This Week

• Alastair
  • Inventory project
    • Start work on final report!
    • Provide details on how Tartarus tables are accessed to Ian D for inclusion in his privileged access discussion paper
    • any rows in the 'person' table where 'upstream' is false and where there isn't an 'item' row with a matching 'allocated_to' field should be deleted by a periodic script. Arguably 'category' should be set to NULL where 'upstream' is false?
    • Decommission ordershost
      • Xmas 2019 - delete old ordershot 'nerano'
  • Additional Tartarus work - non project
    • Create an entry in the new Services register once that is in service
    • client report to flag when hyperthreading disabled or not (in CPU report)
    • client report to take 'ipfilter.export'
    • modularise kvmreport so that it can both be used to report by mail and be used as a clientreport module
  • Look at Stephen's 'Thoughts on shell components'
  • Investigate systemd reboot bug on gaivota and add some more debugging (store tree diff somewhere)
  • drupal username collection re GDPR
    • Perioidically run user expiry script every month until December 2019 and if no problems configure to run automatically
    • Run 16/09/19
  • Look at using php-5.6 on computing.help
  • Look at KVM / host-model issue on oyster (See my actions from 13/03/19)
  • Look at idea of marking KVM guests as disabled (See my actions from 13/03/19)
  • Upgrade girassol (remembering hyperthreading)
  • Check file permissions on tartarus and computing.help (can non privileged users access stuff (including backups))
  • Go through non MPU RT tickets
  • Purge REMINDERS
  • Inventory - fix API bug wrt editing items with no serial numbers. RT #99548 .. but not yet live

• Chris
  • User training materials project #403
    • complete and then publish ThoughtsOn403 - and ask for comments
  • Look at updating 'DSU'
  • Tidy up unused LVM volumes on Forum KVM servers

• Stephen
  • Take issue of disable per user journald logs on certain servers to OPS
  • Look at where we're using ALL in access.conf
  • Read George's mail of 8th November wrt DPIA
  • clientreport
    • Complete module errors report
    • Add an 'old locks' report
    • 'Old kernels' report
    • Report on core files in / directory
    • Report on AMT being enabled/disabled
  • Labcheck - add report on which machines have AMT enabled
  • Produce an Legitimate Interest Declaration and Privacy Statement for svn history and LCFG profile history
  • Security week page
  • Re-survey our servers wrt hyperthreading status
  • Ask Toby to security review LCFG Profile security project