Development meeting proposal
|
|
Hello everyone,
At Security Automation Developer Days it was suggested that scheduling short developer teleconferences might prove to be a better way to achieve consensus on proposed changes than via isolated email threads. In general, these sessions will be highly technical in nature and are intended to produce specific changes to XCCDF's schema and documentation. Two weeks before the session I'll send out an issue for discussion along with one or more sample solutions, the latter intended as bases for discussion. Following the meeting, minutes and revised excerpts of the schema and documentation will be published for community comment. Barring significant new issues or concerns, the changes will be considered approved after two weeks and will go into the next release of XCCDF (whenever that occurs). I would like to have the first of these teleconferences in two weeks. I propose a 90 minute meeting starting at 3:00 PM, Eastern Time. If you are interested in participating, please respond to me _directly_ ([hidden email]) and indicate which of Tues Aug 18, Wed Aug 19, or Thurs Aug 20 you would be able to call in. I will send out a final schedule and dial in number later this week. Please respond by close of business on Wednesday if you have a preference regarding dates. I propose using the conditional checking structures outlined at Security Automation Developer Days as an initial topic of discussion. I have attached an initial write-up and proposal to this email. I encourage people to read and discuss the issue and proposal over the mailing list ahead of time. If this approach appears to work, I would like to try to continue having short developer meetings every other week for the next few months until the backlog of issues is cleared. Once the backlog has been cleared I hope to continue regular developer meetings, but at a significantly more relaxed pace. I welcome any comments or suggestions on the proposed plan. I'm hopeful that this approach will allow us to clear the backlog of XCCDF issues in an efficient and transparent manner and result in a standard that better serves the needs of the community. Thanks, Charles Schmidt The MITRE Corp |
||||||||
ConditionalChecks.pdf (115K) |
|
|
||||||||
|
|
||||||||
|
|
||||||||
|
|
|
||||||||
|
|
In reply to this post
by Gary Gapinski-4
|
||||||||
|
|
In reply to this post
by Charles Schmidt (MITRE)
|
||||||||
|
|
In reply to this post
by Charles Schmidt (MITRE)
|
||||||||
|
|
In reply to this post
by Charles Schmidt (MITRE)
Hello all,
The meeting minutes from the developer meeting on August 19 are attached. Please let me know if you have corrections or comments. Thank you to everyone who participated. For those of you who could not make it, we had a challenging and extremely productive discussion on conditional checks. The discussion revealed that, while there is overall agreement on the need for conditional structures, there are two use cases with very different needs with regard to this functionality. Given the discussions our only ideas were to either ignore the needs of one of these communities, or split XCCDF into two, separately validated, "dialects". As both of these are somewhat drastic responses, I'm proposing that we table this issue for the moment and continue working through the back-issues before returning to it. Rest assured that the comments made in the conditional-checking discussion will not be lost - instead I'm hoping by adding additional context from other open issues we will be able to shed more light on the competing use cases of XCCDF and better evaluate how to serve the community. Again, thank you to everyone who participated in the last meeting - the input was extremely helpful. Thanks, Charles >-----Original Message----- >From: [hidden email] [mailto:[hidden email]] On Behalf Of >Schmidt, Charles M. >Sent: Thursday, August 06, 2009 7:40 AM >To: Multiple recipients of list >Subject: RE: Development meeting proposal - Aug 19 > > >Hello all, > >It looks like Wednesday, August 19th at 3:00 works for a majority of >those who have responded. Dial-in information is below. > >If you are available, I encourage you to attend this discussion. We will >be discussing the technical details of how best to integrate conditional >checking into XCCDF. > >Thanks, >Charles >The MITRE Corp. > >===================================== > >Date/Time: August 19 2009 at 03:00 PM America/New_York >Length: 90 (minutes) >Frequency: once > > >Meeting ID: 643982 >Meeting Password: > >Phone Number: 703-983-6338 (x36338) in Washington 781-271-6338 (x16338) >in Bedford or Toll Free 866-648-7367 (866-MITRE-MP) >Toll Free number is for North America callers only. Other countries >must dial either the Washington or Bedford numbers to attend. > >Information on MeetingPlace must be unclassified and releasable to all >meeting participants > > >TO ATTEND THE WEB CONFERENCE AND THEN JOIN WITH AUDIO: > >1. Go to: http://audioconference.mitre.org >2. Enter Meetng ID and click on Attend Meeting. > - Accept any security warnings you receive and wait for the Meeting >Room to initialize. > > >TEST YOUR BROWSER BEFORE YOU ATTEND YOUR FIRST WEB CONFERENCE > >Visit http://audioconference.mitre.org to test your web browser for >compatibility with the web conference.Follow >this link to your home page,change to your preferred language and look >for the Browser Test link. > >===================================== >>-----Original Message----- >>From: [hidden email] [mailto:[hidden email]] On Behalf Of >>Schmidt, Charles M. >>Sent: Monday, August 03, 2009 9:26 AM >>To: Multiple recipients of list >>Subject: Development meeting proposal >> >>Hello everyone, >> >>At Security Automation Developer Days it was suggested that scheduling >>short developer teleconferences might prove to be a better way to >>achieve consensus on proposed changes than via isolated email threads. >>In general, these sessions will be highly technical in nature and are >>intended to produce specific changes to XCCDF's schema and >>documentation. Two weeks before the session I'll send out an issue for >>discussion along with one or more sample solutions, the latter intended >>as bases for discussion. Following the meeting, minutes and revised >>excerpts of the schema and documentation will be published for >community >>comment. Barring significant new issues or concerns, the changes will >be >>considered approved after two weeks and will go into the next release >of >>XCCDF (whenever that occurs). >> >>I would like to have the first of these teleconferences in two weeks. I >>propose a 90 minute meeting starting at 3:00 PM, Eastern Time. If you >>are interested in participating, please respond to me _directly_ >>([hidden email]) and indicate which of Tues Aug 18, Wed Aug 19, or >>Thurs Aug 20 you would be able to call in. I will send out a final >>schedule and dial in number later this week. Please respond by close of >>business on Wednesday if you have a preference regarding dates. >> >>I propose using the conditional checking structures outlined at >Security >>Automation Developer Days as an initial topic of discussion. I have >>attached an initial write-up and proposal to this email. I encourage >>people to read and discuss the issue and proposal over the mailing list >>ahead of time. >> >>If this approach appears to work, I would like to try to continue >having >>short developer meetings every other week for the next few months until >>the backlog of issues is cleared. Once the backlog has been cleared I >>hope to continue regular developer meetings, but at a significantly >more >>relaxed pace. >> >>I welcome any comments or suggestions on the proposed plan. I'm hopeful >>that this approach will allow us to clear the backlog of XCCDF issues >in >>an efficient and transparent manner and result in a standard that >better >>serves the needs of the community. >> >>Thanks, >>Charles Schmidt >>The MITRE Corp > > >--------------------------------------------------------------- > >To unsubscribe from this mailing list, please send an e-mail to >[hidden email] with the words "unsubscribe xccdf-dev" in the >body. You will need to send this from the email account that you >used to initially subscribe to xccdf-dev. |
||||||||
| Free Embeddable Forum Powered by Nabble | Help |
