openstack-manuals

improvement in Checklist in Security Guide

Bug #1632983 reported by Simon Toledano
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openstack-manuals
Invalid
Undecided
Unassigned

Bug Description

In Check-Identity-01, it is recommended to set keystone/keystone as owner/group for the keystone configuration files.
Wouldn't it be more secure if the owner was root and the group was keystone ?

-----------------------------------
Release: 0.0.1 on 2016-10-09 16:06
SHA: b6a291eda568eecf9ca0b8ed14c2822c5ca52150
Source: http://git.openstack.org/cgit/openstack/security-doc/tree/security-guide/source/identity/checklist.rst
URL: http://docs.openstack.org/security-guide/identity/checklist.html

Tags: sec-guide
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to security-doc (master)

Fix proposed to branch: master
Review: https://review.openstack.org/413398

Changed in openstack-manuals:
assignee: nobody → KATO Tomoyuki (kato-tomoyuki)
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on security-doc (master)

Change abandoned by KATO Tomoyuki (<email address hidden>) on branch: master
Review: https://review.openstack.org/413398

KATO Tomoyuki (kato-tomoyuki)
Changed in openstack-manuals:
status: In Progress → New
assignee: KATO Tomoyuki (kato-tomoyuki) → nobody
Revision history for this message
Alexandra Settle (alexandra-settle) wrote :

To answer your question, as you can see from the patch comments - the approach you have suggested is not recommended.
Thank you :)

Changed in openstack-manuals:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.