Docs: Document network security considerations

This documents some OpenBMC network security considerations which aim to:
  describe network services provided by OpenBMC-based systems,
  some threats to the BMC from its network interfaces, and how OpenBMC
  addresses each threat.

Use cases are for new developers, testers, security folks, and projects
interested in using OpenBMC.

Change-Id: Ie69ab15e395492c9c8ec8f6d0765f0f73aac4a28
Signed-off-by: Joseph Reynolds <joseph.reynolds1@ibm.com>
1 file changed
tree: e50d2bda7d2c0061c9d960c0a0b36571397c5bc3
  1. code-update/
  2. designs/
  3. development/
  4. logo/
  5. meetings/
  6. release/
  7. security/
  8. style/
  9. userguide/
  10. anti-patterns.md
  11. cheatsheet.md
  12. code-of-conduct.md
  13. console.md
  14. CONTRIBUTING.md
  15. cpp-style-and-conventions.md
  16. features.md
  17. glossary.md
  18. host-management.md
  19. ipmi-architecture.md
  20. kernel-development.md
  21. LED-architecture.md
  22. LICENSE
  23. local-ci-build.md
  24. maintainer-workflow.md
  25. MAINTAINERS
  26. Makefile
  27. object-mapper.md
  28. openbmc-conversion.md
  29. openbmc-systemd.md
  30. README.md
  31. REDFISH-cheatsheet.md
  32. redfish-logging-in-bmcweb.md
  33. rest-api.md
  34. REST-cheatsheet.md
  35. run-test-docker.md
  36. sensor-architecture.md
  37. subtree.md
  38. user_management.md
  39. yocto-development.md
README.md

OpenBMC documentation

This repository contains documentation for OpenBMC as a whole. There may be component-specific documentation in the repository for each component.

The features document lists the project's major features with links to more information.

OpenBMC Usage

These documents describe how to use OpenBMC, including using the programmatic interfaces to an OpenBMC system.

OpenBMC Development

These documents contain details on developing OpenBMC code itself

OpenBMC Goals

The OpenBMC project's aim is to create a highly extensible framework for BMC software and implement for data-center computer systems.

We have a few high-level objectives:

  • The OpenBMC framework must be extensible, easy to learn, and usable in a variety of programming languages.

  • Provide a REST API for external management, and allow for "pluggable" interfaces for other types of management interactions.

  • Provide a remote host console, accessible over the network

  • Persist network configuration settable from REST interface and host

  • Provide a robust solution for RTC management, exposed to the host.

  • Compatible with host firmware implementations for basic IPMI communication between host and BMC

  • Provide a flexible and hierarchical inventory tracking component

  • Maintain a sensor database and track thresholds

Technical Steering Committee

  • Brad Bishop (chair), IBM
  • Nancy Yuen, Google
  • Sai Dasari, Facebook
  • James Mihm, Intel
  • Sagar Dharia, Microsoft
  • Supreeth Venkatesh, Arm