docs: add user facing docs for secret passing and authorization controls

[PATCH 0/4] docs: add user facing docs for secret passing and authorization controls

Posted by Daniel P. Berrangé 2 years, 11 months ago

These are an important of the overall QEMU network backend security
controls but never previously documented aside from in blog posts.

Daniel P. Berrangé (4):
  docs: document how to pass secret data to QEMU
  docs: document usage of the authorization framework
  docs: recommend SCRAM-SHA-256 SASL mech instead of SHA-1 variant
  sasl: remove comment about obsolete kerberos versions

 docs/system/authz.rst        | 263 +++++++++++++++++++++++++++++++++++
 docs/system/index.rst        |   2 +
 docs/system/secrets.rst      | 162 +++++++++++++++++++++
 docs/system/vnc-security.rst |   7 +-
 qemu.sasl                    |  15 +-
 5 files changed, 437 insertions(+), 12 deletions(-)
 create mode 100644 docs/system/authz.rst
 create mode 100644 docs/system/secrets.rst

-- 
2.31.1

Re: [PATCH 0/4] docs: add user facing docs for secret passing and authorization controls

Posted by Daniel P. Berrangé 2 years, 10 months ago

ping for any reviewers for docs

On Fri, May 14, 2021 at 06:31:06PM +0100, Daniel P. Berrangé wrote:
> These are an important of the overall QEMU network backend security
> controls but never previously documented aside from in blog posts.
> 
> Daniel P. Berrangé (4):
>   docs: document how to pass secret data to QEMU
>   docs: document usage of the authorization framework
>   docs: recommend SCRAM-SHA-256 SASL mech instead of SHA-1 variant
>   sasl: remove comment about obsolete kerberos versions
> 
>  docs/system/authz.rst        | 263 +++++++++++++++++++++++++++++++++++
>  docs/system/index.rst        |   2 +
>  docs/system/secrets.rst      | 162 +++++++++++++++++++++
>  docs/system/vnc-security.rst |   7 +-
>  qemu.sasl                    |  15 +-
>  5 files changed, 437 insertions(+), 12 deletions(-)
>  create mode 100644 docs/system/authz.rst
>  create mode 100644 docs/system/secrets.rst
> 
> -- 
> 2.31.1
> 
> 

Regards,
Daniel
-- 
|: https://berrange.com      -o-    https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org         -o-            https://fstop138.berrange.com :|
|: https://entangle-photo.org    -o-    https://www.instagram.com/dberrange :|

Re: [PATCH 0/4] docs: add user facing docs for secret passing and authorization controls

Posted by Marc-André Lureau 2 years, 10 months ago

On Fri, Jun 4, 2021 at 12:44 PM Daniel P. Berrangé <berrange@redhat.com>
wrote:

> ping for any reviewers for docs
>
> On Fri, May 14, 2021 at 06:31:06PM +0100, Daniel P. Berrangé wrote:
> > These are an important of the overall QEMU network backend security
> > controls but never previously documented aside from in blog posts.
> >
> > Daniel P. Berrangé (4):
> >   docs: document how to pass secret data to QEMU
> >   docs: document usage of the authorization framework
> >   docs: recommend SCRAM-SHA-256 SASL mech instead of SHA-1 variant
> >   sasl: remove comment about obsolete kerberos versions
> >
> >  docs/system/authz.rst        | 263 +++++++++++++++++++++++++++++++++++
> >  docs/system/index.rst        |   2 +
> >  docs/system/secrets.rst      | 162 +++++++++++++++++++++
> >  docs/system/vnc-security.rst |   7 +-
> >  qemu.sasl                    |  15 +-
> >  5 files changed, 437 insertions(+), 12 deletions(-)
> >  create mode 100644 docs/system/authz.rst
> >  create mode 100644 docs/system/secrets.rst
>

lgtm
Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com>

>
> > --
> > 2.31.1
> >
> >
>
> Regards,
> Daniel
> --
> |: https://berrange.com      -o-
> https://www.flickr.com/photos/dberrange :|
> |: https://libvirt.org         -o-
> https://fstop138.berrange.com :|
> |: https://entangle-photo.org    -o-
> https://www.instagram.com/dberrange :|
>
>
>

-- 
Marc-André Lureau