)]}'
{"security-guide/source/block-storage/checklist.rst":[{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"bfa675ecbf4376418cec78320e025ec490374827","unresolved":false,"context_lines":[{"line_number":206,"context_line":"~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~"},{"line_number":207,"context_line":""},{"line_number":208,"context_line":"Unencrypted volume data makes volume-hosting platforms especially high-value"},{"line_number":209,"context_line":"targets for attackers, since it would allow the attacker to read the data for"},{"line_number":210,"context_line":"many different VMs. In addition, the physical storage medium could be stolen,"},{"line_number":211,"context_line":"remounted, and accessed from a different machine. Encrypting volume data"},{"line_number":212,"context_line":"mitigates these risks and provides defense-in-depth to volume-hosting"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a30ddce_64d3d504","line":209,"range":{"start_line":209,"start_character":22,"end_line":209,"end_character":43},"updated":"2017-03-10 13:52:36.000000000","message":"as it allows *","commit_id":"8a12d44fe47a63f747c425ea268b0e5bbe30199d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"bfa675ecbf4376418cec78320e025ec490374827","unresolved":false,"context_lines":[{"line_number":210,"context_line":"many different VMs. In addition, the physical storage medium could be stolen,"},{"line_number":211,"context_line":"remounted, and accessed from a different machine. Encrypting volume data"},{"line_number":212,"context_line":"mitigates these risks and provides defense-in-depth to volume-hosting"},{"line_number":213,"context_line":"platforms. Cinder is able to encrypt volume data before it is written to disk,"},{"line_number":214,"context_line":"and thus it is strongly recommended that the volume encryption feature is"},{"line_number":215,"context_line":"enabled."},{"line_number":216,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a30ddce_040bf98e","line":213,"range":{"start_line":213,"start_character":11,"end_line":213,"end_character":17},"updated":"2017-03-10 13:52:36.000000000","message":"Block Storage (cinder)","commit_id":"8a12d44fe47a63f747c425ea268b0e5bbe30199d"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"bfa675ecbf4376418cec78320e025ec490374827","unresolved":false,"context_lines":[{"line_number":211,"context_line":"remounted, and accessed from a different machine. Encrypting volume data"},{"line_number":212,"context_line":"mitigates these risks and provides defense-in-depth to volume-hosting"},{"line_number":213,"context_line":"platforms. Cinder is able to encrypt volume data before it is written to disk,"},{"line_number":214,"context_line":"and thus it is strongly recommended that the volume encryption feature is"},{"line_number":215,"context_line":"enabled."},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"**Pass:** If volume encryption is enabled and properly configured according to"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a30ddce_24fc7d71","line":214,"range":{"start_line":214,"start_character":4,"end_line":214,"end_character":36},"updated":"2017-03-10 13:52:36.000000000","message":"and we recommend that*","commit_id":"8a12d44fe47a63f747c425ea268b0e5bbe30199d"},{"author":{"_account_id":17709,"name":"Michael Dong","email":"michael.dong@rackspace.com","username":"mdong"},"change_message_id":"03c7430768986c06310f11f45716074debedcae5","unresolved":false,"context_lines":[{"line_number":211,"context_line":"remounted, and accessed from a different machine. Encrypting volume data"},{"line_number":212,"context_line":"mitigates these risks and provides defense-in-depth to volume-hosting"},{"line_number":213,"context_line":"platforms. Cinder is able to encrypt volume data before it is written to disk,"},{"line_number":214,"context_line":"and thus it is strongly recommended that the volume encryption feature is"},{"line_number":215,"context_line":"enabled."},{"line_number":216,"context_line":""},{"line_number":217,"context_line":"**Pass:** If volume encryption is enabled and properly configured according to"}],"source_content_type":"text/x-rst","patch_set":1,"id":"9a30ddce_0eaf8b2a","line":214,"range":{"start_line":214,"start_character":4,"end_line":214,"end_character":36},"in_reply_to":"9a30ddce_24fc7d71","updated":"2017-03-10 19:52:20.000000000","message":"Similar lines in this document are also written in the passive voice (lines 79 and 133), should I edit those as well?","commit_id":"8a12d44fe47a63f747c425ea268b0e5bbe30199d"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"b6d0abdec5bf78b1d203b7ee1f682b82fc7bb853","unresolved":false,"context_lines":[{"line_number":220,"context_line":"in ``/etc/cinder/cinder.conf`` is set and if the instructions in the"},{"line_number":221,"context_line":"documentation referenced above are properly followed."},{"line_number":222,"context_line":""},{"line_number":223,"context_line":"To verify, perform these steps after completing the volume encryption setup and"},{"line_number":224,"context_line":"creating the volume-type for LUKS as described in the documentation referenced"},{"line_number":225,"context_line":"above."},{"line_number":226,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a30ddce_c41453ea","line":223,"range":{"start_line":223,"start_character":0,"end_line":223,"end_character":9},"updated":"2017-03-13 09:43:44.000000000","message":"Could you just add \u0027To verify further, perform\u0027","commit_id":"85405c3aa5b8ee6aa76514c28f3d860a333511b5"},{"author":{"_account_id":17893,"name":"Luke Hinds","email":"lhinds@redhat.com","username":"lhinds"},"change_message_id":"b6d0abdec5bf78b1d203b7ee1f682b82fc7bb853","unresolved":false,"context_lines":[{"line_number":256,"context_line":"The search should not return the string written to the encrypted volume."},{"line_number":257,"context_line":""},{"line_number":258,"context_line":"**Fail:** If value of parameter ``api_class`` under ``[KEY_MANAGER]`` section"},{"line_number":259,"context_line":"in ``/etc/cinder/cinder.conf`` is not set not or if the instructions in the"},{"line_number":260,"context_line":"documentation referenced above are not properly followed."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a30ddce_84e5fb09","line":259,"range":{"start_line":259,"start_character":42,"end_line":259,"end_character":45},"updated":"2017-03-13 09:43:44.000000000","message":"small typo?","commit_id":"85405c3aa5b8ee6aa76514c28f3d860a333511b5"}]}