Security guidelines #174
Merged
Security guidelines #174
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
drigodwin
suggested changes
Apr 26, 2017
guide/ops/security-guidelines.md
Outdated
| ### VM Users | ||
|
|
||
| It is strongly discouraged to use the root user on VMs being created or managed by Brooklyn. | ||
| SSH access should be delegated on rare cases such as initial Apache Brooklyn setup and other maintenance occasions. |
Member
There was a problem hiding this comment.
I'm not sure what you mean by delegated here?
guide/ops/security-guidelines.md
Outdated
| SSH access should be delegated on rare cases such as initial Apache Brooklyn setup and other maintenance occasions. | ||
|
|
||
| Avoid putting config a lot of options in `etc/brooklyn.cfg` which one would later need to ssh and change. | ||
| Keep location configuration it is preferable to use [Locations in the Catalog](./catalog/#locations-in-the-catalog). |
Member
There was a problem hiding this comment.
I think these two lines need rewording but I'm not sure what they're adding. etc/brooklyn.cfg is a config file in the Karaf Brooklyn distro which is not currently the default. I'm not sure we're advising people put locations in there anywhere.
Ssh access should be strongly limited.
drigodwin
approved these changes
Apr 27, 2017
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Ssh access should be strongly limited.