[Openstack-security] OpenStack Security Notes - Contributors Wanted
Nathan Kinder
nkinder at redhat.com
Wed Nov 20 15:53:54 UTC 2013
On 11/19/2013 11:33 PM, Clark, Robert Graham wrote:
>
> Great job on the OSSN Nathan, it looks very good, I've put one comment
> on it for a very minor change and then I'd say it's ready for publishing.
>
Thanks for the review! I'll make that correction this morning.
>
> I'm wondering - should I continue to publish OSSNs when they're ready
> or would you like to submit direct to the mailing lists?
>
I'm happy to submit them myself. Just let me know what lists you've
been publishing to so I make sure that I don't miss any of them.
Thanks,
-NGK
>
> *From:*Nathan Kinder [mailto:nkinder at redhat.com]
> *Sent:* 19 November 2013 19:33
> *To:* Sriram Subramanian
> *Cc:* Clark, Robert Graham; noloader at gmail.com;
> openstack-security at lists.openstack.org
> *Subject:* Re: [Openstack-security] OpenStack Security Notes -
> Contributors Wanted
>
> On 11/19/2013 10:58 AM, Sriram Subramanian wrote:
>
> Darn, you beat me on that bug:)
>
> Sorry. :) I've previously discussed this bug with some of the
> Keystone developers, so it seemed like one that I can easily handle.
> I'm just about finished writing up the first draft. This is my first
> OSSN, so I'd love for it to get a thorough review.
>
> Thanks,
> -NGK
>
> I will take https://bugs.launchpad.net/ossn/+bug/1227575
>
> Thanks,
>
> -Sriram
>
> On Tue, Nov 19, 2013 at 8:35 AM, Nathan Kinder <nkinder at redhat.com
> <mailto:nkinder at redhat.com>> wrote:
>
> On 11/19/2013 05:46 AM, Clark, Robert Graham wrote:
>
> Hi All,
>
> I've had a little downtime recently due to being horribly
> ill - I'm glad to say I've been feeling much better
> recently but I have a rather impressive pile of emails
> that I'm currently wading through. I have 3-4 people
> wanting to help out with the OSSNs, I've been really
> impressed with the response and I'm looking forward to
> seeing how this works moving forward. I'll send an email
> around those of you who wanted to help.
>
> My general thought is that I'll stay on to help out with
> OSSNs and generally co-ordinate the project. I'm looking
> for authors and editors to collaborate on individual
> OSSNs. My role would be to identify and accept new OSSNs,
> to occasionally author my own OSSNs and regularly edit/+1
> the OSSNs of others.
>
> So, to those of you who are interested in helping out, are
> you anticipating authoring (which normally includes some
> amount of research) or editing?
>
> I am fine with authoring.
>
>
>
> We currently have 3 OSSNs waiting to be written,
> https://bugs.launchpad.net/ossn/+bugs perhaps between you
> it would be possible to make a start on 1-2 of them. Each
> OSSN follows the same template
>
> I would be happy to work on this one:
>
> https://bugs.launchpad.net/ossn/+bug/1237989
>
> Thanks,
> -NGK
>
>
>
> Short title describing the issue
>
> ---
>
> ### Summary ###
> [One or two sentences discussing the issue, where it comes
> from and who it may affect.]
>
> ### Affected Services / Software ###
> [Freeform keywords, metadata, comma separated] Keystone,
> DevStack, Deployment
>
> ### Discussion ###
>
> [As much text as is required to describe the problem to a
> reasonably technical audience. This section should be
> written carefully and reviewed for content, grammar,
> spelling etc. When writing these sections consider that
> the OSSN will later be included in the OpenStack Security
> Guide, writing well here makes the process of mixing the
> OSSN into the Security Guide much easier later on. Code
> Snippets are welcome if they help illustrate the problem.
>
> ### Recommended Actions ###
> [Actions that should be taken to remediate or work around
> the problem, note that this will often include
> configuration snippets]
>
> ### Contacts / References ###
> This OSSN : [The URL of the OSSN]
> Original LaunchPad Bug : [The URL of the original
> Launchpad Bug, if there was one]
> OpenStack Security ML :
> openstack-security at lists.openstack.org
> <mailto:openstack-security at lists.openstack.org>
> OpenStack Security Group :
> https://launchpad.net/~openstack-ossg
> <https://launchpad.net/%7Eopenstack-ossg>
> CVE: [Any CVE]
>
> [Any other References]
>
> *From:*Sriram Subramanian [mailto:sriram at sriramhere.com]
> *Sent:* 14 November 2013 07:01
> *To:* noloader at gmail.com <mailto:noloader at gmail.com>
> *Cc:* Clark, Robert Graham;
> openstack-security at lists.openstack.org
> <mailto:openstack-security at lists.openstack.org>
> *Subject:* Re: [Openstack-security] OpenStack Security
> Notes - Contributors Wanted
>
> Rob - any emails yet? Are we meeting tomorrow?
>
> On Fri, Nov 8, 2013 at 2:59 AM, Sriram Subramanian
> <sriram at sriramhere.com <mailto:sriram at sriramhere.com>> wrote:
>
> Perfect.
>
> Rob - please send those emails out. Jeff and I will try to
> get this rolling, Safe travels!
>
> On Fri, Nov 8, 2013 at 3:02 PM, Jeffrey Walton
> <noloader at gmail.com <mailto:noloader at gmail.com>> wrote:
>
> Hi Robert,
>
> I'd be happy to help out with spare cycles.
>
> Jeff
>
>
> On Wed, Nov 6, 2013 at 11:08 AM, Clark, Robert Graham
> <robert.clark at hp.com <mailto:robert.clark at hp.com>> wrote:
> > Hi All,
> >
> > I'm looking for help with the OpenStack Security Notes.
> I currently am struggling to keep up with them and do all
> the other things I'm involved in. Individually they don't
> take that much time so with one or two people helping out
> they wouldn't be a significant burden.
> >
> > If anyone wants to run the management of this project
> and publishing the OSSNs I'd be happy to support them in
> an editorial capacity.
> >
> > Cheers
> > -Rob
> >
> > _______________________________________________
> > Openstack-security mailing list
> > Openstack-security at lists.openstack.org
> <mailto:Openstack-security at lists.openstack.org>
> >
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security
>
> _______________________________________________
> Openstack-security mailing list
> Openstack-security at lists.openstack.org
> <mailto:Openstack-security at lists.openstack.org>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security
>
>
>
> --
>
> Thanks,
>
> -Sriram
>
>
>
> --
>
> Thanks,
>
> -Sriram
>
>
>
> _______________________________________________
>
> Openstack-security mailing list
>
> Openstack-security at lists.openstack.org <mailto:Openstack-security at lists.openstack.org>
>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security
>
>
>
> --
>
> Thanks,
>
> -Sriram
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-security/attachments/20131120/4c40f192/attachment.html>
More information about the Openstack-security
mailing list