Checklist in openstacksecurityguide

Bug #1771649 reported by Omar Munoz
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Security Guide Documentation
New
Undecided
Unassigned

Bug Description

This bug tracker is for errors with the documentation, use the following as a template and remove or add fields as you see fit. Convert [ ] into [x] to check boxes:

- [ ] This doc is inaccurate in this way:

https://docs.openstack.org/security-guide/compute/checklist.html

Section -
Check-Compute-01: Is user/group ownership of config files set to root/nova?

Output from doc:

Run the following commands:

$ stat -L -c "%U %G" /etc/nova/nova.conf | egrep "root nova"
$ stat -L -c "%U %G" /etc/nova/api-paste.ini | egrep "root nova"
$ stat -L -c "%U %G" /etc/nova/policy.json | egrep "root nova"
$ stat -L -c "%U %G" /etc/nova/rootwrap.conf | egrep "root nova"

______________________________________________________

 just missing a pipe, when using egrep and multiple files/strings you need to drop a pipe in between each new string.

Run the following commands:

$ stat -L -c "%U %G" /etc/nova/nova.conf | egrep "root|nova"
$ stat -L -c "%U %G" /etc/nova/api-paste.ini | egrep "root|nova"
$ stat -L -c "%U %G" /etc/nova/policy.json | egrep "root|nova"
$ stat -L -c "%U %G" /etc/nova/rootwrap.conf | egrep "root|nova"

If you have a troubleshooting or support issue, use the following resources:

 - Ask OpenStack: http://ask.openstack.org
 - The mailing list: http://lists.openstack.org
 - IRC: 'openstack' channel on Freenode

-----------------------------------
Release: on 2018-05-15 06:42
SHA: b93c920c1c0e92cb4fcbac8426f39e597fe2e293
Source: https://git.openstack.org/cgit/openstack/security-doc/tree/security-guide/source/compute/checklist.rst
URL: https://docs.openstack.org/security-guide/compute/checklist.html

Tags: sec-guide
fanguiju (fanguiju)
Changed in ossp-security-documentation:
assignee: nobody → fanguiju (fanguiju)
fanguiju (fanguiju)
Changed in ossp-security-documentation:
assignee: fanguiju (fanguiju) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.