)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"789da39b8e1d7c7dfd69e7582168a8401592eb07","unresolved":false,"context_lines":[{"line_number":4,"context_line":"Commit:     Kamil Boratyński \u003ckamil.boratynski@icloud.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2016-06-03 02:18:30 +0200"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Implemented: V-38524."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Change-Id: I228f8aa7b0df80cce16e54c5f1e11da678bfd67d"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"9abb7d3a_b2445a1b","line":7,"updated":"2016-06-03 15:54:48.000000000","message":"Could you elaborate a little on this commit message and provide a release note?","commit_id":"78609dadde2e566be1a9062e71c1b11e8bb706e0"}],"defaults/main.yml":[{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"08d9ebedc3bdfb05e1ad7f3bcdb0adaa7210fe3a","unresolved":false,"context_lines":[{"line_number":205,"context_line":"security_disable_module_sctp: yes                 # V-38515"},{"line_number":206,"context_line":"security_disable_module_tipc: yes                 # V-38517"},{"line_number":207,"context_line":"security_disable_module_usb_storage: no           # V-38490"},{"line_number":208,"context_line":"security_disable_icmpv4_redirects: yes            # V-38524"},{"line_number":209,"context_line":"#"},{"line_number":210,"context_line":"# ** DANGER **"},{"line_number":211,"context_line":"# It\u0027s strongly recommended to fully understand the effects of changing the"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"9abb7d3a_b5843ab1","line":208,"updated":"2016-06-03 19:14:22.000000000","message":"Could we set this one to \u0027no\u0027 by default? It can disrupt some OpenStack deployments, especially OpenStack-Ansible deployments.","commit_id":"62bc14e57577051df0b3864a748ee682b103ac2d"}],"doc/source/developer-notes/V-38524.rst":[{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"d10370be1b25696bbcd4bbc75bfe4eac2247b59b","unresolved":false,"context_lines":[{"line_number":5,"context_line":"It is configurable by ``security_disable_icmpv4_redirects`` variable."},{"line_number":6,"context_line":"This feature is disabled by default as it can disrupt ``LXC`` deployments."},{"line_number":7,"context_line":""},{"line_number":8,"context_line":"Deployers can skip this task by using ``--skip-tags V-38524`` when"},{"line_number":9,"context_line":"they are applying the security role."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9abb7d3a_b868af22","line":8,"updated":"2016-06-03 19:36:44.000000000","message":"Let\u0027s instruct users to set security_disable_icmpv4_redirects to \u0027no\u0027 when they want to disable this one. Look at the docs for V-38490 for an example.","commit_id":"8278c97f928c310355fb72877f69e8f481e0f664"}],"tasks/kernel.yml":[{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"789da39b8e1d7c7dfd69e7582168a8401592eb07","unresolved":false,"context_lines":[{"line_number":174,"context_line":"    - cat2"},{"line_number":175,"context_line":"    - V-38682"},{"line_number":176,"context_line":""},{"line_number":177,"context_line":"- name: V-38524 - The system must not accept ICMPv4 redirect packets on any interface"},{"line_number":178,"context_line":"  sysctl:"},{"line_number":179,"context_line":"    name: net.ipv4.conf.all.accept_redirects"},{"line_number":180,"context_line":"    value: 0"}],"source_content_type":"text/x-yaml","patch_set":1,"id":"9abb7d3a_124c4641","line":177,"updated":"2016-06-03 15:54:48.000000000","message":"This looks like a good change, but could be please make this configurable? You can add a variable to defaults/main.yml and reference it here (see the task right above this one).","commit_id":"78609dadde2e566be1a9062e71c1b11e8bb706e0"}]}