Runtime Online dependency - recommendation proposal
Krzysztof Opasiak
Dear SECCOM,
Please find the attached proposal of SECCOM recommendation to TSC related to removal of runtime dependencies to the Internet resources. Your feedback is very appreciated. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
Pierre Close
Dear Krzysztof, SECCOM members,
toggle quoted messageShow quoted text
Thanks a lot for your proposal. After discussing with colleagues about it, please find below some feedback. We agree with and support your proposal & recommendation, and they have suggested some more items, I hope they will be helpful/useful: - inherit from approved ONAP base lines, and ensure that projects add their dependencies during their final image building (including all project known dependencies that are actually listed in the OOM offline installer repo); therefore it's each project responsibility to handle and manage correctly all their dependencies when building their images - all containers should be running read-only except for writable elements like log files (and then all such elements should be written to volumes); in other words, all places where the application would be able to write are identified and listed (that would also avoid that an application avoid overwriting its own files in case of security breach) - application user should only be able to have the minimal rights to execute its application files; user executing the application and user owning non-application-generated files should be different, and file holding user shall therefore only provide minimal read and execute access needed to the other users like the user executing the application - it was also suggested that package managers are disabled after image building, but nevertheless this causes a potential issue for testing and debugging purposes; now, the user executing the application shall not be allowed to use the package managers (and that should already be the case normally) - please note that my colleagues are not in favor of the OOM offline installer -- images should be final, as you are recommending Also, ONAP deployment behind a proxy/corporate firewall can be complicated because of those runtime online dependencies, so it is also desirable to not have such online connections when deploying in such situations (container/pod expecting others, delays introduced, long start times, and so on) -- without counting on unknown or no pre-defined versions that would make things even more complicated. Thanks and best regards, Pierre & colleagues
-----Original Message-----
From: onap-seccom@lists.onap.org <onap-seccom@lists.onap.org> On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 00:04 To: onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: [Onap-seccom] Runtime Online dependency - recommendation proposal Dear SECCOM, Please find the attached proposal of SECCOM recommendation to TSC related to removal of runtime dependencies to the Internet resources. Your feedback is very appreciated. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
Krzysztof Opasiak
On 05.06.2019 12:44, Close, Pierre wrote:
Dear Krzysztof, SECCOM members,+1 That's exactly main goal of this recommendation:) - all containers should be running read-only except for writable elements like log files (and then all such elements should be written to volumes); in other words, all places where the application would be able to write are identified and listed (that would also avoid that an application avoid overwriting its own files in case of security breach)+1 fully agree and support this. - application user should only be able to have the minimal rights to execute its application files; user executing the application and user owning non-application-generated files should be different, and file holding user shall therefore only provide minimal read and execute access needed to the other users like the user executing the application+1 it looks like you know all my dreams:) - it was also suggested that package managers are disabled after image building, but nevertheless this causes a potential issue for testing and debugging purposes; now, the user executing the application shall not be allowed to use the package managers (and that should already be the case normally)Hmm I'd say that making the filesystem read only should be enough as you won't be able to install anything unless you remount fs to rw. This should be good enough protection if app is running as a non-root but on the other hand allow for some debugging after accessing container with a root shell - please note that my colleagues are not in favor of the OOM offline installer -- images should be final, as you are recommendingWe also don't like it. We see it's current design as a temporary walk around and that's why my colleagues who are working on that asked me for a help to fix this. Yes, that's also one of deployment use cases for offline-installer. As I strongly agree with items pointed out by your colleagues please tell me how would you like to proceed. Would you like to prepare a separate recommendation with items you mentioned or you would prefer me to extend my recommendation and make it more generic to cover also those items? Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
Pierre Close
Hello Krzysztof,
toggle quoted messageShow quoted text
It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation. Thanks and best regards, Pierre
-----Original Message-----
From: Krzysztof Opasiak <k.opasiak@samsung.com> Sent: Wednesday, June 05, 2019 14:37 To: Close, Pierre <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 12:44, Close, Pierre wrote: Dear Krzysztof, SECCOM members,+1 That's exactly main goal of this recommendation:) - all containers should be running read-only except for writable+1 fully agree and support this. - application user should only be able to have the minimal rights to+1 it looks like you know all my dreams:) - it was also suggested that package managers are disabled after imageHmm I'd say that making the filesystem read only should be enough as you won't be able to install anything unless you remount fs to rw. This should be good enough protection if app is running as a non-root but on the other hand allow for some debugging after accessing container with a root shell - please note that my colleagues are not in favor of the OOM offlineWe also don't like it. We see it's current design as a temporary walk around and that's why my colleagues who are working on that asked me for a help to fix this. Yes, that's also one of deployment use cases for offline-installer. As I strongly agree with items pointed out by your colleagues please tell me how would you like to proceed. Would you like to prepare a separate recommendation with items you mentioned or you would prefer me to extend my recommendation and make it more generic to cover also those items? Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
Krzysztof Opasiak
On 05.06.2019 15:58, Close, Pierre wrote:
Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
ZWARICO, AMY <az9121@...>
Very nice.
toggle quoted messageShow quoted text
I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy
-----Original Message-----
From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
Pierre Close
Thank you Krzysztof for the additions, and Amy for the changes -- all those look very good.
toggle quoted messageShow quoted text
Thanks again! Best regards, Pierre
-----Original Message-----
From: ZWARICO, AMY Sent: Wednesday, June 05, 2019 23:14 To: k.opasiak@samsung.com; Close, Pierre <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
I have corrected 2 typos...
toggle quoted messageShow quoted text
Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.
-----Original Message-----
From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@samsung.com; CLOSE, PIERRE; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
ZWARICO, AMY <az9121@...>
I found another typo and made some other minor wording changes.
toggle quoted messageShow quoted text
-----Original Message-----
From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Pawel Pawlak via Lists.Onap.Org Sent: Thursday, June 06, 2019 7:33 AM To: onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I have corrected 2 typos... Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@samsung.com; CLOSE, PIERRE; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
|
|
natacha.mach@...
hello,
toggle quoted messageShow quoted text
Thanks for the comments, and here are some remarks for understanding first. I hopr that we could discuss this document next week? Regards natacha ________________________________________ De : onap-seccom@lists.onap.org [onap-seccom@lists.onap.org] de la part de ZWARICO, AMY [az9121@att.com] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@lists.onap.org Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I found another typo and made some other minor wording changes.
-----Original Message-----
From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Pawel Pawlak via Lists.Onap.Org Sent: Thursday, June 06, 2019 7:33 AM To: onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I have corrected 2 typos... Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@samsung.com; CLOSE, PIERRE; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.
|
|
Horn, Linda (Nokia - US/Murray Hill)
Natacha,
toggle quoted messageShow quoted text
Thank you for reviewing. My comments are in the attached doc. BTW there is a version v7 now but it has minor changes so your comments are still valid. Linda ----------------------------------------------------------------------------------- Linda S. Horn, DMTS Cloud RAN Solution Definition and Architecture Mobile Networks, Nokia Phone: +1-908-679-6580
-----Original Message-----
From: onap-seccom@lists.onap.org <onap-seccom@lists.onap.org> On Behalf Of natacha.mach via Lists.Onap.Org Sent: Friday, June 07, 2019 10:19 AM To: ZWARICO, AMY <az9121@att.com>; PAWLAK Pawel O-PL <pawel.pawlak3@orange.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal hello, Thanks for the comments, and here are some remarks for understanding first. I hopr that we could discuss this document next week? Regards natacha ________________________________________ De : onap-seccom@lists.onap.org [onap-seccom@lists.onap.org] de la part de ZWARICO, AMY [az9121@att.com] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@lists.onap.org Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I found another typo and made some other minor wording changes. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Pawel Pawlak via Lists.Onap.Org Sent: Thursday, June 06, 2019 7:33 AM To: onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I have corrected 2 typos... Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@samsung.com; CLOSE, PIERRE; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.
|
|
Hello Linda,
toggle quoted messageShow quoted text
Following the discussions below I would like to propose a dedicated call on 16th of July either before or after SECCOM meeting. Please let us know your availabilities. Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.
-----Original Message-----
From: Horn, Linda (Nokia - US/Murray Hill) [mailto:linda.horn@nokia.com] Sent: Wednesday, June 12, 2019 9:18 PM To: MACH Natacha TGI/OLS; ZWARICO, AMY; Pawlak Paweł 3 - Korpo; onap-seccom@lists.onap.org Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal Natacha, Thank you for reviewing. My comments are in the attached doc. BTW there is a version v7 now but it has minor changes so your comments are still valid. Linda ----------------------------------------------------------------------------------- Linda S. Horn, DMTS Cloud RAN Solution Definition and Architecture Mobile Networks, Nokia Phone: +1-908-679-6580 -----Original Message----- From: onap-seccom@lists.onap.org <onap-seccom@lists.onap.org> On Behalf Of natacha.mach via Lists.Onap.Org Sent: Friday, June 07, 2019 10:19 AM To: ZWARICO, AMY <az9121@att.com>; PAWLAK Pawel O-PL <pawel.pawlak3@orange.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal hello, Thanks for the comments, and here are some remarks for understanding first. I hopr that we could discuss this document next week? Regards natacha ________________________________________ De : onap-seccom@lists.onap.org [onap-seccom@lists.onap.org] de la part de ZWARICO, AMY [az9121@att.com] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@lists.onap.org Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I found another typo and made some other minor wording changes. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Pawel Pawlak via Lists.Onap.Org Sent: Thursday, June 06, 2019 7:33 AM To: onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I have corrected 2 typos... Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@samsung.com; CLOSE, PIERRE; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.
|
|
Horn, Linda (Nokia - US/Murray Hill)
Pawel,
toggle quoted messageShow quoted text
Before or after the SECCOM call on July 16 is fine with me - whichever is better for others. Linda ----------------------------------------------------------------------------------- Linda S. Horn, DMTS Cloud RAN Solution Definition and Architecture Mobile Networks, Nokia Phone: +1-908-679-6580
-----Original Message-----
From: Pawlak Paweł 3 - Korpo <Pawel.Pawlak3@orange.com> Sent: Wednesday, June 26, 2019 3:02 AM To: Horn, Linda (Nokia - US/Murray Hill) <linda.horn@nokia.com> Cc: onap-seccom@lists.onap.org Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal Hello Linda, Following the discussions below I would like to propose a dedicated call on 16th of July either before or after SECCOM meeting. Please let us know your availabilities. Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych. -----Original Message----- From: Horn, Linda (Nokia - US/Murray Hill) [mailto:linda.horn@nokia.com] Sent: Wednesday, June 12, 2019 9:18 PM To: MACH Natacha TGI/OLS; ZWARICO, AMY; Pawlak Paweł 3 - Korpo; onap-seccom@lists.onap.org Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal Natacha, Thank you for reviewing. My comments are in the attached doc. BTW there is a version v7 now but it has minor changes so your comments are still valid. Linda ----------------------------------------------------------------------------------- Linda S. Horn, DMTS Cloud RAN Solution Definition and Architecture Mobile Networks, Nokia Phone: +1-908-679-6580 -----Original Message----- From: onap-seccom@lists.onap.org <onap-seccom@lists.onap.org> On Behalf Of natacha.mach via Lists.Onap.Org Sent: Friday, June 07, 2019 10:19 AM To: ZWARICO, AMY <az9121@att.com>; PAWLAK Pawel O-PL <pawel.pawlak3@orange.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal hello, Thanks for the comments, and here are some remarks for understanding first. I hopr that we could discuss this document next week? Regards natacha ________________________________________ De : onap-seccom@lists.onap.org [onap-seccom@lists.onap.org] de la part de ZWARICO, AMY [az9121@att.com] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@lists.onap.org Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I found another typo and made some other minor wording changes. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Pawel Pawlak via Lists.Onap.Org Sent: Thursday, June 06, 2019 7:33 AM To: onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal I have corrected 2 typos... Best regards Paweł Pawlak ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST Orange Polska S.A. Corporate Services Agency Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030 Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych. -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@samsung.com; CLOSE, PIERRE; onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal Very nice. I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger. -Amy -----Original Message----- From: onap-seccom@lists.onap.org [mailto:onap-seccom@lists.onap.org] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@intl.att.com>; onap-seccom@lists.onap.org Cc: onap-seccom@lists.onap.org Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal On 05.06.2019 15:58, Close, Pierre wrote: Hello Krzysztof,I tried to merged your remarks into the presentation, you can see the result in attachment. Feel free to comment & modify. Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics _________________________________________________________________________________________________________________________ Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci. This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.
|
|
Hampus Tjader
Hi,
I will not be able to attend the review meeting of 16th July due to my vacation. Please see the provided comments from my company in the attachment. We see the modification of N-3 requirement as an important update before final approval.
Best regards, Hampus
Hampus Tjäder 4G5G Product Architecture O&M and Security
Ericsson Datalinjen 4 58330, Linköping, Sweden Mobile: +46 107113292
-----Original Message-----
From: onap-seccom@... <onap-seccom@...> On Behalf Of Horn, Linda (Nokia - US/Murray Hill) via Lists.Onap.Org Sent: den 26 juni 2019 14:31 To: Pawlak Paweł 3 - Korpo <Pawel.Pawlak3@...> Cc: onap-seccom@... Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal
Pawel,
Before or after the SECCOM call on July 16 is fine with me - whichever is better for others.
Linda ----------------------------------------------------------------------------------- Linda S. Horn, DMTS Cloud RAN Solution Definition and Architecture Mobile Networks, Nokia Phone: +1-908-679-6580
-----Original Message----- From: Pawlak Paweł 3 - Korpo <Pawel.Pawlak3@...> Sent: Wednesday, June 26, 2019 3:02 AM To: Horn, Linda (Nokia - US/Murray Hill) <linda.horn@...> Cc: onap-seccom@... Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal
Hello Linda, Following the discussions below I would like to propose a dedicated call on 16th of July either before or after SECCOM meeting. Please let us know your availabilities.
Best regards
Paweł Pawlak
ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST
Orange Polska S.A. Corporate Services Agency
Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030
Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.
-----Original Message----- From: Horn, Linda (Nokia - US/Murray Hill) [mailto:linda.horn@...] Sent: Wednesday, June 12, 2019 9:18 PM To: MACH Natacha TGI/OLS; ZWARICO, AMY; Pawlak Paweł 3 - Korpo; onap-seccom@... Subject: RE: [Onap-seccom] Runtime Online dependency - recommendation proposal
Natacha,
Thank you for reviewing. My comments are in the attached doc. BTW there is a version v7 now but it has minor changes so your comments are still valid.
Linda ----------------------------------------------------------------------------------- Linda S. Horn, DMTS Cloud RAN Solution Definition and Architecture Mobile Networks, Nokia Phone: +1-908-679-6580
-----Original Message----- From: onap-seccom@... <onap-seccom@...> On Behalf Of natacha.mach via Lists.Onap.Org Sent: Friday, June 07, 2019 10:19 AM To: ZWARICO, AMY <az9121@...>; PAWLAK Pawel O-PL <pawel.pawlak3@...>; onap-seccom@... Cc: onap-seccom@... Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal
hello,
Thanks for the comments, and here are some remarks for understanding first. I hopr that we could discuss this document next week?
Regards natacha ________________________________________ De : onap-seccom@... [onap-seccom@...] de la part de ZWARICO, AMY [az9121@...] Envoyé : jeudi 6 juin 2019 21:41 À : PAWLAK Pawel O-PL; onap-seccom@... Objet : Re: [Onap-seccom] Runtime Online dependency - recommendation proposal
I found another typo and made some other minor wording changes.
-----Original Message----- From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Pawel Pawlak via Lists.Onap.Org Sent: Thursday, June 06, 2019 7:33 AM To: onap-seccom@... Cc: onap-seccom@... Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal
I have corrected 2 typos... Best regards
Paweł Pawlak
ONAP SECCOM Chair Leader in IT & Network Convergent Operations FT/TGI/OLN/QOP/OST
Orange Polska S.A. Corporate Services Agency
Obrzeżna 7, 02-691 Warszawa tel. +48 22 699 52 17 fax +48 22 857 99 86 tel. mob. +48 501 501 030
Czy musisz drukować tę wiadomość? Pomyśl o środowisku. __________________________________________________________________ Treść tej wiadomości jest własnością Orange Polska i zawiera informacje stanowiące tajemnicę przedsiębiorstwa Orange Polska. Jeżeli nie jesteście Państwo jej adresatem, bądź otrzymaliście ją przez pomyłkę, prosimy o powiadomienie o tym nadawcy oraz trwałe jej usunięcie. Orange Polska Spółka Akcyjna z siedzibą i adresem w Warszawie (02-326) przy Al. Jerozolimskich 160, wpisana do Rejestru Przedsiębiorców prowadzonego przez Sąd Rejonowy dla m.st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego pod numerem 0000010681; REGON 012100784, NIP 526-02-50-995; z pokrytym w całości kapitałem zakładowym wynoszącym 3.937.072.437 złotych.
-----Original Message----- From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of ZWARICO, AMY Sent: Wednesday, June 5, 2019 11:14 PM To: k.opasiak@...; CLOSE, PIERRE; onap-seccom@... Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal
Very nice.
I made minor wording changes to slides 1,4,5,6 The only substantive changes: in all of the nonfunctional requirements I changed "should" to "shall", which makes the requirement stronger.
-Amy -----Original Message----- From: onap-seccom@... [mailto:onap-seccom@...] On Behalf Of Krzysztof Opasiak via Lists.Onap.Org Sent: Wednesday, June 05, 2019 4:01 PM To: CLOSE, PIERRE <pierre.close@...>; onap-seccom@... Cc: onap-seccom@... Subject: Re: [Onap-seccom] Runtime Online dependency - recommendation proposal
On 05.06.2019 15:58, Close, Pierre wrote: > Hello Krzysztof, > > It probably makes more sense to merge the two, if you don't mind, since they aim to achieve the same goal, and so that there is a centralized recommendation.
I tried to merged your remarks into the presentation, you can see the result in attachment.
Feel free to comment & modify.
Best regards, -- Krzysztof Opasiak Samsung R&D Institute Poland Samsung Electronics
_________________________________________________________________________________________________________________________
Ce message et ses pieces jointes peuvent contenir des informations confidentielles ou privilegiees et ne doivent donc pas etre diffuses, exploites ou copies sans autorisation. Si vous avez recu ce message par erreur, veuillez le signaler a l'expediteur et le detruire ainsi que les pieces jointes. Les messages electroniques etant susceptibles d'alteration, Orange decline toute responsabilite si ce message a ete altere, deforme ou falsifie. Merci.
This message and its attachments may contain confidential or privileged information that may be protected by law; they should not be distributed, used or copied without authorisation. If you have received this email in error, please notify the sender and delete this message and its attachments. As emails may be altered, Orange is not liable for messages that have been modified, changed or falsified. Thank you.
|
|