diff options
author | Miruna Paun <Miruna.Paun@enea.com> | 2017-10-11 18:37:25 +0200 |
---|---|---|
committer | Miruna Paun <Miruna.Paun@enea.com> | 2017-10-11 18:37:25 +0200 |
commit | 19488aacc5852a47294f4b644da971a74f40f6d2 (patch) | |
tree | 962ee67f58e47b1ab0fcae68b5b6bdf03e53c818 /doc/book-enea-nfv-access-dev-hardening-guide | |
parent | ec334b3da53471e66fb4cb07920fb6614895b06b (diff) | |
download | nfv-access-documentation-19488aacc5852a47294f4b644da971a74f40f6d2.tar.gz |
Updated the ENFV Release notes and debugged building the OSRs
LXCR-8001
Signed-off-by: Miruna Paun <Miruna.Paun@enea.com>
Diffstat (limited to 'doc/book-enea-nfv-access-dev-hardening-guide')
-rw-r--r-- | doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml | 22 | ||||
-rw-r--r-- | doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml | 173 |
2 files changed, 94 insertions, 101 deletions
diff --git a/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml b/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml index 2e008e3..f444cd5 100644 --- a/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml +++ b/doc/book-enea-nfv-access-dev-hardening-guide/doc/hardening_checklist.xml | |||
@@ -7,8 +7,8 @@ | |||
7 | <section id="broken_algorithms"> | 7 | <section id="broken_algorithms"> |
8 | <title>Broken Algorithms</title> | 8 | <title>Broken Algorithms</title> |
9 | 9 | ||
10 | <para>Make sure that algorithms that are broken in regards to security are | 10 | <para>Algorithms that are broken in regards to security must not be used. |
11 | not used.</para> | 11 | The following should be verified to prevent this issue:</para> |
12 | 12 | ||
13 | <remark>Ask Sona/Casc if the algorithms listed below are the broken ones | 13 | <remark>Ask Sona/Casc if the algorithms listed below are the broken ones |
14 | to check for or if they're the ones that are broken to begin with and if | 14 | to check for or if they're the ones that are broken to begin with and if |
@@ -57,7 +57,7 @@ | |||
57 | <title>System Installation</title> | 57 | <title>System Installation</title> |
58 | 58 | ||
59 | <para>Enea NFV Access Images should be check summed with SHA512 and/or a | 59 | <para>Enea NFV Access Images should be check summed with SHA512 and/or a |
60 | signed GPG key. See <ulink | 60 | signed GPG key. Please see <ulink |
61 | url="https://www.openssl.org/source/">https://www.openssl.org/source/</ulink> | 61 | url="https://www.openssl.org/source/">https://www.openssl.org/source/</ulink> |
62 | for more details on how to proceed.</para> | 62 | for more details on how to proceed.</para> |
63 | </section> | 63 | </section> |
@@ -67,8 +67,8 @@ | |||
67 | 67 | ||
68 | <para>Applying security patches is an important part of security hardening | 68 | <para>Applying security patches is an important part of security hardening |
69 | and maintenance. Enea backports all known critical vulnerabilities within | 69 | and maintenance. Enea backports all known critical vulnerabilities within |
70 | a reasonable time frame if not immeditately, and makes them available to | 70 | a reasonable time frame and makes them available to users for |
71 | users for updates/upgrades.</para> | 71 | updates/upgrades.</para> |
72 | 72 | ||
73 | <para>Prepare the system for regular updates in the following | 73 | <para>Prepare the system for regular updates in the following |
74 | manner:</para> | 74 | manner:</para> |
@@ -89,9 +89,9 @@ | |||
89 | <section id="openembedded_security_layer"> | 89 | <section id="openembedded_security_layer"> |
90 | <title>OpenEmbedded meta-security layer</title> | 90 | <title>OpenEmbedded meta-security layer</title> |
91 | 91 | ||
92 | <para>An OpenEmbedded meta-security layer provides many hardening tools. | 92 | <para>An OpenEmbedded meta-security layer provides many hardening open |
93 | These tools are open source packages suited for embedded devices. Below is | 93 | source packages suited for embedded devices. Below is a list of several |
94 | a list of several packages included in meta-security layer:</para> | 94 | packages included in meta-security layer:</para> |
95 | 95 | ||
96 | <itemizedlist> | 96 | <itemizedlist> |
97 | <listitem> | 97 | <listitem> |
@@ -139,11 +139,11 @@ | |||
139 | </itemizedlist> | 139 | </itemizedlist> |
140 | 140 | ||
141 | <para>For more information about tools supported in the meta-security | 141 | <para>For more information about tools supported in the meta-security |
142 | layer please refer to <emphasis role="bold">Introduction to the Tools in | 142 | layer please refer to the chapter: <emphasis role="bold">Introduction to |
143 | meta-security layer</emphasis>.</para> | 143 | the Tools in meta-security layer</emphasis>.</para> |
144 | 144 | ||
145 | <remark>change the bold text to point to the section/chapter in question | 145 | <remark>change the bold text to point to the section/chapter in question |
146 | through an xref</remark> | 146 | through an xref refering to chapter 3 of the same title.</remark> |
147 | </section> | 147 | </section> |
148 | 148 | ||
149 | <section id="ker-hardening"> | 149 | <section id="ker-hardening"> |
diff --git a/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml b/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml index bbf203f..aaeb6d6 100644 --- a/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml +++ b/doc/book-enea-nfv-access-dev-hardening-guide/doc/introduction.xml | |||
@@ -4,124 +4,117 @@ | |||
4 | <chapter id="overview"> | 4 | <chapter id="overview"> |
5 | <title>Overview</title> | 5 | <title>Overview</title> |
6 | 6 | ||
7 | <para>This document describes the activities needed for securing/hardening | 7 | <para>This document describes the activities needed for securing Enea NFV |
8 | Enea NFV Access platform by ESRT/ developers in order to fulfill the | 8 | Access platform by ESRT/ developers in order to fulfill the security |
9 | security requirements specified in <ulink | 9 | requirements specified in <ulink |
10 | url="https://eneaissues.enea.com/browse/CPDX-2632">CPDX-2632</ulink> (see | 10 | url="https://eneaissues.enea.com/browse/CPDX-2632">CPDX-2632</ulink> (see |
11 | the Security section under Pre-Study).</para> | 11 | the Security section under Pre-Study). For further information about the |
12 | hardening features available, please read <ulink | ||
13 | url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&dDocName=055550&Rendition=Primary&RevisionSelectionMethod=Latest"><trademark | ||
14 | class="registered">Enea</trademark> NFV Access User's Hardening | ||
15 | Guide</ulink>.</para> | ||
12 | 16 | ||
13 | <section id="intro"> | 17 | <section id="rev_hist"> |
14 | <title>Introduction</title> | 18 | <title>Revision History</title> |
15 | 19 | ||
16 | <para>This document contains a checklist to use when hardening Enea NFV | 20 | <table> |
17 | Access. Please read <ulink | 21 | <tgroup cols="4"> |
18 | url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&dDocName=055550&Rendition=Primary&RevisionSelectionMethod=Latest"><trademark | 22 | <colspec align="center" /> |
19 | class="registered">Enea</trademark> NFV Access User's Hardening | ||
20 | Guide</ulink> for further information about the hardening features | ||
21 | available.</para> | ||
22 | 23 | ||
23 | <section id="rev-hist"> | 24 | <thead> |
24 | <title>Revision History</title> | 25 | <row> |
26 | <entry align="center">Revision</entry> | ||
25 | 27 | ||
26 | <table> | 28 | <entry align="center">Author</entry> |
27 | <tgroup cols="4"> | ||
28 | <colspec align="center" /> | ||
29 | 29 | ||
30 | <thead> | 30 | <entry align="center">Date</entry> |
31 | <row> | ||
32 | <entry align="center">Revision</entry> | ||
33 | 31 | ||
34 | <entry align="center">Author</entry> | 32 | <entry align="center">Purpose for Revision</entry> |
33 | </row> | ||
34 | </thead> | ||
35 | 35 | ||
36 | <entry align="center">Date</entry> | 36 | <tbody> |
37 | <row> | ||
38 | <entry>4</entry> | ||
37 | 39 | ||
38 | <entry align="center">Purpose for Revision</entry> | 40 | <entry>Sona Sarmadi</entry> |
39 | </row> | ||
40 | </thead> | ||
41 | 41 | ||
42 | <tbody> | 42 | <entry>2017-09-07</entry> |
43 | <row> | ||
44 | <entry>4</entry> | ||
45 | 43 | ||
46 | <entry>Sona Sarmadi</entry> | 44 | <entry>Added Appendix, sec 4.</entry> |
45 | </row> | ||
47 | 46 | ||
48 | <entry>2017-09-07</entry> | 47 | <row> |
48 | <entry>3</entry> | ||
49 | 49 | ||
50 | <entry>Added Appendix, sec 4.</entry> | 50 | <entry>Sona Sarmadi</entry> |
51 | </row> | ||
52 | 51 | ||
53 | <row> | 52 | <entry>2017-09-05</entry> |
54 | <entry>3</entry> | ||
55 | 53 | ||
56 | <entry>Sona Sarmadi</entry> | 54 | <entry>Added introduction to the tools in the Open Embedded |
55 | meta-security layer Fixed 1.1 Revision History.</entry> | ||
56 | </row> | ||
57 | 57 | ||
58 | <entry>2017-09-05</entry> | 58 | <row> |
59 | <entry>2</entry> | ||
59 | 60 | ||
60 | <entry>Added introduction to the tools in the Open Embedded | 61 | <entry>Sona Sarmadi</entry> |
61 | meta-security layer Fixed 1.1 Revision History.</entry> | ||
62 | </row> | ||
63 | 62 | ||
64 | <row> | 63 | <entry>2017-08-30</entry> |
65 | <entry>2</entry> | ||
66 | 64 | ||
67 | <entry>Sona Sarmadi</entry> | 65 | <entry>Made this document as a guideline for Enea NFV Access |
66 | developers. Moved section 2 and 3 to a new document (a guideline | ||
67 | only for users).</entry> | ||
68 | </row> | ||
68 | 69 | ||
69 | <entry>2017-08-30</entry> | 70 | <row> |
71 | <entry>1</entry> | ||
70 | 72 | ||
71 | <entry>Made this document as a guideline for Enea NFV Access | 73 | <entry>Sona Sarmadi</entry> |
72 | developers. Moved section 2 and 3 to a new document (a guideline | ||
73 | only for users).</entry> | ||
74 | </row> | ||
75 | 74 | ||
76 | <row> | 75 | <entry>2017-08-20</entry> |
77 | <entry>1</entry> | ||
78 | 76 | ||
79 | <entry>Sona Sarmadi</entry> | 77 | <entry>Initial Revision</entry> |
80 | 78 | </row> | |
81 | <entry>2017-08-20</entry> | 79 | </tbody> |
82 | 80 | </tgroup> | |
83 | <entry>Initial Revision</entry> | 81 | </table> |
84 | </row> | 82 | </section> |
85 | </tbody> | ||
86 | </tgroup> | ||
87 | </table> | ||
88 | </section> | ||
89 | |||
90 | <section id="references"> | ||
91 | <title>References</title> | ||
92 | |||
93 | <itemizedlist> | ||
94 | <listitem> | ||
95 | <para><ulink | ||
96 | url="https://www.sans.org/reading-room/whitepapers/linux/linux-kernel-hardening-1294">SANS | ||
97 | linux-kernel-hardening-1294</ulink></para> | ||
98 | </listitem> | ||
99 | |||
100 | <listitem> | ||
101 | <para><ulink | ||
102 | url="https://lwn.net/Articles/705262/">lwn.net/Articles/705262/</ulink></para> | ||
103 | </listitem> | ||
104 | 83 | ||
105 | <listitem> | 84 | <section id="references"> |
106 | <para><ulink | 85 | <title>References</title> |
107 | url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&dDocName=055550&Rendition=Primary&RevisionSelectionMethod=Latest">Hardening | 86 | |
108 | Guide for Users of Enea NFV Access</ulink><remark>Not sure if this | 87 | <itemizedlist> |
109 | should remain an ulink to eneadoc or be changed to an olink to the | 88 | <listitem> |
110 | guide in question.</remark></para> | 89 | <para><ulink |
111 | </listitem> | 90 | url="https://www.sans.org/reading-room/whitepapers/linux/linux-kernel-hardening-1294">SANS |
112 | </itemizedlist> | 91 | linux-kernel-hardening-1294</ulink></para> |
113 | </section> | 92 | </listitem> |
93 | |||
94 | <listitem> | ||
95 | <para><ulink | ||
96 | url="https://lwn.net/Articles/705262/">lwn.net/Articles/705262/</ulink></para> | ||
97 | </listitem> | ||
98 | |||
99 | <listitem> | ||
100 | <para><ulink | ||
101 | url="https://eneadoc.enea.com/idc/idcplg?IdcService=GET_FILE&dDocName=055550&Rendition=Primary&RevisionSelectionMethod=Latest">Hardening | ||
102 | Guide for Users of Enea NFV Access</ulink><remark>Not sure if this | ||
103 | should remain an ulink to eneadoc or be changed to an olink to the | ||
104 | guide in question.</remark></para> | ||
105 | </listitem> | ||
106 | </itemizedlist> | ||
107 | </section> | ||
114 | 108 | ||
115 | <section id="def_acro"> | 109 | <section id="def_acro"> |
116 | <title>Definitions and Acronyms</title> | 110 | <title>Definitions and Acronyms</title> |
117 | 111 | ||
118 | <para>Definitions</para> | 112 | <para>Definitions:</para> |
119 | 113 | ||
120 | <para>[FIXME]</para> | 114 | <para>[FIXME]</para> |
121 | 115 | ||
122 | <para>Acronyms</para> | 116 | <para>Acronyms:</para> |
123 | 117 | ||
124 | <para>[FIXME]</para> | 118 | <para>[FIXME]</para> |
125 | </section> | ||
126 | </section> | 119 | </section> |
127 | </chapter> \ No newline at end of file | 120 | </chapter> \ No newline at end of file |