)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"35f3a42cdcd1def080c76a9a73326a87ac747b3c","unresolved":false,"context_lines":[{"line_number":4,"context_line":"Commit:     KATO Tomoyuki \u003ckato.tomoyuki@jp.fujitsu.com\u003e"},{"line_number":5,"context_line":"CommitDate: 2016-12-26 01:33:11 +0000"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"change file owner of keystone files"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Change-Id: I121aa8130e2264767adf0b6131abd25021d251c6"},{"line_number":10,"context_line":"Closes-Bug: #1632983"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"7a3c09a3_ced0e3cc","line":7,"updated":"2017-01-12 21:00:23.000000000","message":"This doesn\u0027t say why the change is being made. A link to the discussion or docs that say why this is more secure would be helpful. I looked at the bug and didn\u0027t find any supporting docs either.","commit_id":"08b81ab216796d9d168af1aab9a2b776f1569b21"}],"security-guide/source/identity/checklist.rst":[{"author":{"_account_id":21797,"name":"Jeremy Liu","display_name":"Jeremy Liu","email":"liujiong.cc@gmail.com","username":"liujiong"},"change_message_id":"6c894b1eb9308331d1d9f9526e5d043d601e64ca","unresolved":false,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone.conf | egrep \"root keystone\""},{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"root keystone\""},{"line_number":22,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/policy.json | egrep \"root keystone\""},{"line_number":23,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/logging.conf | egrep \"root keystone\""},{"line_number":24,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/signing_cert.pem | egrep \"root keystone\""},{"line_number":25,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/private/signing_key.pem | egrep \"root keystone\""}],"source_content_type":"text/x-rst","patch_set":1,"id":"da4df55a_0b99ac1f","line":22,"range":{"start_line":22,"start_character":60,"end_line":22,"end_character":74},"updated":"2016-12-23 09:09:41.000000000","message":"the permission for policy.json is keystone:keystone\nsee https://github.com/rdo-packages/keystone-distgit/blob/rpm-master/openstack-keystone.spec#L253","commit_id":"c7ee8760d2ee8d82154b54c191faa3861efa223b"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"68262cdb747b608d031553f6135654d60bc48bcf","unresolved":false,"context_lines":[{"line_number":19,"context_line":""},{"line_number":20,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone.conf | egrep \"root keystone\""},{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"root keystone\""},{"line_number":22,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/policy.json | egrep \"root keystone\""},{"line_number":23,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/logging.conf | egrep \"root keystone\""},{"line_number":24,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/signing_cert.pem | egrep \"root keystone\""},{"line_number":25,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/private/signing_key.pem | egrep \"root keystone\""}],"source_content_type":"text/x-rst","patch_set":1,"id":"da4df55a_c2083e30","line":22,"range":{"start_line":22,"start_character":60,"end_line":22,"end_character":74},"in_reply_to":"da4df55a_0b99ac1f","updated":"2016-12-26 01:40:10.000000000","message":"Done","commit_id":"c7ee8760d2ee8d82154b54c191faa3861efa223b"},{"author":{"_account_id":21797,"name":"Jeremy Liu","display_name":"Jeremy Liu","email":"liujiong.cc@gmail.com","username":"liujiong"},"change_message_id":"6c894b1eb9308331d1d9f9526e5d043d601e64ca","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"root keystone\""},{"line_number":22,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/policy.json | egrep \"root keystone\""},{"line_number":23,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/logging.conf | egrep \"root keystone\""},{"line_number":24,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/signing_cert.pem | egrep \"root keystone\""},{"line_number":25,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/private/signing_key.pem | egrep \"root keystone\""},{"line_number":26,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/ca.pem | egrep \"root keystone\""},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"**Pass:** If user and group ownership of all these config files is set"},{"line_number":29,"context_line":"to keystone. The above commands show output of keystone keystone."}],"source_content_type":"text/x-rst","patch_set":1,"id":"da4df55a_8bacbc36","line":26,"range":{"start_line":24,"start_character":4,"end_line":26,"end_character":79},"updated":"2016-12-23 09:09:41.000000000","message":"Does keystone still use the `ssl` directory today? I didn\u0027t find it in my env.","commit_id":"c7ee8760d2ee8d82154b54c191faa3861efa223b"},{"author":{"_account_id":10497,"name":"KATO Tomoyuki","email":"kato.tomoyuki@jp.fujitsu.com","username":"to222"},"change_message_id":"68262cdb747b608d031553f6135654d60bc48bcf","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"root keystone\""},{"line_number":22,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/policy.json | egrep \"root keystone\""},{"line_number":23,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/logging.conf | egrep \"root keystone\""},{"line_number":24,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/signing_cert.pem | egrep \"root keystone\""},{"line_number":25,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/private/signing_key.pem | egrep \"root keystone\""},{"line_number":26,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/ca.pem | egrep \"root keystone\""},{"line_number":27,"context_line":""},{"line_number":28,"context_line":"**Pass:** If user and group ownership of all these config files is set"},{"line_number":29,"context_line":"to keystone. The above commands show output of keystone keystone."}],"source_content_type":"text/x-rst","patch_set":1,"id":"da4df55a_2d273bb7","line":26,"range":{"start_line":24,"start_character":4,"end_line":26,"end_character":79},"in_reply_to":"da4df55a_8bacbc36","updated":"2016-12-26 01:40:10.000000000","message":"This is for keystone eventlet. They are deprecated at Liberty, but the guide covers Liberty. If we can agree to remove them, however, I think we can remove them because of deprecateion.","commit_id":"c7ee8760d2ee8d82154b54c191faa3861efa223b"},{"author":{"_account_id":7725,"name":"David Stanek","email":"dstanek@dstanek.com","username":"dstanek"},"change_message_id":"35f3a42cdcd1def080c76a9a73326a87ac747b3c","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/keystone-paste.ini | egrep \"root keystone\""},{"line_number":22,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/policy.json | egrep \"keystone keystone\""},{"line_number":23,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/logging.conf | egrep \"root keystone\""},{"line_number":24,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/signing_cert.pem | egrep \"root keystone\""},{"line_number":25,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/private/signing_key.pem | egrep \"root keystone\""},{"line_number":26,"context_line":"    $ stat -L -c \"%U %G\" /etc/keystone/ssl/certs/ca.pem | egrep \"root keystone\""},{"line_number":27,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"7a3c09a3_6e744ffd","line":24,"updated":"2017-01-12 21:00:23.000000000","message":"I agree with the previous comment that this should note the *ssl* files are EOL in Liberty.","commit_id":"08b81ab216796d9d168af1aab9a2b776f1569b21"}]}