= Minutes Advisory / Management Sub-Committee meeting 20071129 =

== Systems Review ==

 * maillist?  ''Teus'' to chase.
 * backup recovery plan, followup still to be done by ''Evaldo''
 * failure of memory on core+db indicated
 * OpenPGP
   * agreed to defer any attention to next year
   * after move NL and rebuild of sysadm / software teams

== NL ==
 * hvl is busy at the moment.  ''Teus'' to get in contact.
 * test system access
   * hvl is added
   * decision: also add the Rudis.
 * plan for move
   * delivered tuesday in v0.1
   * no comments in mail
   * decision: critical systems administrators get access to ''both'' machines, this is not acceptable in medium term, but has to be done for now.
   * the signing server can be any of the available servers, as it is has no access except over the serial cable
   * (discussion about the dual access and BIT responsibilities)
   * Teus: comments discussed, some changes made.  Need to forward to board.
   * agreed to re-open agenda point at end with Philipp
 * Discussion with Phillip
   * Rudis can be made available to help access
   * Estimate that it will take one man-month work (experienced)
   * This is the same as the AU->AT move
   * 1st step is to build the software suite and load test data & config
   * Once running and tested, estimated 2 hours of down time to move real data
   * some discussion on DNS and Reflectors.
   * Evaldo can help with building the systems
   * KVM access is not available in secure form
   * Evaldo might be able to propose a VPN solution later (security, SSH, Tix, KVM, etc...)
   * issue is that the signing server needs a lot of attention
   * Philipp and Evaldo to work on it over the weekend
   * monday deadline for comments

=== IRC ===
 * IRC machine
   * port 80/443 connections are being delivered with a single source IP# which is the Tunix firewall
   * IP# should be from the client machine of the user
   * ''evaldo'' to file separate bug
 * the default situation with Tunix is that they are screening.
   * this may meen that they are screening SSL sessions.
   * Teus cannot comment on screening as has Oophaga hat on
   * Evaldo and Iang raised doubts in email.
   * ''Evaldo'' to discuss with Philipp.
   * ''Iang'' to clearly stress the audit context on this.

== Assurance ==

 *  CATS is up and going,
   * Evaldo to write a 5 mins script, waiting on Jens.
   * an email should go out to announce the CATS to board + close insiders
   * Michael is to review CATS code
 * Policies
   * NRP-DaL  ==> still needs rework
   * do this at same time as the style guide rework.
 * CCA 
   * policy has privacy mods, needs to be voted.  ''teus'' to chase Jens and Evaldo by reforwarding the post
   * FSFE transfer language, email to propose the changes to come

== Misc ==

 * Audit Funding
   * '''iang''' to comment with Valer
   * '''iang''' to propose half retainer to CAcert
 * Security Manual
   * greg introduced the question to Pat, then stepped out of the way
   * ''teus'' to comment on remuneration
   * maybe request a plan, but not obvious what that would be
 * Henrik's proposal ==> '''evaldos''' list
 * Henrik to be freed from House Style area
   * offices to be reorganised?  Debate continues
   * Johann had an issue with PR

== END ==