390ccd8473
Implements: blueprint security-hardening Change-Id: I72fd97ff1cdee96d87ad195828e723aad33934d1
1.8 KiB
Security hardening for openstack-ansible
Work in progress -- this role is in the early stages of development.
The openstack-ansible-security role provides security hardening for OpenStack environments deployed with openstack-ansible. The role has multiple goals:
- Provide additional security in a highly configurable, integrated way
- Make it easier for organizations to meet the requirements of compliance programs, such as Payment Card Industry Data Security Standard (PCI-DSS)
- Document all changes to allow deployers to make educated decisions on which security configuration changes to apply.
At this time, the role follows the requirements of the US Government's Security Technical Implementation Guide (STIG) for Red Hat Enterprise Linux 6. Since openstack-ansible only supports Ubuntu 14.04 (as of late 2015), many of the configuration changes in the STIG will be adapted to fit an Ubuntu 14.04 system. Those adaptations are noted within the playbook tasks themselves and also within this documentation.
The easiest method for reviewing the STIG configurations and the relevant metadata is through the STIG Viewer service provided by UCF.
Table of Contents
benefits.rst configuration.rst getting-started.rst writing-docs.rst controls.rst