Uploaded image for project: 'Red Hat OpenStack Services on OpenShift'
  1. Red Hat OpenStack Services on OpenShift
  2. OSPRH-1069

[DEV] Audit Manila to look for non-compliant libraries

XMLWordPrintable

    • 5
    • False
    • Hide

      None

      Show
      None
    • False
    • Committed
    • ?
    • OSPRH-787 - FIPS Support in OSO 18.0
    • ?
    • ?
    • OSPPlanningCycle2, OSPPlanningCycle3
    • Storage; Manila

      There is currently a list of non-fips compliant libraries  [1] that the security team has been working on. There might be more libraries that are currently not on the list, but as the effort moves on, the list will grow up. We need to ensure that Manila is not using any non FIPS compliant library. We can look at the list, but we also must look at the code to ensure that we are not using any library that will break under FIPS.

      [1] https://etherpad.opendev.org/p/zed-ptg-fips-goal-compliance-audit

            cardasil@redhat.com Carlos da Silva
            cardasil@redhat.com Carlos da Silva
            rhos-dfg-storage-squad-manila
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: