)]}'
{"security-guide/source/tenant-data/case-studies.rst":[{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"95db0464d59af2f1a205342f90fcf09cae832156","unresolved":false,"context_lines":[{"line_number":36,"context_line":"of an extremely high priority. In addition to the requirements and"},{"line_number":37,"context_line":"actions Bob will take to isolate tenants from one another at the"},{"line_number":38,"context_line":"infrastructure layer, Bob also needs to provide assurances for tenant"},{"line_number":39,"context_line":"data privacy. He develops an OpenStack plugin that tracks customer data"},{"line_number":40,"context_line":"and instances by monitoring log messages and pulling both hypervisor IDs"},{"line_number":41,"context_line":"and storage image locations, and can also use built-in Linux tools to"},{"line_number":42,"context_line":"\u0027scrub\u0027 the data from disk."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_e394ee43","line":39,"updated":"2015-10-21 19:03:22.000000000","message":"plug-in according to conventions","commit_id":"589d38430fbea78e927d4af7dc5b7204bed24094"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"4f2f5145ab5eda4b242a123850497bcd37ce6660","unresolved":false,"context_lines":[{"line_number":36,"context_line":"of an extremely high priority. In addition to the requirements and"},{"line_number":37,"context_line":"actions Bob will take to isolate tenants from one another at the"},{"line_number":38,"context_line":"infrastructure layer, Bob also needs to provide assurances for tenant"},{"line_number":39,"context_line":"data privacy. He develops an OpenStack plugin that tracks customer data"},{"line_number":40,"context_line":"and instances by monitoring log messages and pulling both hypervisor IDs"},{"line_number":41,"context_line":"and storage image locations, and can also use built-in Linux tools to"},{"line_number":42,"context_line":"\u0027scrub\u0027 the data from disk."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_1b625cae","line":39,"in_reply_to":"3a29b11f_e394ee43","updated":"2015-10-23 17:11:54.000000000","message":"Done","commit_id":"589d38430fbea78e927d4af7dc5b7204bed24094"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"95db0464d59af2f1a205342f90fcf09cae832156","unresolved":false,"context_lines":[{"line_number":47,"context_line":"rest of the building by a cage and is only accessible through logged and"},{"line_number":48,"context_line":"monitored keycard access. In stand-alone datacenters, Bob ensures proper"},{"line_number":49,"context_line":"security throughout the facility, including local security and separated"},{"line_number":50,"context_line":"physical security. The systems inside both data centers are encrypted so"},{"line_number":51,"context_line":"that physical removal of the hard drives will only be able to be"},{"line_number":52,"context_line":"accessed by authorized individuals."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_e3c94e5a","line":50,"updated":"2015-10-21 19:03:22.000000000","message":"I don\u0027t understand this last sentence, it looks grammatically wrong. Also, if the systems are encrypted what has that to do with physical removal and access?","commit_id":"589d38430fbea78e927d4af7dc5b7204bed24094"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"4f2f5145ab5eda4b242a123850497bcd37ce6660","unresolved":false,"context_lines":[{"line_number":47,"context_line":"rest of the building by a cage and is only accessible through logged and"},{"line_number":48,"context_line":"monitored keycard access. In stand-alone datacenters, Bob ensures proper"},{"line_number":49,"context_line":"security throughout the facility, including local security and separated"},{"line_number":50,"context_line":"physical security. The systems inside both data centers are encrypted so"},{"line_number":51,"context_line":"that physical removal of the hard drives will only be able to be"},{"line_number":52,"context_line":"accessed by authorized individuals."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_1e2a4a7f","line":50,"in_reply_to":"3a29b11f_e3c94e5a","updated":"2015-10-23 17:11:54.000000000","message":"On-system encryption protects against physical removal and access by unauthorized individuals, otherwise an unprivileged user (such as someone who was able to gain access to the facility) could remove hard drives and retrieve information on their own systems. I\u0027ve re-worded to hopefully remove ambiguity","commit_id":"589d38430fbea78e927d4af7dc5b7204bed24094"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"4d8ea630a717feb3b30edf21a7131ff05acb544b","unresolved":false,"context_lines":[{"line_number":36,"context_line":"of an extremely high priority. In addition to the requirements and"},{"line_number":37,"context_line":"actions Bob will take to isolate tenants from one another at the"},{"line_number":38,"context_line":"infrastructure layer, Bob also needs to provide assurances for tenant"},{"line_number":39,"context_line":"data privacy. He develops an OpenStack plug-in that tracks customer data"},{"line_number":40,"context_line":"and instances by monitoring log messages and pulling both hypervisor IDs"},{"line_number":41,"context_line":"and storage image locations, and can also use built-in Linux tools to"},{"line_number":42,"context_line":"\u0027scrub\u0027 the data from disk."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_807d451e","line":39,"updated":"2015-10-29 21:48:33.000000000","message":"I think it would be nice if Bob\u0027s public cloud example parallels Alice\u0027s private cloud in style (using the bulleted list and short phrases for readability). For example...\nBob develops an OpenStack plug-in that completes the following tasks:\n- Tracks customer data and instances\n- Monitors log messages\n- Pulls hypervisor IDs and storage image locations\n- Uses built-in Linux tools to \u0027scrub\u0027 tenant data (is CMDB still important here?)","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"4c460d6d92886e066b97318eeccaf112ca00f849","unresolved":false,"context_lines":[{"line_number":36,"context_line":"of an extremely high priority. In addition to the requirements and"},{"line_number":37,"context_line":"actions Bob will take to isolate tenants from one another at the"},{"line_number":38,"context_line":"infrastructure layer, Bob also needs to provide assurances for tenant"},{"line_number":39,"context_line":"data privacy. He develops an OpenStack plug-in that tracks customer data"},{"line_number":40,"context_line":"and instances by monitoring log messages and pulling both hypervisor IDs"},{"line_number":41,"context_line":"and storage image locations, and can also use built-in Linux tools to"},{"line_number":42,"context_line":"\u0027scrub\u0027 the data from disk."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_896232ac","line":39,"in_reply_to":"1a26ad4f_807d451e","updated":"2015-10-30 18:15:38.000000000","message":"In most of the other chapters we don\u0027t use those lists, so I prefer to change the above to the non-bullet lists.  I agree that some sentences are long, shorter ones would be better","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"63b720aafa9d75f5d151a3fcede67da7526e5d00","unresolved":false,"context_lines":[{"line_number":36,"context_line":"of an extremely high priority. In addition to the requirements and"},{"line_number":37,"context_line":"actions Bob will take to isolate tenants from one another at the"},{"line_number":38,"context_line":"infrastructure layer, Bob also needs to provide assurances for tenant"},{"line_number":39,"context_line":"data privacy. He develops an OpenStack plug-in that tracks customer data"},{"line_number":40,"context_line":"and instances by monitoring log messages and pulling both hypervisor IDs"},{"line_number":41,"context_line":"and storage image locations, and can also use built-in Linux tools to"},{"line_number":42,"context_line":"\u0027scrub\u0027 the data from disk."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_463964a3","line":39,"in_reply_to":"1a26ad4f_896232ac","updated":"2015-10-30 23:26:19.000000000","message":"Done","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"da89d1739c3116bbff6c8f282424bf97303a6be1","unresolved":false,"context_lines":[{"line_number":43,"context_line":""},{"line_number":44,"context_line":"Bob ensures the systems in each geographically distributed datacenter"},{"line_number":45,"context_line":"are physically secure. Where he is using a co-located facility, Bob"},{"line_number":46,"context_line":"ensures that his systems are physically separated from the rest of the"},{"line_number":47,"context_line":"building by a cage and is only accessible through logged and monitored"},{"line_number":48,"context_line":"keycard access. In stand-alone datacenters, Bob ensures proper security"},{"line_number":49,"context_line":"throughout the facility, including local security and physical security,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_60d7c9ed","line":46,"updated":"2015-10-29 21:53:14.000000000","message":"systems doesn\u0027t seem to agree with is later in sentence. Maybe could simplify, \"Bob ensures that the systems are physically separated and only accessible through logged and monitored keycard access.\"","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"63b720aafa9d75f5d151a3fcede67da7526e5d00","unresolved":false,"context_lines":[{"line_number":43,"context_line":""},{"line_number":44,"context_line":"Bob ensures the systems in each geographically distributed datacenter"},{"line_number":45,"context_line":"are physically secure. Where he is using a co-located facility, Bob"},{"line_number":46,"context_line":"ensures that his systems are physically separated from the rest of the"},{"line_number":47,"context_line":"building by a cage and is only accessible through logged and monitored"},{"line_number":48,"context_line":"keycard access. In stand-alone datacenters, Bob ensures proper security"},{"line_number":49,"context_line":"throughout the facility, including local security and physical security,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_66d7c04b","line":46,"in_reply_to":"1a26ad4f_60d7c9ed","updated":"2015-10-30 23:26:19.000000000","message":"Done","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"4c460d6d92886e066b97318eeccaf112ca00f849","unresolved":false,"context_lines":[{"line_number":44,"context_line":"Bob ensures the systems in each geographically distributed datacenter"},{"line_number":45,"context_line":"are physically secure. Where he is using a co-located facility, Bob"},{"line_number":46,"context_line":"ensures that his systems are physically separated from the rest of the"},{"line_number":47,"context_line":"building by a cage and is only accessible through logged and monitored"},{"line_number":48,"context_line":"keycard access. In stand-alone datacenters, Bob ensures proper security"},{"line_number":49,"context_line":"throughout the facility, including local security and physical security,"},{"line_number":50,"context_line":"and ensures the systems storing tenant data are encrypted."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_e9fac6bc","line":47,"updated":"2015-10-30 18:15:38.000000000","message":"systems (plural) and \"is only\" (singular) are in conflict. I like Gudrun\u0027s suggestion","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"63b720aafa9d75f5d151a3fcede67da7526e5d00","unresolved":false,"context_lines":[{"line_number":44,"context_line":"Bob ensures the systems in each geographically distributed datacenter"},{"line_number":45,"context_line":"are physically secure. Where he is using a co-located facility, Bob"},{"line_number":46,"context_line":"ensures that his systems are physically separated from the rest of the"},{"line_number":47,"context_line":"building by a cage and is only accessible through logged and monitored"},{"line_number":48,"context_line":"keycard access. In stand-alone datacenters, Bob ensures proper security"},{"line_number":49,"context_line":"throughout the facility, including local security and physical security,"},{"line_number":50,"context_line":"and ensures the systems storing tenant data are encrypted."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a26ad4f_46d2c45d","line":47,"in_reply_to":"1a26ad4f_e9fac6bc","updated":"2015-10-30 23:26:19.000000000","message":"Done","commit_id":"c838f4efaa6af1010163b647358d8a3b05de4474"},{"author":{"_account_id":6547,"name":"Andreas Jaeger","email":"jaegerandi@gmail.com","username":"jaegerandi"},"change_message_id":"899fa5e18d03e9472d099d15c16d5903baef0067","unresolved":false,"context_lines":[{"line_number":46,"context_line":"ensures that the systems are physically separated and only accessible"},{"line_number":47,"context_line":"through logged and monitored keycard access. In stand-alone datacenters,"},{"line_number":48,"context_line":"Bob ensures proper security throughout the facility, including local"},{"line_number":49,"context_line":"security and physical security, and ensures the systems storing tenant"},{"line_number":50,"context_line":"data are encrypted."}],"source_content_type":"text/x-rst","patch_set":3,"id":"1a26ad4f_37e010fa","line":49,"updated":"2015-10-31 05:43:18.000000000","message":"The storing of encrypted tenant data is only in the stand-alone datacenter? Or is this done in both cases - and thus should be a separate sentence?","commit_id":"7d3d6d0ccb9c36ee71ea98b9f75200786d64df39"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"fe2b617d99ab1e4950f46449657967ebf187dc58","unresolved":false,"context_lines":[{"line_number":46,"context_line":"ensures that the systems are physically separated and only accessible"},{"line_number":47,"context_line":"through logged and monitored keycard access. In stand-alone datacenters,"},{"line_number":48,"context_line":"Bob ensures proper security throughout the facility, including local"},{"line_number":49,"context_line":"security and physical security, and ensures the systems storing tenant"},{"line_number":50,"context_line":"data are encrypted."}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_88645549","line":49,"in_reply_to":"1a26ad4f_37e010fa","updated":"2015-11-10 15:41:53.000000000","message":"The encryption in this case was applied to both situations. I will add this to both situations.","commit_id":"7d3d6d0ccb9c36ee71ea98b9f75200786d64df39"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"34dcdabee571a9174457cdfea3d3be32c0fa0fc9","unresolved":false,"context_lines":[{"line_number":41,"context_line":"and storage image locations. The plugin can also use built-in Linux"},{"line_number":42,"context_line":"tools to \u0027scrub\u0027 the data from disk."},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"Bob ensures the systems in each geographically distributed datacenter"},{"line_number":45,"context_line":"are physically secure. Where he is using a co-located facility, Bob"},{"line_number":46,"context_line":"ensures that the systems are physically separated and only accessible"},{"line_number":47,"context_line":"through logged and monitored keycard access. Additionally, each system"}],"source_content_type":"text/x-rst","patch_set":4,"id":"da85f559_f064e7e5","line":44,"updated":"2015-11-10 16:41:08.000000000","message":"s/ensures the systems/ensures that the systems/","commit_id":"9aacf36d924a01f55c292b39bab6336a46f1ea7f"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"2291d702b763261309ae2d43f39fcfd941526dd6","unresolved":false,"context_lines":[{"line_number":46,"context_line":"facility, Bob ensures that the systems are physically separated and only"},{"line_number":47,"context_line":"accessible through logged and monitored keycard access. Additionally,"},{"line_number":48,"context_line":"each system has hardware encryption configured prior to shipping to the"},{"line_number":49,"context_line":"co-located factility. In stand-alone datacenters, Bob ensures proper"},{"line_number":50,"context_line":"security throughout the facility, including staff trained in social"},{"line_number":51,"context_line":"engineering attacks, and systems with disk encryption enabled."}],"source_content_type":"text/x-rst","patch_set":5,"id":"da85f559_4097133a","line":49,"updated":"2015-11-10 21:56:32.000000000","message":"I think this last sentence is a bit hard to read. I think it could read like the staff is trained in systems with disk encryption enabled. \n\nSuggest something like, \"In a stand-alone datacenter, Bob ensures proper security throughout the facility. Staff are trained in social engineering attacks. Systems have disk encryption enabled.","commit_id":"1e0f14eaa37e15ce689931f77a3153663d99e8c8"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"91a3a372f0725c52a514d397a336348c195d567d","unresolved":false,"context_lines":[{"line_number":46,"context_line":"facility, Bob ensures that the systems are physically separated and only"},{"line_number":47,"context_line":"accessible through logged and monitored keycard access. Additionally,"},{"line_number":48,"context_line":"each system has hardware encryption configured prior to shipping to the"},{"line_number":49,"context_line":"co-located factility. In stand-alone datacenters, Bob ensures proper"},{"line_number":50,"context_line":"security throughout the facility, including staff trained in social"},{"line_number":51,"context_line":"engineering attacks, and systems with disk encryption enabled."}],"source_content_type":"text/x-rst","patch_set":5,"id":"da85f559_2a4cfc9c","line":49,"in_reply_to":"da85f559_39d1eafa","updated":"2015-11-11 19:00:42.000000000","message":"out of these 2 options, i think the second one is clearer","commit_id":"1e0f14eaa37e15ce689931f77a3153663d99e8c8"},{"author":{"_account_id":11482,"name":"Gudrun Wolfgram","email":"gmolson@us.ibm.com","username":"gmolson"},"change_message_id":"2e490c6cb228f1a14caa48d18b882863a0563830","unresolved":false,"context_lines":[{"line_number":46,"context_line":"facility, Bob ensures that the systems are physically separated and only"},{"line_number":47,"context_line":"accessible through logged and monitored keycard access. Additionally,"},{"line_number":48,"context_line":"each system has hardware encryption configured prior to shipping to the"},{"line_number":49,"context_line":"co-located factility. In stand-alone datacenters, Bob ensures proper"},{"line_number":50,"context_line":"security throughout the facility, including staff trained in social"},{"line_number":51,"context_line":"engineering attacks, and systems with disk encryption enabled."}],"source_content_type":"text/x-rst","patch_set":5,"id":"da85f559_39d1eafa","line":49,"in_reply_to":"da85f559_4097133a","updated":"2015-11-10 23:17:40.000000000","message":"Here\u0027s another version...\n\nIn a stand-alone datacenter, Bob maintains proper security throughout the facility by ensuring that systems have disk encryption enabled and that staff are trained in social engineering attacks.","commit_id":"1e0f14eaa37e15ce689931f77a3153663d99e8c8"}]}