Checklist in openstacksecurityguide

Bug #1771649 reported by Omar Munoz on 2018-05-16
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Security Guide Documentation
Undecided
fanguiju

Bug Description

This bug tracker is for errors with the documentation, use the following as a template and remove or add fields as you see fit. Convert [ ] into [x] to check boxes:

- [ ] This doc is inaccurate in this way:

https://docs.openstack.org/security-guide/compute/checklist.html

Section -
Check-Compute-01: Is user/group ownership of config files set to root/nova?

Output from doc:

Run the following commands:

$ stat -L -c "%U %G" /etc/nova/nova.conf | egrep "root nova"
$ stat -L -c "%U %G" /etc/nova/api-paste.ini | egrep "root nova"
$ stat -L -c "%U %G" /etc/nova/policy.json | egrep "root nova"
$ stat -L -c "%U %G" /etc/nova/rootwrap.conf | egrep "root nova"

______________________________________________________

 just missing a pipe, when using egrep and multiple files/strings you need to drop a pipe in between each new string.

Run the following commands:

$ stat -L -c "%U %G" /etc/nova/nova.conf | egrep "root|nova"
$ stat -L -c "%U %G" /etc/nova/api-paste.ini | egrep "root|nova"
$ stat -L -c "%U %G" /etc/nova/policy.json | egrep "root|nova"
$ stat -L -c "%U %G" /etc/nova/rootwrap.conf | egrep "root|nova"

If you have a troubleshooting or support issue, use the following resources:

 - Ask OpenStack: http://ask.openstack.org
 - The mailing list: http://lists.openstack.org
 - IRC: 'openstack' channel on Freenode

-----------------------------------
Release: on 2018-05-15 06:42
SHA: b93c920c1c0e92cb4fcbac8426f39e597fe2e293
Source: https://git.openstack.org/cgit/openstack/security-doc/tree/security-guide/source/compute/checklist.rst
URL: https://docs.openstack.org/security-guide/compute/checklist.html

fanguiju (fanguiju) 6 hours ago
Changed in ossp-security-documentation:
assignee: nobody → fanguiju (fanguiju)
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers