From ca5c089ce347c458bffe2b45f5bb91aa9976bb15 Mon Sep 17 00:00:00 2001 From: oscwiag Date: Wed, 17 Jul 2024 14:18:59 +0000 Subject: [PATCH] [ci skip] Autodoc commit for 7a0390654c73a8e3fd2d56cf72b85c87f13e9821. --- develop/_sources/customizations.rst.txt | 2 ++ develop/_sources/security.rst.txt | 15 ++++++++++++--- develop/authentication/overview.html | 2 +- .../overview/configure-authentication.html | 2 +- .../overview/configure-logout.html | 2 +- develop/authentication/overview/map-user.html | 2 +- develop/customizations.html | 4 ++-- develop/how-tos/monitoring/logging.html | 2 +- develop/index.html | 2 +- develop/objects.inv | Bin 7599 -> 7622 bytes develop/searchindex.js | 2 +- develop/security.html | 18 ++++++++++++++---- .../security/vulnerability-management.html | 2 +- 13 files changed, 38 insertions(+), 17 deletions(-) diff --git a/develop/_sources/customizations.rst.txt b/develop/_sources/customizations.rst.txt index 13f2b8321..51e8329d4 100644 --- a/develop/_sources/customizations.rst.txt +++ b/develop/_sources/customizations.rst.txt @@ -395,6 +395,8 @@ Note that this will limit the download size for all users of the Open OnDemand i Values like ``1000M`` or ``20G`` will not be accepted and may cause errors. +.. _set-file-allowlist: + Block or Allow Directory Access ------------------------------- diff --git a/develop/_sources/security.rst.txt b/develop/_sources/security.rst.txt index a8bce0d61..55214ba17 100644 --- a/develop/_sources/security.rst.txt +++ b/develop/_sources/security.rst.txt @@ -23,10 +23,19 @@ Limitations - **HTTP Traffic to Origin Servers**: Traffic to backend services, including computational resources like Jupyter servers, is currently over HTTP, which is unencrypted. Plans are underway to upgrade this to HTTPS to ensure encryption of data in transit, thereby bolstering security. -Security Controls ------------------ +Controls +^^^^^^^^ -- **Monitoring and Logging**: Comprehensive logging mechanisms are integral for security audits and incident response. Detailed guidelines and settings for these features can be found at :ref:`logging`. +These are things the the out of the box OnDemand installation will provide +that some centers may want to change or disable altogether. + +- **File Access**: OnDemand lets users navigate the file system. While file permissions + limit what a user can view and navigate to, some centers may want to limit this even further. + One option is to :ref:`set-file-allowlist` to limit what directories users may navigate to. + + +Additional Information +---------------------- - **Vulnerability Management**: Active management of security weaknesses includes regular updates and patches. Detailed processes and current security advisories are available at :ref:`vulnerability-management`. diff --git a/develop/authentication/overview.html b/develop/authentication/overview.html index 322bcc6e3..0373223b5 100644 --- a/develop/authentication/overview.html +++ b/develop/authentication/overview.html @@ -129,7 +129,7 @@
  • Security