bfcf6c7423
This role contains around 150 controls from the 270+ controls that exist in the RHEL 6 STIG. New controls are still being added. Implements: blueprint security-hardening Change-Id: I0578f86bf42d55242bc72b97b40a5935a3cb18d6
1.8 KiB
Security hardening for openstack-ansible
The openstack-ansible-security role provides security hardening for OpenStack environments deployed with openstack-ansible. The role has multiple goals:
- Provide additional security in a highly configurable, integrated way
- Make it easier for organizations to meet the requirements of compliance programs, such as Payment Card Industry Data Security Standard (PCI-DSS)
- Document all changes to allow deployers to make educated decisions on which security configuration changes to apply.
At this time, the role follows the requirements of the US Government's Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6. Since openstack-ansible only supports Ubuntu 14.04 (as of late 2015), many of the configuration changes in the STIG will be adapted to fit an Ubuntu 14.04 system. Those adaptations are noted within the playbook tasks themselves and also within this documentation.
The easiest method for reviewing the STIG configurations and the relevant metadata is through the STIG Viewer service provided by UCF.
Table of Contents
getting-started.rst writing-docs.rst configurations.rst
Indices and tables
genindexmodindexsearch