17 (+0) 119 (+0)
2012-12-29 17 (+0) 119 (+0)
2012-12-30 17 (+0) 119 (+0)
2012-12-31 17 (+0) 119 (+0)
2013-01-01 17 (+0) 119 (+0)
2013-01-02 17 (+0) 119 (+0)
2013-01-03 17 (+0) 119 (+0)
2013-01-04 17 (+0) 119 (+0)
2013-01-05 17 (+0) 119 (+0)
2013-01-06 17 (+0) 119 (+0)
2013-01-07 17 (+0) 119 (+0)
2013-01-08 17 (+0) 119 (+0)
2013-01-09 17 (+0) 119 (+0)
2013-01-10 17 (+0) 119 (+0)
2013-01-11 17 (+0) 119 (+0)
2013-01-12 17 (+0) 119 (+0)
2013-01-13 17 (+0) 119 (+0)
2013-01-14 17 (+0) 119 (+0)
2013-01-15 17 (+0) 119 (+0)
2013-01-16 17 (+0) 119 (+0)
2013-01-17 17 (+0) 119 (+0)
2013-01-18 17 (+0) 119 (+0)
2013-01-19 17 (+0) 119 (+0)
2013-01-20 17 (+0) 119 (+0)
2013-01-21 17 (+0) 119 (+0)
2013-01-22 17 (+0) 119 (+0)
2013-01-23 23 (+6) 113 (-6)
2013-01-24 26 (+3) 114 (+1)
2013-01-25 26 (+0) 114 (+0)
2013-01-26 26 (+0) 114 (+0)
2013-01-27 26 (+0) 114 (+0)
2013-01-28 26 (+0) 114 (+0)
2013-01-29 28 (+2) 112 (-2)
2013-01-30 28 (+0) 112 (+0)
2013-01-31 30 (+2) 104 (-8)
2013-02-01 30 (+0) 104 (+0)
2013-02-02 30 (+0) 104 (+0)
2013-02-03 30 (+0) 104 (+0)
2013-02-04 30 (+0) 104 (+0)
2013-02-05 30 (+0) 104 (+0)
2013-02-06 30 (+0) 104 (+0)
2013-02-07 30 (+0) 104 (+0)
2013-02-08 30 (+0) 104 (+0)
2013-02-09 30 (+0) 104 (+0)
2013-02-10 30 (+0) 104 (+0)
2013-02-11 30 (+0) 104 (+0)
2013-02-12 30 (+0) 104 (+0)
2013-02-13 30 (+0) 104 (+0)
2013-02-14 30 (+0) 104 (+0)
2013-02-15 30 (+0) 104 (+0)
2013-02-16 30 (+0) 104 (+0)
2013-02-17 30 (+0) 104 (+0)
2013-02-18 30 (+0) 104 (+0)
2013-02-19 30 (+0) 104 (+0)
2013-02-20 65 (+35) 71 (-33)
2013-02-21 65 (+0) 71 (+0)
2013-02-22 65 (+0) 71 (+0)
2013-02-23 65 (+0) 71 (+0)
2013-02-24 65 (+0) 71 (+0)
2013-02-25 65 (+0) 71 (+0)
2013-02-26 65 (+0) 71 (+0)
2013-02-27 65 (+0) 71 (+0)
2013-02-28 65 (+0) 71 (+0)
2013-03-01 65 (+0) 71 (+0)
2013-03-02 65 (+0) 71 (+0)
2013-03-03 65 (+0) 71 (+0)
2013-03-04 65 (+0) 71 (+0)
2013-03-05 65 (+0) 71 (+0)
2013-03-06 66 (+1) 70 (-1)
2013-03-07 66 (+0) 70 (+0)
2013-03-08 80 (+14) 35 (-35)
2013-03-09 80 (+0) 35 (+0)
2013-03-10 80 (+0) 35 (+0)
2013-03-11 80 (+0) 35 (+0)
2013-03-12 80 (+0) 35 (+0)
2013-03-13 80 (+0) 34 (-1)
2013-03-14 80 (+0) 34 (+0)
2013-03-15 80 (+0) 34 (+0)
2013-03-16 80 (+0) 34 (+0)
2013-03-17 80 (+0) 34 (+0)
2013-03-18 80 (+0) 34 (+0)
2013-03-19 80 (+0) 34 (+0)
2013-03-20 80 (+0) 34 (+0)
2013-03-21 80 (+0) 34 (+0)
2013-03-22 80 (+0) 34 (+0)
2013-03-23 80 (+0) 34 (+0)
2013-03-24 80 (+0) 34 (+0)
2013-03-25 89 (+9) 50 (+16)
2013-03-26 99 (+10) 40 (-10)
2013-03-27 112 (+13) 22 (-18)
2013-03-28 123 (+11) 36 (+14)
2013-03-29 123 (+0) 36 (+0)
2013-03-30 123 (+0) 36 (+0)
2013-03-31 123 (+0) 36 (+0)
2013-04-01 123 (+0) 36 (+0)
2013-04-02 124 (+1) 35 (-1)
2013-04-03 124 (+0) 35 (+0)
2013-04-04 125 (+1) 34 (-1)
2013-04-05 125 (+0) 34 (+0)
2013-04-06 125 (+0) 34 (+0)
2013-04-07 125 (+0) 34 (+0)
2013-04-08 125 (+0) 34 (+0)
2013-04-09 125 (+0) 34 (+0)
2013-04-10 126 (+1) 28 (-6)
2013-04-11 126 (+0) 28 (+0)
2013-04-12 126 (+0) 28 (+0)
2013-04-13 126 (+0) 28 (+0)
2013-04-14 126 (+0) 28 (+0)
2013-04-15 126 (+0) 28 (+0)
2013-04-16 126 (+0) 28 (+0)
2013-04-17 126 (+0) 28 (+0)
2013-04-18 126 (+0) 28 (+0)
2013-04-19 126 (+0) 28 (+0)
2013-04-20 127 (+1) 27 (-1)
2013-04-21 127 (+0) 27 (+0)
2013-04-22 127 (+0) 27 (+0)
2013-04-23 127 (+0) 27 (+0)
2013-04-24 127 (+0) 27 (+0)
2013-04-25 128 (+1) 26 (-1)
2013-04-26 134 (+6) 16 (-10)
2013-04-27 134 (+0) 16 (+0)
2013-04-28 134 (+0) 16 (+0)
2013-04-29 134 (+0) 10 (-6)


Last updated: Tue 30 April 2013, 00:02 UTC