Automotive Linux Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
===== Meetings Notes for AGL Application Framework and Security Team =====

Meetings of the App Framework and Security EG are held every other Wednesday. Meeting time is 14:00 UTC. The upcoming schedule can be found below. 

Conference Information:

Topic: AGL App FW and Security BiWeekly Call\\
Time: Mar 13, 2019 8:00 AM Central Time (US and Canada)
 
Join Zoom Meeting\\
https://zoom.us/j/554912100

Meeting ID: 554 912 100

Find your local number: https://zoom.us/u/ameRude4a

------

==== January 29, 2020  ====
Attendees: Walt, Jan-Simon, Scott, Matt P


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 
  * 11/6 - Daniel not attending 
  * 1/15 - Got Marius unblocked on running as root issue.  Working on some policy management as well as home screen/ app launcher. 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 
    * 10/9 
      * A lot of good discussion about token logic at the Berlin F2F.  Things are almost clear to Jose about what needs to be done. Will be able to get this into Icefish with a draft available in November.  
    * 11/6 - Loic on vacation last week. Will probably wait until Jose merges to merge Loic's. 
    * 11/20 - Jose will have a draft next week and a WIP the week after. Collaborating with Lorenzo on the work in progress as risk mitigation. Target is first integration to master for RC2. Some archtecture and design documentation is in progress and will be placed in Confluence. 
    * 12/4 - Initial version will be merged later today.  Will need Edi to do some testing to make sure there is no breakage. There will be transition period where apps (binders) will not be required to use tokens, Eventually we will transition to require tokens for all apps and binders. Will need to update the doc site on how to create binders and widgets to reflect this. 
    * Plan - Source (app-framework-main and app-framework-binder) will be merged today. Jose will submit the recipe change so Edi can test for tomorrow's SAT call. Assuming this goes ok we will merge the recipe change and release it for RC2. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 
    * 10/9 - User creation and management needs to be developed. Lower priority than token logic. Will probably be next year. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement (Cynanagora)  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 
    * 10/9
      * Repo created. Jose still preparing the Gerrit reviews and documentation. Will be tested along with the token logic change so the initial push to Gerrit will be in November. 
    * 11/6 - Jose will finish the reviews and merge the changes to master this week so Edi can test in next week's master test cycle. 
    * 11/20 - Cyanagora now merged and included in the latest test cycle that Edi performed. Looks good.
    * 12/4 - Some issues with dbus that may be attributable to Cynagora (see SPEC-3002). Jose will be able to look at this once the dust settles with token logic changes. 


  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 
    * 10/3 - On hold until after Icefish

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update
    * 10/9 - on hold until after Icefish. Looking for volunteers to take this on as well. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
  * 10/9
    * Working continuing. Igalia now has an H3 board to test on. 
  * 11/6 - See dev call notes from yesterday. 
  * 1/15 - Working on fixes to security model that broke in RC2. May have to postpone RC5 since WAM is broken and only displays a white screen. 
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update
    * 10/9 
      * In Berlin we talked about how to use a widget directory. Jan-Simon will start a Jira Epic to document requirements. 
    * 11/6 
      * SPEC-2938 - Widget directory - need comments

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 
    * 10/9 - No real update in Berlin, Was briefly discussed, but there was no progress. 
    * 11/6 - No update


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx



   * Scott asked if we will have to carry the Cynara DBus patches when we do the upgrade to zeus. Jose to clarify. 
     * 11/20 - Some adaptation will be necessary. Jose will take a look at it. 
     * 12/4 - On hold until Jose is free to look at the forward port. Probably mid-January after CES. 


   * SPEC-3010 - Settings app sometimes not starting in crowded Wifi environments. 

  * New topics:


==== January 15, 2020  ====
Attendees: Walt, Scott, Marius, Stephane, Li, Lorenzo, Loic, 


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 
  * 11/6 - Daniel not attending 
  * 1/15 - Got Marius unblocked on running as root issue.  Working on some policy management as well as home screen/ app launcher. 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 
    * 10/9 
      * A lot of good discussion about token logic at the Berlin F2F.  Things are almost clear to Jose about what needs to be done. Will be able to get this into Icefish with a draft available in November.  
    * 11/6 - Loic on vacation last week. Will probably wait until Jose merges to merge Loic's. 
    * 11/20 - Jose will have a draft next week and a WIP the week after. Collaborating with Lorenzo on the work in progress as risk mitigation. Target is first integration to master for RC2. Some archtecture and design documentation is in progress and will be placed in Confluence. 
    * 12/4 - Initial version will be merged later today.  Will need Edi to do some testing to make sure there is no breakage. There will be transition period where apps (binders) will not be required to use tokens, Eventually we will transition to require tokens for all apps and binders. Will need to update the doc site on how to create binders and widgets to reflect this. 
    * Plan - Source (app-framework-main and app-framework-binder) will be merged today. Jose will submit the recipe change so Edi can test for tomorrow's SAT call. Assuming this goes ok we will merge the recipe change and release it for RC2. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 
    * 10/9 - User creation and management needs to be developed. Lower priority than token logic. Will probably be next year. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement (Cynanagora)  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 
    * 10/9
      * Repo created. Jose still preparing the Gerrit reviews and documentation. Will be tested along with the token logic change so the initial push to Gerrit will be in November. 
    * 11/6 - Jose will finish the reviews and merge the changes to master this week so Edi can test in next week's master test cycle. 
    * 11/20 - Cyanagora now merged and included in the latest test cycle that Edi performed. Looks good.
    * 12/4 - Some issues with dbus that may be attributable to Cynagora (see SPEC-3002). Jose will be able to look at this once the dust settles with token logic changes. 


  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 
    * 10/3 - On hold until after Icefish

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update
    * 10/9 - on hold until after Icefish. Looking for volunteers to take this on as well. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
  * 10/9
    * Working continuing. Igalia now has an H3 board to test on. 
  * 11/6 - See dev call notes from yesterday. 
  * 1/15 - Working on fixes to security model that broke in RC2. May have to postpone RC5 since WAM is broken and only displays a white screen. 
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update
    * 10/9 
      * In Berlin we talked about how to use a widget directory. Jan-Simon will start a Jira Epic to document requirements. 
    * 11/6 
      * SPEC-2938 - Widget directory - need comments

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 
    * 10/9 - No real update in Berlin, Was briefly discussed, but there was no progress. 
    * 11/6 - No update


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx



   * Scott asked if we will have to carry the Cynara DBus patches when we do the upgrade to zeus. Jose to clarify. 
     * 11/20 - Some adaptation will be necessary. Jose will take a look at it. 
     * 12/4 - On hold until Jose is free to look at the forward port. Probably mid-January after CES. 


   * SPEC-2998 - Data persistence is not persistent. Issue on both Halibut and master. Needed for CES demos. - Closed
   * SPEC-3010 - Settings app sometimes not starting in crowded Wifi environments. 

  * New topics:


==== December 4, 2019 ====
Attendees: Walt, Jose, Scott, Jan-Simon


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 
  * 11/6 - Daniel not attending 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 
    * 10/9 
      * A lot of good discussion about token logic at the Berlin F2F.  Things are almost clear to Jose about what needs to be done. Will be able to get this into Icefish with a draft available in November.  
    * 11/6 - Loic on vacation last week. Will probably wait until Jose merges to merge Loic's. 
    * 11/20 - Jose will have a draft next week and a WIP the week after. Collaborating with Lorenzo on the work in progress as risk mitigation. Target is first integration to master for RC2. Some archtecture and design documentation is in progress and will be placed in Confluence. 
    * 12/4 - Initial version will be merged later today.  Will need Edi to do some testing to make sure there is no breakage. There will be transition period where apps (binders) will not be required to use tokens, Eventually we will transition to require tokens for all apps and binders. Will need to update the doc site on how to create binders and widgets to reflect this. 
    * Plan - Source (app-framework-main and app-framework-binder) will be merged today. Jose will submit the recipe change so Edi can test for tomorrow's SAT call. Assuming this goes ok we will merge the recipe change and release it for RC2. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 
    * 10/9 - User creation and management needs to be developed. Lower priority than token logic. Will probably be next year. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement (Cynanagora)  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 
    * 10/9
      * Repo created. Jose still preparing the Gerrit reviews and documentation. Will be tested along with the token logic change so the initial push to Gerrit will be in November. 
    * 11/6 - Jose will finish the reviews and merge the changes to master this week so Edi can test in next week's master test cycle. 
    * 11/20 - Cyanagora now merged and included in the latest test cycle that Edi performed. Looks good.
    * 12/4 - Some issues with dbus that may be attributable to Cynagora (see SPEC-3002). Jose will be able to look at this once the dust settles with token logic changes. 


  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 
    * 10/3 - On hold until after Icefish

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update
    * 10/9 - on hold until after Icefish. Looking for volunteers to take this on as well. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
  * 10/9
    * Working continuing. Igalia now has an H3 board to test on. 
  * 11/6 - See dev call notes from yesterday. 
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update
    * 10/9 
      * In Berlin we talked about how to use a widget directory. Jan-Simon will start a Jira Epic to document requirements. 
    * 11/6 
      * SPEC-2938 - Widget directory - need comments

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 
    * 10/9 - No real update in Berlin, Was briefly discussed, but there was no progress. 
    * 11/6 - No update


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx



   * Scott asked if we will have to carry the Cynara DBus patches when we do the upgrade to zeus. Jose to clarify. 
     * 11/20 - Some adaptation will be necessary. Jose will take a look at it. 
     * 12/4 - On hold until Jose is free to look at the forward port. Probably mid-January after CES. 

  * New topics:
   * SPEC-2998 - Data persistence is not persistent. Issue on both Halibut and master. Needed for CES demos. 
   * SPEC-3010 - Settings app sometimes not starting in crowded Wifi environments. 



==== November 20, 2019 ====
Attendees: Walt, Jose, Vincent, Loic, Kurokawa, Jan-Simon, Laurent


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 
  * 11/6 - Daniel not attending 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 
    * 10/9 
      * A lot of good discussion about token logic at the Berlin F2F.  Things are almost clear to Jose about what needs to be done. Will be able to get this into Icefish with a draft available in November.  
    * 11/6 - Loic on vacation last week. Will probably wait until Jose merges to merge Loic's. 
    * 11/20 - Jose will have a draft next week and a WIP the week after. Collaborating with Lorenzo on the work in progress as risk mitigation. Target is first integration to master for RC2. Some archtecture and design documentation is in progress and will be placed in Confluence. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 
    * 10/9 - User creation and management needs to be developed. Lower priority than token logic. Will probably be next year. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement (Cynanagora)  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 
    * 10/9
      * Repo created. Jose still preparing the Gerrit reviews and documentation. Will be tested along with the token logic change so the initial push to Gerrit will be in November. 
    * 11/6 - Jose will finish the reviews and merge the changes to master this week so Edi can test in next week's master test cycle. 
    * 11/20 - Cyanagora now merged and included in the latest test cycle that Edi performed. Looks good.


  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 
    * 10/3 - On hold until after Icefish

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update
    * 10/9 - on hold until after Icefish. Looking for volunteers to take this on as well. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
  * 10/9
    * Working continuing. Igalia now has an H3 board to test on. 
  * 11/6 - See dev call notes from yesterday. 
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update
    * 10/9 
      * In Berlin we talked about how to use a widget directory. Jan-Simon will start a Jira Epic to document requirements. 
    * 11/6 
      * SPEC-2938 - Widget directory - need comments

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 
    * 10/9 - No real update in Berlin, Was briefly discussed, but there was no progress. 
    * 11/6 - No update


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx



   * Scott asked if we will have to carry the Cynara DBus patches when we do the upgrade to zeus. Jose to clarify. 
     * 11/20 - Some adaptation will be necessary. Jose will take a look at it. 

  * New topics:

   * SPEC-2972 - Container issues uncovered in the course of Kurokawa-san's work. He is now unblocked, but Jose can fix these issues pretty quickly as well. 



==== November 6, 2019 ====
Attendees: Walt, Jan-Simon, Scott, Hosokawa, Stephane


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 
  * 11/6 - Daniel not attending 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 
    * 10/9 
      * A lot of good discussion about token logic at the Berlin F2F.  Things are almost clear to Jose about what needs to be done. Will be able to get this into Icefish with a draft available in November.  
    * 11/6 - Loic on vacation last week. Will probably wait until Jose merges to merge Loic's. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 
    * 10/9 - User creation and management needs to be developed. Lower priority than token logic. Will probably be next year. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement (Cynanagora)  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 
    * 10/9
      * Repo created. Jose still preparing the Gerrit reviews and documentation. Will be tested along with the token logic change so the initial push to Gerrit will be in November. 
    * 11/6 - Jose will finish the reviews and merge the changes to master this week so Edi can test in next week's master test cycle. 


  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 
    * 10/3 - On hold until after Icefish

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update
    * 10/9 - on hold until after Icefish. Looking for volunteers to take this on as well. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
  * 10/9
    * Working continuing. Igalia now has an H3 board to test on. 
  * 11/6 - See dev call notes from yesterday. 
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update
    * 10/9 
      * In Berlin we talked about how to use a widget directory. Jan-Simon will start a Jira Epic to document requirements. 
    * 11/6 
      * SPEC-2938 - Widget directory - need comments

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 
    * 10/9 - No real update in Berlin, Was briefly discussed, but there was no progress. 
    * 11/6 - No update


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx

  * New topics:

   * Scott asked if we will have to carry the Cynara patches when we do the upgrade to zeus. Jose to clarify. 


==== October 23, 2019 ====
Meeting canceled. 


==== October 9, 2019 ====
Attendees: Walt, Jan-Simon, Scott, Lorenzo, Hosokawa, Kurokawa, Vincent, Jose


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 
    * 10/9 
      * A lot of good discussion about token logic at the Berlin F2F.  Things are almost clear to Jose about what needs to be done. Will be able to get this into Icefish with a draft available in November.  

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 
    * 10/9 - User creation and management needs to be developed. Lower priority than token logic. Will probably be next year. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement (Cynanagora)  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 
    * 10/9
      * Repo created. Jose still preparing the Gerrit reviews and documentation. Will be tested along with the token logic change so the initial push to Gerrit will be in November. 


  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 
    * 10/3 - On hold. 

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update
    * 10/9 - on hold until after Icefish. Looking for volunteers to take this on as well. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
  * 10/9
    * Working continuing. Igalia now has an H3 board to test on. 
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update
    * 10/9 
      * In Berlin we talked about how to use a widget directory. Jan-Simon will start a Jira Epic to document requirements. 

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 
    * 10/9 - No real update in Berlin, Was briefly discussed, but there was no progress. 


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx

  * New topics:
   * gerrit 22590 - Add the ability to discover existing exported APIs within a binder dynamically without it appearing in the config file at build time. Could also include external bindings within an existing binder.  Will add a permission to enable this so it is not enabled by default for security reasons. 


==== September 25, 2019 ====
Attendees: //Upcoming Meeting//

==== September 11, 2019 ====
Attendees: Walt, Jan-Simon, Sebastien, Jose, Scott, Loic, Lorenzo, Hosokawa, Li

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update
  * 9/11 - Daniel attending plumbers this week in Lisbon. 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth
    * 9/11 
      * Jose added topic to meeting in Berlin. Jose will present what is left to be implemented on the App FW side and get advice on what needs to be done for apps and app developers. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
      * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777
    * 9/11 - Lower priority than token logic. Added topic to Berlin meeting since we will have many of the OEMs present to ask about requirements. 

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe
    * 9/11 
      * Still in development, but Jose thinks it can be pushed for review and merge to master.  Will add topic to SAT call for tomorrow to make a decision.  He has been using the sandbox in his workflow. 

  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.
    * 9/11 - Will not replace for now. Keep using the Tizen Security manager for Icefish. 

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update
    * 9/11 - no update

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Working with Igalia on a plan to do this throughout the year. 
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
  * 9/11 
    * Web apps performance issues are being investigated. 
    * Meeting between Igalia and LG to discuss additional app porting work.
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update
    * 9/11 
      * No Update

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update
    * 9/3 - Briefly discussed and added to Berlin agenda.  Please comment on ticket in the meanwhile. 


    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx

  * New topics:

==== August 28, 2019 ====
Attendees: Jan-Simon, Hosokawa-san, Laurent, Scott, Loic, Stephane, Dennis, Lorenzo, Jose

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 
  * 8/28 - No update

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish
    * 8/28 
      * No update
      * Laurent mentioned https://www.w3.org/Submission/viwi-protocol/ specifically chapter 7 https://www.w3.org/Submission/viwi-protocol/#userauth

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
    * 8/28 - Most parts fixed, services and apps work, few messages in the audit log left to do
    * For existing testplans, grep the systemd log at the end for "kernel: audit:" SPEC-2777

  * Security workflow for Device and App developers
    * 8/28 - Documentation todo 

  * Cyanara replacement  ** Icefish **
    * 8/28 - Jose has a ready sandbox for this, but not JIRA, yet. 
      * https://git.automotivelinux.org/AGL/meta-agl/log/?h=sandbox/jobol/cynara
      * Token logic will land in there, then we can switch
      * found issue w/ dbus integration
      * plan sept timeframe

  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 
    * 8/28 - Can keep going for now.

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
    * 8/28 - waiting for WM refactoring
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 
    * 8/28 - no update

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 
  * 6/5
   * Pull requests to upgrade chromium and Web App Manager for Guppy
   * Launcher is in progress. Needs a proper UI which Igalia is working on. 
  * 6/19
    * Working on the issues listed yesterday in dev call. 
    * SPEC-2401 - New launcher in progress. 
  * 7/3 
    * Lorenzo updated us yesterday on developer call. 
    * SPEC-2586 WAM Causing homescreen crash. Working on HTML5 home screen and interfacing directly to Pipewire for audio (SPEC-2343). 
  * 7/31
    * Working on some remaining open issues for Halibut
    * Working on infrastructure improvements with Jan-Simon to get the web apps into gerrit and building them in CI. 
    * Will be starting the upgrade to Chromium 72
  * 8/28
    * Fixing issues with GPU on m3 (youtube)
    * single brower process issues on m3
    * keyboard / focus issues fixed
    * created jira for SDK integration for webapps
    * integration of sockets w/ new user model
    * work on homescreen
    * Chromium 72 not yet released
 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)
    * 8/28
      * No update

  * SPEC-2538 - Jose brought up question about versioning the binders and keeping the version number in the name. 
    * Multiple API versions vs multiple versions of a wgt
    * 8/28 - No update

  * New topics:
    * Need draft code of new homescreen (e.g. work on landscape mode / igalia )
    * https://confluence.automotivelinux.org/pages/viewpage.action?pageId=9406954&preview=%2F9406954%2F13239788%2Fproposal_container_concept_190808.pptx
    * https://confluence.automotivelinux.org/display/IC/Graphics?preview=/13239781/13239799/AGL_Container_Graphics_rev1.pptx


==== August 14, 2019 ====
Meeting canceled due to vacations. 

==== July 31, 2019 ====
Attendees: Walt, Scott, Loic, Hosokawa, Jose, Lorenzo, George

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update
  * 7/31 - Daniel not on call. At the F2F meeting in Tokyo the latest architecture and design were presented and documented on [[https://confluence.automotivelinux.org/x/foSP | Confluence]]. 


 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 7/31 - Loic and Jose working on this for Icefish. 

  * Enable multi-user across the reference platform. - ** Icefish availability depends on priorities **
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  

  * Security workflow for Device and App developers

  * Cyanara replacement  ** Icefish **

  * Replace obsolete Tizen Security Manager **Icefish **
    * Requirements for sharing files between applications will updates to security manager. 
    * Not a large component. No candidate replacement in mind. Need to search for a candidate replacement with current AGL requirements in mind. 
    * Work with Jose and Sebastien on priority and estimates. 

  * Consent manager and user interface for consent of app installation. ** Need to discuss whether this is a priority for Icefish. **
  * Activity Manager for Icefish and who will do the work? [[https://confluence.automotivelinux.org/x/PQAq | Confluence link]]. 

  * Web App Manager and Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 
  * 6/5
   * Pull requests to upgrade chromium and Web App Manager for Guppy
   * Launcher is in progress. Needs a proper UI which Igalia is working on. 
  * 6/19
    * Working on the issues listed yesterday in dev call. 
    * SPEC-2401 - New launcher in progress. 
  * 7/3 
    * Lorenzo updated us yesterday on developer call. 
    * SPEC-2586 WAM Causing homescreen crash. Working on HTML5 home screen and interfacing directly to Pipewire for audio (SPEC-2343). 
  * 7/31
    * Working on some remaining open issues for Halibut
    * Working on infrastructure improvements with Jan-Simon to get the web apps into gerrit and building them in CI. 
    * Will be starting the upgrade to Chromium 72

 
  * AGL appstore discussion
    * necessary infra needs to be added in appfw (signatures)

  * SPEC-2358 - Jose brought up question about versioning the binders and keeping the version number in the name.  

  * New topics:


==== July 17, 2019 ====
Canceled due to ALS


==== July 3, 2019 ====
Attendees: Walt, Jan-Simon, Scott, Sebastien, Loic, Lorenzo

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 
  * 7/3 - No update


 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 5/8 - Jose worked out an agreement with Jose P. on how to go about this. 
    * 5/22 - No progress since Spain due to higher priorities.  
    * 6/19 - On hold. Jose on vacation next two weeks. Loic will take over this work in the meantime. End of July is a likely target to complete. Lorenzo will create a ticket to track the work that both Igalia and IoT.bzh are doing in this area to gain agreement on what needs to be done. Will target the 8.0.1 release in early September to get this into the build. 
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
      * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)
      * 4/24 - Jose getting multi-user patches ready for Halibut. Apps that are displayed such as home screen abd others will run as agl-driver
      * Services still need to be looked at as well. Jose will come up with a migration guide for what needs to be done to update the services to be shared at the F2F meeting in Spain. 
      * Jose will prepare a sandbox for Edi and Stoyan to test prior to the merge. 
      * 5/22 - Some progress, but not ready to merge to master. 
      * 6/19 - Jose submitted all of the changes. Jan-Simon did a manual build to test out which went ok. Edi and Stoyan tested the sandbox ok as well. Changes were just merge to master. 


  * Web App Manager and Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 
  * 6/5
   * Pull requests to upgrade chromium and Web App Manager for Guppy
   * Launcher is in progress. Needs a proper UI which Igalia is working on. 
  * 6/19
    * Working on the issues listed yesterday in dev call. 
    * SPEC-2401 - New launcher in progress. 
  * 7/3 
    * Lorenzo updated us yesterday on developer call. 
    * SPEC-2586 WAM Causing homescreen crash. Working on HTML5 home screen and interfacing directly to Pipewire for audio (SPEC-2343). 


    * Jose: thud-upgrade / dbus testing - in-progress
      * 5/22 - Still in progress
      * 6/19 - complete. Changes included in the not running as root patches. One minor issue remaining. Jose will write a Jira ticket. 
 
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)

    * SPEC-2358 - Jose brought up question about versioning the binders and keeping the version number in the name.  

  * New topics:


==== June 19, 2019 ====
Attendees: Walt, Jan-Simon, Sebastien, Lorenzo, Guy, Daniel, George, Stephane

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor.
  * 6/19 - Daniel - No sure on homescreen progress. Weston 6 merged to master for HH. May bump up to 6.0.1 by the end of the month in time for HH release. 


 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 5/8 - Jose worked out an agreement with Jose P. on how to go about this. 
    * 5/22 - No progress since Spain due to higher priorities.  
    * 6/19 - On hold. Jose on vacation next two weeks. Loic will take over this work in the meantime. End of July is a likely target to complete. Lorenzo will create a ticket to track the work that both Igalia and IoT.bzh are doing in this area to gain agreement on what needs to be done. Will target the 8.0.1 release in early September to get this into the build. 
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
      * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)
      * 4/24 - Jose getting multi-user patches ready for Halibut. Apps that are displayed such as home screen abd others will run as agl-driver
      * Services still need to be looked at as well. Jose will come up with a migration guide for what needs to be done to update the services to be shared at the F2F meeting in Spain. 
      * Jose will prepare a sandbox for Edi and Stoyan to test prior to the merge. 
      * 5/22 - Some progress, but not ready to merge to master. 
      * 6/19 - Jose submitted all of the changes. Jan-Simon did a manual build to test out which went ok. Edi and Stoyan tested the sandbox ok as well. Changes were just merge to master. 


  * Web App Manager and Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 
  * 6/5
   * Pull requests to upgrade chromium and Web App Manager for Guppy
   * Launcher is in progress. Needs a proper UI which Igalia is working on. 
  * 6/19
    * Working on the issues listed yesterday in dev call. 
    * SPEC-2401 - New launcher in progress. 


    * Jose: thud-upgrade / dbus testing - in-progress
      * 5/22 - Still in progress
      * 6/19 - complete. Changes included in the not running as root patches. One minor issue remaining. Jose will write a Jira ticket. 
 
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)

  * New topics:
    * Jose brought up question about versioning the binders and keeping the version number in the name.  He will create a Jira ticket to be reviewed during SAT. (SPEC-2538)



==== June 5, 2019 ====
Attendees: Walt, Jan-Simon, Kurokawa, Sebastien, Stephane, Lorenzo, George, Antia, 

Jose out sick today. 
 
Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor. 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 5/8 - Jose worked out an agreement with Jose P. on how to go about this. 
    * 5/22 - No progress since Spain due to higher priorities.  
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Change to allow listing of all installed binders - Done
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
      * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)
      * 4/24 - Jose getting multi-user patches ready for Halibut. Apps that are displayed such as home screen abd others will run as agl-driver
      * Services still need to be looked at as well. Jose will come up with a migration guide for what needs to be done to update the services to be shared at the F2F meeting in Spain. 
      * Jose will prepare a sandbox for Edi and Stoyan to test prior to the merge. 
      * 5/22 - Some progress, but not ready to merge to master. 


  * Web App Manager and Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 
  * 6/5
   * Pull requests to upgrade chromium and Web App Manager for Guppy
   * Launcher is in progress. Needs a proper UI which Igalia is working on. 

    * Jose: thud-upgrade / dbus testing - in-progress
      * 5/22 - Still in progress
 
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)

  * New topics:



==== May 22, 2019 ====
Attendees: Walt, Jan-Simon, Jose, Guy, Kurokawa, Daniel, Sebastien

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
    * 5/22 - Need to identify the lead person for this and update documentation in [[https://confluence.automotivelinux.org/x/PQAq | Confluence]]. 
  * Input manager
    * 5/22 - Daniel - Scott (NZ) working on getting homescreen to come up with the new compositor. 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 5/8 - Jose worked out an agreement with Jose P. on how to go about this. 
    * 5/22 - No progress since Spain due to higher priorities.  
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Change to allow listing of all installed binders - Done
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
      * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)
      * 4/24 - Jose getting multi-user patches ready for Halibut. Apps that are displayed such as home screen abd others will run as agl-driver
      * Services still need to be looked at as well. Jose will come up with a migration guide for what needs to be done to update the services to be shared at the F2F meeting in Spain. 
      * Jose will prepare a sandbox for Edi and Stoyan to test prior to the merge. 
      * 5/22 - Some progress, but not ready to merge to master. 


  * Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 


    * Jose: thud-upgrade / dbus testing - in-progress
      * 5/22 - Still in progress
 
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)

  * New topics:



==== May 8, 2019 ====
Held in conjunction with [[agl-distro:may2019-f2f|F2F Meeting in Spain]]

Attendees: 


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
  * Input manager
    * Update from Daniel on the window manager and compositor effort expected tomorrow during the SAT call. 
    * Update 04/10: 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
    * 5/8 - Jose worked out an agreement with Jose P. on how to go about this.  
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Change to allow listing of all installed binders - Done
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
      * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)
      * 4/24 - Jose getting multi-user patches ready for Halibut. Apps that are displayed such as home screen abd others will run as agl-driver
      * Services still need to be looked at as well. Jose will come up with a migration guide for what needs to be done to update the services to be shared at the F2F meeting in Spain. 
      * Jose will prepare a sandbox for Edi and Stoyan to test prior to the merge. 


  * Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 


    * Jose: thud-upgrade / dbus testing - in-progress
 
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)

  * New topics:



==== April 24, 2019 ====
Attendees: Walt, Tom, Thomas, Jose, Loic, Jan-Simon, Stephane, Lorenzo, Kurokawa, 


Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
  * Input manager
    * Update from Daniel on the window manager and compositor effort expected tomorrow during the SAT call. 
    * Update 04/10: 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Change to allow listing of all installed binders - Done
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
      * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)
      * 4/24 - Jose getting multi-user patches ready for Halibut. Apps that are displayed such as home screen abd others will run as agl-driver
      * Services still need to be looked at as well. Jose will come up with a migration guide for what needs to be done to update the services to be shared at the F2F meeting in Spain. 
      * Jose will prepare a sandbox for Edi and Stoyan to test prior to the merge. 


  * Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.
    * 4/24 - Working on rebase of latest upstream WebOS OSE changes to guppy for the 7.0.2 (just a recipe change is needed).
    * Working to get some changes upstreamed to LG for WebOS OSE. 
    * SPEC-2342 to fix master dependency issue. 


    * Jose: thud-upgrade / dbus testing - in-progress
 
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)

  * New topics:


==== April 10, 2019 ====
Attendees: Jan-Simon, Jose, Loic, Ohiwa-san, Tom, Lorenzo, Stephane, George, Edi, Antia, Stoyan

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
  * Input manager
    * Update from Daniel on the window manager and compositor effort expected tomorrow during the SAT call. 
    * Update 04/10: 

 * AppFW
  * Enable Token logic required for HTML5 apps and remote clients/apps
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager
  * Jose
    * Change to allow listing of all installed binders
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu
    * Update 04/10: multi-user patches planned after Jose's vacation (~ in 2 weeks)


  * Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May.
    * Update 04/10: no update today.

  * New topics:
    * Jose: thud-upgrade / dbus testing
    * Stephane/Lorenzo on chromium: 
      * master: show issues with agl-demo-html5 profile / browser build (FTBS) (to be added to jira)
      * guppy: https://jira.automotivelinux.org/browse/SPEC-2310
      * html5-only build: focus on webOS parts / upstreaming (https://jira.automotivelinux.org/browse/SPEC-2307)
    * AGL appstore discussion
      * necessary infra needs to be added in appfw (signatures)




==== March 27, 2019 ====
Attendees: Walt, Jan-Simon, Michael, Sebastien, Jose, Lorenzo, George, Kusakabe,  

Priorities for 2019
 * Window Manager and Compositor consolidation
  * Activity Manager
  * Input manager
  * Enable Token logic required for HTML5 apps and remote clients/apps
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app or service will be installed on the system. Note that a service widget itself may choose to internally support multiple versions of its own API within a single widget, but that is up to the service provide to maintain.  
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager

  * Update from Daniel on the window manager and compositor effort expected tomorrow during the SAT call. 
  * Jose
    * Change to allow listing of all installed binders
    * Working on change to not run as root. Was waiting for thud migration to hit master. sandbox/jobol/wip-mu

  * Migration of Qt Apps to HTML5 
    * Will work with Igalia on a plan to do this throughout the year. Will announce the plan around the time of the F2F Meeting in May. 


==== March 13, 2019 ====
Attendees: Walt, Tom, Kurokawa, Ohiwa, Stephane, Pierre, Jose

Roadmap priorities for 2019
  * Window Manager and Compositor consolidation
  * Activity Manager
  * Input manager
  * Enable Token logic required for HTML5 apps and remote clients/apps
  * Enable multi-user across the reference platform. 
    * Widget installation per user - When a given application is installed on the system it can be made available to all or to specific users. 
    * Teen driver or senior citizen use cases for example
    * Only one version of a given app will be installed on the system
  * Security workflow for Device and App developers
  * Replace obsolete Tizen Security Manager

Pointed out meeting notes from last week's F2F meeting for those who were not there. Especially for Window Manager updates. See [[https://confluence.automotivelinux.org/x/LYBT | Confluence for details.]] 


==== February 27, 2019 ====
Cancelled due to AMM. See F2F meeting minutes.  


==== February 13, 2019 ====
Attendees: Walt, Jan-Simon, Guy, Jose, Kusakabe, Tanikawa, Tom


    * Window Manager and Home Screen services 
 
      * Update from Ohiwa: 
       * {{:eg-app-fw:wm-status_20190213.pdf|Status slide}}


==== January 30, 2019 ====
Attendees: Walt, Ohiwa, Stephane, Guy, Daniel, Lorenzo, Kurokawa 

    * Window Manager and Home Screen services 
 
      * Update from Ohiwa-san: 
        * {{:eg-app-fw:wm-status_20190130.pdf|Status slide}} 
        * CES demo being updated for AMM. Getting permission to show at the AMM
        * Will merge the latest patches into master after guppy branch is created. 

   * Refactor libwindowmanger and libhomescreen (Lorenzo and Abhijeet) and adding Application Lifecycle
 
     * SPEC-1920 closed after discussion last week and started Confluence page for redesign. 
     * SPEC-1871 - mostly complete. 
     * Started [[https://confluence.automotivelinux.org/x/PQAq | Confluence page]] for HMI Framework redesign
      * Igalia
        * Working on a flounder/chromium 68 branch in meta-agl-lge.
        * Should have working for CES on Renesas, Intel, Raspberry Pi     
      * SPEC-2120 - Need to get Igalia and/or Collabora reviewing the proposed Window Manager changes in gerrit. Will get names to add to default reviewers.  

* Roadmap for 2019 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * 1/16 - Updates to roadmap for 2019 to be presented to AB at the AMM are necessary. IoT.bzh has a list they are working on. Walt also discussing with Igalia and Collabora. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK/Monitoring/ Dev Tools
     * 1/17 - Roadmap update to plan 2019 for next meeting
 
   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 
     * 11/21 - Not ready for GG due to competing priorities. 
     * 12/5 - Email from George on this topic. Jose has mic problems. Will discuss during SAT call. 
     * 12/19 - Jose posted a number of patches and George is working on testing them. See dev call minutes from yesterday for more details. 
     * 1/16 - No progress due to holidays/ CES
     * 1/30 - No further progress

New:

   * Will switch to zoom for next call to see how things work out. 


==== January 16, 2019 ====
Attendees: Walt, Jan-Simon, Loic, Sebastien, Xiaoming, Kusakabe


    * Window Manager and Home Screen services 
 
      * Update from Ohiwa-san: 
        * See latest status in SPEC-1932
        * CES Demo #3 shipped to Las Vegas
        * Walt purchased a Logitech 920 steering wheel to bring to CES. 


   * Refactor libwindowmanger and libhomescreen (Lorenzo and Abhijeet) and adding Application Lifecycle
 
     * SPEC-1920 closed after discussion last week and started Confluence page for redesign. 
     * SPEC-1871 - mostly complete. 
     * Started [[https://confluence.automotivelinux.org/x/PQAq | Confluence page]] for HMI Framework redesign
      * Igalia
        * Working on a flounder/chromium 68 branch in meta-agl-lge.
        * Should have working for CES on Renesas, Intel, Raspberry Pi     
      * SPEC-2120 - Need to get Igalia and/or Collabora reviewing the proposed Window Manager changes in gerrit. Will get names to add to default reviewers.  

* Roadmap for 2019 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * 1/16 - Updates to roadmap for 2019 to be presented to AB at the AMM are necessary. IoT.bzh has a list they are working on. Walt also discussing with Igalia and Collabora. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK/Monitoring/ Dev Tools
     * 1/17 - Roadmap update to plan 2019 for next meeting
 
   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 
     * 11/21 - Not ready for GG due to competing priorities. 
     * 12/5 - Email from George on this topic. Jose has mic problems. Will discuss during SAT call. 
     * 12/19 - Jose posted a number of patches and George is working on testing them. See dev call minutes from yesterday for more details. 
     * 1/16 - No progress due to holidays/ CES

New:

   * Will switch to zoom for next call to see how things work out. 

==== January 2, 2019 ====
Attendees: //Upcoming Meeting//
Cancelled no one called in. 

    * Window Manager and Home Screen services 
 
      * Update from Ohiwa-san: 
        * See latest status in SPEC-1932
        * CES Demo #3 shipped to Las Vegas
        * Walt purchased a Logitech 920 steering wheel to bring to CES. 


   * Refactor libwindowmanger and libhomescreen (Lorenzo and Abhijeet) and adding Application Lifecycle
 
     * SPEC-1920 closed after discussion last week and started Confluence page for redesign. 
     * SPEC-1871 - mostly complete. 
     * Started [[https://confluence.automotivelinux.org/x/PQAq | Confluence page]] for HMI Framework redesign
      * Igalia
        * Working on a flounder/chromium 68 branch in meta-agl-lge.
        * Should have working for CES on Renesas, Intel, Raspberry Pi     * 

* Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 
     * 11/21 - Not ready for GG due to competing priorities. 
     * 12/5 - Email from George on this topic. Jose has mic problems. Will discuss during SAT call. 
     * 12/19 - Jose posted a number of patches and George is working on testing them. See dev call minutes from yesterday for more details. 


New:



==== December 19, 2018 ====
Attendees: Walt, Jose, Kusakabe, Kurokawa, Lorenzo

    * Window Manager and Home Screen services 
 
      * Update from Ohiwa-san: 
        * See latest status in SPEC-1932
        * CES Demo #3 shipped to Las Vegas
        * Walt purchased a Logitech 920 steering wheel to bring to CES. 


   * Refactor libwindowmanger and libhomescreen (Lorenzo and Abhijeet) and adding Application Lifecycle
 
     * SPEC-1920 closed after discussion last week and started Confluence page for redesign. 
     * SPEC-1871 - mostly complete. 
     * Started [[https://confluence.automotivelinux.org/x/PQAq | Confluence page]] for HMI Framework redesign
      * Igalia
        * Working on a flounder/chromium 68 branch in meta-agl-lge.
        * Should have working for CES on Renesas, Intel, Raspberry Pi     * 

* Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 
     * 11/21 - Not ready for GG due to competing priorities. 
     * 12/5 - Email from George on this topic. Jose has mic problems. Will discuss during SAT call. 
     * 12/19 - Jose posted a number of patches and George is working on testing them. See dev call minutes from yesterday for more details. 


New:


==== December 5, 2018 ====
Attendees: Walt, Jan-Simon, Ohiwa, Sebastien, Kusakabe, Lorenzo, Dominig, Jose


    * Adding Window Manager and Home Screen services to App FW EG. The F2F meeting in Yokohama is addressing these topics this week. 
      * Update from Ohiwa-san: 
        * See latest status in SPEC-1932
        * Waltham in progress being debugged with ADIT. May use a workaround for CES.
        * Good progress being made on the split screen apps
        * CES Demo #3 integration will continue next week in Yokohama
        * Confirmed shipping arrangements for demo to Las Vegas. Walt will order steering wheel. 


   * Refactor libwindowmanger and libhomescreen (Lorenzo and Abhijeet)
     * SPEC-1871 and SPEC-1920 - progressing. Need to discuss comments in SPEC-1920 with Mitsunari-san. Will send an email to him to attend the SAT call tomorrow. 

* Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 
     * 11/21 - Not ready for GG due to competing priorities. 
     * 12/5 - Email from George on this topic. Jose has mic problems. Will discuss during SAT call. 


   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs agreement of events/states for app lifecycle.
       * 8/28 - Becoming more apparent that this is needed for GG. Tanikawa working on this. Will add to the F2F meeting agenda for discussion. 

New:


==== November 21, 2018 ====
Attendees: Walt, Sebastien, Abhijeet, Loic, Lorenzo, Stephane, Supriya, Ohiwa, Kurokawa


    * Adding Window Manager and Home Screen services to App FW EG. The F2F meeting in Yokohama is addressing these topics this week. 
      * Update from Ohiwa-san: 
        * Waltham in progress, being debugged. May be ready at the end of November
        * Currently split screen on display is the same size. They are making a change to allow the split window sizing to change via swipe. Challenging task! Being developed by Toyota
        * CES Demo #3 integration continuing at Toyota office and they will provide a weekly update
        * Will get a complete readout after the Yokohama F2F meeting 

   * Refactor libwindowmanger and libhomescreen (Lorenzo and Abhijeet)
     * SPEC-1871 and SPEC-1920 - progressing. Probably another two weeks of work. 

* Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 
     * 11/21 - Not ready for GG due to competing priorities. 


   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs agreement of events/states for app lifecycle.
       * 8/28 - Becoming more apparent that this is needed for GG. Tanikawa working on this. Will add to the F2F meeting agenda for discussion. 



New:


==== November 7, 2018 ====
Attendees: Walt, Sebastien, Stephane, Loic, Ohiwa, Jose 


    * Adding Window Manager and Home Screen services to App FW EG. The F2F meeting in Yokohama is addressing these topics this week. 
      * Update from Ohiwa-san: 
        * Waltham in progress, being debugged. May be ready at the end of November
        * Currently split screen on display is the same size. They are making a change to allow the split window sizing to change via swipe. Challenging task! Being developed by Toyota
        * CES Demo #3 integration continuing at Toyota office and they will provide a weekly update
        * Will get a complete readout after the Yokohama F2F meeting 

* Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 
    * 8/1 - ToDo list update ?

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
     * 8/1 - Nothing new to report
     * 8/29 - No update
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  
     * 8/1 - doc update pending (migration guide v2->v3)
     * 8/29 - doc update complete (http://docs.automotivelinux.org/docs/apis_services/en/dev/reference/af-binder/afb-migration-to-binding-v3.html)

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 
     * 8/1 - meta-agl-lg still needs some fixes/adaptations
     * 8/29 - Sebastien has demo running on eel/ M3. FF not working due to current home screen issues in FF. 

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 


   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs agreement of events/states for app lifecycle.
       * 8/28 - Becoming more apparent that this is needed for GG. Tanikawa working on this. Will add to the F2F meeting agenda for discussion. 


     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.
         * 8/1: runxdg working again
         * 8/28 - Zhang made some patches that ended up getting reverted for FF. Need a major revisit of this topic for GG. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold
     * 8/1 - no update
     * 8/28 - no update

New:

==== October 10, 2018 ====
Attendees: Walt 

**Meeting canceled due to lack of attendance.** 

* Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 
    * 8/1 - ToDo list update ?

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
     * 8/1 - Nothing new to report
     * 8/29 - No update
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  
     * 8/1 - doc update pending (migration guide v2->v3)
     * 8/29 - doc update complete (http://docs.automotivelinux.org/docs/apis_services/en/dev/reference/af-binder/afb-migration-to-binding-v3.html)

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 
     * 8/1 - meta-agl-lg still needs some fixes/adaptations
     * 8/29 - Sebastien has demo running on eel/ M3. FF not working due to current home screen issues in FF. 

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 


   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs agreement of events/states for app lifecycle.
       * 8/28 - Becoming more apparent that this is needed for GG. Tanikawa working on this. Will add to the F2F meeting agenda for discussion. 


     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.
         * 8/1: runxdg working again
         * 8/28 - Zhang made some patches that ended up getting reverted for FF. Need a major revisit of this topic for GG. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold
     * 8/1 - no update
     * 8/28 - no update

New:

==== September 26, 2018 ====
Attendees: Walt, Stephane, Jose

 * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 
    * 8/1 - ToDo list update ?

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
     * 8/1 - Nothing new to report
     * 8/29 - No update
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  
     * 8/1 - doc update pending (migration guide v2->v3)
     * 8/29 - doc update complete (http://docs.automotivelinux.org/docs/apis_services/en/dev/reference/af-binder/afb-migration-to-binding-v3.html)

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 
     * 8/1 - meta-agl-lg still needs some fixes/adaptations
     * 8/29 - Sebastien has demo running on eel/ M3. FF not working due to current home screen issues in FF. 

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 
     * 9/26 - Jose will add to GG as a build option so others can start debugging their services. Sebastien and Jose will put together a plan for getting this done by RC1. They will also send out a description of what App FW features will be added in the GG build. 


   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs agreement of events/states for app lifecycle.
       * 8/28 - Becoming more apparent that this is needed for GG. Tanikawa working on this. Will add to the F2F meeting agenda for discussion. 


     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.
         * 8/1: runxdg working again
         * 8/28 - Zhang made some patches that ended up getting reverted for FF. Need a major revisit of this topic for GG. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold
     * 8/1 - no update
     * 8/28 - no update

New:



==== September 12, 2018 ====

See [[agl-distro:sep2018-f2f|Santa Clara F2F Meeting]] for details. 


==== August 29, 2018 ====
Attendees: Walt, Jan-Simon, Sebastien, Stephane, Jose

 * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 
    * 8/1 - ToDo list update ?

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
     * 8/1 - Nothing new to report
     * 8/29 - No update
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done
       * 8/29 - SDK basically ready for FF except release branch builds

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  
     * 8/1 - doc update pending (migration guide v2->v3)
     * 8/29 - doc update complete (http://docs.automotivelinux.org/docs/apis_services/en/dev/reference/af-binder/afb-migration-to-binding-v3.html)

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 
     * 8/1 - meta-agl-lg still needs some fixes/adaptations
     * 8/29 - Sebastien has demo running on eel/ M3. FF not working due to current home screen issues in FF. 

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.
     * 8/28 - Jose has three patches that can be built to get the system running as a non-root user. Need guidelines for how to configure users, which services can run with root privileges, etc. Set a goal of having draft guidelines and a summary of what is done in other systems for the September 26 meeting of the EG. 


   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs agreement of events/states for app lifecycle.
       * 8/28 - Becoming more apparent that this is needed for GG. Tanikawa working on this. Will add to the F2F meeting agenda for discussion. 


     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.
         * 8/1: runxdg working again
         * 8/28 - Zhang made some patches that ended up getting reverted for FF. Need a major revisit of this topic for GG. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold
     * 8/1 - no update
     * 8/28 - no update

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, Thierry

New:
  * SPEC-1230 reopened - re-install app does not update cynara privileges. 
    * Jose investigating. Trying to get a fix for RC5



==== August 16, 2018 ====
Attendees: Walt, Jan-Simon, Scott, Sebastien, Fulup, Romain

   * Reviewed new binder testing feature added by Jose prior to inclusion in FF RC3 this week. 
     * https://gerrit.automotivelinux.org/gerrit/#/c/15985/
     * https://gerrit.automotivelinux.org/gerrit/#/c/15991/

 * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 
    * 8/1 - ToDo list update ?

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
     * 8/1 - Nothing new to report
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  
     * 8/1 - doc update pending (migration guide v2->v3)

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 
     * 8/1 - meta-agl-lg still needs some fixes/adaptations

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.

   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs aggreement of events/states for app lifecycle.
     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.
         *  8/1: runxdg working again

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold
     * 8/1 - no update

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, Thierry

New:
  * 8/1 - Updates being prepared for afb-test. 
    * https://gerrit.automotivelinux.org/gerrit/#/c/15869/
    * ptest(-wrapper) for CI, developer local run, diagnostics in production


==== Aug 1, 2018 ====
Attendees: Jan-Simon, Stephane, Momiyama-san


 * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 
    * 8/1 - ToDo list update ?

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
     * 8/1 - Nothing new to report
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * 8/1 No update
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report
     * 8/1 - No update. Walt to ping Denso.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI
       * 8/1 - gerrit part solved, ci builds solved, release branch builds not yet done

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  
     * 8/1 - doc update pending (migration guide v2->v3)

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 
     * 8/1 - meta-agl-lg still needs some fixes/adaptations

   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 
     * 8/1 - Working towards it.

   * Other topics
     * Application Life Cycle
       * 8/1 - there's a jira on OOM (new facebook oomd), there's lifecycle discussion for apps (see gfx thread, Tanikawa-san), put on list to check for GG, needs aggreement of events/states for app lifecycle.
     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.
         *  8/1: runxdg working again

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold
     * 8/1 - no update

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, Thierry

New:
  * 8/1 - Updates being prepared for afb-test. 
    * https://gerrit.automotivelinux.org/gerrit/#/c/15869/
    * ptest(-wrapper) for CI, developer local run, diagnostics in production

==== July 18, 2018 ====
Attendees: Walt, Jan-Simon, Sebastien, Stephane, Jose

 * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Continued roadmap review. Added GG priority list. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 
    * 7/18 - Old version was removed from doc site. 

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
     * 7/18 - Nothing to report
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 
       * 7/18 - Working on adding XDS client to gerrit/ CI

   * API v3.0 - planned for FF 
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  

   * Chromium and Web App Runtime from LG and Igalia 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 


   * Not running as root. 
     * 7/4 - On hold. Need to review whether we can get this into GG. 

   * Other topics
     * Application Life Cycle 
     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, Thierry

New:

==== July 4, 2018 ====
Attendees: Walt, Jan-Simon, Tanikawa, Stephane, Jose, Sebastien

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 
    * Starting to review for features that were completed in FF, what will be done in GG, and any features for 2019. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.
    * 3/28 - Eli's comments were sent to the mail list for review. 
    * 4/25 - In progress. [[https://github.com/automotive-grade-linux/docs-agl/pull/113 | Pull request]] was done by Vincent. Some open issues remain. See https://github.com/automotive-grade-linux/docs-agl/issues/112
    * 5/23 - Pull request merged. Old version still appears on the doc site. Sebastien will send an email to the mail proposing to remove it. Will remove it after next meeting if there is no dissent. Will request the Virtualization EG to update section 3. A list of updates needed are in the  [[ http://docs.automotivelinux.org/docs/architecture/en/dev/reference/security/annexes/todoNotes.html | TODO Notes section]]. 
    * 6/6 - Since there was no dissent about removing the old version we will remove it ASAP. SPEC-1502. Jira tickets created for the rest of the ToDo list in the document. 
    * 7/4 - Old version needs to be removed. ToDo list is progressing. 

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 
     * 7/4 - Nothing to report
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report
     * 7/4 - Nothing to report

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 3/28 - Sebastien working on monitoring and supervision for Karlsruhe meeting. 
       * 4/25 - In progress
       * ptest(-wrapper) for CI, developer local run, diagnostics in production5/23 - XDS 1.1.1 released. SPEC-1361 in progress for publishing XDS packages. Next step is Sebastien's. XDS 2.0.0 still on target for ALS. 
       * 6/6 - XDS 2.0.0 - Stephane will present a video with a demo use case at ALS. Software be published in time for ALS (consider it an alpha release, not bug free, but can be tried out). 
       * 7/4 - Stephane's demo of the monitoring at ALS went well. Sebastien and Jan-Simon worked on aligning the versioning of XDS with the rest of AGL.  XDS 2.0.0 is now 6.0.0. 

   * API v3.0 - planned for FF 
     * Dynamic API, binder/API discovery 
     * 3/28 - Features will be discussed in Karlsruhe in detail.  What is the plan to deprecate API v2.0 once 3.0 is available? Thought is that one year of overlap will be sufficient. To be discussed further in Karlsruhe. 
     * 4/25 - In progress.  Should see something pushed to gerrit by the next meeting of EG. 
     * 5/23 - In progress and under test by Jose. API v3.0 should be ready for RC1. 
     * 6/6 - Jose will be ready to push in time for RC1 with documentation and stabilization updates to follow.
     * 7/4 - API v3.0 went into RC1. Some bugs to be fixed by Jose.  

   * Chromium and Web App Runtime from LG and Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 
     * 3/28 - Need to work out a plan with Igalia and LG for web apps based on their discussions at the AMM.
     * 4/25 - Steve L. - LG SVL porting web app runtime (WAM) and Chromium from WebOS OSE to AGL this week. [[ http://webosose.org/ | WebOS OSE]] + Daring Dab + Chromium 53. Goal is to have web app up and running on AGL this week. Background: WebOS has been running web apps LG TVs since 2013, and was first created in 2008 for WebOS phones and tablets from HP/Palm. WebOS was first open-sourced by HP in 2012; LG released WebOS OSE just after the AMM in February.
       * Stephane showed [[ https://bitbucket.org/chromiumembedded/cef | Chromium Embedded Framework (CEF)]], but to avoid confusion: CEF is not relevant to the current WebOS OSE AGL effort.
       * Steve ran across an email thread from Dominig [[https://lists.tizen.org/pipermail/dev/2014-December/005557.html | email]] and [[https://lists.crosswalk-project.org/pipermail/crosswalk-dev/2014-December/002308.html | another email]] from Tizen days regarding Crosswalk, Web App, security and process model issues that were being looked at by Tizen. WebOS already addresses many of these concerns in televisions.  
       * Follow up technical meeting at 10 am PDT/ 7 pm CET. 
     * 5/23 - LG will be at the F2F in Lorient in two weeks. 
     * 6/6 - LG will arrive in Lorient tomorrow. 
     * 7/4 - F2F meeting Santa Clara in Sep. Engaging Igalia to support. 


   * Not running as root. 
     * 3/28 - Work in progress. Kernel patches from Tizen BSPs are needed and Jose and is trying to get those upstream in a single place in the kernel. 
     * 4/25 - Work is on standby. Patch merged in gerrit to enable this. Jose needs to test. 
     * 5/23 - Still on standby. Probably not ready for FF. Still a lot of testing to do and we do not want to risk breaking FF with this change. 
     * 6/6 - On hold.
     * 7/4 - On hold. Need to review whether we can get this into GG. 

   * Other topics
     * Application Life Cycle 
     * App FW vs. HMI FW split 
     * Surface management
       * Making surfaces available to services such as navigation so that map is service available to native and HTML5 apps.

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps. 
     * 7/4 - SPEC-1018 (restructure of folders) on hold

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, Thierry

New:


==== June 20, 2018 ====
Canceled due to Automotive Linux Summit.


==== June 6, 2018 ====
Attendees: Walt, Jan-Simon, Sebastien, Stephane, Jose

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.
    * 3/28 - Eli's comments were sent to the mail list for review. 
    * 4/25 - In progress. [[https://github.com/automotive-grade-linux/docs-agl/pull/113 | Pull request]] was done by Vincent. Some open issues remain. See https://github.com/automotive-grade-linux/docs-agl/issues/112
    * 5/23 - Pull request merged. Old version still appears on the doc site. Sebastien will send an email to the mail proposing to remove it. Will remove it after next meeting if there is no dissent. Will request the Virtualization EG to update section 3. A list of updates needed are in the  [[ http://docs.automotivelinux.org/docs/architecture/en/dev/reference/security/annexes/todoNotes.html | TODO Notes section]]. 
    * 6/6 - Since there was no dissent about removing the old version we will remove it ASAP. SPEC-1502. Jira tickets created for the rest of the ToDo list in the document. 

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 
     * 6/6 - Nothing to report. 

 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.
     * 6/6 - Nothing to report

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 3/28 - Sebastien working on monitoring and supervision for Karlsruhe meeting. 
       * 4/25 - In progress
       * 5/23 - XDS 1.1.1 released. SPEC-1361 in progress for publishing XDS packages. Next step is Sebastien's. XDS 2.0.0 still on target for ALS. 
       * 6/6 - XDS 2.0.0 - Stephane will present a video with a demo use case at ALS. Software be published in time for ALS (consider it an alpha release, not bug free, but can be tried out). 

   * API v3.0 - planned for FF 
     * Dynamic API, binder/API discovery 
     * 3/28 - Features will be discussed in Karlsruhe in detail.  What is the plan to deprecate API v2.0 once 3.0 is available? Thought is that one year of overlap will be sufficient. To be discussed further in Karlsruhe. 
     * 4/25 - In progress.  Should see something pushed to gerrit by the next meeting of EG. 
     * 5/23 - In progress and under test by Jose. API v3.0 should be ready for RC1. 
     * 6/6 - Jose will be ready to push in time for RC1 with documentation and stabilization updates to follow. 

   * Chromium and Web App Runtime from LG and Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 
     * 3/28 - Need to work out a plan with Igalia and LG for web apps based on their discussions at the AMM.
     * 4/25 - Steve L. - LG SVL porting web app runtime (WAM) and Chromium from WebOS OSE to AGL this week. [[ http://webosose.org/ | WebOS OSE]] + Daring Dab + Chromium 53. Goal is to have web app up and running on AGL this week. Background: WebOS has been running web apps LG TVs since 2013, and was first created in 2008 for WebOS phones and tablets from HP/Palm. WebOS was first open-sourced by HP in 2012; LG released WebOS OSE just after the AMM in February.
       * Stephane showed [[ https://bitbucket.org/chromiumembedded/cef | Chromium Embedded Framework (CEF)]], but to avoid confusion: CEF is not relevant to the current WebOS OSE AGL effort.
       * Steve ran across an email thread from Dominig [[https://lists.tizen.org/pipermail/dev/2014-December/005557.html | email]] and [[https://lists.crosswalk-project.org/pipermail/crosswalk-dev/2014-December/002308.html | another email]] from Tizen days regarding Crosswalk, Web App, security and process model issues that were being looked at by Tizen. WebOS already addresses many of these concerns in televisions.  
       * Follow up technical meeting at 10 am PDT/ 7 pm CET. 
     * 5/23 - LG will be at the F2F in Lorient in two weeks. 
     * 6/6 - LG will arrive in Lorient tomorrow. 


   * Not running as root. 
     * 3/28 - Work in progress. Kernel patches from Tizen BSPs are needed and Jose and is trying to get those upstream in a single place in the kernel. 
     * 4/25 - Work is on standby. Patch merged in gerrit to enable this. Jose needs to test. 
     * 5/23 - Still on standby. Probably not ready for FF. Still a lot of testing to do and we do not want to risk breaking FF with this change. 
     * 6/6 - On hold.

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 
       * 2/14 - SPEC-1018 in progress
       * 4/25 - SPEC-1018 on hold. 
       * 5/23 - SPEC-1018 on hold. 
       * 6/6 - SPEC-1018 on hold.

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, New guy from IoT.bzh (Thierry)

New:


==== May 23, 2018 ====
Attendees: Walt, Jan-Simon, Tanikawa, Kurokawa, Sebastien, Jose

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.
    * 3/28 - Eli's comments were sent to the mail list for review. 
    * 4/25 - In progress. [[https://github.com/automotive-grade-linux/docs-agl/pull/113 | Pull request]] was done by Vincent. Some open issues remain. See https://github.com/automotive-grade-linux/docs-agl/issues/112
    * 5/23 - Pull request merged. Old version still appears on the doc site. Sebastien will send an email to the mail proposing to remove it. Will remove it after next meeting if there is no dissent. Will request the Virtualization EG to update section 3. A list of updates needed are in the  [[ http://docs.automotivelinux.org/docs/architecture/en/dev/reference/security/annexes/todoNotes.html | TODO Notes section]]. 

SafeRide proposal
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 
     * 5/23 - Nothing to report. 

 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
 
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 
     * 5/23 - Need to get this moving.

=== Application Framework ===

   * SDK
     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation) (Update 5/25 - May be deferred past ALS)
       * First step to support package manager for SDKs (Yomo) (Update 5/25 - May be deferred past ALS)
       * Bug fixes
       * 3/28 - Sebastien working on monitoring and supervision for Karlsruhe meeting. 
       * 4/25 - In progress
       * 5/23 - XDS 1.1.1 released. SPEC-1361 in progress for publishing XDS packages. Next step is Sebastien's. XDS 2.0.0 still on target for ALS. 

   * API v3.0 - planned for FF 
     * Dynamic API, binder/API discovery 
     * 3/28 - Features will be discussed in Karlsruhe in detail.  What is the plan to deprecate API v2.0 once 3.0 is available? Thought is that one year of overlap will be sufficient. To be discussed further in Karlsruhe. 
     * 4/25 - In progress.  Should see something pushed to gerrit by the next meeting of EG. 
     * 5/23 - In progress and under test by Jose. API v3.0 should be ready for RC1. 

   * Chromium and Web App Runtime from LG and Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 
     * 3/28 - Need to work out a plan with Igalia and LG for web apps based on their discussions at the AMM.
     * 4/25 - Steve L. - LG SVL porting web app runtime (WAM) and Chromium from WebOS OSE to AGL this week. [[ http://webosose.org/ | WebOS OSE]] + Daring Dab + Chromium 53. Goal is to have web app up and running on AGL this week. Background: WebOS has been running web apps LG TVs since 2013, and was first created in 2008 for WebOS phones and tablets from HP/Palm. WebOS was first open-sourced by HP in 2012; LG released WebOS OSE just after the AMM in February.
       * Stephane showed [[ https://bitbucket.org/chromiumembedded/cef | Chromium Embedded Framework (CEF)]], but to avoid confusion: CEF is not relevant to the current WebOS OSE AGL effort.
       * Steve ran across an email thread from Dominig [[https://lists.tizen.org/pipermail/dev/2014-December/005557.html | email]] and [[https://lists.crosswalk-project.org/pipermail/crosswalk-dev/2014-December/002308.html | another email]] from Tizen days regarding Crosswalk, Web App, security and process model issues that were being looked at by Tizen. WebOS already addresses many of these concerns in televisions.  
       * Follow up technical meeting at 10 am PDT/ 7 pm CET. 
     * 5/23 - LG will be at the F2F in Lorient in two weeks. 


   * Not running as root. 
     * 3/28 - Work in progress. Kernel patches from Tizen BSPs are needed and Jose and is trying to get those upstream in a single place in the kernel. 
     * 4/25 - Work is on standby. Patch merged in gerrit to enable this. Jose needs to test. 
     * 5/23 - Still on standby. Probably not ready for FF. Still a lot of testing to do and we do not want to risk breaking FF with this change. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 
       * 2/14 - SPEC-1018 in progress
       * 4/25 - SPEC-1018 on hold. 
       * 5/23 - SPEC-1018 on hold. 

  * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, New guy from IoT.bzh (Thierry)

New:

==== May 9, 2018 ====
Attendees://Upcoming Meeting//

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.
    * 3/28 - Eli's comments were sent to the mail list for review. 
    * 4/25 - In progress. [[https://github.com/automotive-grade-linux/docs-agl/pull/113 | Pull request]] was done by Vincent. Some open issues remain. See https://github.com/automotive-grade-linux/docs-agl/issues/112

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 

 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting

     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 

=== Application Framework ===

   * SDK
     * XDS v1.1.0 in progress - targeted release date: AMM (2018 February 20th)
       * Board console/terminal integration within XDS dashboard
       * Documentation improvement of debug section
       * Bug fixes
     * 2/14 - On track to be available next week. 
     * 3/28 - Now available. Action item for Jan-Simon (SPEC-1361) to make XDS source packages available on the download server. 
     * 4/25 - SPEC-1361 in progress. 

     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation)
       * First step to support package manager for SDKs (Yomo)
       * Bug fixes
       * 3/28 - Sebastien working on monitoring and supervision for Karlsruhe meeting. 
       * 4/25 - In progress

   * API v3.0 - planned for FF 
     * Dynamic API, binder/API discovery 
     * 3/28 - Features will be discussed in Karlsruhe in detail.  What is the plan to deprecate API v2.0 once 3.0 is available? Thought is that one year of overlap will be sufficient. To be discussed further in Karlsruhe. 
     * 4/25 - In progress.  Should see something pushed to gerrit by the next meeting of EG. 

   * Chromium and Web App Runtime from LG and Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 
     * 3/28 - Need to work out a plan with Igalia and LG for web apps based on their discussions at the AMM.
     * 4/25 - Steve L. - LG SVL porting web app runtime (WAM) and Chromium from WebOS OSE to AGL this week. [[ http://webosose.org/ | WebOS OSE]] + Daring Dab + Chromium 53. Goal is to have web app up and running on AGL this week. Background: WebOS has been running web apps LG TVs since 2013, and was first created in 2008 for WebOS phones and tablets from HP/Palm. WebOS was first open-sourced by HP in 2012; LG released WebOS OSE just after the AMM in February.
       * Stephane showed [[ https://bitbucket.org/chromiumembedded/cef | Chromium Embedded Framework (CEF)]], but to avoid confusion: CEF is not relevant to the current WebOS OSE AGL effort.
       * Steve ran across an email thread from Dominig [[https://lists.tizen.org/pipermail/dev/2014-December/005557.html | email]] and [[https://lists.crosswalk-project.org/pipermail/crosswalk-dev/2014-December/002308.html | another email]] from Tizen days regarding Crosswalk, Web App, security and process model issues that were being looked at by Tizen. WebOS already addresses many of these concerns in televisions.  
       * Follow up technical meeting at 10 am PDT/ 7 pm CET. 


   * Not running as root. 
     * 3/28 - Work in progress. Kernel patches from Tizen BSPs are needed and Jose and is trying to get those upstream in a single place in the kernel. 
     * 4/25 - Work is on standby. Patch merged in gerrit to enable this. Jose needs to test. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 
       * 2/14 - SPEC-1018 in progress
       * 4/25 - SPEC-1018 on hold. 

New:

   * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, New guy from IoT.bzh (Thierry)
 

==== April 25, 2018 ====
Attendees: Walt, Jan-Simon, Steve L., Sebastien, Stephane, Sebastien, Tanikawa, Michael, Jose


  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.
    * 3/28 - Eli's comments were sent to the mail list for review. 
    * 4/25 - In progress. [[https://github.com/automotive-grade-linux/docs-agl/pull/113 | Pull request]] was done by Vincent. Some open issues remain. See https://github.com/automotive-grade-linux/docs-agl/issues/112

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopp about getting them accepted. 
     * 4/25 - Discussions in progress between Oliver and Oshri. 

 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * Update 11/1 - Walt to get this done this week. 
     * Update 11/8 - No update
     * Update 11/22 - No update
     * 12/6 - No update
     * 1/3 - No update
     * 1/17 - No update
     * 1/31 - No update
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 

=== Application Framework ===

   * SDK
     * XDS v1.1.0 in progress - targeted release date: AMM (2018 February 20th)
       * Board console/terminal integration within XDS dashboard
       * Documentation improvement of debug section
       * Bug fixes
     * 2/14 - On track to be available next week. 
     * 3/28 - Now available. Action item for Jan-Simon (SPEC-1361) to make XDS source packages available on the download server. 
     * 4/25 - SPEC-1361 in progress. 

     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation)
       * First step to support package manager for SDKs (Yomo)
       * Bug fixes
       * 3/28 - Sebastien working on monitoring and supervision for Karlsruhe meeting. 
       * 4/25 - In progress

   * API v3.0 - planned for FF 
     * Dynamic API, binder/API discovery 
     * 3/28 - Features will be discussed in Karlsruhe in detail.  What is the plan to deprecate API v2.0 once 3.0 is available? Thought is that one year of overlap will be sufficient. To be discussed further in Karlsruhe. 
     * 4/25 - In progress.  Should see something pushed to gerrit by the next meeting of EG. 

   * Chromium and Web App Runtime from LG and Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 
     * 3/28 - Need to work out a plan with Igalia and LG for web apps based on their discussions at the AMM.
     * 4/25 - Steve L. - LG SVL porting web app runtime (WAM) and Chromium from WebOS OSE to AGL this week. [[ http://webosose.org/ | WebOS OSE]] + Daring Dab + Chromium 53. Goal is to have web app up and running on AGL this week. Background: WebOS has been running web apps LG TVs since 2013, and was first created in 2008 for WebOS phones and tablets from HP/Palm. WebOS was first open-sourced by HP in 2012; LG released WebOS OSE just after the AMM in February.
       * Stephane showed [[ https://bitbucket.org/chromiumembedded/cef | Chromium Embedded Framework (CEF)]], but to avoid confusion: CEF is not relevant to the current WebOS OSE AGL effort.
       * Steve ran across an email thread from Dominig [[https://lists.tizen.org/pipermail/dev/2014-December/005557.html | email]] and [[https://lists.crosswalk-project.org/pipermail/crosswalk-dev/2014-December/002308.html | another email]] from Tizen days regarding Crosswalk, Web App, security and process model issues that were being looked at by Tizen. WebOS already addresses many of these concerns in televisions.  
       * Follow up technical meeting at 10 am PDT/ 7 pm CET. 

    * Dominig - will need to define a strategy to maintain iot security layer since ostro moved in a different direction. Ostro removed cynara. Need Jira issue to track. 
      * Dominig has spoken to the maintainer of Yocto [[http://git.yoctoproject.org/cgit/cgit.cgi/meta-security | meta-security]] (Armin Kuster) which has SELinux and TPM and we may have home there. We could possibly move the recipes that we use from meta-iot-security 
      * Jose to evaluate Tizen 4.0 security to see what they have done (SPEC-763)
      * Update 12/6 - On hold
      * 12/21 - On hold
      * 1/3 - Jose working on evaluation. Maybe done by end of January. 
      * 1/31 - Jose is working on security layer updates as part of the uprev to rocko. Middle of next week per dev call yesterday. Also evaluation of Tizen 4.0 (SPEC-763) was completed. See Jira for results. Summary is that there is nothing much we can use from Tizen 4.0 since we have diverged a bit from their approach.  Possibly can use Integrated Network Enforcement from Tizen 4.0. 
      * 2/14 - Jose has the new security layer building for rocko. Testing in progress. 
      * 3/28 - New security layer (meta-security) is merged as part of the update to rocko, but there is an issue with ptest. 
      * 4/25 - ptest issue resolved. Can close this issue. 

   * Not running as root. 
     * 3/28 - Work in progress. Kernel patches from Tizen BSPs are needed and Jose and is trying to get those upstream in a single place in the kernel. 
     * 4/25 - Work is on standby. Patch merged in gerrit to enable this. Jose needs to test. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 
       * 2/14 - SPEC-1018 in progress
       * 4/25 - SPEC-1018 on hold. 

New:

   * Code reviewers for EG: Jose, ask Dominig, Need someone focused on security, Tanikawa or someone else from Japan, New guy from IoT.bzh (Thierry)
 

==== March 28, 2018 ====
Attendees: Walt, Stephane, Dominig, Jose, Sebastien, Eli

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.
    * 3/28 - Eli's comments were sent to the mail list for review. 

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
     * 3/28 - Oshri pushed the patches to gerrit. Need to get them accepted upstream in the kernel. He has been communicating with Oliver Hartkopf about getting them accepted. 

 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * Update 11/1 - Walt to get this done this week. 
     * Update 11/8 - No update
     * Update 11/22 - No update
     * 12/6 - No update
     * 1/3 - No update
     * 1/17 - No update
     * 1/31 - No update
     * 3/28 - Need to get a copy of the Denso presentation from the AMM so we can review it. Also should take a look at FASTR ([[ https://fastr.org/ | Future of Automotive Security Technology Research]]) 

=== Application Framework ===

   * SDK
     * XDS v1.1.0 in progress - targeted release date: AMM (2018 February 20th)
       * Board console/terminal integration within XDS dashboard
       * Documentation improvement of debug section
       * Bug fixes
     * 2/14 - On track to be available next week. 
     * 3/28 - Now available. Action item for Jan-Simon to make XDS source packages available on the download server. 

     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation)
       * First step to support package manager for SDKs (Yomo)
       * Bug fixes
       * 3/28 - Sebastien working on monitoring and supervision for Karlsruhe meeting. 

   * API v3.0 - planned for FF 
     * Dynamic API, binder/API discovery 
     * 3/28 - Features will be discussed in Karlsruhe in detail.  What is the plan to deprecate API v2.0 once 3.0 is available? Thought is that one year of overlap will be sufficient. To be discussed further in Karlsruhe. 

   * Chromium from Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 
     * 3/28 - Need to work out a plan with Igalia and LG for web apps based on their discussions at the AMM. 

    * Dominig - will need to define a strategy to maintain iot security layer since ostro moved in a different direction. Ostro removed cynara. Need Jira issue to track. 
      * Dominig has spoken to the maintainer of Yocto [[http://git.yoctoproject.org/cgit/cgit.cgi/meta-security | meta-security]] (Armin Kuster) which has SELinux and TPM and we may have home there. We could possibly move the recipes that we use from meta-iot-security 
      * Jose to evaluate Tizen 4.0 security to see what they have done (SPEC-763)
      * Update 12/6 - On hold
      * 12/21 - On hold
      * 1/3 - Jose working on evaluation. Maybe done by end of January. 
      * 1/31 - Jose is working on security layer updates as part of the uprev to rocko. Middle of next week per dev call yesterday. Also evaluation of Tizen 4.0 (SPEC-763) was completed. See Jira for results. Summary is that there is nothing much we can use from Tizen 4.0 since we have diverged a bit from their approach.  Possibly can use Integrated Network Enforcement from Tizen 4.0. 
      * 2/14 - Jose has the new security layer building for rocko. Testing in progress. 
      * 3/28 - New security layer (meta-security) is merged as part of the update to rocko, but there is an issue with ptest. 

   * Not running as root. 
     * 3/28 - Work in progress. Kernel patches from Tizen BSPs are needed and Jose and is trying to get those upstream in a single place in the kernel. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 
       * 2/14 - SPEC-1018 in progress

New:


==== February 14, 2018 ====
Attendees: Walt, Sebastien, Oshri, Stephane, Evgeniy

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
    * 2/14 - No comments received.

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * 2/14 - Oshri started discussing how to add his code to the AGL baseline with Jan-Simon. Oshri plans to push the first patch by the end of the week. 
 
   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * Update 11/1 - Walt to get this done this week. 
     * Update 11/8 - No update
     * Update 11/22 - No update
     * 12/6 - No update
     * 1/3 - No update
     * 1/17 - No update
     * 1/31 - No update

=== Application Framework ===

   * SDK
     * XDS v1.1.0 in progress - targeted release date: AMM (2018 February 20th)
       * Board console/terminal integration within XDS dashboard
       * Documentation improvement of debug section
       * Bug fixes
     * 2/14 - On track to be available next week. 

     * XDS v2.0.0 - targeted release date: ALS  (2018 June 20th)
       * Monitoring integration
       * Improved development cycle (based on partial Widget installation)
       * First step to support package manager for SDKs (Yomo)
       * Bug fixes

   * Chromium from Igalia
     * 2/14 - Silvia will be at the AMM next week to discuss schedule and roadmap from Igalia. Need to discuss
       * Chromium for HTML5 apps and how to get that integrated into AGL. 
       * Chromium browser and app support for all reference boards 

    * Dominig - will need to define a strategy to maintain iot security layer since ostro moved in a different direction. Ostro removed cynara. Need Jira issue to track. 
      * Dominig has spoken to the maintainer of Yocto [[http://git.yoctoproject.org/cgit/cgit.cgi/meta-security | meta-security]] (Armin Kuster) which has SELinux and TPM and we may have home there. We could possibly move the recipes that we use from meta-iot-security 
      * Jose to evaluate Tizen 4.0 security to see what they have done (SPEC-763)
      * Update 12/6 - On hold
      * 12/21 - On hold
      * 1/3 - Jose working on evaluation. Maybe done by end of January. 
      * 1/31 - Jose is working on security layer updates as part of the uprev to rocko. Middle of next week per dev call yesterday. Also evaluation of Tizen 4.0 (SPEC-763) was completed. See Jira for results. Summary is that there is nothing much we can use from Tizen 4.0 since we have diverged a bit from their approach.  Possibly can use Integrated Network Enforcement from Tizen 4.0. 
      * 2/14 - Jose has the new security layer building for rocko. Testing in progress. 


   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 
       * 2/14 - SPEC-1018 in progress

New:


==== January 31, 2018 ====
Attendees: Walt, Jan-Simon, Sebastien, Eli

  * Roadmap for 2018 [[ :agl-roadmap#from_app_fw_and_security_eg | can be found here]]. 

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 
    * 1/31 
      * Eli will review the document. The document is here http://docs.automotivelinux.org/docs/architecture/en/dev/#upgraded-security-blueprint-2017
      * 

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * Update 11/1 - Discussed how Oshri can make the code available in gerrit for AGL. Will take about one month to have the code available. Source will be in github. 
     * 11/8 - No update
     * 11/22 - No update
     * 12/6 - No update
     * 12/21 - No update
     * 1/3 - Nothing to report. SafeRide will be at CES next week. 
     * 1/17 - Oshri was at CES and said that they will be upstreaming their code soon. 
     * 1/31 - No update

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * Update 11/1 - Walt to get this done this week. 
     * Update 11/8 - No update
     * Update 11/22 - No update
     * 12/6 - No update
     * 1/3 - No update
     * 1/17 - No update
     * 1/31 - No update

=== Application Framework ===

   * SDK
     * SDK for EE 
       * Ready for RC2
       * XDS - will be released by the end of the year
         * SPEC-1132 - Move the code from IoT.bzh github to AGL gerrit
           * 12/6 - In progress
           * 1/3 - New repos created. Migration in progress. Discussed SPEC-1147 and release of XDS for Eel. Sebastien to reply to Walt's latest comment and create a new task for the final XDS release. 
           * 1/31 - XDS source code is now in Gerrit. Sebastien working with Jan-Simon to build XDS in Jenkins. Sebastien will send an email with high level XDS features planned for 2018 to be added to the roadmap. 

   * Chromium from Igalia
     * 9/27 - Stephane has tested for Gen 3. It is expected to work on any wayland target not just Renesas. Stephane trying out for QEMU and Intel. No support for IVI shell extensions.
     * 10/11 - New version pushed by Igalia. Stephane having issue building for Intel. Stephane can build Chromium with the SDK and create a wgt but it takes a long time. (see https://github.com/iotbzh/chromium-agl-app) and SPEC-942 
     * 11/8 - No update
     * 11/22 - Reviewed email from Maksim about Igalia's plans for Chromium. Goals for Chromium
       * Build and run Chromium as an app available for Intel, Renesas, and other platforms
       * Build and run web engine in platform or as an app depending on the profile/device need for multiple platforms
       * Enable Qt-WebEngine for EE?
     * 12/6 - Waiting for some feedback from Igalia (Maksim) on how they want to proceed. They are envisioning everything as part of the platform built in Yocto, but that is not the current proposal that AGL would like to pursue. 
     * 12/21 - No update. Waiting for latest updates on XDG launcher from Tanikawa-san
     * 1/3 - Chromium running on full surface of the screen. Some issues with XDG launcher. 
     * 1/31 - XDG launcher works ok on the eel branch. Need to check if this got ported to master. 

   * Window Manager interface for App Framework Discussion
     * 12/6 - Tanikawa working on XDG proxy for EE/ CES. Hopefully ready for next week's integration session. Stephane asked about user management to switch home screen look and feel based on the current user and whether that is included in the EE homescreen. Need to check next week in Yokohama. 
     * 1/3 - SPEC-1086 needs to be addressed. Surface is not released in the window manager when the app dies. 
     * 1/31 - SPEC-1086 closed. Merged for eel and master. 

    * Dominig - will need to define a strategy to maintain iot security layer since ostro moved in a different direction. Ostro removed cynara. Need Jira issue to track. 
      * Dominig has spoken to the maintainer of Yocto [[http://git.yoctoproject.org/cgit/cgit.cgi/meta-security | meta-security]] (Armin Kuster) which has SELinux and TPM and we may have home there. We could possibly move the recipes that we use from meta-iot-security 
      * Jose to evaluate Tizen 4.0 security to see what they have done (SPEC-763)
      * Update 12/6 - On hold
      * 12/21 - On hold
      * 1/3 - Jose working on evaluation. Maybe done by end of January. 
      * 1/31 - Jose is working on security layer updates as part of the uprev to rocko. Middle of next week per dev call yesterday. Also evaluation of Tizen 4.0 (SPEC-763) was completed. See Jira for results. Summary is that there is nothing much we can use from Tizen 4.0 since we have diverged a bit from their approach.  Possibly can use Integrated Network Enforcement from Tizen 4.0. 


   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 
       * 1/31 - Settled on restructure of the folders for the repository (SPEC-1018). 


New:


==== January 17, 2018 ====
Attendees: Walt, Jan-Simon, Sebastien, Ronan, Dominig, Jose

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update
    * 1/17
      * No comments received. Most likely due to CES. 

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * Update 11/1 - Discussed how Oshri can make the code available in gerrit for AGL. Will take about one month to have the code available. Source will be in github. 
     * 11/8 - No update
     * 11/22 - No update
     * 12/6 - No update
     * 12/21 - No update
     * 1/3 - Nothing to report. SafeRide will be at CES next week. 
     * 1/17 - Oshri was at CES and said that they will be upstreaming their code soon. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * Update 11/1 - Walt to get this done this week. 
     * Update 11/8 - No update
     * Update 11/22 - No update
     * 12/6 - No update
     * 1/3 - No update
     * 1/17 - No update

=== Application Framework ===

   * SDK
     * SDK for EE 
       * Ready for RC2
       * XDS - will be released by the end of the year
         * SPEC-1132 - Move the code from IoT.bzh github to AGL gerrit
           * 12/6 - In progress
           * 1/3 - New repos created. Migration in progress. Discussed SPEC-1147 and release of XDS for Eel. Sebastien to reply to Walt's latest comment and create a new task for the final XDS release. 

   * Chromium from Igalia
     * 9/27 - Stephane has tested for Gen 3. It is expected to work on any wayland target not just Renesas. Stephane trying out for QEMU and Intel. No support for IVI shell extensions.
     * 10/11 - New version pushed by Igalia. Stephane having issue building for Intel. Stephane can build Chromium with the SDK and create a wgt but it takes a long time. (see https://github.com/iotbzh/chromium-agl-app) and SPEC-942 
     * 11/8 - No update
     * 11/22 - Reviewed email from Maksim about Igalia's plans for Chromium. Goals for Chromium
       * Build and run Chromium as an app available for Intel, Renesas, and other platforms
       * Build and run web engine in platform or as an app depending on the profile/device need for multiple platforms
       * Enable Qt-WebEngine for EE?
     * 12/6 - Waiting for some feedback from Igalia (Maksim) on how they want to proceed. They are envisioning everything as part of the platform built in Yocto, but that is not the current proposal that AGL would like to pursue. 
     * 12/21 - No update. Waiting for latest updates on XDG launcher from Tanikawa-san
     * 1/3 - Chromium running on full surface of the screen. Some issues with XDG launcher. 

   * Window Manager interface for App Framework Discussion
     * 12/6 - Tanikawa working on XDG proxy for EE/ CES. Hopefully ready for next week's integration session. Stephane asked about user management to switch home screen look and feel based on the current user and whether that is included in the EE homescreen. Need to check next week in Yokohama. 
     * 1/3 - SPEC-1086 needs to be addressed. Surface is not released in the window manager when the app dies. 

    * Dominig - will need to define a strategy to maintain iot security layer since ostro moved in a different direction. Ostro removed cynara. Need Jira issue to track. 
      * Dominig has spoken to the maintainer of Yocto [[http://git.yoctoproject.org/cgit/cgit.cgi/meta-security | meta-security]] (Armin Kuster) which has SELinux and TPM and we may have home there. We could possibly move the recipes that we use from meta-iot-security 
      * Jose to evaluate Tizen 4.0 security to see what they have done (SPEC-763)
      * Update 12/6 - On hold
      * 12/21 - On hold
      * 1/3 - Jose working on evaluation. Maybe done by end of January. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 


   * API instances (was namespaces). API names are hardcoded in the JSON description at the moment and there is no way to have multiple instances of the same binding. This is a limitation being run into in the audio area and vehicle signaling where there can be multiple physical devices that need to be supported via the same API. 
   * Enable APIs in languages other than C/Cplus plus. Use case is from Daimler to use Rust. Probably FF or later in the roadmap. 
     * 10/11 - Need Jira issue to track this. 
     * 11/1 - SPEC-1020 created to track this issue.
     * 11/8 - No update 
     * 11/22 - SPEC-1020 - 4A is using a version of dynamic APIs already (dynapi). Will be available globally, Jose needs to update the documentation. 
     * 12/6 - No update
     * 12/21 - No update. Should be API "instances" instead of a traditional namespace problem since we resolved using a dynamic API model. 
     * 1/2 - No update. 

   * Systemd v235 - introduced dynamic users (see http://0pointer.net/blog/dynamic-users-with-systemd.html) 
     * Propose testing the dynamic users using Arch Linux to see if the expected benefits are seen and whether we should backport to AGL before we see it in poky which may take another version or two. 
     * Created SPEC-940
     * Plan to get a readout before the Feb AMM to determine if we should do this for FF or wait for Yocto to do the uprev. 
     * 11/22 - Jose did a little investigation and this creates a dynamic user that is intended to be disposable which is not our requirement. He submitted a patch to systemd which was accepted for a future version of systemd. Will need to do some backporting for FF when we change to multi-user. 
     * 12/6 - On hold
     * 12/21 - On hold for FF. Jose's patch was merged upstream in systemd. 
     * 1/3 - Issue (SPEC-940) Closed. 

New:
   * Roadmap for 2018
     * Need to come to next meeting with FF and GG plans
     * Security workflow. Now that we have the building blocks in place, turn on security and put in place a mechanism for developers to sign applications, load them.
     * Define the list of privileges we are going to enforce in the security model.   
     * Running apps not as root/ multi-user
     * Distinction between platform services (e.g., nfc, telephone) and user services that run inside a user context (e.g., media player and lightmedia scanner) 
     * Changes necessary at binder level for V2C
     * Application signing and installation mechanism
     * Secure applications running on a remote device such as mobile phone or tablet that are rendered on the IVI system.
     * Improved Developer workflow for debugging apps including 
       * Round trip download/debug/fix/download apps. 
       * Supervision daemon for apps and services for development mode. Allows a developers to have a central place monitor IPC in real time. Builds on the current monitor service that is available for binders. Extends its availability to startup and allows more general monitoring without requiring detailed knowledge of what is available in a specific binder. Current version only allows a single binder to be monitored. This would allow monitoring across binders. 

     * Task manager app to allow developers to see what tasks/process are running in an app. Allow for killing apps.  
       * Review AGL spec 1.0 to determine what requirements are there for managing home screen and apps. Something like iphone where a double-tap on home button allows swiping up of apps to kill them. 

     * Introduce resource widgets to share content/ resources across multiple apps. 
     * App Launcher for web apps and strategy for managing code that can be downloaded on the fly by HTML5
     * App Framework API and strategy to stop non-privilege apps that are currently in the background (e.g., SIGTERM). Do those apps save their state so they can restart quickly? 
     * App Framework binder communications shall be able to manage return from sleep mode. 
     * Connection glitches in multi-ECU system shall be properly handled. 


--------

==== January 3, 2018 ====
Attendees: Walt, Stephane, Sebastien, Vincent, Dominig, Jose

  * Security Blueprint(Github https://github.com/automotive-grade-linux/docs-agl/tree/master/docs/sec-blueprint)
    * 11/22
      * Eli sending comments on the system hardening section to the mail list or on github directly. 
      * IoT.bzh reviewing the document and has a proposal for some restructuring. The Application Security section is need of an update. 
      * Jan-Simon found some inconsistencies between the hardening guide and the current kernel configuration. See comments in https://github.com/automotive-grade-linux/docs-agl/pull/28 
    * 12/6
      * Eli still working on his comments
      * Sebastien and Vincent completed a rework of the Security Blueprint based on the latest code. They published a pdf to the mail list. Will add to github in a new directory later today. Walt will reply to their email with a request to review the document and add comments to github before the next EG meeting (Dec 20). 
    * 12/21
      * Only a few comments received on the document so we will postpone the review until the new year. Will send an email reminding people to review the document. 
    * 1/3
      * No update

Notes from Dresden Meeting. 
   * Oshri Yahav of Saferide.io made a proposal about security. {{:agl-distro:saferide_open_source_project.pdf|}}
     * Update 11/1 - Discussed how Oshri can make the code available in gerrit for AGL. Will take about one month to have the code available. Source will be in github. 
     * 11/8 - No update
     * 11/22 - No update
     * 12/6 - No update
     * 12/21 - No update
     * 1/3 - Nothing to report. SafeRide will be at CES next week. 

   * Discussed the process for security issues in AGL code
     * Walt will clean out the existing EG-Security mail list so we can make use of this as a private discussion mechanism. 
     * Create a new Jira project for security issues visible to members of the EG. 
     * Create a process for accepting applications to and vetting access to the mail list and Jira. 
     * Review at next EG meeting
     * Update 11/1 - Walt to get this done this week. 
     * Update 11/8 - No update
     * Update 11/22 - No update
     * 12/6 - No update
     * 1/3 - No update

=== Application Framework ===

   * SDK
     * SDK for EE 
       * Ready for RC2
       * XDS - will be released by the end of the year
         * SPEC-1132 - Move the code from IoT.bzh github to AGL gerrit
           * 12/6 - In progress
           * 1/3 - New repos created. Migration in progress. Discussed SPEC-1147 and release of XDS for Eel. Sebastien to reply to Walt's latest comment and create a new task for the final XDS release. 

   * Chromium from Igalia
     * 9/27 - Stephane has tested for Gen 3. It is expected to work on any wayland target not just Renesas. Stephane trying out for QEMU and Intel. No support for IVI shell extensions.
     * 10/11 - New version pushed by Igalia. Stephane having issue building for Intel. Stephane can build Chromium with the SDK and create a wgt but it takes a long time. (see https://github.com/iotbzh/chromium-agl-app) and SPEC-942 
     * 11/8 - No update
     * 11/22 - Reviewed email from Maksim about Igalia's plans for Chromium. Goals for Chromium
       * Build and run Chromium as an app available for Intel, Renesas, and other platforms
       * Build and run web engine in platform or as an app depending on the profile/device need for multiple platforms
       * Enable Qt-WebEngine for EE?
     * 12/6 - Waiting for some feedback from Igalia (Maksim) on how they want to proceed. They are envisioning everything as part of the platform built in Yocto, but that is not the current proposal that AGL would like to pursue. 
     * 12/21 - No update. Waiting for latest updates on XDG launcher from Tanikawa-san
     * 1/3 - Chromium running on full surface of the screen. Some issues with XDG launcher. 

   * Window Manager interface for App Framework Discussion
     * 12/6 - Tanikawa working on XDG proxy for EE/ CES. Hopefully ready for next week's integration session. Stephane asked about user management to switch home screen look and feel based on the current user and whether that is included in the EE homescreen. Need to check next week in Yokohama. 
     * 1/3 - SPEC-1086 needs to be addressed. Surface is not released in the window manager when the app dies. 

    * Dominig - will need to define a strategy to maintain iot security layer since ostro moved in a different direction. Ostro removed cynara. Need Jira issue to track. 
      * Dominig has spoken to the maintainer of Yocto [[http://git.yoctoproject.org/cgit/cgit.cgi/meta-security | meta-security]] (Armin Kuster) which has SELinux and TPM and we may have home there. We could possibly move the recipes that we use from meta-iot-security 
      * Jose to evaluate Tizen 4.0 security to see what they have done (SPEC-763)
      * Update 12/6 - On hold
      * 12/21 - On hold
      * 1/3 - Jose working on evaluation. Maybe done by end of January. 

   * Matsuzawa asked about having a developer repository (store) for AGL apps so that developers can exchange apps.
   * From Stephane:
     * How to handle services/apps packages (widgets) until we have an app store (at least for developers). Typical example: CAN low level service which is ready to be shipped into AGL as a reference implementation for CAN
     * Immediate solution (DD): build packages during platform build (bitbake recipe) then embed into image, install at first boot. This is what we have currently for agl-demo. Typically, CAN-signaling should enter in that category
     * After DD: setup AGL profiles and determine in which profile a given app/service should be preinstalled (still using platform builds+firstboot)
     * EE-rc1: setup a separate build for apps/services then tell developers how to grab those packages and install by hand (wget ... ; afm-util install ...) depending on their needs
     * Later (EE?): have an appfw store (kinda repository) and a client to download and install apps/services from a store
     * Update 9/27 - Working on app branches for master and dab. We should shortly have the download folder ready. 
     * Update 10/11 - Results are now being synched to https://download.automotivelinux.org/AGL/apps/  Not seeing apps for both master and dab, seems to be one or the other. Apps are populated into the directory when they are patched/built. Jan-Simon to check to see if dab and master are overwriting each other. 
     * Update 11/1 - SPEC-1018 created to figure out the dab and master overwrite issue. 
     * 11/8 - No update
     * 11/22 - No update. Need to add Eel folder as well. 
     * 12/6 - Need to check with Jan-Simon
     * 12/21 Folders now work SPEC-1018). Waiting on a full build for all apps for Eel. Need to populate the dab folder with the dab apps on the dab branch. SPEC-1019. 
       * Comment from Stephane to reorganize the folder structure to allow for easier download by branch or by boards, etc.   Will add a suggested folder structure to SPEC-1018.
       * 1/3 - SPEC-1018 in progress. Would be nice to have the ability to download via a package manager from the target as well. Need to be able to verify the certificates and signatures of the apps being downloaded. 


   * API instances (was namespaces). API names are hardcoded in the JSON description at the moment and there is no way to have multiple instances of the same binding. This is a limitation being run into in the audio area and vehicle signaling where there can be multiple physical devices that need to be supported via the same API. 
   * Enable APIs in languages other than C/Cplus plus. Use case is from Daimler to use Rust. Probably FF or later in the roadmap. 
     * 10/11 - Need Jira issue to track this. 
     * 11/1 - SPEC-1020 created to track this issue.
     * 11/8 - No update 
     * 11/22 - SPEC-1020 - 4A is using a version of dynamic APIs already (dynapi). Will be available globally, Jose needs to update the documentation. 
     * 12/6 - No update
     * 12/21 - No update. Should be API "instances" instead of a traditional namespace problem since we resolved using a dynamic API model. 
     * 1/2 - No update. 

   * Systemd v235 - introduced dynamic users (see http://0pointer.net/blog/dynamic-users-with-systemd.html) 
     * Propose testing the dynamic users using Arch Linux to see if the expected benefits are seen and whether we should backport to AGL before we see it in poky which may take another version or two. 
     * Created SPEC-940
     * Plan to get a readout before the Feb AMM to determine if we should do this for FF or wait for Yocto to do the uprev. 
     * 11/22 - Jose did a little investigation and this creates a dynamic user that is intended to be disposable which is not our requirement. He submitted a patch to systemd which was accepted for a future version of systemd. Will need to do some backporting for FF when we change to multi-user. 
     * 12/6 - On hold
     * 12/21 - On hold for FF. Jose's patch was merged upstream in systemd. 
     * 1/3 - Issue (SPEC-940) Closed. 

New:
   * Roadmap for 2018
     * Need to come to next meeting with FF and GG plans
     * Security workflow. Now that we have the building blocks in place, turn on security and put in place a mechanism for developers to sign applications, load them.
     * Define the list of privileges we are going to enforce in the security model.   
     * Running apps not as root/ multi-user
     * Distinction between platform services (e.g., nfc, telephone) and user services that run inside a user context (e.g., media player and lightmedia scanner) 
     * Changes necessary at binder level for V2C
     * Application signing and installation mechanism
     * Secure applications running on a remote device such as mobile phone or tablet that are rendered on the IVI system.
     * Improved Developer workflow for debugging apps including 
       * Round trip download/debug/fix/download apps. 
       * Supervision daemon for apps and services for development mode. Allows a developers to have a central place monitor IPC in real time. Builds on the current monitor service that is available for binders. Extends its availability to startup and allows more general monitoring without requiring detailed knowledge of what is available in a specific binder. Current version only allows a single binder to be monitored. This would allow monitoring across binders. 

     * Task manager app to allow developers to see what tasks/process are running in an app. Allow for killing apps.  
       * Review AGL spec 1.0 to determine what requirements are there for managing home screen and apps. Something like iphone where a double-tap on home button allows swiping up of apps to kill them. 

     * Introduce resource widgets to share content/ resources across multiple apps. 

==== Pre-2018 Meeting Minutes ====

Minutes from meetings held prior to 2018 [[eg-app-fw:meetings:archive|have been archived here]].
Automotive Linux Wiki

User Tools

Site Tools

Page Tools
