Clark, Robert Graham wrote: > Keystone configuration should not be world readable > [...] > ### Contacts / References ### > This OSSN : https://bugs.launchpad.net/ossn/+bug/1168252 > Original LaunchPad Bug : https://bugs.launchpad.net/devstack/+bug/1168252 > OpenStack Security ML : openstack-security at lists.openstack.org > OpenStack Security Group : https://launchpad.net/~openstack-ossg Looks good, but should probably also reference the CVE: CVE-2013-1977 - OpenStack keystone.conf insecure file permissions Cheers, -- Thierry