)]}'
{"case-studies/compliance-case-studies.rst":[{"author":{"_account_id":18462,"name":"Rahul U Nair","email":"rahulunair@gmail.com","username":"rahulunair"},"change_message_id":"680b65878f318d94124834c2307aeb806b635fa1","unresolved":false,"context_lines":[{"line_number":36,"context_line":"As the U.S. Department of Defense is involved, Security Technical"},{"line_number":37,"context_line":"Implementation Guides (STIGs) will come into play, which are the"},{"line_number":38,"context_line":"configuration standards for DOD IA and IA-enabled devices and systems."},{"line_number":39,"context_line":"Alice notices a number of complications here as there is no STIG for"},{"line_number":40,"context_line":"OpenStack, so she must address several underlying requirements for each"},{"line_number":41,"context_line":"OpenStack service; for example, the networking SRG and Application SRG"},{"line_number":42,"context_line":"will both be applicable (list of SRGs). Other critical controls include"}],"source_content_type":"text/x-rst","patch_set":5,"id":"dfeb2761_d0b5c57f","line":39,"range":{"start_line":39,"start_character":40,"end_line":39,"end_character":65},"updated":"2017-04-04 17:07:32.000000000","message":"As we have openstack sensible security project now, it needs to be mentioned here https://docs.openstack.org/developer/openstack-ansible-security/ . And may be we can rewrite the sentence from `as there is no STIG` to `STIG guidelines can be deployed enforced using ansible-security`","commit_id":"d308a6262df6027b23e7c86071551131b6caf944"}],"case-studies/dashboard-case-studies.rst":[{"author":{"_account_id":18462,"name":"Rahul U Nair","email":"rahulunair@gmail.com","username":"rahulunair"},"change_message_id":"680b65878f318d94124834c2307aeb806b635fa1","unresolved":false,"context_lines":[{"line_number":60,"context_line":""},{"line_number":61,"context_line":"   server{"},{"line_number":62,"context_line":"   listen 443 ssl;"},{"line_number":63,"context_line":"   sever_name \u003cNAME\u003e"},{"line_number":64,"context_line":"   add_header Strict-Transport-Security \"max-age\u003d\u003cTIME\u003e; includeSubdomains\";"},{"line_number":65,"context_line":""},{"line_number":66,"context_line":"Bob also disables image uploading in the Dashboard as well as the Image"}],"source_content_type":"text/x-rst","patch_set":5,"id":"dfeb2761_5dbd4e00","line":63,"range":{"start_line":63,"start_character":19,"end_line":63,"end_character":20},"updated":"2017-04-04 17:07:32.000000000","message":"nit: `;` at the end of server name","commit_id":"d308a6262df6027b23e7c86071551131b6caf944"}],"case-studies/instance-management-case-studies.rst":[{"author":{"_account_id":18462,"name":"Rahul U Nair","email":"rahulunair@gmail.com","username":"rahulunair"},"change_message_id":"680b65878f318d94124834c2307aeb806b635fa1","unresolved":false,"context_lines":[{"line_number":16,"context_line":"Alice issued a Request for Product (or RFP) to major hardware"},{"line_number":17,"context_line":"vendors that outlined her performance and form factor needs."},{"line_number":18,"context_line":"This RFP includes the requirement for a processor architecture"},{"line_number":19,"context_line":"with rdrand support (currently Ivy Bridge or Haswell). When the"},{"line_number":20,"context_line":"hardware has been delivered and is being configured, Alice will"},{"line_number":21,"context_line":"use the entropy-gathering daemon (egd) in libvirt to ensure"},{"line_number":22,"context_line":"sufficient entropy and the ability to feed that entropy to"}],"source_content_type":"text/x-rst","patch_set":5,"id":"dfeb2761_c9107cab","line":19,"range":{"start_line":19,"start_character":21,"end_line":19,"end_character":52},"updated":"2017-04-04 17:07:32.000000000","message":"Intel Ivy Bridge and newer","commit_id":"d308a6262df6027b23e7c86071551131b6caf944"},{"author":{"_account_id":18462,"name":"Rahul U Nair","email":"rahulunair@gmail.com","username":"rahulunair"},"change_message_id":"680b65878f318d94124834c2307aeb806b635fa1","unresolved":false,"context_lines":[{"line_number":57,"context_line":"For migrations, Bob wants to enable secure instance migrations"},{"line_number":58,"context_line":"in order to support rolling upgrades with minimal user"},{"line_number":59,"context_line":"downtime. Bob ensures that all migrations occur on an isolated"},{"line_number":60,"context_line":"VLAN. He plans to defer implementing encrypted migrations"},{"line_number":61,"context_line":"until this is better supported in ``nova``"},{"line_number":62,"context_line":"client tools. As a result, he makes a note to track this carefully"},{"line_number":63,"context_line":"and switch to encrypted migrations as soon as possible."}],"source_content_type":"text/x-rst","patch_set":5,"id":"dfeb2761_244f0f6c","line":63,"range":{"start_line":60,"start_character":5,"end_line":63,"end_character":55},"updated":"2017-04-04 17:07:32.000000000","message":"May be we can write something like : \"He plans to implement encrypted migrations by configuring the ``ACCESS_TYPE`` of ``live_migration_uri`` in /etc/libvirt/libvirtd.conf. \" Please see this url for more details: /etc/libvirt/libvirtd.conf","commit_id":"d308a6262df6027b23e7c86071551131b6caf944"}]}