summaryrefslogtreecommitdiffstats
path: root/doc/book-enea-nfv-access-dev-hardening-guide
diff options
context:
space:
mode:
authorMiruna Paun <Miruna.Paun@enea.com>2017-10-11 18:37:25 +0200
committerMiruna Paun <Miruna.Paun@enea.com>2017-10-11 18:37:25 +0200
commit19488aacc5852a47294f4b644da971a74f40f6d2 (patch)
tree962ee67f58e47b1ab0fcae68b5b6bdf03e53c818 /doc/book-enea-nfv-access-dev-hardening-guide
parentec334b3da53471e66fb4cb07920fb6614895b06b (diff)
downloadnfv-access-documentation-19488aacc5852a47294f4b644da971a74f40f6d2.tar.gz
Updated the ENFV Release notes and debugged building the OSRs
LXCR-8001 Signed-off-by: Miruna Paun <Miruna.Paun@enea.com>
Diffstat (limited to 'doc/book-enea-nfv-access-dev-hardening-guide')
-rw-r--r--doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml22
-rw-r--r--doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml173
2 files changed, 94 insertions, 101 deletions
diff --git a/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml b/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml
index 2e008e3..f444cd5 100644
--- a/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml
+++ b/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml
@@ -7,8 +7,8 @@
7 <section id="broken_algorithms"> 7 <section id="broken_algorithms">
8 <title>Broken Algorithms</title> 8 <title>Broken Algorithms</title>
9 9
10 <para>Make sure that algorithms that are broken in regards to security are 10 <para>Algorithms that are broken in regards to security must not be used.
11 not used.</para> 11 The following should be verified to prevent this issue:</para>
12 12
13 <remark>Ask Sona/Casc if the algorithms listed below are the broken ones 13 <remark>Ask Sona/Casc if the algorithms listed below are the broken ones
14 to check for or if they're the ones that are broken to begin with and if 14 to check for or if they're the ones that are broken to begin with and if
@@ -57,7 +57,7 @@
57 <title>System Installation</title> 57 <title>System Installation</title>
58 58
59 <para>Enea NFV Access Images should be check summed with SHA512 and/or a 59 <para>Enea NFV Access Images should be check summed with SHA512 and/or a
60 signed GPG key. See <ulink 60 signed GPG key. Please see <ulink
61 url="https://www.openssl.org/source/">https://www.openssl.org/source/</ulink> 61 url="https://www.openssl.org/source/">https://www.openssl.org/source/</ulink>
62 for more details on how to proceed.</para> 62 for more details on how to proceed.</para>
63 </section> 63 </section>
@@ -67,8 +67,8 @@
67 67
68 <para>Applying security patches is an important part of security hardening 68 <para>Applying security patches is an important part of security hardening
69 and maintenance. Enea backports all known critical vulnerabilities within 69 and maintenance. Enea backports all known critical vulnerabilities within
70 a reasonable time frame if not immeditately, and makes them available to 70 a reasonable time frame and makes them available to users for
71 users for updates/upgrades.</para> 71 updates/upgrades.</para>
72 72
73 <para>Prepare the system for regular updates in the following 73 <para>Prepare the system for regular updates in the following
74 manner:</para> 74 manner:</para>
@@ -89,9 +89,9 @@
89 <section id="openembedded_security_layer"> 89 <section id="openembedded_security_layer">
90 <title>OpenEmbedded meta-security layer</title> 90 <title>OpenEmbedded meta-security layer</title>
91 91
92 <para>An OpenEmbedded meta-security layer provides many hardening tools. 92 <para>An OpenEmbedded meta-security layer provides many hardening open
93 These tools are open source packages suited for embedded devices. Below is 93 source packages suited for embedded devices. Below is a list of several
94 a list of several packages included in meta-security layer:</para> 94 packages included in meta-security layer:</para>
95 95
96 <itemizedlist> 96 <itemizedlist>
97 <listitem> 97 <listitem>
@@ -139,11 +139,11 @@
139 </itemizedlist> 139 </itemizedlist>
140 140
141 <para>For more information about tools supported in the meta-security 141 <para>For more information about tools supported in the meta-security
142 layer please refer to <emphasis role="bold">Introduction to the Tools in 142 layer please refer to the chapter: <emphasis role="bold">Introduction to
143 meta-security layer</emphasis>.</para> 143 the Tools in meta-security layer</emphasis>.</para>
144 144
145 <remark>change the bold text to point to the section/chapter in question 145 <remark>change the bold text to point to the section/chapter in question
146 through an xref</remark> 146 through an xref refering to chapter 3 of the same title.</remark>
147 </section> 147 </section>
148 148
149 <section id="ker-hardening"> 149 <section id="ker-hardening">
diff --git a/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml b/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml
index bbf203f..aaeb6d6 100644
--- a/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml
+++ b/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml
@@ -4,124 +4,117 @@
4<chapter id="overview"> 4<chapter id="overview">
5 <title>Overview</title> 5 <title>Overview</title>
6 6
7 <para>This document describes the activities needed for securing/hardening 7 <para>This document describes the activities needed for securing Enea NFV
8 Enea NFV Access platform by ESRT/ developers in order to fulfill the 8 Access platform by ESRT/ developers in order to fulfill the security
9 security requirements specified in <ulink 9 requirements specified in <ulink
10 url="https://eneaissues.enea.com/browse/CPDX-2632">CPDX-2632</ulink> (see 10 url="https://eneaissues.enea.com/browse/CPDX-2632">CPDX-2632</ulink> (see
11 the Security section under Pre-Study).</para> 11 the Security section under Pre-Study). For further information about the
12 hardening features available, please read <ulink
13 url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&amp;dDocName=055550&amp;Rendition=Primary&amp;RevisionSelectionMethod=Latest"><trademark
14 class="registered">Enea</trademark> NFV Access User's Hardening
15 Guide</ulink>.</para>
12 16
13 <section id="intro"> 17 <section id="rev_hist">
14 <title>Introduction</title> 18 <title>Revision History</title>
15 19
16 <para>This document contains a checklist to use when hardening Enea NFV 20 <table>
17 Access. Please read <ulink 21 <tgroup cols="4">
18 url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&amp;dDocName=055550&amp;Rendition=Primary&amp;RevisionSelectionMethod=Latest"><trademark 22 <colspec align="center" />
19 class="registered">Enea</trademark> NFV Access User's Hardening
20 Guide</ulink> for further information about the hardening features
21 available.</para>
22 23
23 <section id="rev-hist"> 24 <thead>
24 <title>Revision History</title> 25 <row>
26 <entry align="center">Revision</entry>
25 27
26 <table> 28 <entry align="center">Author</entry>
27 <tgroup cols="4">
28 <colspec align="center" />
29 29
30 <thead> 30 <entry align="center">Date</entry>
31 <row>
32 <entry align="center">Revision</entry>
33 31
34 <entry align="center">Author</entry> 32 <entry align="center">Purpose for Revision</entry>
33 </row>
34 </thead>
35 35
36 <entry align="center">Date</entry> 36 <tbody>
37 <row>
38 <entry>4</entry>
37 39
38 <entry align="center">Purpose for Revision</entry> 40 <entry>Sona Sarmadi</entry>
39 </row>
40 </thead>
41 41
42 <tbody> 42 <entry>2017-09-07</entry>
43 <row>
44 <entry>4</entry>
45 43
46 <entry>Sona Sarmadi</entry> 44 <entry>Added Appendix, sec 4.</entry>
45 </row>
47 46
48 <entry>2017-09-07</entry> 47 <row>
48 <entry>3</entry>
49 49
50 <entry>Added Appendix, sec 4.</entry> 50 <entry>Sona Sarmadi</entry>
51 </row>
52 51
53 <row> 52 <entry>2017-09-05</entry>
54 <entry>3</entry>
55 53
56 <entry>Sona Sarmadi</entry> 54 <entry>Added introduction to the tools in the Open Embedded
55 meta-security layer Fixed 1.1 Revision History.</entry>
56 </row>
57 57
58 <entry>2017-09-05</entry> 58 <row>
59 <entry>2</entry>
59 60
60 <entry>Added introduction to the tools in the Open Embedded 61 <entry>Sona Sarmadi</entry>
61 meta-security layer Fixed 1.1 Revision History.</entry>
62 </row>
63 62
64 <row> 63 <entry>2017-08-30</entry>
65 <entry>2</entry>
66 64
67 <entry>Sona Sarmadi</entry> 65 <entry>Made this document as a guideline for Enea NFV Access
66 developers. Moved section 2 and 3 to a new document (a guideline
67 only for users).</entry>
68 </row>
68 69
69 <entry>2017-08-30</entry> 70 <row>
71 <entry>1</entry>
70 72
71 <entry>Made this document as a guideline for Enea NFV Access 73 <entry>Sona Sarmadi</entry>
72 developers. Moved section 2 and 3 to a new document (a guideline
73 only for users).</entry>
74 </row>
75 74
76 <row> 75 <entry>2017-08-20</entry>
77 <entry>1</entry>
78 76
79 <entry>Sona Sarmadi</entry> 77 <entry>Initial Revision</entry>
80 78 </row>
81 <entry>2017-08-20</entry> 79 </tbody>
82 80 </tgroup>
83 <entry>Initial Revision</entry> 81 </table>
84 </row> 82 </section>
85 </tbody>
86 </tgroup>
87 </table>
88 </section>
89
90 <section id="references">
91 <title>References</title>
92
93 <itemizedlist>
94 <listitem>
95 <para><ulink
96 url="https://www.sans.org/reading-room/whitepapers/linux/linux-kernel-hardening-1294">SANS
97 linux-kernel-hardening-1294</ulink></para>
98 </listitem>
99
100 <listitem>
101 <para><ulink
102 url="https://lwn.net/Articles/705262/">lwn.net/Articles/705262/</ulink></para>
103 </listitem>
104 83
105 <listitem> 84 <section id="references">
106 <para><ulink 85 <title>References</title>
107 url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&amp;dDocName=055550&amp;Rendition=Primary&amp;RevisionSelectionMethod=Latest">Hardening 86
108 Guide for Users of Enea NFV Access</ulink><remark>Not sure if this 87 <itemizedlist>
109 should remain an ulink to eneadoc or be changed to an olink to the 88 <listitem>
110 guide in question.</remark></para> 89 <para><ulink
111 </listitem> 90 url="https://www.sans.org/reading-room/whitepapers/linux/linux-kernel-hardening-1294">SANS
112 </itemizedlist> 91 linux-kernel-hardening-1294</ulink></para>
113 </section> 92 </listitem>
93
94 <listitem>
95 <para><ulink
96 url="https://lwn.net/Articles/705262/">lwn.net/Articles/705262/</ulink></para>
97 </listitem>
98
99 <listitem>
100 <para><ulink
101 url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&amp;dDocName=055550&amp;Rendition=Primary&amp;RevisionSelectionMethod=Latest">Hardening
102 Guide for Users of Enea NFV Access</ulink><remark>Not sure if this
103 should remain an ulink to eneadoc or be changed to an olink to the
104 guide in question.</remark></para>
105 </listitem>
106 </itemizedlist>
107 </section>
114 108
115 <section id="def_acro"> 109 <section id="def_acro">
116 <title>Definitions and Acronyms</title> 110 <title>Definitions and Acronyms</title>
117 111
118 <para>Definitions</para> 112 <para>Definitions:</para>
119 113
120 <para>[FIXME]</para> 114 <para>[FIXME]</para>
121 115
122 <para>Acronyms</para> 116 <para>Acronyms:</para>
123 117
124 <para>[FIXME]</para> 118 <para>[FIXME]</para>
125 </section>
126 </section> 119 </section>
127</chapter> \ No newline at end of file 120</chapter> \ No newline at end of file