Major, This makes perfect sense and will fit well into the work my team is already doing on RHEL7 STIG hardening and will allow us to easily upstream our work.
Regards MH -----Original Message----- From: Major Hayden [mailto:ma...@mhtx.net] Sent: Friday, August 12, 2016 10:39 AM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [openstack-ansible][security] Adding RHEL 7 STIG to openstack-ansible-security -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 08/04/2016 12:45 PM, Major Hayden wrote: > The existing openstack-ansible-security role uses security configurations > from the Security Technical Implementation Guide (STIG) and the new Red Hat > Enterprise Linux 7 STIG is due out soon. The role is currently based on the > RHEL 6 STIG, and although this works quite well for Ubuntu 14.04, the RHEL 7 > STIG has plenty of improvements that work better with Ubuntu 16.04, CentOS 7 > and RHEL 7. I've gone ahead and proposed a spec for these changes here: https://review.openstack.org/#/c/354389/ - -- Major Hayden -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIsBAEBCAAWBQJXre2XDxxtYWpvckBtaHR4Lm5ldAAKCRBzcFHgwQEfsUOTEACc Y+8TwsdFpmePraheCu/REA3f+Jd/Qu+DE6ZWWD9KdMdzYJZY4ODmnevkKxg2aOw6 kvh1b3cHOa6WD6Vppw9645hj4rAm/Gisi0ULUl4gAiLuti8Q/A+hbO9GTgEryXW5 ptVVKV+zfV6Ieul0C5LopfUj+6ItvvHWlkQJ9JHVgCsFEVA2nN5dcP79A13KHkzH qdCCkWeS/3S6fSiNTg8npHkigd4CxQuGHzn4mE/rVMGRjq80SJZUOvaKQFl9yB7s eeblvRiwpK568S1jxLzfktH/L1s9JrS06LP510vzTM0lTv787HOKd9wRcYe56RvG UED7wsCy4DwQJQL8UmFhoHvNlEGwZ0EOPavstiur3vUu2yyKf8WxXUPlvs43hWyf YDfayr6MPvcq5SvplN8BJadB3dIMjWdGlCoVtW7Kfgr1MVrZphdJtPyvzRlZhi1n 7zvrhqa/1zed/uAMncpMvGnO4NVw50QUzCZ3A0ZspoQzhIP4Gtx0aZiKfjm51xey q5QCGQRYXA8h9iD7dCx0q0kkTGCRMfeNPkFOapawlzP+KhsxoJm7rIZQbtrM3Qv8 hBbF/D8mf+fwVjU17eb0D1FjaRcPQEINoiMUPEayZBIW7ZhzsUGTf53bcRrR53u/ oOoWYCE3XfOgMogunZzz4ncvqEXJfxsPahXfUcfytg== =Wk7j -----END PGP SIGNATURE----- __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
