<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Preformatted Char";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLPreformattedChar
{mso-style-name:"HTML Preformatted Char";
mso-style-priority:99;
mso-style-link:"HTML Preformatted";
font-family:Consolas;
color:black;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor="white" lang="EN-GB" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">Great job on the OSSN Nathan, it looks very good, I’ve put one comment on it for a very minor change and then I’d say it’s ready
for publishing.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US">I’m wondering - should I continue to publish OSSNs when they’re ready or would you like to submit direct to the mailing lists?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D;mso-fareast-language:EN-US"><o:p> </o:p></span></p>
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext">From:</span></b><span lang="EN-US" style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:windowtext"> Nathan Kinder [mailto:nkinder@redhat.com]
<br>
<b>Sent:</b> 19 November 2013 19:33<br>
<b>To:</b> Sriram Subramanian<br>
<b>Cc:</b> Clark, Robert Graham; noloader@gmail.com; openstack-security@lists.openstack.org<br>
<b>Subject:</b> Re: [Openstack-security] OpenStack Security Notes - Contributors Wanted<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On 11/19/2013 10:58 AM, Sriram Subramanian wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal">Darn, you beat me on that bug:)<o:p></o:p></p>
</div>
</blockquote>
<p class="MsoNormal">Sorry. :) I've previously discussed this bug with some of the Keystone developers, so it seemed like one that I can easily handle. I'm just about finished writing up the first draft. This is my first OSSN, so I'd love for it to get a
thorough review.<br>
<br>
Thanks,<br>
-NGK<br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I will take <a href="https://bugs.launchpad.net/ossn/+bug/1227575">https://bugs.launchpad.net/ossn/+bug/1227575</a><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">-Sriram<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Tue, Nov 19, 2013 at 8:35 AM, Nathan Kinder <<a href="mailto:nkinder@redhat.com" target="_blank">nkinder@redhat.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0cm 0cm 0cm 6.0pt;margin-left:4.8pt;margin-right:0cm">
<div>
<div>
<div>
<p class="MsoNormal">On 11/19/2013 05:46 AM, Clark, Robert Graham wrote:<o:p></o:p></p>
</div>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">Hi All,</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">I’ve had a little downtime recently due to being horribly ill - I’m glad to say I’ve been feeling
much better recently but I have a rather impressive pile of emails that I’m currently wading through. I have 3-4 people wanting to help out with the OSSNs, I’ve been really impressed with the response and I’m looking forward to seeing how this works moving
forward. I’ll send an email around those of you who wanted to help.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">My general thought is that I’ll stay on to help out with OSSNs and generally co-ordinate the project.
I’m looking for authors and editors to collaborate on individual OSSNs. My role would be to identify and accept new OSSNs, to occasionally author my own OSSNs and regularly edit/+1 the OSSNs of others.</span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">So, to those of you who are interested in helping out, are you anticipating authoring (which normally
includes some amount of research) or editing?</span><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal">I am fine with authoring. <o:p></o:p></p>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D">We currently have 3 OSSNs
</span><span style="font-size:10.0pt;font-family:"Calibri","sans-serif";color:#1F497D">waiting to be written,
<a href="https://bugs.launchpad.net/ossn/+bugs" target="_blank"><span style="color:#1F497D">https://bugs.launchpad.net/ossn/+bugs</span></a> perhaps between you it would be possible to make a start on 1-2 of them. Each OSSN follows the same template</span><o:p></o:p></p>
</div>
</blockquote>
</div>
<p class="MsoNormal">I would be happy to work on this one:<br>
<br>
<a href="https://bugs.launchpad.net/ossn/+bug/1237989" target="_blank">https://bugs.launchpad.net/ossn/+bug/1237989</a><br>
<br>
Thanks,<br>
-NGK <o:p></o:p></p>
<div>
<div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<blockquote style="margin-top:5.0pt;margin-bottom:5.0pt">
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p style="margin-bottom:9.6pt;line-height:13.5pt;background:white">Short title describing the issue<o:p></o:p></p>
<p style="margin-bottom:9.6pt;line-height:13.5pt;background:white">---<o:p></o:p></p>
<p>### Summary ###<br>
[One or two sentences discussing the issue, where it comes from and who it may affect.]<o:p></o:p></p>
<p>### Affected Services / Software ###<br>
[Freeform keywords, metadata, comma separated] Keystone, DevStack, Deployment<o:p></o:p></p>
<p>### Discussion ###<o:p></o:p></p>
<p style="margin-bottom:9.6pt;line-height:13.5pt;background:white">[As much text as is required to describe the problem to a reasonably technical audience. This section should be written carefully and reviewed for content, grammar, spelling etc. When writing
these sections consider that the OSSN will later be included in the OpenStack Security Guide, writing well here makes the process of mixing the OSSN into the Security Guide much easier later on. Code Snippets are welcome if they help illustrate the problem.<o:p></o:p></p>
<p>### Recommended Actions ###<br>
[Actions that should be taken to remediate or work around the problem, note that this will often include configuration snippets]<o:p></o:p></p>
<p>### Contacts / References ###<br>
This OSSN : [The URL of the OSSN]<br>
Original LaunchPad Bug : [The URL of the original Launchpad Bug, if there was one]<br>
OpenStack Security ML : <a href="mailto:openstack-security@lists.openstack.org" target="_blank">
openstack-security@lists.openstack.org</a><br>
OpenStack Security Group : <a href="https://launchpad.net/%7Eopenstack-ossg" target="_blank"><span style="color:#0033AA">https://launchpad.net/~openstack-ossg</span></a><br>
CVE: [Any CVE]<o:p></o:p></p>
<p style="margin-bottom:9.6pt;line-height:13.5pt;background:white">[Any other References]<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D"> </span><o:p></o:p></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt">
<div>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span lang="EN-US" style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Sriram
Subramanian [<a href="mailto:sriram@sriramhere.com" target="_blank">mailto:sriram@sriramhere.com</a>]
<br>
<b>Sent:</b> 14 November 2013 07:01<br>
<b>To:</b> <a href="mailto:noloader@gmail.com" target="_blank">noloader@gmail.com</a><br>
<b>Cc:</b> Clark, Robert Graham; <a href="mailto:openstack-security@lists.openstack.org" target="_blank">
openstack-security@lists.openstack.org</a><br>
<b>Subject:</b> Re: [Openstack-security] OpenStack Security Notes - Contributors Wanted</span><o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Rob - any emails yet? Are we meeting tomorrow?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Fri, Nov 8, 2013 at 2:59 AM, Sriram Subramanian <<a href="mailto:sriram@sriramhere.com" target="_blank">sriram@sriramhere.com</a>> wrote:<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Perfect.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Rob - please send those emails out. Jeff and I will try to get this rolling, Safe travels!<o:p></o:p></p>
</div>
</div>
<div>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;margin-bottom:12.0pt"> <o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">On Fri, Nov 8, 2013 at 3:02 PM, Jeffrey Walton <<a href="mailto:noloader@gmail.com" target="_blank">noloader@gmail.com</a>> wrote:<o:p></o:p></p>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Hi Robert,<br>
<br>
I'd be happy to help out with spare cycles.<br>
<br>
Jeff<o:p></o:p></p>
<div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
On Wed, Nov 6, 2013 at 11:08 AM, Clark, Robert Graham<br>
<<a href="mailto:robert.clark@hp.com" target="_blank">robert.clark@hp.com</a>> wrote:<br>
> Hi All,<br>
><br>
> I’m looking for help with the OpenStack Security Notes. I currently am struggling to keep up with them and do all the other things I’m involved in. Individually they don’t take that much time so with one or two people helping out they wouldn’t be a significant
burden.<br>
><br>
> If anyone wants to run the management of this project and publishing the OSSNs I’d be happy to support them in an editorial capacity.<br>
><br>
> Cheers<br>
> -Rob<br>
><br>
> _______________________________________________<br>
> Openstack-security mailing list<br>
> <a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><br>
<br>
_______________________________________________<br>
Openstack-security mailing list<br>
<a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
<br clear="all">
<o:p></o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888">--
</span><o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888">Thanks,</span><o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><span style="color:#888888">-Sriram</span><o:p></o:p></p>
</div>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto"> <o:p></o:p></p>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">--
<o:p></o:p></p>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">Thanks,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">-Sriram<o:p></o:p></p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<o:p></o:p></p>
<pre>_______________________________________________<o:p></o:p></pre>
<pre>Openstack-security mailing list<o:p></o:p></pre>
<pre><a href="mailto:Openstack-security@lists.openstack.org" target="_blank">Openstack-security@lists.openstack.org</a><o:p></o:p></pre>
<pre><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a><o:p></o:p></pre>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal">Thanks,<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">-Sriram<o:p></o:p></p>
</div>
</div>
</blockquote>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>