Chapter 12. Messaging security in OpenStack Security Guide -> Message queue process isolation and policy - current - more details need for namespaces and zeromq

[Lucas Fisher]

More details are needed describing or illustrating the process isolation described in this section. There are suggestions of using network namespaces for process isolation but no real details on how to do so. Especially with zeromq. This looks complicated enough that at least a diagram illustrating setup of zeromq using network and ipc namespaces would be helpful.
-----------------------------------
Built: 2014-07-15T19:04:56 00:00
git SHA: f7711cc343e504283676dfe43afae6faa9046fd7
URL: http://docs.openstack.org/security-guide/content/messaging-security.html
source File: file:/home/jenkins/workspace/security-doc-tox-doc-publishdocs/security-guide/ch_messaging-security.xml
xml:id: messaging-security

[Bryan D. Payne (bdpayne)]

Idea here should be to provide a high level diagram, but not get too deep into the discussion of network namespaces, which is probably best left to other guides. We do think that a diagram would be useful here.

[Tom Fifield (fifieldt)]

With the recent stance on zeromq changing, is this bug still valid?

[N Dillon (sicarie)]

I don't believe so, we have the section on message hardening so I think we're covered

[Launchpad Janitor (janitor)]

[Expired for openstack-manuals because there has been no activity for 60 days.]