Go to file
Stanislaw Pitucha 9aaa0e77ad OSSN-0021 - Keystone trusts on compromised account
Adding a description of the issue of verifying Keystone trust in case
of account compromise. Including examples of API interaction to help
check the situation.

Closes-Bug: #1341849
Change-Id: Iaf38c214d553dfd4dfe29dac9dc1496c061fb765
2014-07-25 15:20:09 +01:00
notes OSSN-0021 - Keystone trusts on compromised account 2014-07-25 15:20:09 +01:00
templates Modified templates to wrap lines at 72 characters 2014-03-06 18:51:31 -08:00
.gitreview Add gitreview file 2014-04-01 16:53:46 -07:00
README.md Add previously published security notes 2014-02-12 21:35:18 -08:00

README.md

OpenStack Security Notes (OSSN)

The OpenStack Security Group (OSSG) publishes Security Notes to advise users of security related issues. Security notes are similar to advisories; they address vulnerabilities in 3rd party tools typically used within OpenStack deployments and provide guidance on common configuration mistakes that can result in an insecure operating environment.

Repository Layout

This repository contains published Security Notes and templates that should be used when creating new Security Notes.

notes - contains Security Notes in e-mail format (see the templates)
templates - contains e-mail and wiki format templates

A list of published Security Notes is available here:

https://wiki.openstack.org/wiki/Security_Notes

The process used to create new Security Notes is available here:

https://wiki.openstack.org/wiki/Security/Security_Note_Process