Major Hayden bfcf6c7423 Initial import of openstack-ansible-security role
This role contains around 150 controls from the 270+ controls that exist
in the RHEL 6 STIG. New controls are still being added.

Implements: blueprint security-hardening

Change-Id: I0578f86bf42d55242bc72b97b40a5935a3cb18d6
2015-10-07 07:27:39 -05:00

5 lines
301 B
ReStructuredText

The openstack-ansible project configures AppArmor to limit the actions of
containers and reduce the changes (and potential damages) of a container
breakout. The RHEL 6 STIG mentions SELinux but the existing SELinux policies
provided with Ubuntu aren't as well maintained as those provided with RHEL.