)]}'
{"security-guide/source/compute/case-studies.rst":[{"author":{"_account_id":10705,"name":"Darren Chan","email":"dazzachan@yahoo.com.au","username":"daz"},"change_message_id":"722e1855780e682079d765c4d124e181593aac96","unresolved":false,"context_lines":[{"line_number":56,"context_line":"compiler hardening options, so he decides to use this QEMU package. Bob"},{"line_number":57,"context_line":"decides to use AppArmor to secure the hypervisor images due to their"},{"line_number":58,"context_line":"ease of use in a significantly large fleet. Bob considered using"},{"line_number":59,"context_line":"GRSecurity however it would have reuquired significant time to tune all"},{"line_number":60,"context_line":"his applications to be properly covered by GRSecurity, and then any"},{"line_number":61,"context_line":"applications they wanted to use in the future would need to be"},{"line_number":62,"context_line":"compatible as well."}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a29b11f_b7269066","line":59,"updated":"2015-10-20 05:45:51.000000000","message":"s/GRSecurity however/GRSecurity, however\n\ns/reuquired/required","commit_id":"522357b9e29f8bb8d30f28e55d7112b3315aebfc"},{"author":{"_account_id":17832,"name":"Linette Williams","email":"stemke@us.ibm.com","username":"lwilliams"},"change_message_id":"b7c53edd259470232f1ff6d54a4cc914fdc73457","unresolved":false,"context_lines":[{"line_number":59,"context_line":"GRSecurity, however it would have required significant time to tune all"},{"line_number":60,"context_line":"his applications to be properly covered by GRSecurity, and then any"},{"line_number":61,"context_line":"applications they wanted to use in the future would need to be"},{"line_number":62,"context_line":"compatible as well."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"Bob also ensures that sensitive files and folders on hypervisors are"},{"line_number":65,"context_line":"owned by their respective services and have 640 permissions. Finally,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_b19479e8","line":62,"updated":"2015-10-26 19:50:52.000000000","message":"suggest: try to avoid long run on sentences.  Maybe..\"Bob considered using GRSecurity; however, it would have required significant time to tune all his applications to be properly covered by GRSecurity. Then, any applications they wanted to use in the future would need to be compatible as well.\"","commit_id":"81d9f063dee1a78d59029b72e9780e3bb7525363"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"f8f8af766d7486b7ebf5305bf1dd548dc299c3c7","unresolved":false,"context_lines":[{"line_number":59,"context_line":"GRSecurity, however it would have required significant time to tune all"},{"line_number":60,"context_line":"his applications to be properly covered by GRSecurity, and then any"},{"line_number":61,"context_line":"applications they wanted to use in the future would need to be"},{"line_number":62,"context_line":"compatible as well."},{"line_number":63,"context_line":""},{"line_number":64,"context_line":"Bob also ensures that sensitive files and folders on hypervisors are"},{"line_number":65,"context_line":"owned by their respective services and have 640 permissions. Finally,"}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa80f949_8553ad6a","line":62,"in_reply_to":"3a29b11f_b19479e8","updated":"2015-11-06 17:46:08.000000000","message":"Done","commit_id":"81d9f063dee1a78d59029b72e9780e3bb7525363"},{"author":{"_account_id":17832,"name":"Linette Williams","email":"stemke@us.ibm.com","username":"lwilliams"},"change_message_id":"b7c53edd259470232f1ff6d54a4cc914fdc73457","unresolved":false,"context_lines":[{"line_number":66,"context_line":"Bob uses the ``AvailabilityZoneFilter`` to enable his regional zones and"},{"line_number":67,"context_line":"``JsonFilter`` to be able to add tenants through a JSON file as needed,"},{"line_number":68,"context_line":"and also tests his scheduler filters at scale so that he does not run"},{"line_number":69,"context_line":"into resource or filter issues."}],"source_content_type":"text/x-rst","patch_set":2,"id":"3a29b11f_d199f520","line":69,"updated":"2015-10-26 19:50:52.000000000","message":"same suggestion here... maybe \"Finally, Bob uses the AvailabilityZoneFilter to enable his regional zones and JsonFilter to be able to add tenants through a JSON file as needed. He also tests his scheduler filters at scale so that he does not run into resource or filter issues.\"","commit_id":"81d9f063dee1a78d59029b72e9780e3bb7525363"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"f8f8af766d7486b7ebf5305bf1dd548dc299c3c7","unresolved":false,"context_lines":[{"line_number":66,"context_line":"Bob uses the ``AvailabilityZoneFilter`` to enable his regional zones and"},{"line_number":67,"context_line":"``JsonFilter`` to be able to add tenants through a JSON file as needed,"},{"line_number":68,"context_line":"and also tests his scheduler filters at scale so that he does not run"},{"line_number":69,"context_line":"into resource or filter issues."}],"source_content_type":"text/x-rst","patch_set":2,"id":"fa80f949_254c41c7","line":69,"in_reply_to":"3a29b11f_d199f520","updated":"2015-11-06 17:46:08.000000000","message":"Done","commit_id":"81d9f063dee1a78d59029b72e9780e3bb7525363"},{"author":{"_account_id":9162,"name":"Lana Brindley","email":"openstack@lanabrindley.com","username":"loquacity"},"change_message_id":"d09c93bda8bb44737cfb5be455998f7d5860fc4b","unresolved":false,"context_lines":[{"line_number":50,"context_line":"an EAL 4+ common criteria rating, with a labeled security protection"},{"line_number":51,"context_line":"profile (LSPP) to provide added assurance for instance isolation. This,"},{"line_number":52,"context_line":"combined with the strong support for KVM within the OpenStack community"},{"line_number":53,"context_line":"drives Bob’s decision to use KVM. Bob weighs the added cost of"},{"line_number":54,"context_line":"repackaging QEMU and decides that he cannot commit those resources to"},{"line_number":55,"context_line":"the project. Fortunately, his Linux distribution has already enabled the"},{"line_number":56,"context_line":"compiler hardening options, so he decides to use this QEMU package. Bob"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_8d87dd60","line":53,"updated":"2015-11-09 05:53:05.000000000","message":"This looks like a \u0027smart\u0027 apostrophe. Please replace with a straight one. Also, a comma is required after the word \u0027community\u0027 in this sentence (to finish the paranthetical phrase).","commit_id":"01a97699d1579669ef076fe853f771c94ded388e"},{"author":{"_account_id":12325,"name":"Nathaniel Dillon","email":"nathaniel.dillon@alumni.depaul.edu","username":"sicarie"},"change_message_id":"51cc8dd6506244daaf037cab1d2b86b270ea1c32","unresolved":false,"context_lines":[{"line_number":50,"context_line":"an EAL 4+ common criteria rating, with a labeled security protection"},{"line_number":51,"context_line":"profile (LSPP) to provide added assurance for instance isolation. This,"},{"line_number":52,"context_line":"combined with the strong support for KVM within the OpenStack community"},{"line_number":53,"context_line":"drives Bob’s decision to use KVM. Bob weighs the added cost of"},{"line_number":54,"context_line":"repackaging QEMU and decides that he cannot commit those resources to"},{"line_number":55,"context_line":"the project. Fortunately, his Linux distribution has already enabled the"},{"line_number":56,"context_line":"compiler hardening options, so he decides to use this QEMU package. Bob"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da85f559_68057178","line":53,"in_reply_to":"da85f559_8d87dd60","updated":"2015-11-10 15:39:19.000000000","message":"Done","commit_id":"01a97699d1579669ef076fe853f771c94ded388e"}]}