Agenda
- Core Update 126 release schedule
- Donation Campaign needs more promotion
- IPFire 3.x
- Kernel hardening (Do wereally need DEVKMEM and user namespaces?)
- SSH hardening (Remote root access allowed? If not, default admin username?)
- Suricata
Attendees
- Michael
- Peter
- Arne
- Jonatan
- Stefan
Log
Core Update 126
- Kernel-only update + smaller changes
- After that: suricata, squid, etc...
IPFire 3
- Peter is investigating: Kernel Modules will be signed
- Do we need /dev/kmem?
- Possible candidates are only qemu
- User namespaces
- Disable SSH Remote Root Login
- User database from LDAP
- Will remain enabled for now
- New images available: https://people.ipfire.org/~jschlag/ipfire3-images/
Suricata
- Image for testing is available: https://lists.ipfire.org/pipermail/development/2018-November/004989.html
- Stefan is investigating Tim's updater
- Michael is going to improve UI of the CGI by submitting a design study