X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=blobdiff_plain;f=releasenotes%2Fnotes%2F6.0.0-b52a14a71fc62788.yaml;h=2db2582e76d0b7127e8c4c6d6bdc33a188c5a9cf;hb=3fcc98386a42c7540e4832913567f62fc13cd5b6;hp=1886bfffdfb2f40a8442a9b6fdf320940e62863d;hpb=78a68f4091f2e6913a699d56045b2db60445df14;p=apex-tripleo-heat-templates.git

diff --git a/releasenotes/notes/6.0.0-b52a14a71fc62788.yaml b/releasenotes/notes/6.0.0-b52a14a71fc62788.yaml
index 1886bfff..2db2582e 100644
--- a/releasenotes/notes/6.0.0-b52a14a71fc62788.yaml
+++ b/releasenotes/notes/6.0.0-b52a14a71fc62788.yaml
@@ -81,16 +81,26 @@ deprecations:
   - Removes deprecated OpenDaylight L2 only deployments.
     Deploying ODL without L3 DVR is no longer supported.
 security:
-  - Disallow iframe embed in Horizon configuration to prevent dashboard being
-    embedded within an iframe and exposed to Cross-Frame Scripting (XFS)
-    vulnerability on legacy browsers.
-  - Allow management of enforce_password_check in Horizons configuration to
-    display an 'Admin Password' field on the Change Password form to verify that
+  - Enable management of 'DISALLOW_IFRAME_EMBED' in Horizon configuration to
+    prevent dashboard being embedded within an iframe and exposed to Cross-Frame
+    Scripting (XFS) vulnerability on legacy browsers.
+  - Enable management of 'ENFORCE_PASSWORD_CHECK' in Horizons configuration to
+    display an Admin Password field on the Change Password form to verify that
     it is indeed the admin logged-in who wants to change the password.
-  - Allow management of disable_password_reveal in Horizon, to remove the
+  - Enable management of 'DISABLE_PASSWORD_REVEAL' in Horizon, to remove the
     password reveal option.
-  - Enable secure_proxy_ssl_header option in Horizons configuration to take
+  - Enable 'SECURE_PROXY_SSL_HEADER' option in Horizons configuration to take
     X-Forwarded-Proto header into account when forming URLs.
+  - Enable management of ENFORCE_PASSWORD_CHECK value. By setting
+    'ENFORCE_PASSWORD_CHECK' to 'True' within Horizons local_settings.py, it
+    displays an ‘Admin Password’ field on the “Change Password” form to verify
+    that it is the admin logged-in that wants to perform the password change.
+  - Enable management of Horizons Password Validation. Enables injection of an
+    operators own password validation regex via a heat template.
+  - Enable management of '/etc/issue Banner' whereby an operator can populate
+    their own Banner warning text to be displayed upon terminal login.
+  - Enable management of auditd system. '/etc/audit/audit.rules' can now be
+    populated by means of a heat template.
 fixes:
   - Fixes `bug 1645898
     <https://bugs.launchpad.net/tripleo/+bug/1645898>`__ so epmd is binded on