)]}'
{"security-notes/OSSN-0059":[{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d03f3f7ab24abd998f9cb831dff3e1f23de4c510","unresolved":false,"context_lines":[{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"An trusted VM that have been launched earlier on a trusted host can"},{"line_number":6,"context_line":"still be launched from the same host even after the trusted host is"},{"line_number":7,"context_line":"compromised later on."},{"line_number":8,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_a18e192c","line":5,"updated":"2015-09-04 00:18:11.000000000","message":"probably should be \"A trusted VM...\"","commit_id":"386891fc5a905eda65807467b45cf2f04c5d4dcc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d03f3f7ab24abd998f9cb831dff3e1f23de4c510","unresolved":false,"context_lines":[{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"An trusted VM that have been launched earlier on a trusted host can"},{"line_number":6,"context_line":"still be launched from the same host even after the trusted host is"},{"line_number":7,"context_line":"compromised later on."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"### Affected Services / Software ###"},{"line_number":10,"context_line":"Nova, Trust Computing Pools"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_41961d3f","line":7,"updated":"2015-09-04 00:18:11.000000000","message":"drop \"later on\"","commit_id":"386891fc5a905eda65807467b45cf2f04c5d4dcc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d03f3f7ab24abd998f9cb831dff3e1f23de4c510","unresolved":false,"context_lines":[{"line_number":12,"context_line":"### Discussion ###"},{"line_number":13,"context_line":"Trust Computing Pools aim to ensure the trustworthiness of the hosts"},{"line_number":14,"context_line":"leveraging hardware-based security features. When an instance is"},{"line_number":15,"context_line":"scheduled, the scheduler finds an trusted host by calling the remote"},{"line_number":16,"context_line":"Attestation API for each host to check whether it is trusted or not."},{"line_number":17,"context_line":"Then, the scheduler calls the corresponding compute node to launch"},{"line_number":18,"context_line":"the VM. Once the VM is launched, the scheduler is no longer involved"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_c1aa2d71","line":15,"updated":"2015-09-04 00:18:11.000000000","message":"should be \"finds a trusted host\"","commit_id":"386891fc5a905eda65807467b45cf2f04c5d4dcc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d03f3f7ab24abd998f9cb831dff3e1f23de4c510","unresolved":false,"context_lines":[{"line_number":18,"context_line":"the VM. Once the VM is launched, the scheduler is no longer involved"},{"line_number":19,"context_line":"unless a migration, a resize or an evacuation is asked for that VM."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"Malicious users can bypass the trust check by Attestation API by using"},{"line_number":22,"context_line":"these steps: 1) Launch a trusted VM on a trusted host; 2) Stop the"},{"line_number":23,"context_line":"VM; 3) Compromise the host; 4) Power on the VM. There is no check"},{"line_number":24,"context_line":"by Attestation API for powering on the VM in this case."}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_41adbd82","line":21,"updated":"2015-09-04 00:18:11.000000000","message":"should be \"by the Attestation API using these steps...\"","commit_id":"386891fc5a905eda65807467b45cf2f04c5d4dcc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d03f3f7ab24abd998f9cb831dff3e1f23de4c510","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Malicious users can bypass the trust check by Attestation API by using"},{"line_number":22,"context_line":"these steps: 1) Launch a trusted VM on a trusted host; 2) Stop the"},{"line_number":23,"context_line":"VM; 3) Compromise the host; 4) Power on the VM. There is no check"},{"line_number":24,"context_line":"by Attestation API for powering on the VM in this case."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"### Recommended Actions ###"},{"line_number":27,"context_line":"Currently there is no fix for this issue due to design of Trust"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_01cca568","line":24,"updated":"2015-09-04 00:18:11.000000000","message":"should be \"by the Attestation API\"","commit_id":"386891fc5a905eda65807467b45cf2f04c5d4dcc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"d03f3f7ab24abd998f9cb831dff3e1f23de4c510","unresolved":false,"context_lines":[{"line_number":24,"context_line":"by Attestation API for powering on the VM in this case."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"### Recommended Actions ###"},{"line_number":27,"context_line":"Currently there is no fix for this issue due to design of Trust"},{"line_number":28,"context_line":"Computing Pools of OpenStack."},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"### Contacts / References ###"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"da20952f_e1be51ad","line":27,"updated":"2015-09-04 00:18:11.000000000","message":"should be \"due to the design of Trust Computing Pools on OpenStack.\"","commit_id":"386891fc5a905eda65807467b45cf2f04c5d4dcc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"e1104b6daf25623e71633c44166b3bbeeea83ab3","unresolved":false,"context_lines":[{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"},{"line_number":5,"context_line":"A trusted VM that have been launched earlier on a trusted host can"},{"line_number":6,"context_line":"still be powered on from the same host even after the trusted host is"},{"line_number":7,"context_line":"compromised."},{"line_number":8,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":2,"id":"da20952f_2748bdb2","line":5,"updated":"2015-09-04 16:53:55.000000000","message":"oops, this should be \"that has been\"","commit_id":"25406f8af8d4936c4f13730b1c9557338c5833ef"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"959918dc9efbb3165660aae47cea26ffa1a580c9","unresolved":false,"context_lines":[{"line_number":21,"context_line":"Malicious users can bypass the trust check by the Attestation API using"},{"line_number":22,"context_line":"these steps: 1) Launch a trusted VM on a trusted host; 2) Stop the"},{"line_number":23,"context_line":"VM; 3) Compromise the host; 4) Power on the VM. There is no check"},{"line_number":24,"context_line":"by the Attestation API for powering on the VM in this case."},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"### Recommended Actions ###"},{"line_number":27,"context_line":"Currently there is no fix for this issue due to the design of Trust"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"da20952f_73d997f2","line":24,"updated":"2015-09-04 18:08:04.000000000","message":"So the trusted vm has to have been stopped before the compromise? And does it have to have been run on that host? Those seem like they would be good points to call out if they\u0027re needed.","commit_id":"fc195ce60775ac0528668c5c6fb589280ca06488"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"959918dc9efbb3165660aae47cea26ffa1a580c9","unresolved":false,"context_lines":[{"line_number":25,"context_line":""},{"line_number":26,"context_line":"### Recommended Actions ###"},{"line_number":27,"context_line":"Currently there is no fix for this issue due to the design of Trust"},{"line_number":28,"context_line":"Computing Pools of OpenStack."},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"### Contacts / References ###"},{"line_number":31,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0059"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"da20952f_13905bec","line":28,"updated":"2015-09-04 18:08:04.000000000","message":"While there\u0027s no fix we should recommend something - \"monitor trusted vms for compromise more itensively\" or something?","commit_id":"fc195ce60775ac0528668c5c6fb589280ca06488"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"47472c249c7c0a8170fb3e4fc312b45adf676c5f","unresolved":false,"context_lines":[{"line_number":26,"context_line":"### Recommended Actions ###"},{"line_number":27,"context_line":"Currently there is no fix for this issue due to the design of Trust"},{"line_number":28,"context_line":"Computing Pools of OpenStack."},{"line_number":29,"context_line":""},{"line_number":30,"context_line":"### Contacts / References ###"},{"line_number":31,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0059"},{"line_number":32,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1456228"}],"source_content_type":"application/octet-stream","patch_set":3,"id":"da20952f_a714c443","line":29,"updated":"2015-09-04 20:06:20.000000000","message":"Doug just brought up a good note - per the bug notes, the attestation fails but the vm still boots, so if the instance id attestation fails but the vm still boots, that should be investigated.","commit_id":"fc195ce60775ac0528668c5c6fb589280ca06488"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"b61afe56e49850492174336584431c8ad640b37f","unresolved":false,"context_lines":[{"line_number":25,"context_line":"powering on the VM in this case."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"### Recommended Actions ###"},{"line_number":28,"context_line":"It is recommended to investigate further if the instance id attestation"},{"line_number":29,"context_line":"fails but the VM still boots. Another approach is to combine"},{"line_number":30,"context_line":"secure boot with trusted boot."},{"line_number":31,"context_line":""}],"source_content_type":"application/octet-stream","patch_set":4,"id":"9a1a9d01_0b876d62","line":28,"updated":"2015-09-24 14:49:31.000000000","message":"Should id be capitalized or something, looked like a typo on the first readthrough.","commit_id":"597f82fb642d6fd706db1f8e0e68a151d7b58f42"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"b61afe56e49850492174336584431c8ad640b37f","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"### Contacts / References ###"},{"line_number":33,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0059"},{"line_number":34,"context_line":"Original LaunchPad Bug : https://bugs.launchpad.net/ossn/+bug/1456228"},{"line_number":35,"context_line":"OpenStack Security ML : openstack-security@lists.openstack.org"},{"line_number":36,"context_line":"OpenStack Security Group : https://launchpad.net/~openstack-ossg"}],"source_content_type":"application/octet-stream","patch_set":4,"id":"9a1a9d01_0bd52d42","line":34,"updated":"2015-09-24 14:49:31.000000000","message":"by convention this should link to the nova bug\nhttps://bugs.launchpad.net/nova/+bug/1456228","commit_id":"597f82fb642d6fd706db1f8e0e68a151d7b58f42"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"673672c10839c5cc25c7798518aa6e4ec9aa95c5","unresolved":false,"context_lines":[{"line_number":7,"context_line":"compromised."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"### Affected Services / Software ###"},{"line_number":10,"context_line":"Nova, Trust Computing Pools"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Discussion ###"},{"line_number":13,"context_line":"Trust Computing Pools aim to ensure the trustworthiness of the hosts"}],"source_content_type":"application/octet-stream","patch_set":5,"id":"9a1a9d01_c978932e","line":10,"updated":"2015-10-01 17:06:47.000000000","message":"Isn\u0027t the proper name \"Trusted Computing Pools\" or \"Trusted Compute Pools\"?\n\n  https://wiki.openstack.org/wiki/TrustedComputingPools\n\n  http://docs.openstack.org/havana/config-reference/content/trusted-compute-pools.html","commit_id":"ddc3adec455b2baa164dc27a797f167176dbad3a"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"e23e217888b9af1f3e86fba9498f6040ba1c2fce","unresolved":false,"context_lines":[{"line_number":7,"context_line":"compromised."},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"### Affected Services / Software ###"},{"line_number":10,"context_line":"Nova, Trust Computing Pools"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Discussion ###"},{"line_number":13,"context_line":"Trust Computing Pools aim to ensure the trustworthiness of the hosts"}],"source_content_type":"application/octet-stream","patch_set":5,"id":"9a1a9d01_35ce39b5","line":10,"in_reply_to":"9a1a9d01_c978932e","updated":"2015-10-01 20:44:58.000000000","message":"I agree the name should change.  Here\u0027s another place Trusted Computing Pools is referenced.  The commit message needs to be updated too.","commit_id":"ddc3adec455b2baa164dc27a797f167176dbad3a"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"673672c10839c5cc25c7798518aa6e4ec9aa95c5","unresolved":false,"context_lines":[{"line_number":10,"context_line":"Nova, Trust Computing Pools"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Discussion ###"},{"line_number":13,"context_line":"Trust Computing Pools aim to ensure the trustworthiness of the hosts"},{"line_number":14,"context_line":"leveraging hardware-based security features. When an instance is"},{"line_number":15,"context_line":"scheduled, the scheduler finds a trusted host by calling the remote"},{"line_number":16,"context_line":"Attestation API for each host to check whether it is trusted or not."}],"source_content_type":"application/octet-stream","patch_set":5,"id":"9a1a9d01_099d2b59","line":13,"updated":"2015-10-01 17:06:47.000000000","message":"...here too.","commit_id":"ddc3adec455b2baa164dc27a797f167176dbad3a"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"bda0c9a780517ee8da4105ebe8bf3f5de9b8e10e","unresolved":false,"context_lines":[{"line_number":10,"context_line":"Nova, Trusted Computing Pools"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"### Discussion ###"},{"line_number":13,"context_line":"Trust Computing Pools aim to ensure the trustworthiness of the hosts"},{"line_number":14,"context_line":"leveraging hardware-based security features. When an instance is"},{"line_number":15,"context_line":"scheduled, the scheduler finds a trusted host by calling the remote"},{"line_number":16,"context_line":"Attestation API for each host to check whether it is trusted or not."}],"source_content_type":"application/octet-stream","patch_set":6,"id":"7a2fa921_0e69548b","line":13,"updated":"2015-10-07 16:11:24.000000000","message":"I know this is a nit, but this should be Trusted Computing Pools also.","commit_id":"50c3efcf0565107f5b552bb4ca1649582e17d2f3"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"60e1f6bbdfd1018d0193cea4501fea5f939532f2","unresolved":false,"context_lines":[{"line_number":25,"context_line":"powering on the VM in this case."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"### Recommended Actions ###"},{"line_number":28,"context_line":"It is recommended to investigate further if the trust check by Attestation"},{"line_number":29,"context_line":"API fails but the VM still boots. Another approach is to combine"},{"line_number":30,"context_line":"secure boot with trusted boot. At the same time, Nova team has"},{"line_number":31,"context_line":"discussed depreciating Trusted Filter."}],"source_content_type":"application/octet-stream","patch_set":8,"id":"7a2fa921_1ac18880","line":28,"updated":"2015-10-07 19:49:47.000000000","message":"i think this may sound better as \"We recommend investigating further...\"","commit_id":"a74f73b8bd8aa3ac781ac44f8d800143eac1ffbc"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"60e1f6bbdfd1018d0193cea4501fea5f939532f2","unresolved":false,"context_lines":[{"line_number":28,"context_line":"It is recommended to investigate further if the trust check by Attestation"},{"line_number":29,"context_line":"API fails but the VM still boots. Another approach is to combine"},{"line_number":30,"context_line":"secure boot with trusted boot. At the same time, Nova team has"},{"line_number":31,"context_line":"discussed depreciating Trusted Filter."},{"line_number":32,"context_line":""},{"line_number":33,"context_line":"### Contacts / References ###"},{"line_number":34,"context_line":"This OSSN : https://wiki.openstack.org/wiki/OSSN/OSSN-0059"}],"source_content_type":"application/octet-stream","patch_set":8,"id":"7a2fa921_9ad4b847","line":31,"updated":"2015-10-07 19:49:47.000000000","message":"s/depreciating/deprecating/","commit_id":"a74f73b8bd8aa3ac781ac44f8d800143eac1ffbc"}]}