openstack-ansible-security/doc/metadata/rhel6/V-38662.rst
Andy McCrae fe39a30c98 Revert "Retire openstack-ansible-security"
This reverts commit ea9b39d723.
In order to release stable/pike we need this to still be present.
https://review.openstack.org/#/c/502063/ is failing.

Once we release stable/pike we can figure out how to properly remove
this repository.

Change-Id: I50308b1c3001371d4554b6c2640bd5384e870a53
2017-09-13 10:34:55 -06:00

586 B

---id: V-38662 status: exception - initial provisioning tag: misc ---

Creating encrypted storage is left up to the deployer to consider and implement. Although encrypting data at rest on storage volumes does reduce the chances of data theft if the server is physically compromised, it doesn't provide protection from a user who is logged in while the server is running.

Linux systems provide various options for storage encryption. The Linux Unified Key Setup is a good implementation to review.